284966 matches found
CVE-2026-69685
Windows Kerberos is affected by a heap-based buffer overflow that allows an authorized attacker to locally elevate privileges . Per Microsoft, the vulnerability carries a CVSS 3.1 score of 7.8 (HIGH) with a local attack vector, low complexity, low privileges required, and no user interaction, res...
EUVD-2026-73572
Use after free in Windows Host Guardian Service allows an authorized attacker to elevate privileges locally...
EUVD-2026-73573
Heap-based buffer overflow in Windows Kerberos allows an authorized attacker to elevate privileges locally...
CVE-2026-69682
CVE-2026-69682 is a use-after-free vulnerability in the Windows Host Guardian Service component that allows an authorized local attacker to elevate privileges . The CVSS 3.1 score is 7.0 (HIGH) with a vector of AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H, reflecting high attack complexity and required lo...
CVE-2026-69821
CVE-2026-69821 is a local privilege escalation vulnerability in Active Directory Certificate Services (AD CS) caused by improper encoding or escaping of output. An authorized attacker with low privileges can exploit it without user interaction to gain full compromise of confidentiality, integrity...
EUVD-2026-73568
Heap-based buffer overflow in Windows MIDI Service Module allows an authorized attacker to elevate privileges locally...
EUVD-2026-73569
Improper encoding or escaping of output in Active Directory Certificate Services AD CS allows an authorized attacker to elevate privileges locally...
CVE-2026-69720
CVE-2026-69720 is a heap-based buffer overflow in the Windows MIDI Service Module that allows a locally authenticated attacker with low privileges to escalate privileges. The vulnerability requires local access , low complexity , and no user interaction , with high impact across confidentiality, ...
EUVD-2026-73566
Out-of-bounds read in Windows exFAT File System allows an authorized attacker to elevate privileges over a network...
CVE-2026-69619
CVE-2026-69619 is an out-of-bounds read in the Windows exFAT File System that allows an authorized attacker to elevate privileges over a network . The CVSS 3.1 base score is 8.0 (HIGH) with a vector of AV:N/AC:L/PR:L/UI:R, requiring low privileges and user interaction, with high impact on confide...
EUVD-2026-73565
Use after free in Windows Bluetooth Port Driver allows an authorized attacker to elevate privileges locally...
CVE-2026-69817
A use-after-free vulnerability in the Windows Bluetooth Port Driver allows an authorized local attacker to elevate privileges . The Microsoft-assigned CVSS 3.1 score is 7.0 (HIGH) , reflecting a local attack vector with high complexity , low privileges required , and no user interaction , resulti...
CVE-2026-69613
CVE-2026-69613 is a use after free vulnerability in Windows Image Acquisition (WIA) that allows an authorized attacker to perform local privilege escalation . The flaw requires low existing privileges and high attack complexity, with no user interaction needed (CVSS 3.1: 7.0 HIGH , vector AV:L/AC...
EUVD-2026-73560
Use after free in Windows Image Acquisition allows an authorized attacker to elevate privileges locally...
CVE-2026-69610
A buffer over-read in Windows Win32K (the kernel-mode component handling graphical subsystem operations) allows an authorized attacker with low privileges to achieve local privilege escalation . The vulnerability requires local access , has high attack complexity , and does not require user inter...
EUVD-2026-73559
Buffer over-read in Windows Win32K allows an authorized attacker to elevate privileges locally...
EUVD-2026-73558
Out-of-bounds read in Windows Win32K allows an authorized attacker to elevate privileges locally...
CVE-2026-69630
CVE-2026-69630 is an out-of-bounds read vulnerability in the Windows Win32K kernel driver that allows a locally authenticated attacker to escalate privileges . The CVSS v3.1 score is 7.0 (HIGH) with vector AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H, reflecting the high complexity and required low-privil...