648034 matches found
EUVD-2026-73490
Missing release of memory after effective lifetime in Windows DHCP Server allows an authorized attacker to deny service over an adjacent network...
CVE-2026-69405
CVE-2026-69405 is a memory leak in Windows DHCP Server , specifically a missing release of memory after its effective lifetime. An attacker with low privileges on an adjacent network can trigger a denial of service by exhausting server resources. The CVSS 3.1 score is 5.7 (MEDIUM) with the vector...
CVE-2026-69398
CVE-2026-69398 is a local privilege escalation vulnerability in the Windows Bluetooth Service , caused by a race condition (concurrent execution using a shared resource with improper synchronization). An authorized local attacker with low privileges can exploit this to gain high confidentiality, ...
EUVD-2026-73488
Concurrent execution using shared resource with improper synchronization 'race condition' in Windows Bluetooth Service allows an authorized attacker to elevate privileges locally...
EUVD-2026-73484
Use after free in Windows Bluetooth Service allows an authorized attacker to elevate privileges locally...
CVE-2026-69388
CVE-2026-69388 is a use-after-free vulnerability in Windows Bluetooth Service that allows a local attacker with low privileges to elevate privileges . The attack requires local access and is characterized by high complexity , with no user interaction needed. The CVSS 3.1 base score is 7.0 (HIGH) ...
EUVD-2026-73481
Allocation of resources without limits or throttling in Windows SMB Server allows an authorized attacker to deny service over a network...
CVE-2026-69374
CVE-2026-69374 is a denial-of-service vulnerability in Windows SMB Server caused by allocation of resources without limits or throttling . An authorized attacker (low privileges) can exploit this over the network to disrupt service, with high availability impact and no confidentiality or integrit...
EUVD-2026-73474
Out-of-bounds read in Windows Network File System allows an authorized attacker to deny service over a network...
CVE-2026-69372
CVE-2026-69372 is an out-of-bounds read in Windows Network File System (NFS) that allows an authorized attacker (low privileges) to trigger a denial of service over a network. The attack vector is network-based with low complexity, but user interaction is required . CVSS v3.1 base score is 5.7 (M...
EUVD-2026-73473
Null pointer dereference in Virtual Hard Disk VHD Miniport Driver allows an unauthorized attacker to deny service locally...
CVE-2026-69384
A null pointer dereference in the Virtual Hard Disk (VHD) Miniport Driver allows an unauthorized local attacker to trigger a denial of service . The CVSS 3.1 score is 7.1 (HIGH) with a scope change, reflecting the local attack vector with no privileges required. CISA's SSVC assessment indicates n...
CVE-2026-69342
Windows DHCP Server is affected by an out-of-bounds read vulnerability (CVE-2026-69342) that allows an unauthenticated, remote attacker to cause a denial of service . The CVSS v3.1 score is 7.5 (HIGH) with an attack vector of Network, low complexity, no privileges required, and high availability ...
EUVD-2026-73463
Out-of-bounds read in Windows DHCP Server allows an unauthorized attacker to deny service over a network...
EUVD-2026-73457
Out-of-bounds read in BranchCache allows an unauthorized attacker to deny service over a network...
CVE-2026-69329
BranchCache in Windows is affected by an out-of-bounds read vulnerability that allows an unauthorized attacker to cause a denial of service over a network. The vulnerability carries a CVSS 3.1 base score of 7.5 (HIGH) (AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H), indicating remote exploitability without...
EUVD-2026-73444
Out-of-bounds read in Push Message Routing Service allows an authorized attacker to disclose information locally...
EUVD-2026-73425
Numeric truncation error in Internet Storage Name Service allows an authorized attacker to disclose information locally...
CVE-2026-68898
Windows iSCSI is vulnerable to an out-of-bounds read that allows an unauthorized, remote attacker to cause a denial of service over a network. The CVSS 3.1 score is 6.5 (Medium) , with the attack requiring user interaction (e.g., opening a crafted file) but no prior privileges. CISA's SSVC assess...