109 matches found
CVE-2026-69322
A double free vulnerability in the Microsoft Windows Search Component allows an authorized, network-based attacker to elevate privileges . The CVSS 3.1 score is 8.0 (High) , with a network attack vector, low privileges required, and user interaction required, impacting confidentiality, integrity,...
EUVD-2026-73021
Incorrect type conversion or cast in Microsoft Windows Search Component allows an authorized attacker to elevate privileges locally...
CVE-2026-69585
CVE-2026-69585 affects the Microsoft Windows Search Component , where an incorrect type conversion or cast allows an authorized attacker to perform local privilege escalation . The vulnerability scores 7.8 (HIGH) under CVSS 3.1, with low attack complexity, low privileges required, no user interac...
CVE-2026-69608
CVE-2026-69608 is a local elevation of privilege vulnerability in the Microsoft Windows Search Component , caused by an integer overflow or wraparound . An authorized (low-privilege) attacker can exploit it locally without user interaction to achieve high impact across confidentiality, integrity,...
EUVD-2026-73019
Missing authentication for critical function in Microsoft Windows Search Component allows an authorized attacker to perform tampering locally...
CVE-2026-69554
CVE-2026-69554 is a missing authentication vulnerability in the Microsoft Windows Search Component , allowing a local, low-privilege attacker to perform tampering with high integrity impact (CVSS v3.1: 5.5 MEDIUM , AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N). No confidentiality or availability impact is...
EUVD-2026-73000
Insertion of sensitive information into externally-accessible file or directory in Microsoft Windows Search Component allows an authorized attacker to disclose information over a network...
CVE-2026-69507
CVE-2026-69507 affects the Microsoft Windows Search Component . The vulnerability stems from insertion of sensitive information into an externally-accessible file or directory, allowing an authorized attacker to disclose information over a network. The CNA-assigned CVSS 3.1 score is 5.7 (MEDIUM) ...
Microsoft Windows Search Component Elevation of Privilege Vulnerability
Integer overflow or wraparound in Microsoft Windows Search Component allows an authorized attacker to elevate privileges locally...
Microsoft Windows Search Component Information Disclosure Vulnerability
Insertion of sensitive information into externally-accessible file or directory in Microsoft Windows Search Component allows an authorized attacker to disclose information over a network...
Microsoft Windows Search Component Elevation of Privilege Vulnerability
Absolute path traversal in Microsoft Windows Search Component allows an authorized attacker to elevate privileges locally...
Microsoft Windows Search Component Tampering Vulnerability
Missing authorization in Microsoft Windows Search Component allows an authorized attacker to perform tampering locally...
Microsoft Windows Search Component Elevation of Privilege Vulnerability
Double free in Microsoft Windows Search Component allows an authorized attacker to elevate privileges over a network...
Microsoft Windows Search Component Elevation of Privilege Vulnerability
Use after free in Microsoft Windows Search Component allows an authorized attacker to elevate privileges over a network...
Microsoft Windows Search Component Elevation of Privilege Vulnerability
Use after free in Microsoft Windows Search Component allows an authorized attacker to elevate privileges locally...
Microsoft Windows Search Component Information Disclosure Vulnerability
Out-of-bounds read in Microsoft Windows Search Component allows an authorized attacker to disclose information locally...
Microsoft Windows Search Component Tampering Vulnerability
Missing authentication for critical function in Microsoft Windows Search Component allows an authorized attacker to perform tampering locally...
Microsoft Windows Search Component Elevation of Privilege Vulnerability
Incorrect type conversion or cast in Microsoft Windows Search Component allows an authorized attacker to elevate privileges locally...
PT-2026-87527
Insertion of sensitive information into externally-accessible file or directory in Microsoft Windows Search Component allows an authorized attacker to disclose information over a network...
PT-2026-87480
Name of the Vulnerable Software and Affected Versions Microsoft Windows Search Component affected versions not specified Description Missing authorization in the Microsoft Windows Search Component allows an authorized attacker to perform local tampering, which can affect the system. Recommendatio...