EUVD-2026-73039

Use after free in Windows Device Association Broker service allows an authorized attacker to elevate privileges locally...

EUVD-2026-73036

Integer overflow or wraparound in Windows DNS allows an unauthorized attacker to deny service over a network...

CVE-2026-69631

CVE-2026-69631 is an integer overflow or wraparound vulnerability in Windows DNS that allows an unauthenticated remote attacker to cause a denial of service over a network. The CVSS 3.1 score is 7.5 (HIGH) with the vector AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H, indicating a network-based attack with...

CVE-2026-69627

CVE-2026-69627 is an out-of-bounds read vulnerability in the Windows Remote Desktop Licensing Service . An authorized local attacker with low privileges can exploit this flaw to disclose information , resulting in high confidentiality impact but no integrity or availability impact (CVSS 3.1: 5.5 ...

CVE-2026-69605

CVE-2026-69605 is a use-after-free vulnerability in Microsoft Install Service that allows an authorized attacker to perform a local privilege escalation . The flaw is classified with a CVSS 3.1 base score of 7.0 (HIGH) , requiring local access, low privileges, and high attack complexity, with hig...

EUVD-2026-73027

Use after free in Microsoft Install Service allows an authorized attacker to elevate privileges locally...

EUVD-2026-73024

Null pointer dereference in Windows IKE Extension allows an unauthorized attacker to deny service over a network...

CVE-2026-69587

CVE-2026-69587 is a null pointer dereference in the Windows Internet Key Exchange (IKE) Extension that allows an unauthenticated, remote attacker to cause a denial of service . The vulnerability is reachable over the network with low attack complexity , requires no privileges and no user interact...

EUVD-2026-73023

Missing release of memory after effective lifetime in Windows TCP/IP allows an unauthorized attacker to deny service over a network...

CVE-2026-69588

CVE-2026-69588 affects Windows TCP/IP and is caused by a missing release of memory after its effective lifetime (a memory leak). An unauthorized network-based attacker with no privileges and no user interaction can trigger a denial of service , rated CVSS 7.5 (High) with high availability impact....

CVE-2026-69563

CVE-2026-69563 is a heap-based buffer overflow in the Windows Program Compatibility Assistant Service that allows an authorized attacker to achieve local privilege escalation . The vulnerability carries a CVSS 3.1 score of 7.0 (HIGH) , with a vector of AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H, indicat...

CVE-2026-69574

CVE-2026-69574 is a use-after-free vulnerability in the Windows Device Association Service that allows an authorized attacker to achieve local privilege escalation . The CVSS 3.1 base score is 7.0 (HIGH) , with high impact to confidentiality, integrity, and availability, but the attack requires l...

CVE-2026-69540

This Use After Free vulnerability affects the Windows Audio Service component and enables a locally authenticated attacker with low privileges to escalate to higher privileges. The CVSS 3.1 base score is 7.0 (High) , with an attack vector of local , high attack complexity, and no user interaction...

EUVD-2026-73013

Use after free in Windows Audio Service allows an authorized attacker to elevate privileges locally...

EUVD-2026-73012

Use after free in Windows Device Association Service allows an authorized attacker to elevate privileges locally...

EUVD-2026-73011

Improper neutralization of special elements used in a command 'command injection' in Windows Program Compatibility Assistant Service allows an authorized attacker to elevate privileges locally...

CVE-2026-69621

CVE-2026-69621 is a heap-based buffer overflow in the Windows Fax Service that allows an authorized local attacker to elevate privileges , resulting in full compromise of confidentiality, integrity, and availability (CVSS 3.1: 7.0 HIGH , AV:L/AC:H/PR:L). CISA's SSVC assessment indicates no known ...

EUVD-2026-73004

Heap-based buffer overflow in Windows Fax Service allows an authorized attacker to elevate privileges locally...

EUVD-2026-72993

Heap-based buffer overflow in Windows Event Logging Service allows an unauthorized attacker to execute code over a network...

CVE-2026-69494

CVE-2026-69494 is an out-of-bounds read vulnerability in the Windows Event Logging Service that allows an unauthorized attacker to achieve remote code execution over a network. The vulnerability requires user interaction (CVSS: UI:R) and no prior privileges (PR:N), yielding a CVSS 3.1 score of 8....