648938 matches found
CVE-2026-69605
CVE-2026-69605 is a use-after-free vulnerability in Microsoft Install Service that allows an authorized attacker to perform a local privilege escalation . The flaw is classified with a CVSS 3.1 base score of 7.0 (HIGH) , requiring local access, low privileges, and high attack complexity, with hig...
EUVD-2026-73027
Use after free in Microsoft Install Service allows an authorized attacker to elevate privileges locally...
EUVD-2026-73024
Null pointer dereference in Windows IKE Extension allows an unauthorized attacker to deny service over a network...
CVE-2026-69587
CVE-2026-69587 is a null pointer dereference in the Windows Internet Key Exchange (IKE) Extension that allows an unauthenticated, remote attacker to cause a denial of service . The vulnerability is reachable over the network with low attack complexity , requires no privileges and no user interact...
EUVD-2026-73023
Missing release of memory after effective lifetime in Windows TCP/IP allows an unauthorized attacker to deny service over a network...
CVE-2026-69588
CVE-2026-69588 affects Windows TCP/IP and is caused by a missing release of memory after its effective lifetime (a memory leak). An unauthorized network-based attacker with no privileges and no user interaction can trigger a denial of service , rated CVSS 7.5 (High) with high availability impact....
CVE-2026-69563
CVE-2026-69563 is a heap-based buffer overflow in the Windows Program Compatibility Assistant Service that allows an authorized attacker to achieve local privilege escalation . The vulnerability carries a CVSS 3.1 score of 7.0 (HIGH) , with a vector of AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H, indicat...
CVE-2026-69574
CVE-2026-69574 is a use-after-free vulnerability in the Windows Device Association Service that allows an authorized attacker to achieve local privilege escalation . The CVSS 3.1 base score is 7.0 (HIGH) , with high impact to confidentiality, integrity, and availability, but the attack requires l...
CVE-2026-69540
This Use After Free vulnerability affects the Windows Audio Service component and enables a locally authenticated attacker with low privileges to escalate to higher privileges. The CVSS 3.1 base score is 7.0 (High) , with an attack vector of local , high attack complexity, and no user interaction...
EUVD-2026-73013
Use after free in Windows Audio Service allows an authorized attacker to elevate privileges locally...
EUVD-2026-73012
Use after free in Windows Device Association Service allows an authorized attacker to elevate privileges locally...
EUVD-2026-73011
Improper neutralization of special elements used in a command 'command injection' in Windows Program Compatibility Assistant Service allows an authorized attacker to elevate privileges locally...
CVE-2026-69621
CVE-2026-69621 is a heap-based buffer overflow in the Windows Fax Service that allows an authorized local attacker to elevate privileges , resulting in full compromise of confidentiality, integrity, and availability (CVSS 3.1: 7.0 HIGH , AV:L/AC:H/PR:L). CISA's SSVC assessment indicates no known ...
EUVD-2026-73004
Heap-based buffer overflow in Windows Fax Service allows an authorized attacker to elevate privileges locally...
EUVD-2026-72993
Heap-based buffer overflow in Windows Event Logging Service allows an unauthorized attacker to execute code over a network...
CVE-2026-69494
CVE-2026-69494 is an out-of-bounds read vulnerability in the Windows Event Logging Service that allows an unauthorized attacker to achieve remote code execution over a network. The vulnerability requires user interaction (CVSS: UI:R) and no prior privileges (PR:N), yielding a CVSS 3.1 score of 8....
CVE-2026-69448
CVE-2026-69448 is a local privilege escalation vulnerability in the Windows Bluetooth Service , caused by a race condition due to concurrent execution using a shared resource with improper synchronization. An authorized attacker can exploit this to elevate privileges locally, with a CVSS 3.1 scor...
EUVD-2026-72974
Concurrent execution using shared resource with improper synchronization 'race condition' in Windows Bluetooth Service allows an authorized attacker to elevate privileges locally...
CVE-2026-69391
CVE-2026-69391 is a stack-based buffer overflow in the Windows Broker Infrastructure Service that allows an authorized attacker to achieve local privilege escalation . The vulnerability requires low privileges and local access, with no user interaction needed. Microsoft rates it CVSS 7.8 (High) ,...