CVE-2026-62755

CVE-2026-62755 affects the Windows DHCP Client. The vulnerability is a stack-based buffer overflow in the DHCP client component, leading to local privilege escalation for an authorized attacker. The CVSS 3.1 vector indicates Local attack, Low attack complexity, Low privileges required, with no us...

CVE-2026-62758

CVE-2026-62758 is a heap-based buffer overflow in Windows Remote Access Connection Manager that permits a locally authenticated attacker to elevate privileges. Affected component: RASMAN service on Windows. Root cause: heap overflow enabling arbitrary code execution with HIGH impact on confidenti...

CVE-2026-62783 Windows Remote Access Connection Manager Elevation of Privilege Vulnerability

...

CVE-2026-62754 Windows Kerberos Elevation of Privilege Vulnerability

...

CVE-2026-62783 Windows Remote Access Connection Manager Elevation of Privilege Vulnerability

...

CVE-2026-62754 Windows Kerberos Elevation of Privilege Vulnerability

...

EUVD-2026-56373

Heap-based buffer overflow in Windows Kerberos allows an authorized attacker to elevate privileges locally...

EUVD-2026-56374

Heap-based buffer overflow in Windows Remote Access Connection Manager allows an authorized attacker to elevate privileges locally...

CVE-2026-62754

CVE-2026-62754 describes a heap-based buffer overflow in Windows Kerberos that allows an authorized attacker to achieve local privilege escalation. The flaw is triggered within the Kerberos-related code path, enabling elevation of privileges on the affected system. The available documents confirm...

CVE-2026-62783

CVE-2026-62783 describes a heap-based buffer overflow in Windows Remote Access Connection Manager that allows an authenticated, local attacker to escalate privileges. Affected component: Windows Remote Access Connection Manager (RAS). Underlying issue: heap overflow leading to local code executio...

CVE-2026-62750 Windows HTTP Protocol Stack Tampering Vulnerability

...

CVE-2026-62750

CVE-2026-62750 affects Windows HTTP Protocol Stack (http.sys). A partial string comparison vulnerability in the stack enables an unauthenticated attacker on an adjacent network to perform tampering. The CVSS vector (AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N) indicates adjacent access with no privileges...

EUVD-2026-56372

Partial string comparison in Windows HTTP Protocol Stack allows an unauthorized attacker to perform tampering over an adjacent network...

CVE-2026-62750 Windows HTTP Protocol Stack Tampering Vulnerability

...

CVE-2026-62745 Windows DHCP Server Information Disclosure Vulnerability

...

EUVD-2026-56370

Integer underflow wrap or wraparound in Windows DHCP Server allows an unauthorized attacker to disclose information over an adjacent network...

CVE-2026-62747

CVE-2026-62747 is a heap-based buffer overflow in Windows Device Association Service that enables a locally authenticated attacker to elevate privileges. Exploit details are not provided in the connected documents, and no specific patch/version is listed here; CVSS v3.1 base score is 7.8 ( HIGH )...

CVE-2026-62747 Windows Device Association Service Elevation of Privilege Vulnerability

...

EUVD-2026-56371

Heap-based buffer overflow in Windows Device Association Service allows an authorized attacker to elevate privileges locally...

CVE-2026-62745

Summary: CVE-2026-62745 is an information-disclosure vulnerability in Windows DHCP Server caused by an integer underflow (wrap/wraparound). The issue enables an unauthenticated attacker on an adjacent network to potentially disclose information. CVSS 3.1 base score is 6.5 (Medium) with attack vec...