221024 matches found
CVE-2026-62732
CVE-2026-62732 is a heap-based buffer overflow in the Windows Telephony Service that enables a locally authenticated attacker to achieve privilege elevation. The vulnerability affects the Telephony Service component and is characterized by a local exploit path with low privileges required and no ...
CVE-2026-62730 Windows Wired AutoConfig Service Information Disclosure Vulnerability
...
EUVD-2026-56644
Out-of-bounds read in Windows Win32K allows an authorized attacker to disclose information locally...
EUVD-2026-56645
Buffer over-read in Windows Wired AutoConfig Service allows an authorized attacker to disclose information locally...
CVE-2026-62743
CVE-2026-62743 describes an out-of-bounds read in Windows Win32K that can lead to local information disclosure by an authorized attacker. The vulnerability affects the Win32K component and is exploitable with low privileges and no user interaction, with a local attack vector. The CVSS3.1 base sco...
CVE-2026-62743 Win32k Information Disclosure Vulnerability
...
CVE-2026-62730
CVE-2026-62730 describes a buffer over-read in the Windows Wired AutoConfig Service that can disclose information locally. The issue is exploitable by an authorized, low-privilege local attacker (LOCAL attack vector, LOW privileges, no user interaction) with a CVSS v3.1 base score of 5.5 (HIGH co...
CVE-2026-62730 Windows Wired AutoConfig Service Information Disclosure Vulnerability
...
CVE-2026-62733 Windows Win32k Elevation of Privilege Vulnerability
...
EUVD-2026-56642
Out-of-bounds read in Windows Win32K allows an authorized attacker to elevate privileges locally...
CVE-2026-62733 Windows Win32k Elevation of Privilege Vulnerability
...
CVE-2026-62733
CVE-2026-62733 is an out-of-bounds read in Windows Win32K that allows a locally authenticated attacker to elevate privileges. The vulnerability affects Win32K components and yields a Local Privilege Escalation (LPE) with HIGH impact to confidentiality, integrity, and availability (per CVSS 3.1: A...
EUVD-2026-56640
Use after free in Windows Telephony Service allows an authorized attacker to elevate privileges locally...
CVE-2026-62726
CVE-2026-62726 is a Windows vulnerability described as a use-after-free in the Windows Telephony Service that enables local privilege escalation by an authorized user. The CVSS 3.1 vector (LOCAL, HIGH impact to confidentiality, integrity, and availability) yields a base score of 7.0. The provided...
EUVD-2026-56641
Time-of-check time-of-use toctou race condition in Windows Common Log File System Driver allows an authorized attacker to elevate privileges locally...
CVE-2026-62726 Windows Telephony Service Elevation of Privilege Vulnerability
...
CVE-2026-62728 Windows Common Log File System Driver Elevation of Privilege Vulnerability
...
CVE-2026-62728 Windows Common Log File System Driver Elevation of Privilege Vulnerability
...
CVE-2026-62726 Windows Telephony Service Elevation of Privilege Vulnerability
...
CVE-2026-62728
The vulnerability CVE-2026-62728 affects Windows systems via the Common Log File System (CLFS) Driver. It is a time-of-check time-of-use (TOCTOU) race condition that allows an authorized, local attacker to elevate privileges. The CVSSv3.1 metrics indicate a Local attack, High impact on confidenti...