284980 matches found
CVE-2026-69422
CVE-2026-69422 is a use-after-free vulnerability in the Windows USB Video Driver that allows a locally authenticated attacker with low privileges to escalate privileges. The attack requires high complexity and no user interaction, with high impact on confidentiality, integrity, and availability, ...
EUVD-2026-73495
Use after free in Windows USB Video Driver allows an authorized attacker to elevate privileges locally...
EUVD-2026-73493
Heap-based buffer overflow in Windows Distributed File System DFS allows an authorized attacker to elevate privileges locally...
CVE-2026-69424
CVE-2026-69424 is a heap-based buffer overflow in Windows Distributed File System (DFS) that allows an authorized attacker to elevate privileges locally . The CVSS 3.1 score is 7.8 (HIGH) with a vector of AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H, indicating low attack complexity and no user interactio...
CVE-2026-69407
CVE-2026-69407 is an integer overflow or wraparound vulnerability in the Microsoft Volume Manager Driver that allows an authorized attacker to escalate privileges locally . The vulnerability is rated CVSS 3.1 7.8 (HIGH) with a local attack vector, low complexity, low privileges required, and high...
EUVD-2026-73491
Integer overflow or wraparound in Volume Manager Driver allows an authorized attacker to elevate privileges locally...
CVE-2026-69398
CVE-2026-69398 is a local privilege escalation vulnerability in the Windows Bluetooth Service , caused by a race condition (concurrent execution using a shared resource with improper synchronization). An authorized local attacker with low privileges can exploit this to gain high confidentiality, ...
EUVD-2026-73489
Integer underflow wrap or wraparound in Windows Kernel Mode Driver allows an authorized attacker to elevate privileges locally...
CVE-2026-69421
CVE-2026-69421 is an integer underflow (wrap/wraparound) vulnerability in a Windows Kernel Mode Driver . An authorized local attacker can exploit the flaw to elevate privileges , with full impact to confidentiality, integrity, and availability (CVSS 3.1: 7.8 HIGH , vector AV:L/AC:L/PR:L/UI:N/S:U/...
EUVD-2026-73488
Concurrent execution using shared resource with improper synchronization 'race condition' in Windows Bluetooth Service allows an authorized attacker to elevate privileges locally...
EUVD-2026-73487
Use after free in Windows Win32K allows an authorized attacker to elevate privileges locally...
EUVD-2026-73486
Use after free in Windows NDIS allows an authorized attacker to elevate privileges over a network...
CVE-2026-69396
A use-after-free vulnerability in the Windows NDIS (Network Driver Interface Specification) component allows an authorized attacker to elevate privileges over a network . The CVSS 3.1 score is 7.1 (HIGH) , with a network attack vector, high complexity, low privileges required, and user interactio...
CVE-2026-69410
CVE-2026-69410 is a use-after-free vulnerability in Windows Win32K that allows an authorized attacker to escalate privileges locally . The CVSS 3.1 score is 7.0 (HIGH) , with a local attack vector, high attack complexity, low privileges required, no user interaction, and high impact on confidenti...
EUVD-2026-73484
Use after free in Windows Bluetooth Service allows an authorized attacker to elevate privileges locally...
CVE-2026-69388
CVE-2026-69388 is a use-after-free vulnerability in Windows Bluetooth Service that allows a local attacker with low privileges to elevate privileges . The attack requires local access and is characterized by high complexity , with no user interaction needed. The CVSS 3.1 base score is 7.0 (HIGH) ...
EUVD-2026-73482
Concurrent execution using shared resource with improper synchronization 'race condition' in Windows TCP/IP allows an authorized attacker to elevate privileges locally...
CVE-2026-69385
CVE-2026-69385 is a local elevation of privilege vulnerability in Windows TCP/IP caused by a race condition (improper synchronization of a shared resource during concurrent execution). An authorized attacker with low privileges can exploit this to gain higher privileges on the target system. The ...
CVE-2026-69373
CVE-2026-69373 is an integer overflow or wraparound in the Windows Overlay Filter component that allows an authorized attacker to achieve local privilege escalation . The vulnerability requires high privileges and local access (CVSS 3.1: 6.7 MEDIUM — AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H). No publi...