CVE-2026-69323 Windows Biometric Service Elevation of Privilege Vulnerability
Heap-based buffer overflow in Windows Biometric Service allows an authorized attacker to elevate privileges locally.
EPSS < 0.01 CVE-2026-69323 US
Výsledky hledání
· zachyceno
· zachyceno
CVE-2026-69334 Windows Volume Manager Extension Driver Remote Code Execution Vulnerability
Heap-based buffer overflow in Windows Volume Manager Extension Driver allows an unauthorized attacker to execute code over a network.
EPSS 0.01 CVE-2026-69334 US
· zachyceno
CVE-2026-69291 Windows Volume Manager Extension Driver Remote Code Execution Vulnerability
Heap-based buffer overflow in Windows Volume Manager Extension Driver allows an unauthorized attacker to execute code over a network.
EPSS 0.01 CVE-2026-69291 US
· zachyceno
CVE-2026-69290 Windows Storage Spaces Controller Elevation of Privilege Vulnerability
Stack-based buffer overflow in Windows Storage Spaces Controller allows an authorized attacker to elevate privileges locally.
EPSS < 0.01 CVE-2026-69290 US
· zachyceno
CVE-2026-69309 Windows Print Spooler Components Elevation of Privilege Vulnerability
Double free in Windows Print Spooler Components allows an authorized attacker to elevate privileges locally.
EPSS < 0.01 CVE-2026-69309 US
· zachyceno
CVE-2026-69287 Windows Remote Desktop Services Elevation of Privilege Vulnerability
Use after free in Windows Remote Desktop Services allows an authorized attacker to elevate privileges locally.
EPSS < 0.01 CVE-2026-69287 US
· zachyceno
CVE-2026-68896 Microsoft Windows Search Component Elevation of Privilege Vulnerability
Absolute path traversal in Microsoft Windows Search Component allows an authorized attacker to elevate privileges locally.
EPSS < 0.01 CVE-2026-68896 Microsoft US
· zachyceno
CVE-2026-72967 Windows Network Connection Broker Elevation of Privilege Vulnerability
Heap-based buffer overflow in Windows Network Connection Broker allows an authorized attacker to elevate privileges locally.
EPSS < 0.01 CVE-2026-72967 US
· zachyceno
CVE-2026-72966 Windows Remote Access Connection Manager Tampering Vulnerability
Missing authorization in Windows Remote Access Connection Manager allows an authorized attacker to perform tampering locally.
EPSS < 0.01 CVE-2026-72966 US
· zachyceno
CVE-2026-72964 Windows Internet Connection Sharing (ICS) Tampering Vulnerability
Missing authentication for critical function in Windows Internet Connection Sharing (ICS) allows an authorized attacker to perform tampering locally.
EPSS < 0.01 CVE-2026-72964 US
· zachyceno
CVE-2026-72961 Windows Hyper-V Elevation of Privilege Vulnerability
Out-of-bounds read in Windows Hyper-V allows an authorized attacker to elevate privileges locally.
EPSS < 0.01 CVE-2026-72961 US
· zachyceno
CVE-2026-72960 Windows Media Player Remote Code Execution Vulnerability
Heap-based buffer overflow in Windows Media Player allows an unauthorized attacker to execute code over a network.
EPSS 0.01 CVE-2026-72960 US
· zachyceno
CVE-2026-72954 Windows Deployment Services Remote Code Execution Vulnerability
Use after free in Windows Deployment Services allows an authorized attacker to execute code over a network.
EPSS 0.01 CVE-2026-72954 US
· zachyceno
CVE-2026-72959 Windows Routing and Remote Access Service (RRAS) Remote Code Execution Vulnerability
Remote Code Execution in Windows Routing and Remote Access Service (RRAS) allows attacker to gain an unauthorized access to victim's machine
EPSS 0.01 CVE-2026-72959 US
· zachyceno
CVE-2026-72950 Windows Routing and Remote Access Service (RRAS) Remote Code Execution Vulnerability
Remote Code Execution in Windows Routing and Remote Access Service (RRAS) allows attacker to gain an unauthorized access to victim's machine
EPSS 0.01 CVE-2026-72950 US
· zachyceno
CVE-2026-72957 Windows Deployment Services Remote Code Execution Vulnerability
Heap-based buffer overflow in Windows Deployment Services allows an authorized attacker to execute code locally.
EPSS < 0.01 CVE-2026-72957 US
· zachyceno
CVE-2026-72942 Windows Spaceport.sys Information Disclosure Vulnerability
Out-of-bounds read in Windows Spaceport.sys allows an unauthorized attacker to disclose information over a network.
EPSS 0.01 CVE-2026-72942 US
· zachyceno
CVE-2026-72941 Windows Biometric Service Elevation of Privilege Vulnerability
Heap-based buffer overflow in Windows Biometric Service allows an authorized attacker to elevate privileges locally.
EPSS < 0.01 CVE-2026-72941 US
· zachyceno
CVE-2026-72953 Windows USB Driver Elevation of Privilege Vulnerability
Heap-based buffer overflow in Windows USB Driver allows an authorized attacker to elevate privileges locally.
EPSS < 0.01 CVE-2026-72953 US
· zachyceno
CVE-2026-72952 Windows Spaceport.sys Remote Code Execution Vulnerability
Out-of-bounds read in Windows Spaceport.sys allows an authorized attacker to execute code locally.
EPSS < 0.01 CVE-2026-72952 US
· zachyceno
CVE-2026-72932 Windows Message Queuing Queue Manager Information Disclosure Vulnerability
Buffer over-read in Windows Message Queuing Queue Manager allows an unauthorized attacker to disclose information over a network.
EPSS 0.01 CVE-2026-72932 US
· zachyceno
CVE-2026-72933 Microsoft WDAC OLE DB provider for SQL Remote Code Execution Vulnerability
Heap-based buffer overflow in Microsoft WDAC OLE DB provider for SQL allows an unauthorized attacker to execute code over a network.
EPSS 0.01 CVE-2026-72933 Microsoft US
· zachyceno
CVE-2026-72936 Windows SMB Client Remote Code Execution Vulnerability
Use after free in Windows SMB Client allows an unauthorized attacker to execute code over a network.
EPSS 0.01 CVE-2026-72936 US
· zachyceno
CVE-2026-72931 Windows Secure Socket Tunneling Protocol (SSTP) Denial of Service Vulnerability
Missing release of resource after effective lifetime in Windows Secure Socket Tunneling Protocol (SSTP) allows an authorized attacker to deny service locally.
EPSS < 0.01 CVE-2026-72931 US
· zachyceno
CVE-2026-72928 Windows DNS Server Remote Code Execution Vulnerability
Use after free in Windows DNS allows an authorized attacker to execute code over a network.
EPSS 0.01 CVE-2026-72928 US
· zachyceno
CVE-2026-72927 Winsock Elevation of Privilege Vulnerability
Heap-based buffer overflow in Winsock allows an authorized attacker to elevate privileges locally.
EPSS < 0.01 CVE-2026-72927 US
· zachyceno
CVE-2026-71352 Windows Remote Access Connection Manager Remote Code Execution Vulnerability
Integer underflow (wrap or wraparound) in Windows Remote Access Connection Manager allows an authorized attacker to execute code over a network.
EPSS 0.01 CVE-2026-71352 US
· zachyceno
CVE-2026-71342 Windows Remote Access Connection Manager Elevation of Privilege Vulnerability
Use after free in Windows Remote Access Connection Manager allows an authorized attacker to elevate privileges locally.
EPSS < 0.01 CVE-2026-71342 US
· zachyceno
CVE-2026-71349 Windows Spaceport.sys Remote Code Execution Vulnerability
Heap-based buffer overflow in Windows Spaceport.sys allows an unauthorized attacker to execute code with a physical attack.
EPSS < 0.01 CVE-2026-71349 US
· zachyceno
CVE-2026-70583 Windows Core Messaging Elevation of Privilege Vulnerability
Heap-based buffer overflow in Windows Core Messaging allows an authorized attacker to elevate privileges locally.
EPSS < 0.01 CVE-2026-70583 US
· zachyceno
CVE-2026-70579 Windows Mobile Broadband Information Disclosure Vulnerability
Out-of-bounds read in Windows Mobile Broadband allows an unauthorized attacker to disclose information over a network.
EPSS 0.01 CVE-2026-70579 US
· zachyceno
CVE-2026-70578 Windows Credential Guard Elevation of Privilege Vulnerability
Heap-based buffer overflow in Windows Credential Guard allows an authorized attacker to elevate privileges locally.
EPSS < 0.01 CVE-2026-70578 US
· zachyceno
CVE-2026-70577 Windows Modern Device Management (MDM) Elevation of Privilege Vulnerability
Use after free in Windows Modern Device Management (MDM) allows an authorized attacker to elevate privileges locally.
EPSS < 0.01 CVE-2026-70577 US
· zachyceno
CVE-2026-70581 Windows Biometric Service Elevation of Privilege Vulnerability
Integer overflow or wraparound in Windows Biometric Service allows an authorized attacker to elevate privileges locally.
EPSS < 0.01 CVE-2026-70581 US
· zachyceno
CVE-2026-70575 Windows Schannel Denial of Service Vulnerability
Null pointer dereference in Windows Schannel allows an authorized attacker to deny service over a network.
EPSS 0.01 CVE-2026-70575 US
· zachyceno
CVE-2026-70572 Windows Biometric Service Elevation of Privilege Vulnerability
Integer overflow or wraparound in Windows Biometric Service allows an authorized attacker to elevate privileges locally.
EPSS < 0.01 CVE-2026-70572 US
· zachyceno
CVE-2026-70573 Windows Biometric Service Elevation of Privilege Vulnerability
Heap-based buffer overflow in Windows Biometric Service allows an authorized attacker to elevate privileges locally.
EPSS < 0.01 CVE-2026-70573 US
· zachyceno
CVE-2026-70569 Windows Spaceport.sys Elevation of Privilege Vulnerability
Out-of-bounds read in Windows Spaceport.sys allows an authorized attacker to elevate privileges locally.
EPSS < 0.01 CVE-2026-70569 US
· zachyceno
CVE-2026-70568 Windows Defender Firewall Service Elevation of Privilege Vulnerability
Heap-based buffer overflow in Windows Defender Firewall Service allows an authorized attacker to elevate privileges locally.
EPSS < 0.01 CVE-2026-70568 US
· zachyceno
CVE-2026-70567 Windows Display Enhancement Service Elevation of Privilege Vulnerability
Double free in Windows Display Enhancement Service allows an authorized attacker to elevate privileges locally.
EPSS < 0.01 CVE-2026-70567 US
· zachyceno
CVE-2026-70574 Virtual Hard Disk (VHD) Miniport Driver Elevation of Privilege Vulernability
Out-of-bounds read in Virtual Hard Disk (VHD) Miniport Driver allows an authorized attacker to elevate privileges locally.
EPSS < 0.01 CVE-2026-70574 US
· zachyceno
CVE-2026-70565 Windows AF_UNIX Socket Provider Elevation of Privilege Vulnerability
Use after free in Windows AF_UNIX Socket Provider allows an authorized attacker to elevate privileges locally.
EPSS < 0.01 CVE-2026-70565 US
· zachyceno
CVE-2026-47297 Microsoft SQL Server Remote Code Execution Vulnerability
Deserialization of untrusted data in SQL Server allows an unauthorized attacker to execute code over a network.
EPSS 0.01 CVE-2026-47297 Microsoft US
· zachyceno
CVE-2026-64918 Microsoft Office Spoofing Vulnerability
Insufficiently protected credentials in Microsoft Office allows an unauthorized attacker to perform spoofing over a network.
EPSS 0.01 CVE-2026-64918 Microsoft US
· zachyceno
CVE-2026-58599 HEVC Video Extensions Remote Code Execution Vulnerability
Heap-based buffer overflow in Microsoft Windows Codecs Library allows an unauthorized attacker to execute code locally.
EPSS < 0.01 CVE-2026-58599 Microsoft US
· zachyceno
CVE-2026-69784 Windows Hello Elevation of Privilege Vulnerability
Use after free in Windows Hello allows an authorized attacker to elevate privileges locally.
EPSS < 0.01 CVE-2026-69784 US
· zachyceno
CVE-2026-69820 Windows Hello Elevation of Privilege Vulnerability
Heap-based buffer overflow in Windows Hello allows an authorized attacker to elevate privileges locally.
EPSS < 0.01 CVE-2026-69820 US
· zachyceno
CVE-2026-69864 Windows Hello Elevation of Privilege Vulnerability
Use after free in Windows Hello allows an authorized attacker to elevate privileges locally.
EPSS < 0.01 CVE-2026-69864 US
· zachyceno
CVE-2026-69725 Windows Hello Elevation of Privilege Vulnerability
Double free in Windows Hello allows an authorized attacker to elevate privileges locally.
EPSS < 0.01 CVE-2026-69725 US
· zachyceno
CVE-2026-69874 Windows ALPC Elevation of Privilege Vulnerability
Untrusted pointer dereference in Windows ALPC allows an authorized attacker to elevate privileges locally.
EPSS < 0.01 CVE-2026-69874 US
· zachyceno
CVE-2026-69858 Windows DNS Server Remote Code Execution Vulnerability
Use after free in Windows DNS allows an unauthorized attacker to execute code over a network.
EPSS 0.01 CVE-2026-69858 US
· zachyceno
CVE-2026-69710 Windows Hello Elevation of Privilege Vulnerability
Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Hello allows an authorized attacker to elevate privileges locally.
EPSS < 0.01 CVE-2026-69710 US
· zachyceno
CVE-2026-69813 Windows DNS Server Remote Code Execution Vulnerability
Use after free in Windows DNS allows an unauthorized attacker to execute code over a network.
EPSS 0.01 CVE-2026-69813 US
· zachyceno
CVE-2026-69799 Windows Hello Elevation of Privilege Vulnerability
Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Hello allows an authorized attacker to elevate privileges locally.
EPSS < 0.01 CVE-2026-69799 US
· zachyceno
CVE-2026-69786 Windows Text Shaping Remote Code Execution Vulnerability
Heap-based buffer overflow in Windows Text Shaping allows an unauthorized attacker to execute code over a network.
EPSS 0.01 CVE-2026-69786 US
· zachyceno
CVE-2026-69852 Windows Routing and Remote Access Service (RRAS) Remote Code Execution Vulnerability
Remote Code Execution in Windows Routing and Remote Access Service (RRAS) allows attacker to gain an unauthorized access to victim's machine
EPSS 0.01 CVE-2026-69852 US
· zachyceno
CVE-2026-69769 Windows HTTP Print Provider Remote Code Execution Vulnerability
Heap-based buffer overflow in Windows HTTP Print Provider allows an unauthorized attacker to execute code over a network.
EPSS 0.01 CVE-2026-69769 US
· zachyceno
CVE-2026-69829 Windows Shell Remote Code Execution Vulnerability
Heap-based buffer overflow in Windows Shell allows an unauthorized attacker to execute code over a network.
EPSS 0.01 CVE-2026-69829 US
· zachyceno
CVE-2026-69845 Windows DHCP Server Remote Code Execution Vulnerability
Heap-based buffer overflow in Windows DHCP Server allows an unauthorized attacker to execute code over a network.
EPSS 0.01 CVE-2026-69845 US
· zachyceno
CVE-2026-69876 Windows DHCP Server Remote Code Execution Vulnerability
Use after free in Windows DHCP Server allows an authorized attacker to execute code over an adjacent network.
EPSS 0.01 CVE-2026-69876 US