CVE-2026-62747 Windows Device Association Service Elevation of Privilege Vulnerability

...

EUVD-2026-56368

Heap-based buffer overflow in Windows HTTP.sys allows an authorized attacker to elevate privileges locally...

CVE-2026-62742 Windows DHCP Server Information Disclosure Vulnerability

...

CVE-2026-62742 Windows DHCP Server Information Disclosure Vulnerability

...

CVE-2026-62739

CVE-2026-62739 is a Windows component (HTTP.sys) vulnerability described as a heap-based buffer overflow that allows an authenticated, local attacker to achieve privilege escalation. The CVSS 3.1 assessment indicates local access with low attack complexity and low privileges required, but with hi...

CVE-2026-62742

CVE-2026-62742 describes an integer underflow in the Windows DHCP Server that enables an unauthenticated attacker on an adjacent network to disclose information. The affected component is the Windows DHCP Server service, and the underlying cause is a wrap/wraparound underflow. The documented impa...

CVE-2026-62739 Windows HTTP.sys Elevation of Privilege Vulnerability

...

CVE-2026-62739 Windows HTTP.sys Elevation of Privilege Vulnerability

...

EUVD-2026-56369

Integer underflow wrap or wraparound in Windows DHCP Server allows an unauthorized attacker to disclose information over an adjacent network...

EUVD-2026-56366

Heap-based buffer overflow in Windows HTTP.sys allows an authorized attacker to elevate privileges locally...

EUVD-2026-56367

Untrusted pointer dereference in Windows Kernel allows an authorized attacker to elevate privileges locally...

CVE-2026-62737 Windows Kernel Elevation of Privilege Vulnerability

...

CVE-2026-62735

CVE-2026-62735 is a Windows HTTP.sys vulnerability described as a heap-based buffer overflow that enables an authorized, locally interacting attacker to elevate privileges. Evidence across sources confirms a local-exploit path with high impact (C/H/I/A), CVSS 3.1 vector: LOCAL, LOW complexity, LO...

CVE-2026-62737

CVE-2026-62737 describes a local privilege escalation in Windows 11 kernel via untrusted pointer dereference in the ExecutionContext.sys path. Affected component: Windows kernel driver; vulnerability arises from insufficient validation of a kernel function pointer before dispatch to a worker thre...

CVE-2026-62735 Windows HTTP.sys Elevation of Privilege Vulnerability

...

CVE-2026-62735 Windows HTTP.sys Elevation of Privilege Vulnerability

...

CVE-2026-62737 Windows Kernel Elevation of Privilege Vulnerability

...

EUVD-2026-56365

Heap-based buffer overflow in Windows HTTP.sys allows an authorized attacker to elevate privileges locally...

CVE-2026-62740

CVE-2026-62740 describes a vulnerability in the Windows Imaging Component where an uninitialized resource can lead to local information disclosure by an authorized attacker. The issue is reported with a CVSS v3.1 base score of 5.5 (Medium), vector: Local, low attack complexity, and low privileges...

CVE-2026-62753

CVE-2026-62753 is a heap-based buffer overflow in Windows HTTP.sys that allows local privilege escalation by an authorized attacker. Affected: Windows HTTP.sys; Impact: local high-severity compromise of confidentiality, integrity, and availability. CVSS: 7.0 (3.1) with LOCAL, LOW privileges requi...