CVE-2026-69584

CVE-2026-69584 affects the Windows USB Video Driver , where an integer overflow or wraparound flaw allows an authorized attacker to elevate privileges locally . The Microsoft CNA assigns a CVSS 3.1 score of 7.8 (HIGH) with vector AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H, indicating that low-privilege ...

CVE-2026-69600

CVE-2026-69600 is a use after free vulnerability in the Microsoft Windows Search Component that allows an authorized attacker to perform local privilege escalation . The vulnerability requires low privileges, high attack complexity, and no user interaction, with high impact to confidentiality, in...

CVE-2026-69592

CVE-2026-69592 is a heap-based buffer overflow in the Windows Universal Disk Format File System (UDFS) driver that allows an authorized local attacker to escalate privileges . The vulnerability is rated CVSS 3.1: 7.8 (HIGH) with a vector of AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H, indicating local at...

CVE-2026-69567

CVE-2026-69567 is a use-after-free vulnerability in Windows NTFS (New Technology File System) that allows a locally authenticated attacker with low privileges to elevate privileges on the affected system. The CVSS v3.1 score is 7.0 (HIGH) , reflecting a local attack vector with high complexity, n...

EUVD-2026-73545

Use after free in Windows NTFS allows an authorized attacker to elevate privileges locally...

EUVD-2026-73546

Heap-based buffer overflow in Windows Universal Disk Format File System Driver UDFS allows an authorized attacker to elevate privileges locally...

EUVD-2026-73543

Absolute path traversal in Windows Error Reporting allows an authorized attacker to elevate privileges locally...

CVE-2026-69612

CVE-2026-69612 is an absolute path traversal vulnerability in Windows Error Reporting that allows an authorized attacker to elevate privileges locally . The flaw resides in how the component handles file paths, permitting traversal beyond the intended directory. The CVSS 3.1 score is 7.8 (HIGH) w...

CVE-2026-69581

CVE-2026-69581 is a use-after-free vulnerability in the Windows Device Association Service that allows an authorized, locally authenticated attacker to elevate privileges . The attack requires low privileges , involves high complexity , and needs no user interaction , with unchanged scope but hig...

EUVD-2026-73541

Use after free in Windows Device Association Service allows an authorized attacker to elevate privileges locally...

CVE-2026-69542

CVE-2026-69542 is a heap-based buffer overflow in Windows Camera Frame Server Monitor that allows an authorized attacker to elevate privileges locally . The vulnerability is scored CVSS 7.8 (High) with a local attack vector, low complexity, low privileges required, and no user interaction, result...

EUVD-2026-73538

Heap-based buffer overflow in Windows Camera Frame Server Monitor allows an authorized attacker to elevate privileges locally...

EUVD-2026-73535

Heap-based buffer overflow in Windows USB Audio Class driver usbaudio.sys allows an authorized attacker to elevate privileges locally...

EUVD-2026-73536

Numeric truncation error in Windows Spaceport.sys allows an authorized attacker to elevate privileges locally...

CVE-2026-69535

A numeric truncation error in the Windows Spaceport.sys driver allows an authorized local attacker with low privileges to escalate privileges, leading to full compromise of confidentiality, integrity, and availability. The vulnerability is rated CVSS 3.1 7.8 (High) with a local attack vector, low...

CVE-2026-69571

CVE-2026-69571 is a heap-based buffer overflow in the Windows USB Audio Class driver (usbaudio.sys) that allows an authorized local attacker to elevate privileges. The vulnerability is scored CVSS 3.1: 7.8 (HIGH) with a vector of local attack, low complexity, low privileges required, no user inte...

EUVD-2026-73530

Heap-based buffer overflow in Windows Fax Service allows an authorized attacker to elevate privileges locally...

EUVD-2026-73529

Stack-based buffer overflow in Windows MIDI Service Module allows an authorized attacker to elevate privileges locally...

CVE-2026-69509

CVE-2026-69509 is a heap-based buffer overflow in the Windows Fax Service component of Microsoft Windows, allowing an authorized attacker with local access to escalate privileges . The vulnerability requires low privileges , low attack complexity , and no user interaction , resulting in a CVSS 3....

CVE-2026-69508

A stack-based buffer overflow in the Windows MIDI Service Module allows a locally authenticated attacker with low privileges to escalate privileges, achieving high impact across confidentiality, integrity, and availability (CVSS 3.1: 7.8 HIGH ). No user interaction is required. The vulnerability ...