CVE-2026-69874

Untrusted pointer dereference in Windows ALPC allows an authorized attacker to elevate privileges locally...

CVE-2026-69717

Untrusted pointer dereference in Windows Group Policy allows an authorized attacker to elevate privileges over a network...

CVE-2026-69569

Untrusted pointer dereference in Windows Print Spooler Components allows an authorized attacker to deny service over a network...

CVE-2026-69501

Untrusted pointer dereference in Windows Secure Kernel Mode allows an authorized attacker to elevate privileges locally...

CVE-2026-69475

Untrusted pointer dereference in Windows Remote Desktop Services allows an authorized attacker to elevate privileges locally...

CVE-2026-67378

Untrusted pointer dereference in SQL Server allows an unauthorized attacker to execute code over a network...

EUVD-2026-73921

Untrusted pointer dereference in Windows Virtualization-Based Security VBS Enclave allows an authorized attacker to elevate privileges locally...

CVE-2026-83498

CVE-2026-83498 affects the Windows Virtualization-Based Security (VBS) Enclave and is caused by an untrusted pointer dereference , allowing an authorized local attacker with low privileges to escalate privileges without user interaction. The vulnerability carries a CVSS 3.1 score of 7.8 (HIGH) wi...

EUVD-2026-73885

Untrusted pointer dereference in Windows Secure Kernel Mode allows an authorized attacker to elevate privileges locally...

CVE-2026-83939

Windows Secure Kernel Mode is affected by an untrusted pointer dereference vulnerability that allows an authorized attacker to perform a local privilege escalation . The CVSS 3.1 score is 8.2 (HIGH) , with a changed scope and high impact to confidentiality, integrity, and availability. The attack...

CVE-2026-78451

CVE-2026-78451 is an untrusted pointer dereference in the Microsoft Windows SCSI Class System File that enables an unauthorized attacker to escalate privileges via a physical attack vector (CVSS AV:P). The vulnerability carries a CVSS 3.1 base score of 6.8 (Medium) with high impact to confidentia...

EUVD-2026-73800

Untrusted pointer dereference in Windows Failover Cluster allows an unauthorized attacker to execute code over a network...

CVE-2026-78444

CVE-2026-78444 is an untrusted pointer dereference vulnerability in Windows Failover Cluster that allows an unauthorized, network-based attacker to achieve remote code execution . The attack requires high complexity but no prior privileges or user interaction, with high impact to confidentiality,...

EUVD-2026-73729

Untrusted pointer dereference in Microsoft Office PowerPoint allows an unauthorized attacker to disclose information over a network...

CVE-2026-72956

CVE-2026-72956 is an untrusted pointer dereference in Microsoft Office PowerPoint that allows an unauthorized attacker to disclose information over a network . The vulnerability requires user interaction and has a CVSS 3.1 base score of 6.5 (MEDIUM) with high confidentiality impact but no integri...

CVE-2026-69874

CVE-2026-69874 is a local privilege escalation vulnerability in Windows ALPC (Advanced Local Procedure Call) caused by an untrusted pointer dereference . An authorized attacker with local high-privilege access can exploit this to elevate privileges further. The vulnerability carries a CVSS 3.1 sc...

EUVD-2026-73618

Untrusted pointer dereference in Kernel Streaming WOW Thunk Service Driver allows an authorized attacker to elevate privileges locally...

CVE-2026-69900

CVE-2026-69900 is an untrusted pointer dereference in the Kernel Streaming WOW Thunk Service Driver (a Windows kernel-mode driver) that allows a locally authenticated attacker to escalate privileges . Microsoft rated it HIGH (CVSS 7.8) with local attack vector, low complexity, low privileges requ...

EUVD-2026-73540

Untrusted pointer dereference in Windows Print Spooler Components allows an authorized attacker to deny service over a network...

CVE-2026-69569

CVE-2026-69569 is an untrusted pointer dereference in Windows Print Spooler Components that allows an authorized attacker to cause a denial of service over a network. The CVSS v3.1 score is 5.7 (Medium) , with high availability impact but no confidentiality or integrity impact. Exploitation requi...