358006 matches found
CVE-2026-69322 Microsoft Windows Search Component Elevation of Privilege Vulnerability
...
CVE-2026-69322 Microsoft Windows Search Component Elevation of Privilege Vulnerability
...
CVE-2026-69322
A double free vulnerability in the Microsoft Windows Search Component allows an authorized, network-based attacker to elevate privileges . The CVSS 3.1 score is 8.0 (High) , with a network attack vector, low privileges required, and user interaction required, impacting confidentiality, integrity,...
EUVD-2026-73454
Double free in Microsoft Windows Search Component allows an authorized attacker to elevate privileges over a network...
CVE-2026-69318
Windows Imaging Component contains an out-of-bounds read flaw that allows a locally authenticated attacker to disclose information. The vulnerability carries a CVSS 3.1 score of 5.5 (MEDIUM) , with a local attack vector, low complexity, low privileges required, no user interaction, and a High imp...
CVE-2026-69318 Windows Imaging Component Information Disclosure Vulnerability
...
CVE-2026-69318 Windows Imaging Component Information Disclosure Vulnerability
...
EUVD-2026-73450
Out-of-bounds read in Windows Imaging Component allows an authorized attacker to disclose information locally...
CVE-2026-69305 Microsoft Windows Search Component Elevation of Privilege Vulnerability
...
CVE-2026-69305 Microsoft Windows Search Component Elevation of Privilege Vulnerability
...
CVE-2026-69305
CVE-2026-69305 is a use-after-free vulnerability in the Microsoft Windows Search Component that allows an authorized attacker to elevate privileges over a network. The CVSS 3.1 base score is 7.1 (HIGH) , with a vector of AV:N/AC:H/PR:L/UI:R/S:U/C:H/I:H/A:H , indicating that exploitation requires ...
EUVD-2026-73430
Use after free in Microsoft Windows Search Component allows an authorized attacker to elevate privileges over a network...
EUVD-2026-73320
Improper neutralization of special elements in output used by a downstream component 'injection' in SQL Server allows an unauthorized attacker to elevate privileges over a network...
CVE-2026-65669
CVE-2026-65669 is an elevation of privilege vulnerability in Microsoft SQL Server caused by improper neutralization of special elements in output used by a downstream component (injection). An unauthorized attacker can exploit it over a network with low complexity and no prior privileges , though...
EUVD-2026-73296
Stack-based buffer overflow in Microsoft Graphics Component allows an unauthorized attacker to execute code over a network...
CVE-2026-78439 Microsoft Office Graphics Component Remote Code Execution Vulnerability
...
CVE-2026-78439
CVE-2026-78439 is a stack-based buffer overflow in the Microsoft Office Graphics Component that allows an unauthorized attacker to execute code over a network, rated CVSS 3.1: 8.8 (High) . The attack vector is network-based with low complexity and no privileges required , though user interaction ...
CVE-2026-78439 Microsoft Office Graphics Component Remote Code Execution Vulnerability
...
EUVD-2026-73265
Double free in Microsoft Graphics Component allows an unauthorized attacker to execute code over a network...
CVE-2026-77493
CVE-2026-77493 is a double free flaw in the Microsoft Windows Graphics Component that allows an unauthorized, remote attacker to achieve code execution over the network with no privileges or user interaction. The CNA-assigned CVSS 3.1 score is 9.8 (CRITICAL) , with high impact to confidentiality,...