54141 matches found
CVE-2026-69287
Use after free in Windows Remote Desktop Services allows an authorized attacker to elevate privileges locally...
CVE-2026-58611
Improper authorization in XBox Gaming Services allows an authorized attacker to elevate privileges locally...
CVE-2026-69595
CVE-2026-69595 is a use-after-free vulnerability in the Windows Services for NFS ONCRPC XDR Driver that allows an unauthorized, unauthenticated attacker to achieve remote code execution over the network. Microsoft rated it CRITICAL (CVSS 3.1: 9.8) with low attack complexity and no user interactio...
CVE-2026-73012
CVE-2026-73012 is a heap-based buffer overflow in Windows Management Services that allows an authorized (low-privilege) attacker to elevate privileges over a network . The vulnerability is rated CVSS 8.8 (HIGH) with vector AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H, indicating low attack complexity and ...
EUVD-2026-73772
Heap-based buffer overflow in Windows Management Services allows an authorized attacker to elevate privileges over a network...
CVE-2026-69607
CVE-2026-69607 is a use-after-free vulnerability in Windows Deployment Services (WDS) that allows an unauthorized attacker to achieve remote code execution over a network. The CVSS 3.1 score is 7.5 (HIGH) , with a network attack vector, high complexity, no privileges required, and user interactio...
EUVD-2026-73708
Use after free in Windows Deployment Services allows an unauthorized attacker to execute code over a network...
CVE-2026-69287
Windows Remote Desktop Services contains a use-after-free flaw that allows an authorized local attacker to elevate privileges . The CVSS 3.1 score is 7.0 (HIGH) with a vector of AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H, meaning exploitation requires local access , high attack complexity , and low prio...
EUVD-2026-73681
Use after free in Windows Remote Desktop Services allows an authorized attacker to elevate privileges locally...
CVE-2026-72954
CVE-2026-72954 is a use-after-free vulnerability in Windows Deployment Services (Microsoft) that allows an authorized attacker (low privileges) to achieve remote code execution over a network. The CVSS 3.1 score is 7.5 (HIGH) with vector AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H, reflecting high attack...
EUVD-2026-73674
Use after free in Windows Deployment Services allows an authorized attacker to execute code over a network...
CVE-2026-72957
CVE-2026-72957 is a heap-based buffer overflow in Windows Deployment Services that allows an authorized attacker to achieve local code execution. The vulnerability is rated CVSS 3.1 7.8 (HIGH) with the vector AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H, indicating a low-privilege local attacker requires ...
EUVD-2026-73671
Heap-based buffer overflow in Windows Deployment Services allows an authorized attacker to execute code locally...
EUVD-2026-73609
Missing release of memory after effective lifetime in Active Directory Domain Services allows an unauthorized attacker to deny service over a network...
CVE-2026-69616
Windows Remote Desktop Services is affected by an out-of-bounds read vulnerability that allows an authorized local attacker to disclose information (CVSS 3.1: 5.5 MEDIUM — local vector, low privileges required, high confidentiality impact, no integrity or availability impact). CISA's SSVC assessm...
EUVD-2026-73552
Incomplete list of disallowed inputs in Active Directory Certificate Services AD CS allows an authorized attacker to perform tampering over a network...
EUVD-2026-73533
Use after free in Windows Remote Desktop Services allows an authorized attacker to execute code over a network...
CVE-2026-69536
CVE-2026-69536 is a use-after-free vulnerability in Windows Remote Desktop Services that allows an authorized attacker to achieve remote code execution over a network. The CVSS v3.1 score is 7.1 (HIGH) , with a vector of AV:N/AC:H/PR:L/UI:R/S:U/C:H/I:H/A:H, indicating that while exploitation requ...
CVE-2026-69599
Windows Remote Desktop Services contains a use-after-free vulnerability that allows an authorized attacker (low privileges required) to execute code over a network. The CVSS 3.1 score is 7.5 (HIGH) , with high attack complexity and no user interaction required, impacting confidentiality, integrit...