CVE-2026-77480

SQL Server is affected by an elevation of privilege vulnerability caused by insufficient granularity of access control . An authorized attacker with low privileges can exploit the flaw over a network to elevate their access, resulting in high impact to confidentiality, integrity, and availability...

CVE-2026-73028

Microsoft SQL Server is affected by an improper access control vulnerability (CVE-2026-73028) that allows an authorized attacker to elevate privileges over a network . The vulnerability is rated HIGH severity with a CVSS 3.1 base score of 8.8 (AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H), indicating low ...

EUVD-2026-73782

Improper access control in SQL Server allows an authorized attacker to elevate privileges over a network...

CVE-2026-73012

CVE-2026-73012 is a heap-based buffer overflow in Windows Management Services that allows an authorized (low-privilege) attacker to elevate privileges over a network . The vulnerability is rated CVSS 8.8 (HIGH) with vector AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H, indicating low attack complexity and ...

EUVD-2026-73772

Heap-based buffer overflow in Windows Management Services allows an authorized attacker to elevate privileges over a network...

CVE-2026-73026

CVE-2026-73026 is a heap-based buffer overflow in the Windows Biometric Service that allows an authorized attacker to elevate privileges locally . The vulnerability is rated CVSS 3.1 7.8 (HIGH) , with low complexity, low privileges required, and high impact to confidentiality, integrity, and avai...

EUVD-2026-73770

Heap-based buffer overflow in Windows Biometric Service allows an authorized attacker to elevate privileges locally...

CVE-2026-73024

CVE-2026-73024 is a heap-based buffer overflow in the Windows Services for NFS ONCRPC XDR Driver that allows an authorized attacker to perform local privilege escalation . The CVSS v3.1 score is 7.8 (HIGH) with the vector AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H, indicating low attack complexity, low ...

EUVD-2026-73768

Heap-based buffer overflow in Windows Services for NFS ONCRPC XDR Driver allows an authorized attacker to elevate privileges locally...

EUVD-2026-73769

Heap-based buffer overflow in Windows Biometric Service allows an authorized attacker to elevate privileges locally...

CVE-2026-73007

CVE-2026-73007 is a heap-based buffer overflow in the Windows Biometric Service that allows an authorized attacker to achieve local privilege escalation . The vulnerability requires low privileges, no user interaction, and has low attack complexity, yielding a CVSS 3.1 score of 7.8 (HIGH) with fu...

EUVD-2026-73767

Use after free in Windows Authentication Methods allows an authorized attacker to elevate privileges locally...

CVE-2026-73005

CVE-2026-73005 is a Use After Free vulnerability in Windows Authentication Methods that allows an authorized, locally privileged attacker to escalate privileges. The CVSS v3.1 score is 7.0 (HIGH) , reflecting a local attack vector with high complexity and high impact on confidentiality, integrity...

CVE-2026-73014

CVE-2026-73014 is a missing authorization flaw in the Data Sharing Service Client , a Microsoft component, that allows an attacker with local, low-privilege access to escalate privileges on the affected system. The vulnerability is rated CVSS 3.1 7.8 (High) with a local attack vector, low complex...

EUVD-2026-73765

Missing authorization in Data Sharing Service Client allows an authorized attacker to elevate privileges locally...

EUVD-2026-73764

Heap-based buffer overflow in Windows Biometric Service allows an authorized attacker to elevate privileges locally...

CVE-2026-73011

CVE-2026-73011 is a heap-based buffer overflow in Windows Biometric Service that allows an authorized attacker to achieve local privilege escalation . The vulnerability carries a CVSS 3.1 score of 7.8 (High) with high impact to confidentiality, integrity, and availability. CISA's SSVC assessment ...

EUVD-2026-73763

Use after free in Windows Modern Device Management MDM allows an authorized attacker to elevate privileges locally...

CVE-2026-73022

CVE-2026-73022 is a use-after-free vulnerability in Windows Modern Device Management (MDM) that allows an authorized attacker to escalate privileges locally . The CVSS 3.1 score is 7.0 (HIGH) with a local attack vector, high complexity, low privileges required, and no user interaction, resulting ...

CVE-2026-73003

CVE-2026-73003 is a Use After Free vulnerability in Windows Modern Device Management (MDM) . An authorized attacker can exploit it to achieve local privilege elevation . The CVSS v3.1 base score is 7.0 (HIGH) with vector AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H, reflecting high impact across confident...