209 matches found
EUVD-2026-73621
Use after free in Microsoft Windows Search Component allows an authorized attacker to elevate privileges locally...
CVE-2026-69600
CVE-2026-69600 is a use after free vulnerability in the Microsoft Windows Search Component that allows an authorized attacker to perform local privilege escalation . The vulnerability requires low privileges, high attack complexity, and no user interaction, with high impact to confidentiality, in...
EUVD-2026-73548
Use after free in Microsoft Windows Search Component allows an authorized attacker to elevate privileges locally...
EUVD-2026-73510
Missing authorization in Microsoft Windows Search Component allows an authorized attacker to perform tampering locally...
CVE-2026-69453
CVE-2026-69453 is a missing authorization vulnerability in the Microsoft Windows Search Component that allows an authenticated, low-privilege local attacker to perform tampering (integrity impact). The CVSS 3.1 base score is 5.5 (Medium) with the vector AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N, indica...
CVE-2026-69322
A double free vulnerability in the Microsoft Windows Search Component allows an authorized, network-based attacker to elevate privileges . The CVSS 3.1 score is 8.0 (High) , with a network attack vector, low privileges required, and user interaction required, impacting confidentiality, integrity,...
EUVD-2026-73454
Double free in Microsoft Windows Search Component allows an authorized attacker to elevate privileges over a network...
CVE-2026-69585
CVE-2026-69585 affects the Microsoft Windows Search Component , where an incorrect type conversion or cast allows an authorized attacker to perform local privilege escalation . The vulnerability scores 7.8 (HIGH) under CVSS 3.1, with low attack complexity, low privileges required, no user interac...
EUVD-2026-73021
Incorrect type conversion or cast in Microsoft Windows Search Component allows an authorized attacker to elevate privileges locally...
CVE-2026-69608
CVE-2026-69608 is a local elevation of privilege vulnerability in the Microsoft Windows Search Component , caused by an integer overflow or wraparound . An authorized (low-privilege) attacker can exploit it locally without user interaction to achieve high impact across confidentiality, integrity,...
EUVD-2026-73019
Missing authentication for critical function in Microsoft Windows Search Component allows an authorized attacker to perform tampering locally...
CVE-2026-69554
CVE-2026-69554 is a missing authentication vulnerability in the Microsoft Windows Search Component , allowing a local, low-privilege attacker to perform tampering with high integrity impact (CVSS v3.1: 5.5 MEDIUM , AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N). No confidentiality or availability impact is...
CVE-2026-69507
CVE-2026-69507 affects the Microsoft Windows Search Component . The vulnerability stems from insertion of sensitive information into an externally-accessible file or directory, allowing an authorized attacker to disclose information over a network. The CNA-assigned CVSS 3.1 score is 5.7 (MEDIUM) ...
EUVD-2026-73000
Insertion of sensitive information into externally-accessible file or directory in Microsoft Windows Search Component allows an authorized attacker to disclose information over a network...
Microsoft Windows Search Component Elevation of Privilege Vulnerability
Use after free in Microsoft Windows Search Component allows an authorized attacker to elevate privileges locally...
Microsoft Windows Search Component Tampering Vulnerability
Missing authorization in Microsoft Windows Search Component allows an authorized attacker to perform tampering locally...
Microsoft Windows Search Component Information Disclosure Vulnerability
Out-of-bounds read in Microsoft Windows Search Component allows an authorized attacker to disclose information locally...
Microsoft Windows Search Component Elevation of Privilege Vulnerability
Absolute path traversal in Microsoft Windows Search Component allows an authorized attacker to elevate privileges locally...