255739 matches found
CVE-2026-100216
Stack-based buffer overflow in Windows Storage allows an authorized attacker to elevate privileges locally...
CVE-2026-100203
Heap-based buffer overflow in Windows Update Service allows an authorized attacker to elevate privileges locally...
CVE-2026-100202
Use after free in Windows Message Queuing Queue Manager allows an unauthorized attacker to execute code over a network...
CVE-2026-100201
Heap-based buffer overflow in Windows Client License Service allows an authorized attacker to elevate privileges locally...
CVE-2026-100200
Use after free in Windows Update Service allows an authorized attacker to elevate privileges locally...
CVE-2026-108463
A vulnerability in Windows SmartScreen allows an unauthorized attacker to bypass a security feature over a network due to the improper resolution of path equivalence (CWE-41). The impact is rated as HIGH for confidentiality, integrity, and availability. No specific exploitative code or remediatio...
CVE-2026-108471
Windows Virtualization-Based Security (VBS) Enclave is susceptible to an untrusted pointer dereference vulnerability. This flaw allows an authorized attacker to achieve local privilege escalation . The vulnerability is characterized by a high severity base score of 8.8 , with significant impacts ...
CVE-2026-108133
A release of invalid pointer or reference vulnerability exists in Windows Modern Device Management (MDM) . This flaw allows an authorized attacker to achieve local privilege escalation . The vulnerability is categorized under CWE-763 and carries a High base severity score of 7.8. No specific expl...
CVE-2026-108134
A use after free vulnerability in Windows Autopilot allows an authorized attacker to perform a local privilege escalation . The vulnerability is associated with CWE-416 and has a CVSS 3.1 base score of 7.0 (High) . The documentation does not provide specific details regarding the underlying compo...
CVE-2026-108135
A vulnerability exists in the Windows Backup Engine due to improper link resolution before file access (link following). This flaw allows an authorized attacker to perform a local privilege escalation . The CVSS 3.1 score is 7.0 (High) , with the vector CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:...
CVE-2026-108136
A Use after free vulnerability exists in the Microsoft Windows Search Component . This flaw allows an authorized attacker to achieve local privilege elevation . The vulnerability is classified with a CVSS 3.1 base score of 7.8, indicating a High severity. No specific exploit code or in-the-wild e...
EUVD-2026-100456
Untrusted pointer dereference in Windows Virtualization-Based Security VBS Enclave allows an authorized attacker to elevate privileges locally...
CVE-2026-108130
A heap-based buffer overflow exists in the Windows Virtualization-Based Security (VBS) Enclave . This vulnerability allows an authorized attacker to achieve local privilege elevation . No specific exploit information or remediation details are provided in the documents beyond the confirmation of ...
CVE-2026-108132
A Double free vulnerability exists in Windows Kerberos that allows an authorized attacker to achieve local privilege elevation . The vulnerability is associated with CWE-415 . While no specific exploit links or internal component paths are provided in the documents, the vulnerability has a High b...
EUVD-2026-100431
Double free in Windows Internet Information Services allows an unauthorized attacker to deny service over a network...
CVE-2026-97830
A double free vulnerability in Windows Internet Information Services allows an unauthorized attacker to perform a denial of service over a network. The vulnerability is associated with CWE-415 and has a CVSS 3.1 base score of 7.5 (High). No specific exploit information or direct remediation steps...
EUVD-2026-100416
Heap-based buffer overflow in Windows Text Shaping allows an unauthorized attacker to execute code over a network...
CVE-2026-97814
A heap-based buffer overflow vulnerability exists in Windows Text Shaping , which could allow an unauthorized attacker to achieve remote code execution over a network. The vulnerability has a CVSS score of 9.80 and is characterized by low attack complexity, requiring no privileges or user interac...
CVE-2026-97815
A heap-based buffer overflow vulnerability exists in Windows Error Reporting , which could allow an unauthorized attacker to achieve remote code execution over a network. The vulnerability has a CVSS v3.1 score of 9.8 (CRITICAL), indicating a high risk of impact on confidentiality, integrity, and...