Fixes 500 records
Priority CRITICAL 93KEV
Heap-based buffer overflow in Windows ALPC allows an authorized attacker to elevate privileges locally.
CVSS 3.1HIGH 7.8· Local · Low privileges · No interaction · EPSS 0.00387 · Published 2026-09-08 · Fixed in 10.0.14393.9512, 10.0.17763.9245 +5 CWE-122
Priority MEDIUM 51
Use after free in Windows Services for NFS ONCRPC XDR Driver allows an unauthorized attacker to execute code over a network.
CVSS 3.1CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.00974 · Published 2026-09-08 · Fixed in 6.2.9200.26349, 6.3.9600.23398 +4 CWE-416
Priority MEDIUM 51
Double free in Microsoft Graphics Component allows an unauthorized attacker to execute code over a network.
CVSS 3.1CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.00974 · Published 2026-09-08 · Fixed in 10.0.14393.9512, 10.0.17763.9245 +10 CWE-415
Priority MEDIUM 51
Weak authentication in Windows iSCSI allows an unauthorized attacker to bypass a security feature over a network.
CVSS 3.1CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.00901 · Published 2026-09-08 · Fixed in 10.0.14393.9512, 10.0.17763.9245 +4 CWE-1390
Priority MEDIUM 51
Use after free in Windows Failover Cluster allows an unauthorized attacker to execute code over a network.
CVSS 3.1CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.00974 · Published 2026-09-08 · Fixed in 10.0.17763.9245, 10.0.20348.5622 +1 CWE-416
Priority MEDIUM 51
Use after free in Windows Secure Socket Tunneling Protocol (SSTP) allows an unauthorized attacker to execute code over a network.
CVSS 3.1CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.00974 · Published 2026-09-08 · Fixed in 10.0.14393.9512, 10.0.17763.9245 +10 CWE-416
Priority MEDIUM 51
Use after free in Windows Internet Connection Sharing (ICS) allows an unauthorized attacker to execute code over a network.
CVSS 3.1CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.00974 · Published 2026-09-08 · Fixed in 10.0.14393.9512, 10.0.17763.9245 +10 CWE-416
Priority MEDIUM 51
Stack-based buffer overflow in Windows Netlogon allows an unauthorized attacker to execute code over a network.
CVSS 3.1CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.00974 · Published 2026-09-08 · Fixed in 10.0.14393.9512, 10.0.17763.9245 +10 CWE-121
Priority MEDIUM 51
Use after free in Windows DHCP Server allows an unauthorized attacker to execute code over a network.
CVSS 3.1CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.00974 · Published 2026-09-08 · Fixed in 10.0.14393.9512, 10.0.17763.9245 +4 CWE-416
Priority MEDIUM 51
Out-of-bounds write in Windows Imaging Component allows an unauthorized attacker to execute code over a network.
CVSS 3.1CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.00974 · Published 2026-09-08 · Fixed in 10.0.14393.9512, 10.0.17763.9245 +10 CWE-787
Priority MEDIUM 51
Stack-based buffer overflow in Windows Hyper-V allows an unauthorized attacker to execute code over a network.
CVSS 3.1CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.00974 · Published 2026-09-08 · Fixed in 10.0.14393.9512, 10.0.17763.9245 +8 CWE-121
Priority MEDIUM 51
Heap-based buffer overflow in Windows DHCP Server allows an unauthorized attacker to execute code over a network.
CVSS 3.1CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.01022 · Published 2026-09-08 · Fixed in 10.0.14393.9512, 10.0.17763.9245 +4 CWE-122
Priority MEDIUM 51
Heap-based buffer overflow in Windows Shell allows an unauthorized attacker to execute code over a network.
CVSS 3.1CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.00974 · Published 2026-09-08 · Fixed in 10.0.14393.9512, 10.0.17763.9245 +10 CWE-122
Priority MEDIUM 51
Integer underflow (wrap or wraparound) in Microsoft Standard XPS allows an unauthorized attacker to execute code over a network.
CVSS 3.1CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.00974 · Published 2026-09-08 · Fixed in 10.0.14393.9512, 10.0.17763.9245 +10 CWE-122
Priority MEDIUM 51
Out-of-bounds write in RPC Runtime allows an unauthorized attacker to execute code over a network.
CVSS 3.1CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.00974 · Published 2026-09-08 · Fixed in 10.0.14393.9512, 10.0.17763.9245 +10 CWE-787
Priority MEDIUM 51
Heap-based buffer overflow in Windows HTTP Print Provider allows an unauthorized attacker to execute code over a network.
CVSS 3.1CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.00974 · Published 2026-09-08 · Fixed in 10.0.14393.9512, 10.0.17763.9245 +10 CWE-122
Priority MEDIUM 51
Use after free in Windows DNS allows an unauthorized attacker to execute code over a network.
CVSS 3.1CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.00974 · Published 2026-09-08 · Fixed in 10.0.14393.9512, 10.0.17763.9245 +4 CWE-416
Priority MEDIUM 51
Out-of-bounds read in Windows Direct Show allows an unauthorized attacker to execute code over a network.
CVSS 3.1CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.00974 · Published 2026-09-08 · Fixed in 10.0.14393.9512, 10.0.17763.9245 +10 CWE-122
Priority MEDIUM 51
Use after free in Windows Services for NFS ONCRPC XDR Driver allows an unauthorized attacker to execute code over a network.
CVSS 3.1CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.00974 · Published 2026-09-08 · Fixed in 6.2.9200.26349, 6.3.9600.23398 +4 CWE-416
Priority MEDIUM 51
Remote Code Execution in Windows Routing and Remote Access Service (RRAS) allows attacker to gain an unauthorized access to victim's machine
CVSS 3.1CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.00974 · Published 2026-09-08 · Fixed in 10.0.14393.9512, 10.0.17763.9245 +10 CWE-122
Priority MEDIUM 51
Integer overflow or wraparound in Microsoft Windows PDF allows an unauthorized attacker to execute code over a network.
CVSS 3.1CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.00974 · Published 2026-09-08 · Fixed in 10.0.14393.9512, 10.0.17763.9245 +8 CWE-122
Priority MEDIUM 51
Use after free in Windows Message Queuing allows an unauthorized attacker to execute code over a network.
CVSS 3.1CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.00974 · Published 2026-09-08 · Fixed in 10.0.14393.9512, 10.0.17763.9245 +10 CWE-416
Priority MEDIUM 51
Use after free in Windows Remote Desktop Services allows an unauthorized attacker to execute code over a network.
CVSS 3.1CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.00974 · Published 2026-09-08 · Fixed in 10.0.14393.9512, 10.0.17763.9245 +10 CWE-416
Priority MEDIUM 51
Heap-based buffer overflow in Windows Compressed Folder allows an unauthorized attacker to execute code over a network.
CVSS 3.1CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.00974 · Published 2026-09-08 · Fixed in 10.0.14393.9512, 10.0.17763.9245 +10 CWE-122
Priority MEDIUM 51
Out-of-bounds read in Windows Event Logging Service allows an unauthorized attacker to execute code over a network.
CVSS 3.1CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.00974 · Published 2026-09-08 · Fixed in 10.0.14393.9512, 10.0.17763.9245 +10 CWE-122
Priority MEDIUM 51
Heap-based buffer overflow in Windows Microsoft DirectMusic allows an unauthorized attacker to execute code over a network.
CVSS 3.1CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.00974 · Published 2026-09-08 · Fixed in 10.0.14393.9512, 10.0.17763.9245 +10 CWE-122
Priority MEDIUM 51
Heap-based buffer overflow in Windows NTFS allows an unauthorized attacker to execute code over a network.
CVSS 3.1CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.00974 · Published 2026-09-08 · Fixed in 10.0.14393.9512, 10.0.17763.9245 +10 CWE-122
Priority MEDIUM 51
Heap-based buffer overflow in Telnet Client allows an unauthorized attacker to execute code over a network.
CVSS 3.1CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.00974 · Published 2026-09-08 · Fixed in 10.0.14393.9512, 10.0.17763.9245 +10 CWE-122
Priority MEDIUM 51
Integer overflow or wraparound in Microsoft Windows Media Foundation allows an unauthorized attacker to execute code over a network.
CVSS 3.1CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.00974 · Published 2026-09-08 · Fixed in 10.0.14393.9512, 10.0.17763.9245 +10 CWE-122
Priority MEDIUM 51
Integer underflow (wrap or wraparound) in Microsoft UxTheme Library (uxtheme.dll) allows an unauthorized attacker to execute code over a network.
CVSS 3.1CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.00974 · Published 2026-09-08 · Fixed in 10.0.14393.9512, 10.0.17763.9245 +10 CWE-122
Priority MEDIUM 51
Heap-based buffer overflow in Windows USB Mass Storage Class Driver allows an unauthorized attacker to execute code over a network.
CVSS 3.1CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.01022 · Published 2026-09-08 · Fixed in 10.0.14393.9512, 10.0.17763.9245 +10 CWE-122
Priority MEDIUM 48
Heap-based buffer overflow in Windows Kernel allows an unauthorized attacker to execute code over a network.
CVSS 3.1HIGH 8.8· Network · No auth · User interaction · EPSS 0.00819 · Published 2026-09-08 · Fixed in 10.0.14393.9512, 10.0.17763.9245 +10 CWE-122
Priority MEDIUM 48
Heap-based buffer overflow in Microsoft Windows Media Foundation allows an unauthorized attacker to execute code over a network.
CVSS 3.1HIGH 8.8· Network · No auth · User interaction · EPSS 0.00819 · Published 2026-09-08 · Fixed in 10.0.14393.9512, 10.0.17763.9245 +10 CWE-122
Priority MEDIUM 48
Heap-based buffer overflow in Microsoft Windows Media Foundation allows an unauthorized attacker to execute code over a network.
CVSS 3.1HIGH 8.8· Network · No auth · User interaction · EPSS 0.00819 · Published 2026-09-08 · Fixed in 10.0.17763.9245, 10.0.19044.7725 +7 CWE-122
Priority MEDIUM 45
Remote Code Execution in Windows Routing and Remote Access Service (RRAS) allows attacker to gain an unauthorized access to victim's machine
CVSS 3.1CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.00923 · Published 2026-09-08 · Fixed in 10.0.14393.9512, 10.0.17763.9245 +10 CWE-122
Priority MEDIUM 45
Heap-based buffer overflow in Windows RNDIS allows an unauthorized attacker to execute code over a network.
CVSS 3.1CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.00974 · Published 2026-09-08 · Fixed in 10.0.14393.9512, 10.0.17763.9245 +10 CWE-122
Priority MEDIUM 42
Heap-based buffer overflow in Remote Desktop Client allows an unauthorized attacker to execute code over a network.
CVSS 3.1HIGH 8.8· Network · No auth · User interaction · EPSS 0.00819 · Published 2026-09-08 · Fixed in 10.0.14393.9512, 10.0.17763.9245 +8 CWE-122
Priority MEDIUM 42
Heap-based buffer overflow in Windows Imaging Component allows an unauthorized attacker to execute code over a network.
CVSS 3.1HIGH 8.8· Network · No auth · User interaction · EPSS 0.00819 · Published 2026-09-08 · Fixed in 10.0.14393.9512, 10.0.17763.9245 +10 CWE-122
Priority MEDIUM 42
Heap-based buffer overflow in Microsoft Graphics Component allows an unauthorized attacker to execute code over a network.
CVSS 3.1HIGH 8.8· Network · No auth · User interaction · EPSS 0.00837 · Published 2026-09-08 · Fixed in 16.0.20326.20138, 16.0.5569.1003 +16 CWE-122
Priority MEDIUM 42
Out-of-bounds read in Windows Remote Desktop Services allows an authorized attacker to elevate privileges over a network.
CVSS 3.1HIGH 8.8· Network · Low privileges · No interaction · EPSS 0.00913 · Published 2026-09-08 · Fixed in 10.0.14393.9512, 10.0.17763.9245 +10 CWE-125
Priority MEDIUM 42
Double free in Microsoft Office Word allows an unauthorized attacker to execute code over a network.
CVSS 3.1HIGH 8.8· Network · No auth · User interaction · EPSS 0.00819 · Published 2026-09-08 · Fixed in 10.0.14393.9512, 10.0.17763.9245 +10 CWE-415
Priority MEDIUM 42
Heap-based buffer overflow in Windows Imaging Component allows an unauthorized attacker to execute code over a network.
CVSS 3.1HIGH 8.8· Network · No auth · User interaction · EPSS 0.00819 · Published 2026-09-08 · Fixed in 10.0.14393.9512, 10.0.17763.9245 +10 CWE-122
Priority MEDIUM 42
Heap-based buffer overflow in Windows Imaging Component allows an unauthorized attacker to execute code over a network.
CVSS 3.1HIGH 8.8· Network · No auth · User interaction · EPSS 0.00819 · Published 2026-09-08 · Fixed in 10.0.14393.9512, 10.0.17763.9245 +10 CWE-122
Priority MEDIUM 42
Heap-based buffer overflow in Graphic Fonts allows an unauthorized attacker to execute code over a network.
CVSS 3.1HIGH 8.8· Network · No auth · User interaction · EPSS 0.00819 · Published 2026-09-08 · Fixed in 10.0.14393.9512, 10.0.17763.9245 +10 CWE-122
Priority MEDIUM 42
Heap-based buffer overflow in Microsoft Graphics Component allows an unauthorized attacker to execute code over a network.
CVSS 3.1HIGH 8.8· Network · No auth · User interaction · EPSS 0.00819 · Published 2026-09-08 · Fixed in 10.0.14393.9512, 10.0.17763.9245 +10 CWE-122
Priority MEDIUM 42
Heap-based buffer overflow in Windows Management Services allows an authorized attacker to elevate privileges over a network.
CVSS 3.1HIGH 8.8· Network · Low privileges · No interaction · EPSS 0.00913 · Published 2026-09-08 · Fixed in 10.0.14393.9512, 10.0.17763.9245 +10 CWE-122
Priority MEDIUM 42
Stack-based buffer overflow in Microsoft Graphics Component allows an unauthorized attacker to execute code over a network.
CVSS 3.1HIGH 8.8· Network · No auth · User interaction · EPSS 0.00819 · Published 2026-09-08 · Fixed in 10.0.14393.9512, 10.0.17763.9245 +8 CWE-121
Priority MEDIUM 42
Heap-based buffer overflow in Graphic Fonts allows an unauthorized attacker to execute code over a network.
CVSS 3.1HIGH 8.8· Network · No auth · User interaction · EPSS 0.00819 · Published 2026-09-08 · Fixed in 10.0.14393.9512, 10.0.17763.9245 +10 CWE-122
Priority MEDIUM 42
Heap-based buffer overflow in Windows Media Player allows an unauthorized attacker to execute code over a network.
CVSS 3.1HIGH 8.8· Network · No auth · User interaction · EPSS 0.00819 · Published 2026-09-08 · Fixed in 10.0.14393.9512, 10.0.17763.9245 +8 CWE-122
Priority MEDIUM 42
Remote Code Execution in Windows Routing and Remote Access Service (RRAS) allows attacker to gain an unauthorized access to victim's machine
CVSS 3.1HIGH 8.8· Network · Low privileges · No interaction · EPSS 0.00913 · Published 2026-09-08 · Fixed in 10.0.14393.9512, 10.0.17763.9245 +10 CWE-122
Priority MEDIUM 42
Heap-based buffer overflow in Windows Schannel allows an unauthorized attacker to execute code over a network.
CVSS 3.1HIGH 8.8· Network · No auth · User interaction · EPSS 0.00819 · Published 2026-09-08 · Fixed in 10.0.22631.7582, 10.0.26100.9445 +4 CWE-122
Priority MEDIUM 42
Heap-based buffer overflow in Microsoft WDAC OLE DB provider for SQL allows an unauthorized attacker to execute code over a network.
CVSS 3.1HIGH 8.8· Network · No auth · User interaction · EPSS 0.00819 · Published 2026-09-08 · Fixed in 10.0.14393.9512, 10.0.17763.9245 +10 CWE-122
Priority MEDIUM 42
Integer underflow (wrap or wraparound) in Windows Remote Access Connection Manager allows an authorized attacker to execute code over a network.
CVSS 3.1HIGH 8.8· Network · Low privileges · No interaction · EPSS 0.00913 · Published 2026-09-08 · Fixed in 10.0.14393.9512, 10.0.17763.9245 +10 CWE-191
Priority MEDIUM 42
Integer overflow or wraparound in Windows Work Folder Service allows an authorized attacker to execute code over a network.
CVSS 3.1HIGH 8.8· Network · Low privileges · No interaction · EPSS 0.00913 · Published 2026-09-08 · Fixed in 10.0.14393.9512, 10.0.17763.9245 +3 CWE-190
Priority MEDIUM 42
Heap-based buffer overflow in Windows Paint allows an unauthorized attacker to execute code over a network.
CVSS 3.1HIGH 8.8· Network · No auth · User interaction · EPSS 0.00819 · Published 2026-09-08 · Fixed in 10.0.14393.9512, 10.0.17763.9245 +10 CWE-122
Priority MEDIUM 42
Heap-based buffer overflow in Windows Media Player allows an unauthorized attacker to execute code over a network.
CVSS 3.1HIGH 8.8· Network · No auth · User interaction · EPSS 0.00819 · Published 2026-09-08 · Fixed in 10.0.14393.9512, 10.0.17763.9245 +10 CWE-122
Priority MEDIUM 42
Heap-based buffer overflow in Windows Imaging Component allows an unauthorized attacker to execute code over a network.
CVSS 3.1HIGH 8.8· Network · No auth · User interaction · EPSS 0.00819 · Published 2026-09-08 · Fixed in 10.0.14393.9512, 10.0.17763.9245 +10 CWE-122
Priority MEDIUM 42
Heap-based buffer overflow in Windows Network File System allows an unauthorized attacker to execute code over a network.
CVSS 3.1HIGH 8.8· Network · No auth · User interaction · EPSS 0.00819 · Published 2026-09-08 · Fixed in 10.0.14393.9512, 10.0.17763.9245 +10 CWE-122
Priority MEDIUM 42
Use after free in Windows Key Distribution Center allows an authorized attacker to execute code over a network.
CVSS 3.1HIGH 8.8· Network · Low privileges · No interaction · EPSS 0.00913 · Published 2026-09-08 · Fixed in 6.2.9200.26349, 6.3.9600.23398 +4 CWE-416
Priority MEDIUM 42
Heap-based buffer overflow in Windows iSCSI allows an authorized attacker to execute code over a network.
CVSS 3.1HIGH 8.8· Network · Low privileges · No interaction · EPSS 0.00913 · Published 2026-09-08 · Fixed in 10.0.14393.9512, 10.0.17763.9245 +10 CWE-122
Priority MEDIUM 42
Heap-based buffer overflow in Microsoft Windows Media Foundation allows an unauthorized attacker to execute code over a network.
CVSS 3.1HIGH 8.8· Network · No auth · User interaction · EPSS 0.00819 · Published 2026-09-08 · Fixed in 10.0.14393.9512, 10.0.17763.9245 +10 CWE-122
Priority MEDIUM 42
Incorrect calculation of buffer size in Windows iSCSI allows an unauthorized attacker to execute code over a network.
CVSS 3.1HIGH 8.8· Network · No auth · User interaction · EPSS 0.00819 · Published 2026-09-08 · Fixed in 10.0.14393.9512, 10.0.17763.9245 +10 CWE-131
Priority MEDIUM 42
Use after free in Windows DNS allows an authorized attacker to execute code over a network.
CVSS 3.1HIGH 8.8· Network · Low privileges · No interaction · EPSS 0.00913 · Published 2026-09-08 · Fixed in 10.0.14393.9512, 10.0.17763.9245 +4 CWE-416
Priority MEDIUM 42
Heap-based buffer overflow in Windows DHCP Server allows an authorized attacker to execute code over a network.
CVSS 3.1HIGH 8.8· Network · Low privileges · No interaction · EPSS 0.00913 · Published 2026-09-08 · Fixed in 10.0.14393.9512, 10.0.17763.9245 +4 CWE-122
Priority MEDIUM 42
Heap-based buffer overflow in Windows Remote Desktop allows an unauthorized attacker to execute code over a network.
CVSS 3.1HIGH 8.8· Network · No auth · User interaction · EPSS 0.00819 · Published 2026-09-08 · Fixed in 10.0.14393.9512, 10.0.17763.9245 +10 CWE-122
Priority MEDIUM 42
Heap-based buffer overflow in Windows Event Logging Service allows an unauthorized attacker to execute code over a network.
CVSS 3.1HIGH 8.8· Network · No auth · User interaction · EPSS 0.00819 · Published 2026-09-08 · Fixed in 10.0.14393.9512, 10.0.17763.9245 +10 CWE-122
Priority MEDIUM 42
Out-of-bounds read in Windows Event Logging Service allows an unauthorized attacker to execute code over a network.
CVSS 3.1HIGH 8.8· Network · No auth · User interaction · EPSS 0.00819 · Published 2026-09-08 · Fixed in 10.0.14393.9512, 10.0.17763.9245 +10 CWE-122
Priority MEDIUM 42
Use of uninitialized resource in Remote Desktop Client allows an authorized attacker to execute code over a network.
CVSS 3.1HIGH 8.8· Network · Low privileges · No interaction · EPSS 0.00913 · Published 2026-09-08 · Fixed in 10.0.14393.9512, 10.0.17763.9245 +8 CWE-908
Priority MEDIUM 42
Stack-based buffer overflow in Windows NTFS allows an unauthorized attacker to execute code over a network.
CVSS 3.1HIGH 8.8· Network · No auth · User interaction · EPSS 0.00819 · Published 2026-09-08 · Fixed in 10.0.14393.9512, 10.0.17763.9245 +10 CWE-121
Priority MEDIUM 42
Heap-based buffer overflow in Windows URL Moniker allows an unauthorized attacker to execute code over a network.
CVSS 3.1HIGH 8.8· Network · No auth · User interaction · EPSS 0.00819 · Published 2026-09-08 · Fixed in 10.0.14393.9512, 10.0.17763.9245 +10 CWE-122
Priority MEDIUM 42
Heap-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code over a network.
CVSS 3.1HIGH 8.8· Network · No auth · User interaction · EPSS 0.00819 · Published 2026-09-08 · Fixed in 10.0.14393.9512, 10.0.17763.9245 +10 CWE-122
Priority MEDIUM 42
Heap-based buffer overflow in Windows Volume Manager Extension Driver allows an unauthorized attacker to execute code over a network.
CVSS 3.1HIGH 8.8· Network · No auth · User interaction · EPSS 0.00819 · Published 2026-09-08 · Fixed in 10.0.14393.9512, 10.0.17763.9245 +10 CWE-122
Priority MEDIUM 42
Heap-based buffer overflow in Windows Volume Manager Extension Driver allows an unauthorized attacker to execute code over a network.
CVSS 3.1HIGH 8.8· Network · No auth · User interaction · EPSS 0.00819 · Published 2026-09-08 · Fixed in 10.0.14393.9512, 10.0.17763.9245 +10 CWE-122
Priority MEDIUM 42
Integer overflow or wraparound in Windows DHCP Server allows an unauthorized attacker to execute code over a network.
CVSS 3.1HIGH 8.8· Network · No auth · User interaction · EPSS 0.00819 · Published 2026-09-08 · Fixed in 10.0.14393.9512, 10.0.17763.9245 +4 CWE-190
Priority MEDIUM 42
Heap-based buffer overflow in Remote Desktop Client allows an unauthorized attacker to execute code over a network.
CVSS 3.1HIGH 8.8· Network · No auth · User interaction · EPSS 0.00819 · Published 2026-09-08 · Fixed in 10.0.14393.9512, 10.0.17763.9245 +10 CWE-122
Priority MEDIUM 42
Out-of-bounds read in Microsoft Windows Media Foundation allows an unauthorized attacker to execute code over a network.
CVSS 3.1HIGH 8.8· Network · No auth · User interaction · EPSS 0.00819 · Published 2026-09-08 · Fixed in 10.0.14393.9512, 10.0.17763.9245 +10 CWE-121
Priority MEDIUM 41
Integer overflow or wraparound in Windows iSCSI allows an unauthorized attacker to execute code over a network.
CVSS 3.1HIGH 8.8· Network · No auth · User interaction · EPSS 0.00798 · Published 2026-10-13 · Fixed in 10.0.14393.9512, 10.0.17763.9245 +10 CWE-190
Priority MEDIUM 41
Out-of-bounds read in Windows Key Distribution Center allows an unauthorized attacker to deny service over a network.
CVSS 3.1HIGH 7.5· Network · No auth · No interaction · EPSS 0.01174 · Published 2026-09-08 · Fixed in 10.0.14393.9512, 10.0.17763.9245 +10 CWE-125
Priority MEDIUM 41
Out-of-bounds read in Windows Services for NFS ONCRPC XDR Driver allows an unauthorized attacker to deny service over a network.
CVSS 3.1HIGH 7.5· Network · No auth · No interaction · EPSS 0.01174 · Published 2026-09-08 · Fixed in 10.0.14393.9512, 10.0.17763.9245 +10 CWE-125
Priority MEDIUM 41
Out-of-bounds read in Windows DHCP Server allows an unauthorized attacker to deny service over a network.
CVSS 3.1HIGH 7.5· Network · No auth · No interaction · EPSS 0.01174 · Published 2026-09-08 · Fixed in 10.0.14393.9512, 10.0.17763.9245 +4 CWE-125
Priority MEDIUM 41
Out-of-bounds read in Windows DHCP Server allows an unauthorized attacker to deny service over a network.
CVSS 3.1HIGH 7.5· Network · No auth · No interaction · EPSS 0.01174 · Published 2026-09-08 · Fixed in 10.0.14393.9512, 10.0.17763.9245 +4 CWE-125
Priority MEDIUM 41
Access of resource using incompatible type ('type confusion') in Windows DHCP Server allows an unauthorized attacker to deny service over a network.
CVSS 3.1HIGH 7.5· Network · No auth · No interaction · EPSS 0.01174 · Published 2026-09-08 · Fixed in 10.0.14393.9512, 10.0.17763.9245 +4 CWE-843
Priority MEDIUM 41
Access of resource using incompatible type ('type confusion') in Windows DHCP Server allows an unauthorized attacker to deny service over a network.
CVSS 3.1HIGH 7.5· Network · No auth · No interaction · EPSS 0.01174 · Published 2026-09-08 · Fixed in 10.0.14393.9512, 10.0.17763.9245 +4 CWE-843
Priority MEDIUM 41
Access of resource using incompatible type ('type confusion') in Windows DHCP Server allows an unauthorized attacker to deny service over a network.
CVSS 3.1HIGH 7.5· Network · No auth · No interaction · EPSS 0.01174 · Published 2026-09-08 · Fixed in 10.0.14393.9512, 10.0.17763.9245 +4 CWE-843
Priority MEDIUM 41
Out-of-bounds read in Windows DHCP Server allows an unauthorized attacker to deny service over a network.
CVSS 3.1HIGH 7.5· Network · No auth · No interaction · EPSS 0.01174 · Published 2026-09-08 · Fixed in 10.0.14393.9512, 10.0.17763.9245 +4 CWE-125
Priority MEDIUM 41
Out-of-bounds read in Windows DHCP Server allows an unauthorized attacker to deny service over a network.
CVSS 3.1HIGH 7.5· Network · No auth · No interaction · EPSS 0.01174 · Published 2026-09-08 · Fixed in 10.0.14393.9512, 10.0.17763.9245 +4 CWE-125
Priority MEDIUM 41
Out-of-bounds read in Windows DHCP Server allows an unauthorized attacker to deny service over a network.
CVSS 3.1HIGH 7.5· Network · No auth · No interaction · EPSS 0.01174 · Published 2026-09-08 · Fixed in 10.0.14393.9512, 10.0.17763.9245 +4 CWE-125
Priority MEDIUM 41
Access of resource using incompatible type ('type confusion') in Windows DHCP Server allows an unauthorized attacker to deny service over a network.
CVSS 3.1HIGH 7.5· Network · No auth · No interaction · EPSS 0.01174 · Published 2026-09-08 · Fixed in 10.0.14393.9512, 10.0.17763.9245 +4 CWE-843
Priority MEDIUM 41
Out-of-bounds read in Windows DHCP Server allows an unauthorized attacker to deny service over a network.
CVSS 3.1HIGH 7.5· Network · No auth · No interaction · EPSS 0.01174 · Published 2026-09-08 · Fixed in 10.0.14393.9512, 10.0.17763.9245 +4 CWE-125
Priority MEDIUM 41
Access of resource using incompatible type ('type confusion') in Windows DHCP Server allows an unauthorized attacker to deny service over a network.
CVSS 3.1HIGH 7.5· Network · No auth · No interaction · EPSS 0.01174 · Published 2026-09-08 · Fixed in 10.0.14393.9512, 10.0.17763.9245 +4 CWE-843
Priority MEDIUM 41
Use of uninitialized resource in Windows Failover Cluster allows an unauthorized attacker to disclose information over a network.
CVSS 3.1HIGH 7.5· Network · No auth · No interaction · EPSS 0.01027 · Published 2026-09-08 · Fixed in 10.0.17763.9245, 10.0.20348.5622 +1 CWE-908
Priority MEDIUM 41
Null pointer dereference in Windows SMB Server Network Transport Driver (srvnet.sys) allows an unauthorized attacker to deny service over a network.
CVSS 3.1HIGH 7.5· Network · No auth · No interaction · EPSS 0.01174 · Published 2026-09-08 · Fixed in 10.0.22631.7582, 10.0.26100.9445 +4 CWE-476
Priority MEDIUM 41
Buffer over-read in Windows Message Queuing Queue Manager allows an unauthorized attacker to disclose information over a network.
CVSS 3.1HIGH 7.5· Network · No auth · No interaction · EPSS 0.01027 · Published 2026-09-08 · Fixed in 10.0.14393.9512, 10.0.17763.9245 +10 CWE-126
Priority MEDIUM 41
Exposure of sensitive system information to an unauthorized control sphere in Windows Services for NFS ONCRPC XDR Driver allows an unauthorized attacker to disclose information over a network.
CVSS 3.1HIGH 7.5· Network · No auth · No interaction · EPSS 0.01027 · Published 2026-09-08 · Fixed in 10.0.14393.9512, 10.0.17763.9245 +10 CWE-497
Priority MEDIUM 41
Improper null termination in Windows Remote Desktop Protocol allows an unauthorized attacker to disclose information over a network.
CVSS 3.1HIGH 7.5· Network · No auth · No interaction · EPSS 0.01027 · Published 2026-09-08 · Fixed in 10.0.14393.9512, 10.0.17763.9245 +10 CWE-170
Priority MEDIUM 41
Missing release of memory after effective lifetime in Windows DHCP Server allows an unauthorized attacker to deny service over a network.
CVSS 3.1HIGH 7.5· Network · No auth · No interaction · EPSS 0.01174 · Published 2026-09-08 · Fixed in 10.0.14393.9512, 10.0.17763.9245 +4 CWE-401
Priority MEDIUM 41
Null pointer dereference in Windows IKE Extension allows an unauthorized attacker to deny service over a network.
CVSS 3.1HIGH 7.5· Network · No auth · No interaction · EPSS 0.01174 · Published 2026-09-08 · Fixed in 10.0.17763.9245, 10.0.19044.7725 +7 CWE-476
Priority MEDIUM 41
Missing release of memory after effective lifetime in Active Directory Domain Services allows an unauthorized attacker to deny service over a network.
CVSS 3.1HIGH 7.5· Network · No auth · No interaction · EPSS 0.01174 · Published 2026-09-08 · Fixed in 10.0.22631.7582, 10.0.26100.9445 +4 CWE-401
Priority MEDIUM 41
Stack-based buffer overflow in Windows Win32K allows an authorized attacker to elevate privileges over a network.
CVSS 3.1HIGH 8.8· Network · Low privileges · No interaction · EPSS 0.00768 · Published 2026-09-08 · Fixed in 10.0.17763.9245, 10.0.19044.7725 +7 CWE-121
Priority MEDIUM 41
Out-of-bounds read in Windows Kerberos allows an unauthorized attacker to deny service over a network.
CVSS 3.1HIGH 7.5· Network · No auth · No interaction · EPSS 0.01174 · Published 2026-09-08 · Fixed in 10.0.14393.9512, 10.0.17763.9245 +8 CWE-125
Priority MEDIUM 41
Untrusted pointer dereference in Windows Group Policy allows an authorized attacker to elevate privileges over a network.
CVSS 3.1HIGH 8.8· Network · Low privileges · No interaction · EPSS 0.00768 · Published 2026-09-08 · Fixed in 10.0.14393.9512, 10.0.17763.9245 +10 CWE-125
Priority MEDIUM 41
Stack-based buffer overflow in Windows Device Association Service allows an authorized attacker to elevate privileges over a network.
CVSS 3.1HIGH 8.8· Network · Low privileges · No interaction · EPSS 0.00768 · Published 2026-09-08 · Fixed in 10.0.14393.9512, 10.0.17763.9245 +10 CWE-121
Priority MEDIUM 41
Out-of-bounds read in Windows Win32K allows an authorized attacker to elevate privileges over a network.
CVSS 3.1HIGH 8.8· Network · Low privileges · No interaction · EPSS 0.00768 · Published 2026-09-08 · Fixed in 10.0.17763.9245, 10.0.19044.7725 +7 CWE-121
Priority MEDIUM 41
Heap-based buffer overflow in Virtual Hard Disk (VHD) Miniport Driver allows an authorized attacker to elevate privileges over a network.
CVSS 3.1HIGH 8.8· Network · Low privileges · No interaction · EPSS 0.00768 · Published 2026-09-08 · Fixed in 10.0.14393.9512, 10.0.17763.9245 +10 CWE-122
Priority MEDIUM 41
Authentication bypass by capture-replay in Windows Kerberos allows an authorized attacker to execute code over a network.
CVSS 3.1HIGH 8.8· Network · Low privileges · No interaction · EPSS 0.00778 · Published 2026-09-08 · Fixed in 10.0.14393.9512, 10.0.17763.9245 +10 CWE-294
Priority MEDIUM 41
Integer overflow or wraparound in Windows DNS allows an unauthorized attacker to deny service over a network.
CVSS 3.1HIGH 7.5· Network · No auth · No interaction · EPSS 0.01174 · Published 2026-09-08 · Fixed in 10.0.14393.9512, 10.0.17763.9245 +4 CWE-190
Priority MEDIUM 41
Heap-based buffer overflow in Windows Connected User Experiences and Telemetry allows an authorized attacker to elevate privileges over a network.
CVSS 3.1HIGH 8.8· Network · Low privileges · No interaction · EPSS 0.00768 · Published 2026-09-08 · Fixed in 10.0.17763.9245, 10.0.19044.7725 +7 CWE-122
Priority MEDIUM 41
Out-of-bounds read in Windows exFAT File System allows an authorized attacker to elevate privileges over a network.
CVSS 3.1HIGH 8.8· Network · Low privileges · No interaction · EPSS 0.00768 · Published 2026-09-08 · Fixed in 10.0.14393.9512, 10.0.17763.9245 +10 CWE-125
Priority MEDIUM 41
Missing release of memory after effective lifetime in Windows TCP/IP allows an unauthorized attacker to deny service over a network.
CVSS 3.1HIGH 7.5· Network · No auth · No interaction · EPSS 0.01174 · Published 2026-09-08 · Fixed in 10.0.22631.7582, 10.0.26100.9445 +4 CWE-401
Priority MEDIUM 41
Null pointer dereference in Windows IKE Extension allows an unauthorized attacker to deny service over a network.
CVSS 3.1HIGH 7.5· Network · No auth · No interaction · EPSS 0.01174 · Published 2026-09-08 · Fixed in 10.0.22631.7582, 10.0.26100.9445 +4 CWE-476
Priority MEDIUM 41
Heap-based buffer overflow in Windows Spaceport.sys allows an authorized attacker to elevate privileges over a network.
CVSS 3.1HIGH 8.8· Network · Low privileges · No interaction · EPSS 0.00768 · Published 2026-09-08 · Fixed in 10.0.14393.9512, 10.0.17763.9245 +8 CWE-122
Priority MEDIUM 41
Out-of-bounds read in Microsoft Azure Attestation service and Device Health Attestation Service allows an unauthorized attacker to disclose information over a network.
CVSS 3.1HIGH 7.5· Network · No auth · No interaction · EPSS 0.01027 · Published 2026-09-08 · Fixed in 10.0.17763.9245, 10.0.20348.5622 +1 CWE-125
Priority MEDIUM 41
Out-of-bounds read in Windows LDAP - Lightweight Directory Access Protocol allows an unauthorized attacker to deny service over a network.
CVSS 3.1HIGH 7.5· Network · No auth · No interaction · EPSS 0.01174 · Published 2026-09-08 · Fixed in 10.0.14393.9512, 10.0.17763.9245 +10 CWE-125
Priority MEDIUM 41
Out-of-bounds read in Windows DHCP Server allows an unauthorized attacker to deny service over a network.
CVSS 3.1HIGH 7.5· Network · No auth · No interaction · EPSS 0.01174 · Published 2026-09-08 · Fixed in 10.0.14393.9512, 10.0.17763.9245 +4 CWE-125
Priority MEDIUM 41
Out-of-bounds read in BranchCache allows an unauthorized attacker to deny service over a network.
CVSS 3.1HIGH 7.5· Network · No auth · No interaction · EPSS 0.01174 · Published 2026-09-08 · Fixed in 10.0.14393.9512, 10.0.17763.9245 +10 CWE-125
Priority MEDIUM 41
Out-of-bounds read in Windows Message Queuing Queue Manager allows an unauthorized attacker to deny service over a network.
CVSS 3.1HIGH 7.5· Network · No auth · No interaction · EPSS 0.01174 · Published 2026-09-08 · Fixed in 10.0.14393.9512, 10.0.17763.9245 +10 CWE-125
Priority MEDIUM 40
Heap-based buffer overflow in Windows Error Reporting allows an authorized attacker to elevate privileges locally.
CVSS 3.1HIGH 8.8· Local · Low privileges · No interaction · EPSS 0.00333 · Published 2026-09-08 · Fixed in 10.0.14393.9512, 10.0.17763.9245 +10 CWE-122
Priority MEDIUM 40
Untrusted pointer dereference in Windows Hyper-V allows an authorized attacker to execute code locally.
CVSS 3.1HIGH 8.8· Local · Low privileges · No interaction · EPSS 0.00333 · Published 2026-09-08 · Fixed in 10.0.22631.7582, 10.0.26100.9445 +4 CWE-822
Priority MEDIUM 40
Improper validation of consistency within input in Windows TCP/IP allows an unauthorized attacker to bypass a security feature over a network.
CVSS 3.1HIGH 7.5· Network · No auth · No interaction · EPSS 0.00826 · Published 2026-09-08 · Fixed in 10.0.14393.9512, 10.0.17763.9245 +10 CWE-1288
Priority MEDIUM 40
Heap-based buffer overflow in Windows Hyper-V allows an authorized attacker to execute code locally.
CVSS 3.1HIGH 8.8· Local · Low privileges · No interaction · EPSS 0.00333 · Published 2026-09-08 · Fixed in 10.0.14393.9512, 10.0.17763.9245 +9 CWE-122
Priority LOW 39
Improper link resolution before file access ('link following') in Windows Shell allows an unauthorized attacker to perform spoofing over a network.
CVSS 3.1HIGH 8.1· Network · No auth · User interaction · EPSS 0.00849 · Published 2026-09-08 · Fixed in 10.0.14393.9512, 10.0.17763.9245 +10 CWE-59
Priority LOW 38
Use after free in Windows Message Queuing allows an unauthorized attacker to execute code over a network.
CVSS 3.1HIGH 8.1· Network · No auth · No interaction · EPSS 0.00707 · Published 2026-09-08 · Fixed in 10.0.19044.7725, 10.0.19045.7725 +6 CWE-416
Priority LOW 38
Use after free in Reliable Multicast Transport Driver (RMCAST) allows an unauthorized attacker to execute code over a network.
CVSS 3.1HIGH 8.1· Network · No auth · No interaction · EPSS 0.00707 · Published 2026-09-08 · Fixed in 10.0.17763.9245, 10.0.20348.5622 +1 CWE-416
Priority LOW 38
Use after free in Reliable Multicast Transport Driver (RMCAST) allows an unauthorized attacker to execute code over a network.
CVSS 3.1HIGH 8.1· Network · No auth · No interaction · EPSS 0.00707 · Published 2026-09-08 · Fixed in 10.0.14393.9512, 10.0.17763.9245 +10 CWE-416
Priority LOW 38
Untrusted pointer dereference in Windows Failover Cluster allows an unauthorized attacker to execute code over a network.
CVSS 3.1HIGH 8.1· Network · No auth · No interaction · EPSS 0.00707 · Published 2026-09-08 · Fixed in 10.0.17763.9245, 10.0.20348.5622 +1 CWE-822
Priority LOW 38
Use after free in DNS Server allows an unauthorized attacker to execute code over a network.
CVSS 3.1HIGH 8.1· Network · No auth · No interaction · EPSS 0.00707 · Published 2026-09-08 · Fixed in 10.0.14393.9512, 10.0.17763.9245 +4 CWE-416
Priority LOW 38
Out-of-bounds read in Windows NTFS allows an unauthorized attacker to elevate privileges locally.
CVSS 3.1HIGH 8.4· Local · No auth · No interaction · EPSS 0.00337 · Published 2026-09-08 · Fixed in 10.0.14393.9512, 10.0.17763.9245 +10 CWE-125
Priority LOW 38
Use after free in Windows DNS allows an unauthorized attacker to execute code over a network.
CVSS 3.1HIGH 8.1· Network · No auth · No interaction · EPSS 0.00707 · Published 2026-09-08 · Fixed in 10.0.14393.9512, 10.0.17763.9245 +4 CWE-416
Priority LOW 38
Use after free in IP Helper allows an unauthorized attacker to execute code over a network.
CVSS 3.1HIGH 8.1· Network · No auth · No interaction · EPSS 0.00707 · Published 2026-09-08 · Fixed in 10.0.14393.9512, 10.0.17763.9245 +10 CWE-416
Priority LOW 38
Heap-based buffer overflow in Windows USB Video Driver allows an authorized attacker to elevate privileges locally.
CVSS 3.1HIGH 8.2· Local · High privileges · No interaction · EPSS 0.00348 · Published 2026-09-08 · Fixed in 10.0.17763.9245, 10.0.19044.7725 +7 CWE-122
Priority LOW 38
Out-of-bounds read in Windows Hyper-V allows an authorized attacker to elevate privileges locally.
CVSS 3.1HIGH 8.2· Local · High privileges · No interaction · EPSS 0.00348 · Published 2026-09-08 · Fixed in 10.0.14393.9512, 10.0.17763.9245 +8 CWE-122
Priority LOW 38
Use after free in Windows SMB Client allows an unauthorized attacker to execute code over a network.
CVSS 3.1HIGH 8.1· Network · No auth · No interaction · EPSS 0.00707 · Published 2026-09-08 · Fixed in 10.0.22631.7582, 10.0.26100.9445 +4 CWE-416
Priority LOW 38
Remote Code Execution in Windows Routing and Remote Access Service (RRAS) allows attacker to gain an unauthorized access to victim's machine
CVSS 3.1HIGH 8.1· Network · No auth · No interaction · EPSS 0.0069 · Published 2026-09-08 · Fixed in 10.0.14393.9512, 10.0.17763.9245 +10 CWE-416
Priority LOW 38
Use after free in Windows Ancillary Function Driver for WinSock allows an unauthorized attacker to elevate privileges over a network.
CVSS 3.1HIGH 8.1· Network · No auth · No interaction · EPSS 0.00707 · Published 2026-09-08 · Fixed in 10.0.14393.9512, 10.0.17763.9245 +10 CWE-416
Priority LOW 38
Use after free in DNS Server allows an unauthorized attacker to execute code over a network.
CVSS 3.1HIGH 8.1· Network · No auth · No interaction · EPSS 0.00707 · Published 2026-09-08 · Fixed in 10.0.14393.9512, 10.0.17763.9245 +4 CWE-416
Priority LOW 38
Heap-based buffer overflow in Windows Secure Kernel Mode allows an authorized attacker to elevate privileges locally.
CVSS 3.1HIGH 8.2· Local · High privileges · No interaction · EPSS 0.00348 · Published 2026-09-08 · Fixed in 10.0.14393.9512, 10.0.17763.9245 +8 CWE-122
Priority LOW 38
Use after free in Windows DHCP Server allows an authorized attacker to execute code over an adjacent network.
CVSS 3.1HIGH 8.0· Adjacent network · Low privileges · No interaction · EPSS 0.00576 · Published 2026-09-08 · Fixed in 10.0.14393.9512, 10.0.17763.9245 +4 CWE-415
Priority LOW 38
Heap-based buffer overflow in Windows NTFS allows an authorized attacker to elevate privileges over a network.
CVSS 3.1HIGH 8.0· Network · Low privileges · User interaction · EPSS 0.00768 · Published 2026-09-08 · Fixed in 10.0.17763.9245, 10.0.19044.7725 +7 CWE-122
Priority LOW 38
Use after free in Windows DNS allows an unauthorized attacker to execute code over a network.
CVSS 3.1HIGH 8.1· Network · No auth · No interaction · EPSS 0.00707 · Published 2026-09-08 · Fixed in 10.0.20348.5622, 10.0.26100.33438 CWE-416
Priority LOW 38
Heap-based buffer overflow in Windows DHCP Server allows an authorized attacker to execute code over an adjacent network.
CVSS 3.1HIGH 8.0· Adjacent network · Low privileges · No interaction · EPSS 0.00576 · Published 2026-09-08 · Fixed in 10.0.14393.9512, 10.0.17763.9245 +10 CWE-122
Priority LOW 38
Integer overflow or wraparound in Windows Secure Kernel Mode allows an authorized attacker to elevate privileges locally.
CVSS 3.1HIGH 8.2· Local · High privileges · No interaction · EPSS 0.00348 · Published 2026-09-08 · Fixed in 10.0.14393.9512, 10.0.17763.9245 +8 CWE-190
Priority LOW 38
Concurrent execution using shared resource with improper synchronization ('race condition') in DNS Server allows an unauthorized attacker to execute code over a network.
CVSS 3.1HIGH 8.1· Network · No auth · No interaction · EPSS 0.00542 · Published 2026-09-08 · Fixed in 10.0.14393.9512, 10.0.17763.9245 +4 CWE-362
Priority LOW 38
Heap-based buffer overflow in Windows Biometric Service allows an authorized attacker to elevate privileges over a network.
CVSS 3.1HIGH 8.0· Network · Low privileges · User interaction · EPSS 0.00768 · Published 2026-09-08 · Fixed in 10.0.14393.9512, 10.0.17763.9245 +8 CWE-122
Priority LOW 38
Use after free in Windows DNS allows an unauthorized attacker to execute code over a network.
CVSS 3.1HIGH 8.1· Network · No auth · No interaction · EPSS 0.00707 · Published 2026-09-08 · Fixed in 10.0.14393.9512, 10.0.17763.9245 +4 CWE-416
Priority LOW 38
Improper limitation of a pathname to a restricted directory ('path traversal') in Windows PowerShell allows an authorized attacker to elevate privileges over a network.
CVSS 3.1HIGH 8.0· Network · Low privileges · User interaction · EPSS 0.00868 · Published 2026-09-08 · Fixed in 10.0.14393.9512, 10.0.17763.9245 +10 CWE-22
Priority LOW 38
Heap-based buffer overflow in Windows Text Shaping allows an unauthorized attacker to execute code over a network.
CVSS 3.1HIGH 8.1· Network · No auth · No interaction · EPSS 0.00707 · Published 2026-09-08 · Fixed in 10.0.14393.9512, 10.0.17763.9245 +10 CWE-122
Priority LOW 38
Concurrent execution using shared resource with improper synchronization ('race condition') in DNS Server allows an unauthorized attacker to execute code over a network.
CVSS 3.1HIGH 8.1· Network · No auth · No interaction · EPSS 0.00542 · Published 2026-09-08 · Fixed in 10.0.14393.9512, 10.0.17763.9245 +4 CWE-362
Priority LOW 38
Heap-based buffer overflow in Windows Biometric Service allows an authorized attacker to elevate privileges over a network.
CVSS 3.1HIGH 8.0· Network · Low privileges · User interaction · EPSS 0.00768 · Published 2026-09-08 · Fixed in 10.0.14393.9512, 10.0.17763.9245 +8 CWE-122
Priority LOW 38
Heap-based buffer overflow in Windows Link Layer Topology Discovery Protocol allows an unauthorized attacker to execute code over a network.
CVSS 3.1HIGH 8.1· Network · No auth · No interaction · EPSS 0.00707 · Published 2026-09-08 · Fixed in 10.0.14393.9512, 10.0.17763.9245 +10 CWE-122
Priority LOW 38
Heap-based buffer overflow in Windows Biometric Service allows an authorized attacker to elevate privileges over a network.
CVSS 3.1HIGH 8.0· Network · Low privileges · User interaction · EPSS 0.00768 · Published 2026-09-08 · Fixed in 10.0.14393.9512, 10.0.17763.9245 +8 CWE-122
Priority LOW 38
Deserialization of untrusted data in Windows IP Address Management (IPAM) Service allows an authorized attacker to elevate privileges locally.
CVSS 3.1HIGH 7.0· Local · Low privileges · No interaction · EPSS 0.02798 · Published 2026-09-08 · Fixed in 10.0.14393.9512, 10.0.17763.9245 +8 CWE-502
Priority LOW 38
Heap-based buffer overflow in Windows Spaceport.sys allows an authorized attacker to elevate privileges over a network.
CVSS 3.1HIGH 8.0· Network · Low privileges · User interaction · EPSS 0.00768 · Published 2026-09-08 · Fixed in 10.0.14393.9512, 10.0.17763.9245 +10 CWE-122
Priority LOW 38
Heap-based buffer overflow in Windows NTFS allows an unauthorized attacker to execute code locally.
CVSS 3.1HIGH 8.4· Local · No auth · No interaction · EPSS 0.00364 · Published 2026-09-08 · Fixed in 10.0.14393.9512, 10.0.17763.9245 +10 CWE-122
Priority LOW 38
Heap-based buffer overflow in Windows HTTP Print Provider allows an authorized attacker to execute code over a network.
CVSS 3.1HIGH 8.0· Network · Low privileges · User interaction · EPSS 0.00768 · Published 2026-09-08 · Fixed in 10.0.14393.9512, 10.0.17763.9245 +10 CWE-122
Priority LOW 38
Stack-based buffer overflow in Windows DHCP Server allows an unauthorized attacker to execute code over a network.
CVSS 3.1HIGH 8.1· Network · No auth · No interaction · EPSS 0.00707 · Published 2026-09-08 · Fixed in 10.0.14393.9512, 10.0.17763.9245 +4 CWE-121
Priority LOW 38
Use after free in Active Directory Domain Services allows an unauthorized attacker to execute code over a network.
CVSS 3.1HIGH 8.1· Network · No auth · No interaction · EPSS 0.00707 · Published 2026-09-08 · Fixed in 10.0.14393.9512, 10.0.17763.9245 +10 CWE-416
Priority LOW 38
Use after free in Reliable Multicast Transport Driver (RMCAST) allows an unauthorized attacker to execute code over a network.
CVSS 3.1HIGH 8.1· Network · No auth · No interaction · EPSS 0.00707 · Published 2026-09-08 · Fixed in 10.0.17763.9245, 10.0.20348.5622 +1 CWE-416
Priority LOW 38
Use after free in Active Directory Domain Services allows an unauthorized attacker to execute code over a network.
CVSS 3.1HIGH 8.1· Network · No auth · No interaction · EPSS 0.00707 · Published 2026-09-08 · Fixed in 10.0.14393.9512, 10.0.17763.9245 +10 CWE-416
Priority LOW 38
Stack-based buffer overflow in Windows DHCP Server allows an unauthorized attacker to execute code over a network.
CVSS 3.1HIGH 8.1· Network · No auth · No interaction · EPSS 0.00707 · Published 2026-09-08 · Fixed in 10.0.14393.9512, 10.0.17763.9245 +4 CWE-121
Priority LOW 38
Out-of-bounds read in Windows NTFS allows an authorized attacker to elevate privileges over a network.
CVSS 3.1HIGH 8.0· Network · Low privileges · User interaction · EPSS 0.00768 · Published 2026-09-08 · Fixed in 10.0.14393.9512, 10.0.17763.9245 +10 CWE-125
Priority LOW 38
Stack-based buffer overflow in Windows USB Driver allows an authorized attacker to elevate privileges over a network.
CVSS 3.1HIGH 8.0· Network · Low privileges · User interaction · EPSS 0.00768 · Published 2026-09-08 · Fixed in 10.0.17763.9245, 10.0.19044.7725 +7 CWE-121
Priority LOW 38
Heap-based buffer overflow in Windows Enterprise App Management allows an authorized attacker to elevate privileges over a network.
CVSS 3.1HIGH 8.0· Network · Low privileges · User interaction · EPSS 0.00768 · Published 2026-09-08 · Fixed in 10.0.14393.9512, 10.0.17763.9245 +10 CWE-122
Priority LOW 38
Heap-based buffer overflow in Windows NTFS allows an unauthorized attacker to execute code locally.
CVSS 3.1HIGH 8.4· Local · No auth · No interaction · EPSS 0.00364 · Published 2026-09-08 · Fixed in 10.0.14393.9512, 10.0.17763.9245 +10 CWE-122
Priority LOW 38
Heap-based buffer overflow in Windows Error Reporting allows an authorized attacker to elevate privileges over a network.
CVSS 3.1HIGH 8.0· Network · Low privileges · User interaction · EPSS 0.00768 · Published 2026-09-08 · Fixed in 10.0.14393.9512, 10.0.17763.9245 +10 CWE-122
Priority LOW 38
Out-of-bounds read in Windows BitLocker allows an authorized attacker to elevate privileges over a network.
CVSS 3.1HIGH 8.0· Network · Low privileges · User interaction · EPSS 0.00768 · Published 2026-09-08 · Fixed in 10.0.14393.9512, 10.0.17763.9245 +10 CWE-125
Priority LOW 38
Incorrect conversion between numeric types in Microsoft JScript allows an unauthorized attacker to execute code over a network.
CVSS 3.1HIGH 8.1· Network · No auth · No interaction · EPSS 0.00707 · Published 2026-09-08 · Fixed in 10.0.14393.9512, 10.0.17763.9245 +10 CWE-681
Priority LOW 38
Out-of-bounds read in Windows VOLSNAP.SYS allows an authorized attacker to elevate privileges over a network.
CVSS 3.1HIGH 8.0· Network · Low privileges · User interaction · EPSS 0.00768 · Published 2026-09-08 · Fixed in 10.0.14393.9512, 10.0.17763.9245 +10 CWE-125
Priority LOW 38
Heap-based buffer overflow in Windows USB Video Driver allows an authorized attacker to elevate privileges over a network.
CVSS 3.1HIGH 8.0· Network · Low privileges · User interaction · EPSS 0.00768 · Published 2026-09-08 · Fixed in 10.0.14393.9512, 10.0.17763.9245 +10 CWE-122
Priority LOW 38
Heap-based buffer overflow in Volume Manager Driver allows an authorized attacker to elevate privileges over a network.
CVSS 3.1HIGH 8.0· Network · Low privileges · User interaction · EPSS 0.00768 · Published 2026-09-08 · Fixed in 10.0.14393.9512, 10.0.17763.9245 +10 CWE-122
Priority LOW 38
Stack-based buffer overflow in Windows DHCP Server allows an authorized attacker to execute code over an adjacent network.
CVSS 3.1HIGH 8.0· Adjacent network · Low privileges · No interaction · EPSS 0.00576 · Published 2026-09-08 · Fixed in 10.0.14393.9512, 10.0.17763.9245 +4 CWE-121
Priority LOW 38
Heap-based buffer overflow in Windows Overlay Filter allows an authorized attacker to elevate privileges over a network.
CVSS 3.1HIGH 8.0· Network · Low privileges · User interaction · EPSS 0.00768 · Published 2026-09-08 · Fixed in 10.0.14393.9512, 10.0.17763.9245 +9 CWE-122
Priority LOW 38
Out-of-bounds read in Microsoft Local Security Authority Server (lsasrv) allows an authorized attacker to elevate privileges over a network.
CVSS 3.1HIGH 8.0· Network · Low privileges · User interaction · EPSS 0.00768 · Published 2026-09-08 · Fixed in 10.0.19044.7725, 10.0.19045.7725 +6 CWE-125
Priority LOW 38
Heap-based buffer overflow in Windows Print Spooler Components allows an authorized attacker to elevate privileges over a network.
CVSS 3.1HIGH 8.0· Network · Low privileges · User interaction · EPSS 0.00768 · Published 2026-09-08 · Fixed in 10.0.14393.9512, 10.0.17763.9245 +10 CWE-122
Priority LOW 38
Out-of-bounds read in Windows NTFS allows an authorized attacker to elevate privileges over a network.
CVSS 3.1HIGH 8.0· Network · Low privileges · User interaction · EPSS 0.00768 · Published 2026-09-08 · Fixed in 10.0.14393.9512, 10.0.17763.9245 +10 CWE-125
Priority LOW 38
Heap-based buffer overflow in Microsoft JScript allows an unauthorized attacker to execute code over a network.
CVSS 3.1HIGH 8.1· Network · No auth · No interaction · EPSS 0.00707 · Published 2026-09-08 · Fixed in 10.0.14393.9512, 10.0.17763.9245 +9 CWE-122
Priority LOW 38
Double free in Microsoft Windows Search Component allows an authorized attacker to elevate privileges over a network.
CVSS 3.1HIGH 8.0· Network · Low privileges · User interaction · EPSS 0.00768 · Published 2026-09-08 · Fixed in 10.0.22631.7582, 10.0.26100.9445 +4 CWE-415
Priority LOW 38
Stack-based buffer overflow in Windows Win32K allows an authorized attacker to elevate privileges over a network.
CVSS 3.1HIGH 8.0· Network · Low privileges · User interaction · EPSS 0.00768 · Published 2026-09-08 · Fixed in 10.0.14393.9512, 10.0.17763.9245 +9 CWE-121
Priority LOW 38
Heap-based buffer overflow in Microsoft Standard XPS allows an authorized attacker to elevate privileges over a network.
CVSS 3.1HIGH 8.0· Network · Low privileges · User interaction · EPSS 0.00768 · Published 2026-09-08 · Fixed in 10.0.14393.9512, 10.0.17763.9245 +10 CWE-122
Priority LOW 38
Heap-based buffer overflow in Windows Error Reporting allows an authorized attacker to elevate privileges over a network.
CVSS 3.1HIGH 8.0· Network · Low privileges · User interaction · EPSS 0.00768 · Published 2026-09-08 · Fixed in 10.0.14393.9512, 10.0.17763.9245 +10 CWE-122
Priority LOW 38
Heap-based buffer overflow in Windows Win32K allows an authorized attacker to elevate privileges over a network.
CVSS 3.1HIGH 8.0· Network · Low privileges · User interaction · EPSS 0.00768 · Published 2026-09-08 · Fixed in 16.112.26090911, 16.0.20430.20000 CWE-122
Priority LOW 38
Stack-based buffer overflow in Windows Fast FAT Driver allows an authorized attacker to elevate privileges over a network.
CVSS 3.1HIGH 8.0· Network · Low privileges · User interaction · EPSS 0.00768 · Published 2026-09-08 · Fixed in 10.0.14393.9512, 10.0.17763.9245 +10 CWE-121
Priority LOW 38
Heap-based buffer overflow in Windows Program Compatibility Assistant Service allows an authorized attacker to elevate privileges over a network.
CVSS 3.1HIGH 8.0· Network · Low privileges · User interaction · EPSS 0.00768 · Published 2026-09-08 · Fixed in 10.0.14393.9512, 10.0.17763.9245 +10 CWE-122
Priority LOW 38
Stack-based buffer overflow in Windows NTFS allows an authorized attacker to elevate privileges over a network.
CVSS 3.1HIGH 8.0· Network · Low privileges · User interaction · EPSS 0.00768 · Published 2026-09-08 · Fixed in 10.0.14393.9512, 10.0.17763.9245 +10 CWE-121
Priority LOW 38
Stack-based buffer overflow in Windows NTFS allows an authorized attacker to elevate privileges over a network.
CVSS 3.1HIGH 8.0· Network · Low privileges · User interaction · EPSS 0.00768 · Published 2026-09-08 · Fixed in 10.0.14393.9512, 10.0.17763.9245 +10 CWE-121
Priority LOW 38
Integer underflow (wrap or wraparound) in Windows GDI+ allows an authorized attacker to elevate privileges over a network.
CVSS 3.1HIGH 8.0· Network · Low privileges · User interaction · EPSS 0.00768 · Published 2026-09-08 · Fixed in 10.0.14393.9512, 10.0.17763.9245 +10 CWE-122
Priority LOW 37
Untrusted pointer dereference in Windows ALPC allows an authorized attacker to elevate privileges locally.
CVSS 3.1HIGH 8.2· Local · High privileges · No interaction · EPSS 0.00291 · Published 2026-09-08 · Fixed in 10.0.17763.9245, 10.0.19044.7725 +7 CWE-822
Priority LOW 37
Origin validation error in Windows DNS allows an unauthorized attacker to perform spoofing over a network.
CVSS 3.1HIGH 8.1· Network · No auth · No interaction · EPSS 0.00337 · Published 2026-09-08 · Fixed in 10.0.14393.9512, 10.0.17763.9245 +4 CWE-346
Priority LOW 36
Heap-based buffer overflow in Microsoft Graphics Component allows an authorized attacker to execute code locally.
CVSS 3.1HIGH 7.8· Local · Low privileges · No interaction · EPSS 0.00333 · Published 2026-09-08 · Fixed in 10.0.14393.9512, 10.0.17763.9245 +10 CWE-122
Priority LOW 36
Heap-based buffer overflow in Windows NTFS allows an authorized attacker to elevate privileges locally.
CVSS 3.1HIGH 7.8· Local · Low privileges · No interaction · EPSS 0.00333 · Published 2026-09-08 · Fixed in 10.0.14393.9512, 10.0.17763.9245 +10 CWE-122
Priority LOW 36
Stack-based buffer overflow in Microsoft Graphics Component allows an authorized attacker to elevate privileges locally.
CVSS 3.1HIGH 7.8· Local · Low privileges · No interaction · EPSS 0.00333 · Published 2026-09-08 · Fixed in 10.0.22631.7582, 10.0.26100.9445 +4 CWE-121
Priority LOW 36
Heap-based buffer overflow in Windows Biometric Service allows an authorized attacker to elevate privileges locally.
CVSS 3.1HIGH 7.8· Local · Low privileges · No interaction · EPSS 0.00333 · Published 2026-09-08 · Fixed in 10.0.14393.9512, 10.0.17763.9245 +8 CWE-122
Priority LOW 36
Heap-based buffer overflow in Windows Biometric Service allows an authorized attacker to elevate privileges locally.
CVSS 3.1HIGH 7.8· Local · Low privileges · No interaction · EPSS 0.00333 · Published 2026-09-08 · Fixed in 10.0.14393.9512, 10.0.17763.9245 +8 CWE-122
Priority LOW 36
Heap-based buffer overflow in Windows Biometric Service allows an authorized attacker to elevate privileges locally.
CVSS 3.1HIGH 7.8· Local · Low privileges · No interaction · EPSS 0.00333 · Published 2026-09-08 · Fixed in 10.0.14393.9512, 10.0.17763.9245 +8 CWE-122
Priority LOW 36
Heap-based buffer overflow in Windows Biometric Service allows an authorized attacker to elevate privileges locally.
CVSS 3.1HIGH 7.8· Local · Low privileges · No interaction · EPSS 0.00333 · Published 2026-09-08 · Fixed in 10.0.14393.9512, 10.0.17763.9245 +8 CWE-122
Priority LOW 36
Heap-based buffer overflow in Windows Biometric Service allows an authorized attacker to elevate privileges locally.
CVSS 3.1HIGH 7.8· Local · Low privileges · No interaction · EPSS 0.00333 · Published 2026-09-08 · Fixed in 10.0.14393.9512, 10.0.17763.9245 +8 CWE-122
Priority LOW 36
Heap-based buffer overflow in Windows Biometric Service allows an authorized attacker to elevate privileges locally.
CVSS 3.1HIGH 7.8· Local · Low privileges · No interaction · EPSS 0.00333 · Published 2026-09-08 · Fixed in 10.0.14393.9512, 10.0.17763.9245 +8 CWE-122
Priority LOW 36
Heap-based buffer overflow in Windows Biometric Service allows an authorized attacker to elevate privileges locally.
CVSS 3.1HIGH 7.8· Local · Low privileges · No interaction · EPSS 0.00333 · Published 2026-09-08 · Fixed in 10.0.14393.9512, 10.0.17763.9245 +8 CWE-122
Priority LOW 36
Heap-based buffer overflow in Windows Biometric Service allows an authorized attacker to elevate privileges locally.
CVSS 3.1HIGH 7.8· Local · Low privileges · No interaction · EPSS 0.00333 · Published 2026-09-08 · Fixed in 10.0.14393.9512, 10.0.17763.9245 +8 CWE-122
Priority LOW 36
Use after free in Windows Biometric Service allows an authorized attacker to elevate privileges locally.
CVSS 3.1HIGH 7.8· Local · Low privileges · No interaction · EPSS 0.00333 · Published 2026-09-08 · Fixed in 10.0.14393.9512, 10.0.17763.9245 +8 CWE-416
Priority LOW 36
Heap-based buffer overflow in Windows Biometric Service allows an authorized attacker to elevate privileges locally.
CVSS 3.1HIGH 7.8· Local · Low privileges · No interaction · EPSS 0.00333 · Published 2026-09-08 · Fixed in 10.0.14393.9512, 10.0.17763.9245 +8 CWE-122
Priority LOW 36
Heap-based buffer overflow in Windows Biometric Service allows an authorized attacker to elevate privileges locally.
CVSS 3.1HIGH 7.8· Local · Low privileges · No interaction · EPSS 0.00333 · Published 2026-09-08 · Fixed in 10.0.14393.9512, 10.0.17763.9245 +8 CWE-122
Priority LOW 36
Heap-based buffer overflow in Windows Biometric Service allows an authorized attacker to elevate privileges locally.
CVSS 3.1HIGH 7.8· Local · Low privileges · No interaction · EPSS 0.00333 · Published 2026-09-08 · Fixed in 10.0.14393.9512, 10.0.17763.9245 +8 CWE-122
Priority LOW 36
Heap-based buffer overflow in Windows Biometric Service allows an authorized attacker to elevate privileges locally.
CVSS 3.1HIGH 7.8· Local · Low privileges · No interaction · EPSS 0.00333 · Published 2026-09-08 · Fixed in 10.0.14393.9512, 10.0.17763.9245 +8 CWE-122
Priority LOW 36
Heap-based buffer overflow in Windows Biometric Service allows an authorized attacker to elevate privileges locally.
CVSS 3.1HIGH 7.8· Local · Low privileges · No interaction · EPSS 0.00333 · Published 2026-09-08 · Fixed in 10.0.14393.9512, 10.0.17763.9245 +8 CWE-122
Priority LOW 36
Heap-based buffer overflow in Windows Biometric Service allows an authorized attacker to elevate privileges locally.
CVSS 3.1HIGH 7.8· Local · Low privileges · No interaction · EPSS 0.00333 · Published 2026-09-08 · Fixed in 10.0.14393.9512, 10.0.17763.9245 +8 CWE-122
Priority LOW 36
Heap-based buffer overflow in Windows Biometric Service allows an authorized attacker to elevate privileges locally.
CVSS 3.1HIGH 7.8· Local · Low privileges · No interaction · EPSS 0.00333 · Published 2026-09-08 · Fixed in 10.0.14393.9512, 10.0.17763.9245 +8 CWE-122
Priority LOW 36
Heap-based buffer overflow in Windows Biometric Service allows an authorized attacker to elevate privileges locally.
CVSS 3.1HIGH 7.8· Local · Low privileges · No interaction · EPSS 0.00333 · Published 2026-09-08 · Fixed in 10.0.14393.9512, 10.0.17763.9245 +8 CWE-122
Priority LOW 36
Heap-based buffer overflow in Windows Biometric Service allows an authorized attacker to elevate privileges locally.
CVSS 3.1HIGH 7.8· Local · Low privileges · No interaction · EPSS 0.00333 · Published 2026-09-08 · Fixed in 10.0.14393.9512, 10.0.17763.9245 +8 CWE-122
Priority LOW 36
Heap-based buffer overflow in Windows Biometric Service allows an authorized attacker to elevate privileges locally.
CVSS 3.1HIGH 7.8· Local · Low privileges · No interaction · EPSS 0.00333 · Published 2026-09-08 · Fixed in 10.0.14393.9512, 10.0.17763.9245 +8 CWE-122
Priority LOW 36
Use after free in Windows Biometric Service allows an authorized attacker to elevate privileges locally.
CVSS 3.1HIGH 7.8· Local · Low privileges · No interaction · EPSS 0.00333 · Published 2026-09-08 · Fixed in 10.0.14393.9512, 10.0.17763.9245 +8 CWE-400
Priority LOW 36
Heap-based buffer overflow in Windows Biometric Service allows an authorized attacker to elevate privileges locally.
CVSS 3.1HIGH 7.8· Local · Low privileges · No interaction · EPSS 0.00333 · Published 2026-09-08 · Fixed in 10.0.14393.9512, 10.0.17763.9245 +8 CWE-122
Priority LOW 36
Heap-based buffer overflow in Windows Biometric Service allows an authorized attacker to elevate privileges locally.
CVSS 3.1HIGH 7.8· Local · Low privileges · No interaction · EPSS 0.00333 · Published 2026-09-08 · Fixed in 10.0.14393.9512, 10.0.17763.9245 +8 CWE-122
Priority LOW 36
Heap-based buffer overflow in Windows Biometric Service allows an authorized attacker to elevate privileges locally.
CVSS 3.1HIGH 7.8· Local · Low privileges · No interaction · EPSS 0.00333 · Published 2026-09-08 · Fixed in 10.0.14393.9512, 10.0.17763.9245 +8 CWE-122
Priority LOW 36
Missing authorization in Windows Kernel allows an authorized attacker to elevate privileges locally.
CVSS 3.1HIGH 7.8· Local · Low privileges · No interaction · EPSS 0.00298 · Published 2026-09-08 · Fixed in 10.0.17763.9245, 10.0.19044.7725 +7 CWE-862
Priority LOW 36
Heap-based buffer overflow in Virtual Hard Disk (VHD) Miniport Driver allows an authorized attacker to execute code locally.
CVSS 3.1HIGH 7.8· Local · Low privileges · No interaction · EPSS 0.00268 · Published 2026-09-08 · Fixed in 10.0.14393.9512, 10.0.17763.9245 +10 CWE-122
Priority LOW 36
Heap-based buffer overflow in Windows Work Folders allows an authorized attacker to elevate privileges locally.
CVSS 3.1HIGH 7.8· Local · Low privileges · No interaction · EPSS 0.00333 · Published 2026-09-08 · Fixed in 10.0.14393.9512, 10.0.17763.9245 +9 CWE-122
Priority LOW 36
Heap-based buffer overflow in Windows Biometric Service allows an authorized attacker to elevate privileges locally.
CVSS 3.1HIGH 7.8· Local · Low privileges · No interaction · EPSS 0.00333 · Published 2026-09-08 · Fixed in 10.0.14393.9512, 10.0.17763.9245 +8 CWE-122
Priority LOW 36
Heap-based buffer overflow in Windows Biometric Service allows an authorized attacker to elevate privileges locally.
CVSS 3.1HIGH 7.8· Local · Low privileges · No interaction · EPSS 0.00333 · Published 2026-09-08 · Fixed in 10.0.14393.9512, 10.0.17763.9245 +8 CWE-122
Priority LOW 36
Heap-based buffer overflow in Windows Volume Manager Extension Driver allows an authorized attacker to elevate privileges locally.
CVSS 3.1HIGH 7.8· Local · Low privileges · No interaction · EPSS 0.00333 · Published 2026-09-08 · Fixed in 10.0.14393.9512, 10.0.17763.9245 +10 CWE-122
Priority LOW 36
Null pointer dereference in Windows Biometric Service allows an authorized attacker to elevate privileges locally.
CVSS 3.1HIGH 7.8· Local · Low privileges · No interaction · EPSS 0.00333 · Published 2026-09-08 · Fixed in 10.0.14393.9512, 10.0.17763.9245 +8 CWE-476
Priority LOW 36
Heap-based buffer overflow in Windows Biometric Service allows an authorized attacker to elevate privileges locally.
CVSS 3.1HIGH 7.8· Local · Low privileges · No interaction · EPSS 0.00333 · Published 2026-09-08 · Fixed in 10.0.14393.9512, 10.0.17763.9245 +8 CWE-122
Priority LOW 36
Heap-based buffer overflow in Windows Services for NFS ONCRPC XDR Driver allows an authorized attacker to elevate privileges locally.
CVSS 3.1HIGH 7.8· Local · Low privileges · No interaction · EPSS 0.00333 · Published 2026-09-08 · Fixed in 10.0.14393.9512, 10.0.17763.9245 +10 CWE-122
Priority LOW 36
Heap-based buffer overflow in Windows Biometric Service allows an authorized attacker to elevate privileges locally.
CVSS 3.1HIGH 7.8· Local · Low privileges · No interaction · EPSS 0.00333 · Published 2026-09-08 · Fixed in 10.0.14393.9512, 10.0.17763.9245 +8 CWE-122
Priority LOW 36
Heap-based buffer overflow in Windows Biometric Service allows an authorized attacker to elevate privileges locally.
CVSS 3.1HIGH 7.8· Local · Low privileges · No interaction · EPSS 0.00333 · Published 2026-09-08 · Fixed in 10.0.14393.9512, 10.0.17763.9245 +8 CWE-122
Priority LOW 36
Heap-based buffer overflow in Windows Biometric Service allows an authorized attacker to elevate privileges locally.
CVSS 3.1HIGH 7.8· Local · Low privileges · No interaction · EPSS 0.00333 · Published 2026-09-08 · Fixed in 10.0.14393.9512, 10.0.17763.9245 +8 CWE-122
Priority LOW 36
Missing authorization in Data Sharing Service Client allows an authorized attacker to elevate privileges locally.
CVSS 3.1HIGH 7.8· Local · Low privileges · No interaction · EPSS 0.00298 · Published 2026-09-08 · Fixed in 10.0.14393.9512, 10.0.17763.9245 +8 CWE-862
Priority LOW 36
Heap-based buffer overflow in Windows Biometric Service allows an authorized attacker to elevate privileges locally.
CVSS 3.1HIGH 7.8· Local · Low privileges · No interaction · EPSS 0.00333 · Published 2026-09-08 · Fixed in 10.0.14393.9512, 10.0.17763.9245 +8 CWE-122
Priority LOW 36
Heap-based buffer overflow in Windows Biometric Service allows an authorized attacker to elevate privileges locally.
CVSS 3.1HIGH 7.8· Local · Low privileges · No interaction · EPSS 0.00333 · Published 2026-09-08 · Fixed in 10.0.14393.9512, 10.0.17763.9245 +8 CWE-122
Priority LOW 36
Integer overflow or wraparound in Windows Biometric Service allows an authorized attacker to elevate privileges locally.
CVSS 3.1HIGH 7.8· Local · Low privileges · No interaction · EPSS 0.00333 · Published 2026-09-08 · Fixed in 10.0.14393.9512, 10.0.17763.9245 +8 CWE-190
Priority LOW 36
Heap-based buffer overflow in Windows Biometric Service allows an authorized attacker to elevate privileges locally.
CVSS 3.1HIGH 7.8· Local · Low privileges · No interaction · EPSS 0.00333 · Published 2026-09-08 · Fixed in 10.0.14393.9512, 10.0.17763.9245 +8 CWE-122
Priority LOW 36
Heap-based buffer overflow in Windows Biometric Service allows an authorized attacker to elevate privileges locally.
CVSS 3.1HIGH 7.8· Local · Low privileges · No interaction · EPSS 0.00333 · Published 2026-09-08 · Fixed in 10.0.14393.9512, 10.0.17763.9245 +8 CWE-122
Priority LOW 36
Heap-based buffer overflow in Windows Biometric Service allows an authorized attacker to elevate privileges locally.
CVSS 3.1HIGH 7.8· Local · Low privileges · No interaction · EPSS 0.00333 · Published 2026-09-08 · Fixed in 10.0.14393.9512, 10.0.17763.9245 +8 CWE-122
Priority LOW 36
Heap-based buffer overflow in Windows Biometric Service allows an authorized attacker to elevate privileges locally.
CVSS 3.1HIGH 7.8· Local · Low privileges · No interaction · EPSS 0.00333 · Published 2026-09-08 · Fixed in 10.0.14393.9512, 10.0.17763.9245 +8 CWE-122
Priority LOW 36
Heap-based buffer overflow in Windows Biometric Service allows an authorized attacker to elevate privileges locally.
CVSS 3.1HIGH 7.8· Local · Low privileges · No interaction · EPSS 0.00333 · Published 2026-09-08 · Fixed in 10.0.14393.9512, 10.0.17763.9245 +8 CWE-122
Priority LOW 36
Heap-based buffer overflow in Windows Biometric Service allows an authorized attacker to elevate privileges locally.
CVSS 3.1HIGH 7.8· Local · Low privileges · No interaction · EPSS 0.00333 · Published 2026-09-08 · Fixed in 10.0.14393.9512, 10.0.17763.9245 +8 CWE-122
Priority LOW 36
Heap-based buffer overflow in Windows Biometric Service allows an authorized attacker to elevate privileges locally.
CVSS 3.1HIGH 7.8· Local · Low privileges · No interaction · EPSS 0.00333 · Published 2026-09-08 · Fixed in 10.0.14393.9512, 10.0.17763.9245 +8 CWE-122
Priority LOW 36
Heap-based buffer overflow in Windows Biometric Service allows an authorized attacker to elevate privileges locally.
CVSS 3.1HIGH 7.8· Local · Low privileges · No interaction · EPSS 0.00333 · Published 2026-09-08 · Fixed in 10.0.14393.9512, 10.0.17763.9245 +8 CWE-122
Priority LOW 36
Heap-based buffer overflow in Windows Biometric Service allows an authorized attacker to elevate privileges locally.
CVSS 3.1HIGH 7.8· Local · Low privileges · No interaction · EPSS 0.00333 · Published 2026-09-08 · Fixed in 10.0.14393.9512, 10.0.17763.9245 +8 CWE-122
Priority LOW 36
Heap-based buffer overflow in Windows Biometric Service allows an authorized attacker to elevate privileges locally.
CVSS 3.1HIGH 7.8· Local · Low privileges · No interaction · EPSS 0.00333 · Published 2026-09-08 · Fixed in 10.0.14393.9512, 10.0.17763.9245 +8 CWE-122
Priority LOW 36
Heap-based buffer overflow in Windows Biometric Service allows an authorized attacker to elevate privileges locally.
CVSS 3.1HIGH 7.8· Local · Low privileges · No interaction · EPSS 0.00333 · Published 2026-09-08 · Fixed in 10.0.14393.9512, 10.0.17763.9245 +8 CWE-122
Priority LOW 36
Heap-based buffer overflow in Windows Network Connection Broker allows an authorized attacker to elevate privileges locally.
CVSS 3.1HIGH 7.8· Local · Low privileges · No interaction · EPSS 0.00333 · Published 2026-09-08 · Fixed in 10.0.14393.9512, 10.0.17763.9245 +10 CWE-122
Priority LOW 36
Use after free in Windows WebClient Service allows an authorized attacker to elevate privileges locally.
CVSS 3.1HIGH 7.8· Local · Low privileges · No interaction · EPSS 0.00333 · Published 2026-09-08 · Fixed in 10.0.14393.9512, 10.0.17763.9245 +10 CWE-416
Priority LOW 36
Heap-based buffer overflow in Windows Deployment Services allows an authorized attacker to execute code locally.
CVSS 3.1HIGH 7.8· Local · Low privileges · No interaction · EPSS 0.00333 · Published 2026-09-08 · Fixed in 10.0.14393.9512, 10.0.17763.9245 +4 CWE-122
Priority LOW 36
Use after free in Windows Deployment Services allows an authorized attacker to execute code over a network.
CVSS 3.1HIGH 7.5· Network · Low privileges · No interaction · EPSS 0.00663 · Published 2026-09-08 · Fixed in 10.0.14393.9512, 10.0.17763.9245 +4 CWE-416
Priority LOW 36
Heap-based buffer overflow in Windows USB Driver allows an authorized attacker to elevate privileges locally.
CVSS 3.1HIGH 7.8· Local · Low privileges · No interaction · EPSS 0.00333 · Published 2026-09-08 · Fixed in 10.0.19044.7725, 10.0.19045.7725 +6 CWE-122
Priority LOW 36
Relative path traversal in Windows DNS allows an authorized attacker to elevate privileges locally.
CVSS 3.1HIGH 7.8· Local · Low privileges · No interaction · EPSS 0.00376 · Published 2026-09-08 · Fixed in 10.0.14393.9512, 10.0.17763.9245 +4 CWE-23
Priority LOW 36
Heap-based buffer overflow in Windows Fax Service allows an authorized attacker to elevate privileges locally.
CVSS 3.1HIGH 7.8· Local · Low privileges · No interaction · EPSS 0.00333 · Published 2026-09-08 · Fixed in 10.0.14393.9512, 10.0.17763.9245 +10 CWE-122
Priority LOW 36
Use after free in Windows Deployment Services allows an authorized attacker to execute code over a network.
CVSS 3.1HIGH 7.5· Network · Low privileges · No interaction · EPSS 0.00663 · Published 2026-09-08 · Fixed in 10.0.14393.9512, 10.0.17763.9245 +4 CWE-416
Priority LOW 36
Heap-based buffer overflow in Windows Biometric Service allows an authorized attacker to elevate privileges locally.
CVSS 3.1HIGH 7.8· Local · Low privileges · No interaction · EPSS 0.00333 · Published 2026-09-08 · Fixed in 10.0.14393.9512, 10.0.17763.9245 +8 CWE-122
Priority LOW 36
Heap-based buffer overflow in Winsock allows an authorized attacker to elevate privileges locally.
CVSS 3.1HIGH 7.8· Local · Low privileges · No interaction · EPSS 0.00338 · Published 2026-09-08 · Fixed in 10.0.14393.9512, 10.0.17763.9245 +10 CWE-122
Priority LOW 36
Out-of-bounds write in Windows Spaceport.sys allows an authorized attacker to execute code locally.
CVSS 3.1HIGH 7.8· Local · Low privileges · No interaction · EPSS 0.00333 · Published 2026-09-08 · Fixed in 10.0.14393.9512, 10.0.17763.9245 +10 CWE-787
Priority LOW 36
Heap-based buffer overflow in Windows Remote Access Connection Manager allows an authorized attacker to execute code locally.
CVSS 3.1HIGH 7.8· Local · Low privileges · No interaction · EPSS 0.00333 · Published 2026-09-08 · Fixed in 10.0.14393.9512, 10.0.17763.9245 +10 CWE-122
Priority LOW 36
Stack-based buffer overflow in Windows Storage Management Provider allows an authorized attacker to elevate privileges locally.
CVSS 3.1HIGH 7.8· Local · Low privileges · No interaction · EPSS 0.00333 · Published 2026-09-08 · Fixed in 10.0.19044.7725, 10.0.19045.7725 +6 CWE-121
Priority LOW 36
Heap-based buffer overflow in Windows NFS Portmapper allows an authorized attacker to elevate privileges locally.
CVSS 3.1HIGH 7.8· Local · Low privileges · No interaction · EPSS 0.00333 · Published 2026-09-08 · Fixed in 10.0.14393.9512, 10.0.17763.9245 +10 CWE-122
Priority LOW 36
Access of resource using incompatible type ('type confusion') in Windows Core Messaging allows an authorized attacker to elevate privileges locally.
CVSS 3.1HIGH 7.8· Local · Low privileges · No interaction · EPSS 0.00333 · Published 2026-09-08 · Fixed in 10.0.14393.9512, 10.0.17763.9245 +8 CWE-843
Priority LOW 36
Integer overflow or wraparound in Windows Biometric Service allows an authorized attacker to elevate privileges locally.
CVSS 3.1HIGH 7.8· Local · Low privileges · No interaction · EPSS 0.00333 · Published 2026-09-08 · Fixed in 10.0.14393.9512, 10.0.17763.9245 +8 CWE-190
Priority LOW 36
Out-of-bounds read in Virtual Hard Disk (VHD) Miniport Driver allows an authorized attacker to elevate privileges locally.
CVSS 3.1HIGH 7.8· Local · Low privileges · No interaction · EPSS 0.00333 · Published 2026-09-08 · Fixed in 10.0.14393.9512, 10.0.17763.9245 +10 CWE-125
Priority LOW 36
Integer overflow or wraparound in Windows Biometric Service allows an authorized attacker to elevate privileges locally.
CVSS 3.1HIGH 7.8· Local · Low privileges · No interaction · EPSS 0.00333 · Published 2026-09-08 · Fixed in 10.0.14393.9512, 10.0.17763.9245 +8 CWE-190
Priority LOW 36
Out-of-bounds read in Windows Spaceport.sys allows an authorized attacker to elevate privileges locally.
CVSS 3.1HIGH 7.8· Local · Low privileges · No interaction · EPSS 0.00333 · Published 2026-09-08 · Fixed in 10.0.22631.7582, 10.0.26100.9445 +4 CWE-125
Priority LOW 36
Heap-based buffer overflow in Windows Print Spooler Components allows an authorized attacker to elevate privileges locally.
CVSS 3.1HIGH 7.8· Local · Low privileges · No interaction · EPSS 0.00333 · Published 2026-09-08 · Fixed in 10.0.14393.9512, 10.0.17763.9245 +10 CWE-122
Priority LOW 36
Heap-based buffer overflow in Windows Win32 Kernel Subsystem allows an authorized attacker to elevate privileges locally.
CVSS 3.1HIGH 7.8· Local · Low privileges · No interaction · EPSS 0.00333 · Published 2026-09-08 · Fixed in 10.0.14393.9512, 10.0.17763.9245 +10 CWE-122
Priority LOW 36
Heap-based buffer overflow in Windows Print Spooler Components allows an authorized attacker to elevate privileges locally.
CVSS 3.1HIGH 7.8· Local · Low privileges · No interaction · EPSS 0.00333 · Published 2026-09-08 · Fixed in 10.0.19044.7725, 10.0.19045.7725 +6 CWE-122
Priority LOW 36
Improper handling of insufficient permissions or privileges in Windows Enterprise App Management allows an authorized attacker to elevate privileges locally.
CVSS 3.1HIGH 7.8· Local · Low privileges · No interaction · EPSS 0.00298 · Published 2026-09-08 · Fixed in 10.0.14393.9512, 10.0.17763.9245 +8 CWE-280
Priority LOW 36
Remote Code Execution in Windows Routing and Remote Access Service (RRAS) allows attacker to gain an unauthorized access to victim's machine
CVSS 3.1HIGH 7.5· Network · Low privileges · No interaction · EPSS 0.00663 · Published 2026-09-08 · Fixed in 10.0.14393.9512, 10.0.17763.9245 +10 CWE-122
Priority LOW 36
Out-of-bounds read in Windows Win32K allows an authorized attacker to elevate privileges locally.
CVSS 3.1HIGH 7.8· Local · Low privileges · No interaction · EPSS 0.00333 · Published 2026-09-08 · Fixed in 10.0.14393.9512, 10.0.17763.9245 +10 CWE-125
Priority LOW 36
Heap-based buffer overflow in Windows Encrypting File System (EFS) allows an authorized attacker to elevate privileges locally.
CVSS 3.1HIGH 7.8· Local · Low privileges · No interaction · EPSS 0.00333 · Published 2026-09-08 · Fixed in 10.0.14393.9512, 10.0.17763.9245 +10 CWE-122
Priority LOW 36
Numeric truncation error in Windows Kerberos allows an authorized attacker to elevate privileges locally.
CVSS 3.1HIGH 7.8· Local · Low privileges · No interaction · EPSS 0.00333 · Published 2026-09-08 · Fixed in 10.0.17763.9245, 10.0.19044.7725 +7 CWE-122
Priority LOW 36
Improper encoding or escaping of output in Active Directory Certificate Services (AD CS) allows an authorized attacker to elevate privileges locally.
CVSS 3.1HIGH 7.8· Local · Low privileges · No interaction · EPSS 0.00333 · Published 2026-09-08 · Fixed in 10.0.14393.9512, 10.0.17763.9245 +4 CWE-116
Priority LOW 36
Heap-based buffer overflow in Windows Audio Service allows an authorized attacker to elevate privileges locally.
CVSS 3.1HIGH 7.8· Local · Low privileges · No interaction · EPSS 0.00333 · Published 2026-09-08 · Fixed in 10.0.17763.9245, 10.0.19044.7725 +7 CWE-122
Priority LOW 36
Heap-based buffer overflow in Windows Credential Providers allows an authorized attacker to elevate privileges locally.
CVSS 3.1HIGH 7.8· Local · Low privileges · No interaction · EPSS 0.00333 · Published 2026-09-08 · Fixed in 10.0.17763.9245, 10.0.19044.7725 +7 CWE-122
Priority LOW 36
Heap-based buffer overflow in Windows Biometric Service allows an authorized attacker to elevate privileges locally.
CVSS 3.1HIGH 7.8· Local · Low privileges · No interaction · EPSS 0.00333 · Published 2026-09-08 · Fixed in 10.0.14393.9512, 10.0.17763.9245 +8 CWE-122
Priority LOW 36
Untrusted search path in Windows Smart Card allows an authorized attacker to elevate privileges locally.
CVSS 3.1HIGH 7.8· Local · Low privileges · No interaction · EPSS 0.00457 · Published 2026-09-08 · Fixed in 10.0.14393.9512, 10.0.17763.9245 +10 CWE-426
Priority LOW 36
Use after free in Windows TCP/IP allows an authorized attacker to elevate privileges over a network.
CVSS 3.1HIGH 7.5· Network · Low privileges · No interaction · EPSS 0.0057 · Published 2026-09-08 · Fixed in 10.0.14393.9512, 10.0.17763.9245 +10 CWE-416
Priority LOW 36
Heap-based buffer overflow in Windows Universal Disk Format File System Driver (UDFS) allows an authorized attacker to elevate privileges locally.
CVSS 3.1HIGH 7.8· Local · Low privileges · No interaction · EPSS 0.00333 · Published 2026-09-08 · Fixed in 10.0.14393.9512, 10.0.17763.9245 +10 CWE-122
Priority LOW 36
Use after free in Windows TCP/IP allows an authorized attacker to elevate privileges over a network.
CVSS 3.1HIGH 7.5· Network · Low privileges · No interaction · EPSS 0.0057 · Published 2026-09-08 · Fixed in 10.0.17763.9245, 10.0.19044.7725 +7 CWE-416
Priority LOW 36
Integer overflow or wraparound in Windows Biometric Service allows an authorized attacker to elevate privileges locally.
CVSS 3.1HIGH 7.8· Local · Low privileges · No interaction · EPSS 0.00333 · Published 2026-09-08 · Fixed in 10.0.14393.9512, 10.0.17763.9245 +8 CWE-122
Priority LOW 36
Heap-based buffer overflow in HID class driver allows an authorized attacker to elevate privileges locally.
CVSS 3.1HIGH 7.8· Local · Low privileges · No interaction · EPSS 0.00333 · Published 2026-09-08 · Fixed in 10.0.14393.9512, 10.0.17763.9245 +10 CWE-122
Priority LOW 36
Heap-based buffer overflow in Windows NTFS allows an authorized attacker to execute code locally.
CVSS 3.1HIGH 7.8· Local · Low privileges · No interaction · EPSS 0.00333 · Published 2026-09-08 · Fixed in 10.0.14393.9512, 10.0.17763.9245 +10 CWE-122
Priority LOW 36
Integer overflow or wraparound in Windows USB Audio Class driver (usbaudio.sys) allows an authorized attacker to elevate privileges locally.
CVSS 3.1HIGH 7.8· Local · Low privileges · No interaction · EPSS 0.00333 · Published 2026-09-08 · Fixed in 10.0.14393.9512, 10.0.17763.9245 +10 CWE-190
Priority LOW 36
Use after free in Windows Win32K allows an authorized attacker to elevate privileges over a network.
CVSS 3.1HIGH 7.5· Network · Low privileges · No interaction · EPSS 0.0057 · Published 2026-09-08 · Fixed in 10.0.14393.9512, 10.0.17763.9245 +10 CWE-416
Priority LOW 36
Heap-based buffer overflow in Windows Spaceport.sys allows an authorized attacker to elevate privileges locally.
CVSS 3.1HIGH 7.8· Local · Low privileges · No interaction · EPSS 0.00333 · Published 2026-09-08 · Fixed in 10.0.14393.9512, 10.0.17763.9245 +10 CWE-122
Priority LOW 36
Heap-based buffer overflow in Windows Encrypting File System (EFS) allows an authorized attacker to elevate privileges over a network.
CVSS 3.1HIGH 7.5· Network · Low privileges · No interaction · EPSS 0.0057 · Published 2026-09-08 · Fixed in 10.0.14393.9512, 10.0.17763.9245 +10 CWE-122
Priority LOW 36
Integer underflow (wrap or wraparound) in Windows USB Audio Class driver (usbaudio.sys) allows an authorized attacker to elevate privileges locally.
CVSS 3.1HIGH 7.8· Local · Low privileges · No interaction · EPSS 0.00333 · Published 2026-09-08 · Fixed in 10.0.14393.9512, 10.0.17763.9245 +10 CWE-191
Priority LOW 36
Heap-based buffer overflow in Windows Kerberos allows an authorized attacker to elevate privileges locally.
CVSS 3.1HIGH 7.8· Local · Low privileges · No interaction · EPSS 0.00333 · Published 2026-09-08 · Fixed in 10.0.14393.9512, 10.0.17763.9245 +10 CWE-122
Priority LOW 36
Incomplete list of disallowed inputs in Active Directory Certificate Services (AD CS) allows an authorized attacker to perform tampering over a network.
CVSS 3.1MEDIUM 6.5· Network · Low privileges · No interaction · EPSS 0.00738 · Published 2026-09-08 · Fixed in 10.0.14393.9512, 10.0.17763.9245 +4 CWE-184
Priority LOW 36
Absolute path traversal in Windows Error Reporting allows an authorized attacker to elevate privileges locally.
CVSS 3.1HIGH 7.8· Local · Low privileges · No interaction · EPSS 0.0037 · Published 2026-09-08 · Fixed in 10.0.14393.9512, 10.0.17763.9245 +10 CWE-36
Priority LOW 36
Integer overflow or wraparound in Microsoft Windows Search Component allows an authorized attacker to elevate privileges locally.
CVSS 3.1HIGH 7.8· Local · Low privileges · No interaction · EPSS 0.00333 · Published 2026-09-08 · Fixed in 10.0.14393.9512, 10.0.17763.9245 +10 CWE-190
Priority LOW 36
Use after free in Windows Deployment Services allows an unauthorized attacker to execute code over a network.
CVSS 3.1HIGH 7.5· Network · No auth · User interaction · EPSS 0.00608 · Published 2026-09-08 · Fixed in 10.0.14393.9512, 10.0.17763.9245 +4 CWE-416
Priority LOW 36
Heap-based buffer overflow in Windows Audio Service allows an authorized attacker to elevate privileges locally.
CVSS 3.1HIGH 7.8· Local · Low privileges · No interaction · EPSS 0.00333 · Published 2026-09-08 · Fixed in 10.0.14393.9512, 10.0.17763.9245 +10 CWE-122
Priority LOW 36
Use after free in Windows PrintWorkflowUserSvc allows an authorized attacker to elevate privileges over a network.
CVSS 3.1HIGH 7.5· Network · Low privileges · No interaction · EPSS 0.0057 · Published 2026-09-08 · Fixed in 10.0.17763.9245, 10.0.19044.7725 +7 CWE-416
Priority LOW 36
Heap-based buffer overflow in Windows Biometric Service allows an authorized attacker to elevate privileges locally.
CVSS 3.1HIGH 7.8· Local · Low privileges · No interaction · EPSS 0.00333 · Published 2026-09-08 · Fixed in 10.0.14393.9512, 10.0.17763.9245 +8 CWE-122
Priority LOW 36
Heap-based buffer overflow in Windows Universal Disk Format File System Driver (UDFS) allows an authorized attacker to elevate privileges locally.
CVSS 3.1HIGH 7.8· Local · Low privileges · No interaction · EPSS 0.00333 · Published 2026-09-08 · Fixed in 10.0.14393.9512, 10.0.17763.9245 +10 CWE-122
Priority LOW 36
Heap-based buffer overflow in Windows Biometric Service allows an authorized attacker to elevate privileges locally.
CVSS 3.1HIGH 7.8· Local · Low privileges · No interaction · EPSS 0.00333 · Published 2026-09-08 · Fixed in 10.0.14393.9512, 10.0.17763.9245 +8 CWE-122
Priority LOW 36
Incorrect type conversion or cast in Microsoft Windows Search Component allows an authorized attacker to elevate privileges locally.
CVSS 3.1HIGH 7.8· Local · Low privileges · No interaction · EPSS 0.00333 · Published 2026-09-08 · Fixed in 10.0.14393.9512, 10.0.17763.9245 +10 CWE-704
Priority LOW 36
Integer overflow or wraparound in Windows USB Video Driver allows an authorized attacker to elevate privileges locally.
CVSS 3.1HIGH 7.8· Local · Low privileges · No interaction · EPSS 0.00333 · Published 2026-09-08 · Fixed in 10.0.14393.9512, 10.0.17763.9245 +10 CWE-190
Priority LOW 36
Heap-based buffer overflow in Windows Biometric Service allows an authorized attacker to elevate privileges locally.
CVSS 3.1HIGH 7.8· Local · Low privileges · No interaction · EPSS 0.00333 · Published 2026-09-08 · Fixed in 10.0.14393.9512, 10.0.17763.9245 +8 CWE-122
Priority LOW 36
Buffer over-read in Windows Volume Manager Extension Driver allows an authorized attacker to elevate privileges locally.
CVSS 3.1HIGH 7.8· Local · Low privileges · No interaction · EPSS 0.00333 · Published 2026-09-08 · Fixed in 10.0.14393.9512, 10.0.17763.9245 +10 CWE-126
Priority LOW 36
Heap-based buffer overflow in Windows Biometric Service allows an authorized attacker to elevate privileges locally.
CVSS 3.1HIGH 7.8· Local · Low privileges · No interaction · EPSS 0.00333 · Published 2026-09-08 · Fixed in 10.0.14393.9512, 10.0.17763.9245 +8 CWE-122
Priority LOW 36
Heap-based buffer overflow in Windows USB Audio Class driver (usbaudio.sys) allows an authorized attacker to elevate privileges locally.
CVSS 3.1HIGH 7.8· Local · Low privileges · No interaction · EPSS 0.00333 · Published 2026-09-08 · Fixed in 10.0.14393.9512, 10.0.17763.9245 +10 CWE-122
Priority LOW 36
Out-of-bounds read in Windows CD-ROM Driver allows an authorized attacker to elevate privileges locally.
CVSS 3.1HIGH 7.8· Local · Low privileges · No interaction · EPSS 0.00333 · Published 2026-09-08 · Fixed in 10.0.14393.9512, 10.0.17763.9245 +10 CWE-125
Priority LOW 36
Heap-based buffer overflow in Virtual Hard Disk (VHD) Miniport Driver allows an authorized attacker to elevate privileges locally.
CVSS 3.1HIGH 7.8· Local · Low privileges · No interaction · EPSS 0.00333 · Published 2026-09-08 · Fixed in 10.0.14393.9512, 10.0.17763.9245 +10 CWE-122
Priority LOW 36
Use after free in Windows Remote Desktop Services allows an authorized attacker to execute code over a network.
CVSS 3.1HIGH 7.5· Network · Low privileges · No interaction · EPSS 0.00663 · Published 2026-09-08 · Fixed in 10.0.14393.9512, 10.0.17763.9245 +10 CWE-416
Priority LOW 36
Out-of-bounds read in Windows Spaceport.sys allows an authorized attacker to execute code locally.
CVSS 3.1HIGH 7.8· Local · Low privileges · No interaction · EPSS 0.00333 · Published 2026-09-08 · Fixed in 10.0.14393.9512, 10.0.17763.9245 +10 CWE-125
Priority LOW 36
Numeric truncation error in Windows Spaceport.sys allows an authorized attacker to elevate privileges locally.
CVSS 3.1HIGH 7.8· Local · Low privileges · No interaction · EPSS 0.00333 · Published 2026-09-08 · Fixed in 10.0.19044.7725, 10.0.19045.7725 +6 CWE-122
Priority LOW 36
Improper neutralization of special elements used in a command ('command injection') in Windows Program Compatibility Assistant Service allows an authorized attacker to elevate privileges locally.
CVSS 3.1HIGH 7.8· Local · Low privileges · No interaction · EPSS 0.00322 · Published 2026-09-08 · Fixed in 10.0.14393.9512, 10.0.17763.9245 +8 CWE-77
Priority LOW 36
Out-of-bounds read in Windows NTFS allows an authorized attacker to elevate privileges locally.
CVSS 3.1HIGH 7.8· Local · Low privileges · No interaction · EPSS 0.00333 · Published 2026-09-08 · Fixed in 10.0.14393.9512, 10.0.17763.9245 +10 CWE-125
Priority LOW 36
Heap-based buffer overflow in Windows Remote Desktop Services allows an authorized attacker to execute code over a network.
CVSS 3.1HIGH 7.5· Network · Low privileges · No interaction · EPSS 0.00663 · Published 2026-09-08 · Fixed in 10.0.14393.9512, 10.0.17763.9245 +10 CWE-122
Priority LOW 36
Heap-based buffer overflow in Windows Error Reporting allows an authorized attacker to elevate privileges locally.
CVSS 3.1HIGH 7.8· Local · Low privileges · No interaction · EPSS 0.00333 · Published 2026-09-08 · Fixed in 10.0.17763.9245, 10.0.19044.7725 +7 CWE-122
Priority LOW 36
Heap-based buffer overflow in Windows Fax Service allows an authorized attacker to elevate privileges locally.
CVSS 3.1HIGH 7.8· Local · Low privileges · No interaction · EPSS 0.00333 · Published 2026-09-08 · Fixed in 10.0.14393.9512, 10.0.17763.9245 +10 CWE-122
Priority LOW 36
Heap-based buffer overflow in Windows Biometric Service allows an authorized attacker to elevate privileges locally.
CVSS 3.1HIGH 7.8· Local · Low privileges · No interaction · EPSS 0.00333 · Published 2026-09-08 · Fixed in 10.0.14393.9512, 10.0.17763.9245 +8 CWE-122
Priority LOW 36
Heap-based buffer overflow in Windows Partition Management Driver allows an authorized attacker to elevate privileges locally.
CVSS 3.1HIGH 7.8· Local · Low privileges · No interaction · EPSS 0.00333 · Published 2026-09-08 · Fixed in 10.0.19044.7725, 10.0.19045.7725 +6 CWE-122
Priority LOW 36
Heap-based buffer overflow in Windows Device Association Service allows an authorized attacker to elevate privileges locally.
CVSS 3.1HIGH 7.8· Local · Low privileges · No interaction · EPSS 0.00333 · Published 2026-09-08 · Fixed in 10.0.14393.9512, 10.0.17763.9245 +8 CWE-122
Priority LOW 36
Heap-based buffer overflow in Windows Biometric Service allows an authorized attacker to elevate privileges locally.
CVSS 3.1HIGH 7.8· Local · Low privileges · No interaction · EPSS 0.00333 · Published 2026-09-08 · Fixed in 10.0.14393.9512, 10.0.17763.9245 +8 CWE-122
Priority LOW 36
Untrusted pointer dereference in Windows Remote Desktop Services allows an authorized attacker to elevate privileges locally.
CVSS 3.1HIGH 7.8· Local · Low privileges · No interaction · EPSS 0.00333 · Published 2026-09-08 · Fixed in 10.0.14393.9512, 10.0.17763.9245 +10 CWE-822
Priority LOW 36
Heap-based buffer overflow in Windows Power Dependency Coordinator allows an authorized attacker to elevate privileges locally.
CVSS 3.1HIGH 7.8· Local · Low privileges · No interaction · EPSS 0.00333 · Published 2026-09-08 · Fixed in 10.0.17763.9245, 10.0.19044.7725 +7 CWE-122
Priority LOW 36
Heap-based buffer overflow in Microsoft Windows Speech allows an authorized attacker to elevate privileges locally.
CVSS 3.1HIGH 7.8· Local · Low privileges · No interaction · EPSS 0.00333 · Published 2026-09-08 · Fixed in 10.0.14393.9512, 10.0.17763.9245 +8 CWE-122
Priority LOW 36
Heap-based buffer overflow in Windows Remote Access Connection Manager allows an authorized attacker to elevate privileges locally.
CVSS 3.1HIGH 7.8· Local · Low privileges · No interaction · EPSS 0.00333 · Published 2026-09-08 · Fixed in 10.0.14393.9512, 10.0.17763.9245 +9 CWE-122
Priority LOW 36
Out-of-bounds read in Windows Error Reporting allows an authorized attacker to elevate privileges locally.
CVSS 3.1HIGH 7.8· Local · Low privileges · No interaction · EPSS 0.00333 · Published 2026-09-08 · Fixed in 10.0.14393.9512, 10.0.17763.9245 +10 CWE-125
Priority LOW 36
Improper limitation of a pathname to a restricted directory ('path traversal') in Windows Compressed Folder allows an authorized attacker to elevate privileges locally.
CVSS 3.1HIGH 7.8· Local · Low privileges · No interaction · EPSS 0.0037 · Published 2026-09-08 · Fixed in 10.0.14393.9512, 10.0.17763.9245 +10 CWE-22
Priority LOW 36
Heap-based buffer overflow in Microsoft Windows Speech allows an authorized attacker to elevate privileges locally.
CVSS 3.1HIGH 7.8· Local · Low privileges · No interaction · EPSS 0.00333 · Published 2026-09-08 · Fixed in 10.0.14393.9512, 10.0.17763.9245 +8 CWE-122
Priority LOW 36
Heap-based buffer overflow in Windows State Repository Service allows an authorized attacker to elevate privileges locally.
CVSS 3.1HIGH 7.8· Local · Low privileges · No interaction · EPSS 0.00333 · Published 2026-09-08 · Fixed in 10.0.17763.9245, 10.0.19044.7725 +7 CWE-122
Priority LOW 36
Heap-based buffer overflow in Windows Error Reporting allows an authorized attacker to elevate privileges locally.
CVSS 3.1HIGH 7.8· Local · Low privileges · No interaction · EPSS 0.00333 · Published 2026-09-08 · Fixed in 10.0.14393.9512, 10.0.17763.9245 +8 CWE-122
Priority LOW 36
Heap-based buffer overflow in Volume Manager Driver allows an authorized attacker to elevate privileges locally.
CVSS 3.1HIGH 7.8· Local · Low privileges · No interaction · EPSS 0.00333 · Published 2026-09-08 · Fixed in 10.0.14393.9512, 10.0.17763.9245 +10 CWE-122
Priority LOW 36
Heap-based buffer overflow in Windows IKE Extension allows an authorized attacker to execute code over a network.
CVSS 3.1HIGH 7.5· Network · Low privileges · No interaction · EPSS 0.00663 · Published 2026-09-08 · Fixed in 10.0.17763.9245, 10.0.19044.7725 +7 CWE-122
Priority LOW 36
Heap-based buffer overflow in Windows VOLSNAP.SYS allows an authorized attacker to execute code locally.
CVSS 3.1HIGH 7.8· Local · Low privileges · No interaction · EPSS 0.00333 · Published 2026-09-08 · Fixed in 10.0.14393.9512, 10.0.17763.9245 +10 CWE-122
Priority LOW 36
Heap-based buffer overflow in Windows Distributed File System (DFS) allows an authorized attacker to elevate privileges locally.
CVSS 3.1HIGH 7.8· Local · Low privileges · No interaction · EPSS 0.00333 · Published 2026-09-08 · Fixed in 10.0.14393.9512, 10.0.17763.9245 +10 CWE-122
Priority LOW 36
Integer underflow (wrap or wraparound) in Windows Kernel Mode Driver allows an authorized attacker to elevate privileges locally.
CVSS 3.1HIGH 7.8· Local · Low privileges · No interaction · EPSS 0.00333 · Published 2026-09-08 · Fixed in 10.0.14393.9512, 10.0.17763.9245 +10 CWE-122
Priority LOW 36
Heap-based buffer overflow in Windows VOLSNAP.SYS allows an authorized attacker to elevate privileges locally.
CVSS 3.1HIGH 7.8· Local · Low privileges · No interaction · EPSS 0.00333 · Published 2026-09-08 · Fixed in 10.0.14393.9512, 10.0.17763.9245 +10 CWE-122
Priority LOW 36
Integer overflow or wraparound in Volume Manager Driver allows an authorized attacker to elevate privileges locally.
CVSS 3.1HIGH 7.8· Local · Low privileges · No interaction · EPSS 0.00333 · Published 2026-09-08 · Fixed in 10.0.14393.9512, 10.0.17763.9245 +10 CWE-190
Priority LOW 36
Use after free in OpenSSH for Windows allows an unauthorized attacker to execute code over a network.
CVSS 3.1HIGH 7.5· Network · No auth · User interaction · EPSS 0.00608 · Published 2026-09-08 · Fixed in 10.0.17763.9245, 10.0.19044.7725 +7 CWE-416
Priority LOW 36
Stack-based buffer overflow in Windows Broker Infrastructure Service allows an authorized attacker to elevate privileges locally.
CVSS 3.1HIGH 7.8· Local · Low privileges · No interaction · EPSS 0.00333 · Published 2026-09-08 · Fixed in 10.0.14393.9512, 10.0.17763.9245 +8 CWE-121
Priority LOW 36
Heap-based buffer overflow in Windows Storage Management Provider allows an authorized attacker to elevate privileges locally.
CVSS 3.1HIGH 7.8· Local · Low privileges · No interaction · EPSS 0.00333 · Published 2026-09-08 · Fixed in 10.0.14393.9512, 10.0.17763.9245 +10 CWE-122
Priority LOW 36
Missing authorization in Windows Modern Device Management (MDM) allows an authorized attacker to elevate privileges locally.
CVSS 3.1HIGH 7.8· Local · Low privileges · No interaction · EPSS 0.00298 · Published 2026-09-08 · Fixed in 10.0.17763.9245, 10.0.19044.7725 +7 CWE-862
Priority LOW 36
Heap-based buffer overflow in Windows Overlay Filter allows an authorized attacker to elevate privileges locally.
CVSS 3.1HIGH 7.8· Local · Low privileges · No interaction · EPSS 0.00333 · Published 2026-09-08 · Fixed in 10.0.14393.9512, 10.0.17763.9245 +9 CWE-122
Priority LOW 36
Heap-based buffer overflow in Active Directory Domain Services allows an authorized attacker to elevate privileges locally.
CVSS 3.1HIGH 7.8· Local · Low privileges · No interaction · EPSS 0.00333 · Published 2026-09-08 · Fixed in 10.0.14393.9512, 10.0.17763.9245 +8 CWE-122
Priority LOW 36
Heap-based buffer overflow in Windows Biometric Service allows an authorized attacker to elevate privileges locally.
CVSS 3.1HIGH 7.8· Local · Low privileges · No interaction · EPSS 0.00333 · Published 2026-09-08 · Fixed in 10.0.14393.9512, 10.0.17763.9245 +8 CWE-122
Priority LOW 36
Untrusted search path in Windows Storage allows an authorized attacker to elevate privileges locally.
CVSS 3.1HIGH 7.8· Local · Low privileges · No interaction · EPSS 0.00457 · Published 2026-09-08 · Fixed in 10.0.14393.9512, 10.0.17763.9245 +8 CWE-426
Priority LOW 36
Access of resource using incompatible type ('type confusion') in Windows Performance Monitor allows an authorized attacker to elevate privileges locally.
CVSS 3.1HIGH 7.8· Local · Low privileges · No interaction · EPSS 0.00333 · Published 2026-09-08 · Fixed in 10.0.14393.9512, 10.0.17763.9245 +10 CWE-125
Priority LOW 36
Heap-based buffer overflow in Windows Biometric Service allows an authorized attacker to elevate privileges locally.
CVSS 3.1HIGH 7.8· Local · Low privileges · No interaction · EPSS 0.00333 · Published 2026-09-08 · Fixed in 10.0.14393.9512, 10.0.17763.9245 +8 CWE-122
Priority LOW 36
Out-of-bounds read in Windows NTFS allows an authorized attacker to elevate privileges locally.
CVSS 3.1HIGH 7.8· Local · Low privileges · No interaction · EPSS 0.00333 · Published 2026-09-08 · Fixed in 10.0.14393.9512, 10.0.17763.9245 +10 CWE-125
Priority LOW 36
Heap-based buffer overflow in Windows USB Audio Class driver (usbaudio.sys) allows an authorized attacker to elevate privileges locally.
CVSS 3.1HIGH 7.8· Local · Low privileges · No interaction · EPSS 0.00333 · Published 2026-09-08 · Fixed in 10.0.14393.9512, 10.0.17763.9245 +10 CWE-122
Priority LOW 36
Integer overflow or wraparound in Windows Biometric Service allows an authorized attacker to elevate privileges locally.
CVSS 3.1HIGH 7.8· Local · Low privileges · No interaction · EPSS 0.00333 · Published 2026-09-08 · Fixed in 10.0.14393.9512, 10.0.17763.9245 +8 CWE-190
Priority LOW 36
Out-of-bounds read in Windows USB Driver allows an authorized attacker to elevate privileges locally.
CVSS 3.1HIGH 7.8· Local · Low privileges · No interaction · EPSS 0.00333 · Published 2026-09-08 · Fixed in 10.0.14393.9512, 10.0.17763.9245 +9 CWE-125
Priority LOW 36
Heap-based buffer overflow in Windows Biometric Service allows an authorized attacker to elevate privileges locally.
CVSS 3.1HIGH 7.8· Local · Low privileges · No interaction · EPSS 0.00333 · Published 2026-09-08 · Fixed in 10.0.14393.9512, 10.0.17763.9245 +8 CWE-122
Priority LOW 36
Stack-based buffer overflow in Windows Storage Spaces Controller allows an authorized attacker to elevate privileges locally.
CVSS 3.1HIGH 7.8· Local · Low privileges · No interaction · EPSS 0.00333 · Published 2026-09-08 · Fixed in 10.0.14393.9512, 10.0.17763.9245 +10 CWE-121
Priority LOW 36
Improper link resolution before file access ('link following') in Windows Setup Files Cleanup allows an authorized attacker to elevate privileges locally.
CVSS 3.1HIGH 7.8· Local · Low privileges · No interaction · EPSS 0.0037 · Published 2026-09-08 · Fixed in 10.0.14393.9512, 10.0.17763.9245 +10 CWE-59
Priority LOW 36
Stack-based buffer overflow in Microsoft Local Security Authority Server (lsasrv) allows an authorized attacker to elevate privileges locally.
CVSS 3.1HIGH 7.8· Local · Low privileges · No interaction · EPSS 0.00333 · Published 2026-09-08 · Fixed in 10.0.14393.9512, 10.0.17763.9245 +10 CWE-121
Priority LOW 36
Heap-based buffer overflow in Windows USB Audio Class driver (usbaudio.sys) allows an authorized attacker to elevate privileges locally.
CVSS 3.1HIGH 7.8· Local · Low privileges · No interaction · EPSS 0.00333 · Published 2026-09-08 · Fixed in 10.0.14393.9512, 10.0.17763.9245 +10 CWE-122
Priority LOW 36
Integer underflow (wrap or wraparound) in Microsoft Standard XPS allows an authorized attacker to elevate privileges locally.
CVSS 3.1HIGH 7.8· Local · Low privileges · No interaction · EPSS 0.00333 · Published 2026-09-08 · Fixed in 10.0.14393.9512, 10.0.17763.9245 +10 CWE-191
Priority LOW 36
Out-of-bounds read in Windows NTFS allows an authorized attacker to elevate privileges locally.
CVSS 3.1HIGH 7.8· Local · Low privileges · No interaction · EPSS 0.00333 · Published 2026-09-08 · Fixed in 10.0.14393.9512, 10.0.17763.9245 +10 CWE-125
Priority LOW 36
Absolute path traversal in Microsoft Windows Search Component allows an authorized attacker to elevate privileges locally.
CVSS 3.1HIGH 7.8· Local · Low privileges · No interaction · EPSS 0.0037 · Published 2026-09-08 · Fixed in 10.0.22631.7582, 10.0.26100.9445 +4 CWE-36
Priority LOW 36
Heap-based buffer overflow in Microsoft Standard XPS allows an authorized attacker to elevate privileges locally.
CVSS 3.1HIGH 7.8· Local · Low privileges · No interaction · EPSS 0.00333 · Published 2026-09-08 · Fixed in 10.0.14393.9512, 10.0.17763.9245 +10 CWE-122
Priority LOW 36
Heap-based buffer overflow in Microsoft Standard XPS allows an authorized attacker to elevate privileges locally.
CVSS 3.1HIGH 7.8· Local · Low privileges · No interaction · EPSS 0.00333 · Published 2026-09-08 · Fixed in 10.0.14393.9512, 10.0.17763.9245 +10 CWE-122
Priority LOW 36
Heap-based buffer overflow in Microsoft Standard XPS allows an authorized attacker to elevate privileges locally.
CVSS 3.1HIGH 7.8· Local · Low privileges · No interaction · EPSS 0.00333 · Published 2026-09-08 · Fixed in 10.0.14393.9512, 10.0.17763.9245 +10 CWE-122
Priority LOW 36
Heap-based buffer overflow in Microsoft Standard XPS allows an authorized attacker to elevate privileges locally.
CVSS 3.1HIGH 7.8· Local · Low privileges · No interaction · EPSS 0.00333 · Published 2026-09-08 · Fixed in 10.0.14393.9512, 10.0.17763.9245 +10 CWE-122
Priority LOW 36
Heap-based buffer overflow in Windows Storage Spaces Controller allows an authorized attacker to execute code locally.
CVSS 3.1HIGH 7.8· Local · Low privileges · No interaction · EPSS 0.00333 · Published 2026-09-08 · Fixed in 10.0.14393.9512, 10.0.17763.9245 +8 CWE-122
Priority LOW 36
Buffer over-read in Windows NTFS allows an authorized attacker to execute code locally.
CVSS 3.1HIGH 7.8· Local · Low privileges · No interaction · EPSS 0.00333 · Published 2026-09-08 · Fixed in 10.0.14393.9512, 10.0.17763.9245 +10 CWE-126
Priority LOW 36
Heap-based buffer overflow in Windows Print Spooler Components allows an authorized attacker to elevate privileges locally.
CVSS 3.1HIGH 7.8· Local · Low privileges · No interaction · EPSS 0.00333 · Published 2026-09-08 · Fixed in 10.0.14393.9512, 10.0.17763.9245 +10 CWE-122
Priority LOW 36
Heap-based buffer overflow in Windows Program Compatibility Assistant Service allows an authorized attacker to elevate privileges locally.
CVSS 3.1HIGH 7.8· Local · Low privileges · No interaction · EPSS 0.00333 · Published 2026-09-08 · Fixed in 10.0.14393.9512, 10.0.17763.9245 +10 CWE-122
Priority LOW 36
Heap-based buffer overflow in Windows Storage Spaces Controller allows an authorized attacker to execute code locally.
CVSS 3.1HIGH 7.8· Local · Low privileges · No interaction · EPSS 0.00333 · Published 2026-09-08 · Fixed in 10.0.14393.9512, 10.0.17763.9245 +8 CWE-122
Priority LOW 36
Heap-based buffer overflow in Windows NTFS allows an authorized attacker to elevate privileges locally.
CVSS 3.1HIGH 7.8· Local · Low privileges · No interaction · EPSS 0.00333 · Published 2026-09-08 · Fixed in 10.0.14393.9512, 10.0.17763.9245 +10 CWE-122
Priority LOW 36
Integer overflow or wraparound in Windows NTFS allows an authorized attacker to elevate privileges locally.
CVSS 3.1HIGH 7.8· Local · Low privileges · No interaction · EPSS 0.00333 · Published 2026-09-08 · Fixed in 10.0.14393.9512, 10.0.17763.9245 +10 CWE-190
Priority LOW 36
Use after free in Active Directory Domain Services allows an authorized attacker to execute code over a network.
CVSS 3.1HIGH 7.5· Network · Low privileges · No interaction · EPSS 0.00663 · Published 2026-09-08 · Fixed in 10.0.14393.9512, 10.0.17763.9245 +10 CWE-416
Priority LOW 36
Heap-based buffer overflow in Active Directory Certificate Services (AD CS) allows an authorized attacker to elevate privileges locally.
CVSS 3.1HIGH 7.8· Local · Low privileges · No interaction · EPSS 0.00333 · Published 2026-09-08 · Fixed in 10.0.14393.9512, 10.0.17763.9245 +10 CWE-122
Priority LOW 36
Use after free in Windows Push Notifications allows an authorized attacker to elevate privileges locally.
CVSS 3.1HIGH 7.8· Local · Low privileges · No interaction · EPSS 0.00333 · Published 2026-09-08 · Fixed in 10.0.19044.7725, 10.0.19045.7725 +6 CWE-416
Priority LOW 36
Use after free in Windows Server allows an authorized attacker to elevate privileges locally.
CVSS 3.1HIGH 7.8· Local · Low privileges · No interaction · EPSS 0.00333 · Published 2026-09-08 · Fixed in 10.0.14393.9512, 10.0.17763.9245 +8 CWE-416
Priority LOW 36
Use after free in Windows VHD miniport driver allows an authorized attacker to elevate privileges locally.
CVSS 3.1HIGH 7.8· Local · Low privileges · No interaction · EPSS 0.00333 · Published 2026-09-08 · Fixed in 10.0.17763.9245, 10.0.19044.7725 +7 CWE-416
Priority LOW 35
Use after free in Windows DNS allows an unauthorized attacker to deny service over a network.
CVSS 3.1HIGH 7.5· Network · No auth · No interaction · EPSS 0.00983 · Published 2026-09-08 · Fixed in 10.0.14393.9512, 10.0.17763.9245 +4 CWE-416
Priority LOW 35
Heap-based buffer overflow in Windows Graphics Kernel allows an authorized attacker to execute code locally.
CVSS 3.1HIGH 7.5· Local · High privileges · No interaction · EPSS 0.00276 · Published 2026-09-08 · Fixed in 10.0.17763.9245, 10.0.19044.7725 +7 CWE-122
Priority LOW 35
Allocation of resources without limits or throttling in Active Directory Federation Services (AD FS) allows an unauthorized attacker to deny service over a network.
CVSS 3.1HIGH 7.5· Network · No auth · No interaction · EPSS 0.00983 · Published 2026-09-08 · Fixed in 10.0.14393.9512, 10.0.17763.9245 +4 CWE-770
Priority LOW 35
Use after free in Windows Virtual Trusted Platform Module allows an authorized attacker to elevate privileges locally.
CVSS 3.1HIGH 7.5· Local · High privileges · No interaction · EPSS 0.00276 · Published 2026-09-08 · Fixed in 10.0.17763.9245, 10.0.19044.7725 +7 CWE-416
Priority LOW 35
Missing authorization in Windows Hyper-V allows an authorized attacker to elevate privileges over a network.
CVSS 3.1HIGH 7.5· Network · Low privileges · No interaction · EPSS 0.00486 · Published 2026-09-08 · Fixed in 10.0.17763.9245, 10.0.19044.7725 +7 CWE-862
Priority LOW 35
Authentication bypass by spoofing in Windows Netlogon allows an unauthorized attacker to perform spoofing over an adjacent network.
CVSS 3.1HIGH 7.5· Adjacent network · No auth · No interaction · EPSS 0.00383 · Published 2026-09-08 · Fixed in 10.0.14393.9512, 10.0.17763.9245 +10 CWE-290
Priority LOW 34
Integer overflow or wraparound in Remote Desktop Client allows an unauthorized attacker to deny service over a network.
CVSS 3.1HIGH 7.5· Network · No auth · No interaction · EPSS 0.007 · Published 2026-09-08 · Fixed in 10.0.14393.9512, 10.0.17763.9245 +8 CWE-190
Priority LOW 34
Out-of-bounds read in Windows DHCP Server allows an unauthorized attacker to disclose information over a network.
CVSS 3.1HIGH 7.5· Network · No auth · No interaction · EPSS 0.00834 · Published 2026-09-08 · Fixed in 10.0.14393.9512, 10.0.17763.9245 +4 CWE-125
Priority LOW 34
Out-of-bounds read in Windows DHCP Server allows an unauthorized attacker to disclose information over a network.
CVSS 3.1HIGH 7.5· Network · No auth · No interaction · EPSS 0.00834 · Published 2026-09-08 · Fixed in 10.0.14393.9512, 10.0.17763.9245 +4 CWE-125
Priority LOW 34
Out-of-bounds read in Windows DHCP Server allows an unauthorized attacker to disclose information over a network.
CVSS 3.1HIGH 7.5· Network · No auth · No interaction · EPSS 0.00834 · Published 2026-09-08 · Fixed in 10.0.14393.9512, 10.0.17763.9245 +4 CWE-125
Priority LOW 34
Out-of-bounds read in Windows DHCP Server allows an unauthorized attacker to disclose information over a network.
CVSS 3.1HIGH 7.5· Network · No auth · No interaction · EPSS 0.00834 · Published 2026-09-08 · Fixed in 10.0.14393.9512, 10.0.17763.9245 +4 CWE-125
Priority LOW 34
Creation of temporary file in directory with insecure permissions in Windows Error Reporting allows an authorized attacker to perform tampering locally.
CVSS 3.1HIGH 7.1· Local · Low privileges · No interaction · EPSS 0.00463 · Published 2026-09-08 · Fixed in 10.0.14393.9512, 10.0.17763.9245 +8 CWE-379
Priority LOW 34
Use after free in Windows Modern Device Management (MDM) allows an authorized attacker to elevate privileges over a network.
CVSS 3.1HIGH 7.1· Network · Low privileges · User interaction · EPSS 0.0057 · Published 2026-09-08 · Fixed in 10.0.17763.9245, 10.0.19044.7725 +7 CWE-416
Priority LOW 34
Use after free in Windows Management Instrumentation allows an authorized attacker to elevate privileges over a network.
CVSS 3.1HIGH 7.1· Network · Low privileges · User interaction · EPSS 0.0057 · Published 2026-09-08 · Fixed in 10.0.14393.9512, 10.0.17763.9245 +10 CWE-416
Priority LOW 34
Use after free in Windows NDIS allows an authorized attacker to elevate privileges over a network.
CVSS 3.1HIGH 7.1· Network · Low privileges · User interaction · EPSS 0.0057 · Published 2026-09-08 · Fixed in 10.0.14393.9512, 10.0.17763.9245 +10 CWE-416
Priority LOW 34
Use after free in Windows Kernel allows an authorized attacker to elevate privileges over a network.
CVSS 3.1HIGH 7.1· Network · Low privileges · User interaction · EPSS 0.0057 · Published 2026-09-08 · Fixed in 10.0.14393.9512, 10.0.17763.9245 +10 CWE-416
Priority LOW 34
Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Print Spooler Components allows an authorized attacker to elevate privileges over a network.
CVSS 3.1HIGH 7.1· Network · Low privileges · User interaction · EPSS 0.00437 · Published 2026-09-08 · Fixed in 10.0.14393.9512, 10.0.17763.9245 +10 CWE-362
Priority LOW 34
Use of uninitialized resource in Remote Desktop Client allows an authorized attacker to execute code over a network.
CVSS 3.1HIGH 7.1· Network · Low privileges · User interaction · EPSS 0.0057 · Published 2026-09-08 · Fixed in 10.0.14393.9512, 10.0.17763.9245 +8 CWE-908
Priority LOW 34
Use after free in Windows NDIS allows an authorized attacker to elevate privileges over a network.
CVSS 3.1HIGH 7.1· Network · Low privileges · User interaction · EPSS 0.0057 · Published 2026-09-08 · Fixed in 10.0.14393.9512, 10.0.17763.9245 +7 CWE-416
Priority LOW 34
Heap-based buffer overflow in Windows Fast FAT Driver allows an unauthorized attacker to execute code locally.
CVSS 3.1HIGH 7.4· Local · No auth · No interaction · EPSS 0.00288 · Published 2026-09-08 · Fixed in 10.0.14393.9512, 10.0.17763.9245 +10 CWE-122
Priority LOW 34
Heap-based buffer overflow in Windows NTFS allows an authorized attacker to elevate privileges over a network.
CVSS 3.1HIGH 7.1· Network · Low privileges · User interaction · EPSS 0.0057 · Published 2026-09-08 · Fixed in 10.0.14393.9512, 10.0.17763.9245 +10 CWE-122
Priority LOW 34
Use after free in Remote Desktop Gateway Service allows an authorized attacker to elevate privileges over a network.
CVSS 3.1HIGH 7.1· Network · Low privileges · User interaction · EPSS 0.0057 · Published 2026-09-08 · Fixed in 10.0.14393.9512, 10.0.17763.9245 +4 CWE-416
Priority LOW 34
Double free in Windows Registry allows an authorized attacker to elevate privileges over a network.
CVSS 3.1HIGH 7.1· Network · Low privileges · User interaction · EPSS 0.0057 · Published 2026-09-08 · Fixed in 10.0.14393.9512, 10.0.17763.9245 +10 CWE-415
Priority LOW 34
Heap-based buffer overflow in Microsoft Standard XPS allows an authorized attacker to elevate privileges over a network.
CVSS 3.1HIGH 7.1· Network · Low privileges · User interaction · EPSS 0.0057 · Published 2026-09-08 · Fixed in 10.0.14393.9512, 10.0.17763.9245 +10 CWE-122
Priority LOW 34
Use after free in Windows Device Association Broker service allows an authorized attacker to elevate privileges over a network.
CVSS 3.1HIGH 7.1· Network · Low privileges · User interaction · EPSS 0.0057 · Published 2026-09-08 · Fixed in 10.0.14393.9512, 10.0.17763.9245 +8 CWE-416
Priority LOW 34
Heap-based buffer overflow in Microsoft Standard XPS allows an authorized attacker to elevate privileges over a network.
CVSS 3.1HIGH 7.1· Network · Low privileges · User interaction · EPSS 0.0057 · Published 2026-09-08 · Fixed in 10.0.14393.9512, 10.0.17763.9245 +10 CWE-122
Priority LOW 34
Use after free in Microsoft Windows Search Component allows an authorized attacker to elevate privileges over a network.
CVSS 3.1HIGH 7.1· Network · Low privileges · User interaction · EPSS 0.0057 · Published 2026-09-08 · Fixed in 10.0.14393.9512, 10.0.17763.9245 +10 CWE-416
Priority LOW 34
Use after free in Windows Device Association Service allows an authorized attacker to elevate privileges over a network.
CVSS 3.1HIGH 7.1· Network · Low privileges · User interaction · EPSS 0.0057 · Published 2026-09-08 · Fixed in 10.0.14393.9512, 10.0.17763.9245 +10 CWE-416
Priority LOW 34
Use after free in Windows Win32K allows an authorized attacker to elevate privileges over a network.
CVSS 3.1HIGH 7.1· Network · Low privileges · User interaction · EPSS 0.0057 · Published 2026-09-08 · Fixed in 10.0.14393.9512, 10.0.17763.9245 +9 CWE-416
Priority LOW 34
Heap-based buffer overflow in Microsoft Standard XPS allows an authorized attacker to elevate privileges over a network.
CVSS 3.1HIGH 7.1· Network · Low privileges · User interaction · EPSS 0.0057 · Published 2026-09-08 · Fixed in 10.0.14393.9512, 10.0.17763.9245 +10 CWE-122
Priority LOW 34
Use after free in Windows Remote Desktop Licensing Service allows an authorized attacker to elevate privileges over a network.
CVSS 3.1HIGH 7.1· Network · Low privileges · User interaction · EPSS 0.0057 · Published 2026-09-08 · Fixed in 10.0.14393.9512, 10.0.17763.9245 +4 CWE-416
Priority LOW 34
Heap-based buffer overflow in Microsoft Standard XPS allows an authorized attacker to elevate privileges over a network.
CVSS 3.1HIGH 7.1· Network · Low privileges · User interaction · EPSS 0.0057 · Published 2026-09-08 · Fixed in 10.0.14393.9512, 10.0.17763.9245 +10 CWE-122
Priority LOW 34
Use after free in Windows Kernel allows an authorized attacker to elevate privileges over a network.
CVSS 3.1HIGH 7.1· Network · Low privileges · User interaction · EPSS 0.0057 · Published 2026-09-08 · Fixed in 10.0.14393.9512, 10.0.17763.9245 +10 CWE-416
Priority LOW 34
Use after free in Windows Print Spooler Components allows an authorized attacker to elevate privileges over a network.
CVSS 3.1HIGH 7.1· Network · Low privileges · User interaction · EPSS 0.0057 · Published 2026-09-08 · Fixed in 10.0.14393.9512, 10.0.17763.9245 +10 CWE-416
Priority LOW 33
Use after free in Windows Cloud Files Mini Filter Driver allows an authorized attacker to elevate privileges locally.
CVSS 3.1HIGH 7.0· Local · Low privileges · No interaction · EPSS 0.00323 · Published 2026-09-08 · Fixed in 10.0.17763.9245, 10.0.19044.7725 +7 CWE-416
Priority LOW 33
Use after free in Windows Distributed File System (DFS) allows an authorized attacker to execute code over a network.
CVSS 3.1HIGH 7.5· Network · Low privileges · No interaction · EPSS 0.00476 · Published 2026-09-08 · Fixed in 10.0.14393.9512, 10.0.17763.9245 +10 CWE-416
Priority LOW 33
Heap-based buffer overflow in Windows Biometric Service allows an authorized attacker to elevate privileges locally.
CVSS 3.1HIGH 7.0· Local · Low privileges · No interaction · EPSS 0.00281 · Published 2026-09-08 · Fixed in 10.0.14393.9512, 10.0.17763.9245 +8 CWE-122
Priority LOW 33
Out-of-bounds read in Virtual Hard Disk (VHD) Miniport Driver allows an authorized attacker to elevate privileges locally.
CVSS 3.1HIGH 7.0· Local · Low privileges · No interaction · EPSS 0.00312 · Published 2026-09-08 · Fixed in 10.0.17763.9245, 10.0.19044.7725 +7 CWE-125
Priority LOW 33
Missing authentication for critical function in Windows DHCP Server allows an authorized attacker to elevate privileges over a network.
CVSS 3.1MEDIUM 6.8· Network · High privileges · User interaction · EPSS 0.00725 · Published 2026-09-08 · Fixed in 10.0.14393.9512, 10.0.17763.9245 +4 CWE-306
Priority LOW 32
Use after free in Windows Kernel allows an authorized attacker to elevate privileges locally.
CVSS 3.1HIGH 7.0· Local · Low privileges · No interaction · EPSS 0.00264 · Published 2026-09-08 · Fixed in 10.0.14393.9512, 10.0.17763.9245 +10 CWE-416
Priority LOW 32
Use after free in Windows Device Association Service allows an authorized attacker to elevate privileges locally.
CVSS 3.1HIGH 7.0· Local · Low privileges · No interaction · EPSS 0.00264 · Published 2026-09-08 · Fixed in 10.0.14393.9512, 10.0.17763.9245 +8 CWE-416
Priority LOW 32
Use after free in Windows Security App allows an authorized attacker to elevate privileges locally.
CVSS 3.1HIGH 7.0· Local · Low privileges · No interaction · EPSS 0.00264 · Published 2026-09-08 · Fixed in 10.0.26100.9445, 10.0.26200.9445 +3 CWE-416
Priority LOW 32
Untrusted pointer dereference in Microsoft Windows SCSI Class System File allows an unauthorized attacker to elevate privileges with a physical attack.
CVSS 3.1MEDIUM 6.8· Physical · No auth · No interaction · EPSS 0.00438 · Published 2026-09-08 · Fixed in 10.0.17763.9245, 10.0.19044.7725 +7 CWE-822
Priority LOW 32
Use after free in Windows Management Instrumentation allows an authorized attacker to elevate privileges locally.
CVSS 3.1HIGH 7.0· Local · Low privileges · No interaction · EPSS 0.00264 · Published 2026-09-08 · Fixed in 10.0.14393.9512, 10.0.17763.9245 +10 CWE-416
Priority LOW 32
Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Installer allows an authorized attacker to elevate privileges locally.
CVSS 3.1HIGH 7.0· Local · Low privileges · No interaction · EPSS 0.00202 · Published 2026-09-08 · Fixed in 10.0.14393.9512, 10.0.17763.9245 +10 CWE-362
Priority LOW 32
No cwe for this issue in Windows Boot Manager allows an unauthorized attacker to elevate privileges with a physical attack.
CVSS 3.1MEDIUM 6.8· Physical · No auth · No interaction · EPSS 0.00438 · Published 2026-09-08 · Fixed in 10.0.14393.9512, 10.0.17763.9245 +10 CWE-693
Priority LOW 32
Use after free in Windows Modern Device Management (MDM) allows an authorized attacker to elevate privileges locally.
CVSS 3.1HIGH 7.0· Local · Low privileges · No interaction · EPSS 0.00264 · Published 2026-09-08 · Fixed in 10.0.17763.9245, 10.0.19044.7725 +7 CWE-416
Priority LOW 32
Use after free in Windows Authentication Methods allows an authorized attacker to elevate privileges locally.
CVSS 3.1HIGH 7.0· Local · Low privileges · No interaction · EPSS 0.00202 · Published 2026-09-08 · Fixed in 10.0.14393.9512, 10.0.17763.9245 +8 CWE-362
Priority LOW 32
Use after free in Windows Modern Device Management (MDM) allows an authorized attacker to elevate privileges locally.
CVSS 3.1HIGH 7.0· Local · Low privileges · No interaction · EPSS 0.00264 · Published 2026-09-08 · Fixed in 10.0.17763.9245, 10.0.19044.7725 +7 CWE-416
Priority LOW 32
Out-of-bounds read in Windows USB Hub Driver allows an unauthorized attacker to elevate privileges with a physical attack.
CVSS 3.1MEDIUM 6.8· Physical · No auth · No interaction · EPSS 0.00438 · Published 2026-09-08 · Fixed in 10.0.14393.9512, 10.0.17763.9245 +8 CWE-125
Priority LOW 32
Heap-based buffer overflow in Windows Volume Shadow Copy allows an unauthorized attacker to elevate privileges with a physical attack.
CVSS 3.1MEDIUM 6.8· Physical · No auth · No interaction · EPSS 0.00438 · Published 2026-09-08 · Fixed in 10.0.14393.9512, 10.0.17763.9245 +10 CWE-122
Priority LOW 32
Use after free in Windows Modern Execution Server allows an authorized attacker to elevate privileges locally.
CVSS 3.1HIGH 7.0· Local · Low privileges · No interaction · EPSS 0.00264 · Published 2026-09-08 · Fixed in 10.0.14393.9512, 10.0.17763.9245 +8 CWE-416
Priority LOW 32
Out-of-bounds read in Windows Spaceport.sys allows an authorized attacker to execute code locally.
CVSS 3.1HIGH 7.0· Local · Low privileges · No interaction · EPSS 0.00264 · Published 2026-09-08 · Fixed in 10.0.17763.9245, 10.0.19044.7725 +7 CWE-125
Priority LOW 32
Out-of-bounds read in Windows NTFS allows an authorized attacker to elevate privileges locally.
CVSS 3.1MEDIUM 6.7· Local · High privileges · No interaction · EPSS 0.00348 · Published 2026-09-08 · Fixed in 10.0.14393.9512, 10.0.17763.9245 +10 CWE-125
Priority LOW 32
Use after free in Windows Secure Socket Tunneling Protocol (SSTP) allows an authorized attacker to execute code locally.
CVSS 3.1HIGH 7.0· Local · Low privileges · No interaction · EPSS 0.00264 · Published 2026-09-08 · Fixed in 10.0.14393.9512, 10.0.17763.9245 +10 CWE-416
Priority LOW 32
Use after free in Windows Internet Connection Sharing (ICS) allows an authorized attacker to elevate privileges locally.
CVSS 3.1HIGH 7.0· Local · Low privileges · No interaction · EPSS 0.00264 · Published 2026-09-08 · Fixed in 10.0.14393.9512, 10.0.17763.9245 +8 CWE-416
Priority LOW 32
Double free in Windows Routing and Remote Access Service (RRAS) allows an authorized attacker to elevate privileges locally.
CVSS 3.1HIGH 7.0· Local · Low privileges · No interaction · EPSS 0.00264 · Published 2026-09-08 · Fixed in 10.0.14393.9512, 10.0.17763.9245 +10 CWE-415
Priority LOW 32
Double free in Windows Routing and Remote Access Service (RRAS) allows an authorized attacker to elevate privileges locally.
CVSS 3.1HIGH 7.0· Local · Low privileges · No interaction · EPSS 0.00264 · Published 2026-09-08 · Fixed in 10.0.14393.9512, 10.0.17763.9245 +10 CWE-415
Priority LOW 32
Heap-based buffer overflow in Windows Spaceport.sys allows an unauthorized attacker to execute code with a physical attack.
CVSS 3.1MEDIUM 6.8· Physical · No auth · No interaction · EPSS 0.00438 · Published 2026-09-08 · Fixed in 10.0.14393.9512, 10.0.17763.9245 +10 CWE-122
Priority LOW 32
Heap-based buffer overflow in Windows Spaceport.sys allows an unauthorized attacker to execute code with a physical attack.
CVSS 3.1MEDIUM 6.8· Physical · No auth · No interaction · EPSS 0.00438 · Published 2026-09-08 · Fixed in 10.0.14393.9512, 10.0.17763.9245 +10 CWE-122
Priority LOW 32
Heap-based buffer overflow in Windows Spaceport.sys allows an unauthorized attacker to execute code with a physical attack.
CVSS 3.1MEDIUM 6.8· Physical · No auth · No interaction · EPSS 0.00438 · Published 2026-09-08 · Fixed in 10.0.14393.9512, 10.0.17763.9245 +10 CWE-122
Priority LOW 32
Use after free in Windows Remote Access Connection Manager allows an authorized attacker to elevate privileges locally.
CVSS 3.1HIGH 7.0· Local · Low privileges · No interaction · EPSS 0.00264 · Published 2026-09-08 · Fixed in 10.0.14393.9512, 10.0.17763.9245 +9 CWE-416
Priority LOW 32
Use after free in Windows Remote Access Connection Manager allows an authorized attacker to elevate privileges locally.
CVSS 3.1HIGH 7.0· Local · Low privileges · No interaction · EPSS 0.00264 · Published 2026-09-08 · Fixed in 10.0.14393.9512, 10.0.17763.9245 +10 CWE-416
Priority LOW 32
Use after free in Windows Secure Socket Tunneling Protocol (SSTP) allows an authorized attacker to elevate privileges locally.
CVSS 3.1HIGH 7.0· Local · Low privileges · No interaction · EPSS 0.00264 · Published 2026-09-08 · Fixed in 10.0.14393.9512, 10.0.17763.9245 +8 CWE-416
Priority LOW 32
Heap-based buffer overflow in Windows NTFS allows an unauthorized attacker to execute code with a physical attack.
CVSS 3.1MEDIUM 6.8· Physical · No auth · No interaction · EPSS 0.00438 · Published 2026-09-08 · Fixed in 10.0.14393.9512, 10.0.17763.9245 +10 CWE-122
Priority LOW 32
Use after free in Windows Services for NFS ONCRPC XDR Driver allows an authorized attacker to execute code locally.
CVSS 3.1HIGH 7.0· Local · Low privileges · No interaction · EPSS 0.00264 · Published 2026-09-08 · Fixed in 6.2.9200.26349, 6.3.9600.23398 +4 CWE-416
Priority LOW 32
Use after free in Windows Modern Device Management (MDM) allows an authorized attacker to elevate privileges locally.
CVSS 3.1HIGH 7.0· Local · Low privileges · No interaction · EPSS 0.00264 · Published 2026-09-08 · Fixed in 10.0.17763.9245, 10.0.19044.7725 +7 CWE-416
Priority LOW 32
Heap-based buffer overflow in Windows Defender Firewall Service allows an authorized attacker to elevate privileges locally.
CVSS 3.1HIGH 7.0· Local · Low privileges · No interaction · EPSS 0.00264 · Published 2026-09-08 · Fixed in 10.0.14393.9512, 10.0.17763.9245 +10 CWE-122
Priority LOW 32
Use after free in Windows AF_UNIX Socket Provider allows an authorized attacker to elevate privileges locally.
CVSS 3.1HIGH 7.0· Local · Low privileges · No interaction · EPSS 0.00264 · Published 2026-09-08 · Fixed in 10.0.14393.9512, 10.0.17763.9245 +10 CWE-416
Priority LOW 32
Double free in Windows Audio Service allows an authorized attacker to elevate privileges locally.
CVSS 3.1HIGH 7.0· Local · Low privileges · No interaction · EPSS 0.00264 · Published 2026-09-08 · Fixed in 10.0.14393.9512, 10.0.17763.9245 +10 CWE-415
Priority LOW 32
Incorrect authorization in Windows Win32K allows an authorized attacker to elevate privileges locally.
CVSS 3.1HIGH 7.0· Local · Low privileges · No interaction · EPSS 0.00236 · Published 2026-09-08 · Fixed in 10.0.14393.9512, 10.0.17763.9245 +10 CWE-863
Priority LOW 32
Use after free in Microsoft Windows Search Component allows an authorized attacker to elevate privileges locally.
CVSS 3.1HIGH 7.0· Local · Low privileges · No interaction · EPSS 0.00264 · Published 2026-09-08 · Fixed in 10.0.14393.9512, 10.0.17763.9245 +10 CWE-416
Priority LOW 32
Use after free in Windows Media allows an authorized attacker to elevate privileges locally.
CVSS 3.1HIGH 7.0· Local · Low privileges · No interaction · EPSS 0.00264 · Published 2026-09-08 · Fixed in 10.0.14393.9512, 10.0.17763.9245 +8 CWE-416
Priority LOW 32
Use after free in Windows Bluetooth Service allows an authorized attacker to elevate privileges locally.
CVSS 3.1HIGH 7.0· Local · Low privileges · No interaction · EPSS 0.00264 · Published 2026-09-08 · Fixed in 10.0.17763.9245, 10.0.19044.7725 +7 CWE-416
Priority LOW 32
Use after free in Windows Device Association Service allows an authorized attacker to elevate privileges locally.
CVSS 3.1HIGH 7.0· Local · Low privileges · No interaction · EPSS 0.00264 · Published 2026-09-08 · Fixed in 10.0.17763.9245, 10.0.19044.7725 +7 CWE-416
Priority LOW 32
Time-of-check time-of-use (toctou) race condition in Windows USB Audio Class driver (usbaudio.sys) allows an authorized attacker to elevate privileges locally.
CVSS 3.1HIGH 7.0· Local · Low privileges · No interaction · EPSS 0.00202 · Published 2026-09-08 · Fixed in 10.0.14393.9512, 10.0.17763.9245 +10 CWE-191
Priority LOW 32
Use after free in Windows Print Spooler Components allows an authorized attacker to elevate privileges locally.
CVSS 3.1HIGH 7.0· Local · Low privileges · No interaction · EPSS 0.00264 · Published 2026-09-08 · Fixed in 10.0.14393.9512, 10.0.17763.9245 +9 CWE-416
Priority LOW 32
Use after free in Windows ALPC allows an authorized attacker to elevate privileges locally.
CVSS 3.1HIGH 7.0· Local · Low privileges · No interaction · EPSS 0.00264 · Published 2026-09-08 · Fixed in 10.0.14393.9512, 10.0.17763.9245 +10 CWE-416
Priority LOW 32
Use after free in Windows Bluetooth Port Driver allows an authorized attacker to elevate privileges locally.
CVSS 3.1HIGH 7.0· Local · Low privileges · No interaction · EPSS 0.00264 · Published 2026-09-08 · Fixed in 10.0.14393.9512, 10.0.17763.9245 +10 CWE-416
Priority LOW 32
Use after free in Windows Accounts Control allows an authorized attacker to elevate privileges locally.
CVSS 3.1HIGH 7.0· Local · Low privileges · No interaction · EPSS 0.00264 · Published 2026-09-08 · Fixed in 10.0.14393.9512, 10.0.17763.9245 +8 CWE-416
Priority LOW 32
Use after free in Windows Device Association Service allows an authorized attacker to elevate privileges locally.
CVSS 3.1HIGH 7.0· Local · Low privileges · No interaction · EPSS 0.00264 · Published 2026-09-08 · Fixed in 10.0.17763.9245, 10.0.19044.7725 +7 CWE-416
Priority LOW 32
Time-of-check time-of-use (toctou) race condition in Windows Win32K allows an authorized attacker to elevate privileges locally.
CVSS 3.1HIGH 7.0· Local · Low privileges · No interaction · EPSS 0.00202 · Published 2026-09-08 · Fixed in 10.0.14393.9512, 10.0.17763.9245 +10 CWE-367
Priority LOW 32
Use after free in Windows Device Association Service allows an authorized attacker to elevate privileges locally.
CVSS 3.1HIGH 7.0· Local · Low privileges · No interaction · EPSS 0.00264 · Published 2026-09-08 · Fixed in 10.0.14393.9512, 10.0.17763.9245 +8 CWE-416
Priority LOW 32
Use after free in Windows Web Platform Storage allows an authorized attacker to elevate privileges locally.
CVSS 3.1HIGH 7.0· Local · Low privileges · No interaction · EPSS 0.00264 · Published 2026-09-08 · Fixed in 10.0.17763.9245, 10.0.19044.7725 +7 CWE-416
Priority LOW 32
Use after free in Windows Device Association Broker service allows an authorized attacker to elevate privileges locally.
CVSS 3.1HIGH 7.0· Local · Low privileges · No interaction · EPSS 0.00264 · Published 2026-09-08 · Fixed in 10.0.14393.9512, 10.0.17763.9245 +8 CWE-416
Priority LOW 32
Use after free in Windows Audio Service allows an authorized attacker to elevate privileges locally.
CVSS 3.1HIGH 7.0· Local · Low privileges · No interaction · EPSS 0.00264 · Published 2026-09-08 · Fixed in 10.0.14393.9512, 10.0.17763.9245 +10 CWE-416
Priority LOW 32
Use after free in Windows Host Guardian Service allows an authorized attacker to elevate privileges locally.
CVSS 3.1HIGH 7.0· Local · Low privileges · No interaction · EPSS 0.00202 · Published 2026-09-08 · Fixed in 10.0.17763.9245, 10.0.19044.7725 +7 CWE-362
Priority LOW 32
Use after free in Windows Accounts Control allows an authorized attacker to elevate privileges locally.
CVSS 3.1HIGH 7.0· Local · Low privileges · No interaction · EPSS 0.00264 · Published 2026-09-08 · Fixed in 10.0.14393.9512, 10.0.17763.9245 +8 CWE-416
Priority LOW 32
Use after free in Windows Win32K allows an authorized attacker to elevate privileges locally.
CVSS 3.1HIGH 7.0· Local · Low privileges · No interaction · EPSS 0.00264 · Published 2026-09-08 · Fixed in 10.0.14393.9512, 10.0.17763.9245 +8 CWE-416
Priority LOW 32
Use after free in Windows Notification allows an authorized attacker to elevate privileges locally.
CVSS 3.1HIGH 7.0· Local · Low privileges · No interaction · EPSS 0.00264 · Published 2026-09-08 · Fixed in 10.0.19044.7725, 10.0.19045.7725 +6 CWE-416
Priority LOW 32
Use after free in Windows Message Queuing allows an authorized attacker to elevate privileges locally.
CVSS 3.1HIGH 7.0· Local · Low privileges · No interaction · EPSS 0.00264 · Published 2026-09-08 · Fixed in 10.0.14393.9512, 10.0.17763.9245 +10 CWE-416
Priority LOW 32
Out-of-bounds read in Windows Win32K allows an authorized attacker to elevate privileges locally.
CVSS 3.1HIGH 7.0· Local · Low privileges · No interaction · EPSS 0.00264 · Published 2026-09-08 · Fixed in 10.0.14393.9512, 10.0.17763.9245 +10 CWE-125
Priority LOW 32
Heap-based buffer overflow in Windows Fax Service allows an authorized attacker to elevate privileges locally.
CVSS 3.1HIGH 7.0· Local · Low privileges · No interaction · EPSS 0.00264 · Published 2026-09-08 · Fixed in 10.0.14393.9512, 10.0.17763.9245 +10 CWE-122
Priority LOW 32
Use after free in Windows Image Acquisition allows an authorized attacker to elevate privileges locally.
CVSS 3.1HIGH 7.0· Local · Low privileges · No interaction · EPSS 0.00264 · Published 2026-09-08 · Fixed in 10.0.14393.9512, 10.0.17763.9245 +10 CWE-416
Priority LOW 32
Use after free in Virtual Hard Disk (VHD) Miniport Driver allows an authorized attacker to elevate privileges locally.
CVSS 3.1HIGH 7.0· Local · Low privileges · No interaction · EPSS 0.00264 · Published 2026-09-08 · Fixed in 10.0.14393.9512, 10.0.17763.9245 +8 CWE-416
Priority LOW 32
Buffer over-read in Windows Win32K allows an authorized attacker to elevate privileges locally.
CVSS 3.1HIGH 7.0· Local · Low privileges · No interaction · EPSS 0.00264 · Published 2026-09-08 · Fixed in 16.112.26090911 CWE-126
Priority LOW 32
Use after free in Microsoft Install Service allows an authorized attacker to elevate privileges locally.
CVSS 3.1HIGH 7.0· Local · Low privileges · No interaction · EPSS 0.00264 · Published 2026-09-08 · Fixed in 10.0.19044.7725, 10.0.19045.7725 +6 CWE-416
Priority LOW 32
Use after free in Microsoft Windows Search Component allows an authorized attacker to elevate privileges locally.
CVSS 3.1HIGH 7.0· Local · Low privileges · No interaction · EPSS 0.00264 · Published 2026-09-08 · Fixed in 10.0.14393.9512, 10.0.17763.9245 +10 CWE-416
Priority LOW 32
Use after free in Windows Device Association Service allows an authorized attacker to elevate privileges locally.
CVSS 3.1HIGH 7.0· Local · Low privileges · No interaction · EPSS 0.00202 · Published 2026-09-08 · Fixed in 10.0.14393.9512, 10.0.17763.9245 +9 CWE-362
Priority LOW 32
Numeric truncation error in Windows Kernel allows an authorized attacker to elevate privileges locally.
CVSS 3.1HIGH 7.0· Local · Low privileges · No interaction · EPSS 0.00264 · Published 2026-09-08 · Fixed in 10.0.14393.9512, 10.0.17763.9245 +10 CWE-122
Priority LOW 32
Use after free in Windows Storage Spaces Controller allows an authorized attacker to elevate privileges locally.
CVSS 3.1HIGH 7.0· Local · Low privileges · No interaction · EPSS 0.00264 · Published 2026-09-08 · Fixed in 10.0.14393.9512, 10.0.17763.9245 +8 CWE-416
Priority LOW 32
Use after free in Windows Device Association Service allows an authorized attacker to elevate privileges locally.
CVSS 3.1HIGH 7.0· Local · Low privileges · No interaction · EPSS 0.00264 · Published 2026-09-08 · Fixed in 10.0.17763.9245, 10.0.19044.7725 +7 CWE-416
Priority LOW 32
Use after free in Windows Universal Disk Format File System Driver (UDFS) allows an authorized attacker to elevate privileges locally.
CVSS 3.1HIGH 7.0· Local · Low privileges · No interaction · EPSS 0.00264 · Published 2026-09-08 · Fixed in 10.0.14393.9512, 10.0.17763.9245 +10 CWE-416
Priority LOW 32
Use after free in Windows NTFS allows an authorized attacker to elevate privileges locally.
CVSS 3.1HIGH 7.0· Local · Low privileges · No interaction · EPSS 0.00264 · Published 2026-09-08 · Fixed in 10.0.14393.9512, 10.0.17763.9245 +10 CWE-416
Priority LOW 32
Heap-based buffer overflow in Windows NTFS allows an unauthorized attacker to execute code with a physical attack.
CVSS 3.1MEDIUM 6.8· Physical · No auth · No interaction · EPSS 0.00438 · Published 2026-09-08 · Fixed in 10.0.14393.9512, 10.0.17763.9245 +10 CWE-122
Priority LOW 32
Heap-based buffer overflow in Windows Online Certificate Status Protocol (OCSP) allows an authorized attacker to elevate privileges locally.
CVSS 3.1HIGH 7.0· Local · Low privileges · No interaction · EPSS 0.00264 · Published 2026-09-08 · Fixed in 10.0.14393.9512, 10.0.17763.9245 +4 CWE-122
Priority LOW 32
Heap-based buffer overflow in Windows Program Compatibility Assistant Service allows an authorized attacker to elevate privileges locally.
CVSS 3.1HIGH 7.0· Local · Low privileges · No interaction · EPSS 0.00202 · Published 2026-09-08 · Fixed in 10.0.14393.9512, 10.0.17763.9245 +8 CWE-122
Priority LOW 32
Use after free in Windows Audio Service allows an authorized attacker to elevate privileges locally.
CVSS 3.1HIGH 7.0· Local · Low privileges · No interaction · EPSS 0.00264 · Published 2026-09-08 · Fixed in 10.0.17763.9245, 10.0.19044.7725 +7 CWE-416
Priority LOW 32
Use after free in Windows Wireless Networking allows an authorized attacker to elevate privileges locally.
CVSS 3.1HIGH 7.0· Local · Low privileges · No interaction · EPSS 0.00264 · Published 2026-09-08 · Fixed in 10.0.17763.9245, 10.0.19044.7725 +7 CWE-416
Priority LOW 32
Use after free in Connected Devices Platform Service (Cdpsvc) allows an authorized attacker to elevate privileges locally.
CVSS 3.1HIGH 7.0· Local · Low privileges · No interaction · EPSS 0.00264 · Published 2026-09-08 · Fixed in 10.0.17763.9245, 10.0.19044.7725 +7 CWE-416
Priority LOW 32
Untrusted pointer dereference in Windows Secure Kernel Mode allows an authorized attacker to elevate privileges locally.
CVSS 3.1HIGH 7.0· Local · Low privileges · No interaction · EPSS 0.00264 · Published 2026-09-08 · Fixed in 10.0.19044.7725, 10.0.19045.7725 +6 CWE-822
Priority LOW 32
Use after free in Windows Image Acquisition allows an authorized attacker to elevate privileges locally.
CVSS 3.1HIGH 7.0· Local · Low privileges · No interaction · EPSS 0.00264 · Published 2026-09-08 · Fixed in 10.0.14393.9512, 10.0.17763.9245 +10 CWE-416
Priority LOW 32
Use after free in Windows Win32K allows an authorized attacker to elevate privileges locally.
CVSS 3.1HIGH 7.0· Local · Low privileges · No interaction · EPSS 0.00264 · Published 2026-09-08 · Fixed in 10.0.17763.9245, 10.0.19044.7725 +7 CWE-416
Priority LOW 32
Heap-based buffer overflow in Windows Partition Management Driver allows an authorized attacker to elevate privileges locally.
CVSS 3.1HIGH 7.0· Local · Low privileges · No interaction · EPSS 0.00264 · Published 2026-09-08 · Fixed in 10.0.14393.9512, 10.0.17763.9245 +10 CWE-122
Priority LOW 32
Out-of-bounds read in Windows USB Mass Storage Class Driver allows an unauthorized attacker to elevate privileges with a physical attack.
CVSS 3.1MEDIUM 6.8· Physical · No auth · No interaction · EPSS 0.00438 · Published 2026-09-08 · Fixed in 10.0.14393.9512, 10.0.17763.9245 +10 CWE-125
Priority LOW 32
Use after free in Windows Device Association Service allows an authorized attacker to elevate privileges locally.
CVSS 3.1HIGH 7.0· Local · Low privileges · No interaction · EPSS 0.00264 · Published 2026-09-08 · Fixed in 10.0.14393.9512, 10.0.17763.9245 +9 CWE-416
Priority LOW 32
Use after free in Windows Devices Human Interface allows an authorized attacker to elevate privileges locally.
CVSS 3.1HIGH 7.0· Local · Low privileges · No interaction · EPSS 0.00264 · Published 2026-09-08 · Fixed in 10.0.14393.9512, 10.0.17763.9245 +8 CWE-416
Priority LOW 32
Use after free in Windows Connected User Experiences and Telemetry allows an authorized attacker to elevate privileges locally.
CVSS 3.1HIGH 7.0· Local · Low privileges · No interaction · EPSS 0.00264 · Published 2026-09-08 · Fixed in 10.0.14393.9512, 10.0.17763.9245 +8 CWE-416
Priority LOW 32
Integer overflow or wraparound in Windows USB Audio Class driver (usbaudio.sys) allows an unauthorized attacker to elevate privileges with a physical attack.
CVSS 3.1MEDIUM 6.6· Physical · No auth · User interaction · EPSS 0.00483 · Published 2026-09-08 · Fixed in 10.0.17763.9245, 10.0.19044.7725 +7 CWE-122
Priority LOW 32
Heap-based buffer overflow in Windows Volume Manager Extension Driver allows an authorized attacker to elevate privileges locally.
CVSS 3.1HIGH 7.0· Local · Low privileges · No interaction · EPSS 0.00264 · Published 2026-09-08 · Fixed in 10.0.14393.9512, 10.0.17763.9245 +10 CWE-122
Priority LOW 32
Time-of-check time-of-use (toctou) race condition in Windows Kernel allows an authorized attacker to elevate privileges locally.
CVSS 3.1HIGH 7.0· Local · Low privileges · No interaction · EPSS 0.00202 · Published 2026-09-08 · Fixed in 10.0.14393.9512, 10.0.17763.9245 +10 CWE-367
Priority LOW 32
Heap-based buffer overflow in Windows BitLocker allows an authorized attacker to execute code locally.
CVSS 3.1MEDIUM 6.7· Local · High privileges · No interaction · EPSS 0.00348 · Published 2026-09-08 · Fixed in 10.0.14393.9512, 10.0.17763.9245 +10 CWE-122
Priority LOW 32
Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Bluetooth Service allows an authorized attacker to elevate privileges locally.
CVSS 3.1HIGH 7.0· Local · Low privileges · No interaction · EPSS 0.00202 · Published 2026-09-08 · Fixed in 10.0.19044.7725, 10.0.19045.7725 +6 CWE-362
Priority LOW 32
Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Installer allows an authorized attacker to elevate privileges locally.
CVSS 3.1HIGH 7.0· Local · Low privileges · No interaction · EPSS 0.00202 · Published 2026-09-08 · Fixed in 10.0.14393.9512, 10.0.17763.9245 +10 CWE-362
Priority LOW 32
Use after free in Windows Embedded Mode Service allows an authorized attacker to elevate privileges locally.
CVSS 3.1HIGH 7.0· Local · Low privileges · No interaction · EPSS 0.00268 · Published 2026-09-08 · Fixed in 10.0.14393.9512, 10.0.17763.9245 +8 CWE-416
Priority LOW 32
Use after free in Windows USB Audio Class driver (usbaudio.sys) allows an authorized attacker to elevate privileges locally.
CVSS 3.1HIGH 7.0· Local · Low privileges · No interaction · EPSS 0.00264 · Published 2026-09-08 · Fixed in 10.0.14393.9512, 10.0.17763.9245 +10 CWE-416
Priority LOW 32
Concurrent execution using shared resource with improper synchronization ('race condition') in Windows TCP/IP allows an authorized attacker to elevate privileges locally.
CVSS 3.1HIGH 7.0· Local · Low privileges · No interaction · EPSS 0.00202 · Published 2026-09-08 · Fixed in 10.0.14393.9512, 10.0.17763.9245 +10 CWE-362
Priority LOW 32
Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Bluetooth Service allows an authorized attacker to elevate privileges locally.
CVSS 3.1HIGH 7.0· Local · Low privileges · No interaction · EPSS 0.00202 · Published 2026-09-08 · Fixed in 10.0.17763.9245, 10.0.19044.7725 +7 CWE-362
Priority LOW 32
Heap-based buffer overflow in Windows Audio Service allows an authorized attacker to elevate privileges locally.
CVSS 3.1HIGH 7.0· Local · Low privileges · No interaction · EPSS 0.00264 · Published 2026-09-08 · Fixed in 10.0.14393.9512, 10.0.17763.9245 +10 CWE-122
Priority LOW 32
Use after free in Windows Bluetooth Service allows an authorized attacker to elevate privileges locally.
CVSS 3.1HIGH 7.0· Local · Low privileges · No interaction · EPSS 0.00264 · Published 2026-09-08 · Fixed in 10.0.17763.9245, 10.0.19044.7725 +7 CWE-416
Priority LOW 32
Concurrent execution using shared resource with improper synchronization ('race condition') in Windows TCP/IP allows an authorized attacker to elevate privileges locally.
CVSS 3.1HIGH 7.0· Local · Low privileges · No interaction · EPSS 0.00202 · Published 2026-09-08 · Fixed in 10.0.14393.9512, 10.0.17763.9245 +10 CWE-362
Priority LOW 32
Null pointer dereference in Virtual Hard Disk (VHD) Miniport Driver allows an unauthorized attacker to deny service locally.
CVSS 3.1HIGH 7.1· Local · No auth · No interaction · EPSS 0.00422 · Published 2026-09-08 · Fixed in 10.0.14393.9512, 10.0.17763.9245 +8 CWE-476
Priority LOW 32
Integer overflow or wraparound in Windows Overlay Filter allows an authorized attacker to elevate privileges locally.
CVSS 3.1MEDIUM 6.7· Local · High privileges · No interaction · EPSS 0.00348 · Published 2026-09-08 · Fixed in 10.0.14393.9512, 10.0.17763.9245 +9 CWE-125