CVE-2026-62759

Windows Netlogon is affected by an authentication bypass by spoofing vulnerability (CVE-2026-62759). An unauthorized attacker on an adjacent network can perform spoofing, potentially leading to high impact on confidentiality, integrity, and availability. The CVSS 3.1 score is 7.5 (HIGH) with an a...

CVE-2026-69349

CVE-2026-69349 is an information disclosure vulnerability in Windows Management Instrumentation (WMI) caused by use of an uninitialized resource . An authorized attacker can exploit it over a network to disclose information, with high confidentiality impact but no integrity or availability impact...

CVE-2026-69352

CVE-2026-69352 is a heap-based buffer overflow in Windows Biometric Service that allows an authorized local attacker to elevate privileges . The vulnerability is rated HIGH (CVSS 7.8) with a vector of AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H , meaning an attacker with low privileges and no user intera...

CVE-2026-69461

CVE-2026-69461 is a stack-based buffer overflow in Windows NTFS that allows an unauthorized, unprivileged attacker to achieve remote code execution over a network. The vulnerability requires user interaction but no prior authentication, yielding a CVSS v3.1 score of 8.8 (HIGH) with full impact on...

CVE-2026-69467

CVE-2026-69467 is a stack-based buffer overflow in the Microsoft Graphics Component that allows an authorized attacker to elevate privileges locally . The CVSS 3.1 score is 7.8 (HIGH) with a vector of local attack, low complexity, low privileges required, and high impact on confidentiality, integ...

CVE-2026-69539

CVE-2026-69539 is a use after free vulnerability in Windows Remote Desktop Services that allows an authorized attacker to achieve remote code execution over a network. The CVSS v3.1 base score is 7.5 (HIGH) , with a vector of AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H, indicating that exploitation requi...

CVE-2026-69584

CVE-2026-69584 affects the Windows USB Video Driver , where an integer overflow or wraparound flaw allows an authorized attacker to elevate privileges locally . The Microsoft CNA assigns a CVSS 3.1 score of 7.8 (HIGH) with vector AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H, indicating that low-privilege ...

CVE-2026-69687

CVE-2026-69687 is an integer underflow (wrap or wraparound) vulnerability in the Windows USB Audio Class driver (usbaudio.sys). An authorized local attacker can exploit this flaw to elevate privileges , achieving high impact on confidentiality, integrity, and availability (CVSS 3.1: 7.8 HIGH ; ve...

CVE-2026-69826

CVE-2026-69826 is a heap-based buffer overflow in the Windows Biometric Service that allows an authorized attacker to achieve privilege escalation over a network . The CVSS 3.1 score is 8.0 (HIGH) with vector AV:N/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H, indicating an attacker with low privileges and user...

CVE-2026-69846

An integer overflow or wraparound in Windows Secure Kernel Mode allows an authorized attacker to elevate privileges locally. The flaw requires high privileges and low attack complexity with no user interaction, but changes scope to affect the full system with high impact on confidentiality, integ...

CVE-2026-70572

CVE-2026-70572 is an integer overflow or wraparound vulnerability in Windows Biometric Service that allows a locally authenticated attacker to elevate privileges . The root cause lies in improper handling of integer operations within the biometric service component. The vulnerability carries a CV...

CVE-2026-73000

CVE-2026-73000 is a heap-based buffer overflow in the Windows Biometric Service that allows an authorized local attacker to elevate privileges . The CVSS 3.1 score is 7.8 (HIGH) with a vector of local attack, low complexity, low privileges required, no user interaction, and high impact to confide...

CVE-2026-73012

CVE-2026-73012 is a heap-based buffer overflow in Windows Management Services that allows an authorized (low-privilege) attacker to elevate privileges over a network . The vulnerability is rated CVSS 8.8 (HIGH) with vector AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H, indicating low attack complexity and ...

CVE-2026-77905

CVE-2026-77905 is a use-after-free vulnerability in Windows Management Instrumentation (WMI) that allows an authorized attacker to escalate privileges locally. The flaw carries a CVSS 3.1 score of 7.0 (HIGH) , with a local attack vector, high complexity, low privileges required, and no user inter...

CVE-2026-83498

CVE-2026-83498 affects the Windows Virtualization-Based Security (VBS) Enclave and is caused by an untrusted pointer dereference , allowing an authorized local attacker with low privileges to escalate privileges without user interaction. The vulnerability carries a CVSS 3.1 score of 7.8 (HIGH) wi...

CVE-2026-83989

CVE-2026-83989 is an out-of-bounds read in the Windows Services for NFS ONCRPC XDR Driver that allows an unauthenticated, remote attacker to cause a denial of service over a network. The vulnerability is rated CVSS 7.5 (HIGH) with a network attack vector, low complexity, no privileges or user int...

CVE-2026-85360

A use after free flaw in the Windows Kernel allows a local, authenticated attacker to elevate privileges . The vulnerability is scored CVSS 3.1 7.0 (HIGH) with a local attack vector , high attack complexity , low privileges required , and no user interaction , resulting in high impact to confiden...

CVE-2026-62801

CVE-2026-62801 is a path traversal vulnerability in Windows PowerShell that allows an unauthorized, remote attacker to bypass a security feature. The improper limitation of a pathname to a restricted directory means an attacker can reference files or resources outside the intended directory. The ...

CVE-2026-68851

CVE-2026-68851 is a buffer over-read vulnerability in Windows NTFS that allows an authorized local attacker to disclose information . The CVSS 3.1 score is 5.5 (Medium) with a local attack vector, low complexity, low privileges required, and no user interaction; impact is limited to high confiden...

CVE-2026-69298

CVE-2026-69298 is an elevation of privilege vulnerability in the Windows Biometric Service , caused by an integer overflow or wraparound . An attacker with low-level local privileges can exploit this to gain higher system privileges, with high impact on confidentiality, integrity, and availabilit...

CVE-2026-69847

CVE-2026-69847 is a heap-based buffer overflow in Windows DHCP Server that allows an authorized attacker to execute code over an adjacent network. The flaw resides in how the DHCP Server processes input, leading to memory corruption that can be leveraged for remote code execution . The vulnerabil...

CVE-2026-72990

CVE-2026-72990 is a heap-based buffer overflow in Windows Biometric Service that allows an authorized attacker to achieve local privilege escalation . The vulnerability requires low privileges, no user interaction, and has low attack complexity, yet results in high impact across confidentiality, ...

CVE-2026-72997

CVE-2026-72997 is a heap-based buffer overflow in Windows Biometric Service that allows an authorized attacker with low privileges and no user interaction to escalate privileges locally. The vulnerability is rated CVSS 3.1: 7.8 (HIGH) with high impact to confidentiality, integrity, and availabili...

CVE-2026-77489

CVE-2026-77489 is a null pointer dereference in Windows Biometric Service that allows an authorized local attacker to elevate privileges. The flaw carries a CVSS 3.1 score of 7.8 (HIGH) with a vector of AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H, meaning exploitation requires only low privileges and no ...

CVE-2026-83940

CVE-2026-83940 is a use after free vulnerability in the Windows Device Association Service that allows an authorized local attacker to elevate privileges . The CVSS 3.1 base score is 7.0 (HIGH) with a high attack complexity , low privileges required , and high impact across confidentiality, integ...

CVE-2026-83975

Windows Biometric Service is affected by a heap-based buffer overflow that allows a locally authenticated attacker with low privileges to escalate to higher privilege. The vulnerability requires no user interaction and has low attack complexity , resulting in a CVSS 3.1 score of 7.8 (HIGH) with h...

CVE-2026-68884

A heap-based buffer overflow in the Windows Kernel allows an authorized (low-privilege) local attacker to elevate privileges , per Microsoft's advisory (CVE-2026-68884). The vulnerability carries a CVSS v3.1 score of 7.0 (HIGH) with a vector of AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H, meaning exploit...

CVE-2026-69295

CVE-2026-69295 is an out-of-bounds read in the Windows USB Driver that allows an authorized local attacker to escalate privileges. The flaw yields high impact across confidentiality, integrity, and availability (CVSS 3.1 score 7.8 HIGH , vector AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H), meaning a low-...

CVE-2026-69323

CVE-2026-69323 is a heap-based buffer overflow in Windows Biometric Service that allows an authorized attacker with low privileges to achieve local privilege escalation . The vulnerability requires no user interaction and carries a CVSS 3.1 score of 7.8 (HIGH) with high impact to confidentiality,...

CVE-2026-69820

Windows Hello is vulnerable to a heap-based buffer overflow that allows an authorized local attacker to escalate privileges . The CVSS 3.1 score is 8.2 (HIGH) with a changed scope and high impact on confidentiality, integrity, and availability. The attack requires high privileges and no user inte...

CVE-2026-70019

CVE-2026-70019 is an information disclosure vulnerability in Windows Compressed Folder caused by a hard link mechanism that allows an unauthorized attacker to disclose information over a network. The vulnerability requires user interaction and no prior privileges (CVSS 3.1: 6.5 MEDIUM , C:H). CIS...

CVE-2026-73017

CVE-2026-73017 is a heap-based buffer overflow in Windows Graphics Kernel that allows a local, authorized attacker to achieve code execution . The vulnerability requires high privileges and high attack complexity , with no user interaction needed. Scope is changed, with high impact on confidentia...

CVE-2026-78516

CVE-2026-78516 is a buffer over-read in Windows Storage that allows an unauthorized attacker with physical access to disclose sensitive information. The vulnerability requires user interaction and no prior privileges. Microsoft rates it CVSS 4.3 (Medium) with a High confidentiality impact but no ...

CVE-2026-83954

CVE-2026-83954 is a heap-based buffer overflow in Windows Biometric Service that allows a local, low-privilege attacker to elevate privileges without user interaction. The vulnerability carries a CVSS 3.1 score of 7.8 (HIGH) with full impact to confidentiality, integrity, and availability, indica...

CVE-2026-68832

CVE-2026-68832 is a local privilege escalation vulnerability in Windows NTFS caused by an integer overflow or wraparound . An authorized attacker with low privileges can exploit this with low complexity and no user interaction to achieve high impact on confidentiality, integrity, and availability...

CVE-2026-68837

CVE-2026-68837 is a use-after-free vulnerability in Windows File History Service that allows an authorized local attacker to elevate privileges. The CVSS 3.1 base score is 7.0 (HIGH) with the vector AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H, indicating a local attack with high complexity, low required ...

CVE-2026-68875

CVE-2026-68875 is a buffer over-read in Windows NTFS that allows an authorized local attacker to achieve code execution . The vulnerability is rated CVSS 3.1 7.8 (High) with a local attack vector, low complexity, low privileges required, and no user interaction needed. No exploitation details or ...

CVE-2026-69428

Windows LDAP (Lightweight Directory Access Protocol) is vulnerable to an out-of-bounds read that allows an unauthorized, network-based attacker to cause a denial of service , with a CVSS 3.1 base score of 7.5 (HIGH) . The vulnerability requires no privileges and no user interaction, though it imp...

CVE-2026-69709

A heap-based buffer overflow in Windows NTFS allows an authorized attacker with low privileges and no user interaction to execute code locally. The vulnerability is rated CVSS 3.1 7.8 (HIGH) with full impact on confidentiality, integrity, and availability. The Microsoft reference points to a spec...

CVE-2026-69727

A heap-based buffer overflow in Windows Biometric Service allows an authorized attacker to elevate privileges over a network. The vulnerability is rated CVSS 8.0 (High) with vector AV:N/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H, indicating a network attack vector with low complexity, requiring low privilege...

CVE-2026-69889

CVE-2026-69889 is a use-after-free vulnerability in the Windows Bluetooth Service that allows an authorized attacker to elevate privileges locally . The CVSS v3.1 base score is 7.0 (HIGH) , with a vector of AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H , indicating a local attack requiring low privileges, ...

CVE-2026-70289

CVE-2026-70289 is a heap-based buffer overflow in the Windows Win32 Kernel Subsystem (Win32k) that allows an authorized (low-privilege) attacker to elevate privileges locally . The vulnerability is rated CVSS 7.8 (HIGH) with local attack vector, low complexity, and high impact to confidentiality,...

CVE-2026-72963

CVE-2026-72963 is a use-after-free vulnerability in Windows Modern Execution Server that allows an authorized attacker to achieve local privilege escalation . The CVSS v3.1 score is 7.0 (HIGH) , with a local attack vector, high complexity, low privileges required, and high impact on confidentiali...

CVE-2026-72991

CVE-2026-72991 is a heap-based buffer overflow in the Windows Biometric Service that allows a locally authenticated attacker with low privileges to escalate to higher privileges. The vulnerability scores 7.8 (HIGH) under CVSS v3.1, with all three impact dimensions rated High. Attack requires loca...

CVE-2026-72992

A heap-based buffer overflow in the Windows Biometric Service allows an authorized local attacker to elevate privileges, resulting in high impact to confidentiality, integrity, and availability. The vulnerability carries a CVSS 3.1 score of 7.8 (HIGH) with a local attack vector, low complexity, a...

CVE-2026-72996

CVE-2026-72996 is a heap-based buffer overflow in the Windows Biometric Service that allows an authorized, low-privilege attacker to escalate privileges locally. The vulnerability is rated CVSS 3.1 7.8 (HIGH) with the vector CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H, indicating low attack comp...

CVE-2026-73002

CVE-2026-73002 affects Windows Biometric Service , where an integer overflow or wraparound vulnerability allows a locally authenticated attacker to elevate privileges . The flaw requires low privileges , no user interaction, and low attack complexity, yet yields high impact on confidentiality, in...

CVE-2026-73007

CVE-2026-73007 is a heap-based buffer overflow in the Windows Biometric Service that allows an authorized attacker to achieve local privilege escalation . The vulnerability requires low privileges, no user interaction, and has low attack complexity, yielding a CVSS 3.1 score of 7.8 (HIGH) with fu...

CVE-2026-77894

CVE-2026-77894 is a local privilege escalation vulnerability in Windows Installer caused by a race condition — specifically, concurrent execution of a shared resource with improper synchronization. An authorized attacker with low privileges can exploit this to gain high integrity over confidentia...

CVE-2026-77904

CVE-2026-77904 is a heap-based buffer overflow in the Windows Volume Manager Extension Driver that allows an attacker with low privileges to achieve local privilege escalation without user interaction. The vulnerability is rated HIGH (CVSS 7.8) with high impact on confidentiality, integrity, and ...