285004 matches found
CVE-2026-69612
CVE-2026-69612 is an absolute path traversal vulnerability in Windows Error Reporting that allows an authorized attacker to elevate privileges locally . The flaw resides in how the component handles file paths, permitting traversal beyond the intended directory. The CVSS 3.1 score is 7.8 (HIGH) w...
CVE-2026-69581
CVE-2026-69581 is a use-after-free vulnerability in the Windows Device Association Service that allows an authorized, locally authenticated attacker to elevate privileges . The attack requires low privileges , involves high complexity , and needs no user interaction , with unchanged scope but hig...
EUVD-2026-73541
Use after free in Windows Device Association Service allows an authorized attacker to elevate privileges locally...
CVE-2026-69542
CVE-2026-69542 is a heap-based buffer overflow in Windows Camera Frame Server Monitor that allows an authorized attacker to elevate privileges locally . The vulnerability is scored CVSS 7.8 (High) with a local attack vector, low complexity, low privileges required, and no user interaction, result...
EUVD-2026-73538
Heap-based buffer overflow in Windows Camera Frame Server Monitor allows an authorized attacker to elevate privileges locally...
EUVD-2026-73535
Heap-based buffer overflow in Windows USB Audio Class driver usbaudio.sys allows an authorized attacker to elevate privileges locally...
EUVD-2026-73536
Numeric truncation error in Windows Spaceport.sys allows an authorized attacker to elevate privileges locally...
CVE-2026-69535
A numeric truncation error in the Windows Spaceport.sys driver allows an authorized local attacker with low privileges to escalate privileges, leading to full compromise of confidentiality, integrity, and availability. The vulnerability is rated CVSS 3.1 7.8 (High) with a local attack vector, low...
CVE-2026-69571
CVE-2026-69571 is a heap-based buffer overflow in the Windows USB Audio Class driver (usbaudio.sys) that allows an authorized local attacker to elevate privileges. The vulnerability is scored CVSS 3.1: 7.8 (HIGH) with a vector of local attack, low complexity, low privileges required, no user inte...
EUVD-2026-73530
Heap-based buffer overflow in Windows Fax Service allows an authorized attacker to elevate privileges locally...
EUVD-2026-73529
Stack-based buffer overflow in Windows MIDI Service Module allows an authorized attacker to elevate privileges locally...
CVE-2026-69509
CVE-2026-69509 is a heap-based buffer overflow in the Windows Fax Service component of Microsoft Windows, allowing an authorized attacker with local access to escalate privileges . The vulnerability requires low privileges , low attack complexity , and no user interaction , resulting in a CVSS 3....
CVE-2026-69508
A stack-based buffer overflow in the Windows MIDI Service Module allows a locally authenticated attacker with low privileges to escalate privileges, achieving high impact across confidentiality, integrity, and availability (CVSS 3.1: 7.8 HIGH ). No user interaction is required. The vulnerability ...
CVE-2026-69498
Windows Win32K contains a use-after-free vulnerability that allows an authorized local attacker to escalate privileges . The CVSS 3.1 score is 7.0 (High) with a vector of AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H, indicating high attack complexity but low privileges required and no user interaction . T...
EUVD-2026-73528
Stack-based buffer overflow in Windows USB Driver allows an authorized attacker to elevate privileges over a network...
CVE-2026-69503
CVE-2026-69503 is a stack-based buffer overflow in the Windows USB Driver that allows an authorized attacker to elevate privileges over a network. The vulnerability carries a CVSS 3.1 base score of 8.0 (HIGH) with a network attack vector, low complexity, low required privileges, and required user...
EUVD-2026-73527
Use after free in Windows Win32K allows an authorized attacker to elevate privileges locally...
EUVD-2026-73526
Heap-based buffer overflow in Windows Spaceport.sys allows an authorized attacker to elevate privileges over a network...
CVE-2026-69512
CVE-2026-69512 is a heap-based buffer overflow in the Windows Spaceport.sys driver that allows an authorized attacker (low privileges) to elevate privileges over a network , with user interaction required. The flaw yields high impact to confidentiality, integrity, and availability, yielding a CVS...