CVE-2026-69434 Windows URL Moniker Remote Code Execution Vulnerability
Heap-based buffer overflow in Windows URL Moniker allows an unauthorized attacker to execute code over a network.
EPSS 0.01 CVE-2026-69434 US
Výsledky hledání
· zachyceno
· zachyceno
CVE-2026-69433 Windows Error Reporting Elevation of Privilege Vulnerability
Heap-based buffer overflow in Windows Error Reporting allows an authorized attacker to elevate privileges locally.
EPSS < 0.01 CVE-2026-69433 US
· zachyceno
CVE-2026-69447 Windows Audio Service Elevation of Privilege Vulnerability
Heap-based buffer overflow in Windows Audio Service allows an authorized attacker to elevate privileges locally.
EPSS < 0.01 CVE-2026-69447 US
· zachyceno
CVE-2026-69449 Windows BitLocker Remote Code Execution Vulnerability
Heap-based buffer overflow in Windows BitLocker allows an authorized attacker to execute code locally.
EPSS < 0.01 CVE-2026-69449 US
· zachyceno
CVE-2026-69430 Windows Embedded Mode Service Elevation of Privilege Vulnerability
Use after free in Windows Embedded Mode Service allows an authorized attacker to elevate privileges locally.
EPSS < 0.01 CVE-2026-69430 US
· zachyceno
CVE-2026-69475 Windows Remote Desktop Services Elevation of Privilege Vulnerability
Untrusted pointer dereference in Windows Remote Desktop Services allows an authorized attacker to elevate privileges locally.
EPSS < 0.01 CVE-2026-69475 US
· zachyceno
CVE-2026-69427 Microsoft VOLSNAP.SYS Elevation of Privilege Vulnerability
Out-of-bounds read in Windows VOLSNAP.SYS allows an authorized attacker to elevate privileges over a network.
EPSS 0.01 CVE-2026-69427 Microsoft US
· zachyceno
CVE-2026-69425 Windows NTFS Tampering Vulnerability
Improper link resolution before file access ('link following') in Windows NTFS allows an authorized attacker to perform tampering locally.
EPSS < 0.01 CVE-2026-69425 US
· zachyceno
CVE-2026-69438 Microsoft JScript Remote Code Execution Vulnerability
Incorrect conversion between numeric types in Microsoft JScript allows an unauthorized attacker to execute code over a network.
EPSS 0.01 CVE-2026-69438 Microsoft US
· zachyceno
CVE-2026-69422 Windows USB Video Driver Elevation of Privilege Vulnerability
Use after free in Windows USB Video Driver allows an authorized attacker to elevate privileges locally.
EPSS < 0.01 CVE-2026-69422 US
· zachyceno
CVE-2026-69428 Windows LDAP - Lightweight Directory Access Protocol Denial of Service Vulnerability
Out-of-bounds read in Windows LDAP - Lightweight Directory Access Protocol allows an unauthorized attacker to deny service over a network.
EPSS 0.01 CVE-2026-69428 US
· zachyceno
CVE-2026-69424 Windows Distributed File System (DFS) Elevation of Privilege Vulnerability
Heap-based buffer overflow in Windows Distributed File System (DFS) allows an authorized attacker to elevate privileges locally.
EPSS < 0.01 CVE-2026-69424 US
· zachyceno
CVE-2026-69416 Windows DHCP Server Denial of Service Vulnerability
Buffer over-read in Windows DHCP Server allows an authorized attacker to deny service over an adjacent network.
EPSS 0.01 CVE-2026-69416 US
· zachyceno
CVE-2026-69407 Volume Manager Driver Elevation of Privilege Vulnerability
Integer overflow or wraparound in Volume Manager Driver allows an authorized attacker to elevate privileges locally.
EPSS < 0.01 CVE-2026-69407 US
· zachyceno
CVE-2026-69405 Windows DHCP Server Denial of Service Vulnerability
Missing release of memory after effective lifetime in Windows DHCP Server allows an authorized attacker to deny service over an adjacent network.
EPSS 0.01 CVE-2026-69405 US
· zachyceno
CVE-2026-69421 Windows Kernel-Mode Driver Elevation of Privilege Vulnerability
Integer underflow (wrap or wraparound) in Windows Kernel Mode Driver allows an authorized attacker to elevate privileges locally.
EPSS < 0.01 CVE-2026-69421 US
· zachyceno
CVE-2026-69398 Windows Bluetooth Service Elevation of Privilege Vulnerability
Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Bluetooth Service allows an authorized attacker to elevate privileges locally.
EPSS < 0.01 CVE-2026-69398 US
· zachyceno
CVE-2026-69410 Windows Win32k Elevation of Privilege Vulnerability
Use after free in Windows Win32K allows an authorized attacker to elevate privileges locally.
EPSS < 0.01 CVE-2026-69410 US
· zachyceno
CVE-2026-69396 Windows NDIS Elevation of Privilege Vulnerability
Use after free in Windows NDIS allows an authorized attacker to elevate privileges over a network.
EPSS 0.01 CVE-2026-69396 US
· zachyceno
CVE-2026-69393 Windows Spaceport.sys Information Disclosure Vulnerability
Out-of-bounds read in Windows Spaceport.sys allows an authorized attacker to disclose information over a network.
EPSS 0.01 CVE-2026-69393 US
· zachyceno
CVE-2026-69388 Windows Bluetooth Service Elevation of Privilege Vulnerability
Use after free in Windows Bluetooth Service allows an authorized attacker to elevate privileges locally.
EPSS < 0.01 CVE-2026-69388 US
· zachyceno
CVE-2026-69386 Microsoft Windows Media Foundation Remote Code Execution Vulnerability
Heap-based buffer overflow in Microsoft Windows Media Foundation allows an unauthorized attacker to execute code over a network.
EPSS 0.01 CVE-2026-69386 Microsoft US
· zachyceno
CVE-2026-69385 Windows TCP/IP Elevation of Privilege Vulnerability
Concurrent execution using shared resource with improper synchronization ('race condition') in Windows TCP/IP allows an authorized attacker to elevate privileges locally.
EPSS < 0.01 CVE-2026-69385 US
· zachyceno
CVE-2026-69374 Windows SMB Server Denial of Service Vulnerability
Allocation of resources without limits or throttling in Windows SMB Server allows an authorized attacker to deny service over a network.
EPSS 0.01 CVE-2026-69374 US
· zachyceno
CVE-2026-69373 Windows Overlay Filter Elevation of Privilege Vulnerability
Integer overflow or wraparound in Windows Overlay Filter allows an authorized attacker to elevate privileges locally.
EPSS < 0.01 CVE-2026-69373 US
· zachyceno
CVE-2026-69403 Windows SMB Server Information Disclosure Vulnerability
Missing authorization in Windows SMB Server allows an authorized attacker to disclose information locally.
EPSS < 0.01 CVE-2026-69403 US
· zachyceno
CVE-2026-69369 Windows DNS Information Disclosure Vulnerability
Out-of-bounds read in Windows DNS allows an authorized attacker to disclose information locally.
EPSS < 0.01 CVE-2026-69369 US
· zachyceno
CVE-2026-69364 Windows Print Spooler Components Elevation of Privilege Vulnerability
Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Print Spooler Components allows an authorized attacker to elevate privileges over a network.
EPSS < 0.01 CVE-2026-69364 US
· zachyceno
CVE-2026-69365 Microsoft Local Security Authority (LSA) Server Elevation of Privilege Vulnerability
Out-of-bounds read in Microsoft Local Security Authority Server (lsasrv) allows an authorized attacker to elevate privileges over a network.
EPSS 0.01 CVE-2026-69365 Microsoft US
· zachyceno
CVE-2026-69360 Microsoft Office Word Remote Code Execution Vulnerability
Heap-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code over a network.
EPSS 0.01 CVE-2026-69360 Microsoft US
· zachyceno
CVE-2026-69372 Windows Network File System Denial of Service Vulnerability
Out-of-bounds read in Windows Network File System allows an authorized attacker to deny service over a network.
EPSS 0.01 CVE-2026-69372 US
· zachyceno
CVE-2026-69384 Virtual Hard Disk (VHD) Miniport Driver Denial of Service Vulnerability
Null pointer dereference in Virtual Hard Disk (VHD) Miniport Driver allows an unauthorized attacker to deny service locally.
EPSS < 0.01 CVSS 7.1 CVE-2026-69384 US
· zachyceno
CVE-2026-69376 Microsoft Standard XPS Information Disclosure Vulnerability
Out-of-bounds read in Microsoft Standard XPS allows an authorized attacker to disclose information locally.
EPSS < 0.01 CVE-2026-69376 Microsoft US
· zachyceno
CVE-2026-69357 Windows NDIS Elevation of Privilege Vulnerability
Use after free in Windows NDIS allows an authorized attacker to elevate privileges over a network.
EPSS 0.01 CVE-2026-69357 US
· zachyceno
CVE-2026-69358 Remote Desktop Client Remote Code Execution Vulnerability
Use of uninitialized resource in Remote Desktop Client allows an authorized attacker to execute code over a network.
EPSS 0.01 CVE-2026-69358 US
· zachyceno
CVE-2026-69353 Windows Text Shaping Information Disclosure Vulnerability
Out-of-bounds read in Windows Text Shaping allows an authorized attacker to disclose information locally.
EPSS < 0.01 CVE-2026-69353 US
· zachyceno
CVE-2026-69350 Windows Overlay Filter Elevation of Privilege Vulnerability
Heap-based buffer overflow in Windows Overlay Filter allows an authorized attacker to elevate privileges locally.
EPSS < 0.01 CVE-2026-69350 US
· zachyceno
CVE-2026-69348 Windows Win32k Elevation of Privilege Vulnerability
Heap-based buffer overflow in Windows Win32K allows an authorized attacker to elevate privileges locally.
EPSS < 0.01 CVE-2026-69348 US
· zachyceno
CVE-2026-69346 Windows Print Spooler Components Elevation of Privilege Vulnerability
Heap-based buffer overflow in Windows Print Spooler Components allows an authorized attacker to elevate privileges over a network.
EPSS 0.01 CVE-2026-69346 US
· zachyceno
CVE-2026-69344 Windows Print Spooler Components Information Disclosure Vulnerability
Out-of-bounds read in Windows Print Spooler Components allows an authorized attacker to disclose information locally.
EPSS < 0.01 CVE-2026-69344 US
· zachyceno
CVE-2026-69343 Windows Overlay Filter Information Disclosure Vulnerability
Out-of-bounds read in Windows Overlay Filter allows an authorized attacker to disclose information locally.
EPSS < 0.01 CVE-2026-69343 US
· zachyceno
CVE-2026-69342 Windows DHCP Server Denial of Service Vulnerability
Out-of-bounds read in Windows DHCP Server allows an unauthorized attacker to deny service over a network.
EPSS 0.01 CVE-2026-69342 US
· zachyceno
CVE-2026-69340 Windows NTFS Elevation of Privilege Vulnerability
Heap-based buffer overflow in Windows NTFS allows an authorized attacker to elevate privileges over a network.
EPSS 0.01 CVE-2026-69340 US
· zachyceno
CVE-2026-69335 Windows Win32k Elevation of Privilege Vulnerability
Use after free in Windows Win32K allows an authorized attacker to elevate privileges locally.
EPSS < 0.01 CVE-2026-69335 US
· zachyceno
CVE-2026-69332 Windows NTFS Elevation of Privilege Vulnerability
Out-of-bounds read in Windows NTFS allows an authorized attacker to elevate privileges over a network.
EPSS 0.01 CVE-2026-69332 US
· zachyceno
CVE-2026-69331 Windows Remote Access Connection Manager Elevation of Privilege Vulnerability
Use after free in Windows Remote Access Connection Manager allows an authorized attacker to elevate privileges locally.
EPSS < 0.01 CVE-2026-69331 US
· zachyceno
CVE-2026-69328 Windows Storage Elevation of Privilege Vulnerability
Untrusted search path in Windows Storage allows an authorized attacker to elevate privileges locally.
EPSS < 0.01 CVE-2026-69328 US
· zachyceno
CVE-2026-69329 BranchCache Denial of Service Vulnerability
Out-of-bounds read in BranchCache allows an unauthorized attacker to deny service over a network.
EPSS 0.01 CVE-2026-69329 US
· zachyceno
CVE-2026-69351 Windows Universal Plug and Play (UPnP) Device Host Information Disclosure Vulnerability
Exposure of private personal information to an unauthorized actor in Windows Universal Plug and Play (UPnP) Device Host allows an authorized attacker to disclose information locally.
EPSS < 0.01 CVE-2026-69351 US
· zachyceno
CVE-2026-69324 Windows Performance Monitor Elevation of Privilege Vulnerability
Access of resource using incompatible type ('type confusion') in Windows Performance Monitor allows an authorized attacker to elevate privileges locally.
EPSS < 0.01 CVE-2026-69324 US
· zachyceno
CVE-2026-69322 Microsoft Windows Search Component Elevation of Privilege Vulnerability
Double free in Microsoft Windows Search Component allows an authorized attacker to elevate privileges over a network.
EPSS 0.01 CVE-2026-69322 Microsoft US
· zachyceno
CVE-2026-69319 Windows USB Video Driver Elevation of Privilege Vulnerability
Concurrent execution using shared resource with improper synchronization ('race condition') in Windows USB Video Driver allows an authorized attacker to elevate privileges locally.
EPSS < 0.01 CVE-2026-69319 US
· zachyceno
CVE-2026-69316 Windows Overlay Filter Information Disclosure Vulnerability
Buffer over-read in Windows Overlay Filter allows an authorized attacker to disclose information locally.
EPSS < 0.01 CVE-2026-69316 US
· zachyceno
CVE-2026-69317 Windows Remote Desktop Client Information Disclosure Vulnerability
Out-of-bounds read in Remote Desktop Client allows an authorized attacker to disclose information over a network.
EPSS 0.01 CVE-2026-69317 US
· zachyceno
CVE-2026-69318 Windows Imaging Component Information Disclosure Vulnerability
Out-of-bounds read in Windows Imaging Component allows an authorized attacker to disclose information locally.
EPSS < 0.01 CVE-2026-69318 US
· zachyceno
CVE-2026-69308 Microsoft Standard XPS Information Disclosure Vulnerability
Out-of-bounds read in Microsoft Standard XPS allows an authorized attacker to disclose information locally.
EPSS < 0.01 CVE-2026-69308 Microsoft US
· zachyceno
CVE-2026-69312 Windows NTFS Elevation of Privilege Vulnerability
Out-of-bounds read in Windows NTFS allows an authorized attacker to elevate privileges locally.
EPSS < 0.01 CVE-2026-69312 US
· zachyceno
CVE-2026-69315 Windows License Manager Information Disclosure Vulnerability
Exposure of sensitive system information to an unauthorized control sphere in Windows License Manager allows an authorized attacker to disclose information locally.
EPSS < 0.01 CVE-2026-69315 US
· zachyceno
CVE-2026-69313 Microsoft Standard XPS Elevation of Privilege Vulnerability
Heap-based buffer overflow in Microsoft Standard XPS allows an authorized attacker to elevate privileges over a network.
EPSS 0.01 CVE-2026-69313 Microsoft US
· zachyceno
CVE-2026-69303 Push Message Routing Service Information Disclosure Vulnerability
Out-of-bounds read in Push Message Routing Service allows an authorized attacker to disclose information locally.
EPSS < 0.01 CVE-2026-69303 US