EUVD-2026-73657

Heap-based buffer overflow in Windows Core Messaging allows an authorized attacker to elevate privileges locally...

EUVD-2026-73655

Heap-based buffer overflow in Windows Credential Guard allows an authorized attacker to elevate privileges locally...

CVE-2026-70578

CVE-2026-70578 is a heap-based buffer overflow in Windows Credential Guard that allows an authorized local attacker to elevate privileges . The Microsoft-assigned CVSS 3.1 score is 7.0 (High) , with a vector of AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H , indicating local access, high attack complexity,...

EUVD-2026-73654

Use after free in Windows Modern Device Management MDM allows an authorized attacker to elevate privileges locally...

CVE-2026-70581

An integer overflow or wraparound vulnerability in the Windows Biometric Service allows an authorized local attacker to elevate privileges . According to Microsoft's CVSS 3.1 scoring, the flaw rates 7.8 (HIGH) , with local attack vector, low complexity, low privileges required, no user interactio...

CVE-2026-70577

CVE-2026-70577 is a use-after-free vulnerability in Windows Modern Device Management (MDM) that allows an authorized attacker to achieve local privilege escalation . The flaw is rated CVSS 7.0 (HIGH) with a vector of AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H, indicating a locally exploitable issue with...

EUVD-2026-73653

Integer overflow or wraparound in Windows Biometric Service allows an authorized attacker to elevate privileges locally...

CVE-2026-70572

CVE-2026-70572 is an integer overflow or wraparound vulnerability in Windows Biometric Service that allows a locally authenticated attacker to elevate privileges . The root cause lies in improper handling of integer operations within the biometric service component. The vulnerability carries a CV...

EUVD-2026-73651

Integer overflow or wraparound in Windows Biometric Service allows an authorized attacker to elevate privileges locally...

EUVD-2026-73650

Heap-based buffer overflow in Windows Biometric Service allows an authorized attacker to elevate privileges locally...

CVE-2026-70569

CVE-2026-70569 is a local privilege escalation vulnerability in the Windows Spaceport.sys kernel driver, caused by an out-of-bounds read . An authorized attacker with low privileges can exploit it to achieve full local privilege escalation, with High impact on confidentiality, integrity, and avai...

CVE-2026-70573

CVE-2026-70573 is a heap-based buffer overflow in Windows Biometric Service that allows a local attacker with low privileges to achieve privilege escalation . The vulnerability is rated CVSS 3.1: 7.0 (HIGH) with a vector of AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H, indicating a local attack vector wit...

EUVD-2026-73649

Out-of-bounds read in Windows Spaceport.sys allows an authorized attacker to elevate privileges locally...

CVE-2026-70567

CVE-2026-70567 is a double free vulnerability in the Windows Display Enhancement Service that allows a low-privileged, authorized local attacker to achieve privilege escalation . The attack vector is local with high complexity and requires no user interaction. The CVSS 3.1 score is 7.0 (HIGH) wit...

EUVD-2026-73648

Heap-based buffer overflow in Windows Defender Firewall Service allows an authorized attacker to elevate privileges locally...

CVE-2026-70568

This is a heap-based buffer overflow vulnerability in Windows Defender Firewall Service that allows an authorized attacker to achieve local privilege escalation with high impact on confidentiality, integrity, and availability. The CVSS 3.1 score is 7.0 (HIGH) , reflecting a local attack vector wi...

EUVD-2026-73647

Double free in Windows Display Enhancement Service allows an authorized attacker to elevate privileges locally...

CVE-2026-70565

CVE-2026-70565 is a use-after-free vulnerability in the Windows AF_UNIX Socket Provider that allows an authorized attacker to perform local privilege escalation . The CVSS 3.1 score is 7.0 (HIGH) , with a vector of AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H, indicating a local attack with high complexit...

EUVD-2026-73646

Out-of-bounds read in Virtual Hard Disk VHD Miniport Driver allows an authorized attacker to elevate privileges locally...

CVE-2026-70574

CVE-2026-70574 is an out-of-bounds read vulnerability in the Virtual Hard Disk (VHD) Miniport Driver (Microsoft). An attacker with low local privileges can exploit this to elevate privileges to high integrity, resulting in full compromise of confidentiality, integrity, and availability (CVSS 3.1:...