647964 matches found
CVE-2026-83955
CVE-2026-83955 is a heap-based buffer overflow in the Windows Biometric Service that allows an authorized attacker (low privileges, no user interaction) to achieve local privilege escalation . The assigned CVSS 3.1 score is 7.8 (HIGH) , with high impact to confidentiality, integrity, and availabi...
CVE-2026-72949
CVE-2026-72949 is a null pointer dereference in the Windows SMB Server Network Transport Driver (srvnet.sys) that allows an unauthorized, network-based attacker to cause a denial of service . The Microsoft-assigned CVSS 3.1 score is 7.5 (HIGH) , reflecting low attack complexity, no required privi...
EUVD-2026-73344
Null pointer dereference in Windows SMB Server Network Transport Driver srvnet.sys allows an unauthorized attacker to deny service over a network...
EUVD-2026-73343
Integer underflow wrap or wraparound in Windows File History Service allows an authorized attacker to elevate privileges locally...
EUVD-2026-73338
Missing release of memory after effective lifetime in Windows DHCP Server allows an unauthorized attacker to deny service over a network...
CVE-2026-70065
CVE-2026-70065 affects the Windows DHCP Server , where a missing release of memory after its effective lifetime allows an unauthorized, network-based attacker to cause a denial of service with no impact to confidentiality or integrity. The CVSS 3.1 score is 7.5 (HIGH) with low attack complexity a...
EUVD-2026-73321
Use after free in Windows DNS allows an unauthorized attacker to deny service over a network...
CVE-2026-78523
A use-after-free vulnerability in Windows DNS Server allows an unauthenticated, remote attacker to cause a denial of service over the network. NVD scores it 7.5 (HIGH) with low attack complexity, while Microsoft's CNA rates it 5.9 (MEDIUM) with high attack complexity. CISA's SSVC assessment indic...
EUVD-2026-73300
Integer overflow or wraparound in SQL Server allows an unauthorized attacker to deny service over a network...
CVE-2026-67376
CVE-2026-67376 is an integer overflow or wraparound flaw in Microsoft SQL Server that allows an unauthorized, remote attacker to trigger a denial of service over the network. The CVSS 3.1 score is 7.5 (HIGH) with a vector of AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H, indicating low attack complexity, n...
CVE-2026-77896
CVE-2026-77896 is an integer overflow or wraparound in Windows Remote Desktop Client that allows an unauthorized attacker to deny service over a network . The underlying flaw is a classic integer overflow leading to a denial-of-service condition. The CVSS 3.1 score is 6.5 (Medium) with vector AV:...
EUVD-2026-73285
Integer overflow or wraparound in Remote Desktop Client allows an unauthorized attacker to deny service over a network...
EUVD-2026-73284
Out-of-bounds read in Windows DHCP Server allows an unauthorized attacker to deny service over a network...
CVE-2026-77895
CVE-2026-77895 is an out-of-bounds read vulnerability in Windows DHCP Server that allows an unauthorized attacker to cause denial of service over a network . The CVSS 3.1 score is 7.5 (HIGH) with a vector of network access, low complexity, no privileges required, and no user interaction, resultin...
CVE-2026-77893
CVE-2026-77893 is an out-of-bounds read in Windows DHCP Server that allows an unauthorized, remote attacker to cause a denial of service over the network. The CVSS 3.1 base score is 7.5 (High) , with a vector of network attack, low complexity, no privileges required, no user interaction, and high...
EUVD-2026-73282
Out-of-bounds read in Windows DHCP Server allows an unauthorized attacker to deny service over a network...
EUVD-2026-73278
Access of resource using incompatible type 'type confusion' in Windows DHCP Server allows an unauthorized attacker to deny service over a network...
CVE-2026-77889
CVE-2026-77889 is a type confusion vulnerability in Windows DHCP Server that allows an unauthorized, network-based attacker to cause a denial of service . The CVSS 3.1 score is 7.5 (High) , with no privileges or user interaction required. CISA's SSVC assessment rates exploitation as none , the vu...
CVE-2026-77890
CVE-2026-77890 is a type confusion vulnerability in Windows DHCP Server that allows an unauthorized, remote attacker to trigger a denial of service over a network. The flaw stems from access of a resource using an incompatible type. Per the CVSS 3.1 score of 7.5 (HIGH) , the attack requires no pr...