285017 matches found
CVE-2026-69542
CVE-2026-69542 is a heap-based buffer overflow in Windows Camera Frame Server Monitor that allows an authorized attacker to elevate privileges locally . The vulnerability is scored CVSS 7.8 (High) with a local attack vector, low complexity, low privileges required, and no user interaction, result...
EUVD-2026-73538
Heap-based buffer overflow in Windows Camera Frame Server Monitor allows an authorized attacker to elevate privileges locally...
CVE-2026-69535
A numeric truncation error in the Windows Spaceport.sys driver allows an authorized local attacker with low privileges to escalate privileges, leading to full compromise of confidentiality, integrity, and availability. The vulnerability is rated CVSS 3.1 7.8 (High) with a local attack vector, low...
CVE-2026-69571
CVE-2026-69571 is a heap-based buffer overflow in the Windows USB Audio Class driver (usbaudio.sys) that allows an authorized local attacker to elevate privileges. The vulnerability is scored CVSS 3.1: 7.8 (HIGH) with a vector of local attack, low complexity, low privileges required, no user inte...
EUVD-2026-73536
Numeric truncation error in Windows Spaceport.sys allows an authorized attacker to elevate privileges locally...
EUVD-2026-73535
Heap-based buffer overflow in Windows USB Audio Class driver usbaudio.sys allows an authorized attacker to elevate privileges locally...
EUVD-2026-73529
Stack-based buffer overflow in Windows MIDI Service Module allows an authorized attacker to elevate privileges locally...
EUVD-2026-73530
Heap-based buffer overflow in Windows Fax Service allows an authorized attacker to elevate privileges locally...
CVE-2026-69509
CVE-2026-69509 is a heap-based buffer overflow in the Windows Fax Service component of Microsoft Windows, allowing an authorized attacker with local access to escalate privileges . The vulnerability requires low privileges , low attack complexity , and no user interaction , resulting in a CVSS 3....
CVE-2026-69508
A stack-based buffer overflow in the Windows MIDI Service Module allows a locally authenticated attacker with low privileges to escalate privileges, achieving high impact across confidentiality, integrity, and availability (CVSS 3.1: 7.8 HIGH ). No user interaction is required. The vulnerability ...
EUVD-2026-73528
Stack-based buffer overflow in Windows USB Driver allows an authorized attacker to elevate privileges over a network...
CVE-2026-69503
CVE-2026-69503 is a stack-based buffer overflow in the Windows USB Driver that allows an authorized attacker to elevate privileges over a network. The vulnerability carries a CVSS 3.1 base score of 8.0 (HIGH) with a network attack vector, low complexity, low required privileges, and required user...
CVE-2026-69498
Windows Win32K contains a use-after-free vulnerability that allows an authorized local attacker to escalate privileges . The CVSS 3.1 score is 7.0 (High) with a vector of AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H, indicating high attack complexity but low privileges required and no user interaction . T...
EUVD-2026-73527
Use after free in Windows Win32K allows an authorized attacker to elevate privileges locally...
EUVD-2026-73526
Heap-based buffer overflow in Windows Spaceport.sys allows an authorized attacker to elevate privileges over a network...
CVE-2026-69512
CVE-2026-69512 is a heap-based buffer overflow in the Windows Spaceport.sys driver that allows an authorized attacker (low privileges) to elevate privileges over a network , with user interaction required. The flaw yields high impact to confidentiality, integrity, and availability, yielding a CVS...
CVE-2026-69488
A use-after-free vulnerability in the Windows Device Association Service allows an authorized local attacker to escalate privileges . The CVSS 3.1 score is 7.0 (HIGH) , with a local attack vector, high complexity, low required privileges, and no user interaction, yielding high impact on confident...
EUVD-2026-73522
Use after free in Windows Device Association Service allows an authorized attacker to elevate privileges locally...
CVE-2026-9765
A flaw was found in Grafana. This vulnerability, categorized as broken access control, allows an attacker to bypass security mechanisms in a web application. This can lead to unauthorized access to sensitive data, enable operations on behalf of other users, and potentially result in privilege...