Fixes 500 records
Priority CRITICAL 93KEV
Heap-based buffer overflow in Windows ALPC allows an authorized attacker to elevate privileges locally.
CVSS 3.1HIGH 7.8· Local · Low privileges · No interaction · EPSS 0.00387 · Published 2026-09-08 · Fixed in 10.0.14393.9512, 10.0.17763.9245 +5 CWE-122
Priority MEDIUM 51
Use after free in Windows Services for NFS ONCRPC XDR Driver allows an unauthorized attacker to execute code over a network.
CVSS 3.1CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.00974 · Published 2026-09-08 · Fixed in 6.2.9200.26349, 6.3.9600.23398 +4 CWE-416
Priority MEDIUM 51
Double free in Microsoft Graphics Component allows an unauthorized attacker to execute code over a network.
CVSS 3.1CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.00974 · Published 2026-09-08 · Fixed in 10.0.14393.9512, 10.0.17763.9245 +10 CWE-415
Priority MEDIUM 51
Weak authentication in Windows iSCSI allows an unauthorized attacker to bypass a security feature over a network.
CVSS 3.1CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.00901 · Published 2026-09-08 · Fixed in 10.0.14393.9512, 10.0.17763.9245 +4 CWE-1390
Priority MEDIUM 51
Use after free in Windows Secure Socket Tunneling Protocol (SSTP) allows an unauthorized attacker to execute code over a network.
CVSS 3.1CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.00974 · Published 2026-09-08 · Fixed in 10.0.14393.9512, 10.0.17763.9245 +10 CWE-416
Priority MEDIUM 51
Use after free in Windows Internet Connection Sharing (ICS) allows an unauthorized attacker to execute code over a network.
CVSS 3.1CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.00974 · Published 2026-09-08 · Fixed in 10.0.14393.9512, 10.0.17763.9245 +10 CWE-416
Priority MEDIUM 51
Stack-based buffer overflow in Windows Netlogon allows an unauthorized attacker to execute code over a network.
CVSS 3.1CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.00974 · Published 2026-09-08 · Fixed in 10.0.14393.9512, 10.0.17763.9245 +10 CWE-121
Priority MEDIUM 51
Use after free in Windows DHCP Server allows an unauthorized attacker to execute code over a network.
CVSS 3.1CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.00974 · Published 2026-09-08 · Fixed in 10.0.14393.9512, 10.0.17763.9245 +4 CWE-416
Priority MEDIUM 51
Out-of-bounds write in Windows Imaging Component allows an unauthorized attacker to execute code over a network.
CVSS 3.1CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.00974 · Published 2026-09-08 · Fixed in 10.0.14393.9512, 10.0.17763.9245 +10 CWE-787
Priority MEDIUM 51
Stack-based buffer overflow in Windows Hyper-V allows an unauthorized attacker to execute code over a network.
CVSS 3.1CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.00974 · Published 2026-09-08 · Fixed in 10.0.14393.9512, 10.0.17763.9245 +8 CWE-121
Priority MEDIUM 51
Heap-based buffer overflow in Windows DHCP Server allows an unauthorized attacker to execute code over a network.
CVSS 3.1CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.01022 · Published 2026-09-08 · Fixed in 10.0.14393.9512, 10.0.17763.9245 +4 CWE-122
Priority MEDIUM 51
Heap-based buffer overflow in Windows Shell allows an unauthorized attacker to execute code over a network.
CVSS 3.1CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.00974 · Published 2026-09-08 · Fixed in 10.0.14393.9512, 10.0.17763.9245 +10 CWE-122
Priority MEDIUM 51
Integer underflow (wrap or wraparound) in Microsoft Standard XPS allows an unauthorized attacker to execute code over a network.
CVSS 3.1CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.00974 · Published 2026-09-08 · Fixed in 10.0.14393.9512, 10.0.17763.9245 +10 CWE-122
Priority MEDIUM 51
Out-of-bounds write in RPC Runtime allows an unauthorized attacker to execute code over a network.
CVSS 3.1CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.00974 · Published 2026-09-08 · Fixed in 10.0.14393.9512, 10.0.17763.9245 +10 CWE-787
Priority MEDIUM 51
Heap-based buffer overflow in Windows HTTP Print Provider allows an unauthorized attacker to execute code over a network.
CVSS 3.1CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.00974 · Published 2026-09-08 · Fixed in 10.0.14393.9512, 10.0.17763.9245 +10 CWE-122
Priority MEDIUM 51
Use after free in Windows DNS allows an unauthorized attacker to execute code over a network.
CVSS 3.1CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.00974 · Published 2026-09-08 · Fixed in 10.0.14393.9512, 10.0.17763.9245 +4 CWE-416
Priority MEDIUM 51
Out-of-bounds read in Windows Direct Show allows an unauthorized attacker to execute code over a network.
CVSS 3.1CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.00974 · Published 2026-09-08 · Fixed in 10.0.14393.9512, 10.0.17763.9245 +10 CWE-122
Priority MEDIUM 51
Use after free in Windows Services for NFS ONCRPC XDR Driver allows an unauthorized attacker to execute code over a network.
CVSS 3.1CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.00974 · Published 2026-09-08 · Fixed in 6.2.9200.26349, 6.3.9600.23398 +4 CWE-416
Priority MEDIUM 51
Remote Code Execution in Windows Routing and Remote Access Service (RRAS) allows attacker to gain an unauthorized access to victim's machine
CVSS 3.1CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.00974 · Published 2026-09-08 · Fixed in 10.0.14393.9512, 10.0.17763.9245 +10 CWE-122
Priority MEDIUM 51
Integer overflow or wraparound in Microsoft Windows PDF allows an unauthorized attacker to execute code over a network.
CVSS 3.1CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.00974 · Published 2026-09-08 · Fixed in 10.0.14393.9512, 10.0.17763.9245 +8 CWE-122
Priority MEDIUM 51
Use after free in Windows Message Queuing allows an unauthorized attacker to execute code over a network.
CVSS 3.1CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.00974 · Published 2026-09-08 · Fixed in 10.0.14393.9512, 10.0.17763.9245 +10 CWE-416
Priority MEDIUM 51
Use after free in Windows Remote Desktop Services allows an unauthorized attacker to execute code over a network.
CVSS 3.1CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.00974 · Published 2026-09-08 · Fixed in 10.0.14393.9512, 10.0.17763.9245 +10 CWE-416
Priority MEDIUM 51
Heap-based buffer overflow in Windows Compressed Folder allows an unauthorized attacker to execute code over a network.
CVSS 3.1CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.00974 · Published 2026-09-08 · Fixed in 10.0.14393.9512, 10.0.17763.9245 +10 CWE-122
Priority MEDIUM 51
Out-of-bounds read in Windows Event Logging Service allows an unauthorized attacker to execute code over a network.
CVSS 3.1CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.00974 · Published 2026-09-08 · Fixed in 10.0.14393.9512, 10.0.17763.9245 +10 CWE-122
Priority MEDIUM 51
Heap-based buffer overflow in Windows Microsoft DirectMusic allows an unauthorized attacker to execute code over a network.
CVSS 3.1CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.00974 · Published 2026-09-08 · Fixed in 10.0.14393.9512, 10.0.17763.9245 +10 CWE-122
Priority MEDIUM 51
Heap-based buffer overflow in Windows NTFS allows an unauthorized attacker to execute code over a network.
CVSS 3.1CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.00974 · Published 2026-09-08 · Fixed in 10.0.14393.9512, 10.0.17763.9245 +10 CWE-122
Priority MEDIUM 51
Heap-based buffer overflow in Telnet Client allows an unauthorized attacker to execute code over a network.
CVSS 3.1CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.00974 · Published 2026-09-08 · Fixed in 10.0.14393.9512, 10.0.17763.9245 +10 CWE-122
Priority MEDIUM 51
Integer overflow or wraparound in Microsoft Windows Media Foundation allows an unauthorized attacker to execute code over a network.
CVSS 3.1CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.00974 · Published 2026-09-08 · Fixed in 10.0.14393.9512, 10.0.17763.9245 +10 CWE-122
Priority MEDIUM 51
Integer underflow (wrap or wraparound) in Microsoft UxTheme Library (uxtheme.dll) allows an unauthorized attacker to execute code over a network.
CVSS 3.1CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.00974 · Published 2026-09-08 · Fixed in 10.0.14393.9512, 10.0.17763.9245 +10 CWE-122
Priority MEDIUM 51
Heap-based buffer overflow in Windows USB Mass Storage Class Driver allows an unauthorized attacker to execute code over a network.
CVSS 3.1CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.01022 · Published 2026-09-08 · Fixed in 10.0.14393.9512, 10.0.17763.9245 +10 CWE-122
Priority MEDIUM 48
Heap-based buffer overflow in Windows Kernel allows an unauthorized attacker to execute code over a network.
CVSS 3.1HIGH 8.8· Network · No auth · User interaction · EPSS 0.00819 · Published 2026-09-08 · Fixed in 10.0.14393.9512, 10.0.17763.9245 +10 CWE-122
Priority MEDIUM 48
Heap-based buffer overflow in Microsoft Windows Media Foundation allows an unauthorized attacker to execute code over a network.
CVSS 3.1HIGH 8.8· Network · No auth · User interaction · EPSS 0.00819 · Published 2026-09-08 · Fixed in 10.0.14393.9512, 10.0.17763.9245 +10 CWE-122
Priority MEDIUM 45
Remote Code Execution in Windows Routing and Remote Access Service (RRAS) allows attacker to gain an unauthorized access to victim's machine
CVSS 3.1CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.00923 · Published 2026-09-08 · Fixed in 10.0.14393.9512, 10.0.17763.9245 +10 CWE-122
Priority MEDIUM 45
Heap-based buffer overflow in Windows RNDIS allows an unauthorized attacker to execute code over a network.
CVSS 3.1CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.00974 · Published 2026-09-08 · Fixed in 10.0.14393.9512, 10.0.17763.9245 +10 CWE-122
Priority MEDIUM 42
Heap-based buffer overflow in Remote Desktop Client allows an unauthorized attacker to execute code over a network.
CVSS 3.1HIGH 8.8· Network · No auth · User interaction · EPSS 0.00819 · Published 2026-09-08 · Fixed in 10.0.14393.9512, 10.0.17763.9245 +8 CWE-122
Priority MEDIUM 42
Heap-based buffer overflow in Windows Imaging Component allows an unauthorized attacker to execute code over a network.
CVSS 3.1HIGH 8.8· Network · No auth · User interaction · EPSS 0.00819 · Published 2026-09-08 · Fixed in 10.0.14393.9512, 10.0.17763.9245 +10 CWE-122
Priority MEDIUM 42
Out-of-bounds read in Windows Remote Desktop Services allows an authorized attacker to elevate privileges over a network.
CVSS 3.1HIGH 8.8· Network · Low privileges · No interaction · EPSS 0.00913 · Published 2026-09-08 · Fixed in 10.0.14393.9512, 10.0.17763.9245 +10 CWE-125
Priority MEDIUM 42
Double free in Microsoft Office Word allows an unauthorized attacker to execute code over a network.
CVSS 3.1HIGH 8.8· Network · No auth · User interaction · EPSS 0.00819 · Published 2026-09-08 · Fixed in 10.0.14393.9512, 10.0.17763.9245 +10 CWE-415
Priority MEDIUM 42
Heap-based buffer overflow in Windows Imaging Component allows an unauthorized attacker to execute code over a network.
CVSS 3.1HIGH 8.8· Network · No auth · User interaction · EPSS 0.00819 · Published 2026-09-08 · Fixed in 10.0.14393.9512, 10.0.17763.9245 +10 CWE-122
Priority MEDIUM 42
Heap-based buffer overflow in Windows Imaging Component allows an unauthorized attacker to execute code over a network.
CVSS 3.1HIGH 8.8· Network · No auth · User interaction · EPSS 0.00819 · Published 2026-09-08 · Fixed in 10.0.14393.9512, 10.0.17763.9245 +10 CWE-122
Priority MEDIUM 42
Heap-based buffer overflow in Graphic Fonts allows an unauthorized attacker to execute code over a network.
CVSS 3.1HIGH 8.8· Network · No auth · User interaction · EPSS 0.00819 · Published 2026-09-08 · Fixed in 10.0.14393.9512, 10.0.17763.9245 +10 CWE-122
Priority MEDIUM 42
Heap-based buffer overflow in Microsoft Graphics Component allows an unauthorized attacker to execute code over a network.
CVSS 3.1HIGH 8.8· Network · No auth · User interaction · EPSS 0.00819 · Published 2026-09-08 · Fixed in 10.0.14393.9512, 10.0.17763.9245 +10 CWE-122
Priority MEDIUM 42
Heap-based buffer overflow in Windows Management Services allows an authorized attacker to elevate privileges over a network.
CVSS 3.1HIGH 8.8· Network · Low privileges · No interaction · EPSS 0.00913 · Published 2026-09-08 · Fixed in 10.0.14393.9512, 10.0.17763.9245 +10 CWE-122
Priority MEDIUM 42
Stack-based buffer overflow in Microsoft Graphics Component allows an unauthorized attacker to execute code over a network.
CVSS 3.1HIGH 8.8· Network · No auth · User interaction · EPSS 0.00819 · Published 2026-09-08 · Fixed in 10.0.14393.9512, 10.0.17763.9245 +8 CWE-121
Priority MEDIUM 42
Heap-based buffer overflow in Graphic Fonts allows an unauthorized attacker to execute code over a network.
CVSS 3.1HIGH 8.8· Network · No auth · User interaction · EPSS 0.00819 · Published 2026-09-08 · Fixed in 10.0.14393.9512, 10.0.17763.9245 +10 CWE-122
Priority MEDIUM 42
Heap-based buffer overflow in Windows Media Player allows an unauthorized attacker to execute code over a network.
CVSS 3.1HIGH 8.8· Network · No auth · User interaction · EPSS 0.00819 · Published 2026-09-08 · Fixed in 10.0.14393.9512, 10.0.17763.9245 +8 CWE-122
Priority MEDIUM 42
Remote Code Execution in Windows Routing and Remote Access Service (RRAS) allows attacker to gain an unauthorized access to victim's machine
CVSS 3.1HIGH 8.8· Network · Low privileges · No interaction · EPSS 0.00913 · Published 2026-09-08 · Fixed in 10.0.14393.9512, 10.0.17763.9245 +10 CWE-122
Priority MEDIUM 42
Heap-based buffer overflow in Microsoft WDAC OLE DB provider for SQL allows an unauthorized attacker to execute code over a network.
CVSS 3.1HIGH 8.8· Network · No auth · User interaction · EPSS 0.00819 · Published 2026-09-08 · Fixed in 10.0.14393.9512, 10.0.17763.9245 +10 CWE-122
Priority MEDIUM 42
Integer underflow (wrap or wraparound) in Windows Remote Access Connection Manager allows an authorized attacker to execute code over a network.
CVSS 3.1HIGH 8.8· Network · Low privileges · No interaction · EPSS 0.00913 · Published 2026-09-08 · Fixed in 10.0.14393.9512, 10.0.17763.9245 +10 CWE-191
Priority MEDIUM 42
Integer overflow or wraparound in Windows Work Folder Service allows an authorized attacker to execute code over a network.
CVSS 3.1HIGH 8.8· Network · Low privileges · No interaction · EPSS 0.00913 · Published 2026-09-08 · Fixed in 10.0.14393.9512, 10.0.17763.9245 +3 CWE-190
Priority MEDIUM 42
Heap-based buffer overflow in Windows Paint allows an unauthorized attacker to execute code over a network.
CVSS 3.1HIGH 8.8· Network · No auth · User interaction · EPSS 0.00819 · Published 2026-09-08 · Fixed in 10.0.14393.9512, 10.0.17763.9245 +10 CWE-122
Priority MEDIUM 42
Heap-based buffer overflow in Windows Media Player allows an unauthorized attacker to execute code over a network.
CVSS 3.1HIGH 8.8· Network · No auth · User interaction · EPSS 0.00819 · Published 2026-09-08 · Fixed in 10.0.14393.9512, 10.0.17763.9245 +10 CWE-122
Priority MEDIUM 42
Heap-based buffer overflow in Windows Imaging Component allows an unauthorized attacker to execute code over a network.
CVSS 3.1HIGH 8.8· Network · No auth · User interaction · EPSS 0.00819 · Published 2026-09-08 · Fixed in 10.0.14393.9512, 10.0.17763.9245 +10 CWE-122
Priority MEDIUM 42
Heap-based buffer overflow in Windows Network File System allows an unauthorized attacker to execute code over a network.
CVSS 3.1HIGH 8.8· Network · No auth · User interaction · EPSS 0.00819 · Published 2026-09-08 · Fixed in 10.0.14393.9512, 10.0.17763.9245 +10 CWE-122
Priority MEDIUM 42
Use after free in Windows Key Distribution Center allows an authorized attacker to execute code over a network.
CVSS 3.1HIGH 8.8· Network · Low privileges · No interaction · EPSS 0.00913 · Published 2026-09-08 · Fixed in 6.2.9200.26349, 6.3.9600.23398 +4 CWE-416
Priority MEDIUM 42
Heap-based buffer overflow in Windows iSCSI allows an authorized attacker to execute code over a network.
CVSS 3.1HIGH 8.8· Network · Low privileges · No interaction · EPSS 0.00913 · Published 2026-09-08 · Fixed in 10.0.14393.9512, 10.0.17763.9245 +10 CWE-122
Priority MEDIUM 42
Heap-based buffer overflow in Microsoft Windows Media Foundation allows an unauthorized attacker to execute code over a network.
CVSS 3.1HIGH 8.8· Network · No auth · User interaction · EPSS 0.00819 · Published 2026-09-08 · Fixed in 10.0.14393.9512, 10.0.17763.9245 +10 CWE-122
Priority MEDIUM 42
Incorrect calculation of buffer size in Windows iSCSI allows an unauthorized attacker to execute code over a network.
CVSS 3.1HIGH 8.8· Network · No auth · User interaction · EPSS 0.00819 · Published 2026-09-08 · Fixed in 10.0.14393.9512, 10.0.17763.9245 +10 CWE-131
Priority MEDIUM 42
Use after free in Windows DNS allows an authorized attacker to execute code over a network.
CVSS 3.1HIGH 8.8· Network · Low privileges · No interaction · EPSS 0.00913 · Published 2026-09-08 · Fixed in 10.0.14393.9512, 10.0.17763.9245 +4 CWE-416
Priority MEDIUM 42
Heap-based buffer overflow in Windows DHCP Server allows an authorized attacker to execute code over a network.
CVSS 3.1HIGH 8.8· Network · Low privileges · No interaction · EPSS 0.00913 · Published 2026-09-08 · Fixed in 10.0.14393.9512, 10.0.17763.9245 +4 CWE-122
Priority MEDIUM 42
Heap-based buffer overflow in Visual Studio allows an unauthorized attacker to execute code over a network.
CVSS 3.1HIGH 8.8· Network · No auth · User interaction · EPSS 0.00837 · Published 2026-09-08 · Fixed in 10.0.12, 11.0 RC1 +12 CWE-122
Priority MEDIUM 42
Heap-based buffer overflow in Windows Remote Desktop allows an unauthorized attacker to execute code over a network.
CVSS 3.1HIGH 8.8· Network · No auth · User interaction · EPSS 0.00819 · Published 2026-09-08 · Fixed in 10.0.14393.9512, 10.0.17763.9245 +10 CWE-122
Priority MEDIUM 42
Heap-based buffer overflow in Windows Event Logging Service allows an unauthorized attacker to execute code over a network.
CVSS 3.1HIGH 8.8· Network · No auth · User interaction · EPSS 0.00819 · Published 2026-09-08 · Fixed in 10.0.14393.9512, 10.0.17763.9245 +10 CWE-122
Priority MEDIUM 42
Out-of-bounds read in Windows Event Logging Service allows an unauthorized attacker to execute code over a network.
CVSS 3.1HIGH 8.8· Network · No auth · User interaction · EPSS 0.00819 · Published 2026-09-08 · Fixed in 10.0.14393.9512, 10.0.17763.9245 +10 CWE-122
Priority MEDIUM 42
Use of uninitialized resource in Remote Desktop Client allows an authorized attacker to execute code over a network.
CVSS 3.1HIGH 8.8· Network · Low privileges · No interaction · EPSS 0.00913 · Published 2026-09-08 · Fixed in 10.0.14393.9512, 10.0.17763.9245 +8 CWE-908
Priority MEDIUM 42
Stack-based buffer overflow in Windows NTFS allows an unauthorized attacker to execute code over a network.
CVSS 3.1HIGH 8.8· Network · No auth · User interaction · EPSS 0.00819 · Published 2026-09-08 · Fixed in 10.0.14393.9512, 10.0.17763.9245 +10 CWE-121
Priority MEDIUM 42
Heap-based buffer overflow in Windows URL Moniker allows an unauthorized attacker to execute code over a network.
CVSS 3.1HIGH 8.8· Network · No auth · User interaction · EPSS 0.00819 · Published 2026-09-08 · Fixed in 10.0.14393.9512, 10.0.17763.9245 +10 CWE-122
Priority MEDIUM 42
Heap-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code over a network.
CVSS 3.1HIGH 8.8· Network · No auth · User interaction · EPSS 0.00819 · Published 2026-09-08 · Fixed in 10.0.14393.9512, 10.0.17763.9245 +10 CWE-122
Priority MEDIUM 42
Heap-based buffer overflow in Windows Volume Manager Extension Driver allows an unauthorized attacker to execute code over a network.
CVSS 3.1HIGH 8.8· Network · No auth · User interaction · EPSS 0.00819 · Published 2026-09-08 · Fixed in 10.0.14393.9512, 10.0.17763.9245 +10 CWE-122
Priority MEDIUM 42
Heap-based buffer overflow in Windows Volume Manager Extension Driver allows an unauthorized attacker to execute code over a network.
CVSS 3.1HIGH 8.8· Network · No auth · User interaction · EPSS 0.00819 · Published 2026-09-08 · Fixed in 10.0.14393.9512, 10.0.17763.9245 +10 CWE-122
Priority MEDIUM 42
Integer overflow or wraparound in Windows DHCP Server allows an unauthorized attacker to execute code over a network.
CVSS 3.1HIGH 8.8· Network · No auth · User interaction · EPSS 0.00819 · Published 2026-09-08 · Fixed in 10.0.14393.9512, 10.0.17763.9245 +4 CWE-190
Priority MEDIUM 42
Heap-based buffer overflow in Remote Desktop Client allows an unauthorized attacker to execute code over a network.
CVSS 3.1HIGH 8.8· Network · No auth · User interaction · EPSS 0.00819 · Published 2026-09-08 · Fixed in 10.0.14393.9512, 10.0.17763.9245 +10 CWE-122
Priority MEDIUM 42
Out-of-bounds read in Microsoft Windows Media Foundation allows an unauthorized attacker to execute code over a network.
CVSS 3.1HIGH 8.8· Network · No auth · User interaction · EPSS 0.00819 · Published 2026-09-08 · Fixed in 10.0.14393.9512, 10.0.17763.9245 +10 CWE-121
Priority MEDIUM 41
Integer overflow or wraparound in Windows iSCSI allows an unauthorized attacker to execute code over a network.
CVSS 3.1HIGH 8.8· Network · No auth · User interaction · EPSS 0.00798 · Published 2026-10-13 · Fixed in 10.0.14393.9512, 10.0.17763.9245 +10 CWE-190
Priority MEDIUM 41
Out-of-bounds read in Windows Key Distribution Center allows an unauthorized attacker to deny service over a network.
CVSS 3.1HIGH 7.5· Network · No auth · No interaction · EPSS 0.01174 · Published 2026-09-08 · Fixed in 10.0.14393.9512, 10.0.17763.9245 +10 CWE-125
Priority MEDIUM 41
Out-of-bounds read in Windows Services for NFS ONCRPC XDR Driver allows an unauthorized attacker to deny service over a network.
CVSS 3.1HIGH 7.5· Network · No auth · No interaction · EPSS 0.01174 · Published 2026-09-08 · Fixed in 10.0.14393.9512, 10.0.17763.9245 +10 CWE-125
Priority MEDIUM 41
Out-of-bounds read in Windows DHCP Server allows an unauthorized attacker to deny service over a network.
CVSS 3.1HIGH 7.5· Network · No auth · No interaction · EPSS 0.01174 · Published 2026-09-08 · Fixed in 10.0.14393.9512, 10.0.17763.9245 +4 CWE-125
Priority MEDIUM 41
Out-of-bounds read in Windows DHCP Server allows an unauthorized attacker to deny service over a network.
CVSS 3.1HIGH 7.5· Network · No auth · No interaction · EPSS 0.01174 · Published 2026-09-08 · Fixed in 10.0.14393.9512, 10.0.17763.9245 +4 CWE-125
Priority MEDIUM 41
Access of resource using incompatible type ('type confusion') in Windows DHCP Server allows an unauthorized attacker to deny service over a network.
CVSS 3.1HIGH 7.5· Network · No auth · No interaction · EPSS 0.01174 · Published 2026-09-08 · Fixed in 10.0.14393.9512, 10.0.17763.9245 +4 CWE-843
Priority MEDIUM 41
Access of resource using incompatible type ('type confusion') in Windows DHCP Server allows an unauthorized attacker to deny service over a network.
CVSS 3.1HIGH 7.5· Network · No auth · No interaction · EPSS 0.01174 · Published 2026-09-08 · Fixed in 10.0.14393.9512, 10.0.17763.9245 +4 CWE-843
Priority MEDIUM 41
Access of resource using incompatible type ('type confusion') in Windows DHCP Server allows an unauthorized attacker to deny service over a network.
CVSS 3.1HIGH 7.5· Network · No auth · No interaction · EPSS 0.01174 · Published 2026-09-08 · Fixed in 10.0.14393.9512, 10.0.17763.9245 +4 CWE-843
Priority MEDIUM 41
Out-of-bounds read in Windows DHCP Server allows an unauthorized attacker to deny service over a network.
CVSS 3.1HIGH 7.5· Network · No auth · No interaction · EPSS 0.01174 · Published 2026-09-08 · Fixed in 10.0.14393.9512, 10.0.17763.9245 +4 CWE-125
Priority MEDIUM 41
Out-of-bounds read in Windows DHCP Server allows an unauthorized attacker to deny service over a network.
CVSS 3.1HIGH 7.5· Network · No auth · No interaction · EPSS 0.01174 · Published 2026-09-08 · Fixed in 10.0.14393.9512, 10.0.17763.9245 +4 CWE-125
Priority MEDIUM 41
Out-of-bounds read in Windows DHCP Server allows an unauthorized attacker to deny service over a network.
CVSS 3.1HIGH 7.5· Network · No auth · No interaction · EPSS 0.01174 · Published 2026-09-08 · Fixed in 10.0.14393.9512, 10.0.17763.9245 +4 CWE-125
Priority MEDIUM 41
Access of resource using incompatible type ('type confusion') in Windows DHCP Server allows an unauthorized attacker to deny service over a network.
CVSS 3.1HIGH 7.5· Network · No auth · No interaction · EPSS 0.01174 · Published 2026-09-08 · Fixed in 10.0.14393.9512, 10.0.17763.9245 +4 CWE-843
Priority MEDIUM 41
Out-of-bounds read in Windows DHCP Server allows an unauthorized attacker to deny service over a network.
CVSS 3.1HIGH 7.5· Network · No auth · No interaction · EPSS 0.01174 · Published 2026-09-08 · Fixed in 10.0.14393.9512, 10.0.17763.9245 +4 CWE-125
Priority MEDIUM 41
Access of resource using incompatible type ('type confusion') in Windows DHCP Server allows an unauthorized attacker to deny service over a network.
CVSS 3.1HIGH 7.5· Network · No auth · No interaction · EPSS 0.01174 · Published 2026-09-08 · Fixed in 10.0.14393.9512, 10.0.17763.9245 +4 CWE-843
Priority MEDIUM 41
Buffer over-read in Windows Message Queuing Queue Manager allows an unauthorized attacker to disclose information over a network.
CVSS 3.1HIGH 7.5· Network · No auth · No interaction · EPSS 0.01027 · Published 2026-09-08 · Fixed in 10.0.14393.9512, 10.0.17763.9245 +10 CWE-126
Priority MEDIUM 41
Exposure of sensitive system information to an unauthorized control sphere in Windows Services for NFS ONCRPC XDR Driver allows an unauthorized attacker to disclose information over a network.
CVSS 3.1HIGH 7.5· Network · No auth · No interaction · EPSS 0.01027 · Published 2026-09-08 · Fixed in 10.0.14393.9512, 10.0.17763.9245 +10 CWE-497
Priority MEDIUM 41
Improper null termination in Windows Remote Desktop Protocol allows an unauthorized attacker to disclose information over a network.
CVSS 3.1HIGH 7.5· Network · No auth · No interaction · EPSS 0.01027 · Published 2026-09-08 · Fixed in 10.0.14393.9512, 10.0.17763.9245 +10 CWE-170
Priority MEDIUM 41
Missing release of memory after effective lifetime in Windows DHCP Server allows an unauthorized attacker to deny service over a network.
CVSS 3.1HIGH 7.5· Network · No auth · No interaction · EPSS 0.01174 · Published 2026-09-08 · Fixed in 10.0.14393.9512, 10.0.17763.9245 +4 CWE-401
Priority MEDIUM 41
Out-of-bounds read in Windows Kerberos allows an unauthorized attacker to deny service over a network.
CVSS 3.1HIGH 7.5· Network · No auth · No interaction · EPSS 0.01174 · Published 2026-09-08 · Fixed in 10.0.14393.9512, 10.0.17763.9245 +8 CWE-125
Priority MEDIUM 41
Untrusted pointer dereference in Windows Group Policy allows an authorized attacker to elevate privileges over a network.
CVSS 3.1HIGH 8.8· Network · Low privileges · No interaction · EPSS 0.00768 · Published 2026-09-08 · Fixed in 10.0.14393.9512, 10.0.17763.9245 +10 CWE-125
Priority MEDIUM 41
Stack-based buffer overflow in Windows Device Association Service allows an authorized attacker to elevate privileges over a network.
CVSS 3.1HIGH 8.8· Network · Low privileges · No interaction · EPSS 0.00768 · Published 2026-09-08 · Fixed in 10.0.14393.9512, 10.0.17763.9245 +10 CWE-121
Priority MEDIUM 41
Heap-based buffer overflow in Virtual Hard Disk (VHD) Miniport Driver allows an authorized attacker to elevate privileges over a network.
CVSS 3.1HIGH 8.8· Network · Low privileges · No interaction · EPSS 0.00768 · Published 2026-09-08 · Fixed in 10.0.14393.9512, 10.0.17763.9245 +10 CWE-122
Priority MEDIUM 41
Authentication bypass by capture-replay in Windows Kerberos allows an authorized attacker to execute code over a network.
CVSS 3.1HIGH 8.8· Network · Low privileges · No interaction · EPSS 0.00778 · Published 2026-09-08 · Fixed in 10.0.14393.9512, 10.0.17763.9245 +10 CWE-294
Priority MEDIUM 41
Integer overflow or wraparound in Windows DNS allows an unauthorized attacker to deny service over a network.
CVSS 3.1HIGH 7.5· Network · No auth · No interaction · EPSS 0.01174 · Published 2026-09-08 · Fixed in 10.0.14393.9512, 10.0.17763.9245 +4 CWE-190
Priority MEDIUM 41
Out-of-bounds read in Windows exFAT File System allows an authorized attacker to elevate privileges over a network.
CVSS 3.1HIGH 8.8· Network · Low privileges · No interaction · EPSS 0.00768 · Published 2026-09-08 · Fixed in 10.0.14393.9512, 10.0.17763.9245 +10 CWE-125
Priority MEDIUM 41
Heap-based buffer overflow in Windows Spaceport.sys allows an authorized attacker to elevate privileges over a network.
CVSS 3.1HIGH 8.8· Network · Low privileges · No interaction · EPSS 0.00768 · Published 2026-09-08 · Fixed in 10.0.14393.9512, 10.0.17763.9245 +8 CWE-122
Priority MEDIUM 41
Out-of-bounds read in Windows LDAP - Lightweight Directory Access Protocol allows an unauthorized attacker to deny service over a network.
CVSS 3.1HIGH 7.5· Network · No auth · No interaction · EPSS 0.01174 · Published 2026-09-08 · Fixed in 10.0.14393.9512, 10.0.17763.9245 +10 CWE-125
Priority MEDIUM 41
Out-of-bounds read in Windows DHCP Server allows an unauthorized attacker to deny service over a network.
CVSS 3.1HIGH 7.5· Network · No auth · No interaction · EPSS 0.01174 · Published 2026-09-08 · Fixed in 10.0.14393.9512, 10.0.17763.9245 +4 CWE-125
Priority MEDIUM 41
Out-of-bounds read in BranchCache allows an unauthorized attacker to deny service over a network.
CVSS 3.1HIGH 7.5· Network · No auth · No interaction · EPSS 0.01174 · Published 2026-09-08 · Fixed in 10.0.14393.9512, 10.0.17763.9245 +10 CWE-125
Priority MEDIUM 41
Out-of-bounds read in Windows Message Queuing Queue Manager allows an unauthorized attacker to deny service over a network.
CVSS 3.1HIGH 7.5· Network · No auth · No interaction · EPSS 0.01174 · Published 2026-09-08 · Fixed in 10.0.14393.9512, 10.0.17763.9245 +10 CWE-125
Priority MEDIUM 40
Heap-based buffer overflow in Windows Error Reporting allows an authorized attacker to elevate privileges locally.
CVSS 3.1HIGH 8.8· Local · Low privileges · No interaction · EPSS 0.00333 · Published 2026-09-08 · Fixed in 10.0.14393.9512, 10.0.17763.9245 +10 CWE-122
Priority MEDIUM 40
Improper validation of consistency within input in Windows TCP/IP allows an unauthorized attacker to bypass a security feature over a network.
CVSS 3.1HIGH 7.5· Network · No auth · No interaction · EPSS 0.00826 · Published 2026-09-08 · Fixed in 10.0.14393.9512, 10.0.17763.9245 +10 CWE-1288
Priority MEDIUM 40
Heap-based buffer overflow in Windows Hyper-V allows an authorized attacker to execute code locally.
CVSS 3.1HIGH 8.8· Local · Low privileges · No interaction · EPSS 0.00333 · Published 2026-09-08 · Fixed in 10.0.14393.9512, 10.0.17763.9245 +9 CWE-122
Priority LOW 39
Improper link resolution before file access ('link following') in Windows Shell allows an unauthorized attacker to perform spoofing over a network.
CVSS 3.1HIGH 8.1· Network · No auth · User interaction · EPSS 0.00849 · Published 2026-09-08 · Fixed in 10.0.14393.9512, 10.0.17763.9245 +10 CWE-59
Priority LOW 38
Use after free in Reliable Multicast Transport Driver (RMCAST) allows an unauthorized attacker to execute code over a network.
CVSS 3.1HIGH 8.1· Network · No auth · No interaction · EPSS 0.00707 · Published 2026-09-08 · Fixed in 10.0.14393.9512, 10.0.17763.9245 +10 CWE-416
Priority LOW 38
Use after free in DNS Server allows an unauthorized attacker to execute code over a network.
CVSS 3.1HIGH 8.1· Network · No auth · No interaction · EPSS 0.00707 · Published 2026-09-08 · Fixed in 10.0.14393.9512, 10.0.17763.9245 +4 CWE-416
Priority LOW 38
Out-of-bounds read in Windows NTFS allows an unauthorized attacker to elevate privileges locally.
CVSS 3.1HIGH 8.4· Local · No auth · No interaction · EPSS 0.00337 · Published 2026-09-08 · Fixed in 10.0.14393.9512, 10.0.17763.9245 +10 CWE-125
Priority LOW 38
Use after free in Windows DNS allows an unauthorized attacker to execute code over a network.
CVSS 3.1HIGH 8.1· Network · No auth · No interaction · EPSS 0.00707 · Published 2026-09-08 · Fixed in 10.0.14393.9512, 10.0.17763.9245 +4 CWE-416
Priority LOW 38
Use after free in IP Helper allows an unauthorized attacker to execute code over a network.
CVSS 3.1HIGH 8.1· Network · No auth · No interaction · EPSS 0.00707 · Published 2026-09-08 · Fixed in 10.0.14393.9512, 10.0.17763.9245 +10 CWE-416
Priority LOW 38
Out-of-bounds read in Windows Hyper-V allows an authorized attacker to elevate privileges locally.
CVSS 3.1HIGH 8.2· Local · High privileges · No interaction · EPSS 0.00348 · Published 2026-09-08 · Fixed in 10.0.14393.9512, 10.0.17763.9245 +8 CWE-122
Priority LOW 38
Remote Code Execution in Windows Routing and Remote Access Service (RRAS) allows attacker to gain an unauthorized access to victim's machine
CVSS 3.1HIGH 8.1· Network · No auth · No interaction · EPSS 0.0069 · Published 2026-09-08 · Fixed in 10.0.14393.9512, 10.0.17763.9245 +10 CWE-416
Priority LOW 38
Use after free in Windows Ancillary Function Driver for WinSock allows an unauthorized attacker to elevate privileges over a network.
CVSS 3.1HIGH 8.1· Network · No auth · No interaction · EPSS 0.00707 · Published 2026-09-08 · Fixed in 10.0.14393.9512, 10.0.17763.9245 +10 CWE-416
Priority LOW 38
Use after free in DNS Server allows an unauthorized attacker to execute code over a network.
CVSS 3.1HIGH 8.1· Network · No auth · No interaction · EPSS 0.00707 · Published 2026-09-08 · Fixed in 10.0.14393.9512, 10.0.17763.9245 +4 CWE-416
Priority LOW 38
Heap-based buffer overflow in Windows Secure Kernel Mode allows an authorized attacker to elevate privileges locally.
CVSS 3.1HIGH 8.2· Local · High privileges · No interaction · EPSS 0.00348 · Published 2026-09-08 · Fixed in 10.0.14393.9512, 10.0.17763.9245 +8 CWE-122
Priority LOW 38
Use after free in Windows DHCP Server allows an authorized attacker to execute code over an adjacent network.
CVSS 3.1HIGH 8.0· Adjacent network · Low privileges · No interaction · EPSS 0.00576 · Published 2026-09-08 · Fixed in 10.0.14393.9512, 10.0.17763.9245 +4 CWE-415
Priority LOW 38
Heap-based buffer overflow in Windows DHCP Server allows an authorized attacker to execute code over an adjacent network.
CVSS 3.1HIGH 8.0· Adjacent network · Low privileges · No interaction · EPSS 0.00576 · Published 2026-09-08 · Fixed in 10.0.14393.9512, 10.0.17763.9245 +10 CWE-122
Priority LOW 38
Integer overflow or wraparound in Windows Secure Kernel Mode allows an authorized attacker to elevate privileges locally.
CVSS 3.1HIGH 8.2· Local · High privileges · No interaction · EPSS 0.00348 · Published 2026-09-08 · Fixed in 10.0.14393.9512, 10.0.17763.9245 +8 CWE-190
Priority LOW 38
Concurrent execution using shared resource with improper synchronization ('race condition') in DNS Server allows an unauthorized attacker to execute code over a network.
CVSS 3.1HIGH 8.1· Network · No auth · No interaction · EPSS 0.00542 · Published 2026-09-08 · Fixed in 10.0.14393.9512, 10.0.17763.9245 +4 CWE-362
Priority LOW 38
Heap-based buffer overflow in Windows Biometric Service allows an authorized attacker to elevate privileges over a network.
CVSS 3.1HIGH 8.0· Network · Low privileges · User interaction · EPSS 0.00768 · Published 2026-09-08 · Fixed in 10.0.14393.9512, 10.0.17763.9245 +8 CWE-122
Priority LOW 38
Use after free in Windows DNS allows an unauthorized attacker to execute code over a network.
CVSS 3.1HIGH 8.1· Network · No auth · No interaction · EPSS 0.00707 · Published 2026-09-08 · Fixed in 10.0.14393.9512, 10.0.17763.9245 +4 CWE-416
Priority LOW 38
Improper limitation of a pathname to a restricted directory ('path traversal') in Windows PowerShell allows an authorized attacker to elevate privileges over a network.
CVSS 3.1HIGH 8.0· Network · Low privileges · User interaction · EPSS 0.00868 · Published 2026-09-08 · Fixed in 10.0.14393.9512, 10.0.17763.9245 +10 CWE-22
Priority LOW 38
Heap-based buffer overflow in Windows Text Shaping allows an unauthorized attacker to execute code over a network.
CVSS 3.1HIGH 8.1· Network · No auth · No interaction · EPSS 0.00707 · Published 2026-09-08 · Fixed in 10.0.14393.9512, 10.0.17763.9245 +10 CWE-122
Priority LOW 38
Concurrent execution using shared resource with improper synchronization ('race condition') in DNS Server allows an unauthorized attacker to execute code over a network.
CVSS 3.1HIGH 8.1· Network · No auth · No interaction · EPSS 0.00542 · Published 2026-09-08 · Fixed in 10.0.14393.9512, 10.0.17763.9245 +4 CWE-362
Priority LOW 38
Heap-based buffer overflow in Windows Biometric Service allows an authorized attacker to elevate privileges over a network.
CVSS 3.1HIGH 8.0· Network · Low privileges · User interaction · EPSS 0.00768 · Published 2026-09-08 · Fixed in 10.0.14393.9512, 10.0.17763.9245 +8 CWE-122
Priority LOW 38
Heap-based buffer overflow in Windows Link Layer Topology Discovery Protocol allows an unauthorized attacker to execute code over a network.
CVSS 3.1HIGH 8.1· Network · No auth · No interaction · EPSS 0.00707 · Published 2026-09-08 · Fixed in 10.0.14393.9512, 10.0.17763.9245 +10 CWE-122
Priority LOW 38
Heap-based buffer overflow in Windows Biometric Service allows an authorized attacker to elevate privileges over a network.
CVSS 3.1HIGH 8.0· Network · Low privileges · User interaction · EPSS 0.00768 · Published 2026-09-08 · Fixed in 10.0.14393.9512, 10.0.17763.9245 +8 CWE-122
Priority LOW 38
Deserialization of untrusted data in Windows IP Address Management (IPAM) Service allows an authorized attacker to elevate privileges locally.
CVSS 3.1HIGH 7.0· Local · Low privileges · No interaction · EPSS 0.02798 · Published 2026-09-08 · Fixed in 10.0.14393.9512, 10.0.17763.9245 +8 CWE-502
Priority LOW 38
Heap-based buffer overflow in Windows Spaceport.sys allows an authorized attacker to elevate privileges over a network.
CVSS 3.1HIGH 8.0· Network · Low privileges · User interaction · EPSS 0.00768 · Published 2026-09-08 · Fixed in 10.0.14393.9512, 10.0.17763.9245 +10 CWE-122
Priority LOW 38
Heap-based buffer overflow in Windows NTFS allows an unauthorized attacker to execute code locally.
CVSS 3.1HIGH 8.4· Local · No auth · No interaction · EPSS 0.00364 · Published 2026-09-08 · Fixed in 10.0.14393.9512, 10.0.17763.9245 +10 CWE-122
Priority LOW 38
Heap-based buffer overflow in Windows HTTP Print Provider allows an authorized attacker to execute code over a network.
CVSS 3.1HIGH 8.0· Network · Low privileges · User interaction · EPSS 0.00768 · Published 2026-09-08 · Fixed in 10.0.14393.9512, 10.0.17763.9245 +10 CWE-122
Priority LOW 38
Stack-based buffer overflow in Windows DHCP Server allows an unauthorized attacker to execute code over a network.
CVSS 3.1HIGH 8.1· Network · No auth · No interaction · EPSS 0.00707 · Published 2026-09-08 · Fixed in 10.0.14393.9512, 10.0.17763.9245 +4 CWE-121
Priority LOW 38
Use after free in Active Directory Domain Services allows an unauthorized attacker to execute code over a network.
CVSS 3.1HIGH 8.1· Network · No auth · No interaction · EPSS 0.00707 · Published 2026-09-08 · Fixed in 10.0.14393.9512, 10.0.17763.9245 +10 CWE-416
Priority LOW 38
Use after free in Active Directory Domain Services allows an unauthorized attacker to execute code over a network.
CVSS 3.1HIGH 8.1· Network · No auth · No interaction · EPSS 0.00707 · Published 2026-09-08 · Fixed in 10.0.14393.9512, 10.0.17763.9245 +10 CWE-416
Priority LOW 38
Stack-based buffer overflow in Windows DHCP Server allows an unauthorized attacker to execute code over a network.
CVSS 3.1HIGH 8.1· Network · No auth · No interaction · EPSS 0.00707 · Published 2026-09-08 · Fixed in 10.0.14393.9512, 10.0.17763.9245 +4 CWE-121
Priority LOW 38
Out-of-bounds read in Windows NTFS allows an authorized attacker to elevate privileges over a network.
CVSS 3.1HIGH 8.0· Network · Low privileges · User interaction · EPSS 0.00768 · Published 2026-09-08 · Fixed in 10.0.14393.9512, 10.0.17763.9245 +10 CWE-125
Priority LOW 38
Heap-based buffer overflow in Windows Enterprise App Management allows an authorized attacker to elevate privileges over a network.
CVSS 3.1HIGH 8.0· Network · Low privileges · User interaction · EPSS 0.00768 · Published 2026-09-08 · Fixed in 10.0.14393.9512, 10.0.17763.9245 +10 CWE-122
Priority LOW 38
Heap-based buffer overflow in Windows NTFS allows an unauthorized attacker to execute code locally.
CVSS 3.1HIGH 8.4· Local · No auth · No interaction · EPSS 0.00364 · Published 2026-09-08 · Fixed in 10.0.14393.9512, 10.0.17763.9245 +10 CWE-122
Priority LOW 38
Heap-based buffer overflow in Windows Error Reporting allows an authorized attacker to elevate privileges over a network.
CVSS 3.1HIGH 8.0· Network · Low privileges · User interaction · EPSS 0.00768 · Published 2026-09-08 · Fixed in 10.0.14393.9512, 10.0.17763.9245 +10 CWE-122
Priority LOW 38
Out-of-bounds read in Windows BitLocker allows an authorized attacker to elevate privileges over a network.
CVSS 3.1HIGH 8.0· Network · Low privileges · User interaction · EPSS 0.00768 · Published 2026-09-08 · Fixed in 10.0.14393.9512, 10.0.17763.9245 +10 CWE-125
Priority LOW 38
Incorrect conversion between numeric types in Microsoft JScript allows an unauthorized attacker to execute code over a network.
CVSS 3.1HIGH 8.1· Network · No auth · No interaction · EPSS 0.00707 · Published 2026-09-08 · Fixed in 10.0.14393.9512, 10.0.17763.9245 +10 CWE-681
Priority LOW 38
Out-of-bounds read in Windows VOLSNAP.SYS allows an authorized attacker to elevate privileges over a network.
CVSS 3.1HIGH 8.0· Network · Low privileges · User interaction · EPSS 0.00768 · Published 2026-09-08 · Fixed in 10.0.14393.9512, 10.0.17763.9245 +10 CWE-125
Priority LOW 38
Heap-based buffer overflow in Windows USB Video Driver allows an authorized attacker to elevate privileges over a network.
CVSS 3.1HIGH 8.0· Network · Low privileges · User interaction · EPSS 0.00768 · Published 2026-09-08 · Fixed in 10.0.14393.9512, 10.0.17763.9245 +10 CWE-122
Priority LOW 38
Heap-based buffer overflow in Volume Manager Driver allows an authorized attacker to elevate privileges over a network.
CVSS 3.1HIGH 8.0· Network · Low privileges · User interaction · EPSS 0.00768 · Published 2026-09-08 · Fixed in 10.0.14393.9512, 10.0.17763.9245 +10 CWE-122
Priority LOW 38
Stack-based buffer overflow in Windows DHCP Server allows an authorized attacker to execute code over an adjacent network.
CVSS 3.1HIGH 8.0· Adjacent network · Low privileges · No interaction · EPSS 0.00576 · Published 2026-09-08 · Fixed in 10.0.14393.9512, 10.0.17763.9245 +4 CWE-121
Priority LOW 38
Heap-based buffer overflow in Windows Overlay Filter allows an authorized attacker to elevate privileges over a network.
CVSS 3.1HIGH 8.0· Network · Low privileges · User interaction · EPSS 0.00768 · Published 2026-09-08 · Fixed in 10.0.14393.9512, 10.0.17763.9245 +9 CWE-122
Priority LOW 38
Heap-based buffer overflow in Windows Print Spooler Components allows an authorized attacker to elevate privileges over a network.
CVSS 3.1HIGH 8.0· Network · Low privileges · User interaction · EPSS 0.00768 · Published 2026-09-08 · Fixed in 10.0.14393.9512, 10.0.17763.9245 +10 CWE-122
Priority LOW 38
Out-of-bounds read in Windows NTFS allows an authorized attacker to elevate privileges over a network.
CVSS 3.1HIGH 8.0· Network · Low privileges · User interaction · EPSS 0.00768 · Published 2026-09-08 · Fixed in 10.0.14393.9512, 10.0.17763.9245 +10 CWE-125
Priority LOW 38
Heap-based buffer overflow in Microsoft JScript allows an unauthorized attacker to execute code over a network.
CVSS 3.1HIGH 8.1· Network · No auth · No interaction · EPSS 0.00707 · Published 2026-09-08 · Fixed in 10.0.14393.9512, 10.0.17763.9245 +9 CWE-122
Priority LOW 38
Stack-based buffer overflow in Windows Win32K allows an authorized attacker to elevate privileges over a network.
CVSS 3.1HIGH 8.0· Network · Low privileges · User interaction · EPSS 0.00768 · Published 2026-09-08 · Fixed in 10.0.14393.9512, 10.0.17763.9245 +9 CWE-121
Priority LOW 38
Heap-based buffer overflow in Microsoft Standard XPS allows an authorized attacker to elevate privileges over a network.
CVSS 3.1HIGH 8.0· Network · Low privileges · User interaction · EPSS 0.00768 · Published 2026-09-08 · Fixed in 10.0.14393.9512, 10.0.17763.9245 +10 CWE-122
Priority LOW 38
Heap-based buffer overflow in Windows Error Reporting allows an authorized attacker to elevate privileges over a network.
CVSS 3.1HIGH 8.0· Network · Low privileges · User interaction · EPSS 0.00768 · Published 2026-09-08 · Fixed in 10.0.14393.9512, 10.0.17763.9245 +10 CWE-122
Priority LOW 38
Heap-based buffer overflow in Windows Win32K allows an authorized attacker to elevate privileges over a network.
CVSS 3.1HIGH 8.0· Network · Low privileges · User interaction · EPSS 0.00768 · Published 2026-09-08 · Fixed in 16.112.26090911, 16.0.20430.20000 CWE-122
Priority LOW 38
Stack-based buffer overflow in Windows Fast FAT Driver allows an authorized attacker to elevate privileges over a network.
CVSS 3.1HIGH 8.0· Network · Low privileges · User interaction · EPSS 0.00768 · Published 2026-09-08 · Fixed in 10.0.14393.9512, 10.0.17763.9245 +10 CWE-121
Priority LOW 38
Heap-based buffer overflow in Windows Program Compatibility Assistant Service allows an authorized attacker to elevate privileges over a network.
CVSS 3.1HIGH 8.0· Network · Low privileges · User interaction · EPSS 0.00768 · Published 2026-09-08 · Fixed in 10.0.14393.9512, 10.0.17763.9245 +10 CWE-122
Priority LOW 38
Stack-based buffer overflow in Windows NTFS allows an authorized attacker to elevate privileges over a network.
CVSS 3.1HIGH 8.0· Network · Low privileges · User interaction · EPSS 0.00768 · Published 2026-09-08 · Fixed in 10.0.14393.9512, 10.0.17763.9245 +10 CWE-121
Priority LOW 38
Stack-based buffer overflow in Windows NTFS allows an authorized attacker to elevate privileges over a network.
CVSS 3.1HIGH 8.0· Network · Low privileges · User interaction · EPSS 0.00768 · Published 2026-09-08 · Fixed in 10.0.14393.9512, 10.0.17763.9245 +10 CWE-121
Priority LOW 38
Integer underflow (wrap or wraparound) in Windows GDI+ allows an authorized attacker to elevate privileges over a network.
CVSS 3.1HIGH 8.0· Network · Low privileges · User interaction · EPSS 0.00768 · Published 2026-09-08 · Fixed in 10.0.14393.9512, 10.0.17763.9245 +10 CWE-122
Priority LOW 37
Origin validation error in Windows DNS allows an unauthorized attacker to perform spoofing over a network.
CVSS 3.1HIGH 8.1· Network · No auth · No interaction · EPSS 0.00337 · Published 2026-09-08 · Fixed in 10.0.14393.9512, 10.0.17763.9245 +4 CWE-346
Priority LOW 36
Heap-based buffer overflow in Microsoft Graphics Component allows an authorized attacker to execute code locally.
CVSS 3.1HIGH 7.8· Local · Low privileges · No interaction · EPSS 0.00333 · Published 2026-09-08 · Fixed in 10.0.14393.9512, 10.0.17763.9245 +10 CWE-122
Priority LOW 36
Heap-based buffer overflow in Windows NTFS allows an authorized attacker to elevate privileges locally.
CVSS 3.1HIGH 7.8· Local · Low privileges · No interaction · EPSS 0.00333 · Published 2026-09-08 · Fixed in 10.0.14393.9512, 10.0.17763.9245 +10 CWE-122
Priority LOW 36
Heap-based buffer overflow in Windows Biometric Service allows an authorized attacker to elevate privileges locally.
CVSS 3.1HIGH 7.8· Local · Low privileges · No interaction · EPSS 0.00333 · Published 2026-09-08 · Fixed in 10.0.14393.9512, 10.0.17763.9245 +8 CWE-122
Priority LOW 36
Heap-based buffer overflow in Windows Biometric Service allows an authorized attacker to elevate privileges locally.
CVSS 3.1HIGH 7.8· Local · Low privileges · No interaction · EPSS 0.00333 · Published 2026-09-08 · Fixed in 10.0.14393.9512, 10.0.17763.9245 +8 CWE-122
Priority LOW 36
Heap-based buffer overflow in Windows Biometric Service allows an authorized attacker to elevate privileges locally.
CVSS 3.1HIGH 7.8· Local · Low privileges · No interaction · EPSS 0.00333 · Published 2026-09-08 · Fixed in 10.0.14393.9512, 10.0.17763.9245 +8 CWE-122
Priority LOW 36
Heap-based buffer overflow in Windows Biometric Service allows an authorized attacker to elevate privileges locally.
CVSS 3.1HIGH 7.8· Local · Low privileges · No interaction · EPSS 0.00333 · Published 2026-09-08 · Fixed in 10.0.14393.9512, 10.0.17763.9245 +8 CWE-122
Priority LOW 36
Heap-based buffer overflow in Windows Biometric Service allows an authorized attacker to elevate privileges locally.
CVSS 3.1HIGH 7.8· Local · Low privileges · No interaction · EPSS 0.00333 · Published 2026-09-08 · Fixed in 10.0.14393.9512, 10.0.17763.9245 +8 CWE-122
Priority LOW 36
Heap-based buffer overflow in Windows Biometric Service allows an authorized attacker to elevate privileges locally.
CVSS 3.1HIGH 7.8· Local · Low privileges · No interaction · EPSS 0.00333 · Published 2026-09-08 · Fixed in 10.0.14393.9512, 10.0.17763.9245 +8 CWE-122
Priority LOW 36
Heap-based buffer overflow in Windows Biometric Service allows an authorized attacker to elevate privileges locally.
CVSS 3.1HIGH 7.8· Local · Low privileges · No interaction · EPSS 0.00333 · Published 2026-09-08 · Fixed in 10.0.14393.9512, 10.0.17763.9245 +8 CWE-122
Priority LOW 36
Heap-based buffer overflow in Windows Biometric Service allows an authorized attacker to elevate privileges locally.
CVSS 3.1HIGH 7.8· Local · Low privileges · No interaction · EPSS 0.00333 · Published 2026-09-08 · Fixed in 10.0.14393.9512, 10.0.17763.9245 +8 CWE-122
Priority LOW 36
Use after free in Windows Biometric Service allows an authorized attacker to elevate privileges locally.
CVSS 3.1HIGH 7.8· Local · Low privileges · No interaction · EPSS 0.00333 · Published 2026-09-08 · Fixed in 10.0.14393.9512, 10.0.17763.9245 +8 CWE-416
Priority LOW 36
Heap-based buffer overflow in Windows Biometric Service allows an authorized attacker to elevate privileges locally.
CVSS 3.1HIGH 7.8· Local · Low privileges · No interaction · EPSS 0.00333 · Published 2026-09-08 · Fixed in 10.0.14393.9512, 10.0.17763.9245 +8 CWE-122
Priority LOW 36
Heap-based buffer overflow in Windows Biometric Service allows an authorized attacker to elevate privileges locally.
CVSS 3.1HIGH 7.8· Local · Low privileges · No interaction · EPSS 0.00333 · Published 2026-09-08 · Fixed in 10.0.14393.9512, 10.0.17763.9245 +8 CWE-122
Priority LOW 36
Heap-based buffer overflow in Windows Biometric Service allows an authorized attacker to elevate privileges locally.
CVSS 3.1HIGH 7.8· Local · Low privileges · No interaction · EPSS 0.00333 · Published 2026-09-08 · Fixed in 10.0.14393.9512, 10.0.17763.9245 +8 CWE-122
Priority LOW 36
Heap-based buffer overflow in Windows Biometric Service allows an authorized attacker to elevate privileges locally.
CVSS 3.1HIGH 7.8· Local · Low privileges · No interaction · EPSS 0.00333 · Published 2026-09-08 · Fixed in 10.0.14393.9512, 10.0.17763.9245 +8 CWE-122
Priority LOW 36
Heap-based buffer overflow in Windows Biometric Service allows an authorized attacker to elevate privileges locally.
CVSS 3.1HIGH 7.8· Local · Low privileges · No interaction · EPSS 0.00333 · Published 2026-09-08 · Fixed in 10.0.14393.9512, 10.0.17763.9245 +8 CWE-122
Priority LOW 36
Heap-based buffer overflow in Windows Biometric Service allows an authorized attacker to elevate privileges locally.
CVSS 3.1HIGH 7.8· Local · Low privileges · No interaction · EPSS 0.00333 · Published 2026-09-08 · Fixed in 10.0.14393.9512, 10.0.17763.9245 +8 CWE-122
Priority LOW 36
Heap-based buffer overflow in Windows Biometric Service allows an authorized attacker to elevate privileges locally.
CVSS 3.1HIGH 7.8· Local · Low privileges · No interaction · EPSS 0.00333 · Published 2026-09-08 · Fixed in 10.0.14393.9512, 10.0.17763.9245 +8 CWE-122
Priority LOW 36
Heap-based buffer overflow in Windows Biometric Service allows an authorized attacker to elevate privileges locally.
CVSS 3.1HIGH 7.8· Local · Low privileges · No interaction · EPSS 0.00333 · Published 2026-09-08 · Fixed in 10.0.14393.9512, 10.0.17763.9245 +8 CWE-122
Priority LOW 36
Heap-based buffer overflow in Windows Biometric Service allows an authorized attacker to elevate privileges locally.
CVSS 3.1HIGH 7.8· Local · Low privileges · No interaction · EPSS 0.00333 · Published 2026-09-08 · Fixed in 10.0.14393.9512, 10.0.17763.9245 +8 CWE-122
Priority LOW 36
Heap-based buffer overflow in Windows Biometric Service allows an authorized attacker to elevate privileges locally.
CVSS 3.1HIGH 7.8· Local · Low privileges · No interaction · EPSS 0.00333 · Published 2026-09-08 · Fixed in 10.0.14393.9512, 10.0.17763.9245 +8 CWE-122
Priority LOW 36
Use after free in Windows Biometric Service allows an authorized attacker to elevate privileges locally.
CVSS 3.1HIGH 7.8· Local · Low privileges · No interaction · EPSS 0.00333 · Published 2026-09-08 · Fixed in 10.0.14393.9512, 10.0.17763.9245 +8 CWE-400
Priority LOW 36
Heap-based buffer overflow in Windows Biometric Service allows an authorized attacker to elevate privileges locally.
CVSS 3.1HIGH 7.8· Local · Low privileges · No interaction · EPSS 0.00333 · Published 2026-09-08 · Fixed in 10.0.14393.9512, 10.0.17763.9245 +8 CWE-122
Priority LOW 36
Heap-based buffer overflow in Windows Biometric Service allows an authorized attacker to elevate privileges locally.
CVSS 3.1HIGH 7.8· Local · Low privileges · No interaction · EPSS 0.00333 · Published 2026-09-08 · Fixed in 10.0.14393.9512, 10.0.17763.9245 +8 CWE-122
Priority LOW 36
Heap-based buffer overflow in Windows Biometric Service allows an authorized attacker to elevate privileges locally.
CVSS 3.1HIGH 7.8· Local · Low privileges · No interaction · EPSS 0.00333 · Published 2026-09-08 · Fixed in 10.0.14393.9512, 10.0.17763.9245 +8 CWE-122
Priority LOW 36
Heap-based buffer overflow in Virtual Hard Disk (VHD) Miniport Driver allows an authorized attacker to execute code locally.
CVSS 3.1HIGH 7.8· Local · Low privileges · No interaction · EPSS 0.00268 · Published 2026-09-08 · Fixed in 10.0.14393.9512, 10.0.17763.9245 +10 CWE-122
Priority LOW 36
Heap-based buffer overflow in Windows Work Folders allows an authorized attacker to elevate privileges locally.
CVSS 3.1HIGH 7.8· Local · Low privileges · No interaction · EPSS 0.00333 · Published 2026-09-08 · Fixed in 10.0.14393.9512, 10.0.17763.9245 +9 CWE-122
Priority LOW 36
Heap-based buffer overflow in Windows Biometric Service allows an authorized attacker to elevate privileges locally.
CVSS 3.1HIGH 7.8· Local · Low privileges · No interaction · EPSS 0.00333 · Published 2026-09-08 · Fixed in 10.0.14393.9512, 10.0.17763.9245 +8 CWE-122
Priority LOW 36
Heap-based buffer overflow in Windows Biometric Service allows an authorized attacker to elevate privileges locally.
CVSS 3.1HIGH 7.8· Local · Low privileges · No interaction · EPSS 0.00333 · Published 2026-09-08 · Fixed in 10.0.14393.9512, 10.0.17763.9245 +8 CWE-122
Priority LOW 36
Heap-based buffer overflow in Windows Volume Manager Extension Driver allows an authorized attacker to elevate privileges locally.
CVSS 3.1HIGH 7.8· Local · Low privileges · No interaction · EPSS 0.00333 · Published 2026-09-08 · Fixed in 10.0.14393.9512, 10.0.17763.9245 +10 CWE-122
Priority LOW 36
Release of invalid pointer or reference in Windows Device Association Service allows an authorized attacker to elevate privileges locally.
CVSS 3.1HIGH 7.8· Local · Low privileges · No interaction · EPSS 0.00333 · Published 2026-09-08 · Fixed in 10.0.14393.9512, 10.0.17763.9245 +6 CWE-763
Priority LOW 36
Null pointer dereference in Windows Biometric Service allows an authorized attacker to elevate privileges locally.
CVSS 3.1HIGH 7.8· Local · Low privileges · No interaction · EPSS 0.00333 · Published 2026-09-08 · Fixed in 10.0.14393.9512, 10.0.17763.9245 +8 CWE-476
Priority LOW 36
Heap-based buffer overflow in Windows Biometric Service allows an authorized attacker to elevate privileges locally.
CVSS 3.1HIGH 7.8· Local · Low privileges · No interaction · EPSS 0.00333 · Published 2026-09-08 · Fixed in 10.0.14393.9512, 10.0.17763.9245 +8 CWE-122
Priority LOW 36
Heap-based buffer overflow in Windows Services for NFS ONCRPC XDR Driver allows an authorized attacker to elevate privileges locally.
CVSS 3.1HIGH 7.8· Local · Low privileges · No interaction · EPSS 0.00333 · Published 2026-09-08 · Fixed in 10.0.14393.9512, 10.0.17763.9245 +10 CWE-122
Priority LOW 36
Heap-based buffer overflow in Windows Biometric Service allows an authorized attacker to elevate privileges locally.
CVSS 3.1HIGH 7.8· Local · Low privileges · No interaction · EPSS 0.00333 · Published 2026-09-08 · Fixed in 10.0.14393.9512, 10.0.17763.9245 +8 CWE-122
Priority LOW 36
Heap-based buffer overflow in Windows Biometric Service allows an authorized attacker to elevate privileges locally.
CVSS 3.1HIGH 7.8· Local · Low privileges · No interaction · EPSS 0.00333 · Published 2026-09-08 · Fixed in 10.0.14393.9512, 10.0.17763.9245 +8 CWE-122
Priority LOW 36
Heap-based buffer overflow in Windows Biometric Service allows an authorized attacker to elevate privileges locally.
CVSS 3.1HIGH 7.8· Local · Low privileges · No interaction · EPSS 0.00333 · Published 2026-09-08 · Fixed in 10.0.14393.9512, 10.0.17763.9245 +8 CWE-122
Priority LOW 36
Missing authorization in Data Sharing Service Client allows an authorized attacker to elevate privileges locally.
CVSS 3.1HIGH 7.8· Local · Low privileges · No interaction · EPSS 0.00298 · Published 2026-09-08 · Fixed in 10.0.14393.9512, 10.0.17763.9245 +8 CWE-862
Priority LOW 36
Heap-based buffer overflow in Windows Biometric Service allows an authorized attacker to elevate privileges locally.
CVSS 3.1HIGH 7.8· Local · Low privileges · No interaction · EPSS 0.00333 · Published 2026-09-08 · Fixed in 10.0.14393.9512, 10.0.17763.9245 +8 CWE-122
Priority LOW 36
Heap-based buffer overflow in Windows Biometric Service allows an authorized attacker to elevate privileges locally.
CVSS 3.1HIGH 7.8· Local · Low privileges · No interaction · EPSS 0.00333 · Published 2026-09-08 · Fixed in 10.0.14393.9512, 10.0.17763.9245 +8 CWE-122
Priority LOW 36
Integer overflow or wraparound in Windows Biometric Service allows an authorized attacker to elevate privileges locally.
CVSS 3.1HIGH 7.8· Local · Low privileges · No interaction · EPSS 0.00333 · Published 2026-09-08 · Fixed in 10.0.14393.9512, 10.0.17763.9245 +8 CWE-190
Priority LOW 36
Heap-based buffer overflow in Windows Biometric Service allows an authorized attacker to elevate privileges locally.
CVSS 3.1HIGH 7.8· Local · Low privileges · No interaction · EPSS 0.00333 · Published 2026-09-08 · Fixed in 10.0.14393.9512, 10.0.17763.9245 +8 CWE-122
Priority LOW 36
Heap-based buffer overflow in Windows Biometric Service allows an authorized attacker to elevate privileges locally.
CVSS 3.1HIGH 7.8· Local · Low privileges · No interaction · EPSS 0.00333 · Published 2026-09-08 · Fixed in 10.0.14393.9512, 10.0.17763.9245 +8 CWE-122
Priority LOW 36
Heap-based buffer overflow in Windows Biometric Service allows an authorized attacker to elevate privileges locally.
CVSS 3.1HIGH 7.8· Local · Low privileges · No interaction · EPSS 0.00333 · Published 2026-09-08 · Fixed in 10.0.14393.9512, 10.0.17763.9245 +8 CWE-122
Priority LOW 36
Heap-based buffer overflow in Windows Biometric Service allows an authorized attacker to elevate privileges locally.
CVSS 3.1HIGH 7.8· Local · Low privileges · No interaction · EPSS 0.00333 · Published 2026-09-08 · Fixed in 10.0.14393.9512, 10.0.17763.9245 +8 CWE-122
Priority LOW 36
Heap-based buffer overflow in Windows Biometric Service allows an authorized attacker to elevate privileges locally.
CVSS 3.1HIGH 7.8· Local · Low privileges · No interaction · EPSS 0.00333 · Published 2026-09-08 · Fixed in 10.0.14393.9512, 10.0.17763.9245 +8 CWE-122
Priority LOW 36
Heap-based buffer overflow in Windows Biometric Service allows an authorized attacker to elevate privileges locally.
CVSS 3.1HIGH 7.8· Local · Low privileges · No interaction · EPSS 0.00333 · Published 2026-09-08 · Fixed in 10.0.14393.9512, 10.0.17763.9245 +8 CWE-122
Priority LOW 36
Heap-based buffer overflow in Windows Biometric Service allows an authorized attacker to elevate privileges locally.
CVSS 3.1HIGH 7.8· Local · Low privileges · No interaction · EPSS 0.00333 · Published 2026-09-08 · Fixed in 10.0.14393.9512, 10.0.17763.9245 +8 CWE-122
Priority LOW 36
Heap-based buffer overflow in Windows Biometric Service allows an authorized attacker to elevate privileges locally.
CVSS 3.1HIGH 7.8· Local · Low privileges · No interaction · EPSS 0.00333 · Published 2026-09-08 · Fixed in 10.0.14393.9512, 10.0.17763.9245 +8 CWE-122
Priority LOW 36
Heap-based buffer overflow in Windows Biometric Service allows an authorized attacker to elevate privileges locally.
CVSS 3.1HIGH 7.8· Local · Low privileges · No interaction · EPSS 0.00333 · Published 2026-09-08 · Fixed in 10.0.14393.9512, 10.0.17763.9245 +8 CWE-122
Priority LOW 36
Heap-based buffer overflow in Windows Biometric Service allows an authorized attacker to elevate privileges locally.
CVSS 3.1HIGH 7.8· Local · Low privileges · No interaction · EPSS 0.00333 · Published 2026-09-08 · Fixed in 10.0.14393.9512, 10.0.17763.9245 +8 CWE-122
Priority LOW 36
Heap-based buffer overflow in Windows Biometric Service allows an authorized attacker to elevate privileges locally.
CVSS 3.1HIGH 7.8· Local · Low privileges · No interaction · EPSS 0.00333 · Published 2026-09-08 · Fixed in 10.0.14393.9512, 10.0.17763.9245 +8 CWE-122
Priority LOW 36
Heap-based buffer overflow in Windows Network Connection Broker allows an authorized attacker to elevate privileges locally.
CVSS 3.1HIGH 7.8· Local · Low privileges · No interaction · EPSS 0.00333 · Published 2026-09-08 · Fixed in 10.0.14393.9512, 10.0.17763.9245 +10 CWE-122
Priority LOW 36
Use after free in Windows WebClient Service allows an authorized attacker to elevate privileges locally.
CVSS 3.1HIGH 7.8· Local · Low privileges · No interaction · EPSS 0.00333 · Published 2026-09-08 · Fixed in 10.0.14393.9512, 10.0.17763.9245 +10 CWE-416
Priority LOW 36
Heap-based buffer overflow in Windows Deployment Services allows an authorized attacker to execute code locally.
CVSS 3.1HIGH 7.8· Local · Low privileges · No interaction · EPSS 0.00333 · Published 2026-09-08 · Fixed in 10.0.14393.9512, 10.0.17763.9245 +4 CWE-122
Priority LOW 36
Use after free in Windows Deployment Services allows an authorized attacker to execute code over a network.
CVSS 3.1HIGH 7.5· Network · Low privileges · No interaction · EPSS 0.00663 · Published 2026-09-08 · Fixed in 10.0.14393.9512, 10.0.17763.9245 +4 CWE-416
Priority LOW 36
Relative path traversal in Windows DNS allows an authorized attacker to elevate privileges locally.
CVSS 3.1HIGH 7.8· Local · Low privileges · No interaction · EPSS 0.00376 · Published 2026-09-08 · Fixed in 10.0.14393.9512, 10.0.17763.9245 +4 CWE-23
Priority LOW 36
Heap-based buffer overflow in Windows Fax Service allows an authorized attacker to elevate privileges locally.
CVSS 3.1HIGH 7.8· Local · Low privileges · No interaction · EPSS 0.00333 · Published 2026-09-08 · Fixed in 10.0.14393.9512, 10.0.17763.9245 +10 CWE-122
Priority LOW 36
Use after free in Windows Deployment Services allows an authorized attacker to execute code over a network.
CVSS 3.1HIGH 7.5· Network · Low privileges · No interaction · EPSS 0.00663 · Published 2026-09-08 · Fixed in 10.0.14393.9512, 10.0.17763.9245 +4 CWE-416
Priority LOW 36
Heap-based buffer overflow in Windows Biometric Service allows an authorized attacker to elevate privileges locally.
CVSS 3.1HIGH 7.8· Local · Low privileges · No interaction · EPSS 0.00333 · Published 2026-09-08 · Fixed in 10.0.14393.9512, 10.0.17763.9245 +8 CWE-122
Priority LOW 36
Heap-based buffer overflow in Winsock allows an authorized attacker to elevate privileges locally.
CVSS 3.1HIGH 7.8· Local · Low privileges · No interaction · EPSS 0.00338 · Published 2026-09-08 · Fixed in 10.0.14393.9512, 10.0.17763.9245 +10 CWE-122
Priority LOW 36
Out-of-bounds write in Windows Spaceport.sys allows an authorized attacker to execute code locally.
CVSS 3.1HIGH 7.8· Local · Low privileges · No interaction · EPSS 0.00333 · Published 2026-09-08 · Fixed in 10.0.14393.9512, 10.0.17763.9245 +10 CWE-787
Priority LOW 36
Heap-based buffer overflow in Windows Remote Access Connection Manager allows an authorized attacker to execute code locally.
CVSS 3.1HIGH 7.8· Local · Low privileges · No interaction · EPSS 0.00333 · Published 2026-09-08 · Fixed in 10.0.14393.9512, 10.0.17763.9245 +10 CWE-122
Priority LOW 36
Heap-based buffer overflow in Windows NFS Portmapper allows an authorized attacker to elevate privileges locally.
CVSS 3.1HIGH 7.8· Local · Low privileges · No interaction · EPSS 0.00333 · Published 2026-09-08 · Fixed in 10.0.14393.9512, 10.0.17763.9245 +10 CWE-122
Priority LOW 36
Access of resource using incompatible type ('type confusion') in Windows Core Messaging allows an authorized attacker to elevate privileges locally.
CVSS 3.1HIGH 7.8· Local · Low privileges · No interaction · EPSS 0.00333 · Published 2026-09-08 · Fixed in 10.0.14393.9512, 10.0.17763.9245 +8 CWE-843
Priority LOW 36
Integer overflow or wraparound in Windows Biometric Service allows an authorized attacker to elevate privileges locally.
CVSS 3.1HIGH 7.8· Local · Low privileges · No interaction · EPSS 0.00333 · Published 2026-09-08 · Fixed in 10.0.14393.9512, 10.0.17763.9245 +8 CWE-190
Priority LOW 36
Out-of-bounds read in Virtual Hard Disk (VHD) Miniport Driver allows an authorized attacker to elevate privileges locally.
CVSS 3.1HIGH 7.8· Local · Low privileges · No interaction · EPSS 0.00333 · Published 2026-09-08 · Fixed in 10.0.14393.9512, 10.0.17763.9245 +10 CWE-125
Priority LOW 36
Integer overflow or wraparound in Windows Biometric Service allows an authorized attacker to elevate privileges locally.
CVSS 3.1HIGH 7.8· Local · Low privileges · No interaction · EPSS 0.00333 · Published 2026-09-08 · Fixed in 10.0.14393.9512, 10.0.17763.9245 +8 CWE-190
Priority LOW 36
Heap-based buffer overflow in Windows Print Spooler Components allows an authorized attacker to elevate privileges locally.
CVSS 3.1HIGH 7.8· Local · Low privileges · No interaction · EPSS 0.00333 · Published 2026-09-08 · Fixed in 10.0.14393.9512, 10.0.17763.9245 +10 CWE-122
Priority LOW 36
Heap-based buffer overflow in Windows Win32 Kernel Subsystem allows an authorized attacker to elevate privileges locally.
CVSS 3.1HIGH 7.8· Local · Low privileges · No interaction · EPSS 0.00333 · Published 2026-09-08 · Fixed in 10.0.14393.9512, 10.0.17763.9245 +10 CWE-122
Priority LOW 36
Improper handling of insufficient permissions or privileges in Windows Enterprise App Management allows an authorized attacker to elevate privileges locally.
CVSS 3.1HIGH 7.8· Local · Low privileges · No interaction · EPSS 0.00298 · Published 2026-09-08 · Fixed in 10.0.14393.9512, 10.0.17763.9245 +8 CWE-280
Priority LOW 36
Remote Code Execution in Windows Routing and Remote Access Service (RRAS) allows attacker to gain an unauthorized access to victim's machine
CVSS 3.1HIGH 7.5· Network · Low privileges · No interaction · EPSS 0.00663 · Published 2026-09-08 · Fixed in 10.0.14393.9512, 10.0.17763.9245 +10 CWE-122
Priority LOW 36
Out-of-bounds read in Windows Win32K allows an authorized attacker to elevate privileges locally.
CVSS 3.1HIGH 7.8· Local · Low privileges · No interaction · EPSS 0.00333 · Published 2026-09-08 · Fixed in 10.0.14393.9512, 10.0.17763.9245 +10 CWE-125
Priority LOW 36
Heap-based buffer overflow in Windows Encrypting File System (EFS) allows an authorized attacker to elevate privileges locally.
CVSS 3.1HIGH 7.8· Local · Low privileges · No interaction · EPSS 0.00333 · Published 2026-09-08 · Fixed in 10.0.14393.9512, 10.0.17763.9245 +10 CWE-122
Priority LOW 36
Improper encoding or escaping of output in Active Directory Certificate Services (AD CS) allows an authorized attacker to elevate privileges locally.
CVSS 3.1HIGH 7.8· Local · Low privileges · No interaction · EPSS 0.00333 · Published 2026-09-08 · Fixed in 10.0.14393.9512, 10.0.17763.9245 +4 CWE-116
Priority LOW 36
Heap-based buffer overflow in Windows Biometric Service allows an authorized attacker to elevate privileges locally.
CVSS 3.1HIGH 7.8· Local · Low privileges · No interaction · EPSS 0.00333 · Published 2026-09-08 · Fixed in 10.0.14393.9512, 10.0.17763.9245 +8 CWE-122
Priority LOW 36
Untrusted search path in Windows Smart Card allows an authorized attacker to elevate privileges locally.
CVSS 3.1HIGH 7.8· Local · Low privileges · No interaction · EPSS 0.00457 · Published 2026-09-08 · Fixed in 10.0.14393.9512, 10.0.17763.9245 +10 CWE-426
Priority LOW 36
Use after free in Windows TCP/IP allows an authorized attacker to elevate privileges over a network.
CVSS 3.1HIGH 7.5· Network · Low privileges · No interaction · EPSS 0.0057 · Published 2026-09-08 · Fixed in 10.0.14393.9512, 10.0.17763.9245 +10 CWE-416
Priority LOW 36
Heap-based buffer overflow in Windows Universal Disk Format File System Driver (UDFS) allows an authorized attacker to elevate privileges locally.
CVSS 3.1HIGH 7.8· Local · Low privileges · No interaction · EPSS 0.00333 · Published 2026-09-08 · Fixed in 10.0.14393.9512, 10.0.17763.9245 +10 CWE-122
Priority LOW 36
Integer overflow or wraparound in Windows Biometric Service allows an authorized attacker to elevate privileges locally.
CVSS 3.1HIGH 7.8· Local · Low privileges · No interaction · EPSS 0.00333 · Published 2026-09-08 · Fixed in 10.0.14393.9512, 10.0.17763.9245 +8 CWE-122
Priority LOW 36
Heap-based buffer overflow in HID class driver allows an authorized attacker to elevate privileges locally.
CVSS 3.1HIGH 7.8· Local · Low privileges · No interaction · EPSS 0.00333 · Published 2026-09-08 · Fixed in 10.0.14393.9512, 10.0.17763.9245 +10 CWE-122
Priority LOW 36
Heap-based buffer overflow in Windows NTFS allows an authorized attacker to execute code locally.
CVSS 3.1HIGH 7.8· Local · Low privileges · No interaction · EPSS 0.00333 · Published 2026-09-08 · Fixed in 10.0.14393.9512, 10.0.17763.9245 +10 CWE-122
Priority LOW 36
Integer overflow or wraparound in Windows USB Audio Class driver (usbaudio.sys) allows an authorized attacker to elevate privileges locally.
CVSS 3.1HIGH 7.8· Local · Low privileges · No interaction · EPSS 0.00333 · Published 2026-09-08 · Fixed in 10.0.14393.9512, 10.0.17763.9245 +10 CWE-190
Priority LOW 36
Use after free in Windows Win32K allows an authorized attacker to elevate privileges over a network.
CVSS 3.1HIGH 7.5· Network · Low privileges · No interaction · EPSS 0.0057 · Published 2026-09-08 · Fixed in 10.0.14393.9512, 10.0.17763.9245 +10 CWE-416
Priority LOW 36
Heap-based buffer overflow in Windows Spaceport.sys allows an authorized attacker to elevate privileges locally.
CVSS 3.1HIGH 7.8· Local · Low privileges · No interaction · EPSS 0.00333 · Published 2026-09-08 · Fixed in 10.0.14393.9512, 10.0.17763.9245 +10 CWE-122
Priority LOW 36
Heap-based buffer overflow in Windows Encrypting File System (EFS) allows an authorized attacker to elevate privileges over a network.
CVSS 3.1HIGH 7.5· Network · Low privileges · No interaction · EPSS 0.0057 · Published 2026-09-08 · Fixed in 10.0.14393.9512, 10.0.17763.9245 +10 CWE-122
Priority LOW 36
Integer underflow (wrap or wraparound) in Windows USB Audio Class driver (usbaudio.sys) allows an authorized attacker to elevate privileges locally.
CVSS 3.1HIGH 7.8· Local · Low privileges · No interaction · EPSS 0.00333 · Published 2026-09-08 · Fixed in 10.0.14393.9512, 10.0.17763.9245 +10 CWE-191
Priority LOW 36
Heap-based buffer overflow in Windows Kerberos allows an authorized attacker to elevate privileges locally.
CVSS 3.1HIGH 7.8· Local · Low privileges · No interaction · EPSS 0.00333 · Published 2026-09-08 · Fixed in 10.0.14393.9512, 10.0.17763.9245 +10 CWE-122
Priority LOW 36
Incomplete list of disallowed inputs in Active Directory Certificate Services (AD CS) allows an authorized attacker to perform tampering over a network.
CVSS 3.1MEDIUM 6.5· Network · Low privileges · No interaction · EPSS 0.00738 · Published 2026-09-08 · Fixed in 10.0.14393.9512, 10.0.17763.9245 +4 CWE-184
Priority LOW 36
Absolute path traversal in Windows Error Reporting allows an authorized attacker to elevate privileges locally.
CVSS 3.1HIGH 7.8· Local · Low privileges · No interaction · EPSS 0.0037 · Published 2026-09-08 · Fixed in 10.0.14393.9512, 10.0.17763.9245 +10 CWE-36
Priority LOW 36
Integer overflow or wraparound in Microsoft Windows Search Component allows an authorized attacker to elevate privileges locally.
CVSS 3.1HIGH 7.8· Local · Low privileges · No interaction · EPSS 0.00333 · Published 2026-09-08 · Fixed in 10.0.14393.9512, 10.0.17763.9245 +10 CWE-190
Priority LOW 36
Use after free in Windows Deployment Services allows an unauthorized attacker to execute code over a network.
CVSS 3.1HIGH 7.5· Network · No auth · User interaction · EPSS 0.00608 · Published 2026-09-08 · Fixed in 10.0.14393.9512, 10.0.17763.9245 +4 CWE-416
Priority LOW 36
Heap-based buffer overflow in Windows Audio Service allows an authorized attacker to elevate privileges locally.
CVSS 3.1HIGH 7.8· Local · Low privileges · No interaction · EPSS 0.00333 · Published 2026-09-08 · Fixed in 10.0.14393.9512, 10.0.17763.9245 +10 CWE-122
Priority LOW 36
Heap-based buffer overflow in Windows Biometric Service allows an authorized attacker to elevate privileges locally.
CVSS 3.1HIGH 7.8· Local · Low privileges · No interaction · EPSS 0.00333 · Published 2026-09-08 · Fixed in 10.0.14393.9512, 10.0.17763.9245 +8 CWE-122
Priority LOW 36
Heap-based buffer overflow in Windows Universal Disk Format File System Driver (UDFS) allows an authorized attacker to elevate privileges locally.
CVSS 3.1HIGH 7.8· Local · Low privileges · No interaction · EPSS 0.00333 · Published 2026-09-08 · Fixed in 10.0.14393.9512, 10.0.17763.9245 +10 CWE-122
Priority LOW 36
Heap-based buffer overflow in Windows Biometric Service allows an authorized attacker to elevate privileges locally.
CVSS 3.1HIGH 7.8· Local · Low privileges · No interaction · EPSS 0.00333 · Published 2026-09-08 · Fixed in 10.0.14393.9512, 10.0.17763.9245 +8 CWE-122
Priority LOW 36
Incorrect type conversion or cast in Microsoft Windows Search Component allows an authorized attacker to elevate privileges locally.
CVSS 3.1HIGH 7.8· Local · Low privileges · No interaction · EPSS 0.00333 · Published 2026-09-08 · Fixed in 10.0.14393.9512, 10.0.17763.9245 +10 CWE-704
Priority LOW 36
Integer overflow or wraparound in Windows USB Video Driver allows an authorized attacker to elevate privileges locally.
CVSS 3.1HIGH 7.8· Local · Low privileges · No interaction · EPSS 0.00333 · Published 2026-09-08 · Fixed in 10.0.14393.9512, 10.0.17763.9245 +10 CWE-190
Priority LOW 36
Heap-based buffer overflow in Windows Biometric Service allows an authorized attacker to elevate privileges locally.
CVSS 3.1HIGH 7.8· Local · Low privileges · No interaction · EPSS 0.00333 · Published 2026-09-08 · Fixed in 10.0.14393.9512, 10.0.17763.9245 +8 CWE-122
Priority LOW 36
Buffer over-read in Windows Volume Manager Extension Driver allows an authorized attacker to elevate privileges locally.
CVSS 3.1HIGH 7.8· Local · Low privileges · No interaction · EPSS 0.00333 · Published 2026-09-08 · Fixed in 10.0.14393.9512, 10.0.17763.9245 +10 CWE-126
Priority LOW 36
Heap-based buffer overflow in Windows Biometric Service allows an authorized attacker to elevate privileges locally.
CVSS 3.1HIGH 7.8· Local · Low privileges · No interaction · EPSS 0.00333 · Published 2026-09-08 · Fixed in 10.0.14393.9512, 10.0.17763.9245 +8 CWE-122
Priority LOW 36
Heap-based buffer overflow in Windows USB Audio Class driver (usbaudio.sys) allows an authorized attacker to elevate privileges locally.
CVSS 3.1HIGH 7.8· Local · Low privileges · No interaction · EPSS 0.00333 · Published 2026-09-08 · Fixed in 10.0.14393.9512, 10.0.17763.9245 +10 CWE-122
Priority LOW 36
Out-of-bounds read in Windows CD-ROM Driver allows an authorized attacker to elevate privileges locally.
CVSS 3.1HIGH 7.8· Local · Low privileges · No interaction · EPSS 0.00333 · Published 2026-09-08 · Fixed in 10.0.14393.9512, 10.0.17763.9245 +10 CWE-125
Priority LOW 36
Heap-based buffer overflow in Virtual Hard Disk (VHD) Miniport Driver allows an authorized attacker to elevate privileges locally.
CVSS 3.1HIGH 7.8· Local · Low privileges · No interaction · EPSS 0.00333 · Published 2026-09-08 · Fixed in 10.0.14393.9512, 10.0.17763.9245 +10 CWE-122
Priority LOW 36
Use after free in Windows Remote Desktop Services allows an authorized attacker to execute code over a network.
CVSS 3.1HIGH 7.5· Network · Low privileges · No interaction · EPSS 0.00663 · Published 2026-09-08 · Fixed in 10.0.14393.9512, 10.0.17763.9245 +10 CWE-416
Priority LOW 36
Out-of-bounds read in Windows Spaceport.sys allows an authorized attacker to execute code locally.
CVSS 3.1HIGH 7.8· Local · Low privileges · No interaction · EPSS 0.00333 · Published 2026-09-08 · Fixed in 10.0.14393.9512, 10.0.17763.9245 +10 CWE-125
Priority LOW 36
Improper neutralization of special elements used in a command ('command injection') in Windows Program Compatibility Assistant Service allows an authorized attacker to elevate privileges locally.
CVSS 3.1HIGH 7.8· Local · Low privileges · No interaction · EPSS 0.00322 · Published 2026-09-08 · Fixed in 10.0.14393.9512, 10.0.17763.9245 +8 CWE-77
Priority LOW 36
Out-of-bounds read in Windows NTFS allows an authorized attacker to elevate privileges locally.
CVSS 3.1HIGH 7.8· Local · Low privileges · No interaction · EPSS 0.00333 · Published 2026-09-08 · Fixed in 10.0.14393.9512, 10.0.17763.9245 +10 CWE-125
Priority LOW 36
Heap-based buffer overflow in Windows Remote Desktop Services allows an authorized attacker to execute code over a network.
CVSS 3.1HIGH 7.5· Network · Low privileges · No interaction · EPSS 0.00663 · Published 2026-09-08 · Fixed in 10.0.14393.9512, 10.0.17763.9245 +10 CWE-122
Priority LOW 36
Heap-based buffer overflow in Windows Fax Service allows an authorized attacker to elevate privileges locally.
CVSS 3.1HIGH 7.8· Local · Low privileges · No interaction · EPSS 0.00333 · Published 2026-09-08 · Fixed in 10.0.14393.9512, 10.0.17763.9245 +10 CWE-122
Priority LOW 36
Heap-based buffer overflow in Windows Biometric Service allows an authorized attacker to elevate privileges locally.
CVSS 3.1HIGH 7.8· Local · Low privileges · No interaction · EPSS 0.00333 · Published 2026-09-08 · Fixed in 10.0.14393.9512, 10.0.17763.9245 +8 CWE-122
Priority LOW 36
Heap-based buffer overflow in Windows Device Association Service allows an authorized attacker to elevate privileges locally.
CVSS 3.1HIGH 7.8· Local · Low privileges · No interaction · EPSS 0.00333 · Published 2026-09-08 · Fixed in 10.0.14393.9512, 10.0.17763.9245 +8 CWE-122
Priority LOW 36
Heap-based buffer overflow in Windows Biometric Service allows an authorized attacker to elevate privileges locally.
CVSS 3.1HIGH 7.8· Local · Low privileges · No interaction · EPSS 0.00333 · Published 2026-09-08 · Fixed in 10.0.14393.9512, 10.0.17763.9245 +8 CWE-122
Priority LOW 36
Untrusted pointer dereference in Windows Remote Desktop Services allows an authorized attacker to elevate privileges locally.
CVSS 3.1HIGH 7.8· Local · Low privileges · No interaction · EPSS 0.00333 · Published 2026-09-08 · Fixed in 10.0.14393.9512, 10.0.17763.9245 +10 CWE-822
Priority LOW 36
Heap-based buffer overflow in Microsoft Windows Speech allows an authorized attacker to elevate privileges locally.
CVSS 3.1HIGH 7.8· Local · Low privileges · No interaction · EPSS 0.00333 · Published 2026-09-08 · Fixed in 10.0.14393.9512, 10.0.17763.9245 +8 CWE-122
Priority LOW 36
Heap-based buffer overflow in Windows Remote Access Connection Manager allows an authorized attacker to elevate privileges locally.
CVSS 3.1HIGH 7.8· Local · Low privileges · No interaction · EPSS 0.00333 · Published 2026-09-08 · Fixed in 10.0.14393.9512, 10.0.17763.9245 +9 CWE-122
Priority LOW 36
Out-of-bounds read in Windows Error Reporting allows an authorized attacker to elevate privileges locally.
CVSS 3.1HIGH 7.8· Local · Low privileges · No interaction · EPSS 0.00333 · Published 2026-09-08 · Fixed in 10.0.14393.9512, 10.0.17763.9245 +10 CWE-125
Priority LOW 36
Improper limitation of a pathname to a restricted directory ('path traversal') in Windows Compressed Folder allows an authorized attacker to elevate privileges locally.
CVSS 3.1HIGH 7.8· Local · Low privileges · No interaction · EPSS 0.0037 · Published 2026-09-08 · Fixed in 10.0.14393.9512, 10.0.17763.9245 +10 CWE-22
Priority LOW 36
Heap-based buffer overflow in Microsoft Windows Speech allows an authorized attacker to elevate privileges locally.
CVSS 3.1HIGH 7.8· Local · Low privileges · No interaction · EPSS 0.00333 · Published 2026-09-08 · Fixed in 10.0.14393.9512, 10.0.17763.9245 +8 CWE-122
Priority LOW 36
Heap-based buffer overflow in Windows Error Reporting allows an authorized attacker to elevate privileges locally.
CVSS 3.1HIGH 7.8· Local · Low privileges · No interaction · EPSS 0.00333 · Published 2026-09-08 · Fixed in 10.0.14393.9512, 10.0.17763.9245 +8 CWE-122
Priority LOW 36
Heap-based buffer overflow in Volume Manager Driver allows an authorized attacker to elevate privileges locally.
CVSS 3.1HIGH 7.8· Local · Low privileges · No interaction · EPSS 0.00333 · Published 2026-09-08 · Fixed in 10.0.14393.9512, 10.0.17763.9245 +10 CWE-122
Priority LOW 36
Heap-based buffer overflow in Windows VOLSNAP.SYS allows an authorized attacker to execute code locally.
CVSS 3.1HIGH 7.8· Local · Low privileges · No interaction · EPSS 0.00333 · Published 2026-09-08 · Fixed in 10.0.14393.9512, 10.0.17763.9245 +10 CWE-122
Priority LOW 36
Heap-based buffer overflow in Windows Distributed File System (DFS) allows an authorized attacker to elevate privileges locally.
CVSS 3.1HIGH 7.8· Local · Low privileges · No interaction · EPSS 0.00333 · Published 2026-09-08 · Fixed in 10.0.14393.9512, 10.0.17763.9245 +10 CWE-122
Priority LOW 36
Integer underflow (wrap or wraparound) in Windows Kernel Mode Driver allows an authorized attacker to elevate privileges locally.
CVSS 3.1HIGH 7.8· Local · Low privileges · No interaction · EPSS 0.00333 · Published 2026-09-08 · Fixed in 10.0.14393.9512, 10.0.17763.9245 +10 CWE-122
Priority LOW 36
Heap-based buffer overflow in Windows VOLSNAP.SYS allows an authorized attacker to elevate privileges locally.
CVSS 3.1HIGH 7.8· Local · Low privileges · No interaction · EPSS 0.00333 · Published 2026-09-08 · Fixed in 10.0.14393.9512, 10.0.17763.9245 +10 CWE-122
Priority LOW 36
Integer overflow or wraparound in Volume Manager Driver allows an authorized attacker to elevate privileges locally.
CVSS 3.1HIGH 7.8· Local · Low privileges · No interaction · EPSS 0.00333 · Published 2026-09-08 · Fixed in 10.0.14393.9512, 10.0.17763.9245 +10 CWE-190
Priority LOW 36
Stack-based buffer overflow in Windows Broker Infrastructure Service allows an authorized attacker to elevate privileges locally.
CVSS 3.1HIGH 7.8· Local · Low privileges · No interaction · EPSS 0.00333 · Published 2026-09-08 · Fixed in 10.0.14393.9512, 10.0.17763.9245 +8 CWE-121
Priority LOW 36
Heap-based buffer overflow in Windows Storage Management Provider allows an authorized attacker to elevate privileges locally.
CVSS 3.1HIGH 7.8· Local · Low privileges · No interaction · EPSS 0.00333 · Published 2026-09-08 · Fixed in 10.0.14393.9512, 10.0.17763.9245 +10 CWE-122
Priority LOW 36
Heap-based buffer overflow in Windows Overlay Filter allows an authorized attacker to elevate privileges locally.
CVSS 3.1HIGH 7.8· Local · Low privileges · No interaction · EPSS 0.00333 · Published 2026-09-08 · Fixed in 10.0.14393.9512, 10.0.17763.9245 +9 CWE-122
Priority LOW 36
Heap-based buffer overflow in Active Directory Domain Services allows an authorized attacker to elevate privileges locally.
CVSS 3.1HIGH 7.8· Local · Low privileges · No interaction · EPSS 0.00333 · Published 2026-09-08 · Fixed in 10.0.14393.9512, 10.0.17763.9245 +8 CWE-122
Priority LOW 36
Heap-based buffer overflow in Windows Biometric Service allows an authorized attacker to elevate privileges locally.
CVSS 3.1HIGH 7.8· Local · Low privileges · No interaction · EPSS 0.00333 · Published 2026-09-08 · Fixed in 10.0.14393.9512, 10.0.17763.9245 +8 CWE-122
Priority LOW 36
Untrusted search path in Windows Storage allows an authorized attacker to elevate privileges locally.
CVSS 3.1HIGH 7.8· Local · Low privileges · No interaction · EPSS 0.00457 · Published 2026-09-08 · Fixed in 10.0.14393.9512, 10.0.17763.9245 +8 CWE-426
Priority LOW 36
Access of resource using incompatible type ('type confusion') in Windows Performance Monitor allows an authorized attacker to elevate privileges locally.
CVSS 3.1HIGH 7.8· Local · Low privileges · No interaction · EPSS 0.00333 · Published 2026-09-08 · Fixed in 10.0.14393.9512, 10.0.17763.9245 +10 CWE-125
Priority LOW 36
Heap-based buffer overflow in Windows Biometric Service allows an authorized attacker to elevate privileges locally.
CVSS 3.1HIGH 7.8· Local · Low privileges · No interaction · EPSS 0.00333 · Published 2026-09-08 · Fixed in 10.0.14393.9512, 10.0.17763.9245 +8 CWE-122
Priority LOW 36
Out-of-bounds read in Windows NTFS allows an authorized attacker to elevate privileges locally.
CVSS 3.1HIGH 7.8· Local · Low privileges · No interaction · EPSS 0.00333 · Published 2026-09-08 · Fixed in 10.0.14393.9512, 10.0.17763.9245 +10 CWE-125
Priority LOW 36
Heap-based buffer overflow in Windows USB Audio Class driver (usbaudio.sys) allows an authorized attacker to elevate privileges locally.
CVSS 3.1HIGH 7.8· Local · Low privileges · No interaction · EPSS 0.00333 · Published 2026-09-08 · Fixed in 10.0.14393.9512, 10.0.17763.9245 +10 CWE-122
Priority LOW 36
Integer overflow or wraparound in Windows Biometric Service allows an authorized attacker to elevate privileges locally.
CVSS 3.1HIGH 7.8· Local · Low privileges · No interaction · EPSS 0.00333 · Published 2026-09-08 · Fixed in 10.0.14393.9512, 10.0.17763.9245 +8 CWE-190
Priority LOW 36
Out-of-bounds read in Windows USB Driver allows an authorized attacker to elevate privileges locally.
CVSS 3.1HIGH 7.8· Local · Low privileges · No interaction · EPSS 0.00333 · Published 2026-09-08 · Fixed in 10.0.14393.9512, 10.0.17763.9245 +9 CWE-125
Priority LOW 36
Heap-based buffer overflow in Windows Biometric Service allows an authorized attacker to elevate privileges locally.
CVSS 3.1HIGH 7.8· Local · Low privileges · No interaction · EPSS 0.00333 · Published 2026-09-08 · Fixed in 10.0.14393.9512, 10.0.17763.9245 +8 CWE-122
Priority LOW 36
Stack-based buffer overflow in Windows Storage Spaces Controller allows an authorized attacker to elevate privileges locally.
CVSS 3.1HIGH 7.8· Local · Low privileges · No interaction · EPSS 0.00333 · Published 2026-09-08 · Fixed in 10.0.14393.9512, 10.0.17763.9245 +10 CWE-121
Priority LOW 36
Improper link resolution before file access ('link following') in Windows Setup Files Cleanup allows an authorized attacker to elevate privileges locally.
CVSS 3.1HIGH 7.8· Local · Low privileges · No interaction · EPSS 0.0037 · Published 2026-09-08 · Fixed in 10.0.14393.9512, 10.0.17763.9245 +10 CWE-59
Priority LOW 36
Stack-based buffer overflow in Microsoft Local Security Authority Server (lsasrv) allows an authorized attacker to elevate privileges locally.
CVSS 3.1HIGH 7.8· Local · Low privileges · No interaction · EPSS 0.00333 · Published 2026-09-08 · Fixed in 10.0.14393.9512, 10.0.17763.9245 +10 CWE-121
Priority LOW 36
Heap-based buffer overflow in Windows USB Audio Class driver (usbaudio.sys) allows an authorized attacker to elevate privileges locally.
CVSS 3.1HIGH 7.8· Local · Low privileges · No interaction · EPSS 0.00333 · Published 2026-09-08 · Fixed in 10.0.14393.9512, 10.0.17763.9245 +10 CWE-122
Priority LOW 36
Integer underflow (wrap or wraparound) in Microsoft Standard XPS allows an authorized attacker to elevate privileges locally.
CVSS 3.1HIGH 7.8· Local · Low privileges · No interaction · EPSS 0.00333 · Published 2026-09-08 · Fixed in 10.0.14393.9512, 10.0.17763.9245 +10 CWE-191
Priority LOW 36
Out-of-bounds read in Windows NTFS allows an authorized attacker to elevate privileges locally.
CVSS 3.1HIGH 7.8· Local · Low privileges · No interaction · EPSS 0.00333 · Published 2026-09-08 · Fixed in 10.0.14393.9512, 10.0.17763.9245 +10 CWE-125
Priority LOW 36
Heap-based buffer overflow in Microsoft Standard XPS allows an authorized attacker to elevate privileges locally.
CVSS 3.1HIGH 7.8· Local · Low privileges · No interaction · EPSS 0.00333 · Published 2026-09-08 · Fixed in 10.0.14393.9512, 10.0.17763.9245 +10 CWE-122
Priority LOW 36
Heap-based buffer overflow in Microsoft Standard XPS allows an authorized attacker to elevate privileges locally.
CVSS 3.1HIGH 7.8· Local · Low privileges · No interaction · EPSS 0.00333 · Published 2026-09-08 · Fixed in 10.0.14393.9512, 10.0.17763.9245 +10 CWE-122
Priority LOW 36
Heap-based buffer overflow in Microsoft Standard XPS allows an authorized attacker to elevate privileges locally.
CVSS 3.1HIGH 7.8· Local · Low privileges · No interaction · EPSS 0.00333 · Published 2026-09-08 · Fixed in 10.0.14393.9512, 10.0.17763.9245 +10 CWE-122
Priority LOW 36
Heap-based buffer overflow in Microsoft Standard XPS allows an authorized attacker to elevate privileges locally.
CVSS 3.1HIGH 7.8· Local · Low privileges · No interaction · EPSS 0.00333 · Published 2026-09-08 · Fixed in 10.0.14393.9512, 10.0.17763.9245 +10 CWE-122
Priority LOW 36
Heap-based buffer overflow in Windows Storage Spaces Controller allows an authorized attacker to execute code locally.
CVSS 3.1HIGH 7.8· Local · Low privileges · No interaction · EPSS 0.00333 · Published 2026-09-08 · Fixed in 10.0.14393.9512, 10.0.17763.9245 +8 CWE-122
Priority LOW 36
Buffer over-read in Windows NTFS allows an authorized attacker to execute code locally.
CVSS 3.1HIGH 7.8· Local · Low privileges · No interaction · EPSS 0.00333 · Published 2026-09-08 · Fixed in 10.0.14393.9512, 10.0.17763.9245 +10 CWE-126
Priority LOW 36
Heap-based buffer overflow in Windows Print Spooler Components allows an authorized attacker to elevate privileges locally.
CVSS 3.1HIGH 7.8· Local · Low privileges · No interaction · EPSS 0.00333 · Published 2026-09-08 · Fixed in 10.0.14393.9512, 10.0.17763.9245 +10 CWE-122
Priority LOW 36
Heap-based buffer overflow in Windows Program Compatibility Assistant Service allows an authorized attacker to elevate privileges locally.
CVSS 3.1HIGH 7.8· Local · Low privileges · No interaction · EPSS 0.00333 · Published 2026-09-08 · Fixed in 10.0.14393.9512, 10.0.17763.9245 +10 CWE-122
Priority LOW 36
Heap-based buffer overflow in Windows Storage Spaces Controller allows an authorized attacker to execute code locally.
CVSS 3.1HIGH 7.8· Local · Low privileges · No interaction · EPSS 0.00333 · Published 2026-09-08 · Fixed in 10.0.14393.9512, 10.0.17763.9245 +8 CWE-122
Priority LOW 36
Heap-based buffer overflow in Windows NTFS allows an authorized attacker to elevate privileges locally.
CVSS 3.1HIGH 7.8· Local · Low privileges · No interaction · EPSS 0.00333 · Published 2026-09-08 · Fixed in 10.0.14393.9512, 10.0.17763.9245 +10 CWE-122
Priority LOW 36
Integer overflow or wraparound in Windows NTFS allows an authorized attacker to elevate privileges locally.
CVSS 3.1HIGH 7.8· Local · Low privileges · No interaction · EPSS 0.00333 · Published 2026-09-08 · Fixed in 10.0.14393.9512, 10.0.17763.9245 +10 CWE-190
Priority LOW 36
Integer overflow or wraparound in .NET allows an unauthorized attacker to elevate privileges locally.
CVSS 3.1HIGH 7.8· Local · No auth · User interaction · EPSS 0.00466 · Published 2026-08-11 · Fixed in 2.0.50727.8987 AND 3.0.30729.8982, 2.0.50727.9073 AND 3.0.30729.9070 AND 4.7.4150.0 +10 CWE-122
Priority LOW 36
Use after free in Active Directory Domain Services allows an authorized attacker to execute code over a network.
CVSS 3.1HIGH 7.5· Network · Low privileges · No interaction · EPSS 0.00663 · Published 2026-09-08 · Fixed in 10.0.14393.9512, 10.0.17763.9245 +10 CWE-416
Priority LOW 36
Heap-based buffer overflow in Active Directory Certificate Services (AD CS) allows an authorized attacker to elevate privileges locally.
CVSS 3.1HIGH 7.8· Local · Low privileges · No interaction · EPSS 0.00333 · Published 2026-09-08 · Fixed in 10.0.14393.9512, 10.0.17763.9245 +10 CWE-122
Priority LOW 36
Use after free in Windows Server allows an authorized attacker to elevate privileges locally.
CVSS 3.1HIGH 7.8· Local · Low privileges · No interaction · EPSS 0.00333 · Published 2026-09-08 · Fixed in 10.0.14393.9512, 10.0.17763.9245 +8 CWE-416
Priority LOW 35
Use after free in Windows DNS allows an unauthorized attacker to deny service over a network.
CVSS 3.1HIGH 7.5· Network · No auth · No interaction · EPSS 0.00983 · Published 2026-09-08 · Fixed in 10.0.14393.9512, 10.0.17763.9245 +4 CWE-416
Priority LOW 35
Allocation of resources without limits or throttling in Active Directory Federation Services (AD FS) allows an unauthorized attacker to deny service over a network.
CVSS 3.1HIGH 7.5· Network · No auth · No interaction · EPSS 0.00983 · Published 2026-09-08 · Fixed in 10.0.14393.9512, 10.0.17763.9245 +4 CWE-770
Priority LOW 35
Authentication bypass by spoofing in Windows Netlogon allows an unauthorized attacker to perform spoofing over an adjacent network.
CVSS 3.1HIGH 7.5· Adjacent network · No auth · No interaction · EPSS 0.00383 · Published 2026-09-08 · Fixed in 10.0.14393.9512, 10.0.17763.9245 +10 CWE-290
Priority LOW 34
Integer overflow or wraparound in Remote Desktop Client allows an unauthorized attacker to deny service over a network.
CVSS 3.1HIGH 7.5· Network · No auth · No interaction · EPSS 0.007 · Published 2026-09-08 · Fixed in 10.0.14393.9512, 10.0.17763.9245 +8 CWE-190
Priority LOW 34
Out-of-bounds read in Windows DHCP Server allows an unauthorized attacker to disclose information over a network.
CVSS 3.1HIGH 7.5· Network · No auth · No interaction · EPSS 0.00834 · Published 2026-09-08 · Fixed in 10.0.14393.9512, 10.0.17763.9245 +4 CWE-125
Priority LOW 34
Out-of-bounds read in Windows DHCP Server allows an unauthorized attacker to disclose information over a network.
CVSS 3.1HIGH 7.5· Network · No auth · No interaction · EPSS 0.00834 · Published 2026-09-08 · Fixed in 10.0.14393.9512, 10.0.17763.9245 +4 CWE-125
Priority LOW 34
Out-of-bounds read in Windows DHCP Server allows an unauthorized attacker to disclose information over a network.
CVSS 3.1HIGH 7.5· Network · No auth · No interaction · EPSS 0.00834 · Published 2026-09-08 · Fixed in 10.0.14393.9512, 10.0.17763.9245 +4 CWE-125
Priority LOW 34
Out-of-bounds read in Windows DHCP Server allows an unauthorized attacker to disclose information over a network.
CVSS 3.1HIGH 7.5· Network · No auth · No interaction · EPSS 0.00834 · Published 2026-09-08 · Fixed in 10.0.14393.9512, 10.0.17763.9245 +4 CWE-125
Priority LOW 34
Creation of temporary file in directory with insecure permissions in Windows Error Reporting allows an authorized attacker to perform tampering locally.
CVSS 3.1HIGH 7.1· Local · Low privileges · No interaction · EPSS 0.00463 · Published 2026-09-08 · Fixed in 10.0.14393.9512, 10.0.17763.9245 +8 CWE-379
Priority LOW 34
Use after free in Windows Management Instrumentation allows an authorized attacker to elevate privileges over a network.
CVSS 3.1HIGH 7.1· Network · Low privileges · User interaction · EPSS 0.0057 · Published 2026-09-08 · Fixed in 10.0.14393.9512, 10.0.17763.9245 +10 CWE-416
Priority LOW 34
Use after free in Windows NDIS allows an authorized attacker to elevate privileges over a network.
CVSS 3.1HIGH 7.1· Network · Low privileges · User interaction · EPSS 0.0057 · Published 2026-09-08 · Fixed in 10.0.14393.9512, 10.0.17763.9245 +10 CWE-416
Priority LOW 34
Use after free in Windows Kernel allows an authorized attacker to elevate privileges over a network.
CVSS 3.1HIGH 7.1· Network · Low privileges · User interaction · EPSS 0.0057 · Published 2026-09-08 · Fixed in 10.0.14393.9512, 10.0.17763.9245 +10 CWE-416
Priority LOW 34
Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Print Spooler Components allows an authorized attacker to elevate privileges over a network.
CVSS 3.1HIGH 7.1· Network · Low privileges · User interaction · EPSS 0.00437 · Published 2026-09-08 · Fixed in 10.0.14393.9512, 10.0.17763.9245 +10 CWE-362
Priority LOW 34
Use of uninitialized resource in Remote Desktop Client allows an authorized attacker to execute code over a network.
CVSS 3.1HIGH 7.1· Network · Low privileges · User interaction · EPSS 0.0057 · Published 2026-09-08 · Fixed in 10.0.14393.9512, 10.0.17763.9245 +8 CWE-908
Priority LOW 34
Use after free in Windows NDIS allows an authorized attacker to elevate privileges over a network.
CVSS 3.1HIGH 7.1· Network · Low privileges · User interaction · EPSS 0.0057 · Published 2026-09-08 · Fixed in 10.0.14393.9512, 10.0.17763.9245 +7 CWE-416
Priority LOW 34
Heap-based buffer overflow in Windows Fast FAT Driver allows an unauthorized attacker to execute code locally.
CVSS 3.1HIGH 7.4· Local · No auth · No interaction · EPSS 0.00288 · Published 2026-09-08 · Fixed in 10.0.14393.9512, 10.0.17763.9245 +10 CWE-122
Priority LOW 34
Heap-based buffer overflow in Windows NTFS allows an authorized attacker to elevate privileges over a network.
CVSS 3.1HIGH 7.1· Network · Low privileges · User interaction · EPSS 0.0057 · Published 2026-09-08 · Fixed in 10.0.14393.9512, 10.0.17763.9245 +10 CWE-122
Priority LOW 34
Use after free in Remote Desktop Gateway Service allows an authorized attacker to elevate privileges over a network.
CVSS 3.1HIGH 7.1· Network · Low privileges · User interaction · EPSS 0.0057 · Published 2026-09-08 · Fixed in 10.0.14393.9512, 10.0.17763.9245 +4 CWE-416
Priority LOW 34
Double free in Windows Registry allows an authorized attacker to elevate privileges over a network.
CVSS 3.1HIGH 7.1· Network · Low privileges · User interaction · EPSS 0.0057 · Published 2026-09-08 · Fixed in 10.0.14393.9512, 10.0.17763.9245 +10 CWE-415
Priority LOW 34
Heap-based buffer overflow in Microsoft Standard XPS allows an authorized attacker to elevate privileges over a network.
CVSS 3.1HIGH 7.1· Network · Low privileges · User interaction · EPSS 0.0057 · Published 2026-09-08 · Fixed in 10.0.14393.9512, 10.0.17763.9245 +10 CWE-122
Priority LOW 34
Use after free in Windows Device Association Broker service allows an authorized attacker to elevate privileges over a network.
CVSS 3.1HIGH 7.1· Network · Low privileges · User interaction · EPSS 0.0057 · Published 2026-09-08 · Fixed in 10.0.14393.9512, 10.0.17763.9245 +8 CWE-416
Priority LOW 34
Heap-based buffer overflow in Microsoft Standard XPS allows an authorized attacker to elevate privileges over a network.
CVSS 3.1HIGH 7.1· Network · Low privileges · User interaction · EPSS 0.0057 · Published 2026-09-08 · Fixed in 10.0.14393.9512, 10.0.17763.9245 +10 CWE-122
Priority LOW 34
Use after free in Microsoft Windows Search Component allows an authorized attacker to elevate privileges over a network.
CVSS 3.1HIGH 7.1· Network · Low privileges · User interaction · EPSS 0.0057 · Published 2026-09-08 · Fixed in 10.0.14393.9512, 10.0.17763.9245 +10 CWE-416
Priority LOW 34
Use after free in Windows Device Association Service allows an authorized attacker to elevate privileges over a network.
CVSS 3.1HIGH 7.1· Network · Low privileges · User interaction · EPSS 0.0057 · Published 2026-09-08 · Fixed in 10.0.14393.9512, 10.0.17763.9245 +10 CWE-416
Priority LOW 34
Use after free in Windows Win32K allows an authorized attacker to elevate privileges over a network.
CVSS 3.1HIGH 7.1· Network · Low privileges · User interaction · EPSS 0.0057 · Published 2026-09-08 · Fixed in 10.0.14393.9512, 10.0.17763.9245 +9 CWE-416
Priority LOW 34
Heap-based buffer overflow in Microsoft Standard XPS allows an authorized attacker to elevate privileges over a network.
CVSS 3.1HIGH 7.1· Network · Low privileges · User interaction · EPSS 0.0057 · Published 2026-09-08 · Fixed in 10.0.14393.9512, 10.0.17763.9245 +10 CWE-122
Priority LOW 34
Use after free in Windows Remote Desktop Licensing Service allows an authorized attacker to elevate privileges over a network.
CVSS 3.1HIGH 7.1· Network · Low privileges · User interaction · EPSS 0.0057 · Published 2026-09-08 · Fixed in 10.0.14393.9512, 10.0.17763.9245 +4 CWE-416
Priority LOW 34
Heap-based buffer overflow in Microsoft Standard XPS allows an authorized attacker to elevate privileges over a network.
CVSS 3.1HIGH 7.1· Network · Low privileges · User interaction · EPSS 0.0057 · Published 2026-09-08 · Fixed in 10.0.14393.9512, 10.0.17763.9245 +10 CWE-122
Priority LOW 34
Use after free in Windows Kernel allows an authorized attacker to elevate privileges over a network.
CVSS 3.1HIGH 7.1· Network · Low privileges · User interaction · EPSS 0.0057 · Published 2026-09-08 · Fixed in 10.0.14393.9512, 10.0.17763.9245 +10 CWE-416
Priority LOW 34
Use after free in Windows Print Spooler Components allows an authorized attacker to elevate privileges over a network.
CVSS 3.1HIGH 7.1· Network · Low privileges · User interaction · EPSS 0.0057 · Published 2026-09-08 · Fixed in 10.0.14393.9512, 10.0.17763.9245 +10 CWE-416
Priority LOW 33
Use after free in Windows Distributed File System (DFS) allows an authorized attacker to execute code over a network.
CVSS 3.1HIGH 7.5· Network · Low privileges · No interaction · EPSS 0.00476 · Published 2026-09-08 · Fixed in 10.0.14393.9512, 10.0.17763.9245 +10 CWE-416
Priority LOW 33
Heap-based buffer overflow in Windows Biometric Service allows an authorized attacker to elevate privileges locally.
CVSS 3.1HIGH 7.0· Local · Low privileges · No interaction · EPSS 0.00281 · Published 2026-09-08 · Fixed in 10.0.14393.9512, 10.0.17763.9245 +8 CWE-122
Priority LOW 33
Missing authentication for critical function in Windows DHCP Server allows an authorized attacker to elevate privileges over a network.
CVSS 3.1MEDIUM 6.8· Network · High privileges · User interaction · EPSS 0.00725 · Published 2026-09-08 · Fixed in 10.0.14393.9512, 10.0.17763.9245 +4 CWE-306
Priority LOW 32
Use after free in Windows Kernel allows an authorized attacker to elevate privileges locally.
CVSS 3.1HIGH 7.0· Local · Low privileges · No interaction · EPSS 0.00264 · Published 2026-09-08 · Fixed in 10.0.14393.9512, 10.0.17763.9245 +10 CWE-416
Priority LOW 32
Use after free in Windows Device Association Service allows an authorized attacker to elevate privileges locally.
CVSS 3.1HIGH 7.0· Local · Low privileges · No interaction · EPSS 0.00264 · Published 2026-09-08 · Fixed in 10.0.14393.9512, 10.0.17763.9245 +8 CWE-416
Priority LOW 32
Use after free in Windows Management Instrumentation allows an authorized attacker to elevate privileges locally.
CVSS 3.1HIGH 7.0· Local · Low privileges · No interaction · EPSS 0.00264 · Published 2026-09-08 · Fixed in 10.0.14393.9512, 10.0.17763.9245 +10 CWE-416
Priority LOW 32
Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Installer allows an authorized attacker to elevate privileges locally.
CVSS 3.1HIGH 7.0· Local · Low privileges · No interaction · EPSS 0.00202 · Published 2026-09-08 · Fixed in 10.0.14393.9512, 10.0.17763.9245 +10 CWE-362
Priority LOW 32
No cwe for this issue in Windows Boot Manager allows an unauthorized attacker to elevate privileges with a physical attack.
CVSS 3.1MEDIUM 6.8· Physical · No auth · No interaction · EPSS 0.00438 · Published 2026-09-08 · Fixed in 10.0.14393.9512, 10.0.17763.9245 +10 CWE-693
Priority LOW 32
Use after free in Windows Authentication Methods allows an authorized attacker to elevate privileges locally.
CVSS 3.1HIGH 7.0· Local · Low privileges · No interaction · EPSS 0.00202 · Published 2026-09-08 · Fixed in 10.0.14393.9512, 10.0.17763.9245 +8 CWE-362
Priority LOW 32
Out-of-bounds read in Windows USB Hub Driver allows an unauthorized attacker to elevate privileges with a physical attack.
CVSS 3.1MEDIUM 6.8· Physical · No auth · No interaction · EPSS 0.00438 · Published 2026-09-08 · Fixed in 10.0.14393.9512, 10.0.17763.9245 +8 CWE-125
Priority LOW 32
Heap-based buffer overflow in Windows Volume Shadow Copy allows an unauthorized attacker to elevate privileges with a physical attack.
CVSS 3.1MEDIUM 6.8· Physical · No auth · No interaction · EPSS 0.00438 · Published 2026-09-08 · Fixed in 10.0.14393.9512, 10.0.17763.9245 +10 CWE-122
Priority LOW 32
Use after free in Windows Modern Execution Server allows an authorized attacker to elevate privileges locally.
CVSS 3.1HIGH 7.0· Local · Low privileges · No interaction · EPSS 0.00264 · Published 2026-09-08 · Fixed in 10.0.14393.9512, 10.0.17763.9245 +8 CWE-416
Priority LOW 32
Integer underflow (wrap or wraparound) in Windows File History Service allows an authorized attacker to elevate privileges locally.
CVSS 3.1HIGH 7.0· Local · Low privileges · No interaction · EPSS 0.00268 · Published 2026-09-08 · Fixed in 10.0.14393.9512, 10.0.17763.9245 +6 CWE-191
Priority LOW 32
Out-of-bounds read in Windows NTFS allows an authorized attacker to elevate privileges locally.
CVSS 3.1MEDIUM 6.7· Local · High privileges · No interaction · EPSS 0.00348 · Published 2026-09-08 · Fixed in 10.0.14393.9512, 10.0.17763.9245 +10 CWE-125
Priority LOW 32
Use after free in Windows Secure Socket Tunneling Protocol (SSTP) allows an authorized attacker to execute code locally.
CVSS 3.1HIGH 7.0· Local · Low privileges · No interaction · EPSS 0.00264 · Published 2026-09-08 · Fixed in 10.0.14393.9512, 10.0.17763.9245 +10 CWE-416
Priority LOW 32
Use after free in Windows Internet Connection Sharing (ICS) allows an authorized attacker to elevate privileges locally.
CVSS 3.1HIGH 7.0· Local · Low privileges · No interaction · EPSS 0.00264 · Published 2026-09-08 · Fixed in 10.0.14393.9512, 10.0.17763.9245 +8 CWE-416
Priority LOW 32
Double free in Windows Routing and Remote Access Service (RRAS) allows an authorized attacker to elevate privileges locally.
CVSS 3.1HIGH 7.0· Local · Low privileges · No interaction · EPSS 0.00264 · Published 2026-09-08 · Fixed in 10.0.14393.9512, 10.0.17763.9245 +10 CWE-415
Priority LOW 32
Double free in Windows Routing and Remote Access Service (RRAS) allows an authorized attacker to elevate privileges locally.
CVSS 3.1HIGH 7.0· Local · Low privileges · No interaction · EPSS 0.00264 · Published 2026-09-08 · Fixed in 10.0.14393.9512, 10.0.17763.9245 +10 CWE-415
Priority LOW 32
Heap-based buffer overflow in Windows Spaceport.sys allows an unauthorized attacker to execute code with a physical attack.
CVSS 3.1MEDIUM 6.8· Physical · No auth · No interaction · EPSS 0.00438 · Published 2026-09-08 · Fixed in 10.0.14393.9512, 10.0.17763.9245 +10 CWE-122
Priority LOW 32
Heap-based buffer overflow in Windows Spaceport.sys allows an unauthorized attacker to execute code with a physical attack.
CVSS 3.1MEDIUM 6.8· Physical · No auth · No interaction · EPSS 0.00438 · Published 2026-09-08 · Fixed in 10.0.14393.9512, 10.0.17763.9245 +10 CWE-122
Priority LOW 32
Heap-based buffer overflow in Windows Spaceport.sys allows an unauthorized attacker to execute code with a physical attack.
CVSS 3.1MEDIUM 6.8· Physical · No auth · No interaction · EPSS 0.00438 · Published 2026-09-08 · Fixed in 10.0.14393.9512, 10.0.17763.9245 +10 CWE-122
Priority LOW 32
Use after free in Windows Remote Access Connection Manager allows an authorized attacker to elevate privileges locally.
CVSS 3.1HIGH 7.0· Local · Low privileges · No interaction · EPSS 0.00264 · Published 2026-09-08 · Fixed in 10.0.14393.9512, 10.0.17763.9245 +9 CWE-416
Priority LOW 32
Use after free in Windows File History Service allows an authorized attacker to elevate privileges locally.
CVSS 3.1HIGH 7.0· Local · Low privileges · No interaction · EPSS 0.00264 · Published 2026-09-08 · Fixed in 10.0.14393.9512, 10.0.17763.9245 +6 CWE-416
Priority LOW 32
Use after free in Windows Remote Access Connection Manager allows an authorized attacker to elevate privileges locally.
CVSS 3.1HIGH 7.0· Local · Low privileges · No interaction · EPSS 0.00264 · Published 2026-09-08 · Fixed in 10.0.14393.9512, 10.0.17763.9245 +10 CWE-416
Priority LOW 32
Use after free in Windows Secure Socket Tunneling Protocol (SSTP) allows an authorized attacker to elevate privileges locally.
CVSS 3.1HIGH 7.0· Local · Low privileges · No interaction · EPSS 0.00264 · Published 2026-09-08 · Fixed in 10.0.14393.9512, 10.0.17763.9245 +8 CWE-416
Priority LOW 32
Heap-based buffer overflow in Windows NTFS allows an unauthorized attacker to execute code with a physical attack.
CVSS 3.1MEDIUM 6.8· Physical · No auth · No interaction · EPSS 0.00438 · Published 2026-09-08 · Fixed in 10.0.14393.9512, 10.0.17763.9245 +10 CWE-122
Priority LOW 32
Use after free in Windows Services for NFS ONCRPC XDR Driver allows an authorized attacker to execute code locally.
CVSS 3.1HIGH 7.0· Local · Low privileges · No interaction · EPSS 0.00264 · Published 2026-09-08 · Fixed in 6.2.9200.26349, 6.3.9600.23398 +4 CWE-416
Priority LOW 32
Heap-based buffer overflow in Windows Defender Firewall Service allows an authorized attacker to elevate privileges locally.
CVSS 3.1HIGH 7.0· Local · Low privileges · No interaction · EPSS 0.00264 · Published 2026-09-08 · Fixed in 10.0.14393.9512, 10.0.17763.9245 +10 CWE-122
Priority LOW 32
Use after free in Windows AF_UNIX Socket Provider allows an authorized attacker to elevate privileges locally.
CVSS 3.1HIGH 7.0· Local · Low privileges · No interaction · EPSS 0.00264 · Published 2026-09-08 · Fixed in 10.0.14393.9512, 10.0.17763.9245 +10 CWE-416
Priority LOW 32
Double free in Windows Audio Service allows an authorized attacker to elevate privileges locally.
CVSS 3.1HIGH 7.0· Local · Low privileges · No interaction · EPSS 0.00264 · Published 2026-09-08 · Fixed in 10.0.14393.9512, 10.0.17763.9245 +10 CWE-415
Priority LOW 32
Incorrect authorization in Windows Win32K allows an authorized attacker to elevate privileges locally.
CVSS 3.1HIGH 7.0· Local · Low privileges · No interaction · EPSS 0.00236 · Published 2026-09-08 · Fixed in 10.0.14393.9512, 10.0.17763.9245 +10 CWE-863
Priority LOW 32
Use after free in Microsoft Windows Search Component allows an authorized attacker to elevate privileges locally.
CVSS 3.1HIGH 7.0· Local · Low privileges · No interaction · EPSS 0.00264 · Published 2026-09-08 · Fixed in 10.0.14393.9512, 10.0.17763.9245 +10 CWE-416
Priority LOW 32
Use after free in Windows Media allows an authorized attacker to elevate privileges locally.
CVSS 3.1HIGH 7.0· Local · Low privileges · No interaction · EPSS 0.00264 · Published 2026-09-08 · Fixed in 10.0.14393.9512, 10.0.17763.9245 +8 CWE-416
Priority LOW 32
Time-of-check time-of-use (toctou) race condition in Windows USB Audio Class driver (usbaudio.sys) allows an authorized attacker to elevate privileges locally.
CVSS 3.1HIGH 7.0· Local · Low privileges · No interaction · EPSS 0.00202 · Published 2026-09-08 · Fixed in 10.0.14393.9512, 10.0.17763.9245 +10 CWE-191
Priority LOW 32
Use after free in Windows Print Spooler Components allows an authorized attacker to elevate privileges locally.
CVSS 3.1HIGH 7.0· Local · Low privileges · No interaction · EPSS 0.00264 · Published 2026-09-08 · Fixed in 10.0.14393.9512, 10.0.17763.9245 +9 CWE-416
Priority LOW 32
Use after free in Windows ALPC allows an authorized attacker to elevate privileges locally.
CVSS 3.1HIGH 7.0· Local · Low privileges · No interaction · EPSS 0.00264 · Published 2026-09-08 · Fixed in 10.0.14393.9512, 10.0.17763.9245 +10 CWE-416
Priority LOW 32
Use after free in Windows Bluetooth Port Driver allows an authorized attacker to elevate privileges locally.
CVSS 3.1HIGH 7.0· Local · Low privileges · No interaction · EPSS 0.00264 · Published 2026-09-08 · Fixed in 10.0.14393.9512, 10.0.17763.9245 +10 CWE-416
Priority LOW 32
Use after free in Windows Accounts Control allows an authorized attacker to elevate privileges locally.
CVSS 3.1HIGH 7.0· Local · Low privileges · No interaction · EPSS 0.00264 · Published 2026-09-08 · Fixed in 10.0.14393.9512, 10.0.17763.9245 +8 CWE-416
Priority LOW 32
Time-of-check time-of-use (toctou) race condition in Windows Win32K allows an authorized attacker to elevate privileges locally.
CVSS 3.1HIGH 7.0· Local · Low privileges · No interaction · EPSS 0.00202 · Published 2026-09-08 · Fixed in 10.0.14393.9512, 10.0.17763.9245 +10 CWE-367
Priority LOW 32
Use after free in Windows Broadcast DVR User Service allows an authorized attacker to elevate privileges locally.
CVSS 3.1HIGH 7.0· Local · Low privileges · No interaction · EPSS 0.00264 · Published 2026-09-08 · Fixed in 10.0.14393.9512, 10.0.17763.9245 +6 CWE-416
Priority LOW 32
Use after free in Windows Device Association Service allows an authorized attacker to elevate privileges locally.
CVSS 3.1HIGH 7.0· Local · Low privileges · No interaction · EPSS 0.00264 · Published 2026-09-08 · Fixed in 10.0.14393.9512, 10.0.17763.9245 +8 CWE-416
Priority LOW 32
Use after free in Windows Device Association Broker service allows an authorized attacker to elevate privileges locally.
CVSS 3.1HIGH 7.0· Local · Low privileges · No interaction · EPSS 0.00264 · Published 2026-09-08 · Fixed in 10.0.14393.9512, 10.0.17763.9245 +8 CWE-416
Priority LOW 32
Use after free in Windows Audio Service allows an authorized attacker to elevate privileges locally.
CVSS 3.1HIGH 7.0· Local · Low privileges · No interaction · EPSS 0.00264 · Published 2026-09-08 · Fixed in 10.0.14393.9512, 10.0.17763.9245 +10 CWE-416
Priority LOW 32
Use after free in Windows Accounts Control allows an authorized attacker to elevate privileges locally.
CVSS 3.1HIGH 7.0· Local · Low privileges · No interaction · EPSS 0.00264 · Published 2026-09-08 · Fixed in 10.0.14393.9512, 10.0.17763.9245 +8 CWE-416
Priority LOW 32
Use after free in Windows Win32K allows an authorized attacker to elevate privileges locally.
CVSS 3.1HIGH 7.0· Local · Low privileges · No interaction · EPSS 0.00264 · Published 2026-09-08 · Fixed in 10.0.14393.9512, 10.0.17763.9245 +8 CWE-416
Priority LOW 32
Use after free in Windows Message Queuing allows an authorized attacker to elevate privileges locally.
CVSS 3.1HIGH 7.0· Local · Low privileges · No interaction · EPSS 0.00264 · Published 2026-09-08 · Fixed in 10.0.14393.9512, 10.0.17763.9245 +10 CWE-416
Priority LOW 32
Out-of-bounds read in Windows Win32K allows an authorized attacker to elevate privileges locally.
CVSS 3.1HIGH 7.0· Local · Low privileges · No interaction · EPSS 0.00264 · Published 2026-09-08 · Fixed in 10.0.14393.9512, 10.0.17763.9245 +10 CWE-125
Priority LOW 32
Heap-based buffer overflow in Windows Fax Service allows an authorized attacker to elevate privileges locally.
CVSS 3.1HIGH 7.0· Local · Low privileges · No interaction · EPSS 0.00264 · Published 2026-09-08 · Fixed in 10.0.14393.9512, 10.0.17763.9245 +10 CWE-122
Priority LOW 32
Use after free in Windows Image Acquisition allows an authorized attacker to elevate privileges locally.
CVSS 3.1HIGH 7.0· Local · Low privileges · No interaction · EPSS 0.00264 · Published 2026-09-08 · Fixed in 10.0.14393.9512, 10.0.17763.9245 +10 CWE-416
Priority LOW 32
Use after free in Virtual Hard Disk (VHD) Miniport Driver allows an authorized attacker to elevate privileges locally.
CVSS 3.1HIGH 7.0· Local · Low privileges · No interaction · EPSS 0.00264 · Published 2026-09-08 · Fixed in 10.0.14393.9512, 10.0.17763.9245 +8 CWE-416
Priority LOW 32
Buffer over-read in Windows Win32K allows an authorized attacker to elevate privileges locally.
CVSS 3.1HIGH 7.0· Local · Low privileges · No interaction · EPSS 0.00264 · Published 2026-09-08 · Fixed in 16.112.26090911 CWE-126
Priority LOW 32
Use after free in Microsoft Windows Search Component allows an authorized attacker to elevate privileges locally.
CVSS 3.1HIGH 7.0· Local · Low privileges · No interaction · EPSS 0.00264 · Published 2026-09-08 · Fixed in 10.0.14393.9512, 10.0.17763.9245 +10 CWE-416
Priority LOW 32
Use after free in Windows Device Association Service allows an authorized attacker to elevate privileges locally.
CVSS 3.1HIGH 7.0· Local · Low privileges · No interaction · EPSS 0.00202 · Published 2026-09-08 · Fixed in 10.0.14393.9512, 10.0.17763.9245 +9 CWE-362
Priority LOW 32
Numeric truncation error in Windows Kernel allows an authorized attacker to elevate privileges locally.
CVSS 3.1HIGH 7.0· Local · Low privileges · No interaction · EPSS 0.00264 · Published 2026-09-08 · Fixed in 10.0.14393.9512, 10.0.17763.9245 +10 CWE-122
Priority LOW 32
Use after free in Windows Storage Spaces Controller allows an authorized attacker to elevate privileges locally.
CVSS 3.1HIGH 7.0· Local · Low privileges · No interaction · EPSS 0.00264 · Published 2026-09-08 · Fixed in 10.0.14393.9512, 10.0.17763.9245 +8 CWE-416
Priority LOW 32
Use after free in Windows Universal Disk Format File System Driver (UDFS) allows an authorized attacker to elevate privileges locally.
CVSS 3.1HIGH 7.0· Local · Low privileges · No interaction · EPSS 0.00264 · Published 2026-09-08 · Fixed in 10.0.14393.9512, 10.0.17763.9245 +10 CWE-416
Priority LOW 32
Use after free in Windows NTFS allows an authorized attacker to elevate privileges locally.
CVSS 3.1HIGH 7.0· Local · Low privileges · No interaction · EPSS 0.00264 · Published 2026-09-08 · Fixed in 10.0.14393.9512, 10.0.17763.9245 +10 CWE-416
Priority LOW 32
Heap-based buffer overflow in Windows NTFS allows an unauthorized attacker to execute code with a physical attack.
CVSS 3.1MEDIUM 6.8· Physical · No auth · No interaction · EPSS 0.00438 · Published 2026-09-08 · Fixed in 10.0.14393.9512, 10.0.17763.9245 +10 CWE-122
Priority LOW 32
Heap-based buffer overflow in Windows Online Certificate Status Protocol (OCSP) allows an authorized attacker to elevate privileges locally.
CVSS 3.1HIGH 7.0· Local · Low privileges · No interaction · EPSS 0.00264 · Published 2026-09-08 · Fixed in 10.0.14393.9512, 10.0.17763.9245 +4 CWE-122
Priority LOW 32
Heap-based buffer overflow in Windows Program Compatibility Assistant Service allows an authorized attacker to elevate privileges locally.
CVSS 3.1HIGH 7.0· Local · Low privileges · No interaction · EPSS 0.00202 · Published 2026-09-08 · Fixed in 10.0.14393.9512, 10.0.17763.9245 +8 CWE-122
Priority LOW 32
Use after free in Windows Work Folder Service allows an authorized attacker to elevate privileges locally.
CVSS 3.1HIGH 7.0· Local · Low privileges · No interaction · EPSS 0.00264 · Published 2026-09-08 · Fixed in 10.0.14393.9512, 10.0.17763.9245 +8 CWE-416
Priority LOW 32
Use after free in Windows Image Acquisition allows an authorized attacker to elevate privileges locally.
CVSS 3.1HIGH 7.0· Local · Low privileges · No interaction · EPSS 0.00264 · Published 2026-09-08 · Fixed in 10.0.14393.9512, 10.0.17763.9245 +10 CWE-416
Priority LOW 32
Heap-based buffer overflow in Windows Partition Management Driver allows an authorized attacker to elevate privileges locally.
CVSS 3.1HIGH 7.0· Local · Low privileges · No interaction · EPSS 0.00264 · Published 2026-09-08 · Fixed in 10.0.14393.9512, 10.0.17763.9245 +10 CWE-122
Priority LOW 32
Out-of-bounds read in Windows USB Mass Storage Class Driver allows an unauthorized attacker to elevate privileges with a physical attack.
CVSS 3.1MEDIUM 6.8· Physical · No auth · No interaction · EPSS 0.00438 · Published 2026-09-08 · Fixed in 10.0.14393.9512, 10.0.17763.9245 +10 CWE-125
Priority LOW 32
Use after free in Windows Device Association Service allows an authorized attacker to elevate privileges locally.
CVSS 3.1HIGH 7.0· Local · Low privileges · No interaction · EPSS 0.00264 · Published 2026-09-08 · Fixed in 10.0.14393.9512, 10.0.17763.9245 +9 CWE-416
Priority LOW 32
Use after free in Windows Devices Human Interface allows an authorized attacker to elevate privileges locally.
CVSS 3.1HIGH 7.0· Local · Low privileges · No interaction · EPSS 0.00264 · Published 2026-09-08 · Fixed in 10.0.14393.9512, 10.0.17763.9245 +8 CWE-416
Priority LOW 32
Use after free in Windows Connected User Experiences and Telemetry allows an authorized attacker to elevate privileges locally.
CVSS 3.1HIGH 7.0· Local · Low privileges · No interaction · EPSS 0.00264 · Published 2026-09-08 · Fixed in 10.0.14393.9512, 10.0.17763.9245 +8 CWE-416
Priority LOW 32
Heap-based buffer overflow in Windows Volume Manager Extension Driver allows an authorized attacker to elevate privileges locally.
CVSS 3.1HIGH 7.0· Local · Low privileges · No interaction · EPSS 0.00264 · Published 2026-09-08 · Fixed in 10.0.14393.9512, 10.0.17763.9245 +10 CWE-122
Priority LOW 32
Time-of-check time-of-use (toctou) race condition in Windows Kernel allows an authorized attacker to elevate privileges locally.
CVSS 3.1HIGH 7.0· Local · Low privileges · No interaction · EPSS 0.00202 · Published 2026-09-08 · Fixed in 10.0.14393.9512, 10.0.17763.9245 +10 CWE-367
Priority LOW 32
Heap-based buffer overflow in Windows BitLocker allows an authorized attacker to execute code locally.
CVSS 3.1MEDIUM 6.7· Local · High privileges · No interaction · EPSS 0.00348 · Published 2026-09-08 · Fixed in 10.0.14393.9512, 10.0.17763.9245 +10 CWE-122
Priority LOW 32
Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Installer allows an authorized attacker to elevate privileges locally.
CVSS 3.1HIGH 7.0· Local · Low privileges · No interaction · EPSS 0.00202 · Published 2026-09-08 · Fixed in 10.0.14393.9512, 10.0.17763.9245 +10 CWE-362
Priority LOW 32
Use after free in Windows Embedded Mode Service allows an authorized attacker to elevate privileges locally.
CVSS 3.1HIGH 7.0· Local · Low privileges · No interaction · EPSS 0.00268 · Published 2026-09-08 · Fixed in 10.0.14393.9512, 10.0.17763.9245 +8 CWE-416
Priority LOW 32
Use after free in Windows USB Audio Class driver (usbaudio.sys) allows an authorized attacker to elevate privileges locally.
CVSS 3.1HIGH 7.0· Local · Low privileges · No interaction · EPSS 0.00264 · Published 2026-09-08 · Fixed in 10.0.14393.9512, 10.0.17763.9245 +10 CWE-416
Priority LOW 32
Use after free in Windows Win32K allows an authorized attacker to elevate privileges locally.
CVSS 3.1HIGH 7.0· Local · Low privileges · No interaction · EPSS 0.00268 · Published 2026-09-08 · Fixed in 10.0.14393.9512, 10.0.17763.9245 +2 CWE-416
Priority LOW 32
Concurrent execution using shared resource with improper synchronization ('race condition') in Windows TCP/IP allows an authorized attacker to elevate privileges locally.
CVSS 3.1HIGH 7.0· Local · Low privileges · No interaction · EPSS 0.00202 · Published 2026-09-08 · Fixed in 10.0.14393.9512, 10.0.17763.9245 +10 CWE-362
Priority LOW 32
Heap-based buffer overflow in Windows Audio Service allows an authorized attacker to elevate privileges locally.
CVSS 3.1HIGH 7.0· Local · Low privileges · No interaction · EPSS 0.00264 · Published 2026-09-08 · Fixed in 10.0.14393.9512, 10.0.17763.9245 +10 CWE-122
Priority LOW 32
Concurrent execution using shared resource with improper synchronization ('race condition') in Windows TCP/IP allows an authorized attacker to elevate privileges locally.
CVSS 3.1HIGH 7.0· Local · Low privileges · No interaction · EPSS 0.00202 · Published 2026-09-08 · Fixed in 10.0.14393.9512, 10.0.17763.9245 +10 CWE-362
Priority LOW 32
Null pointer dereference in Virtual Hard Disk (VHD) Miniport Driver allows an unauthorized attacker to deny service locally.
CVSS 3.1HIGH 7.1· Local · No auth · No interaction · EPSS 0.00422 · Published 2026-09-08 · Fixed in 10.0.14393.9512, 10.0.17763.9245 +8 CWE-476
Priority LOW 32
Integer overflow or wraparound in Windows Overlay Filter allows an authorized attacker to elevate privileges locally.
CVSS 3.1MEDIUM 6.7· Local · High privileges · No interaction · EPSS 0.00348 · Published 2026-09-08 · Fixed in 10.0.14393.9512, 10.0.17763.9245 +9 CWE-125
Priority LOW 32
Use after free in Windows Error Reporting allows an authorized attacker to elevate privileges locally.
CVSS 3.1HIGH 7.0· Local · Low privileges · No interaction · EPSS 0.00264 · Published 2026-09-08 · Fixed in 10.0.14393.9512, 10.0.17763.9245 +10 CWE-416
Priority LOW 32
Heap-based buffer overflow in Windows Overlay Filter allows an authorized attacker to elevate privileges locally.
CVSS 3.1MEDIUM 6.7· Local · High privileges · No interaction · EPSS 0.00348 · Published 2026-09-08 · Fixed in 10.0.14393.9512, 10.0.17763.9245 +9 CWE-122
Priority LOW 32
Use after free in Windows Image Acquisition allows an authorized attacker to elevate privileges locally.
CVSS 3.1HIGH 7.0· Local · Low privileges · No interaction · EPSS 0.00264 · Published 2026-09-08 · Fixed in 10.0.14393.9512, 10.0.17763.9245 +10 CWE-416
Priority LOW 32
Use after free in Windows Win32K allows an authorized attacker to elevate privileges locally.
CVSS 3.1HIGH 7.0· Local · Low privileges · No interaction · EPSS 0.00264 · Published 2026-09-08 · Fixed in 10.0.14393.9512, 10.0.17763.9245 +10 CWE-416
Priority LOW 32
Use after free in Windows Remote Access Connection Manager allows an authorized attacker to elevate privileges locally.
CVSS 3.1HIGH 7.0· Local · Low privileges · No interaction · EPSS 0.00264 · Published 2026-09-08 · Fixed in 10.0.14393.9512, 10.0.17763.9245 +9 CWE-416
Priority LOW 32
Concurrent execution using shared resource with improper synchronization ('race condition') in Windows USB Video Driver allows an authorized attacker to elevate privileges locally.
CVSS 3.1HIGH 7.0· Local · Low privileges · No interaction · EPSS 0.00202 · Published 2026-09-08 · Fixed in 10.0.14393.9512, 10.0.17763.9245 +10 CWE-362
Priority LOW 32
Use after free in Windows Audio Service allows an authorized attacker to elevate privileges locally.
CVSS 3.1HIGH 7.0· Local · Low privileges · No interaction · EPSS 0.00264 · Published 2026-09-08 · Fixed in 10.0.14393.9512, 10.0.17763.9245 +9 CWE-416
Priority LOW 32
Use after free in Windows DNS allows an authorized attacker to elevate privileges locally.
CVSS 3.1HIGH 7.0· Local · Low privileges · No interaction · EPSS 0.00264 · Published 2026-09-08 · Fixed in 10.0.14393.9512, 10.0.17763.9245 +9 CWE-416
Priority LOW 32
Double free in Windows Print Spooler Components allows an authorized attacker to elevate privileges locally.
CVSS 3.1HIGH 7.0· Local · Low privileges · No interaction · EPSS 0.00264 · Published 2026-09-08 · Fixed in 10.0.14393.9512, 10.0.17763.9245 +10 CWE-415
Priority LOW 32
Double free in Remote Desktop Gateway Service allows an authorized attacker to elevate privileges locally.
CVSS 3.1HIGH 7.0· Local · Low privileges · No interaction · EPSS 0.00264 · Published 2026-09-08 · Fixed in 10.0.14393.9512, 10.0.17763.9245 +4 CWE-415
Priority LOW 32
Use after free in Windows Remote Desktop Services allows an authorized attacker to elevate privileges locally.
CVSS 3.1HIGH 7.0· Local · Low privileges · No interaction · EPSS 0.00264 · Published 2026-09-08 · Fixed in 10.0.14393.9512, 10.0.17763.9245 +10 CWE-416
Priority LOW 32
Use after free in Windows Push Notifications allows an authorized attacker to elevate privileges locally.
CVSS 3.1HIGH 7.0· Local · Low privileges · No interaction · EPSS 0.00264 · Published 2026-09-08 · Fixed in 10.0.14393.9512, 10.0.17763.9245 +8 CWE-416
Priority LOW 32
Use after free in Kernel Streaming WOW Thunk Service Driver allows an authorized attacker to elevate privileges locally.
CVSS 3.1HIGH 7.0· Local · Low privileges · No interaction · EPSS 0.00264 · Published 2026-09-08 · Fixed in 10.0.14393.9512, 10.0.17763.9245 +10 CWE-416
Priority LOW 32
Heap-based buffer overflow in Microsoft Standard XPS allows an authorized attacker to elevate privileges locally.
CVSS 3.1HIGH 7.0· Local · Low privileges · No interaction · EPSS 0.00264 · Published 2026-09-08 · Fixed in 10.0.14393.9512, 10.0.17763.9245 +10 CWE-122
Priority LOW 32
Heap-based buffer overflow in Windows Kernel allows an authorized attacker to elevate privileges locally.
CVSS 3.1HIGH 7.0· Local · Low privileges · No interaction · EPSS 0.00264 · Published 2026-09-08 · Fixed in 10.0.14393.9512, 10.0.17763.9245 +8 CWE-122
Priority LOW 32
Concurrent execution using shared resource with improper synchronization ('race condition') in Windows USB Driver allows an authorized attacker to elevate privileges locally.
CVSS 3.1HIGH 7.0· Local · Low privileges · No interaction · EPSS 0.00202 · Published 2026-09-08 · Fixed in 10.0.14393.9512, 10.0.17763.9245 +9 CWE-362
Priority LOW 32
Use after free in Windows File History Service allows an authorized attacker to elevate privileges locally.
CVSS 3.1HIGH 7.0· Local · Low privileges · No interaction · EPSS 0.00264 · Published 2026-09-08 · Fixed in 10.0.14393.9512, 10.0.17763.9245 +6 CWE-416
Priority LOW 32
Heap-based buffer overflow in Windows NTFS allows an unauthorized attacker to execute code with a physical attack.
CVSS 3.1MEDIUM 6.8· Physical · No auth · No interaction · EPSS 0.00438 · Published 2026-09-08 · Fixed in 10.0.14393.9512, 10.0.17763.9245 +10 CWE-122
Priority LOW 32
Use after free in Windows Installer allows an authorized attacker to elevate privileges locally.
CVSS 3.1HIGH 7.0· Local · Low privileges · No interaction · EPSS 0.00264 · Published 2026-09-08 · Fixed in 10.0.14393.9512, 10.0.17763.9245 +10 CWE-416
Priority LOW 32
Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Ancillary Function Driver for WinSock allows an authorized attacker to elevate privileges locally.
CVSS 3.1HIGH 7.0· Local · Low privileges · No interaction · EPSS 0.00202 · Published 2026-09-08 · Fixed in 10.0.14393.9512, 10.0.17763.9245 +10 CWE-362
Priority LOW 31
Integer underflow (wrap or wraparound) in Microsoft Windows SCSI Class System File allows an unauthorized attacker to disclose information over a network.
CVSS 3.1MEDIUM 6.5· Network · No auth · User interaction · EPSS 0.00922 · Published 2026-09-08 · Fixed in 10.0.14393.9512, 10.0.17763.9245 +10 CWE-191
Priority LOW 31
Out-of-bounds read in Windows Spaceport.sys allows an unauthorized attacker to disclose information over a network.
CVSS 3.1MEDIUM 6.5· Network · No auth · User interaction · EPSS 0.00922 · Published 2026-09-08 · Fixed in 10.0.14393.9512, 10.0.17763.9245 +9 CWE-125
Priority LOW 31
Null pointer dereference in Windows Routing and Remote Access Service (RRAS) allows an authorized attacker to deny service over a network.
CVSS 3.1MEDIUM 6.5· Network · Low privileges · No interaction · EPSS 0.01138 · Published 2026-09-08 · Fixed in 10.0.14393.9512, 10.0.17763.9245 +10 CWE-476
Priority LOW 31
Uncaught exception in Windows iSCSI Target Service allows an authorized attacker to deny service over a network.
CVSS 3.1MEDIUM 6.5· Network · Low privileges · No interaction · EPSS 0.01138 · Published 2026-09-08 · Fixed in 10.0.14393.9512, 10.0.17763.9245 +4 CWE-248
Priority LOW 31
Missing release of memory after effective lifetime in Windows DHCP Server allows an authorized attacker to deny service over a network.
CVSS 3.1MEDIUM 6.5· Network · Low privileges · No interaction · EPSS 0.01138 · Published 2026-09-08 · Fixed in 10.0.14393.9512, 10.0.17763.9245 +4 CWE-401
Priority LOW 31
Use of externally-controlled format string in Active Directory Certificate Services (AD CS) allows an authorized attacker to disclose information over a network.
CVSS 3.1MEDIUM 6.5· Network · Low privileges · No interaction · EPSS 0.00995 · Published 2026-09-08 · Fixed in 10.0.14393.9512, 10.0.17763.9245 +4 CWE-134
Priority LOW 31
Out-of-bounds read in Windows iSCSI allows an unauthorized attacker to deny service over a network.
CVSS 3.1MEDIUM 6.5· Network · No auth · User interaction · EPSS 0.00885 · Published 2026-09-08 · Fixed in 10.0.14393.9512, 10.0.17763.9245 +10 CWE-125
Priority LOW 31
Null pointer dereference in Active Directory Domain Services allows an authorized attacker to deny service over a network.
CVSS 3.1MEDIUM 6.5· Network · Low privileges · No interaction · EPSS 0.01138 · Published 2026-09-08 · Fixed in 10.0.14393.9512, 10.0.17763.9245 +10 CWE-476
Priority LOW 30
Out-of-bounds read in Windows DHCP Server allows an authorized attacker to execute code locally.
CVSS 3.1MEDIUM 6.4· Local · High privileges · No interaction · EPSS 0.00276 · Published 2026-09-08 · Fixed in 10.0.14393.9512, 10.0.17763.9245 +4 CWE-125
Priority LOW 30
Out-of-bounds read in Windows DHCP Server allows an authorized attacker to execute code locally.
CVSS 3.1MEDIUM 6.4· Local · High privileges · No interaction · EPSS 0.00276 · Published 2026-09-08 · Fixed in 10.0.14393.9512, 10.0.17763.9245 +4 CWE-125
Priority LOW 30
Double free in Windows Failover Cluster allows an authorized attacker to elevate privileges locally.
CVSS 3.1MEDIUM 6.4· Local · High privileges · No interaction · EPSS 0.00276 · Published 2026-09-08 · Fixed in 10.0.14393.9512, 10.0.17763.9245 +4 CWE-415
Priority LOW 30
Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Management Instrumentation allows an authorized attacker to elevate privileges locally.
CVSS 3.1MEDIUM 6.4· Local · High privileges · No interaction · EPSS 0.00211 · Published 2026-09-08 · Fixed in 10.0.14393.9512, 10.0.17763.9245 +10 CWE-362
Priority LOW 30
Heap-based buffer overflow in Windows DHCP Server allows an authorized attacker to execute code locally.
CVSS 3.1MEDIUM 6.4· Local · High privileges · No interaction · EPSS 0.00276 · Published 2026-09-08 · Fixed in 10.0.14393.9512, 10.0.17763.9245 +4 CWE-122
Priority LOW 30
Storing passwords in a recoverable format in Windows DHCP Server allows an authorized attacker to disclose information over a network.
CVSS 3.1MEDIUM 6.5· Network · Low privileges · No interaction · EPSS 0.0084 · Published 2026-09-08 · Fixed in 10.0.14393.9512, 10.0.17763.9245 +4 CWE-257
Priority LOW 30
Improper limitation of a pathname to a restricted directory ('path traversal') in Windows PowerShell allows an unauthorized attacker to bypass a security feature over a network.
CVSS 3.1MEDIUM 6.5· Network · No auth · User interaction · EPSS 0.00756 · Published 2026-09-08 · Fixed in 10.0.14393.9512, 10.0.17763.9245 +10 CWE-22
Priority LOW 27
Concurrent execution using shared resource with improper synchronization ('race condition') in Windows DNS allows an unauthorized attacker to deny service over a network.
CVSS 3.1MEDIUM 5.9· Network · No auth · No interaction · EPSS 0.00655 · Published 2026-09-08 · Fixed in 10.0.14393.9512, 10.0.17763.9245 +4 CWE-362
Priority LOW 27
Exposure of sensitive system information to an unauthorized control sphere in Windows Kernel allows an authorized attacker to disclose information over a network.
CVSS 3.1MEDIUM 5.7· Network · Low privileges · User interaction · EPSS 0.00894 · Published 2026-09-08 · Fixed in 10.0.14393.9512, 10.0.17763.9245 +10 CWE-497
Priority LOW 27
Out-of-bounds read in Windows DHCP Server allows an authorized attacker to deny service over an adjacent network.
CVSS 3.1MEDIUM 5.7· Adjacent network · Low privileges · No interaction · EPSS 0.00646 · Published 2026-09-08 · Fixed in 10.0.14393.9512, 10.0.17763.9245 +4 CWE-125
Priority LOW 27
Out-of-bounds read in Windows DHCP Server allows an authorized attacker to deny service over an adjacent network.
CVSS 3.1MEDIUM 5.7· Adjacent network · Low privileges · No interaction · EPSS 0.00646 · Published 2026-09-08 · Fixed in 10.0.14393.9512, 10.0.17763.9245 +4 CWE-125
Priority LOW 27
Out-of-bounds read in Windows SMB Client allows an authorized attacker to disclose information over a network.
CVSS 3.1MEDIUM 5.7· Network · Low privileges · User interaction · EPSS 0.00894 · Published 2026-09-08 · Fixed in 10.0.14393.9512, 10.0.17763.9245 +10 CWE-125
Priority LOW 27
Untrusted pointer dereference in Windows Print Spooler Components allows an authorized attacker to deny service over a network.
CVSS 3.1MEDIUM 5.7· Network · Low privileges · User interaction · EPSS 0.00857 · Published 2026-09-08 · Fixed in 10.0.14393.9512, 10.0.17763.9245 +10 CWE-822
Priority LOW 27
Generation of error message containing sensitive information in Windows Print Spooler Components allows an authorized attacker to disclose information over a network.
CVSS 3.1MEDIUM 5.7· Network · Low privileges · User interaction · EPSS 0.00894 · Published 2026-09-08 · Fixed in 10.0.14393.9512, 10.0.17763.9245 +10 CWE-209
Priority LOW 27
Buffer over-read in Windows DHCP Server allows an authorized attacker to deny service over an adjacent network.
CVSS 3.1MEDIUM 5.7· Adjacent network · Low privileges · No interaction · EPSS 0.00646 · Published 2026-09-08 · Fixed in 10.0.14393.9512, 10.0.17763.9245 +4 CWE-126
Priority LOW 27
Missing release of memory after effective lifetime in Windows DHCP Server allows an authorized attacker to deny service over an adjacent network.
CVSS 3.1MEDIUM 5.7· Adjacent network · Low privileges · No interaction · EPSS 0.00646 · Published 2026-09-08 · Fixed in 10.0.14393.9512, 10.0.17763.9245 +4 CWE-401
Priority LOW 27
Out-of-bounds read in Windows Spaceport.sys allows an authorized attacker to disclose information over a network.
CVSS 3.1MEDIUM 5.7· Network · Low privileges · User interaction · EPSS 0.00894 · Published 2026-09-08 · Fixed in 10.0.14393.9512, 10.0.17763.9245 +8 CWE-125
Priority LOW 27
Out-of-bounds read in Windows Network File System allows an authorized attacker to deny service over a network.
CVSS 3.1MEDIUM 5.7· Network · Low privileges · User interaction · EPSS 0.00857 · Published 2026-09-08 · Fixed in 10.0.14393.9512, 10.0.17763.9245 +4 CWE-125
Priority LOW 27
Use of uninitialized resource in Windows Management Instrumentation allows an authorized attacker to disclose information over a network.
CVSS 3.1MEDIUM 5.7· Network · Low privileges · User interaction · EPSS 0.00894 · Published 2026-09-08 · Fixed in 10.0.14393.9512, 10.0.17763.9245 +10 CWE-908
Priority LOW 27
Out-of-bounds read in Remote Desktop Client allows an authorized attacker to disclose information over a network.
CVSS 3.1MEDIUM 5.7· Network · Low privileges · User interaction · EPSS 0.00894 · Published 2026-09-08 · Fixed in 10.0.14393.9512, 10.0.17763.9245 +10 CWE-125
Priority LOW 27
Out-of-bounds read in Windows Program Compatibility Assistant Service allows an authorized attacker to disclose information over a network.
CVSS 3.1MEDIUM 5.7· Network · Low privileges · User interaction · EPSS 0.00894 · Published 2026-09-08 · Fixed in 10.0.14393.9512, 10.0.17763.9245 +10 CWE-125
Priority LOW 26
Uncontrolled search path element in Windows Hello allows an authorized attacker to bypass a security feature locally.
CVSS 3.1MEDIUM 5.5· Local · Low privileges · No interaction · EPSS 0.00574 · Published 2026-09-08 · Fixed in 10.0.14393.9512, 10.0.17763.9245 +8 CWE-427
Priority LOW 26
Files or directories accessible to external parties in Windows Defender Firewall Service allows an authorized attacker to disclose information locally.
CVSS 3.1MEDIUM 5.5· Local · Low privileges · No interaction · EPSS 0.00554 · Published 2026-09-08 · Fixed in 10.0.14393.9512, 10.0.17763.9245 +10 CWE-552
Priority LOW 25
Out-of-bounds read in Windows CD-ROM Driver allows an authorized attacker to disclose information locally.
CVSS 3.1MEDIUM 5.5· Local · Low privileges · No interaction · EPSS 0.00404 · Published 2026-09-08 · Fixed in 10.0.14393.9512, 10.0.17763.9245 +6 CWE-125
Priority LOW 25
Out-of-bounds read in Storage Port Driver allows an authorized attacker to disclose information locally.
CVSS 3.1MEDIUM 5.5· Local · Low privileges · No interaction · EPSS 0.00404 · Published 2026-09-08 · Fixed in 10.0.14393.9512, 10.0.17763.9245 +10 CWE-125
Priority LOW 25
Out-of-bounds read in Windows GDI allows an unauthorized attacker to disclose information locally.
CVSS 3.1MEDIUM 5.5· Local · No auth · User interaction · EPSS 0.00435 · Published 2026-09-08 · Fixed in 16.112.26090911, 16.0.20430.20000 +12 CWE-125
Priority LOW 25
Exposure of private personal information to an unauthorized actor in Windows Biometric Service allows an authorized attacker to disclose information locally.
CVSS 3.1MEDIUM 5.5· Local · Low privileges · No interaction · EPSS 0.00479 · Published 2026-09-08 · Fixed in 10.0.14393.9512, 10.0.17763.9245 +8 CWE-359
Priority LOW 25
Missing authorization in Windows Remote Access Connection Manager allows an authorized attacker to perform tampering locally.
CVSS 3.1MEDIUM 5.5· Local · Low privileges · No interaction · EPSS 0.00302 · Published 2026-09-08 · Fixed in 10.0.14393.9512, 10.0.17763.9245 +9 CWE-862
Priority LOW 25
Missing authentication for critical function in Windows Internet Connection Sharing (ICS) allows an authorized attacker to perform tampering locally.
CVSS 3.1MEDIUM 5.5· Local · Low privileges · No interaction · EPSS 0.00302 · Published 2026-09-08 · Fixed in 10.0.14393.9512, 10.0.17763.9245 +8 CWE-306
Priority LOW 25
Use of uninitialized resource in Windows Task Scheduler allows an authorized attacker to disclose information locally.
CVSS 3.1MEDIUM 5.5· Local · Low privileges · No interaction · EPSS 0.00404 · Published 2026-09-08 · Fixed in 10.0.14393.9512, 10.0.17763.9245 +4 CWE-908
Priority LOW 25
Out-of-bounds read in Storage Port Driver allows an authorized attacker to disclose information locally.
CVSS 3.1MEDIUM 5.5· Local · Low privileges · No interaction · EPSS 0.00404 · Published 2026-09-08 · Fixed in 10.0.14393.9512, 10.0.17763.9245 +10 CWE-125
Priority LOW 25
Missing release of resource after effective lifetime in Windows Secure Socket Tunneling Protocol (SSTP) allows an authorized attacker to deny service locally.
CVSS 3.1MEDIUM 5.5· Local · Low privileges · No interaction · EPSS 0.00344 · Published 2026-09-08 · Fixed in 10.0.14393.9512, 10.0.17763.9245 +10 CWE-772
Priority LOW 25
Out-of-bounds read in Windows Partition Management Driver allows an authorized attacker to disclose information locally.
CVSS 3.1MEDIUM 5.5· Local · Low privileges · No interaction · EPSS 0.00404 · Published 2026-09-08 · Fixed in 10.0.14393.9512, 10.0.17763.9245 +10 CWE-125
Priority LOW 25
Use of uninitialized resource in Windows Win32 Kernel Subsystem allows an authorized attacker to disclose information locally.
CVSS 3.1MEDIUM 5.5· Local · Low privileges · No interaction · EPSS 0.00404 · Published 2026-09-08 · Fixed in 10.0.14393.9512, 10.0.17763.9245 +10 CWE-908
Priority LOW 25
Out-of-bounds read in Microsoft Windows Search Component allows an authorized attacker to disclose information locally.
CVSS 3.1MEDIUM 5.5· Local · Low privileges · No interaction · EPSS 0.00404 · Published 2026-09-08 · Fixed in 10.0.14393.9512, 10.0.17763.9245 +10 CWE-125
Priority LOW 25
Out-of-bounds read in Windows Wireless Wide Area Network Service allows an authorized attacker to disclose information locally.
CVSS 3.1MEDIUM 5.5· Local · Low privileges · No interaction · EPSS 0.00479 · Published 2026-09-08 · Fixed in 10.0.14393.9512, 10.0.17763.9245 +6 CWE-125
Priority LOW 25
Exposure of sensitive system information to an unauthorized control sphere in Windows Win32K allows an authorized attacker to disclose information locally.
CVSS 3.1MEDIUM 5.6· Local · Low privileges · No interaction · EPSS 0.00368 · Published 2026-09-08 · Fixed in 10.0.14393.9512, 10.0.17763.9245 +10 CWE-497
Priority LOW 25
Out-of-bounds read in Windows Win32K allows an authorized attacker to disclose information locally.
CVSS 3.1MEDIUM 5.5· Local · Low privileges · No interaction · EPSS 0.00404 · Published 2026-09-08 · Fixed in 10.0.14393.9512, 10.0.17763.9245 +10 CWE-125
Priority LOW 25
Buffer over-read in Windows Encrypting File System (EFS) allows an authorized attacker to disclose information locally.
CVSS 3.1MEDIUM 5.5· Local · Low privileges · No interaction · EPSS 0.00404 · Published 2026-09-08 · Fixed in 10.0.14393.9512, 10.0.17763.9245 +8 CWE-126
Priority LOW 25
Use of uninitialized resource in Windows Spaceport.sys allows an authorized attacker to disclose information locally.
CVSS 3.1MEDIUM 5.5· Local · Low privileges · No interaction · EPSS 0.00404 · Published 2026-09-08 · Fixed in 10.0.14393.9512, 10.0.17763.9245 +9 CWE-908
Priority LOW 25
Generation of error message containing sensitive information in Windows Error Reporting allows an authorized attacker to disclose information locally.
CVSS 3.1MEDIUM 5.5· Local · Low privileges · No interaction · EPSS 0.00479 · Published 2026-09-08 · Fixed in 10.0.14393.9512, 10.0.17763.9245 +9 CWE-209
Priority LOW 25
Use of uninitialized resource in Windows DNS allows an authorized attacker to disclose information locally.
CVSS 3.1MEDIUM 5.5· Local · Low privileges · No interaction · EPSS 0.00404 · Published 2026-09-08 · Fixed in 10.0.14393.9512, 10.0.17763.9245 +4 CWE-908