285033 matches found
CVE-2026-69350
CVE-2026-69350 is a heap-based buffer overflow in Windows Overlay Filter that allows an authorized attacker to elevate privileges locally . The vulnerability requires high privileges and no user interaction, with a CVSS 3.1 score of 6.7 (MEDIUM) reflecting high impact to confidentiality, integrit...
EUVD-2026-73468
Heap-based buffer overflow in Windows Overlay Filter allows an authorized attacker to elevate privileges locally...
CVE-2026-69346
CVE-2026-69346 is a heap-based buffer overflow in Windows Print Spooler Components that allows an authorized attacker to elevate privileges over a network. The flaw carries a CVSS 3.1 score of 8.0 (HIGH) with the vector AV:N/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H, meaning exploitation requires low privil...
CVE-2026-69348
CVE-2026-69348 is a heap-based buffer overflow in the Windows Win32K kernel component that allows an authorized, locally-privileged attacker to elevate privileges . The CVSS 3.1 score is 7.8 (HIGH) , with low attack complexity and no user interaction required. CISA's SSVC assessment indicates no ...
EUVD-2026-73466
Heap-based buffer overflow in Windows Print Spooler Components allows an authorized attacker to elevate privileges over a network...
EUVD-2026-73467
Heap-based buffer overflow in Windows Win32K allows an authorized attacker to elevate privileges locally...
CVE-2026-69340
CVE-2026-69340 is a heap-based buffer overflow in Windows NTFS that allows an authorized, low-privilege attacker to elevate privileges over a network . The vulnerability requires user interaction and carries a high attack complexity, yielding a CVSS 3.1 base score of 7.1 (HIGH) with high impact t...
EUVD-2026-73462
Heap-based buffer overflow in Windows NTFS allows an authorized attacker to elevate privileges over a network...
EUVD-2026-73461
Use after free in Windows Win32K allows an authorized attacker to elevate privileges locally...
CVE-2026-69335
CVE-2026-69335 is a use-after-free vulnerability in Windows Win32K that allows an authorized attacker to elevate privileges locally . Microsoft rates it CVSS 3.1: 7.0 (HIGH) with a vector of AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H, meaning exploitation requires local access, low privileges, and high ...
EUVD-2026-73460
Out-of-bounds read in Windows NTFS allows an authorized attacker to elevate privileges over a network...
CVE-2026-69332
CVE-2026-69332 is an out-of-bounds read in Windows NTFS that allows an authorized, low-privilege attacker to escalate privileges over a network with user interaction. The CVSS 3.1 score is 8.0 (HIGH) with impacts of High across Confidentiality, Integrity, and Availability. No specific affected ve...
EUVD-2026-73459
Use after free in Windows Remote Access Connection Manager allows an authorized attacker to elevate privileges locally...
CVE-2026-69331
CVE-2026-69331 is a use-after-free vulnerability in Windows Remote Access Connection Manager that allows an authorized local attacker to elevate privileges . The vulnerability is rated HIGH (CVSS 3.1: 7.0) with a local attack vector , high complexity , and low privileges required . No user intera...
EUVD-2026-73458
Untrusted search path in Windows Storage allows an authorized attacker to elevate privileges locally...
CVE-2026-69328
CVE-2026-69328 is an untrusted search path vulnerability in Windows Storage that allows an authorized attacker to elevate privileges locally . The CVSS 3.1 score is 7.8 (HIGH) with vector AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H, indicating low attack complexity, no user interaction required, and high...
CVE-2026-69322
A double free vulnerability in the Microsoft Windows Search Component allows an authorized, network-based attacker to elevate privileges . The CVSS 3.1 score is 8.0 (High) , with a network attack vector, low privileges required, and user interaction required, impacting confidentiality, integrity,...
EUVD-2026-73455
Access of resource using incompatible type 'type confusion' in Windows Performance Monitor allows an authorized attacker to elevate privileges locally...
CVE-2026-69324
CVE-2026-69324 is a local privilege elevation vulnerability in Windows Performance Monitor caused by type confusion (access of resource using incompatible type). An authorized attacker with low privileges can exploit this locally without user interaction to gain high impact on confidentiality, in...