CVE-2026-68843

CVE-2026-68843 is a use-after-free vulnerability in Microsoft Office Word that allows an authorized attacker to disclose information locally. The flaw resides in Word's handling of memory objects, where freed memory is subsequently accessed, potentially leaking sensitive data to a local user with...

CVE-2026-68874

CVE-2026-68874 is an out-of-bounds read vulnerability in the Windows Program Compatibility Assistant Service that allows an authorized attacker with low privileges to disclose information over a network. The vulnerability requires user interaction and results in a High confidentiality impact with...

CVE-2026-68890

CVE-2026-68890 is a heap-based buffer overflow in Microsoft Standard XPS that allows an authorized local attacker to escalate privileges . The vulnerability is scored CVSS 3.1: 7.8 (HIGH) with a vector of AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H, reflecting low attack complexity, low privileges requir...

CVE-2026-69350

CVE-2026-69350 is a heap-based buffer overflow in Windows Overlay Filter that allows an authorized attacker to elevate privileges locally . The vulnerability requires high privileges and no user interaction, with a CVSS 3.1 score of 6.7 (MEDIUM) reflecting high impact to confidentiality, integrit...

CVE-2026-69360

CVE-2026-69360 is a heap-based buffer overflow in Microsoft Office Word that allows an unauthorized attacker to achieve remote code execution over a network. The attack requires user interaction (e.g., opening a malicious document) but no prior authentication. The assigned CVSS v3.1 score is 8.8 ...

CVE-2026-69475

CVE-2026-69475 is an elevation of privilege vulnerability in Windows Remote Desktop Services , caused by an untrusted pointer dereference . An authorized local attacker with low privileges can exploit this with low complexity and no user interaction to gain high impact across confidentiality, int...

CVE-2026-69482

Windows Error Reporting contains a local tampering vulnerability caused by the creation of a temporary file in a directory with insecure permissions , allowing an authorized attacker to tamper with data locally. The vulnerability is rated CVSS 7.1 (HIGH) with a vector of local attack, low complex...

CVE-2026-69566

CVE-2026-69566 is a heap-based buffer overflow in Windows NTFS that allows an unauthorized attacker to execute code with a physical attack . The assigned CVSS 3.1 score is 6.8 (Medium) with a vector of AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H, reflecting that exploitation requires physical access but ...

CVE-2026-69592

CVE-2026-69592 is a heap-based buffer overflow in the Windows Universal Disk Format File System (UDFS) driver that allows an authorized local attacker to escalate privileges . The vulnerability is rated CVSS 3.1: 7.8 (HIGH) with a vector of AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H, indicating local at...

CVE-2026-69616

Windows Remote Desktop Services is affected by an out-of-bounds read vulnerability that allows an authorized local attacker to disclose information (CVSS 3.1: 5.5 MEDIUM — local vector, low privileges required, high confidentiality impact, no integrity or availability impact). CISA's SSVC assessm...

CVE-2026-69735

A use after free vulnerability in the Windows Broadcast DVR User Service allows an authorized attacker to elevate privileges locally . The flaw resides in the service's memory management, where a freed object is referenced again, enabling a local user with low privileges to escalate to higher acc...

CVE-2026-69832

CVE-2026-69832 is an information disclosure vulnerability in Windows Win32K , a kernel-mode component handling graphics and input processing. Exposure of sensitive system information to an unauthorized control sphere allows a low-privilege local attacker to read sensitive data. The CVSS 3.1 score...

CVE-2026-70587

CVE-2026-70587 is an information disclosure vulnerability in Windows Remote Desktop Protocol (RDP) caused by improper null termination . An unauthenticated remote attacker can exploit this over a network to disclose sensitive information , with no user interaction required. The CVSS 3.1 base scor...

CVE-2026-71330

CVE-2026-71330 is an information disclosure vulnerability in Windows Services for NFS ONCRPC XDR Driver . An unauthorized network-based attacker with no privileges can expose sensitive system information over the network, resulting in a High confidentiality impact (CVSS 3.1: 7.5 ). CISA's SSVC as...

CVE-2026-71333

CVE-2026-71333 is a use-after-free vulnerability in Windows Remote Access Connection Manager that allows an authorized local attacker with low privileges to escalate privileges. The attack requires high complexity, no user interaction, and has a CVSS 3.1 score of 7.0 (HIGH) with high impact on co...

CVE-2026-71350

CVE-2026-71350 is a heap-based buffer overflow in the Windows Spaceport.sys driver that allows an unauthorized attacker to execute code on the target system. The vulnerability requires a physical attack vector (CVSS 3.1: AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H , base score 6.8 – MEDIUM ), meaning the...

CVE-2026-72996

CVE-2026-72996 is a heap-based buffer overflow in the Windows Biometric Service that allows an authorized, low-privilege attacker to escalate privileges locally. The vulnerability is rated CVSS 3.1 7.8 (HIGH) with the vector CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H, indicating low attack comp...

CVE-2026-73005

CVE-2026-73005 is a Use After Free vulnerability in Windows Authentication Methods that allows an authorized, locally privileged attacker to escalate privileges. The CVSS v3.1 score is 7.0 (HIGH) , reflecting a local attack vector with high complexity and high impact on confidentiality, integrity...

CVE-2026-73022

CVE-2026-73022 is a use-after-free vulnerability in Windows Modern Device Management (MDM) that allows an authorized attacker to escalate privileges locally . The CVSS 3.1 score is 7.0 (HIGH) with a local attack vector, high complexity, low privileges required, and no user interaction, resulting ...

CVE-2025-60717

CVE-2025-60717 is a use-after-free vulnerability in Windows Broadcast DVR User Service that allows an authorized user to gain elevated privileges locally. The connected sources (NVD, CVE lists, and EU/NCSc advisories) corroborate the affected component and privilege-elevation impact, with no publ...

CVE-2026-20823

CVE-2026-20823 is a Windows File Explorer information disclosure vulnerability that could allow a local attacker to view sensitive data. The CVE is mapped to Windows components handling File Explorer data exposure; its impact is confined to local access with low complexity and low privileges requ...

CVE-2026-56177

CVE-2026-56177 is a use-after-free vulnerability in Windows Server that allows an authorized attacker to achieve local privilege elevation . The flaw is scored CVSS 3.1: 7.8 (HIGH) with a vector of local attack, low complexity, low privileges required, and no user interaction, resulting in high i...

CVE-2026-56650

CVE-2026-56650 is a Windows Network File System (NFS) vulnerability. A heap-based buffer overflow in NFS allows an authenticated local attacker to escalate privileges. The CVE entry is supported by multiple sources (NVD/MSRC/CIRCL/NCSC) with consistent description and references. Microsoft has re...

CVE-2026-69341

CVE-2026-69341 is a use-after-free vulnerability in Windows Image Acquisition (WIA) that allows an authorized local attacker to escalate privileges. The flaw resides in a memory-management error where a freed object is referenced again, enabling privilege escalation when exploited locally. The CV...

CVE-2026-69460

CVE-2026-69460 is a use-after-free vulnerability in Windows Modern Device Management (MDM) that allows an authorized attacker to elevate privileges over a network. The CVSS 3.1 score is 7.1 (HIGH) , with a vector of AV:N/AC:H/PR:L/UI:R/S:U/C:H/I:H/A:H, indicating that exploitation requires a netw...

CVE-2026-69466

CVE-2026-69466 is a Time-of-Check Time-of-Use (TOCTOU) race condition in the Windows Kernel that allows a low-privileged local attacker to elevate privileges . The vulnerability carries a CVSS 3.1 score of 7.0 (High) , with high impact to confidentiality, integrity, and availability, though explo...

CVE-2026-69474

This vulnerability is a use after free in Windows Overlay Filter that allows an authorized attacker to disclose information over a network. The CVSS 3.1 base score is 4.8 (MEDIUM) , requiring network access, high complexity, low privileges, and user interaction, with a high impact on confidential...

CVE-2026-69489

A heap-based buffer overflow in the Windows Biometric Service allows a low-privilege local attacker to escalate privileges. The flaw requires no user interaction and is rated CVSS 7.8 (HIGH) with high impact on confidentiality, integrity, and availability. No specific affected Windows version or ...

CVE-2026-69532

CVE-2026-69532 is an out-of-bounds read vulnerability in Windows NTFS that allows an authorized attacker to locally elevate privileges . The attack vector is local, complexity is low, and it requires low privileges with no user interaction. Microsoft rates it CVSS 3.1: 7.8 (HIGH) with high impact...

CVE-2026-69563

CVE-2026-69563 is a heap-based buffer overflow in the Windows Program Compatibility Assistant Service that allows an authorized attacker to achieve local privilege escalation . The vulnerability carries a CVSS 3.1 score of 7.0 (HIGH) , with a vector of AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H, indicat...

CVE-2026-69567

CVE-2026-69567 is a use-after-free vulnerability in Windows NTFS (New Technology File System) that allows a locally authenticated attacker with low privileges to elevate privileges on the affected system. The CVSS v3.1 score is 7.0 (HIGH) , reflecting a local attack vector with high complexity, n...

CVE-2026-69853

CVE-2026-69853 is an information disclosure vulnerability in Windows Win32K caused by use of an uninitialized resource. An authorized local attacker with low privileges can exploit it to disclose sensitive information , with no impact on integrity or availability. The CVSS 3.1 score is 4.7 (MEDIU...

CVE-2026-69876

CVE-2026-69876 is a use after free vulnerability in Windows DHCP Server that allows an authorized attacker to execute code over an adjacent network . The Microsoft CVSS 3.1 score is 8.0 (HIGH) , with a vector of AV:A/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H, indicating low attack complexity and low require...

CVE-2026-71329

CVE-2026-71329 is a heap-based buffer overflow in Windows NTFS that allows an unauthorized attacker to execute code via a physical attack vector. The vulnerability requires low complexity and no privileges or user interaction, but demands physical access to the target system. The CVSS 3.1 base sc...

CVE-2026-72941

CVE-2026-72941 is a heap-based buffer overflow in the Windows Biometric Service that allows an authorized attacker with local and low-privilege access to achieve local privilege escalation . The assigned CVSS 3.1 score is 7.8 (HIGH) with a vector of AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H , indicatin...

CVE-2026-77888

CVE-2026-77888 is a type confusion vulnerability in Windows DHCP Server that allows an unauthorized attacker to cause denial of service over a network. The flaw arises from accessing a resource using an incompatible type. Per the CNA (Microsoft), the CVSS 3.1 base score is 7.5 (HIGH) , with a net...

CVE-2026-77892

CVE-2026-77892 is a privilege escalation vulnerability in Windows Boot Manager . An unauthorized attacker with physical access to the system can elevate privileges, with high impact on confidentiality, integrity, and availability (CVSS 3.1: 6.8 MEDIUM ). The vulnerability requires no prior privil...

CVE-2026-78447

CVE-2026-78447 is a heap-based buffer overflow in the Windows Biometric Service component, which allows an authorized local attacker to achieve privilege escalation . Microsoft rates the vulnerability as HIGH severity with a CVSS v3.1 score of 7.8 (vector: AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H), in...

CVE-2026-78448

CVE-2026-78448 is a heap-based buffer overflow in Windows Biometric Service that allows an authorized attacker to achieve local privilege escalation . The CVSS v3.1 score is 7.8 (HIGH) with a vector of AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H, reflecting that a low-privileged local attacker can compro...

CVE-2025-62208

CVE-2025-62208 affects Windows License Manager. The issue involves insertion of sensitive information into a log file, enabling an authorized local attacker to disclose data. Impact is local information disclosure; CVSS from Microsoft indicates low access/privilege requirements with local access,...

CVE-2026-68841

Windows NTFS is affected by a heap-based buffer overflow that allows an authorized, local attacker with low privileges to elevate privileges without user interaction. The vulnerability is classified with a CVSS 3.1 score of 7.8 (HIGH) — AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H — indicating high impact...

CVE-2026-68881

CVE-2026-68881 is an out-of-bounds read in Microsoft Standard XPS that allows an authorized local attacker to disclose information . The flaw carries a CVSS v3.1 score of 5.5 (Medium) — local attack vector, low complexity, low privileges required, no user interaction, with high confidentiality im...

CVE-2026-69346

CVE-2026-69346 is a heap-based buffer overflow in Windows Print Spooler Components that allows an authorized attacker to elevate privileges over a network. The flaw carries a CVSS 3.1 score of 8.0 (HIGH) with the vector AV:N/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H, meaning exploitation requires low privil...

CVE-2026-69372

CVE-2026-69372 is an out-of-bounds read in Windows Network File System (NFS) that allows an authorized attacker (low privileges) to trigger a denial of service over a network. The attack vector is network-based with low complexity, but user interaction is required . CVSS v3.1 base score is 5.7 (M...

CVE-2026-69457

An out-of-bounds read in the Windows USB Driver allows a local, authorized attacker with low privileges and no user interaction to disclose information (high confidentiality impact, no integrity or availability impact). The vulnerability is rated CVSS 3.1 5.5 (MEDIUM) with a vector of AV:L/AC:L/P...

CVE-2026-69517

CVE-2026-69517 is a use-after-free vulnerability in Windows Wireless Networking that allows an authorized local attacker to elevate privileges . The CVSS 3.1 score is 7.0 (HIGH) with a vector of AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H, indicating a local attack with high complexity, low required priv...

CVE-2026-69541

A heap-based buffer overflow in the Virtual Hard Disk (VHD) Miniport Driver allows an authorized (low-privilege) attacker to achieve local privilege escalation on an affected system. The vulnerability is scored CVSS 3.1: 7.8 (High) with impact to confidentiality, integrity, and availability all r...

CVE-2026-69581

CVE-2026-69581 is a use-after-free vulnerability in the Windows Device Association Service that allows an authorized, locally authenticated attacker to elevate privileges . The attack requires low privileges , involves high complexity , and needs no user interaction , with unchanged scope but hig...

CVE-2026-69593

A heap-based buffer overflow in the Windows Biometric Service allows an authorized local attacker with low privileges to elevate privileges on the affected system. The vulnerability requires no user interaction and results in High impact across confidentiality, integrity, and availability, yieldi...

CVE-2026-69838

CVE-2026-69838 is a use-after-free vulnerability in Windows Print Spooler Components that allows an authorized attacker to achieve local privilege escalation . The attack vector is local, requires low privileges, and has high complexity with no user interaction needed. The CVSS 3.1 score is 7.0 (...