648078 matches found
CVE-2026-69604
CVE-2026-69604 is a heap-based buffer overflow in the Windows Audio Service that allows an authorized local attacker with low privileges to elevate privileges . The vulnerability requires a local attack vector , low privileges , and no user interaction , with a CVSS 3.1 base score of 7.8 (HIGH) a...
EUVD-2026-73142
Heap-based buffer overflow in Windows Biometric Service allows an authorized attacker to elevate privileges locally...
EUVD-2026-73141
Heap-based buffer overflow in Windows Biometric Service allows an authorized attacker to elevate privileges locally...
CVE-2026-69580
A heap-based buffer overflow in Windows Biometric Service allows an authorized attacker to escalate privileges locally. The vulnerability is rated CVSS 3.1 7.8 (HIGH) with a local attack vector, low complexity, and low privileges required, yielding full impact on confidentiality, integrity, and a...
CVE-2026-69589
CVE-2026-69589 is a heap-based buffer overflow in Windows Biometric Service that allows an authorized, low-privilege attacker to achieve local privilege escalation . The vulnerability carries a CVSS v3.1 base score of 7.8 (HIGH) with a vector of AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H, indicating low...
CVE-2026-69583
Windows Biometric Service is affected by a heap-based buffer overflow that allows an authorized attacker to achieve local privilege escalation . The vulnerability carries a CVSS 3.1 base score of 7.8 (HIGH) , with local attack vector, low complexity, and low privileges required, resulting in high...
EUVD-2026-73140
Heap-based buffer overflow in Windows Biometric Service allows an authorized attacker to elevate privileges locally...
EUVD-2026-73132
Heap-based buffer overflow in Windows Audio Service allows an authorized attacker to elevate privileges locally...
CVE-2026-69394
CVE-2026-69394 is a heap-based buffer overflow in the Windows Audio Service that allows an authorized local attacker to escalate privileges. The vulnerability is rated CVSS 3.1 7.0 (HIGH) by Microsoft (AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H), reflecting a local attack vector with high complexity, lo...
EUVD-2026-73128
Uncontrolled recursion in Microsoft Exchange Server allows an unauthorized attacker to deny service over a network...
CVE-2026-69378
Microsoft Exchange Server is affected by an uncontrolled recursion vulnerability that allows an unauthenticated, remote attacker to cause a denial of service over the network. The CVSS 3.1 score is 7.5 (HIGH) with low attack complexity, no privileges required, and no user interaction needed. No s...
EUVD-2026-73123
Heap-based buffer overflow in Windows Biometric Service allows an authorized attacker to elevate privileges locally...
CVE-2026-69293
CVE-2026-69293 is a heap-based buffer overflow in the Windows Biometric Service that allows an authorized attacker to achieve local privilege escalation . The vulnerability is rated CVSS 3.1 7.8 (HIGH) with a local attack vector, low complexity, and low privileges required, resulting in high impa...
CVE-2026-68887
CVE-2026-68887 is an out-of-bounds read in Windows Message Queuing Queue Manager that allows an unauthorized, network-based attacker to trigger a denial of service . The vulnerability requires no prior authentication or user interaction and carries a CVSS 3.1 base score of 7.5 (HIGH) , with impac...
EUVD-2026-73122
Out-of-bounds read in Windows Message Queuing Queue Manager allows an unauthorized attacker to deny service over a network...
CVE-2026-72944
CVE-2026-72944 is a heap-based buffer overflow in the Windows Fax Service that allows an authorized attacker to achieve local privilege escalation . The vulnerability carries a CVSS 3.1 base score of 7.8 (High) , with a local attack vector, low complexity, low required privileges, and no user int...
EUVD-2026-73110
Heap-based buffer overflow in Windows Fax Service allows an authorized attacker to elevate privileges locally...
EUVD-2026-73109
Null pointer dereference in Windows Routing and Remote Access Service RRAS allows an authorized attacker to deny service over a network...
CVE-2026-72939
CVE-2026-72939 is a null pointer dereference in Windows Routing and Remote Access Service (RRAS) that allows an authorized attacker to cause a denial of service over a network. The CVSS 3.1 score is 6.5 (Medium) with vector AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H , indicating a network-attackable fla...