EUVD-2026-73585

Out-of-bounds read in Windows Win32K allows an authorized attacker to elevate privileges locally...

CVE-2026-69844

CVE-2026-69844 is an out-of-bounds read vulnerability in the Windows Win32K component (the kernel-mode driver that handles the graphical subsystem). An authorized local attacker with low privileges can exploit it to elevate privileges on the affected system. Microsoft rates the severity as HIGH (...

EUVD-2026-73583

Stack-based buffer overflow in Windows Device Association Service allows an authorized attacker to elevate privileges over a network...

CVE-2026-69714

CVE-2026-69714 is a stack-based buffer overflow in the Windows Device Association Service that allows an authorized attacker to elevate privileges over a network. The vulnerability requires low privileges and user interaction , with a CVSS 3.1 score of 8.0 (HIGH) and impacts of High across Confid...

EUVD-2026-73582

Use after free in Windows Accounts Control allows an authorized attacker to elevate privileges locally...

CVE-2026-69816

CVE-2026-69816 is a use-after-free vulnerability in Windows Accounts Control that allows an authorized attacker to elevate privileges locally . The CVSS 3.1 base score is 7.0 (HIGH) with a local attack vector, high complexity, low privileges required, and no user interaction, resulting in high im...

CVE-2026-69654

CVE-2026-69654 is a use-after-free vulnerability in Windows Accounts Control that allows an authorized attacker to achieve local privilege escalation . The CVSS 3.1 score is 7.0 (HIGH) with vector AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H, indicating a local attack requiring high complexity and low pri...

EUVD-2026-73581

Use after free in Windows Accounts Control allows an authorized attacker to elevate privileges locally...

EUVD-2026-73580

Use after free in Windows ALPC allows an authorized attacker to elevate privileges locally...

CVE-2026-69652

CVE-2026-69652 is a use-after-free vulnerability in Windows Win32K that allows an authorized attacker to elevate privileges locally . The CVSS v3.1 base score is 7.0 (HIGH) , with a local attack vector, high complexity, low privileges required, no user interaction, and high impact to confidential...

EUVD-2026-73579

Use after free in Windows Win32K allows an authorized attacker to elevate privileges locally...

CVE-2026-69834

CVE-2026-69834 is a use-after-free vulnerability in Windows ALPC (Advanced Local Procedure Call) that allows an authorized local attacker to elevate privileges . The attack requires local access , high complexity , and low privileges , with no user interaction needed. The CVSS v3.1 base score is ...

CVE-2026-69707

CVE-2026-69707 is an integer overflow or wraparound vulnerability in the Windows USB Audio Class driver (usbaudio.sys) that allows an authorized, locally-privileged attacker to escalate privileges. The flaw is rated CVSS 3.1: 7.8 (HIGH) with a local attack vector, low complexity, low privileges r...

EUVD-2026-73577

Use after free in Windows Device Association Service allows an authorized attacker to elevate privileges locally...

EUVD-2026-73578

Integer overflow or wraparound in Windows USB Audio Class driver usbaudio.sys allows an authorized attacker to elevate privileges locally...

CVE-2026-69791

CVE-2026-69791 is a use-after-free vulnerability in the Windows Device Association Service that allows an authorized attacker to achieve local privilege escalation . The vulnerability carries a CVSS 3.1 base score of 7.0 (HIGH) , with a local attack vector, high complexity, low privileges require...

EUVD-2026-73576

Integer underflow wrap or wraparound in Windows USB Audio Class driver usbaudio.sys allows an authorized attacker to elevate privileges locally...

CVE-2026-69687

CVE-2026-69687 is an integer underflow (wrap or wraparound) vulnerability in the Windows USB Audio Class driver (usbaudio.sys). An authorized local attacker can exploit this flaw to elevate privileges , achieving high impact on confidentiality, integrity, and availability (CVSS 3.1: 7.8 HIGH ; ve...

EUVD-2026-73575

Heap-based buffer overflow in Windows Spaceport.sys allows an authorized attacker to elevate privileges over a network...

CVE-2026-69643

Windows Spaceport.sys (a system driver) contains a heap-based buffer overflow that allows an authorized attacker to escalate privileges over a network. The CVSS v3.1 score is 8.0 (HIGH) with vector AV:N/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H, indicating low attack complexity and required user interaction...