285005 matches found
EUVD-2026-73508
Improper limitation of a pathname to a restricted directory 'path traversal' in Windows Compressed Folder allows an authorized attacker to elevate privileges locally...
CVE-2026-69445
CVE-2026-69445 is a local privilege escalation vulnerability in Windows Compressed Folder caused by an improper limitation of a pathname to a restricted directory (path traversal ). An authorized attacker with low privileges can exploit this locally without user interaction to achieve high impact...
EUVD-2026-73506
Heap-based buffer overflow in Microsoft Windows Speech allows an authorized attacker to elevate privileges locally...
CVE-2026-69444
CVE-2026-69444 is a heap-based buffer overflow in Microsoft Windows Speech that allows an authorized attacker to escalate privileges locally. The vulnerability carries a CVSS 3.1 score of 7.8 (HIGH) , with a local attack vector, low complexity, low privileges required, and high impact across conf...
CVE-2026-69466
CVE-2026-69466 is a Time-of-Check Time-of-Use (TOCTOU) race condition in the Windows Kernel that allows a low-privileged local attacker to elevate privileges . The vulnerability carries a CVSS 3.1 score of 7.0 (High) , with high impact to confidentiality, integrity, and availability, though explo...
EUVD-2026-73507
Time-of-check time-of-use toctou race condition in Windows Kernel allows an authorized attacker to elevate privileges locally...
EUVD-2026-73505
Time-of-check time-of-use toctou race condition in Windows MIDI Service Module allows an authorized attacker to elevate privileges locally...
CVE-2026-69440
CVE-2026-69440 is a Time-of-Check Time-of-Use (TOCTOU) race condition in the Windows MIDI Service Module that allows an authorized low-privilege attacker to achieve local privilege escalation . The vulnerability is scored CVSS 3.1: 7.0 (High) with a vector of AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H ,...
CVE-2026-69447
CVE-2026-69447 is a heap-based buffer overflow in the Windows Audio Service that allows an authorized local attacker to achieve privilege escalation . The vulnerability is rated CVSS 7.8 (HIGH) with a vector of AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H, meaning it requires only low privileges and no us...
EUVD-2026-73503
Heap-based buffer overflow in Windows Error Reporting allows an authorized attacker to elevate privileges locally...
CVE-2026-69433
A heap-based buffer overflow in Windows Error Reporting allows an authorized attacker to achieve local privilege escalation . The vulnerability is rated CVSS 3.1: 7.8 (HIGH) with a local attack vector, low complexity, and low privileges required, yielding high impact on confidentiality, integrity...
EUVD-2026-73502
Heap-based buffer overflow in Windows Audio Service allows an authorized attacker to elevate privileges locally...
EUVD-2026-73500
Use after free in Windows Embedded Mode Service allows an authorized attacker to elevate privileges locally...
EUVD-2026-73499
Untrusted pointer dereference in Windows Remote Desktop Services allows an authorized attacker to elevate privileges locally...
CVE-2026-69430
CVE-2026-69430 is a use after free vulnerability in the Windows Embedded Mode Service that allows an authorized attacker to achieve local privilege escalation . The CVSS 3.1 base score is 7.0 (HIGH) with a vector of AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H, indicating the attack requires local access ...
CVE-2026-69475
CVE-2026-69475 is an elevation of privilege vulnerability in Windows Remote Desktop Services , caused by an untrusted pointer dereference . An authorized local attacker with low privileges can exploit this with low complexity and no user interaction to gain high impact across confidentiality, int...
CVE-2026-69427
CVE-2026-69427 is an out-of-bounds read vulnerability in the Windows VOLSNAP.SYS driver (Volume Shadow Copy service). An authorized attacker can exploit it over a network to elevate privileges . The CVSS 3.1 base score is 8.0 (HIGH) with a vector of AV:N/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H , indicatin...
EUVD-2026-73498
Out-of-bounds read in Windows VOLSNAP.SYS allows an authorized attacker to elevate privileges over a network...
CVE-2026-69422
CVE-2026-69422 is a use-after-free vulnerability in the Windows USB Video Driver that allows a locally authenticated attacker with low privileges to escalate privileges. The attack requires high complexity and no user interaction, with high impact on confidentiality, integrity, and availability, ...