EUVD-2026-73617

Use after free in Windows Win32K allows an authorized attacker to elevate privileges locally...

EUVD-2026-73616

Improper handling of insufficient permissions or privileges in Windows Enterprise App Management allows an authorized attacker to elevate privileges locally...

CVE-2026-69818

CVE-2026-69818 is a use-after-free vulnerability in the Windows Win32K component that allows a low-privileged, locally authenticated attacker to elevate privileges . The CVSS v3.1 score is 7.0 (HIGH) , reflecting a local attack vector with high complexity and high impact on confidentiality, integ...

CVE-2026-69907

CVE-2026-69907 affects Windows Enterprise App Management , where improper handling of insufficient permissions or privileges allows an authorized attacker to elevate privileges locally . The vulnerability is rated CVSS 3.1: 7.8 (HIGH) with a local attack vector , low complexity , low privileges r...

EUVD-2026-73615

Untrusted search path in Windows Smart Card allows an authorized attacker to elevate privileges locally...

CVE-2026-69785

CVE-2026-69785 is an untrusted search path vulnerability in Windows Smart Card that allows an authorized attacker to elevate privileges locally. The flaw resides in how Windows Smart Card resolves file paths, permitting a local attacker with low privileges (no user interaction required) to achiev...

CVE-2026-69708

CVE-2026-69708 is a use-after-free vulnerability in Windows Web Platform Storage that allows a locally authorized attacker to elevate privileges. The vulnerability is rated CVSS 3.1 7.0 (HIGH) with a vector of AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H , meaning exploitation requires local access, low p...

EUVD-2026-73613

Use after free in Windows Web Platform Storage allows an authorized attacker to elevate privileges locally...

EUVD-2026-73612

Use after free in Windows TCP/IP allows an authorized attacker to elevate privileges over a network...

CVE-2026-69761

A use-after-free vulnerability in Windows TCP/IP allows an authorized attacker to elevate privileges over a network . The CVSS 3.1 score is 7.1 (HIGH) , with a vector of AV:N/AC:H/PR:L/UI:R, meaning exploitation requires network access , high attack complexity , low existing privileges , and user...

EUVD-2026-73606

Time-of-check time-of-use toctou race condition in Windows Win32K allows an authorized attacker to elevate privileges locally...

CVE-2026-69779

CVE-2026-69779 is a time-of-check time-of-use (TOCTOU) race condition in the Windows Win32K component that allows an attacker with an existing low-privilege account to escalate privileges locally. The CVSS v3.1 score is 7.0 (HIGH) , with a local attack vector, high complexity, no user interaction...

EUVD-2026-73605

Heap-based buffer overflow in Windows Print Spooler Components allows an authorized attacker to elevate privileges locally...

CVE-2026-69921

CVE-2026-69921 is a heap-based buffer overflow in Windows Print Spooler Components that allows a low-privilege local attacker to elevate privileges , with no user interaction required. The CVSS 3.1 score is 7.8 (HIGH) , reflecting local attack vector, low complexity, and high impact on confidenti...

CVE-2026-69706

CVE-2026-69706 is a use-after-free vulnerability in the Windows Win32K kernel component that allows an authorized attacker to elevate privileges over a network . The CVSS 3.1 score is 7.1 (HIGH) (AV:N/AC:H/PR:L/UI:R), meaning exploitation requires network access, high attack complexity, low exist...

EUVD-2026-73601

Use after free in Windows Win32K allows an authorized attacker to elevate privileges over a network...

EUVD-2026-73599

Heap-based buffer overflow in Windows Biometric Service allows an authorized attacker to elevate privileges over a network...

CVE-2026-69773

A heap-based buffer overflow in the Windows Biometric Service allows an authorized attacker to elevate privileges over a network. The CVSS 3.1 score is 8.0 (HIGH) with a vector of AV:N/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H, indicating that exploitation requires low privileges and user interaction , but ...

EUVD-2026-73597

Use after free in Windows Credential Providers allows an authorized attacker to elevate privileges locally...

CVE-2026-69814

CVE-2026-69814 is a use-after-free vulnerability in Windows Credential Providers that allows an authorized attacker to achieve local privilege escalation . The CVSS 3.1 score is 7.0 (HIGH) , with a local attack vector, high complexity, and low privileges required, resulting in high impact to conf...