255728 matches found
CVE-2026-69650
The Windows Key Distribution Center is vulnerable to an elevation of privilege flaw due to the improper verification of cryptographic signatures . This vulnerability allows an authorized attacker to achieve local privilege escalation. The CVSS 3.1 score is 7.8 (HIGH) , with a LOCAL attack vector ...
CVE-2026-81969
The Windows Server Update Service is affected by a vulnerability involving insufficient granularity of access control . This flaw allows an authorized attacker to perform a local privilege escalation . The vulnerability is characterized by a HIGH base severity score of 7.8 and is associated with ...
CVE-2026-81964
The Windows Update Orchestrator Service is affected by a security feature bypass vulnerability. This issue is caused by the use of hard-coded credentials , which allows an authorized attacker to perform the bypass locally . The vulnerability is associated with CWE-798 . While the impact on integr...
CVE-2026-72955
A Use after free vulnerability in the Windows Application Compatibility Cache allows an authorized attacker to achieve local privilege elevation . The vulnerability is categorized under CWE-416 and has a CVSS 3.1 base score of 7.0 . While the root cause is identified as a use after free error, sp...
EUVD-2026-99274
Use after free in Windows iSCSI allows an unauthorized attacker to execute code over a network...
CVE-2026-69387
A Use after free vulnerability exists in Windows Error Reporting , which could allow an authorized attacker to elevate privileges locally . The vulnerability is categorized with a CVSS 3.1 base score of 7.0 (High) . No specific exploit details or remediation steps are provided in the documents be...
CVE-2026-69721
An out-of-bounds read vulnerability exists in Windows iSCSI , which could allow an authorized attacker to disclose information locally . The vulnerability is associated with CWE-125 and has been assigned a CVSS v3.1 base score of 5.5 (Medium), reflecting high confidentiality impact with low compl...
CVE-2026-72934
A Use after free vulnerability exists in the Windows Program Compatibility Assistant Service . This flaw allows an authorized attacker to achieve local privilege escalation . The vulnerability is confirmed with a HIGH base severity score of 7.0. No specific technical root cause details or remedia...
CVE-2026-69354
A heap-based buffer overflow exists in Windows Error Reporting , which can be exploited by an authorized attacker to achieve local privilege escalation . The vulnerability is associated with CWE-122 (Heap-based Buffer Overflow) and CWE-190 (Integer Overflow or Wraparound). Practical exploitation ...
CVE-2026-69644
A vulnerability in Windows iSCSI allows an authorized attacker to disclose sensitive system information locally. This issue is characterized as an exposure of information to an unauthorized control sphere (CWE-497). The base severity is medium (5.5), requiring local access and low privileges to e...
CVE-2026-69883
A Use after free vulnerability in Windows iSCSI allows an unauthorized attacker to achieve Remote Code Execution (RCE) over a network. The vulnerability carries a CRITICAL base score of 9.8 , impacting confidentiality, integrity, and availability. No specific exploit details or remediation steps ...
CVE-2026-70580
A missing authentication vulnerability exists in a critical function within Windows Credential Guard . This flaw allows an authorized attacker to perform spoofing locally . The vulnerability has a HIGH base severity score of 8.8 and is categorized under CWE-306 . Official remediation is available...
CVE-2026-70273
A Use after free vulnerability exists in the Windows Win32 Kernel Subsystem . This flaw allows an authorized attacker to achieve local privilege escalation . While the vulnerability is confirmed with a CVSS3.1 base score of 7.0 (High) , the provided documents do not specify the exact root cause, ...
CVE-2026-70285
A Heap-based buffer overflow exists in the Windows Win32 Kernel Subsystem , which could allow an authorized attacker to elevate privileges locally . While the specific affected versions and remediation steps are not detailed in the provided documents, the vulnerability is confirmed with a High ba...
CVE-2026-70272
A use after free vulnerability in Windows Installer allows an authorized attacker to achieve local privilege escalation . The vulnerability's base severity is rated as High (CVSS 3.1 score of 7.0), with potential impacts on confidentiality, integrity, and availability. No specific exploit details...
CVE-2026-68836
A heap-based buffer overflow exists in Windows kernel32.dll , which can be exploited by an authorized attacker to achieve local privilege escalation . The vulnerability impacts the core Windows operating system. Documentation indicates that an official fix is available, but specific patch version...
CVE-2026-69705
A critical out-of-bounds write vulnerability in Windows iSCSI allows an unauthorized attacker to achieve remote code execution over a network. The vulnerability is rated with a CVSS score of 9.80 , indicating a high severity where no prior authentication or user interaction is required. Systems c...
CVE-2026-70278
A Heap-based buffer overflow exists in Microsoft Windows Media Foundation . This vulnerability allows an authorized attacker to achieve local privilege escalation . While the specific component or function is not detailed in the provided documents, the impact is categorized as high for confidenti...
CVE-2026-69634
A heap-based buffer overflow in Windows iSCSI allows an unauthorized attacker to achieve remote code execution over a network. This vulnerability is classified as CRITICAL with a CVSSv3.1 score of 9.80 , indicating a high risk to confidentiality, integrity, and availability. For actual abuse to o...