221045 matches found
CVE-2026-62894
CVE-2026-62894 describes a heap-based buffer overflow in the Windows DWM Core Library that allows an authenticated local attacker to elevate privileges. The vulnerability is documented across CVE/NVD listings with a CVSSv3.1 base score of 7.8 (HIGH), vector: LOCAL, LOW attack complexity, and NONE...
CVE-2026-62894 Windows DWM Core Library Elevation of Privilege Vulnerability
...
CVE-2026-62893 Windows Deployment Services TFTP Server Remote Code Execution Vulnerability
...
CVE-2026-62892 Capability Access Management Service (camsvc) Elevation of Privilege Vulnerability
...
EUVD-2026-56403
Use after free in Capability Access Management Service camsvc allows an authorized attacker to elevate privileges locally...
CVE-2026-62892 Capability Access Management Service (camsvc) Elevation of Privilege Vulnerability
...
CVE-2026-62892
CVE-2026-62892 is a use-after-free vulnerability in the Capability Access Management Service (camsvc) that could allow an authorized attacker to elevate privileges locally. The publicly available data identifies a local attack vector with high impact (confidentiality, integrity, and availability)...
CVE-2026-62889 Windows Secure Socket Tunneling Protocol (SSTP) Remote Code Execution Vulnerability
...
EUVD-2026-56402
Heap-based buffer overflow in Windows GDI+ allows an authorized attacker to execute code locally...
CVE-2026-62890
CVE-2026-62890 is a heap-based buffer overflow in Windows GDI+ that allows an authorized attacker to execute code locally. CVSS v3.1 base score 7.8 (HIGH) with LOCAL attack vector, requiring LOW privileges and no user interaction; impact to confidentiality, integrity, and availability is HIGH. No...
CVE-2026-62890 Windows GDI+ Elevation of Privilege Vulnerability
...
CVE-2026-62889 Windows Secure Socket Tunneling Protocol (SSTP) Remote Code Execution Vulnerability
...
EUVD-2026-56401
Double free in Windows Secure Socket Tunneling Protocol SSTP allows an unauthorized attacker to execute code over a network...
CVE-2026-62890 Windows GDI+ Elevation of Privilege Vulnerability
...
CVE-2026-62889
CVE-2026-62889 is a Windows SSTP remote code execution vulnerability caused by a double free in the SSTP implementation. The available descriptions from NVD and CVE records state that an unauthenticated attacker could exploit this over a network to execute arbitrary code. The CVSS 3.1 base score ...
EUVD-2026-56400
Stack-based buffer overflow in Windows DNS allows an unauthorized attacker to execute code over a network...
CVE-2026-62877 Windows Win32k Elevation of Privilege Vulnerability
...
CVE-2026-62878
CVE-2026-62878 is a Windows DNS Server remote code execution vulnerability caused by a stack-based buffer overflow. The NVD entry indicates a network-based exploit with a critical CVSS v3.1 base score of 9.8 (AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H). Impact is the ability for an unauthenticated, remo...
CVE-2026-62877
CVE-2026-62877 is a Windows Win32K vulnerability described as a stack-based buffer overflow that enables local privilege escalation by an authorized user. The affected component is the Windows Win32K subsystem; the root cause is a stack-based buffer overflow within Win32K code paths. The CVSS vec...