28637 matches found
EUVD-2026-73707
Use after free in Windows Storage Spaces Controller allows an authorized attacker to elevate privileges locally...
CVE-2026-69568
CVE-2026-69568 is an out-of-bounds read vulnerability in the Windows Storage Spaces Controller component. An authorized attacker with local access and low privileges can exploit this flaw to achieve information disclosure (high confidentiality impact, no integrity or availability impact). The CVS...
EUVD-2026-73706
Out-of-bounds read in Windows Storage Spaces Controller allows an authorized attacker to disclose information locally...
EUVD-2026-73699
Out-of-bounds read in Windows USB Mass Storage Class Driver allows an unauthorized attacker to elevate privileges with a physical attack...
CVE-2026-69490
CVE-2026-69490 is an out-of-bounds read vulnerability in the Windows USB Mass Storage Class Driver that allows an unauthorized attacker to elevate privileges via a physical attack . The CVSS 3.1 base score is 6.8 (Medium) , reflecting the physical attack vector requirement (AV:P), low complexity,...
EUVD-2026-73683
Stack-based buffer overflow in Windows Storage Spaces Controller allows an authorized attacker to elevate privileges locally...
CVE-2026-69290
CVE-2026-69290 is a stack-based buffer overflow in Windows Storage Spaces Controller that allows an authorized, locally authenticated attacker to achieve local privilege escalation . The CVSS 3.1 score is 7.8 (HIGH) with vector AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H, indicating high impact to confid...
CVE-2026-69708
CVE-2026-69708 is a use-after-free vulnerability in Windows Web Platform Storage that allows a locally authorized attacker to elevate privileges. The vulnerability is rated CVSS 3.1 7.0 (HIGH) with a vector of AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H , meaning exploitation requires local access, low p...
EUVD-2026-73613
Use after free in Windows Web Platform Storage allows an authorized attacker to elevate privileges locally...
EUVD-2026-73458
Untrusted search path in Windows Storage allows an authorized attacker to elevate privileges locally...
CVE-2026-69328
CVE-2026-69328 is an untrusted search path vulnerability in Windows Storage that allows an authorized attacker to elevate privileges locally . The CVSS 3.1 score is 7.8 (HIGH) with vector AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H, indicating low attack complexity, no user interaction required, and high...
EUVD-2026-73437
Storing passwords in a recoverable format in Windows DHCP Server allows an authorized attacker to disclose information over a network...
EUVD-2026-73425
Numeric truncation error in Internet Storage Name Service allows an authorized attacker to disclose information locally...
EUVD-2026-73403
Heap-based buffer overflow in Windows USB Mass Storage Class Driver allows an unauthorized attacker to execute code over a network...
CVE-2026-68839
CVE-2026-68839 is a heap-based buffer overflow in the Windows USB Mass Storage Class Driver , allowing an unauthorized attacker to execute code over a network. Microsoft rates it CRITICAL with a CVSS 3.1 score of 9.8 (AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H), indicating network-exploitable, no privil...
CVE-2026-72937
This is an out-of-bounds read vulnerability in the Windows Storage Port Driver that allows an authorized local attacker to disclose information. The CVSS 3.1 score is 5.5 (MEDIUM) with a local attack vector, low complexity, and low privileges required, resulting in high confidentiality impact wit...
EUVD-2026-73348
Out-of-bounds read in Storage Port Driver allows an authorized attacker to disclose information locally...
CVE-2026-77492
CVE-2026-77492 is an out-of-bounds read vulnerability in the Windows Storage Port Driver that allows an authorized attacker to disclose information locally . The CVSS 3.1 score is 5.5 (MEDIUM) with the vector AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N, indicating a local attack requiring low privileges ...