Read the docs
Microsoft update

KB5124008

Security Update

View on Microsoft →

Fixed in

Fixes 500 records

Priority CRITICAL 93KEV

Improper link resolution before file access ('link following') in Windows Update Stack allows an authorized attacker to elevate privileges locally.

CVSS 3.1HIGH 7.8 Local Low privileges No interaction EPSS 0.00393 Published 2026-09-08 Fixed in 10.0.22631.7582, 10.0.26100.9445 +3 CWE-284
Priority MEDIUM 51

Double free in Microsoft Graphics Component allows an unauthorized attacker to execute code over a network.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00974 Published 2026-09-08 Fixed in 10.0.14393.9512, 10.0.17763.9245 +10 CWE-415
Priority MEDIUM 51

Use after free in Windows Internet Connection Sharing (ICS) allows an unauthorized attacker to execute code over a network.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00974 Published 2026-09-08 Fixed in 10.0.14393.9512, 10.0.17763.9245 +10 CWE-416
Priority MEDIUM 51

Stack-based buffer overflow in Windows Netlogon allows an unauthorized attacker to execute code over a network.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00974 Published 2026-09-08 Fixed in 10.0.14393.9512, 10.0.17763.9245 +10 CWE-121
Priority MEDIUM 51

Out-of-bounds write in Windows Imaging Component allows an unauthorized attacker to execute code over a network.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00974 Published 2026-09-08 Fixed in 10.0.14393.9512, 10.0.17763.9245 +10 CWE-787
Priority MEDIUM 51

Stack-based buffer overflow in Windows Hyper-V allows an unauthorized attacker to execute code over a network.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00974 Published 2026-09-08 Fixed in 10.0.14393.9512, 10.0.17763.9245 +8 CWE-121
Priority MEDIUM 51

Heap-based buffer overflow in Windows Shell allows an unauthorized attacker to execute code over a network.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00974 Published 2026-09-08 Fixed in 10.0.14393.9512, 10.0.17763.9245 +10 CWE-122
Priority MEDIUM 51

Integer underflow (wrap or wraparound) in Microsoft Standard XPS allows an unauthorized attacker to execute code over a network.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00974 Published 2026-09-08 Fixed in 10.0.14393.9512, 10.0.17763.9245 +10 CWE-122
Priority MEDIUM 51

Out-of-bounds write in RPC Runtime allows an unauthorized attacker to execute code over a network.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00974 Published 2026-09-08 Fixed in 10.0.14393.9512, 10.0.17763.9245 +10 CWE-787
Priority MEDIUM 51

Heap-based buffer overflow in Windows HTTP Print Provider allows an unauthorized attacker to execute code over a network.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00974 Published 2026-09-08 Fixed in 10.0.14393.9512, 10.0.17763.9245 +10 CWE-122
Priority MEDIUM 51

Out-of-bounds read in Windows Direct Show allows an unauthorized attacker to execute code over a network.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00974 Published 2026-09-08 Fixed in 10.0.14393.9512, 10.0.17763.9245 +10 CWE-122
Priority MEDIUM 51

Integer overflow or wraparound in Microsoft Windows PDF allows an unauthorized attacker to execute code over a network.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00974 Published 2026-09-08 Fixed in 10.0.14393.9512, 10.0.17763.9245 +8 CWE-122
Priority MEDIUM 51

Use after free in Windows Message Queuing allows an unauthorized attacker to execute code over a network.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00974 Published 2026-09-08 Fixed in 10.0.14393.9512, 10.0.17763.9245 +10 CWE-416
Priority MEDIUM 51

Use after free in Windows Remote Desktop Services allows an unauthorized attacker to execute code over a network.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00974 Published 2026-09-08 Fixed in 10.0.14393.9512, 10.0.17763.9245 +10 CWE-416
Priority MEDIUM 51

Heap-based buffer overflow in Windows Compressed Folder allows an unauthorized attacker to execute code over a network.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00974 Published 2026-09-08 Fixed in 10.0.14393.9512, 10.0.17763.9245 +10 CWE-122
Priority MEDIUM 51

Out-of-bounds read in Windows Event Logging Service allows an unauthorized attacker to execute code over a network.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00974 Published 2026-09-08 Fixed in 10.0.14393.9512, 10.0.17763.9245 +10 CWE-122
Priority MEDIUM 51

Heap-based buffer overflow in Windows Microsoft DirectMusic allows an unauthorized attacker to execute code over a network.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00974 Published 2026-09-08 Fixed in 10.0.14393.9512, 10.0.17763.9245 +10 CWE-122
Priority MEDIUM 51

Heap-based buffer overflow in Windows NTFS allows an unauthorized attacker to execute code over a network.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00974 Published 2026-09-08 Fixed in 10.0.14393.9512, 10.0.17763.9245 +10 CWE-122
Priority MEDIUM 51

Heap-based buffer overflow in Telnet Client allows an unauthorized attacker to execute code over a network.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00974 Published 2026-09-08 Fixed in 10.0.14393.9512, 10.0.17763.9245 +10 CWE-122
Priority MEDIUM 51

Integer overflow or wraparound in Microsoft Windows Media Foundation allows an unauthorized attacker to execute code over a network.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00974 Published 2026-09-08 Fixed in 10.0.14393.9512, 10.0.17763.9245 +10 CWE-122
Priority MEDIUM 51

Integer underflow (wrap or wraparound) in Microsoft UxTheme Library (uxtheme.dll) allows an unauthorized attacker to execute code over a network.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00974 Published 2026-09-08 Fixed in 10.0.14393.9512, 10.0.17763.9245 +10 CWE-122
Priority MEDIUM 48

Heap-based buffer overflow in Windows Kernel allows an unauthorized attacker to execute code over a network.

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.00819 Published 2026-09-08 Fixed in 10.0.14393.9512, 10.0.17763.9245 +10 CWE-122
Priority MEDIUM 48

Heap-based buffer overflow in Microsoft Windows Media Foundation allows an unauthorized attacker to execute code over a network.

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.00819 Published 2026-09-08 Fixed in 10.0.14393.9512, 10.0.17763.9245 +10 CWE-122
Priority MEDIUM 48

Heap-based buffer overflow in Microsoft Windows Media Foundation allows an unauthorized attacker to execute code over a network.

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.00819 Published 2026-09-08 Fixed in 10.0.17763.9245, 10.0.19044.7725 +7 CWE-122
Priority MEDIUM 45

Heap-based buffer overflow in Windows RNDIS allows an unauthorized attacker to execute code over a network.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00974 Published 2026-09-08 Fixed in 10.0.14393.9512, 10.0.17763.9245 +10 CWE-122
Priority MEDIUM 42

Heap-based buffer overflow in Windows Print Spooler Components allows an unauthorized attacker to execute code over a network.

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.00819 Published 2026-09-08 Fixed in 10.0.26100.9445 CWE-122
Priority MEDIUM 42

Heap-based buffer overflow in Remote Desktop Client allows an unauthorized attacker to execute code over a network.

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.00819 Published 2026-09-08 Fixed in 10.0.14393.9512, 10.0.17763.9245 +8 CWE-122
Priority MEDIUM 42

Heap-based buffer overflow in Windows Imaging Component allows an unauthorized attacker to execute code over a network.

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.00819 Published 2026-09-08 Fixed in 10.0.14393.9512, 10.0.17763.9245 +10 CWE-122
Priority MEDIUM 42

Heap-based buffer overflow in Microsoft Graphics Component allows an unauthorized attacker to execute code over a network.

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.00837 Published 2026-09-08 Fixed in 16.0.20326.20138, 16.0.5569.1003 +16 CWE-122
Priority MEDIUM 42

Out-of-bounds read in Windows Remote Desktop Services allows an authorized attacker to elevate privileges over a network.

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.00913 Published 2026-09-08 Fixed in 10.0.14393.9512, 10.0.17763.9245 +10 CWE-125
Priority MEDIUM 42

Double free in Microsoft Office Word allows an unauthorized attacker to execute code over a network.

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.00819 Published 2026-09-08 Fixed in 10.0.14393.9512, 10.0.17763.9245 +10 CWE-415
Priority MEDIUM 42

Heap-based buffer overflow in Windows Imaging Component allows an unauthorized attacker to execute code over a network.

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.00819 Published 2026-09-08 Fixed in 10.0.14393.9512, 10.0.17763.9245 +10 CWE-122
Priority MEDIUM 42

Heap-based buffer overflow in Windows Imaging Component allows an unauthorized attacker to execute code over a network.

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.00819 Published 2026-09-08 Fixed in 10.0.14393.9512, 10.0.17763.9245 +10 CWE-122
Priority MEDIUM 42

Heap-based buffer overflow in Graphic Fonts allows an unauthorized attacker to execute code over a network.

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.00819 Published 2026-09-08 Fixed in 10.0.14393.9512, 10.0.17763.9245 +10 CWE-122
Priority MEDIUM 42

Heap-based buffer overflow in Microsoft Graphics Component allows an unauthorized attacker to execute code over a network.

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.00819 Published 2026-09-08 Fixed in 10.0.14393.9512, 10.0.17763.9245 +10 CWE-122
Priority MEDIUM 42

Heap-based buffer overflow in Windows Management Services allows an authorized attacker to elevate privileges over a network.

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.00913 Published 2026-09-08 Fixed in 10.0.14393.9512, 10.0.17763.9245 +10 CWE-122
Priority MEDIUM 42

Stack-based buffer overflow in Microsoft Graphics Component allows an unauthorized attacker to execute code over a network.

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.00819 Published 2026-09-08 Fixed in 10.0.14393.9512, 10.0.17763.9245 +8 CWE-121
Priority MEDIUM 42

Heap-based buffer overflow in Graphic Fonts allows an unauthorized attacker to execute code over a network.

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.00819 Published 2026-09-08 Fixed in 10.0.14393.9512, 10.0.17763.9245 +10 CWE-122
Priority MEDIUM 42

Heap-based buffer overflow in Windows Media Player allows an unauthorized attacker to execute code over a network.

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.00819 Published 2026-09-08 Fixed in 10.0.14393.9512, 10.0.17763.9245 +8 CWE-122
Priority MEDIUM 42

Heap-based buffer overflow in Windows Schannel allows an unauthorized attacker to execute code over a network.

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.00819 Published 2026-09-08 Fixed in 10.0.22631.7582, 10.0.26100.9445 +4 CWE-122
Priority MEDIUM 42

Integer underflow (wrap or wraparound) in Windows Remote Access Connection Manager allows an authorized attacker to execute code over a network.

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.00913 Published 2026-09-08 Fixed in 10.0.14393.9512, 10.0.17763.9245 +10 CWE-191
Priority MEDIUM 42

Heap-based buffer overflow in Windows Paint allows an unauthorized attacker to execute code over a network.

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.00819 Published 2026-09-08 Fixed in 10.0.14393.9512, 10.0.17763.9245 +10 CWE-122
Priority MEDIUM 42

Heap-based buffer overflow in Windows Media Player allows an unauthorized attacker to execute code over a network.

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.00819 Published 2026-09-08 Fixed in 10.0.14393.9512, 10.0.17763.9245 +10 CWE-122
Priority MEDIUM 42

Heap-based buffer overflow in Windows Imaging Component allows an unauthorized attacker to execute code over a network.

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.00819 Published 2026-09-08 Fixed in 10.0.14393.9512, 10.0.17763.9245 +10 CWE-122
Priority MEDIUM 42

Heap-based buffer overflow in Windows Network File System allows an unauthorized attacker to execute code over a network.

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.00819 Published 2026-09-08 Fixed in 10.0.14393.9512, 10.0.17763.9245 +10 CWE-122
Priority MEDIUM 42

Heap-based buffer overflow in Windows Credential Providers allows an authorized attacker to execute code over a network.

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.00913 Published 2026-09-08 Fixed in 10.0.26100.9445, 10.0.26200.9445 +2 CWE-122
Priority MEDIUM 42

Heap-based buffer overflow in Windows iSCSI allows an authorized attacker to execute code over a network.

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.00913 Published 2026-09-08 Fixed in 10.0.14393.9512, 10.0.17763.9245 +10 CWE-122
Priority MEDIUM 42

Heap-based buffer overflow in Microsoft Windows Media Foundation allows an unauthorized attacker to execute code over a network.

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.00819 Published 2026-09-08 Fixed in 10.0.14393.9512, 10.0.17763.9245 +10 CWE-122
Priority MEDIUM 42

Incorrect calculation of buffer size in Windows iSCSI allows an unauthorized attacker to execute code over a network.

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.00819 Published 2026-09-08 Fixed in 10.0.14393.9512, 10.0.17763.9245 +10 CWE-131
Priority MEDIUM 42

Heap-based buffer overflow in Windows Remote Desktop allows an unauthorized attacker to execute code over a network.

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.00819 Published 2026-09-08 Fixed in 10.0.14393.9512, 10.0.17763.9245 +10 CWE-122
Priority MEDIUM 42

Heap-based buffer overflow in Windows Event Logging Service allows an unauthorized attacker to execute code over a network.

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.00819 Published 2026-09-08 Fixed in 10.0.14393.9512, 10.0.17763.9245 +10 CWE-122
Priority MEDIUM 42

Out-of-bounds read in Windows Event Logging Service allows an unauthorized attacker to execute code over a network.

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.00819 Published 2026-09-08 Fixed in 10.0.14393.9512, 10.0.17763.9245 +10 CWE-122
Priority MEDIUM 42

Use of uninitialized resource in Remote Desktop Client allows an authorized attacker to execute code over a network.

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.00913 Published 2026-09-08 Fixed in 10.0.14393.9512, 10.0.17763.9245 +8 CWE-908
Priority MEDIUM 42

Stack-based buffer overflow in Windows NTFS allows an unauthorized attacker to execute code over a network.

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.00819 Published 2026-09-08 Fixed in 10.0.14393.9512, 10.0.17763.9245 +10 CWE-121
Priority MEDIUM 42

Heap-based buffer overflow in Windows URL Moniker allows an unauthorized attacker to execute code over a network.

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.00819 Published 2026-09-08 Fixed in 10.0.14393.9512, 10.0.17763.9245 +10 CWE-122
Priority MEDIUM 42

Heap-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code over a network.

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.00819 Published 2026-09-08 Fixed in 10.0.14393.9512, 10.0.17763.9245 +10 CWE-122
Priority MEDIUM 42

Heap-based buffer overflow in Remote Desktop Client allows an unauthorized attacker to execute code over a network.

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.00819 Published 2026-09-08 Fixed in 10.0.14393.9512, 10.0.17763.9245 +10 CWE-122
Priority MEDIUM 42

Heap-based buffer overflow in Microsoft Windows Media Foundation allows an unauthorized attacker to execute code over a network.

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.00819 Published 2026-09-08 Fixed in 10.0.26100.9445, 10.0.26200.9445 +2 CWE-122
Priority MEDIUM 41

Integer overflow or wraparound in Windows iSCSI allows an unauthorized attacker to execute code over a network.

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.00798 Published 2026-10-13 Fixed in 10.0.14393.9512, 10.0.17763.9245 +10 CWE-190
Priority MEDIUM 41

Out-of-bounds read in Windows Key Distribution Center allows an unauthorized attacker to deny service over a network.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.01174 Published 2026-09-08 Fixed in 10.0.14393.9512, 10.0.17763.9245 +10 CWE-125
Priority MEDIUM 41

Exposure of sensitive system information to an unauthorized control sphere in Windows Services for NFS ONCRPC XDR Driver allows an unauthorized attacker to disclose information over a network.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.01027 Published 2026-09-08 Fixed in 10.0.14393.9512, 10.0.17763.9245 +10 CWE-497
Priority MEDIUM 41

Improper null termination in Windows Remote Desktop Protocol allows an unauthorized attacker to disclose information over a network.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.01027 Published 2026-09-08 Fixed in 10.0.14393.9512, 10.0.17763.9245 +10 CWE-170
Priority MEDIUM 41

Out-of-bounds read in Windows Mobile Broadband allows an unauthorized attacker to disclose information over a network.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.01027 Published 2026-09-08 Fixed in 10.0.19044.7725, 10.0.19045.7725 +4 CWE-125
Priority MEDIUM 41

Missing release of memory after effective lifetime in Active Directory Domain Services allows an unauthorized attacker to deny service over a network.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.01174 Published 2026-09-08 Fixed in 10.0.22631.7582, 10.0.26100.9445 +4 CWE-401
Priority MEDIUM 41

Stack-based buffer overflow in Windows Win32K allows an authorized attacker to elevate privileges over a network.

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.00768 Published 2026-09-08 Fixed in 10.0.17763.9245, 10.0.19044.7725 +7 CWE-121
Priority MEDIUM 41

Out-of-bounds read in Windows Kerberos allows an unauthorized attacker to deny service over a network.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.01174 Published 2026-09-08 Fixed in 10.0.14393.9512, 10.0.17763.9245 +8 CWE-125
Priority MEDIUM 41

Null pointer dereference in Windows Kerberos allows an unauthorized attacker to deny service over a network.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.01174 Published 2026-09-08 Fixed in 10.0.26100.9445, 10.0.26200.9445 +1 CWE-476
Priority MEDIUM 41

Untrusted pointer dereference in Windows Group Policy allows an authorized attacker to elevate privileges over a network.

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.00768 Published 2026-09-08 Fixed in 10.0.14393.9512, 10.0.17763.9245 +10 CWE-125
Priority MEDIUM 41

Stack-based buffer overflow in Windows Device Association Service allows an authorized attacker to elevate privileges over a network.

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.00768 Published 2026-09-08 Fixed in 10.0.14393.9512, 10.0.17763.9245 +10 CWE-121
Priority MEDIUM 41

Out-of-bounds read in Windows Win32K allows an authorized attacker to elevate privileges over a network.

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.00768 Published 2026-09-08 Fixed in 10.0.17763.9245, 10.0.19044.7725 +7 CWE-121
Priority MEDIUM 41

Authentication bypass by capture-replay in Windows Kerberos allows an authorized attacker to execute code over a network.

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.00778 Published 2026-09-08 Fixed in 10.0.14393.9512, 10.0.17763.9245 +10 CWE-294
Priority MEDIUM 41

Heap-based buffer overflow in Windows Connected User Experiences and Telemetry allows an authorized attacker to elevate privileges over a network.

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.00768 Published 2026-09-08 Fixed in 10.0.17763.9245, 10.0.19044.7725 +7 CWE-122
Priority MEDIUM 41

Out-of-bounds read in Windows exFAT File System allows an authorized attacker to elevate privileges over a network.

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.00768 Published 2026-09-08 Fixed in 10.0.14393.9512, 10.0.17763.9245 +10 CWE-125
Priority MEDIUM 41

Missing release of memory after effective lifetime in Windows TCP/IP allows an unauthorized attacker to deny service over a network.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.01174 Published 2026-09-08 Fixed in 10.0.22631.7582, 10.0.26100.9445 +4 CWE-401
Priority MEDIUM 41

Heap-based buffer overflow in Windows Spaceport.sys allows an authorized attacker to elevate privileges over a network.

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.00768 Published 2026-09-08 Fixed in 10.0.14393.9512, 10.0.17763.9245 +8 CWE-122
TI-2026-48663 CVE-2026-69329 · GHSA-p522-jr5c-crrf

BranchCache Denial of Service Vulnerability

Priority MEDIUM 41

Out-of-bounds read in BranchCache allows an unauthorized attacker to deny service over a network.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.01174 Published 2026-09-08 Fixed in 10.0.14393.9512, 10.0.17763.9245 +10 CWE-125
Priority MEDIUM 41

Out-of-bounds read in Windows Message Queuing Queue Manager allows an unauthorized attacker to deny service over a network.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.01174 Published 2026-09-08 Fixed in 10.0.14393.9512, 10.0.17763.9245 +10 CWE-125
Priority MEDIUM 40

Heap-based buffer overflow in Windows Error Reporting allows an authorized attacker to elevate privileges locally.

CVSS 3.1HIGH 8.8 Local Low privileges No interaction EPSS 0.00333 Published 2026-09-08 Fixed in 10.0.14393.9512, 10.0.17763.9245 +10 CWE-122
Priority MEDIUM 40

Untrusted pointer dereference in Windows Hyper-V allows an authorized attacker to execute code locally.

CVSS 3.1HIGH 8.8 Local Low privileges No interaction EPSS 0.00333 Published 2026-09-08 Fixed in 10.0.22631.7582, 10.0.26100.9445 +4 CWE-822
Priority MEDIUM 40

Improper validation of consistency within input in Windows TCP/IP allows an unauthorized attacker to bypass a security feature over a network.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.00826 Published 2026-09-08 Fixed in 10.0.14393.9512, 10.0.17763.9245 +10 CWE-1288
Priority MEDIUM 40

Use after free in Windows Hello allows an authorized attacker to elevate privileges locally.

CVSS 3.1HIGH 8.8 Local Low privileges No interaction EPSS 0.00333 Published 2026-09-08 Fixed in 10.0.19044.7725, 10.0.19045.7725 +4 CWE-416
Priority MEDIUM 40

Use after free in Windows Hello allows an authorized attacker to elevate privileges locally.

CVSS 3.1HIGH 8.8 Local Low privileges No interaction EPSS 0.00333 Published 2026-09-08 Fixed in 10.0.22631.7582, 10.0.26100.9445 +2 CWE-416
Priority MEDIUM 40

Heap-based buffer overflow in Windows Hyper-V allows an authorized attacker to execute code locally.

CVSS 3.1HIGH 8.8 Local Low privileges No interaction EPSS 0.00333 Published 2026-09-08 Fixed in 10.0.14393.9512, 10.0.17763.9245 +9 CWE-122
TI-2026-49284 CVE-2026-70563 · GHSA-pmcj-qvj4-33xj

Windows Shell Spoofing Vulnerability

Priority LOW 39

Improper link resolution before file access ('link following') in Windows Shell allows an unauthorized attacker to perform spoofing over a network.

CVSS 3.1HIGH 8.1 Network No auth User interaction EPSS 0.00849 Published 2026-09-08 Fixed in 10.0.14393.9512, 10.0.17763.9245 +10 CWE-59
Priority LOW 38

Use after free in Windows Message Queuing allows an unauthorized attacker to execute code over a network.

CVSS 3.1HIGH 8.1 Network No auth No interaction EPSS 0.00707 Published 2026-09-08 Fixed in 10.0.19044.7725, 10.0.19045.7725 +6 CWE-416
Priority LOW 38

Heap-based buffer overflow in Windows Hello allows an authorized attacker to elevate privileges locally.

CVSS 3.1HIGH 8.2 Local High privileges No interaction EPSS 0.00348 Published 2026-09-08 Fixed in 10.0.17763.9245, 10.0.19044.7725 +5 CWE-122
Priority LOW 38

Out-of-bounds read in Windows NTFS allows an unauthorized attacker to elevate privileges locally.

CVSS 3.1HIGH 8.4 Local No auth No interaction EPSS 0.00337 Published 2026-09-08 Fixed in 10.0.14393.9512, 10.0.17763.9245 +10 CWE-125
Priority LOW 38

Use after free in IP Helper allows an unauthorized attacker to execute code over a network.

CVSS 3.1HIGH 8.1 Network No auth No interaction EPSS 0.00707 Published 2026-09-08 Fixed in 10.0.14393.9512, 10.0.17763.9245 +10 CWE-416
Priority LOW 38

Heap-based buffer overflow in Windows USB Video Driver allows an authorized attacker to elevate privileges locally.

CVSS 3.1HIGH 8.2 Local High privileges No interaction EPSS 0.00348 Published 2026-09-08 Fixed in 10.0.17763.9245, 10.0.19044.7725 +7 CWE-122
Priority LOW 38

Out-of-bounds read in Windows Hyper-V allows an authorized attacker to elevate privileges locally.

CVSS 3.1HIGH 8.2 Local High privileges No interaction EPSS 0.00348 Published 2026-09-08 Fixed in 10.0.14393.9512, 10.0.17763.9245 +8 CWE-122
Priority LOW 38

Double free in Windows Credential Guard allows an authorized attacker to elevate privileges locally.

CVSS 3.1HIGH 8.2 Local High privileges No interaction EPSS 0.00348 Published 2026-09-08 Fixed in 10.0.26100.9445, 10.0.26200.9445 +2 CWE-415
Priority LOW 38

Use after free in Windows SMB Client allows an unauthorized attacker to execute code over a network.

CVSS 3.1HIGH 8.1 Network No auth No interaction EPSS 0.00707 Published 2026-09-08 Fixed in 10.0.22631.7582, 10.0.26100.9445 +4 CWE-416
Priority LOW 38

Heap-based buffer overflow in Windows Secure Kernel Mode allows an authorized attacker to elevate privileges locally.

CVSS 3.1HIGH 8.2 Local High privileges No interaction EPSS 0.00348 Published 2026-09-08 Fixed in 10.0.14393.9512, 10.0.17763.9245 +8 CWE-122
Priority LOW 38

Heap-based buffer overflow in Windows NTFS allows an authorized attacker to elevate privileges over a network.

CVSS 3.1HIGH 8.0 Network Low privileges User interaction EPSS 0.00768 Published 2026-09-08 Fixed in 10.0.17763.9245, 10.0.19044.7725 +7 CWE-122
Priority LOW 38

Heap-based buffer overflow in Windows DHCP Server allows an authorized attacker to execute code over an adjacent network.

CVSS 3.1HIGH 8.0 Adjacent network Low privileges No interaction EPSS 0.00576 Published 2026-09-08 Fixed in 10.0.14393.9512, 10.0.17763.9245 +10 CWE-122
Priority LOW 38

Integer overflow or wraparound in Windows Secure Kernel Mode allows an authorized attacker to elevate privileges locally.

CVSS 3.1HIGH 8.2 Local High privileges No interaction EPSS 0.00348 Published 2026-09-08 Fixed in 10.0.14393.9512, 10.0.17763.9245 +8 CWE-190
Priority LOW 38

Heap-based buffer overflow in Windows Biometric Service allows an authorized attacker to elevate privileges over a network.

CVSS 3.1HIGH 8.0 Network Low privileges User interaction EPSS 0.00768 Published 2026-09-08 Fixed in 10.0.14393.9512, 10.0.17763.9245 +8 CWE-122
Priority LOW 38

Heap-based buffer overflow in Windows Hello allows an authorized attacker to elevate privileges locally.

CVSS 3.1HIGH 8.2 Local High privileges No interaction EPSS 0.00348 Published 2026-09-08 Fixed in 10.0.19044.7725, 10.0.19045.7725 +4 CWE-122
Priority LOW 38

Improper limitation of a pathname to a restricted directory ('path traversal') in Windows PowerShell allows an authorized attacker to elevate privileges over a network.

CVSS 3.1HIGH 8.0 Network Low privileges User interaction EPSS 0.00868 Published 2026-09-08 Fixed in 10.0.14393.9512, 10.0.17763.9245 +10 CWE-22
Priority LOW 38

Heap-based buffer overflow in Windows Text Shaping allows an unauthorized attacker to execute code over a network.

CVSS 3.1HIGH 8.1 Network No auth No interaction EPSS 0.00707 Published 2026-09-08 Fixed in 10.0.14393.9512, 10.0.17763.9245 +10 CWE-122
Priority LOW 38

Heap-based buffer overflow in Windows DHCP Client allows an authorized attacker to elevate privileges over an adjacent network.

CVSS 3.1HIGH 8.0 Adjacent network Low privileges No interaction EPSS 0.00576 Published 2026-09-08 Fixed in 10.0.26100.9445, 10.0.26200.9445 +1 CWE-122
Priority LOW 38

Heap-based buffer overflow in Windows Biometric Service allows an authorized attacker to elevate privileges over a network.

CVSS 3.1HIGH 8.0 Network Low privileges User interaction EPSS 0.00768 Published 2026-09-08 Fixed in 10.0.14393.9512, 10.0.17763.9245 +8 CWE-122
Priority LOW 38

Heap-based buffer overflow in Windows Biometric Service allows an authorized attacker to elevate privileges over a network.

CVSS 3.1HIGH 8.0 Network Low privileges User interaction EPSS 0.00768 Published 2026-09-08 Fixed in 10.0.14393.9512, 10.0.17763.9245 +8 CWE-122
Priority LOW 38

Heap-based buffer overflow in Windows Spaceport.sys allows an authorized attacker to elevate privileges over a network.

CVSS 3.1HIGH 8.0 Network Low privileges User interaction EPSS 0.00768 Published 2026-09-08 Fixed in 10.0.14393.9512, 10.0.17763.9245 +10 CWE-122
Priority LOW 38

Heap-based buffer overflow in Windows NTFS allows an unauthorized attacker to execute code locally.

CVSS 3.1HIGH 8.4 Local No auth No interaction EPSS 0.00364 Published 2026-09-08 Fixed in 10.0.14393.9512, 10.0.17763.9245 +10 CWE-122
Priority LOW 38

Heap-based buffer overflow in Windows HTTP Print Provider allows an authorized attacker to execute code over a network.

CVSS 3.1HIGH 8.0 Network Low privileges User interaction EPSS 0.00768 Published 2026-09-08 Fixed in 10.0.14393.9512, 10.0.17763.9245 +10 CWE-122
Priority LOW 38

Out-of-bounds read in Windows NTFS allows an authorized attacker to elevate privileges over a network.

CVSS 3.1HIGH 8.0 Network Low privileges User interaction EPSS 0.00768 Published 2026-09-08 Fixed in 10.0.14393.9512, 10.0.17763.9245 +10 CWE-125
Priority LOW 38

Stack-based buffer overflow in Windows USB Driver allows an authorized attacker to elevate privileges over a network.

CVSS 3.1HIGH 8.0 Network Low privileges User interaction EPSS 0.00768 Published 2026-09-08 Fixed in 10.0.17763.9245, 10.0.19044.7725 +7 CWE-121
Priority LOW 38

Heap-based buffer overflow in Windows Enterprise App Management allows an authorized attacker to elevate privileges over a network.

CVSS 3.1HIGH 8.0 Network Low privileges User interaction EPSS 0.00768 Published 2026-09-08 Fixed in 10.0.14393.9512, 10.0.17763.9245 +10 CWE-122
Priority LOW 38

Heap-based buffer overflow in Windows NTFS allows an unauthorized attacker to execute code locally.

CVSS 3.1HIGH 8.4 Local No auth No interaction EPSS 0.00364 Published 2026-09-08 Fixed in 10.0.14393.9512, 10.0.17763.9245 +10 CWE-122
Priority LOW 38

Heap-based buffer overflow in Windows Error Reporting allows an authorized attacker to elevate privileges over a network.

CVSS 3.1HIGH 8.0 Network Low privileges User interaction EPSS 0.00768 Published 2026-09-08 Fixed in 10.0.14393.9512, 10.0.17763.9245 +10 CWE-122
Priority LOW 38

Out-of-bounds read in Windows BitLocker allows an authorized attacker to elevate privileges over a network.

CVSS 3.1HIGH 8.0 Network Low privileges User interaction EPSS 0.00768 Published 2026-09-08 Fixed in 10.0.14393.9512, 10.0.17763.9245 +10 CWE-125
Priority LOW 38

Incorrect conversion between numeric types in Microsoft JScript allows an unauthorized attacker to execute code over a network.

CVSS 3.1HIGH 8.1 Network No auth No interaction EPSS 0.00707 Published 2026-09-08 Fixed in 10.0.14393.9512, 10.0.17763.9245 +10 CWE-681
Priority LOW 38

Out-of-bounds read in Windows VOLSNAP.SYS allows an authorized attacker to elevate privileges over a network.

CVSS 3.1HIGH 8.0 Network Low privileges User interaction EPSS 0.00768 Published 2026-09-08 Fixed in 10.0.14393.9512, 10.0.17763.9245 +10 CWE-125
Priority LOW 38

Heap-based buffer overflow in Windows USB Video Driver allows an authorized attacker to elevate privileges over a network.

CVSS 3.1HIGH 8.0 Network Low privileges User interaction EPSS 0.00768 Published 2026-09-08 Fixed in 10.0.14393.9512, 10.0.17763.9245 +10 CWE-122
Priority LOW 38

Heap-based buffer overflow in Volume Manager Driver allows an authorized attacker to elevate privileges over a network.

CVSS 3.1HIGH 8.0 Network Low privileges User interaction EPSS 0.00768 Published 2026-09-08 Fixed in 10.0.14393.9512, 10.0.17763.9245 +10 CWE-122
Priority LOW 38

Heap-based buffer overflow in Windows Overlay Filter allows an authorized attacker to elevate privileges over a network.

CVSS 3.1HIGH 8.0 Network Low privileges User interaction EPSS 0.00768 Published 2026-09-08 Fixed in 10.0.14393.9512, 10.0.17763.9245 +9 CWE-122
Priority LOW 38

Heap-based buffer overflow in Windows Print Spooler Components allows an authorized attacker to elevate privileges over a network.

CVSS 3.1HIGH 8.0 Network Low privileges User interaction EPSS 0.00768 Published 2026-09-08 Fixed in 10.0.14393.9512, 10.0.17763.9245 +10 CWE-122
Priority LOW 38

Out-of-bounds read in Windows NTFS allows an authorized attacker to elevate privileges over a network.

CVSS 3.1HIGH 8.0 Network Low privileges User interaction EPSS 0.00768 Published 2026-09-08 Fixed in 10.0.14393.9512, 10.0.17763.9245 +10 CWE-125
Priority LOW 38

Heap-based buffer overflow in Microsoft JScript allows an unauthorized attacker to execute code over a network.

CVSS 3.1HIGH 8.1 Network No auth No interaction EPSS 0.00707 Published 2026-09-08 Fixed in 10.0.14393.9512, 10.0.17763.9245 +9 CWE-122
Priority LOW 38

Stack-based buffer overflow in Windows Win32K allows an authorized attacker to elevate privileges over a network.

CVSS 3.1HIGH 8.0 Network Low privileges User interaction EPSS 0.00768 Published 2026-09-08 Fixed in 10.0.14393.9512, 10.0.17763.9245 +9 CWE-121
Priority LOW 38

Heap-based buffer overflow in Microsoft Standard XPS allows an authorized attacker to elevate privileges over a network.

CVSS 3.1HIGH 8.0 Network Low privileges User interaction EPSS 0.00768 Published 2026-09-08 Fixed in 10.0.14393.9512, 10.0.17763.9245 +10 CWE-122
Priority LOW 38

Heap-based buffer overflow in Windows Error Reporting allows an authorized attacker to elevate privileges over a network.

CVSS 3.1HIGH 8.0 Network Low privileges User interaction EPSS 0.00768 Published 2026-09-08 Fixed in 10.0.14393.9512, 10.0.17763.9245 +10 CWE-122
Priority LOW 38

Heap-based buffer overflow in Windows Win32K allows an authorized attacker to elevate privileges over a network.

CVSS 3.1HIGH 8.0 Network Low privileges User interaction EPSS 0.00768 Published 2026-09-08 Fixed in 16.112.26090911, 16.0.20430.20000 CWE-122
Priority LOW 38

Stack-based buffer overflow in Windows Fast FAT Driver allows an authorized attacker to elevate privileges over a network.

CVSS 3.1HIGH 8.0 Network Low privileges User interaction EPSS 0.00768 Published 2026-09-08 Fixed in 10.0.14393.9512, 10.0.17763.9245 +10 CWE-121
Priority LOW 38

Stack-based buffer overflow in Windows NTFS allows an authorized attacker to elevate privileges over a network.

CVSS 3.1HIGH 8.0 Network Low privileges User interaction EPSS 0.00768 Published 2026-09-08 Fixed in 10.0.14393.9512, 10.0.17763.9245 +10 CWE-121
Priority LOW 38

Stack-based buffer overflow in Windows NTFS allows an authorized attacker to elevate privileges over a network.

CVSS 3.1HIGH 8.0 Network Low privileges User interaction EPSS 0.00768 Published 2026-09-08 Fixed in 10.0.14393.9512, 10.0.17763.9245 +10 CWE-121
Priority LOW 38

Integer underflow (wrap or wraparound) in Windows GDI+ allows an authorized attacker to elevate privileges over a network.

CVSS 3.1HIGH 8.0 Network Low privileges User interaction EPSS 0.00768 Published 2026-09-08 Fixed in 10.0.14393.9512, 10.0.17763.9245 +10 CWE-122
Priority LOW 37

Untrusted pointer dereference in Windows ALPC allows an authorized attacker to elevate privileges locally.

CVSS 3.1HIGH 8.2 Local High privileges No interaction EPSS 0.00291 Published 2026-09-08 Fixed in 10.0.17763.9245, 10.0.19044.7725 +7 CWE-822
Priority LOW 36

Heap-based buffer overflow in Microsoft Graphics Component allows an authorized attacker to execute code locally.

CVSS 3.1HIGH 7.8 Local Low privileges No interaction EPSS 0.00333 Published 2026-09-08 Fixed in 10.0.14393.9512, 10.0.17763.9245 +10 CWE-122
Priority LOW 36

Heap-based buffer overflow in Windows NTFS allows an authorized attacker to elevate privileges locally.

CVSS 3.1HIGH 7.8 Local Low privileges No interaction EPSS 0.00333 Published 2026-09-08 Fixed in 10.0.14393.9512, 10.0.17763.9245 +10 CWE-122
Priority LOW 36

Stack-based buffer overflow in Microsoft Graphics Component allows an authorized attacker to elevate privileges locally.

CVSS 3.1HIGH 7.8 Local Low privileges No interaction EPSS 0.00333 Published 2026-09-08 Fixed in 10.0.22631.7582, 10.0.26100.9445 +4 CWE-121
Priority LOW 36

Heap-based buffer overflow in Windows Biometric Service allows an authorized attacker to elevate privileges locally.

CVSS 3.1HIGH 7.8 Local Low privileges No interaction EPSS 0.00333 Published 2026-09-08 Fixed in 10.0.14393.9512, 10.0.17763.9245 +8 CWE-122
Priority LOW 36

Heap-based buffer overflow in Windows Biometric Service allows an authorized attacker to elevate privileges locally.

CVSS 3.1HIGH 7.8 Local Low privileges No interaction EPSS 0.00333 Published 2026-09-08 Fixed in 10.0.14393.9512, 10.0.17763.9245 +8 CWE-122
Priority LOW 36

Heap-based buffer overflow in Windows Biometric Service allows an authorized attacker to elevate privileges locally.

CVSS 3.1HIGH 7.8 Local Low privileges No interaction EPSS 0.00333 Published 2026-09-08 Fixed in 10.0.14393.9512, 10.0.17763.9245 +8 CWE-122
Priority LOW 36

Heap-based buffer overflow in Windows Biometric Service allows an authorized attacker to elevate privileges locally.

CVSS 3.1HIGH 7.8 Local Low privileges No interaction EPSS 0.00333 Published 2026-09-08 Fixed in 10.0.14393.9512, 10.0.17763.9245 +8 CWE-122
Priority LOW 36

Heap-based buffer overflow in Windows Biometric Service allows an authorized attacker to elevate privileges locally.

CVSS 3.1HIGH 7.8 Local Low privileges No interaction EPSS 0.00333 Published 2026-09-08 Fixed in 10.0.14393.9512, 10.0.17763.9245 +8 CWE-122
Priority LOW 36

Heap-based buffer overflow in Windows Biometric Service allows an authorized attacker to elevate privileges locally.

CVSS 3.1HIGH 7.8 Local Low privileges No interaction EPSS 0.00333 Published 2026-09-08 Fixed in 10.0.14393.9512, 10.0.17763.9245 +8 CWE-122
Priority LOW 36

Heap-based buffer overflow in Windows Biometric Service allows an authorized attacker to elevate privileges locally.

CVSS 3.1HIGH 7.8 Local Low privileges No interaction EPSS 0.00333 Published 2026-09-08 Fixed in 10.0.14393.9512, 10.0.17763.9245 +8 CWE-122
Priority LOW 36

Heap-based buffer overflow in Windows Biometric Service allows an authorized attacker to elevate privileges locally.

CVSS 3.1HIGH 7.8 Local Low privileges No interaction EPSS 0.00333 Published 2026-09-08 Fixed in 10.0.14393.9512, 10.0.17763.9245 +8 CWE-122
Priority LOW 36

Use after free in Windows Biometric Service allows an authorized attacker to elevate privileges locally.

CVSS 3.1HIGH 7.8 Local Low privileges No interaction EPSS 0.00333 Published 2026-09-08 Fixed in 10.0.14393.9512, 10.0.17763.9245 +8 CWE-416
Priority LOW 36

Heap-based buffer overflow in Windows Biometric Service allows an authorized attacker to elevate privileges locally.

CVSS 3.1HIGH 7.8 Local Low privileges No interaction EPSS 0.00333 Published 2026-09-08 Fixed in 10.0.14393.9512, 10.0.17763.9245 +8 CWE-122
Priority LOW 36

Heap-based buffer overflow in Windows Biometric Service allows an authorized attacker to elevate privileges locally.

CVSS 3.1HIGH 7.8 Local Low privileges No interaction EPSS 0.00333 Published 2026-09-08 Fixed in 10.0.14393.9512, 10.0.17763.9245 +8 CWE-122
Priority LOW 36

Heap-based buffer overflow in Windows Biometric Service allows an authorized attacker to elevate privileges locally.

CVSS 3.1HIGH 7.8 Local Low privileges No interaction EPSS 0.00333 Published 2026-09-08 Fixed in 10.0.14393.9512, 10.0.17763.9245 +8 CWE-122
Priority LOW 36

Heap-based buffer overflow in Windows Biometric Service allows an authorized attacker to elevate privileges locally.

CVSS 3.1HIGH 7.8 Local Low privileges No interaction EPSS 0.00333 Published 2026-09-08 Fixed in 10.0.14393.9512, 10.0.17763.9245 +8 CWE-122
Priority LOW 36

Heap-based buffer overflow in Windows Biometric Service allows an authorized attacker to elevate privileges locally.

CVSS 3.1HIGH 7.8 Local Low privileges No interaction EPSS 0.00333 Published 2026-09-08 Fixed in 10.0.14393.9512, 10.0.17763.9245 +8 CWE-122
Priority LOW 36

Heap-based buffer overflow in Windows Biometric Service allows an authorized attacker to elevate privileges locally.

CVSS 3.1HIGH 7.8 Local Low privileges No interaction EPSS 0.00333 Published 2026-09-08 Fixed in 10.0.14393.9512, 10.0.17763.9245 +8 CWE-122
Priority LOW 36

Heap-based buffer overflow in Windows Biometric Service allows an authorized attacker to elevate privileges locally.

CVSS 3.1HIGH 7.8 Local Low privileges No interaction EPSS 0.00333 Published 2026-09-08 Fixed in 10.0.14393.9512, 10.0.17763.9245 +8 CWE-122
Priority LOW 36

Heap-based buffer overflow in Windows Biometric Service allows an authorized attacker to elevate privileges locally.

CVSS 3.1HIGH 7.8 Local Low privileges No interaction EPSS 0.00333 Published 2026-09-08 Fixed in 10.0.14393.9512, 10.0.17763.9245 +8 CWE-122
Priority LOW 36

Heap-based buffer overflow in Windows Biometric Service allows an authorized attacker to elevate privileges locally.

CVSS 3.1HIGH 7.8 Local Low privileges No interaction EPSS 0.00333 Published 2026-09-08 Fixed in 10.0.14393.9512, 10.0.17763.9245 +8 CWE-122
Priority LOW 36

Heap-based buffer overflow in Windows Biometric Service allows an authorized attacker to elevate privileges locally.

CVSS 3.1HIGH 7.8 Local Low privileges No interaction EPSS 0.00333 Published 2026-09-08 Fixed in 10.0.14393.9512, 10.0.17763.9245 +8 CWE-122
Priority LOW 36

Use after free in Windows Biometric Service allows an authorized attacker to elevate privileges locally.

CVSS 3.1HIGH 7.8 Local Low privileges No interaction EPSS 0.00333 Published 2026-09-08 Fixed in 10.0.14393.9512, 10.0.17763.9245 +8 CWE-400
Priority LOW 36

Heap-based buffer overflow in Windows Biometric Service allows an authorized attacker to elevate privileges locally.

CVSS 3.1HIGH 7.8 Local Low privileges No interaction EPSS 0.00333 Published 2026-09-08 Fixed in 10.0.14393.9512, 10.0.17763.9245 +8 CWE-122
Priority LOW 36

Heap-based buffer overflow in Windows Biometric Service allows an authorized attacker to elevate privileges locally.

CVSS 3.1HIGH 7.8 Local Low privileges No interaction EPSS 0.00333 Published 2026-09-08 Fixed in 10.0.14393.9512, 10.0.17763.9245 +8 CWE-122
Priority LOW 36

Heap-based buffer overflow in Windows Biometric Service allows an authorized attacker to elevate privileges locally.

CVSS 3.1HIGH 7.8 Local Low privileges No interaction EPSS 0.00333 Published 2026-09-08 Fixed in 10.0.14393.9512, 10.0.17763.9245 +8 CWE-122
Priority LOW 36

Missing authorization in Windows Kernel allows an authorized attacker to elevate privileges locally.

CVSS 3.1HIGH 7.8 Local Low privileges No interaction EPSS 0.00298 Published 2026-09-08 Fixed in 10.0.17763.9245, 10.0.19044.7725 +7 CWE-862
Priority LOW 36

Heap-based buffer overflow in Windows Work Folders allows an authorized attacker to elevate privileges locally.

CVSS 3.1HIGH 7.8 Local Low privileges No interaction EPSS 0.00333 Published 2026-09-08 Fixed in 10.0.14393.9512, 10.0.17763.9245 +9 CWE-122
Priority LOW 36

Heap-based buffer overflow in Windows Biometric Service allows an authorized attacker to elevate privileges locally.

CVSS 3.1HIGH 7.8 Local Low privileges No interaction EPSS 0.00333 Published 2026-09-08 Fixed in 10.0.14393.9512, 10.0.17763.9245 +8 CWE-122
Priority LOW 36

Heap-based buffer overflow in Windows Biometric Service allows an authorized attacker to elevate privileges locally.

CVSS 3.1HIGH 7.8 Local Low privileges No interaction EPSS 0.00333 Published 2026-09-08 Fixed in 10.0.14393.9512, 10.0.17763.9245 +8 CWE-122
Priority LOW 36

Release of invalid pointer or reference in Windows Device Association Service allows an authorized attacker to elevate privileges locally.

CVSS 3.1HIGH 7.8 Local Low privileges No interaction EPSS 0.00333 Published 2026-09-08 Fixed in 10.0.14393.9512, 10.0.17763.9245 +6 CWE-763
Priority LOW 36

Null pointer dereference in Windows Biometric Service allows an authorized attacker to elevate privileges locally.

CVSS 3.1HIGH 7.8 Local Low privileges No interaction EPSS 0.00333 Published 2026-09-08 Fixed in 10.0.14393.9512, 10.0.17763.9245 +8 CWE-476
Priority LOW 36

Heap-based buffer overflow in Windows Biometric Service allows an authorized attacker to elevate privileges locally.

CVSS 3.1HIGH 7.8 Local Low privileges No interaction EPSS 0.00333 Published 2026-09-08 Fixed in 10.0.14393.9512, 10.0.17763.9245 +8 CWE-122
Priority LOW 36

Heap-based buffer overflow in Windows Biometric Service allows an authorized attacker to elevate privileges locally.

CVSS 3.1HIGH 7.8 Local Low privileges No interaction EPSS 0.00333 Published 2026-09-08 Fixed in 10.0.14393.9512, 10.0.17763.9245 +8 CWE-122
Priority LOW 36

Heap-based buffer overflow in Windows Biometric Service allows an authorized attacker to elevate privileges locally.

CVSS 3.1HIGH 7.8 Local Low privileges No interaction EPSS 0.00333 Published 2026-09-08 Fixed in 10.0.14393.9512, 10.0.17763.9245 +8 CWE-122
Priority LOW 36

Heap-based buffer overflow in Windows Biometric Service allows an authorized attacker to elevate privileges locally.

CVSS 3.1HIGH 7.8 Local Low privileges No interaction EPSS 0.00333 Published 2026-09-08 Fixed in 10.0.14393.9512, 10.0.17763.9245 +8 CWE-122
Priority LOW 36

Missing authorization in Data Sharing Service Client allows an authorized attacker to elevate privileges locally.

CVSS 3.1HIGH 7.8 Local Low privileges No interaction EPSS 0.00298 Published 2026-09-08 Fixed in 10.0.14393.9512, 10.0.17763.9245 +8 CWE-862
Priority LOW 36

Heap-based buffer overflow in Windows Biometric Service allows an authorized attacker to elevate privileges locally.

CVSS 3.1HIGH 7.8 Local Low privileges No interaction EPSS 0.00333 Published 2026-09-08 Fixed in 10.0.14393.9512, 10.0.17763.9245 +8 CWE-122
Priority LOW 36

Heap-based buffer overflow in Windows Biometric Service allows an authorized attacker to elevate privileges locally.

CVSS 3.1HIGH 7.8 Local Low privileges No interaction EPSS 0.00333 Published 2026-09-08 Fixed in 10.0.14393.9512, 10.0.17763.9245 +8 CWE-122
Priority LOW 36

Integer overflow or wraparound in Windows Biometric Service allows an authorized attacker to elevate privileges locally.

CVSS 3.1HIGH 7.8 Local Low privileges No interaction EPSS 0.00333 Published 2026-09-08 Fixed in 10.0.14393.9512, 10.0.17763.9245 +8 CWE-190
Priority LOW 36

Heap-based buffer overflow in Windows Biometric Service allows an authorized attacker to elevate privileges locally.

CVSS 3.1HIGH 7.8 Local Low privileges No interaction EPSS 0.00333 Published 2026-09-08 Fixed in 10.0.14393.9512, 10.0.17763.9245 +8 CWE-122
Priority LOW 36

Heap-based buffer overflow in Windows Biometric Service allows an authorized attacker to elevate privileges locally.

CVSS 3.1HIGH 7.8 Local Low privileges No interaction EPSS 0.00333 Published 2026-09-08 Fixed in 10.0.14393.9512, 10.0.17763.9245 +8 CWE-122
Priority LOW 36

Heap-based buffer overflow in Windows Biometric Service allows an authorized attacker to elevate privileges locally.

CVSS 3.1HIGH 7.8 Local Low privileges No interaction EPSS 0.00333 Published 2026-09-08 Fixed in 10.0.14393.9512, 10.0.17763.9245 +8 CWE-122
Priority LOW 36

Heap-based buffer overflow in Windows Biometric Service allows an authorized attacker to elevate privileges locally.

CVSS 3.1HIGH 7.8 Local Low privileges No interaction EPSS 0.00333 Published 2026-09-08 Fixed in 10.0.14393.9512, 10.0.17763.9245 +8 CWE-122
Priority LOW 36

Heap-based buffer overflow in Windows Biometric Service allows an authorized attacker to elevate privileges locally.

CVSS 3.1HIGH 7.8 Local Low privileges No interaction EPSS 0.00333 Published 2026-09-08 Fixed in 10.0.14393.9512, 10.0.17763.9245 +8 CWE-122
Priority LOW 36

Heap-based buffer overflow in Windows Biometric Service allows an authorized attacker to elevate privileges locally.

CVSS 3.1HIGH 7.8 Local Low privileges No interaction EPSS 0.00333 Published 2026-09-08 Fixed in 10.0.14393.9512, 10.0.17763.9245 +8 CWE-122
Priority LOW 36

Heap-based buffer overflow in Windows Biometric Service allows an authorized attacker to elevate privileges locally.

CVSS 3.1HIGH 7.8 Local Low privileges No interaction EPSS 0.00333 Published 2026-09-08 Fixed in 10.0.14393.9512, 10.0.17763.9245 +8 CWE-122
Priority LOW 36

Heap-based buffer overflow in Windows Biometric Service allows an authorized attacker to elevate privileges locally.

CVSS 3.1HIGH 7.8 Local Low privileges No interaction EPSS 0.00333 Published 2026-09-08 Fixed in 10.0.14393.9512, 10.0.17763.9245 +8 CWE-122
Priority LOW 36

Heap-based buffer overflow in Windows Biometric Service allows an authorized attacker to elevate privileges locally.

CVSS 3.1HIGH 7.8 Local Low privileges No interaction EPSS 0.00333 Published 2026-09-08 Fixed in 10.0.14393.9512, 10.0.17763.9245 +8 CWE-122
Priority LOW 36

Heap-based buffer overflow in Windows Biometric Service allows an authorized attacker to elevate privileges locally.

CVSS 3.1HIGH 7.8 Local Low privileges No interaction EPSS 0.00333 Published 2026-09-08 Fixed in 10.0.14393.9512, 10.0.17763.9245 +8 CWE-122
Priority LOW 36

Heap-based buffer overflow in Windows Biometric Service allows an authorized attacker to elevate privileges locally.

CVSS 3.1HIGH 7.8 Local Low privileges No interaction EPSS 0.00333 Published 2026-09-08 Fixed in 10.0.14393.9512, 10.0.17763.9245 +8 CWE-122
Priority LOW 36

Heap-based buffer overflow in Windows Network Connection Broker allows an authorized attacker to elevate privileges locally.

CVSS 3.1HIGH 7.8 Local Low privileges No interaction EPSS 0.00333 Published 2026-09-08 Fixed in 10.0.14393.9512, 10.0.17763.9245 +10 CWE-122
Priority LOW 36

Use after free in Windows WebClient Service allows an authorized attacker to elevate privileges locally.

CVSS 3.1HIGH 7.8 Local Low privileges No interaction EPSS 0.00333 Published 2026-09-08 Fixed in 10.0.14393.9512, 10.0.17763.9245 +10 CWE-416
Priority LOW 36

Heap-based buffer overflow in Windows USB Driver allows an authorized attacker to elevate privileges locally.

CVSS 3.1HIGH 7.8 Local Low privileges No interaction EPSS 0.00333 Published 2026-09-08 Fixed in 10.0.19044.7725, 10.0.19045.7725 +6 CWE-122
Priority LOW 36

Heap-based buffer overflow in Storage Port Driver allows an authorized attacker to elevate privileges locally.

CVSS 3.1HIGH 7.8 Local Low privileges No interaction EPSS 0.00333 Published 2026-09-08 Fixed in 10.0.26100.9445, 10.0.26200.9445 +2 CWE-122
Priority LOW 36

Heap-based buffer overflow in Windows Fax Service allows an authorized attacker to elevate privileges locally.

CVSS 3.1HIGH 7.8 Local Low privileges No interaction EPSS 0.00333 Published 2026-09-08 Fixed in 10.0.14393.9512, 10.0.17763.9245 +10 CWE-122
Priority LOW 36

Heap-based buffer overflow in Windows Biometric Service allows an authorized attacker to elevate privileges locally.

CVSS 3.1HIGH 7.8 Local Low privileges No interaction EPSS 0.00333 Published 2026-09-08 Fixed in 10.0.14393.9512, 10.0.17763.9245 +8 CWE-122
Priority LOW 36

Improper validation of integrity check value in Windows Installer allows an authorized attacker to elevate privileges locally.

CVSS 3.1HIGH 7.8 Local Low privileges No interaction EPSS 0.0023 Published 2026-09-08 Fixed in 10.0.22631.7582, 10.0.26100.9445 +3 CWE-354
TI-2026-51143 CVE-2026-72927 · GHSA-87wg-6h8j-v8qh

Winsock Elevation of Privilege Vulnerability

Priority LOW 36

Heap-based buffer overflow in Winsock allows an authorized attacker to elevate privileges locally.

CVSS 3.1HIGH 7.8 Local Low privileges No interaction EPSS 0.00338 Published 2026-09-08 Fixed in 10.0.14393.9512, 10.0.17763.9245 +10 CWE-122
Priority LOW 36

Out-of-bounds write in Windows Spaceport.sys allows an authorized attacker to execute code locally.

CVSS 3.1HIGH 7.8 Local Low privileges No interaction EPSS 0.00333 Published 2026-09-08 Fixed in 10.0.14393.9512, 10.0.17763.9245 +10 CWE-787
Priority LOW 36

Heap-based buffer overflow in Windows NFS Portmapper allows an authorized attacker to elevate privileges locally.

CVSS 3.1HIGH 7.8 Local Low privileges No interaction EPSS 0.00333 Published 2026-09-08 Fixed in 10.0.14393.9512, 10.0.17763.9245 +10 CWE-122
Priority LOW 36

Access of resource using incompatible type ('type confusion') in Windows Core Messaging allows an authorized attacker to elevate privileges locally.

CVSS 3.1HIGH 7.8 Local Low privileges No interaction EPSS 0.00333 Published 2026-09-08 Fixed in 10.0.14393.9512, 10.0.17763.9245 +8 CWE-843
Priority LOW 36

Integer overflow or wraparound in Windows Biometric Service allows an authorized attacker to elevate privileges locally.

CVSS 3.1HIGH 7.8 Local Low privileges No interaction EPSS 0.00333 Published 2026-09-08 Fixed in 10.0.14393.9512, 10.0.17763.9245 +8 CWE-190
Priority LOW 36

Integer overflow or wraparound in Windows Biometric Service allows an authorized attacker to elevate privileges locally.

CVSS 3.1HIGH 7.8 Local Low privileges No interaction EPSS 0.00333 Published 2026-09-08 Fixed in 10.0.14393.9512, 10.0.17763.9245 +8 CWE-190
Priority LOW 36

Out-of-bounds read in Windows Spaceport.sys allows an authorized attacker to elevate privileges locally.

CVSS 3.1HIGH 7.8 Local Low privileges No interaction EPSS 0.00333 Published 2026-09-08 Fixed in 10.0.22631.7582, 10.0.26100.9445 +4 CWE-125
Priority LOW 36

Heap-based buffer overflow in Windows Print Spooler Components allows an authorized attacker to elevate privileges locally.

CVSS 3.1HIGH 7.8 Local Low privileges No interaction EPSS 0.00333 Published 2026-09-08 Fixed in 10.0.14393.9512, 10.0.17763.9245 +10 CWE-122
Priority LOW 36

Heap-based buffer overflow in Windows Win32 Kernel Subsystem allows an authorized attacker to elevate privileges locally.

CVSS 3.1HIGH 7.8 Local Low privileges No interaction EPSS 0.00333 Published 2026-09-08 Fixed in 10.0.14393.9512, 10.0.17763.9245 +10 CWE-122
Priority LOW 36

Heap-based buffer overflow in Windows Print Spooler Components allows an authorized attacker to elevate privileges locally.

CVSS 3.1HIGH 7.8 Local Low privileges No interaction EPSS 0.00333 Published 2026-09-08 Fixed in 10.0.19044.7725, 10.0.19045.7725 +6 CWE-122
Priority LOW 36

Improper handling of insufficient permissions or privileges in Windows Enterprise App Management allows an authorized attacker to elevate privileges locally.

CVSS 3.1HIGH 7.8 Local Low privileges No interaction EPSS 0.00298 Published 2026-09-08 Fixed in 10.0.14393.9512, 10.0.17763.9245 +8 CWE-280
Priority LOW 36

Use after free in Windows Hello allows an authorized attacker to elevate privileges locally.

CVSS 3.1HIGH 7.8 Local Low privileges No interaction EPSS 0.00264 Published 2026-09-08 Fixed in 10.0.19044.7725, 10.0.19045.7725 +4 CWE-416
Priority LOW 36

Out-of-bounds read in Windows Win32K allows an authorized attacker to elevate privileges locally.

CVSS 3.1HIGH 7.8 Local Low privileges No interaction EPSS 0.00333 Published 2026-09-08 Fixed in 10.0.14393.9512, 10.0.17763.9245 +10 CWE-125
Priority LOW 36

Numeric truncation error in Windows Kerberos allows an authorized attacker to elevate privileges locally.

CVSS 3.1HIGH 7.8 Local Low privileges No interaction EPSS 0.00333 Published 2026-09-08 Fixed in 10.0.17763.9245, 10.0.19044.7725 +7 CWE-122
Priority LOW 36

Heap-based buffer overflow in Windows Audio Service allows an authorized attacker to elevate privileges locally.

CVSS 3.1HIGH 7.8 Local Low privileges No interaction EPSS 0.00333 Published 2026-09-08 Fixed in 10.0.17763.9245, 10.0.19044.7725 +7 CWE-122
Priority LOW 36

Heap-based buffer overflow in Windows Credential Providers allows an authorized attacker to elevate privileges locally.

CVSS 3.1HIGH 7.8 Local Low privileges No interaction EPSS 0.00333 Published 2026-09-08 Fixed in 10.0.17763.9245, 10.0.19044.7725 +7 CWE-122
Priority LOW 36

Heap-based buffer overflow in Windows Biometric Service allows an authorized attacker to elevate privileges locally.

CVSS 3.1HIGH 7.8 Local Low privileges No interaction EPSS 0.00333 Published 2026-09-08 Fixed in 10.0.14393.9512, 10.0.17763.9245 +8 CWE-122
Priority LOW 36

Untrusted search path in Windows Smart Card allows an authorized attacker to elevate privileges locally.

CVSS 3.1HIGH 7.8 Local Low privileges No interaction EPSS 0.00457 Published 2026-09-08 Fixed in 10.0.14393.9512, 10.0.17763.9245 +10 CWE-426
Priority LOW 36

Use after free in Windows TCP/IP allows an authorized attacker to elevate privileges over a network.

CVSS 3.1HIGH 7.5 Network Low privileges No interaction EPSS 0.0057 Published 2026-09-08 Fixed in 10.0.14393.9512, 10.0.17763.9245 +10 CWE-416
Priority LOW 36

Use after free in Windows TCP/IP allows an authorized attacker to elevate privileges over a network.

CVSS 3.1HIGH 7.5 Network Low privileges No interaction EPSS 0.0057 Published 2026-09-08 Fixed in 10.0.17763.9245, 10.0.19044.7725 +7 CWE-416
Priority LOW 36

Integer overflow or wraparound in Windows Biometric Service allows an authorized attacker to elevate privileges locally.

CVSS 3.1HIGH 7.8 Local Low privileges No interaction EPSS 0.00333 Published 2026-09-08 Fixed in 10.0.14393.9512, 10.0.17763.9245 +8 CWE-122
Priority LOW 36

Heap-based buffer overflow in HID class driver allows an authorized attacker to elevate privileges locally.

CVSS 3.1HIGH 7.8 Local Low privileges No interaction EPSS 0.00333 Published 2026-09-08 Fixed in 10.0.14393.9512, 10.0.17763.9245 +10 CWE-122
Priority LOW 36

Double free in Windows Hello allows an authorized attacker to elevate privileges locally.

CVSS 3.1HIGH 7.8 Local Low privileges No interaction EPSS 0.00333 Published 2026-09-08 Fixed in 10.0.19044.7725, 10.0.19045.7725 +4 CWE-415
Priority LOW 36

Heap-based buffer overflow in Windows MIDI Service Module allows an authorized attacker to elevate privileges locally.

CVSS 3.1HIGH 7.8 Local Low privileges No interaction EPSS 0.00333 Published 2026-09-08 Fixed in 10.0.26100.9445, 10.0.26200.9445 +1 CWE-122
Priority LOW 36

Heap-based buffer overflow in Windows NTFS allows an authorized attacker to execute code locally.

CVSS 3.1HIGH 7.8 Local Low privileges No interaction EPSS 0.00333 Published 2026-09-08 Fixed in 10.0.14393.9512, 10.0.17763.9245 +10 CWE-122
Priority LOW 36

Use after free in Windows Win32K allows an authorized attacker to elevate privileges over a network.

CVSS 3.1HIGH 7.5 Network Low privileges No interaction EPSS 0.0057 Published 2026-09-08 Fixed in 10.0.14393.9512, 10.0.17763.9245 +10 CWE-416
Priority LOW 36

Heap-based buffer overflow in Windows Spaceport.sys allows an authorized attacker to elevate privileges locally.

CVSS 3.1HIGH 7.8 Local Low privileges No interaction EPSS 0.00333 Published 2026-09-08 Fixed in 10.0.14393.9512, 10.0.17763.9245 +10 CWE-122
Priority LOW 36

Heap-based buffer overflow in Windows Encrypting File System (EFS) allows an authorized attacker to elevate privileges over a network.

CVSS 3.1HIGH 7.5 Network Low privileges No interaction EPSS 0.0057 Published 2026-09-08 Fixed in 10.0.14393.9512, 10.0.17763.9245 +10 CWE-122
Priority LOW 36

Heap-based buffer overflow in Windows Kerberos allows an authorized attacker to elevate privileges locally.

CVSS 3.1HIGH 7.8 Local Low privileges No interaction EPSS 0.00333 Published 2026-09-08 Fixed in 10.0.14393.9512, 10.0.17763.9245 +10 CWE-122
Priority LOW 36

Absolute path traversal in Windows Error Reporting allows an authorized attacker to elevate privileges locally.

CVSS 3.1HIGH 7.8 Local Low privileges No interaction EPSS 0.0037 Published 2026-09-08 Fixed in 10.0.14393.9512, 10.0.17763.9245 +10 CWE-36
Priority LOW 36

Integer overflow or wraparound in Microsoft Windows Search Component allows an authorized attacker to elevate privileges locally.

CVSS 3.1HIGH 7.8 Local Low privileges No interaction EPSS 0.00333 Published 2026-09-08 Fixed in 10.0.14393.9512, 10.0.17763.9245 +10 CWE-190
Priority LOW 36

Heap-based buffer overflow in Windows Audio Service allows an authorized attacker to elevate privileges locally.

CVSS 3.1HIGH 7.8 Local Low privileges No interaction EPSS 0.00333 Published 2026-09-08 Fixed in 10.0.14393.9512, 10.0.17763.9245 +10 CWE-122
Priority LOW 36

Use after free in Windows PrintWorkflowUserSvc allows an authorized attacker to elevate privileges over a network.

CVSS 3.1HIGH 7.5 Network Low privileges No interaction EPSS 0.0057 Published 2026-09-08 Fixed in 10.0.17763.9245, 10.0.19044.7725 +7 CWE-416
Priority LOW 36

Use after free in Windows Remote Desktop Services allows an authorized attacker to execute code over a network.

CVSS 3.1HIGH 7.5 Network Low privileges No interaction EPSS 0.00663 Published 2026-09-08 Fixed in 10.0.22631.7582, 10.0.26100.9445 +3 CWE-416
Priority LOW 36

Use after free in Windows HTTP.sys allows an authorized attacker to elevate privileges over a network.

CVSS 3.1HIGH 7.5 Network Low privileges No interaction EPSS 0.0057 Published 2026-09-08 Fixed in 10.0.22631.7582, 10.0.26100.9445 +3 CWE-416
Priority LOW 36

Heap-based buffer overflow in Windows Biometric Service allows an authorized attacker to elevate privileges locally.

CVSS 3.1HIGH 7.8 Local Low privileges No interaction EPSS 0.00333 Published 2026-09-08 Fixed in 10.0.14393.9512, 10.0.17763.9245 +8 CWE-122
Priority LOW 36

Heap-based buffer overflow in Windows Biometric Service allows an authorized attacker to elevate privileges locally.

CVSS 3.1HIGH 7.8 Local Low privileges No interaction EPSS 0.00333 Published 2026-09-08 Fixed in 10.0.14393.9512, 10.0.17763.9245 +8 CWE-122
Priority LOW 36

Incorrect type conversion or cast in Microsoft Windows Search Component allows an authorized attacker to elevate privileges locally.

CVSS 3.1HIGH 7.8 Local Low privileges No interaction EPSS 0.00333 Published 2026-09-08 Fixed in 10.0.14393.9512, 10.0.17763.9245 +10 CWE-704
Priority LOW 36

Integer overflow or wraparound in Windows USB Video Driver allows an authorized attacker to elevate privileges locally.

CVSS 3.1HIGH 7.8 Local Low privileges No interaction EPSS 0.00333 Published 2026-09-08 Fixed in 10.0.14393.9512, 10.0.17763.9245 +10 CWE-190
Priority LOW 36

Heap-based buffer overflow in Windows Biometric Service allows an authorized attacker to elevate privileges locally.

CVSS 3.1HIGH 7.8 Local Low privileges No interaction EPSS 0.00333 Published 2026-09-08 Fixed in 10.0.14393.9512, 10.0.17763.9245 +8 CWE-122
Priority LOW 36

Heap-based buffer overflow in Windows Biometric Service allows an authorized attacker to elevate privileges locally.

CVSS 3.1HIGH 7.8 Local Low privileges No interaction EPSS 0.00333 Published 2026-09-08 Fixed in 10.0.14393.9512, 10.0.17763.9245 +8 CWE-122
Priority LOW 36

Out-of-bounds read in Windows CD-ROM Driver allows an authorized attacker to elevate privileges locally.

CVSS 3.1HIGH 7.8 Local Low privileges No interaction EPSS 0.00333 Published 2026-09-08 Fixed in 10.0.14393.9512, 10.0.17763.9245 +10 CWE-125
Priority LOW 36

Use after free in Windows Remote Desktop Services allows an authorized attacker to execute code over a network.

CVSS 3.1HIGH 7.5 Network Low privileges No interaction EPSS 0.00663 Published 2026-09-08 Fixed in 10.0.14393.9512, 10.0.17763.9245 +10 CWE-416
Priority LOW 36

Out-of-bounds read in Windows Spaceport.sys allows an authorized attacker to execute code locally.

CVSS 3.1HIGH 7.8 Local Low privileges No interaction EPSS 0.00333 Published 2026-09-08 Fixed in 10.0.14393.9512, 10.0.17763.9245 +10 CWE-125
Priority LOW 36

Numeric truncation error in Windows Spaceport.sys allows an authorized attacker to elevate privileges locally.

CVSS 3.1HIGH 7.8 Local Low privileges No interaction EPSS 0.00333 Published 2026-09-08 Fixed in 10.0.19044.7725, 10.0.19045.7725 +6 CWE-122
Priority LOW 36

Improper neutralization of special elements used in a command ('command injection') in Windows Program Compatibility Assistant Service allows an authorized attacker to elevate privileges locally.

CVSS 3.1HIGH 7.8 Local Low privileges No interaction EPSS 0.00322 Published 2026-09-08 Fixed in 10.0.14393.9512, 10.0.17763.9245 +8 CWE-77
Priority LOW 36

Out-of-bounds read in Windows NTFS allows an authorized attacker to elevate privileges locally.

CVSS 3.1HIGH 7.8 Local Low privileges No interaction EPSS 0.00333 Published 2026-09-08 Fixed in 10.0.14393.9512, 10.0.17763.9245 +10 CWE-125
Priority LOW 36

Missing authentication for critical function in Windows Shell allows an authorized attacker to elevate privileges locally.

CVSS 3.1HIGH 7.8 Local Low privileges No interaction EPSS 0.00298 Published 2026-09-08 Fixed in 10.0.22631.7582, 10.0.26100.9445 +3 CWE-306
Priority LOW 36

Heap-based buffer overflow in Windows Remote Desktop Services allows an authorized attacker to execute code over a network.

CVSS 3.1HIGH 7.5 Network Low privileges No interaction EPSS 0.00663 Published 2026-09-08 Fixed in 10.0.14393.9512, 10.0.17763.9245 +10 CWE-122
Priority LOW 36

Heap-based buffer overflow in Windows Error Reporting allows an authorized attacker to elevate privileges locally.

CVSS 3.1HIGH 7.8 Local Low privileges No interaction EPSS 0.00333 Published 2026-09-08 Fixed in 10.0.17763.9245, 10.0.19044.7725 +7 CWE-122
Priority LOW 36

Heap-based buffer overflow in Windows Fax Service allows an authorized attacker to elevate privileges locally.

CVSS 3.1HIGH 7.8 Local Low privileges No interaction EPSS 0.00333 Published 2026-09-08 Fixed in 10.0.14393.9512, 10.0.17763.9245 +10 CWE-122
Priority LOW 36

Stack-based buffer overflow in Windows MIDI Service Module allows an authorized attacker to elevate privileges locally.

CVSS 3.1HIGH 7.8 Local Low privileges No interaction EPSS 0.00333 Published 2026-09-08 Fixed in 10.0.26100.9445, 10.0.26200.9445 +1 CWE-121
Priority LOW 36

Heap-based buffer overflow in Windows Biometric Service allows an authorized attacker to elevate privileges locally.

CVSS 3.1HIGH 7.8 Local Low privileges No interaction EPSS 0.00333 Published 2026-09-08 Fixed in 10.0.14393.9512, 10.0.17763.9245 +8 CWE-122
Priority LOW 36

Heap-based buffer overflow in Windows Biometric Service allows an authorized attacker to elevate privileges locally.

CVSS 3.1HIGH 7.8 Local Low privileges No interaction EPSS 0.00333 Published 2026-09-08 Fixed in 10.0.14393.9512, 10.0.17763.9245 +8 CWE-122
Priority LOW 36

Untrusted pointer dereference in Windows Remote Desktop Services allows an authorized attacker to elevate privileges locally.

CVSS 3.1HIGH 7.8 Local Low privileges No interaction EPSS 0.00333 Published 2026-09-08 Fixed in 10.0.14393.9512, 10.0.17763.9245 +10 CWE-822
Priority LOW 36

Stack-based buffer overflow in Microsoft Graphics Component allows an authorized attacker to elevate privileges locally.

CVSS 3.1HIGH 7.8 Local Low privileges No interaction EPSS 0.00333 Published 2026-09-08 Fixed in 10.0.19044.7725, 10.0.19045.7725 +4 CWE-121
Priority LOW 36

Heap-based buffer overflow in Microsoft Windows Speech allows an authorized attacker to elevate privileges locally.

CVSS 3.1HIGH 7.8 Local Low privileges No interaction EPSS 0.00333 Published 2026-09-08 Fixed in 10.0.14393.9512, 10.0.17763.9245 +8 CWE-122
Priority LOW 36

Out-of-bounds read in Windows Error Reporting allows an authorized attacker to elevate privileges locally.

CVSS 3.1HIGH 7.8 Local Low privileges No interaction EPSS 0.00333 Published 2026-09-08 Fixed in 10.0.14393.9512, 10.0.17763.9245 +10 CWE-125
Priority LOW 36

Heap-based buffer overflow in Windows Audio Service allows an authorized attacker to elevate privileges locally.

CVSS 3.1HIGH 7.8 Local Low privileges No interaction EPSS 0.00333 Published 2026-09-08 Fixed in 10.0.22631.7582, 10.0.26100.9445 +3 CWE-122
Priority LOW 36

Improper limitation of a pathname to a restricted directory ('path traversal') in Windows Compressed Folder allows an authorized attacker to elevate privileges locally.

CVSS 3.1HIGH 7.8 Local Low privileges No interaction EPSS 0.0037 Published 2026-09-08 Fixed in 10.0.14393.9512, 10.0.17763.9245 +10 CWE-22
Priority LOW 36

Heap-based buffer overflow in Microsoft Windows Speech allows an authorized attacker to elevate privileges locally.

CVSS 3.1HIGH 7.8 Local Low privileges No interaction EPSS 0.00333 Published 2026-09-08 Fixed in 10.0.14393.9512, 10.0.17763.9245 +8 CWE-122
Priority LOW 36

Heap-based buffer overflow in Windows State Repository Service allows an authorized attacker to elevate privileges locally.

CVSS 3.1HIGH 7.8 Local Low privileges No interaction EPSS 0.00333 Published 2026-09-08 Fixed in 10.0.17763.9245, 10.0.19044.7725 +7 CWE-122
Priority LOW 36

Heap-based buffer overflow in Windows Error Reporting allows an authorized attacker to elevate privileges locally.

CVSS 3.1HIGH 7.8 Local Low privileges No interaction EPSS 0.00333 Published 2026-09-08 Fixed in 10.0.14393.9512, 10.0.17763.9245 +8 CWE-122
Priority LOW 36

Heap-based buffer overflow in Volume Manager Driver allows an authorized attacker to elevate privileges locally.

CVSS 3.1HIGH 7.8 Local Low privileges No interaction EPSS 0.00333 Published 2026-09-08 Fixed in 10.0.14393.9512, 10.0.17763.9245 +10 CWE-122
Priority LOW 36

Heap-based buffer overflow in Windows VOLSNAP.SYS allows an authorized attacker to execute code locally.

CVSS 3.1HIGH 7.8 Local Low privileges No interaction EPSS 0.00333 Published 2026-09-08 Fixed in 10.0.14393.9512, 10.0.17763.9245 +10 CWE-122
Priority LOW 36

Integer underflow (wrap or wraparound) in Windows Kernel Mode Driver allows an authorized attacker to elevate privileges locally.

CVSS 3.1HIGH 7.8 Local Low privileges No interaction EPSS 0.00333 Published 2026-09-08 Fixed in 10.0.14393.9512, 10.0.17763.9245 +10 CWE-122
Priority LOW 36

Heap-based buffer overflow in Windows VOLSNAP.SYS allows an authorized attacker to elevate privileges locally.

CVSS 3.1HIGH 7.8 Local Low privileges No interaction EPSS 0.00333 Published 2026-09-08 Fixed in 10.0.14393.9512, 10.0.17763.9245 +10 CWE-122
Priority LOW 36

Integer overflow or wraparound in Volume Manager Driver allows an authorized attacker to elevate privileges locally.

CVSS 3.1HIGH 7.8 Local Low privileges No interaction EPSS 0.00333 Published 2026-09-08 Fixed in 10.0.14393.9512, 10.0.17763.9245 +10 CWE-190
Priority LOW 36

Use after free in Windows Shell allows an authorized attacker to elevate privileges locally.

CVSS 3.1HIGH 7.8 Local Low privileges No interaction EPSS 0.00264 Published 2026-09-08 Fixed in 10.0.22631.7582, 10.0.26100.9445 +3 CWE-416
Priority LOW 36

Heap-based buffer overflow in Windows Overlay Filter allows an authorized attacker to elevate privileges locally.

CVSS 3.1HIGH 7.8 Local Low privileges No interaction EPSS 0.00333 Published 2026-09-08 Fixed in 10.0.14393.9512, 10.0.17763.9245 +9 CWE-122
Priority LOW 36

Heap-based buffer overflow in Active Directory Domain Services allows an authorized attacker to elevate privileges locally.

CVSS 3.1HIGH 7.8 Local Low privileges No interaction EPSS 0.00333 Published 2026-09-08 Fixed in 10.0.14393.9512, 10.0.17763.9245 +8 CWE-122
Priority LOW 36

Heap-based buffer overflow in Windows Biometric Service allows an authorized attacker to elevate privileges locally.

CVSS 3.1HIGH 7.8 Local Low privileges No interaction EPSS 0.00333 Published 2026-09-08 Fixed in 10.0.14393.9512, 10.0.17763.9245 +8 CWE-122
Priority LOW 36

Heap-based buffer overflow in Windows Win32K allows an authorized attacker to elevate privileges locally.

CVSS 3.1HIGH 7.8 Local Low privileges No interaction EPSS 0.00333 Published 2026-09-08 Fixed in 10.0.26100.9445, 10.0.26200.9445 +2 CWE-122
Priority LOW 36

Untrusted search path in Windows Storage allows an authorized attacker to elevate privileges locally.

CVSS 3.1HIGH 7.8 Local Low privileges No interaction EPSS 0.00457 Published 2026-09-08 Fixed in 10.0.14393.9512, 10.0.17763.9245 +8 CWE-426
Priority LOW 36

Access of resource using incompatible type ('type confusion') in Windows Performance Monitor allows an authorized attacker to elevate privileges locally.

CVSS 3.1HIGH 7.8 Local Low privileges No interaction EPSS 0.00333 Published 2026-09-08 Fixed in 10.0.14393.9512, 10.0.17763.9245 +10 CWE-125
Priority LOW 36

Heap-based buffer overflow in Windows Biometric Service allows an authorized attacker to elevate privileges locally.

CVSS 3.1HIGH 7.8 Local Low privileges No interaction EPSS 0.00333 Published 2026-09-08 Fixed in 10.0.14393.9512, 10.0.17763.9245 +8 CWE-122
Priority LOW 36

Out-of-bounds read in Windows NTFS allows an authorized attacker to elevate privileges locally.

CVSS 3.1HIGH 7.8 Local Low privileges No interaction EPSS 0.00333 Published 2026-09-08 Fixed in 10.0.14393.9512, 10.0.17763.9245 +10 CWE-125
Priority LOW 36

Integer overflow or wraparound in Windows Biometric Service allows an authorized attacker to elevate privileges locally.

CVSS 3.1HIGH 7.8 Local Low privileges No interaction EPSS 0.00333 Published 2026-09-08 Fixed in 10.0.14393.9512, 10.0.17763.9245 +8 CWE-190
Priority LOW 36

Out-of-bounds read in Windows USB Driver allows an authorized attacker to elevate privileges locally.

CVSS 3.1HIGH 7.8 Local Low privileges No interaction EPSS 0.00333 Published 2026-09-08 Fixed in 10.0.14393.9512, 10.0.17763.9245 +9 CWE-125
Priority LOW 36

Heap-based buffer overflow in Windows Biometric Service allows an authorized attacker to elevate privileges locally.

CVSS 3.1HIGH 7.8 Local Low privileges No interaction EPSS 0.00333 Published 2026-09-08 Fixed in 10.0.14393.9512, 10.0.17763.9245 +8 CWE-122
Priority LOW 36

Stack-based buffer overflow in Windows Storage Spaces Controller allows an authorized attacker to elevate privileges locally.

CVSS 3.1HIGH 7.8 Local Low privileges No interaction EPSS 0.00333 Published 2026-09-08 Fixed in 10.0.14393.9512, 10.0.17763.9245 +10 CWE-121
Priority LOW 36

Improper link resolution before file access ('link following') in Windows Setup Files Cleanup allows an authorized attacker to elevate privileges locally.

CVSS 3.1HIGH 7.8 Local Low privileges No interaction EPSS 0.0037 Published 2026-09-08 Fixed in 10.0.14393.9512, 10.0.17763.9245 +10 CWE-59
Priority LOW 36

Integer underflow (wrap or wraparound) in Microsoft Standard XPS allows an authorized attacker to elevate privileges locally.

CVSS 3.1HIGH 7.8 Local Low privileges No interaction EPSS 0.00333 Published 2026-09-08 Fixed in 10.0.14393.9512, 10.0.17763.9245 +10 CWE-191
Priority LOW 36

Out-of-bounds read in Windows NTFS allows an authorized attacker to elevate privileges locally.

CVSS 3.1HIGH 7.8 Local Low privileges No interaction EPSS 0.00333 Published 2026-09-08 Fixed in 10.0.14393.9512, 10.0.17763.9245 +10 CWE-125
Priority LOW 36

Heap-based buffer overflow in Microsoft Standard XPS allows an authorized attacker to elevate privileges locally.

CVSS 3.1HIGH 7.8 Local Low privileges No interaction EPSS 0.00333 Published 2026-09-08 Fixed in 10.0.14393.9512, 10.0.17763.9245 +10 CWE-122
Priority LOW 36

Heap-based buffer overflow in Microsoft Standard XPS allows an authorized attacker to elevate privileges locally.

CVSS 3.1HIGH 7.8 Local Low privileges No interaction EPSS 0.00333 Published 2026-09-08 Fixed in 10.0.14393.9512, 10.0.17763.9245 +10 CWE-122
Priority LOW 36

Heap-based buffer overflow in Microsoft Standard XPS allows an authorized attacker to elevate privileges locally.

CVSS 3.1HIGH 7.8 Local Low privileges No interaction EPSS 0.00333 Published 2026-09-08 Fixed in 10.0.14393.9512, 10.0.17763.9245 +10 CWE-122
Priority LOW 36

Heap-based buffer overflow in Microsoft Standard XPS allows an authorized attacker to elevate privileges locally.

CVSS 3.1HIGH 7.8 Local Low privileges No interaction EPSS 0.00333 Published 2026-09-08 Fixed in 10.0.14393.9512, 10.0.17763.9245 +10 CWE-122
Priority LOW 36

Buffer over-read in Windows NTFS allows an authorized attacker to execute code locally.

CVSS 3.1HIGH 7.8 Local Low privileges No interaction EPSS 0.00333 Published 2026-09-08 Fixed in 10.0.14393.9512, 10.0.17763.9245 +10 CWE-126
Priority LOW 36

Heap-based buffer overflow in Microsoft Account allows an authorized attacker to elevate privileges locally.

CVSS 3.1HIGH 7.8 Local Low privileges No interaction EPSS 0.00333 Published 2026-09-08 Fixed in 10.0.26100.9445, 10.0.26200.9445 +1 CWE-122
Priority LOW 36

Heap-based buffer overflow in Windows Print Spooler Components allows an authorized attacker to elevate privileges locally.

CVSS 3.1HIGH 7.8 Local Low privileges No interaction EPSS 0.00333 Published 2026-09-08 Fixed in 10.0.14393.9512, 10.0.17763.9245 +10 CWE-122
Priority LOW 36

Heap-based buffer overflow in Windows NTFS allows an authorized attacker to elevate privileges locally.

CVSS 3.1HIGH 7.8 Local Low privileges No interaction EPSS 0.00333 Published 2026-09-08 Fixed in 10.0.14393.9512, 10.0.17763.9245 +10 CWE-122
Priority LOW 36

Integer overflow or wraparound in Windows NTFS allows an authorized attacker to elevate privileges locally.

CVSS 3.1HIGH 7.8 Local Low privileges No interaction EPSS 0.00333 Published 2026-09-08 Fixed in 10.0.14393.9512, 10.0.17763.9245 +10 CWE-190
Priority LOW 36

Use after free in Windows Push Notifications allows an authorized attacker to elevate privileges locally.

CVSS 3.1HIGH 7.8 Local Low privileges No interaction EPSS 0.00333 Published 2026-09-08 Fixed in 10.0.19044.7725, 10.0.19045.7725 +6 CWE-416
Priority LOW 36

Out-of-bounds read in Microsoft Trace Data Helper allows an authorized attacker to elevate privileges locally.

CVSS 3.1HIGH 7.8 Local Low privileges No interaction EPSS 0.00333 Published 2026-09-08 Fixed in 10.0.26100.9445, 10.0.26200.9445 +2 CWE-125
Priority LOW 36

Use after free in Windows Server allows an authorized attacker to elevate privileges locally.

CVSS 3.1HIGH 7.8 Local Low privileges No interaction EPSS 0.00333 Published 2026-09-08 Fixed in 10.0.14393.9512, 10.0.17763.9245 +8 CWE-416
Priority LOW 36

Use after free in Windows VHD miniport driver allows an authorized attacker to elevate privileges locally.

CVSS 3.1HIGH 7.8 Local Low privileges No interaction EPSS 0.00333 Published 2026-09-08 Fixed in 10.0.17763.9245, 10.0.19044.7725 +7 CWE-416
Priority LOW 35

Heap-based buffer overflow in Windows Graphics Kernel allows an authorized attacker to execute code locally.

CVSS 3.1HIGH 7.5 Local High privileges No interaction EPSS 0.00276 Published 2026-09-08 Fixed in 10.0.17763.9245, 10.0.19044.7725 +7 CWE-122
Priority LOW 35

Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Hello allows an authorized attacker to elevate privileges locally.

CVSS 3.1HIGH 7.8 Local Low privileges No interaction EPSS 0.00202 Published 2026-09-08 Fixed in 10.0.19044.7725, 10.0.19045.7725 +4 CWE-362
Priority LOW 35

Missing authorization in Windows Hyper-V allows an authorized attacker to elevate privileges over a network.

CVSS 3.1HIGH 7.5 Network Low privileges No interaction EPSS 0.00486 Published 2026-09-08 Fixed in 10.0.17763.9245, 10.0.19044.7725 +7 CWE-862
TI-2026-44858 CVE-2026-62759 · GHSA-2xr3-822h-pwhr

Windows Netlogon Spoofing Vulnerability

Priority LOW 35

Authentication bypass by spoofing in Windows Netlogon allows an unauthorized attacker to perform spoofing over an adjacent network.

CVSS 3.1HIGH 7.5 Adjacent network No auth No interaction EPSS 0.00383 Published 2026-09-08 Fixed in 10.0.14393.9512, 10.0.17763.9245 +10 CWE-290
Priority LOW 34

Integer overflow or wraparound in Remote Desktop Client allows an unauthorized attacker to deny service over a network.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.007 Published 2026-09-08 Fixed in 10.0.14393.9512, 10.0.17763.9245 +8 CWE-190
Priority LOW 34

Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Hello allows an authorized attacker to elevate privileges locally.

CVSS 3.1HIGH 7.5 Local High privileges No interaction EPSS 0.00211 Published 2026-09-08 Fixed in 10.0.19044.7725, 10.0.19045.7725 +4 CWE-362
Priority LOW 34

Use after free in Windows Remote Desktop Services allows an authorized attacker to execute code over a network.

CVSS 3.1HIGH 7.1 Network Low privileges User interaction EPSS 0.0057 Published 2026-09-08 Fixed in 10.0.22631.7582, 10.0.26100.9445 +3 CWE-416
Priority LOW 34

Creation of temporary file in directory with insecure permissions in Windows Error Reporting allows an authorized attacker to perform tampering locally.

CVSS 3.1HIGH 7.1 Local Low privileges No interaction EPSS 0.00463 Published 2026-09-08 Fixed in 10.0.14393.9512, 10.0.17763.9245 +8 CWE-379
Priority LOW 34

Use after free in Windows NDIS allows an authorized attacker to elevate privileges over a network.

CVSS 3.1HIGH 7.1 Network Low privileges User interaction EPSS 0.0057 Published 2026-09-08 Fixed in 10.0.14393.9512, 10.0.17763.9245 +10 CWE-416
Priority LOW 34

Use after free in Windows Kernel allows an authorized attacker to elevate privileges over a network.

CVSS 3.1HIGH 7.1 Network Low privileges User interaction EPSS 0.0057 Published 2026-09-08 Fixed in 10.0.14393.9512, 10.0.17763.9245 +10 CWE-416
Priority LOW 34

Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Print Spooler Components allows an authorized attacker to elevate privileges over a network.

CVSS 3.1HIGH 7.1 Network Low privileges User interaction EPSS 0.00437 Published 2026-09-08 Fixed in 10.0.14393.9512, 10.0.17763.9245 +10 CWE-362
Priority LOW 34

Use of uninitialized resource in Remote Desktop Client allows an authorized attacker to execute code over a network.

CVSS 3.1HIGH 7.1 Network Low privileges User interaction EPSS 0.0057 Published 2026-09-08 Fixed in 10.0.14393.9512, 10.0.17763.9245 +8 CWE-908
Priority LOW 34

Heap-based buffer overflow in Windows Fast FAT Driver allows an unauthorized attacker to execute code locally.

CVSS 3.1HIGH 7.4 Local No auth No interaction EPSS 0.00288 Published 2026-09-08 Fixed in 10.0.14393.9512, 10.0.17763.9245 +10 CWE-122
Priority LOW 34

Heap-based buffer overflow in Windows NTFS allows an authorized attacker to elevate privileges over a network.

CVSS 3.1HIGH 7.1 Network Low privileges User interaction EPSS 0.0057 Published 2026-09-08 Fixed in 10.0.14393.9512, 10.0.17763.9245 +10 CWE-122
Priority LOW 34

Double free in Windows Registry allows an authorized attacker to elevate privileges over a network.

CVSS 3.1HIGH 7.1 Network Low privileges User interaction EPSS 0.0057 Published 2026-09-08 Fixed in 10.0.14393.9512, 10.0.17763.9245 +10 CWE-415
Priority LOW 34

Heap-based buffer overflow in Microsoft Standard XPS allows an authorized attacker to elevate privileges over a network.

CVSS 3.1HIGH 7.1 Network Low privileges User interaction EPSS 0.0057 Published 2026-09-08 Fixed in 10.0.14393.9512, 10.0.17763.9245 +10 CWE-122
Priority LOW 34

Heap-based buffer overflow in Microsoft Standard XPS allows an authorized attacker to elevate privileges over a network.

CVSS 3.1HIGH 7.1 Network Low privileges User interaction EPSS 0.0057 Published 2026-09-08 Fixed in 10.0.14393.9512, 10.0.17763.9245 +10 CWE-122
Priority LOW 34

Use after free in Windows Win32K allows an authorized attacker to elevate privileges over a network.

CVSS 3.1HIGH 7.1 Network Low privileges User interaction EPSS 0.0057 Published 2026-09-08 Fixed in 10.0.14393.9512, 10.0.17763.9245 +9 CWE-416
Priority LOW 34

Heap-based buffer overflow in Microsoft Standard XPS allows an authorized attacker to elevate privileges over a network.

CVSS 3.1HIGH 7.1 Network Low privileges User interaction EPSS 0.0057 Published 2026-09-08 Fixed in 10.0.14393.9512, 10.0.17763.9245 +10 CWE-122
Priority LOW 34

Heap-based buffer overflow in Microsoft Standard XPS allows an authorized attacker to elevate privileges over a network.

CVSS 3.1HIGH 7.1 Network Low privileges User interaction EPSS 0.0057 Published 2026-09-08 Fixed in 10.0.14393.9512, 10.0.17763.9245 +10 CWE-122
Priority LOW 34

Use after free in Windows Kernel allows an authorized attacker to elevate privileges over a network.

CVSS 3.1HIGH 7.1 Network Low privileges User interaction EPSS 0.0057 Published 2026-09-08 Fixed in 10.0.14393.9512, 10.0.17763.9245 +10 CWE-416
Priority LOW 34

Use after free in Windows Print Spooler Components allows an authorized attacker to elevate privileges over a network.

CVSS 3.1HIGH 7.1 Network Low privileges User interaction EPSS 0.0057 Published 2026-09-08 Fixed in 10.0.14393.9512, 10.0.17763.9245 +10 CWE-416
Priority LOW 33

Improper link resolution before file access ('link following') in Windows Resilient File System (ReFS) Deduplication Service allows an authorized attacker to elevate privileges locally.

CVSS 3.1HIGH 7.0 Local Low privileges No interaction EPSS 0.00283 Published 2026-09-08 Fixed in 10.0.26100.9445, 10.0.26200.9445 +2 CWE-59
Priority LOW 33

Heap-based buffer overflow in Windows Biometric Service allows an authorized attacker to elevate privileges locally.

CVSS 3.1HIGH 7.0 Local Low privileges No interaction EPSS 0.00281 Published 2026-09-08 Fixed in 10.0.14393.9512, 10.0.17763.9245 +8 CWE-122
Priority LOW 33

External control of file name or path in Windows Shell allows an authorized attacker to elevate privileges locally.

CVSS 3.1HIGH 7.0 Local Low privileges No interaction EPSS 0.00362 Published 2026-09-08 Fixed in 10.0.22631.7582, 10.0.26100.9445 +3 CWE-73
Priority LOW 33

Improper link resolution before file access ('link following') in Windows NTFS allows an authorized attacker to elevate privileges locally.

CVSS 3.1HIGH 7.0 Local Low privileges No interaction EPSS 0.00283 Published 2026-09-08 Fixed in 10.0.22631.7582, 10.0.26100.9445 +3 CWE-59
Priority LOW 32

Use after free in Windows Kernel allows an authorized attacker to elevate privileges locally.

CVSS 3.1HIGH 7.0 Local Low privileges No interaction EPSS 0.00264 Published 2026-09-08 Fixed in 10.0.14393.9512, 10.0.17763.9245 +10 CWE-416
Priority LOW 32

Time-of-check time-of-use (toctou) race condition in Windows MIDI Service Module allows an authorized attacker to elevate privileges locally.

CVSS 3.1HIGH 7.0 Local Low privileges No interaction EPSS 0.00202 Published 2026-09-08 Fixed in 10.0.26100.9445, 10.0.26200.9445 +1 CWE-367
Priority LOW 32

Use after free in Windows Security Center allows an authorized attacker to elevate privileges locally.

CVSS 3.1HIGH 7.0 Local Low privileges No interaction EPSS 0.00264 Published 2026-09-08 Fixed in 10.0.26100.9445, 10.0.26200.9445 +2 CWE-416
Priority LOW 32

Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Installer allows an authorized attacker to elevate privileges locally.

CVSS 3.1HIGH 7.0 Local Low privileges No interaction EPSS 0.00202 Published 2026-09-08 Fixed in 10.0.14393.9512, 10.0.17763.9245 +10 CWE-362
Priority LOW 32

No cwe for this issue in Windows Boot Manager allows an unauthorized attacker to elevate privileges with a physical attack.

CVSS 3.1MEDIUM 6.8 Physical No auth No interaction EPSS 0.00438 Published 2026-09-08 Fixed in 10.0.14393.9512, 10.0.17763.9245 +10 CWE-693
Priority LOW 32

Out-of-bounds read in Windows USB Hub Driver allows an unauthorized attacker to elevate privileges with a physical attack.

CVSS 3.1MEDIUM 6.8 Physical No auth No interaction EPSS 0.00438 Published 2026-09-08 Fixed in 10.0.14393.9512, 10.0.17763.9245 +8 CWE-125
Priority LOW 32

Heap-based buffer overflow in Windows Volume Shadow Copy allows an unauthorized attacker to elevate privileges with a physical attack.

CVSS 3.1MEDIUM 6.8 Physical No auth No interaction EPSS 0.00438 Published 2026-09-08 Fixed in 10.0.14393.9512, 10.0.17763.9245 +10 CWE-122
Priority LOW 32

Out-of-bounds read in Windows Spaceport.sys allows an authorized attacker to execute code locally.

CVSS 3.1HIGH 7.0 Local Low privileges No interaction EPSS 0.00264 Published 2026-09-08 Fixed in 10.0.17763.9245, 10.0.19044.7725 +7 CWE-125
Priority LOW 32

Integer underflow (wrap or wraparound) in Windows File History Service allows an authorized attacker to elevate privileges locally.

CVSS 3.1HIGH 7.0 Local Low privileges No interaction EPSS 0.00268 Published 2026-09-08 Fixed in 10.0.14393.9512, 10.0.17763.9245 +6 CWE-191
Priority LOW 32

Out-of-bounds read in Windows NTFS allows an authorized attacker to elevate privileges locally.

CVSS 3.1MEDIUM 6.7 Local High privileges No interaction EPSS 0.00348 Published 2026-09-08 Fixed in 10.0.14393.9512, 10.0.17763.9245 +10 CWE-125
Priority LOW 32

Heap-based buffer overflow in Windows Spaceport.sys allows an unauthorized attacker to execute code with a physical attack.

CVSS 3.1MEDIUM 6.8 Physical No auth No interaction EPSS 0.00438 Published 2026-09-08 Fixed in 10.0.14393.9512, 10.0.17763.9245 +10 CWE-122
Priority LOW 32

Heap-based buffer overflow in Windows Spaceport.sys allows an unauthorized attacker to execute code with a physical attack.

CVSS 3.1MEDIUM 6.8 Physical No auth No interaction EPSS 0.00438 Published 2026-09-08 Fixed in 10.0.14393.9512, 10.0.17763.9245 +10 CWE-122
Priority LOW 32

Heap-based buffer overflow in Windows Spaceport.sys allows an unauthorized attacker to execute code with a physical attack.

CVSS 3.1MEDIUM 6.8 Physical No auth No interaction EPSS 0.00438 Published 2026-09-08 Fixed in 10.0.14393.9512, 10.0.17763.9245 +10 CWE-122
Priority LOW 32

Use after free in Windows File History Service allows an authorized attacker to elevate privileges locally.

CVSS 3.1HIGH 7.0 Local Low privileges No interaction EPSS 0.00264 Published 2026-09-08 Fixed in 10.0.14393.9512, 10.0.17763.9245 +6 CWE-416
Priority LOW 32

Heap-based buffer overflow in Windows NTFS allows an unauthorized attacker to execute code with a physical attack.

CVSS 3.1MEDIUM 6.8 Physical No auth No interaction EPSS 0.00438 Published 2026-09-08 Fixed in 10.0.14393.9512, 10.0.17763.9245 +10 CWE-122
Priority LOW 32

Heap-based buffer overflow in Windows Credential Guard allows an authorized attacker to elevate privileges locally.

CVSS 3.1HIGH 7.0 Local Low privileges No interaction EPSS 0.00264 Published 2026-09-08 Fixed in 10.0.19044.7725, 10.0.19045.7725 +4 CWE-122
Priority LOW 32

Heap-based buffer overflow in Windows Defender Firewall Service allows an authorized attacker to elevate privileges locally.

CVSS 3.1HIGH 7.0 Local Low privileges No interaction EPSS 0.00264 Published 2026-09-08 Fixed in 10.0.14393.9512, 10.0.17763.9245 +10 CWE-122
Priority LOW 32

Double free in Windows Audio Service allows an authorized attacker to elevate privileges locally.

CVSS 3.1HIGH 7.0 Local Low privileges No interaction EPSS 0.00264 Published 2026-09-08 Fixed in 10.0.14393.9512, 10.0.17763.9245 +10 CWE-415
Priority LOW 32

Incorrect authorization in Windows Win32K allows an authorized attacker to elevate privileges locally.

CVSS 3.1HIGH 7.0 Local Low privileges No interaction EPSS 0.00236 Published 2026-09-08 Fixed in 10.0.14393.9512, 10.0.17763.9245 +10 CWE-863
Priority LOW 32

Use after free in Windows Error Reporting allows an authorized attacker to elevate privileges locally.

CVSS 3.1HIGH 7.0 Local Low privileges No interaction EPSS 0.00264 Published 2026-09-08 Fixed in 10.0.26100.9445, 10.0.26200.9445 +2 CWE-416
Priority LOW 32

Use after free in Windows Media allows an authorized attacker to elevate privileges locally.

CVSS 3.1HIGH 7.0 Local Low privileges No interaction EPSS 0.00264 Published 2026-09-08 Fixed in 10.0.14393.9512, 10.0.17763.9245 +8 CWE-416
Priority LOW 32

Use after free in Windows Bluetooth Service allows an authorized attacker to elevate privileges locally.

CVSS 3.1HIGH 7.0 Local Low privileges No interaction EPSS 0.00264 Published 2026-09-08 Fixed in 10.0.17763.9245, 10.0.19044.7725 +7 CWE-416
Priority LOW 32

Use after free in Windows ALPC allows an authorized attacker to elevate privileges locally.

CVSS 3.1HIGH 7.0 Local Low privileges No interaction EPSS 0.00264 Published 2026-09-08 Fixed in 10.0.14393.9512, 10.0.17763.9245 +10 CWE-416
Priority LOW 32

Use after free in Windows Win32K allows an authorized attacker to elevate privileges locally.

CVSS 3.1HIGH 7.0 Local Low privileges No interaction EPSS 0.00264 Published 2026-09-08 Fixed in 10.0.26100.9445, 10.0.26200.9445 +2 CWE-416
Priority LOW 32

Use after free in Windows Bluetooth Port Driver allows an authorized attacker to elevate privileges locally.

CVSS 3.1HIGH 7.0 Local Low privileges No interaction EPSS 0.00264 Published 2026-09-08 Fixed in 10.0.14393.9512, 10.0.17763.9245 +10 CWE-416
Priority LOW 32

Use after free in Windows Accounts Control allows an authorized attacker to elevate privileges locally.

CVSS 3.1HIGH 7.0 Local Low privileges No interaction EPSS 0.00264 Published 2026-09-08 Fixed in 10.0.14393.9512, 10.0.17763.9245 +8 CWE-416
Priority LOW 32

Use after free in Windows Credential Providers allows an authorized attacker to elevate privileges locally.

CVSS 3.1HIGH 7.0 Local Low privileges No interaction EPSS 0.00264 Published 2026-09-08 Fixed in 10.0.22631.7582, 10.0.26100.9445 +3 CWE-416
Priority LOW 32

Time-of-check time-of-use (toctou) race condition in Windows Win32K allows an authorized attacker to elevate privileges locally.

CVSS 3.1HIGH 7.0 Local Low privileges No interaction EPSS 0.00202 Published 2026-09-08 Fixed in 10.0.14393.9512, 10.0.17763.9245 +10 CWE-367
Priority LOW 32

Use after free in Windows Web Platform Storage allows an authorized attacker to elevate privileges locally.

CVSS 3.1HIGH 7.0 Local Low privileges No interaction EPSS 0.00264 Published 2026-09-08 Fixed in 10.0.17763.9245, 10.0.19044.7725 +7 CWE-416
Priority LOW 32

Use after free in Windows Audio Service allows an authorized attacker to elevate privileges locally.

CVSS 3.1HIGH 7.0 Local Low privileges No interaction EPSS 0.00264 Published 2026-09-08 Fixed in 10.0.14393.9512, 10.0.17763.9245 +10 CWE-416
Priority LOW 32

Use after free in Windows Host Guardian Service allows an authorized attacker to elevate privileges locally.

CVSS 3.1HIGH 7.0 Local Low privileges No interaction EPSS 0.00202 Published 2026-09-08 Fixed in 10.0.17763.9245, 10.0.19044.7725 +7 CWE-362
Priority LOW 32

Use after free in Windows Accounts Control allows an authorized attacker to elevate privileges locally.

CVSS 3.1HIGH 7.0 Local Low privileges No interaction EPSS 0.00264 Published 2026-09-08 Fixed in 10.0.14393.9512, 10.0.17763.9245 +8 CWE-416
Priority LOW 32

Use after free in Windows Win32K allows an authorized attacker to elevate privileges locally.

CVSS 3.1HIGH 7.0 Local Low privileges No interaction EPSS 0.00264 Published 2026-09-08 Fixed in 10.0.14393.9512, 10.0.17763.9245 +8 CWE-416
Priority LOW 32

Use after free in Windows Notification allows an authorized attacker to elevate privileges locally.

CVSS 3.1HIGH 7.0 Local Low privileges No interaction EPSS 0.00264 Published 2026-09-08 Fixed in 10.0.19044.7725, 10.0.19045.7725 +6 CWE-416
Priority LOW 32

Use after free in Windows Message Queuing allows an authorized attacker to elevate privileges locally.

CVSS 3.1HIGH 7.0 Local Low privileges No interaction EPSS 0.00264 Published 2026-09-08 Fixed in 10.0.14393.9512, 10.0.17763.9245 +10 CWE-416
Priority LOW 32

Out-of-bounds read in Windows Win32K allows an authorized attacker to elevate privileges locally.

CVSS 3.1HIGH 7.0 Local Low privileges No interaction EPSS 0.00264 Published 2026-09-08 Fixed in 10.0.14393.9512, 10.0.17763.9245 +10 CWE-125
Priority LOW 32

Heap-based buffer overflow in Windows Fax Service allows an authorized attacker to elevate privileges locally.

CVSS 3.1HIGH 7.0 Local Low privileges No interaction EPSS 0.00264 Published 2026-09-08 Fixed in 10.0.14393.9512, 10.0.17763.9245 +10 CWE-122
Priority LOW 32

Use after free in Windows Image Acquisition allows an authorized attacker to elevate privileges locally.

CVSS 3.1HIGH 7.0 Local Low privileges No interaction EPSS 0.00264 Published 2026-09-08 Fixed in 10.0.14393.9512, 10.0.17763.9245 +10 CWE-416
Priority LOW 32

Buffer over-read in Windows Win32K allows an authorized attacker to elevate privileges locally.

CVSS 3.1HIGH 7.0 Local Low privileges No interaction EPSS 0.00264 Published 2026-09-08 Fixed in 16.112.26090911 CWE-126
Priority LOW 32

Use after free in Windows Shell allows an authorized attacker to elevate privileges locally.

CVSS 3.1HIGH 7.0 Local Low privileges No interaction EPSS 0.00264 Published 2026-09-08 Fixed in 10.0.22631.7582, 10.0.26100.9445 +3 CWE-416
Priority LOW 32

Use after free in Microsoft Install Service allows an authorized attacker to elevate privileges locally.

CVSS 3.1HIGH 7.0 Local Low privileges No interaction EPSS 0.00264 Published 2026-09-08 Fixed in 10.0.19044.7725, 10.0.19045.7725 +6 CWE-416
Priority LOW 32

Numeric truncation error in Windows Kernel allows an authorized attacker to elevate privileges locally.

CVSS 3.1HIGH 7.0 Local Low privileges No interaction EPSS 0.00264 Published 2026-09-08 Fixed in 10.0.14393.9512, 10.0.17763.9245 +10 CWE-122
Priority LOW 32

Use after free in Windows NTFS allows an authorized attacker to elevate privileges locally.

CVSS 3.1HIGH 7.0 Local Low privileges No interaction EPSS 0.00264 Published 2026-09-08 Fixed in 10.0.14393.9512, 10.0.17763.9245 +10 CWE-416
Priority LOW 32

Heap-based buffer overflow in Windows NTFS allows an unauthorized attacker to execute code with a physical attack.

CVSS 3.1MEDIUM 6.8 Physical No auth No interaction EPSS 0.00438 Published 2026-09-08 Fixed in 10.0.14393.9512, 10.0.17763.9245 +10 CWE-122
Priority LOW 32

Use after free in Windows Work Folder Service allows an authorized attacker to elevate privileges locally.

CVSS 3.1HIGH 7.0 Local Low privileges No interaction EPSS 0.00264 Published 2026-09-08 Fixed in 10.0.14393.9512, 10.0.17763.9245 +8 CWE-416
Priority LOW 32

Use after free in Windows Audio Service allows an authorized attacker to elevate privileges locally.

CVSS 3.1HIGH 7.0 Local Low privileges No interaction EPSS 0.00264 Published 2026-09-08 Fixed in 10.0.17763.9245, 10.0.19044.7725 +7 CWE-416
Priority LOW 32

Use after free in Windows Wireless Networking allows an authorized attacker to elevate privileges locally.

CVSS 3.1HIGH 7.0 Local Low privileges No interaction EPSS 0.00264 Published 2026-09-08 Fixed in 10.0.17763.9245, 10.0.19044.7725 +7 CWE-416
Priority LOW 32

Untrusted pointer dereference in Windows Secure Kernel Mode allows an authorized attacker to elevate privileges locally.

CVSS 3.1HIGH 7.0 Local Low privileges No interaction EPSS 0.00264 Published 2026-09-08 Fixed in 10.0.19044.7725, 10.0.19045.7725 +6 CWE-822
Priority LOW 32

Use after free in Windows Image Acquisition allows an authorized attacker to elevate privileges locally.

CVSS 3.1HIGH 7.0 Local Low privileges No interaction EPSS 0.00264 Published 2026-09-08 Fixed in 10.0.14393.9512, 10.0.17763.9245 +10 CWE-416
Priority LOW 32

Use after free in Windows Win32K allows an authorized attacker to elevate privileges locally.

CVSS 3.1HIGH 7.0 Local Low privileges No interaction EPSS 0.00264 Published 2026-09-08 Fixed in 10.0.17763.9245, 10.0.19044.7725 +7 CWE-416
Priority LOW 32

Time-of-check time-of-use (toctou) race condition in Windows Kernel allows an authorized attacker to elevate privileges locally.

CVSS 3.1HIGH 7.0 Local Low privileges No interaction EPSS 0.00202 Published 2026-09-08 Fixed in 10.0.14393.9512, 10.0.17763.9245 +10 CWE-367
Priority LOW 32

Heap-based buffer overflow in Windows BitLocker allows an authorized attacker to execute code locally.

CVSS 3.1MEDIUM 6.7 Local High privileges No interaction EPSS 0.00348 Published 2026-09-08 Fixed in 10.0.14393.9512, 10.0.17763.9245 +10 CWE-122
Priority LOW 32

Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Bluetooth Service allows an authorized attacker to elevate privileges locally.

CVSS 3.1HIGH 7.0 Local Low privileges No interaction EPSS 0.00202 Published 2026-09-08 Fixed in 10.0.19044.7725, 10.0.19045.7725 +6 CWE-362
Priority LOW 32

Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Installer allows an authorized attacker to elevate privileges locally.

CVSS 3.1HIGH 7.0 Local Low privileges No interaction EPSS 0.00202 Published 2026-09-08 Fixed in 10.0.14393.9512, 10.0.17763.9245 +10 CWE-362
Priority LOW 32

Time-of-check time-of-use (toctou) race condition in Windows MIDI Service Module allows an authorized attacker to elevate privileges locally.

CVSS 3.1HIGH 7.0 Local Low privileges No interaction EPSS 0.00202 Published 2026-09-08 Fixed in 10.0.26100.9445, 10.0.26200.9445 +1 CWE-367
Priority LOW 32

Use after free in Windows Embedded Mode Service allows an authorized attacker to elevate privileges locally.

CVSS 3.1HIGH 7.0 Local Low privileges No interaction EPSS 0.00268 Published 2026-09-08 Fixed in 10.0.14393.9512, 10.0.17763.9245 +8 CWE-416
Priority LOW 32

Use after free in Windows USB Video Driver allows an authorized attacker to elevate privileges locally.

CVSS 3.1HIGH 7.0 Local Low privileges No interaction EPSS 0.00264 Published 2026-09-08 Fixed in 10.0.26100.9445, 10.0.26200.9445 +2 CWE-416
Priority LOW 32

Concurrent execution using shared resource with improper synchronization ('race condition') in Windows TCP/IP allows an authorized attacker to elevate privileges locally.

CVSS 3.1HIGH 7.0 Local Low privileges No interaction EPSS 0.00202 Published 2026-09-08 Fixed in 10.0.14393.9512, 10.0.17763.9245 +10 CWE-362
Priority LOW 32

Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Bluetooth Service allows an authorized attacker to elevate privileges locally.

CVSS 3.1HIGH 7.0 Local Low privileges No interaction EPSS 0.00202 Published 2026-09-08 Fixed in 10.0.17763.9245, 10.0.19044.7725 +7 CWE-362
Priority LOW 32

Heap-based buffer overflow in Windows Audio Service allows an authorized attacker to elevate privileges locally.

CVSS 3.1HIGH 7.0 Local Low privileges No interaction EPSS 0.00264 Published 2026-09-08 Fixed in 10.0.14393.9512, 10.0.17763.9245 +10 CWE-122
Priority LOW 32

Use after free in Windows Bluetooth Service allows an authorized attacker to elevate privileges locally.

CVSS 3.1HIGH 7.0 Local Low privileges No interaction EPSS 0.00264 Published 2026-09-08 Fixed in 10.0.17763.9245, 10.0.19044.7725 +7 CWE-416
Priority LOW 32

Concurrent execution using shared resource with improper synchronization ('race condition') in Windows TCP/IP allows an authorized attacker to elevate privileges locally.

CVSS 3.1HIGH 7.0 Local Low privileges No interaction EPSS 0.00202 Published 2026-09-08 Fixed in 10.0.14393.9512, 10.0.17763.9245 +10 CWE-362
Priority LOW 32

Integer overflow or wraparound in Windows Overlay Filter allows an authorized attacker to elevate privileges locally.

CVSS 3.1MEDIUM 6.7 Local High privileges No interaction EPSS 0.00348 Published 2026-09-08 Fixed in 10.0.14393.9512, 10.0.17763.9245 +9 CWE-125
Priority LOW 32

Use after free in Windows Error Reporting allows an authorized attacker to elevate privileges locally.

CVSS 3.1HIGH 7.0 Local Low privileges No interaction EPSS 0.00264 Published 2026-09-08 Fixed in 10.0.14393.9512, 10.0.17763.9245 +10 CWE-416
Priority LOW 32

Heap-based buffer overflow in Windows Overlay Filter allows an authorized attacker to elevate privileges locally.

CVSS 3.1MEDIUM 6.7 Local High privileges No interaction EPSS 0.00348 Published 2026-09-08 Fixed in 10.0.14393.9512, 10.0.17763.9245 +9 CWE-122
Priority LOW 32

Use after free in Windows Image Acquisition allows an authorized attacker to elevate privileges locally.

CVSS 3.1HIGH 7.0 Local Low privileges No interaction EPSS 0.00264 Published 2026-09-08 Fixed in 10.0.14393.9512, 10.0.17763.9245 +10 CWE-416
Priority LOW 32

Use after free in Windows Win32K allows an authorized attacker to elevate privileges locally.

CVSS 3.1HIGH 7.0 Local Low privileges No interaction EPSS 0.00264 Published 2026-09-08 Fixed in 10.0.14393.9512, 10.0.17763.9245 +10 CWE-416
Priority LOW 32

Use after free in Windows Win32K allows an authorized attacker to elevate privileges locally.

CVSS 3.1HIGH 7.0 Local Low privileges No interaction EPSS 0.00264 Published 2026-09-08 Fixed in 10.0.26100.9445, 10.0.26200.9445 +1 CWE-416
Priority LOW 32

Concurrent execution using shared resource with improper synchronization ('race condition') in Windows USB Video Driver allows an authorized attacker to elevate privileges locally.

CVSS 3.1HIGH 7.0 Local Low privileges No interaction EPSS 0.00202 Published 2026-09-08 Fixed in 10.0.14393.9512, 10.0.17763.9245 +10 CWE-362
Priority LOW 32

Use after free in Windows Audio Service allows an authorized attacker to elevate privileges locally.

CVSS 3.1HIGH 7.0 Local Low privileges No interaction EPSS 0.00264 Published 2026-09-08 Fixed in 10.0.14393.9512, 10.0.17763.9245 +9 CWE-416