285172 matches found
EUVD-2026-73559
Buffer over-read in Windows Win32K allows an authorized attacker to elevate privileges locally...
EUVD-2026-73558
Out-of-bounds read in Windows Win32K allows an authorized attacker to elevate privileges locally...
CVE-2026-69630
CVE-2026-69630 is an out-of-bounds read vulnerability in the Windows Win32K kernel driver that allows a locally authenticated attacker to escalate privileges . The CVSS v3.1 score is 7.0 (HIGH) with vector AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H, reflecting the high complexity and required low-privil...
EUVD-2026-73555
Use after free in Virtual Hard Disk VHD Miniport Driver allows an authorized attacker to elevate privileges locally...
CVE-2026-69617
CVE-2026-69617 is an out-of-bounds read vulnerability in the Windows Resilient File System (ReFS) component that allows an authorized local attacker to escalate privileges . The CVSS 3.1 score is 7.0 (HIGH) with a vector of AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H, reflecting the high complexity and l...
EUVD-2026-73556
Out-of-bounds read in Windows Resilient File System ReFS allows an authorized attacker to elevate privileges locally...
CVE-2026-69611
This is a use-after-free vulnerability in the Virtual Hard Disk (VHD) Miniport Driver on Microsoft platforms. An attacker with low local privileges can exploit it to elevate privileges on the system. The CVSS 3.1 score is 7.0 (HIGH) with high complexity, meaning exploitation requires specific con...
CVE-2026-69597
CVE-2026-69597 is a use-after-free vulnerability in Windows HTTP.sys that allows an authorized attacker to elevate privileges over a network . The CVSS 3.1 score is 7.1 (HIGH) , with a vector requiring network access , high attack complexity , low privileges , and user interaction , resulting in ...
CVE-2026-69602
CVE-2026-69602 is a use after free vulnerability in the Windows PrintWorkflowUserSvc component that allows an authorized attacker to elevate privileges over a network. The CVSS 3.1 base score is 7.1 (HIGH) with vector AV:N/AC:H/PR:L/UI:R/S:U/C:H/I:H/A:H, indicating a network-based attack with hig...
EUVD-2026-73553
Use after free in Windows HTTP.sys allows an authorized attacker to elevate privileges over a network...
EUVD-2026-73549
Use after free in Windows Shell allows an authorized attacker to elevate privileges locally...
CVE-2026-69625
A heap-based buffer overflow in Windows Connected User Experiences and Telemetry (UXTelemetry) allows an authorized attacker to elevate privileges over a network. The vulnerability requires low privileges and user interaction , but results in high impact to confidentiality, integrity, and availab...
CVE-2026-69606
CVE-2026-69606 is a use-after-free vulnerability in Windows Shell that allows a local, low-privilege attacker to achieve local privilege elevation . The CVSS 3.1 score is 7.0 (HIGH) , with the vector CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H, indicating a local attack vector, high complexity, ...
CVE-2026-69584
CVE-2026-69584 affects the Windows USB Video Driver , where an integer overflow or wraparound flaw allows an authorized attacker to elevate privileges locally . The Microsoft CNA assigns a CVSS 3.1 score of 7.8 (HIGH) with vector AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H, indicating that low-privilege ...
CVE-2026-69600
CVE-2026-69600 is a use after free vulnerability in the Microsoft Windows Search Component that allows an authorized attacker to perform local privilege escalation . The vulnerability requires low privileges, high attack complexity, and no user interaction, with high impact to confidentiality, in...
EUVD-2026-73548
Use after free in Microsoft Windows Search Component allows an authorized attacker to elevate privileges locally...
EUVD-2026-73547
Integer overflow or wraparound in Windows USB Video Driver allows an authorized attacker to elevate privileges locally...
CVE-2026-69592
CVE-2026-69592 is a heap-based buffer overflow in the Windows Universal Disk Format File System (UDFS) driver that allows an authorized local attacker to escalate privileges . The vulnerability is rated CVSS 3.1: 7.8 (HIGH) with a vector of AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H, indicating local at...
CVE-2026-69567
CVE-2026-69567 is a use-after-free vulnerability in Windows NTFS (New Technology File System) that allows a locally authenticated attacker with low privileges to elevate privileges on the affected system. The CVSS v3.1 score is 7.0 (HIGH) , reflecting a local attack vector with high complexity, n...