Fixes 500 records
Priority CRITICAL 93KEV
Improper link resolution before file access ('link following') in Windows Update Stack allows an authorized attacker to elevate privileges locally.
CVSS 3.1HIGH 7.8· Local · Low privileges · No interaction · EPSS 0.00393 · Published 2026-09-08 · Fixed in 10.0.22631.7582, 10.0.26100.9445 +3 CWE-284
Priority MEDIUM 51
Double free in Microsoft Graphics Component allows an unauthorized attacker to execute code over a network.
CVSS 3.1CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.00974 · Published 2026-09-08 · Fixed in 10.0.14393.9512, 10.0.17763.9245 +10 CWE-415
Priority MEDIUM 51
Use after free in Windows Secure Socket Tunneling Protocol (SSTP) allows an unauthorized attacker to execute code over a network.
CVSS 3.1CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.00974 · Published 2026-09-08 · Fixed in 10.0.14393.9512, 10.0.17763.9245 +10 CWE-416
Priority MEDIUM 51
Use after free in Windows Internet Connection Sharing (ICS) allows an unauthorized attacker to execute code over a network.
CVSS 3.1CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.00974 · Published 2026-09-08 · Fixed in 10.0.14393.9512, 10.0.17763.9245 +10 CWE-416
Priority MEDIUM 51
Stack-based buffer overflow in Windows Netlogon allows an unauthorized attacker to execute code over a network.
CVSS 3.1CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.00974 · Published 2026-09-08 · Fixed in 10.0.14393.9512, 10.0.17763.9245 +10 CWE-121
Priority MEDIUM 51
Out-of-bounds write in Windows Imaging Component allows an unauthorized attacker to execute code over a network.
CVSS 3.1CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.00974 · Published 2026-09-08 · Fixed in 10.0.14393.9512, 10.0.17763.9245 +10 CWE-787
Priority MEDIUM 51
Stack-based buffer overflow in Windows Hyper-V allows an unauthorized attacker to execute code over a network.
CVSS 3.1CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.00974 · Published 2026-09-08 · Fixed in 10.0.14393.9512, 10.0.17763.9245 +8 CWE-121
Priority MEDIUM 51
Heap-based buffer overflow in Windows Shell allows an unauthorized attacker to execute code over a network.
CVSS 3.1CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.00974 · Published 2026-09-08 · Fixed in 10.0.14393.9512, 10.0.17763.9245 +10 CWE-122
Priority MEDIUM 51
Integer underflow (wrap or wraparound) in Microsoft Standard XPS allows an unauthorized attacker to execute code over a network.
CVSS 3.1CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.00974 · Published 2026-09-08 · Fixed in 10.0.14393.9512, 10.0.17763.9245 +10 CWE-122
Priority MEDIUM 51
Out-of-bounds write in RPC Runtime allows an unauthorized attacker to execute code over a network.
CVSS 3.1CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.00974 · Published 2026-09-08 · Fixed in 10.0.14393.9512, 10.0.17763.9245 +10 CWE-787
Priority MEDIUM 51
Heap-based buffer overflow in Windows HTTP Print Provider allows an unauthorized attacker to execute code over a network.
CVSS 3.1CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.00974 · Published 2026-09-08 · Fixed in 10.0.14393.9512, 10.0.17763.9245 +10 CWE-122
Priority MEDIUM 51
Out-of-bounds read in Windows Direct Show allows an unauthorized attacker to execute code over a network.
CVSS 3.1CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.00974 · Published 2026-09-08 · Fixed in 10.0.14393.9512, 10.0.17763.9245 +10 CWE-122
Priority MEDIUM 51
Remote Code Execution in Windows Routing and Remote Access Service (RRAS) allows attacker to gain an unauthorized access to victim's machine
CVSS 3.1CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.00974 · Published 2026-09-08 · Fixed in 10.0.14393.9512, 10.0.17763.9245 +10 CWE-122
Priority MEDIUM 51
Integer overflow or wraparound in Microsoft Windows PDF allows an unauthorized attacker to execute code over a network.
CVSS 3.1CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.00974 · Published 2026-09-08 · Fixed in 10.0.14393.9512, 10.0.17763.9245 +8 CWE-122
Priority MEDIUM 51
Use after free in Windows Message Queuing allows an unauthorized attacker to execute code over a network.
CVSS 3.1CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.00974 · Published 2026-09-08 · Fixed in 10.0.14393.9512, 10.0.17763.9245 +10 CWE-416
Priority MEDIUM 51
Use after free in Windows Remote Desktop Services allows an unauthorized attacker to execute code over a network.
CVSS 3.1CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.00974 · Published 2026-09-08 · Fixed in 10.0.14393.9512, 10.0.17763.9245 +10 CWE-416
Priority MEDIUM 51
Heap-based buffer overflow in Windows Compressed Folder allows an unauthorized attacker to execute code over a network.
CVSS 3.1CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.00974 · Published 2026-09-08 · Fixed in 10.0.14393.9512, 10.0.17763.9245 +10 CWE-122
Priority MEDIUM 51
Out-of-bounds read in Windows Event Logging Service allows an unauthorized attacker to execute code over a network.
CVSS 3.1CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.00974 · Published 2026-09-08 · Fixed in 10.0.14393.9512, 10.0.17763.9245 +10 CWE-122
Priority MEDIUM 51
Heap-based buffer overflow in Windows Microsoft DirectMusic allows an unauthorized attacker to execute code over a network.
CVSS 3.1CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.00974 · Published 2026-09-08 · Fixed in 10.0.14393.9512, 10.0.17763.9245 +10 CWE-122
Priority MEDIUM 51
Heap-based buffer overflow in Windows NTFS allows an unauthorized attacker to execute code over a network.
CVSS 3.1CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.00974 · Published 2026-09-08 · Fixed in 10.0.14393.9512, 10.0.17763.9245 +10 CWE-122
Priority MEDIUM 51
Heap-based buffer overflow in Telnet Client allows an unauthorized attacker to execute code over a network.
CVSS 3.1CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.00974 · Published 2026-09-08 · Fixed in 10.0.14393.9512, 10.0.17763.9245 +10 CWE-122
Priority MEDIUM 51
Integer overflow or wraparound in Microsoft Windows Media Foundation allows an unauthorized attacker to execute code over a network.
CVSS 3.1CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.00974 · Published 2026-09-08 · Fixed in 10.0.14393.9512, 10.0.17763.9245 +10 CWE-122
Priority MEDIUM 51
Integer underflow (wrap or wraparound) in Microsoft UxTheme Library (uxtheme.dll) allows an unauthorized attacker to execute code over a network.
CVSS 3.1CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.00974 · Published 2026-09-08 · Fixed in 10.0.14393.9512, 10.0.17763.9245 +10 CWE-122
Priority MEDIUM 51
Heap-based buffer overflow in Windows USB Mass Storage Class Driver allows an unauthorized attacker to execute code over a network.
CVSS 3.1CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.01022 · Published 2026-09-08 · Fixed in 10.0.14393.9512, 10.0.17763.9245 +10 CWE-122
Priority MEDIUM 48
Heap-based buffer overflow in Windows Kernel allows an unauthorized attacker to execute code over a network.
CVSS 3.1HIGH 8.8· Network · No auth · User interaction · EPSS 0.00819 · Published 2026-09-08 · Fixed in 10.0.14393.9512, 10.0.17763.9245 +10 CWE-122
Priority MEDIUM 48
Heap-based buffer overflow in Microsoft Windows Media Foundation allows an unauthorized attacker to execute code over a network.
CVSS 3.1HIGH 8.8· Network · No auth · User interaction · EPSS 0.00819 · Published 2026-09-08 · Fixed in 10.0.14393.9512, 10.0.17763.9245 +10 CWE-122
Priority MEDIUM 48
Heap-based buffer overflow in Microsoft Windows Media Foundation allows an unauthorized attacker to execute code over a network.
CVSS 3.1HIGH 8.8· Network · No auth · User interaction · EPSS 0.00819 · Published 2026-09-08 · Fixed in 10.0.17763.9245, 10.0.19044.7725 +7 CWE-122
Priority MEDIUM 45
Remote Code Execution in Windows Routing and Remote Access Service (RRAS) allows attacker to gain an unauthorized access to victim's machine
CVSS 3.1CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.00923 · Published 2026-09-08 · Fixed in 10.0.14393.9512, 10.0.17763.9245 +10 CWE-122
Priority MEDIUM 45
Heap-based buffer overflow in Windows RNDIS allows an unauthorized attacker to execute code over a network.
CVSS 3.1CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.00974 · Published 2026-09-08 · Fixed in 10.0.14393.9512, 10.0.17763.9245 +10 CWE-122
Priority MEDIUM 42
Heap-based buffer overflow in Remote Desktop Client allows an unauthorized attacker to execute code over a network.
CVSS 3.1HIGH 8.8· Network · No auth · User interaction · EPSS 0.00819 · Published 2026-09-08 · Fixed in 10.0.14393.9512, 10.0.17763.9245 +8 CWE-122
Priority MEDIUM 42
Heap-based buffer overflow in Windows Imaging Component allows an unauthorized attacker to execute code over a network.
CVSS 3.1HIGH 8.8· Network · No auth · User interaction · EPSS 0.00819 · Published 2026-09-08 · Fixed in 10.0.14393.9512, 10.0.17763.9245 +10 CWE-122
Priority MEDIUM 42
Heap-based buffer overflow in Microsoft Graphics Component allows an unauthorized attacker to execute code over a network.
CVSS 3.1HIGH 8.8· Network · No auth · User interaction · EPSS 0.00837 · Published 2026-09-08 · Fixed in 16.0.20326.20138, 16.0.5569.1003 +16 CWE-122
Priority MEDIUM 42
Out-of-bounds read in Windows Remote Desktop Services allows an authorized attacker to elevate privileges over a network.
CVSS 3.1HIGH 8.8· Network · Low privileges · No interaction · EPSS 0.00913 · Published 2026-09-08 · Fixed in 10.0.14393.9512, 10.0.17763.9245 +10 CWE-125
Priority MEDIUM 42
Double free in Microsoft Office Word allows an unauthorized attacker to execute code over a network.
CVSS 3.1HIGH 8.8· Network · No auth · User interaction · EPSS 0.00819 · Published 2026-09-08 · Fixed in 10.0.14393.9512, 10.0.17763.9245 +10 CWE-415
Priority MEDIUM 42
Heap-based buffer overflow in Windows Imaging Component allows an unauthorized attacker to execute code over a network.
CVSS 3.1HIGH 8.8· Network · No auth · User interaction · EPSS 0.00819 · Published 2026-09-08 · Fixed in 10.0.14393.9512, 10.0.17763.9245 +10 CWE-122
Priority MEDIUM 42
Heap-based buffer overflow in Windows Imaging Component allows an unauthorized attacker to execute code over a network.
CVSS 3.1HIGH 8.8· Network · No auth · User interaction · EPSS 0.00819 · Published 2026-09-08 · Fixed in 10.0.14393.9512, 10.0.17763.9245 +10 CWE-122
Priority MEDIUM 42
Heap-based buffer overflow in Graphic Fonts allows an unauthorized attacker to execute code over a network.
CVSS 3.1HIGH 8.8· Network · No auth · User interaction · EPSS 0.00819 · Published 2026-09-08 · Fixed in 10.0.14393.9512, 10.0.17763.9245 +10 CWE-122
Priority MEDIUM 42
Heap-based buffer overflow in Microsoft Graphics Component allows an unauthorized attacker to execute code over a network.
CVSS 3.1HIGH 8.8· Network · No auth · User interaction · EPSS 0.00819 · Published 2026-09-08 · Fixed in 10.0.14393.9512, 10.0.17763.9245 +10 CWE-122
Priority MEDIUM 42
Heap-based buffer overflow in Windows Management Services allows an authorized attacker to elevate privileges over a network.
CVSS 3.1HIGH 8.8· Network · Low privileges · No interaction · EPSS 0.00913 · Published 2026-09-08 · Fixed in 10.0.14393.9512, 10.0.17763.9245 +10 CWE-122
Priority MEDIUM 42
Stack-based buffer overflow in Microsoft Graphics Component allows an unauthorized attacker to execute code over a network.
CVSS 3.1HIGH 8.8· Network · No auth · User interaction · EPSS 0.00819 · Published 2026-09-08 · Fixed in 10.0.14393.9512, 10.0.17763.9245 +8 CWE-121
Priority MEDIUM 42
Heap-based buffer overflow in Graphic Fonts allows an unauthorized attacker to execute code over a network.
CVSS 3.1HIGH 8.8· Network · No auth · User interaction · EPSS 0.00819 · Published 2026-09-08 · Fixed in 10.0.14393.9512, 10.0.17763.9245 +10 CWE-122
Priority MEDIUM 42
Heap-based buffer overflow in Windows Media Player allows an unauthorized attacker to execute code over a network.
CVSS 3.1HIGH 8.8· Network · No auth · User interaction · EPSS 0.00819 · Published 2026-09-08 · Fixed in 10.0.14393.9512, 10.0.17763.9245 +8 CWE-122
Priority MEDIUM 42
Remote Code Execution in Windows Routing and Remote Access Service (RRAS) allows attacker to gain an unauthorized access to victim's machine
CVSS 3.1HIGH 8.8· Network · Low privileges · No interaction · EPSS 0.00913 · Published 2026-09-08 · Fixed in 10.0.14393.9512, 10.0.17763.9245 +10 CWE-122
Priority MEDIUM 42
Heap-based buffer overflow in Windows Schannel allows an unauthorized attacker to execute code over a network.
CVSS 3.1HIGH 8.8· Network · No auth · User interaction · EPSS 0.00819 · Published 2026-09-08 · Fixed in 10.0.22631.7582, 10.0.26100.9445 +4 CWE-122
Priority MEDIUM 42
Heap-based buffer overflow in Microsoft WDAC OLE DB provider for SQL allows an unauthorized attacker to execute code over a network.
CVSS 3.1HIGH 8.8· Network · No auth · User interaction · EPSS 0.00819 · Published 2026-09-08 · Fixed in 10.0.14393.9512, 10.0.17763.9245 +10 CWE-122
Priority MEDIUM 42
Integer underflow (wrap or wraparound) in Windows Remote Access Connection Manager allows an authorized attacker to execute code over a network.
CVSS 3.1HIGH 8.8· Network · Low privileges · No interaction · EPSS 0.00913 · Published 2026-09-08 · Fixed in 10.0.14393.9512, 10.0.17763.9245 +10 CWE-191
Priority MEDIUM 42
Heap-based buffer overflow in Windows Paint allows an unauthorized attacker to execute code over a network.
CVSS 3.1HIGH 8.8· Network · No auth · User interaction · EPSS 0.00819 · Published 2026-09-08 · Fixed in 10.0.14393.9512, 10.0.17763.9245 +10 CWE-122
Priority MEDIUM 42
Heap-based buffer overflow in Windows Media Player allows an unauthorized attacker to execute code over a network.
CVSS 3.1HIGH 8.8· Network · No auth · User interaction · EPSS 0.00819 · Published 2026-09-08 · Fixed in 10.0.14393.9512, 10.0.17763.9245 +10 CWE-122
Priority MEDIUM 42
Heap-based buffer overflow in Windows Imaging Component allows an unauthorized attacker to execute code over a network.
CVSS 3.1HIGH 8.8· Network · No auth · User interaction · EPSS 0.00819 · Published 2026-09-08 · Fixed in 10.0.14393.9512, 10.0.17763.9245 +10 CWE-122
Priority MEDIUM 42
Heap-based buffer overflow in Windows Network File System allows an unauthorized attacker to execute code over a network.
CVSS 3.1HIGH 8.8· Network · No auth · User interaction · EPSS 0.00819 · Published 2026-09-08 · Fixed in 10.0.14393.9512, 10.0.17763.9245 +10 CWE-122
Priority MEDIUM 42
Heap-based buffer overflow in Windows Credential Providers allows an authorized attacker to execute code over a network.
CVSS 3.1HIGH 8.8· Network · Low privileges · No interaction · EPSS 0.00913 · Published 2026-09-08 · Fixed in 10.0.26100.9445, 10.0.26200.9445 +2 CWE-122
Priority MEDIUM 42
Heap-based buffer overflow in Windows iSCSI allows an authorized attacker to execute code over a network.
CVSS 3.1HIGH 8.8· Network · Low privileges · No interaction · EPSS 0.00913 · Published 2026-09-08 · Fixed in 10.0.14393.9512, 10.0.17763.9245 +10 CWE-122
Priority MEDIUM 42
Heap-based buffer overflow in Microsoft Windows Media Foundation allows an unauthorized attacker to execute code over a network.
CVSS 3.1HIGH 8.8· Network · No auth · User interaction · EPSS 0.00819 · Published 2026-09-08 · Fixed in 10.0.14393.9512, 10.0.17763.9245 +10 CWE-122
Priority MEDIUM 42
Incorrect calculation of buffer size in Windows iSCSI allows an unauthorized attacker to execute code over a network.
CVSS 3.1HIGH 8.8· Network · No auth · User interaction · EPSS 0.00819 · Published 2026-09-08 · Fixed in 10.0.14393.9512, 10.0.17763.9245 +10 CWE-131
Priority MEDIUM 42
Heap-based buffer overflow in Windows Remote Desktop allows an unauthorized attacker to execute code over a network.
CVSS 3.1HIGH 8.8· Network · No auth · User interaction · EPSS 0.00819 · Published 2026-09-08 · Fixed in 10.0.14393.9512, 10.0.17763.9245 +10 CWE-122
Priority MEDIUM 42
Heap-based buffer overflow in Windows Event Logging Service allows an unauthorized attacker to execute code over a network.
CVSS 3.1HIGH 8.8· Network · No auth · User interaction · EPSS 0.00819 · Published 2026-09-08 · Fixed in 10.0.14393.9512, 10.0.17763.9245 +10 CWE-122
Priority MEDIUM 42
Out-of-bounds read in Windows Event Logging Service allows an unauthorized attacker to execute code over a network.
CVSS 3.1HIGH 8.8· Network · No auth · User interaction · EPSS 0.00819 · Published 2026-09-08 · Fixed in 10.0.14393.9512, 10.0.17763.9245 +10 CWE-122
Priority MEDIUM 42
Use of uninitialized resource in Remote Desktop Client allows an authorized attacker to execute code over a network.
CVSS 3.1HIGH 8.8· Network · Low privileges · No interaction · EPSS 0.00913 · Published 2026-09-08 · Fixed in 10.0.14393.9512, 10.0.17763.9245 +8 CWE-908
Priority MEDIUM 42
Stack-based buffer overflow in Windows NTFS allows an unauthorized attacker to execute code over a network.
CVSS 3.1HIGH 8.8· Network · No auth · User interaction · EPSS 0.00819 · Published 2026-09-08 · Fixed in 10.0.14393.9512, 10.0.17763.9245 +10 CWE-121
Priority MEDIUM 42
Heap-based buffer overflow in Windows URL Moniker allows an unauthorized attacker to execute code over a network.
CVSS 3.1HIGH 8.8· Network · No auth · User interaction · EPSS 0.00819 · Published 2026-09-08 · Fixed in 10.0.14393.9512, 10.0.17763.9245 +10 CWE-122
Priority MEDIUM 42
Heap-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code over a network.
CVSS 3.1HIGH 8.8· Network · No auth · User interaction · EPSS 0.00819 · Published 2026-09-08 · Fixed in 10.0.14393.9512, 10.0.17763.9245 +10 CWE-122
Priority MEDIUM 42
Heap-based buffer overflow in Windows Volume Manager Extension Driver allows an unauthorized attacker to execute code over a network.
CVSS 3.1HIGH 8.8· Network · No auth · User interaction · EPSS 0.00819 · Published 2026-09-08 · Fixed in 10.0.14393.9512, 10.0.17763.9245 +10 CWE-122
Priority MEDIUM 42
Heap-based buffer overflow in Windows Volume Manager Extension Driver allows an unauthorized attacker to execute code over a network.
CVSS 3.1HIGH 8.8· Network · No auth · User interaction · EPSS 0.00819 · Published 2026-09-08 · Fixed in 10.0.14393.9512, 10.0.17763.9245 +10 CWE-122
Priority MEDIUM 42
Heap-based buffer overflow in Remote Desktop Client allows an unauthorized attacker to execute code over a network.
CVSS 3.1HIGH 8.8· Network · No auth · User interaction · EPSS 0.00819 · Published 2026-09-08 · Fixed in 10.0.14393.9512, 10.0.17763.9245 +10 CWE-122
Priority MEDIUM 42
Heap-based buffer overflow in Microsoft Windows Media Foundation allows an unauthorized attacker to execute code over a network.
CVSS 3.1HIGH 8.8· Network · No auth · User interaction · EPSS 0.00819 · Published 2026-09-08 · Fixed in 10.0.26100.9445, 10.0.26200.9445 +2 CWE-122
Priority MEDIUM 42
Out-of-bounds read in Microsoft Windows Media Foundation allows an unauthorized attacker to execute code over a network.
CVSS 3.1HIGH 8.8· Network · No auth · User interaction · EPSS 0.00819 · Published 2026-09-08 · Fixed in 10.0.14393.9512, 10.0.17763.9245 +10 CWE-121
Priority MEDIUM 41
Integer overflow or wraparound in Windows iSCSI allows an unauthorized attacker to execute code over a network.
CVSS 3.1HIGH 8.8· Network · No auth · User interaction · EPSS 0.00798 · Published 2026-10-13 · Fixed in 10.0.14393.9512, 10.0.17763.9245 +10 CWE-190
Priority MEDIUM 41
Out-of-bounds read in Windows Key Distribution Center allows an unauthorized attacker to deny service over a network.
CVSS 3.1HIGH 7.5· Network · No auth · No interaction · EPSS 0.01174 · Published 2026-09-08 · Fixed in 10.0.14393.9512, 10.0.17763.9245 +10 CWE-125
Priority MEDIUM 41
Out-of-bounds read in Windows Services for NFS ONCRPC XDR Driver allows an unauthorized attacker to deny service over a network.
CVSS 3.1HIGH 7.5· Network · No auth · No interaction · EPSS 0.01174 · Published 2026-09-08 · Fixed in 10.0.14393.9512, 10.0.17763.9245 +10 CWE-125
Priority MEDIUM 41
Null pointer dereference in Windows SMB Server Network Transport Driver (srvnet.sys) allows an unauthorized attacker to deny service over a network.
CVSS 3.1HIGH 7.5· Network · No auth · No interaction · EPSS 0.01174 · Published 2026-09-08 · Fixed in 10.0.22631.7582, 10.0.26100.9445 +4 CWE-476
Priority MEDIUM 41
Buffer over-read in Windows Message Queuing Queue Manager allows an unauthorized attacker to disclose information over a network.
CVSS 3.1HIGH 7.5· Network · No auth · No interaction · EPSS 0.01027 · Published 2026-09-08 · Fixed in 10.0.14393.9512, 10.0.17763.9245 +10 CWE-126
Priority MEDIUM 41
Exposure of sensitive system information to an unauthorized control sphere in Windows Services for NFS ONCRPC XDR Driver allows an unauthorized attacker to disclose information over a network.
CVSS 3.1HIGH 7.5· Network · No auth · No interaction · EPSS 0.01027 · Published 2026-09-08 · Fixed in 10.0.14393.9512, 10.0.17763.9245 +10 CWE-497
Priority MEDIUM 41
Improper null termination in Windows Remote Desktop Protocol allows an unauthorized attacker to disclose information over a network.
CVSS 3.1HIGH 7.5· Network · No auth · No interaction · EPSS 0.01027 · Published 2026-09-08 · Fixed in 10.0.14393.9512, 10.0.17763.9245 +10 CWE-170
Priority MEDIUM 41
Out-of-bounds read in Windows Mobile Broadband allows an unauthorized attacker to disclose information over a network.
CVSS 3.1HIGH 7.5· Network · No auth · No interaction · EPSS 0.01027 · Published 2026-09-08 · Fixed in 10.0.19044.7725, 10.0.19045.7725 +4 CWE-125
Priority MEDIUM 41
Null pointer dereference in Windows IKE Extension allows an unauthorized attacker to deny service over a network.
CVSS 3.1HIGH 7.5· Network · No auth · No interaction · EPSS 0.01174 · Published 2026-09-08 · Fixed in 10.0.17763.9245, 10.0.19044.7725 +7 CWE-476
Priority MEDIUM 41
Missing release of memory after effective lifetime in Active Directory Domain Services allows an unauthorized attacker to deny service over a network.
CVSS 3.1HIGH 7.5· Network · No auth · No interaction · EPSS 0.01174 · Published 2026-09-08 · Fixed in 10.0.22631.7582, 10.0.26100.9445 +4 CWE-401
Priority MEDIUM 41
Stack-based buffer overflow in Windows Win32K allows an authorized attacker to elevate privileges over a network.
CVSS 3.1HIGH 8.8· Network · Low privileges · No interaction · EPSS 0.00768 · Published 2026-09-08 · Fixed in 10.0.17763.9245, 10.0.19044.7725 +7 CWE-121
Priority MEDIUM 41
Out-of-bounds read in Windows Kerberos allows an unauthorized attacker to deny service over a network.
CVSS 3.1HIGH 7.5· Network · No auth · No interaction · EPSS 0.01174 · Published 2026-09-08 · Fixed in 10.0.14393.9512, 10.0.17763.9245 +8 CWE-125
Priority MEDIUM 41
Untrusted pointer dereference in Windows Group Policy allows an authorized attacker to elevate privileges over a network.
CVSS 3.1HIGH 8.8· Network · Low privileges · No interaction · EPSS 0.00768 · Published 2026-09-08 · Fixed in 10.0.14393.9512, 10.0.17763.9245 +10 CWE-125
Priority MEDIUM 41
Stack-based buffer overflow in Windows Device Association Service allows an authorized attacker to elevate privileges over a network.
CVSS 3.1HIGH 8.8· Network · Low privileges · No interaction · EPSS 0.00768 · Published 2026-09-08 · Fixed in 10.0.14393.9512, 10.0.17763.9245 +10 CWE-121
Priority MEDIUM 41
Out-of-bounds read in Windows Win32K allows an authorized attacker to elevate privileges over a network.
CVSS 3.1HIGH 8.8· Network · Low privileges · No interaction · EPSS 0.00768 · Published 2026-09-08 · Fixed in 10.0.17763.9245, 10.0.19044.7725 +7 CWE-121
Priority MEDIUM 41
Heap-based buffer overflow in Virtual Hard Disk (VHD) Miniport Driver allows an authorized attacker to elevate privileges over a network.
CVSS 3.1HIGH 8.8· Network · Low privileges · No interaction · EPSS 0.00768 · Published 2026-09-08 · Fixed in 10.0.14393.9512, 10.0.17763.9245 +10 CWE-122
Priority MEDIUM 41
Authentication bypass by capture-replay in Windows Kerberos allows an authorized attacker to execute code over a network.
CVSS 3.1HIGH 8.8· Network · Low privileges · No interaction · EPSS 0.00778 · Published 2026-09-08 · Fixed in 10.0.14393.9512, 10.0.17763.9245 +10 CWE-294
Priority MEDIUM 41
Heap-based buffer overflow in Windows Connected User Experiences and Telemetry allows an authorized attacker to elevate privileges over a network.
CVSS 3.1HIGH 8.8· Network · Low privileges · No interaction · EPSS 0.00768 · Published 2026-09-08 · Fixed in 10.0.17763.9245, 10.0.19044.7725 +7 CWE-122
Priority MEDIUM 41
Out-of-bounds read in Windows exFAT File System allows an authorized attacker to elevate privileges over a network.
CVSS 3.1HIGH 8.8· Network · Low privileges · No interaction · EPSS 0.00768 · Published 2026-09-08 · Fixed in 10.0.14393.9512, 10.0.17763.9245 +10 CWE-125
Priority MEDIUM 41
Missing release of memory after effective lifetime in Windows TCP/IP allows an unauthorized attacker to deny service over a network.
CVSS 3.1HIGH 7.5· Network · No auth · No interaction · EPSS 0.01174 · Published 2026-09-08 · Fixed in 10.0.22631.7582, 10.0.26100.9445 +4 CWE-401
Priority MEDIUM 41
Null pointer dereference in Windows IKE Extension allows an unauthorized attacker to deny service over a network.
CVSS 3.1HIGH 7.5· Network · No auth · No interaction · EPSS 0.01174 · Published 2026-09-08 · Fixed in 10.0.22631.7582, 10.0.26100.9445 +4 CWE-476
Priority MEDIUM 41
Heap-based buffer overflow in Windows Spaceport.sys allows an authorized attacker to elevate privileges over a network.
CVSS 3.1HIGH 8.8· Network · Low privileges · No interaction · EPSS 0.00768 · Published 2026-09-08 · Fixed in 10.0.14393.9512, 10.0.17763.9245 +8 CWE-122
Priority MEDIUM 41
Out-of-bounds read in Windows LDAP - Lightweight Directory Access Protocol allows an unauthorized attacker to deny service over a network.
CVSS 3.1HIGH 7.5· Network · No auth · No interaction · EPSS 0.01174 · Published 2026-09-08 · Fixed in 10.0.14393.9512, 10.0.17763.9245 +10 CWE-125
Priority MEDIUM 41
Out-of-bounds read in BranchCache allows an unauthorized attacker to deny service over a network.
CVSS 3.1HIGH 7.5· Network · No auth · No interaction · EPSS 0.01174 · Published 2026-09-08 · Fixed in 10.0.14393.9512, 10.0.17763.9245 +10 CWE-125
Priority MEDIUM 41
Out-of-bounds read in Windows Message Queuing Queue Manager allows an unauthorized attacker to deny service over a network.
CVSS 3.1HIGH 7.5· Network · No auth · No interaction · EPSS 0.01174 · Published 2026-09-08 · Fixed in 10.0.14393.9512, 10.0.17763.9245 +10 CWE-125
Priority MEDIUM 40
Heap-based buffer overflow in Windows Error Reporting allows an authorized attacker to elevate privileges locally.
CVSS 3.1HIGH 8.8· Local · Low privileges · No interaction · EPSS 0.00333 · Published 2026-09-08 · Fixed in 10.0.14393.9512, 10.0.17763.9245 +10 CWE-122
Priority MEDIUM 40
Untrusted pointer dereference in Windows Hyper-V allows an authorized attacker to execute code locally.
CVSS 3.1HIGH 8.8· Local · Low privileges · No interaction · EPSS 0.00333 · Published 2026-09-08 · Fixed in 10.0.22631.7582, 10.0.26100.9445 +4 CWE-822
Priority MEDIUM 40
Improper validation of consistency within input in Windows TCP/IP allows an unauthorized attacker to bypass a security feature over a network.
CVSS 3.1HIGH 7.5· Network · No auth · No interaction · EPSS 0.00826 · Published 2026-09-08 · Fixed in 10.0.14393.9512, 10.0.17763.9245 +10 CWE-1288
Priority MEDIUM 40
Use after free in Windows Hello allows an authorized attacker to elevate privileges locally.
CVSS 3.1HIGH 8.8· Local · Low privileges · No interaction · EPSS 0.00333 · Published 2026-09-08 · Fixed in 10.0.19044.7725, 10.0.19045.7725 +4 CWE-416
Priority MEDIUM 40
Use after free in Windows Hello allows an authorized attacker to elevate privileges locally.
CVSS 3.1HIGH 8.8· Local · Low privileges · No interaction · EPSS 0.00333 · Published 2026-09-08 · Fixed in 10.0.22631.7582, 10.0.26100.9445 +2 CWE-416
Priority LOW 39
Improper link resolution before file access ('link following') in Windows Shell allows an unauthorized attacker to perform spoofing over a network.
CVSS 3.1HIGH 8.1· Network · No auth · User interaction · EPSS 0.00849 · Published 2026-09-08 · Fixed in 10.0.14393.9512, 10.0.17763.9245 +10 CWE-59
Priority LOW 38
Use after free in Windows Message Queuing allows an unauthorized attacker to execute code over a network.
CVSS 3.1HIGH 8.1· Network · No auth · No interaction · EPSS 0.00707 · Published 2026-09-08 · Fixed in 10.0.19044.7725, 10.0.19045.7725 +6 CWE-416
Priority LOW 38
Untrusted pointer dereference in Windows Secure Kernel Mode allows an authorized attacker to elevate privileges locally.
CVSS 3.1HIGH 8.2· Local · High privileges · No interaction · EPSS 0.00348 · Published 2026-09-08 · Fixed in 10.0.28000.2954 CWE-822
Priority LOW 38
Heap-based buffer overflow in Windows Hello allows an authorized attacker to elevate privileges locally.
CVSS 3.1HIGH 8.2· Local · High privileges · No interaction · EPSS 0.00348 · Published 2026-09-08 · Fixed in 10.0.17763.9245, 10.0.19044.7725 +5 CWE-122
Priority LOW 38
Use after free in Reliable Multicast Transport Driver (RMCAST) allows an unauthorized attacker to execute code over a network.
CVSS 3.1HIGH 8.1· Network · No auth · No interaction · EPSS 0.00707 · Published 2026-09-08 · Fixed in 10.0.14393.9512, 10.0.17763.9245 +10 CWE-416
Priority LOW 38
Out-of-bounds read in Windows NTFS allows an unauthorized attacker to elevate privileges locally.
CVSS 3.1HIGH 8.4· Local · No auth · No interaction · EPSS 0.00337 · Published 2026-09-08 · Fixed in 10.0.14393.9512, 10.0.17763.9245 +10 CWE-125
Priority LOW 38
Use after free in IP Helper allows an unauthorized attacker to execute code over a network.
CVSS 3.1HIGH 8.1· Network · No auth · No interaction · EPSS 0.00707 · Published 2026-09-08 · Fixed in 10.0.14393.9512, 10.0.17763.9245 +10 CWE-416
Priority LOW 38
Heap-based buffer overflow in Windows USB Video Driver allows an authorized attacker to elevate privileges locally.
CVSS 3.1HIGH 8.2· Local · High privileges · No interaction · EPSS 0.00348 · Published 2026-09-08 · Fixed in 10.0.17763.9245, 10.0.19044.7725 +7 CWE-122
Priority LOW 38
Out-of-bounds read in Windows Hyper-V allows an authorized attacker to elevate privileges locally.
CVSS 3.1HIGH 8.2· Local · High privileges · No interaction · EPSS 0.00348 · Published 2026-09-08 · Fixed in 10.0.14393.9512, 10.0.17763.9245 +8 CWE-122
Priority LOW 38
Double free in Windows Credential Guard allows an authorized attacker to elevate privileges locally.
CVSS 3.1HIGH 8.2· Local · High privileges · No interaction · EPSS 0.00348 · Published 2026-09-08 · Fixed in 10.0.26100.9445, 10.0.26200.9445 +2 CWE-415
Priority LOW 38
Use after free in Windows SMB Client allows an unauthorized attacker to execute code over a network.
CVSS 3.1HIGH 8.1· Network · No auth · No interaction · EPSS 0.00707 · Published 2026-09-08 · Fixed in 10.0.22631.7582, 10.0.26100.9445 +4 CWE-416
Priority LOW 38
Remote Code Execution in Windows Routing and Remote Access Service (RRAS) allows attacker to gain an unauthorized access to victim's machine
CVSS 3.1HIGH 8.1· Network · No auth · No interaction · EPSS 0.0069 · Published 2026-09-08 · Fixed in 10.0.14393.9512, 10.0.17763.9245 +10 CWE-416
Priority LOW 38
Use after free in Windows Ancillary Function Driver for WinSock allows an unauthorized attacker to elevate privileges over a network.
CVSS 3.1HIGH 8.1· Network · No auth · No interaction · EPSS 0.00707 · Published 2026-09-08 · Fixed in 10.0.14393.9512, 10.0.17763.9245 +10 CWE-416
Priority LOW 38
Heap-based buffer overflow in Windows Secure Kernel Mode allows an authorized attacker to elevate privileges locally.
CVSS 3.1HIGH 8.2· Local · High privileges · No interaction · EPSS 0.00348 · Published 2026-09-08 · Fixed in 10.0.14393.9512, 10.0.17763.9245 +8 CWE-122
Priority LOW 38
Heap-based buffer overflow in Windows NTFS allows an authorized attacker to elevate privileges over a network.
CVSS 3.1HIGH 8.0· Network · Low privileges · User interaction · EPSS 0.00768 · Published 2026-09-08 · Fixed in 10.0.17763.9245, 10.0.19044.7725 +7 CWE-122
Priority LOW 38
Heap-based buffer overflow in Windows DHCP Server allows an authorized attacker to execute code over an adjacent network.
CVSS 3.1HIGH 8.0· Adjacent network · Low privileges · No interaction · EPSS 0.00576 · Published 2026-09-08 · Fixed in 10.0.14393.9512, 10.0.17763.9245 +10 CWE-122
Priority LOW 38
Integer overflow or wraparound in Windows Secure Kernel Mode allows an authorized attacker to elevate privileges locally.
CVSS 3.1HIGH 8.2· Local · High privileges · No interaction · EPSS 0.00348 · Published 2026-09-08 · Fixed in 10.0.14393.9512, 10.0.17763.9245 +8 CWE-190
Priority LOW 38
Heap-based buffer overflow in Windows Biometric Service allows an authorized attacker to elevate privileges over a network.
CVSS 3.1HIGH 8.0· Network · Low privileges · User interaction · EPSS 0.00768 · Published 2026-09-08 · Fixed in 10.0.14393.9512, 10.0.17763.9245 +8 CWE-122
Priority LOW 38
Heap-based buffer overflow in Windows Hello allows an authorized attacker to elevate privileges locally.
CVSS 3.1HIGH 8.2· Local · High privileges · No interaction · EPSS 0.00348 · Published 2026-09-08 · Fixed in 10.0.19044.7725, 10.0.19045.7725 +4 CWE-122
Priority LOW 38
Improper limitation of a pathname to a restricted directory ('path traversal') in Windows PowerShell allows an authorized attacker to elevate privileges over a network.
CVSS 3.1HIGH 8.0· Network · Low privileges · User interaction · EPSS 0.00868 · Published 2026-09-08 · Fixed in 10.0.14393.9512, 10.0.17763.9245 +10 CWE-22
Priority LOW 38
Heap-based buffer overflow in Windows Text Shaping allows an unauthorized attacker to execute code over a network.
CVSS 3.1HIGH 8.1· Network · No auth · No interaction · EPSS 0.00707 · Published 2026-09-08 · Fixed in 10.0.14393.9512, 10.0.17763.9245 +10 CWE-122
Priority LOW 38
Heap-based buffer overflow in Windows DHCP Client allows an authorized attacker to elevate privileges over an adjacent network.
CVSS 3.1HIGH 8.0· Adjacent network · Low privileges · No interaction · EPSS 0.00576 · Published 2026-09-08 · Fixed in 10.0.26100.9445, 10.0.26200.9445 +1 CWE-122
Priority LOW 38
Heap-based buffer overflow in Windows Biometric Service allows an authorized attacker to elevate privileges over a network.
CVSS 3.1HIGH 8.0· Network · Low privileges · User interaction · EPSS 0.00768 · Published 2026-09-08 · Fixed in 10.0.14393.9512, 10.0.17763.9245 +8 CWE-122
Priority LOW 38
Heap-based buffer overflow in Windows Link Layer Topology Discovery Protocol allows an unauthorized attacker to execute code over a network.
CVSS 3.1HIGH 8.1· Network · No auth · No interaction · EPSS 0.00707 · Published 2026-09-08 · Fixed in 10.0.14393.9512, 10.0.17763.9245 +10 CWE-122
Priority LOW 38
Heap-based buffer overflow in Windows Biometric Service allows an authorized attacker to elevate privileges over a network.
CVSS 3.1HIGH 8.0· Network · Low privileges · User interaction · EPSS 0.00768 · Published 2026-09-08 · Fixed in 10.0.14393.9512, 10.0.17763.9245 +8 CWE-122
Priority LOW 38
Deserialization of untrusted data in Windows IP Address Management (IPAM) Service allows an authorized attacker to elevate privileges locally.
CVSS 3.1HIGH 7.0· Local · Low privileges · No interaction · EPSS 0.02798 · Published 2026-09-08 · Fixed in 10.0.14393.9512, 10.0.17763.9245 +8 CWE-502
Priority LOW 38
Heap-based buffer overflow in Windows Spaceport.sys allows an authorized attacker to elevate privileges over a network.
CVSS 3.1HIGH 8.0· Network · Low privileges · User interaction · EPSS 0.00768 · Published 2026-09-08 · Fixed in 10.0.14393.9512, 10.0.17763.9245 +10 CWE-122
Priority LOW 38
Heap-based buffer overflow in Windows NTFS allows an unauthorized attacker to execute code locally.
CVSS 3.1HIGH 8.4· Local · No auth · No interaction · EPSS 0.00364 · Published 2026-09-08 · Fixed in 10.0.14393.9512, 10.0.17763.9245 +10 CWE-122
Priority LOW 38
Heap-based buffer overflow in Windows HTTP Print Provider allows an authorized attacker to execute code over a network.
CVSS 3.1HIGH 8.0· Network · Low privileges · User interaction · EPSS 0.00768 · Published 2026-09-08 · Fixed in 10.0.14393.9512, 10.0.17763.9245 +10 CWE-122
Priority LOW 38
Use after free in Active Directory Domain Services allows an unauthorized attacker to execute code over a network.
CVSS 3.1HIGH 8.1· Network · No auth · No interaction · EPSS 0.00707 · Published 2026-09-08 · Fixed in 10.0.14393.9512, 10.0.17763.9245 +10 CWE-416
Priority LOW 38
Use after free in Active Directory Domain Services allows an unauthorized attacker to execute code over a network.
CVSS 3.1HIGH 8.1· Network · No auth · No interaction · EPSS 0.00707 · Published 2026-09-08 · Fixed in 10.0.14393.9512, 10.0.17763.9245 +10 CWE-416
Priority LOW 38
Out-of-bounds read in Windows NTFS allows an authorized attacker to elevate privileges over a network.
CVSS 3.1HIGH 8.0· Network · Low privileges · User interaction · EPSS 0.00768 · Published 2026-09-08 · Fixed in 10.0.14393.9512, 10.0.17763.9245 +10 CWE-125
Priority LOW 38
Stack-based buffer overflow in Windows USB Driver allows an authorized attacker to elevate privileges over a network.
CVSS 3.1HIGH 8.0· Network · Low privileges · User interaction · EPSS 0.00768 · Published 2026-09-08 · Fixed in 10.0.17763.9245, 10.0.19044.7725 +7 CWE-121
Priority LOW 38
Heap-based buffer overflow in Windows Enterprise App Management allows an authorized attacker to elevate privileges over a network.
CVSS 3.1HIGH 8.0· Network · Low privileges · User interaction · EPSS 0.00768 · Published 2026-09-08 · Fixed in 10.0.14393.9512, 10.0.17763.9245 +10 CWE-122
Priority LOW 38
Heap-based buffer overflow in Windows NTFS allows an unauthorized attacker to execute code locally.
CVSS 3.1HIGH 8.4· Local · No auth · No interaction · EPSS 0.00364 · Published 2026-09-08 · Fixed in 10.0.14393.9512, 10.0.17763.9245 +10 CWE-122
Priority LOW 38
Heap-based buffer overflow in Windows Error Reporting allows an authorized attacker to elevate privileges over a network.
CVSS 3.1HIGH 8.0· Network · Low privileges · User interaction · EPSS 0.00768 · Published 2026-09-08 · Fixed in 10.0.14393.9512, 10.0.17763.9245 +10 CWE-122
Priority LOW 38
Out-of-bounds read in Windows BitLocker allows an authorized attacker to elevate privileges over a network.
CVSS 3.1HIGH 8.0· Network · Low privileges · User interaction · EPSS 0.00768 · Published 2026-09-08 · Fixed in 10.0.14393.9512, 10.0.17763.9245 +10 CWE-125
Priority LOW 38
Incorrect conversion between numeric types in Microsoft JScript allows an unauthorized attacker to execute code over a network.
CVSS 3.1HIGH 8.1· Network · No auth · No interaction · EPSS 0.00707 · Published 2026-09-08 · Fixed in 10.0.14393.9512, 10.0.17763.9245 +10 CWE-681
Priority LOW 38
Out-of-bounds read in Windows VOLSNAP.SYS allows an authorized attacker to elevate privileges over a network.
CVSS 3.1HIGH 8.0· Network · Low privileges · User interaction · EPSS 0.00768 · Published 2026-09-08 · Fixed in 10.0.14393.9512, 10.0.17763.9245 +10 CWE-125
Priority LOW 38
Heap-based buffer overflow in Windows USB Video Driver allows an authorized attacker to elevate privileges over a network.
CVSS 3.1HIGH 8.0· Network · Low privileges · User interaction · EPSS 0.00768 · Published 2026-09-08 · Fixed in 10.0.14393.9512, 10.0.17763.9245 +10 CWE-122
Priority LOW 38
Heap-based buffer overflow in Volume Manager Driver allows an authorized attacker to elevate privileges over a network.
CVSS 3.1HIGH 8.0· Network · Low privileges · User interaction · EPSS 0.00768 · Published 2026-09-08 · Fixed in 10.0.14393.9512, 10.0.17763.9245 +10 CWE-122
Priority LOW 38
Heap-based buffer overflow in Windows Overlay Filter allows an authorized attacker to elevate privileges over a network.
CVSS 3.1HIGH 8.0· Network · Low privileges · User interaction · EPSS 0.00768 · Published 2026-09-08 · Fixed in 10.0.14393.9512, 10.0.17763.9245 +9 CWE-122
Priority LOW 38
Out-of-bounds read in Microsoft Local Security Authority Server (lsasrv) allows an authorized attacker to elevate privileges over a network.
CVSS 3.1HIGH 8.0· Network · Low privileges · User interaction · EPSS 0.00768 · Published 2026-09-08 · Fixed in 10.0.19044.7725, 10.0.19045.7725 +6 CWE-125
Priority LOW 38
Heap-based buffer overflow in Windows Print Spooler Components allows an authorized attacker to elevate privileges over a network.
CVSS 3.1HIGH 8.0· Network · Low privileges · User interaction · EPSS 0.00768 · Published 2026-09-08 · Fixed in 10.0.14393.9512, 10.0.17763.9245 +10 CWE-122
Priority LOW 38
Out-of-bounds read in Windows NTFS allows an authorized attacker to elevate privileges over a network.
CVSS 3.1HIGH 8.0· Network · Low privileges · User interaction · EPSS 0.00768 · Published 2026-09-08 · Fixed in 10.0.14393.9512, 10.0.17763.9245 +10 CWE-125
Priority LOW 38
Heap-based buffer overflow in Microsoft JScript allows an unauthorized attacker to execute code over a network.
CVSS 3.1HIGH 8.1· Network · No auth · No interaction · EPSS 0.00707 · Published 2026-09-08 · Fixed in 10.0.14393.9512, 10.0.17763.9245 +9 CWE-122
Priority LOW 38
Double free in Microsoft Windows Search Component allows an authorized attacker to elevate privileges over a network.
CVSS 3.1HIGH 8.0· Network · Low privileges · User interaction · EPSS 0.00768 · Published 2026-09-08 · Fixed in 10.0.22631.7582, 10.0.26100.9445 +4 CWE-415
Priority LOW 38
Stack-based buffer overflow in Windows Win32K allows an authorized attacker to elevate privileges over a network.
CVSS 3.1HIGH 8.0· Network · Low privileges · User interaction · EPSS 0.00768 · Published 2026-09-08 · Fixed in 10.0.14393.9512, 10.0.17763.9245 +9 CWE-121
Priority LOW 38
Heap-based buffer overflow in Microsoft Standard XPS allows an authorized attacker to elevate privileges over a network.
CVSS 3.1HIGH 8.0· Network · Low privileges · User interaction · EPSS 0.00768 · Published 2026-09-08 · Fixed in 10.0.14393.9512, 10.0.17763.9245 +10 CWE-122
Priority LOW 38
Heap-based buffer overflow in Windows Error Reporting allows an authorized attacker to elevate privileges over a network.
CVSS 3.1HIGH 8.0· Network · Low privileges · User interaction · EPSS 0.00768 · Published 2026-09-08 · Fixed in 10.0.14393.9512, 10.0.17763.9245 +10 CWE-122
Priority LOW 38
Heap-based buffer overflow in Windows Win32K allows an authorized attacker to elevate privileges over a network.
CVSS 3.1HIGH 8.0· Network · Low privileges · User interaction · EPSS 0.00768 · Published 2026-09-08 · Fixed in 16.112.26090911, 16.0.20430.20000 CWE-122
Priority LOW 38
Stack-based buffer overflow in Windows Fast FAT Driver allows an authorized attacker to elevate privileges over a network.
CVSS 3.1HIGH 8.0· Network · Low privileges · User interaction · EPSS 0.00768 · Published 2026-09-08 · Fixed in 10.0.14393.9512, 10.0.17763.9245 +10 CWE-121
Priority LOW 38
Heap-based buffer overflow in Windows Program Compatibility Assistant Service allows an authorized attacker to elevate privileges over a network.
CVSS 3.1HIGH 8.0· Network · Low privileges · User interaction · EPSS 0.00768 · Published 2026-09-08 · Fixed in 10.0.14393.9512, 10.0.17763.9245 +10 CWE-122
Priority LOW 38
Stack-based buffer overflow in Windows NTFS allows an authorized attacker to elevate privileges over a network.
CVSS 3.1HIGH 8.0· Network · Low privileges · User interaction · EPSS 0.00768 · Published 2026-09-08 · Fixed in 10.0.14393.9512, 10.0.17763.9245 +10 CWE-121
Priority LOW 38
Stack-based buffer overflow in Windows NTFS allows an authorized attacker to elevate privileges over a network.
CVSS 3.1HIGH 8.0· Network · Low privileges · User interaction · EPSS 0.00768 · Published 2026-09-08 · Fixed in 10.0.14393.9512, 10.0.17763.9245 +10 CWE-121
Priority LOW 38
Integer underflow (wrap or wraparound) in Windows GDI+ allows an authorized attacker to elevate privileges over a network.
CVSS 3.1HIGH 8.0· Network · Low privileges · User interaction · EPSS 0.00768 · Published 2026-09-08 · Fixed in 10.0.14393.9512, 10.0.17763.9245 +10 CWE-122
Priority LOW 37
Untrusted pointer dereference in Windows ALPC allows an authorized attacker to elevate privileges locally.
CVSS 3.1HIGH 8.2· Local · High privileges · No interaction · EPSS 0.00291 · Published 2026-09-08 · Fixed in 10.0.17763.9245, 10.0.19044.7725 +7 CWE-822
Priority LOW 36
Heap-based buffer overflow in RPC Runtime allows an authorized attacker to elevate privileges locally.
CVSS 3.1HIGH 7.8· Local · Low privileges · No interaction · EPSS 0.00379 · Published 2026-10-13 · Fixed in 10.0.22631.7582, 10.0.26100.9445 +2 CWE-122
Priority LOW 36
Heap-based buffer overflow in Microsoft Graphics Component allows an authorized attacker to execute code locally.
CVSS 3.1HIGH 7.8· Local · Low privileges · No interaction · EPSS 0.00333 · Published 2026-09-08 · Fixed in 10.0.14393.9512, 10.0.17763.9245 +10 CWE-122
Priority LOW 36
Heap-based buffer overflow in Windows NTFS allows an authorized attacker to elevate privileges locally.
CVSS 3.1HIGH 7.8· Local · Low privileges · No interaction · EPSS 0.00333 · Published 2026-09-08 · Fixed in 10.0.14393.9512, 10.0.17763.9245 +10 CWE-122
Priority LOW 36
Stack-based buffer overflow in Microsoft Graphics Component allows an authorized attacker to elevate privileges locally.
CVSS 3.1HIGH 7.8· Local · Low privileges · No interaction · EPSS 0.00333 · Published 2026-09-08 · Fixed in 10.0.22631.7582, 10.0.26100.9445 +4 CWE-121
Priority LOW 36
Heap-based buffer overflow in Windows Biometric Service allows an authorized attacker to elevate privileges locally.
CVSS 3.1HIGH 7.8· Local · Low privileges · No interaction · EPSS 0.00333 · Published 2026-09-08 · Fixed in 10.0.14393.9512, 10.0.17763.9245 +8 CWE-122
Priority LOW 36
Heap-based buffer overflow in Windows Biometric Service allows an authorized attacker to elevate privileges locally.
CVSS 3.1HIGH 7.8· Local · Low privileges · No interaction · EPSS 0.00333 · Published 2026-09-08 · Fixed in 10.0.14393.9512, 10.0.17763.9245 +8 CWE-122
Priority LOW 36
Heap-based buffer overflow in Windows Biometric Service allows an authorized attacker to elevate privileges locally.
CVSS 3.1HIGH 7.8· Local · Low privileges · No interaction · EPSS 0.00333 · Published 2026-09-08 · Fixed in 10.0.14393.9512, 10.0.17763.9245 +8 CWE-122
Priority LOW 36
Heap-based buffer overflow in Windows Biometric Service allows an authorized attacker to elevate privileges locally.
CVSS 3.1HIGH 7.8· Local · Low privileges · No interaction · EPSS 0.00333 · Published 2026-09-08 · Fixed in 10.0.14393.9512, 10.0.17763.9245 +8 CWE-122
Priority LOW 36
Heap-based buffer overflow in Windows Biometric Service allows an authorized attacker to elevate privileges locally.
CVSS 3.1HIGH 7.8· Local · Low privileges · No interaction · EPSS 0.00333 · Published 2026-09-08 · Fixed in 10.0.14393.9512, 10.0.17763.9245 +8 CWE-122
Priority LOW 36
Heap-based buffer overflow in Windows Biometric Service allows an authorized attacker to elevate privileges locally.
CVSS 3.1HIGH 7.8· Local · Low privileges · No interaction · EPSS 0.00333 · Published 2026-09-08 · Fixed in 10.0.14393.9512, 10.0.17763.9245 +8 CWE-122
Priority LOW 36
Heap-based buffer overflow in Windows Biometric Service allows an authorized attacker to elevate privileges locally.
CVSS 3.1HIGH 7.8· Local · Low privileges · No interaction · EPSS 0.00333 · Published 2026-09-08 · Fixed in 10.0.14393.9512, 10.0.17763.9245 +8 CWE-122
Priority LOW 36
Heap-based buffer overflow in Windows Biometric Service allows an authorized attacker to elevate privileges locally.
CVSS 3.1HIGH 7.8· Local · Low privileges · No interaction · EPSS 0.00333 · Published 2026-09-08 · Fixed in 10.0.14393.9512, 10.0.17763.9245 +8 CWE-122
Priority LOW 36
Use after free in Windows Biometric Service allows an authorized attacker to elevate privileges locally.
CVSS 3.1HIGH 7.8· Local · Low privileges · No interaction · EPSS 0.00333 · Published 2026-09-08 · Fixed in 10.0.14393.9512, 10.0.17763.9245 +8 CWE-416
Priority LOW 36
Heap-based buffer overflow in Windows Biometric Service allows an authorized attacker to elevate privileges locally.
CVSS 3.1HIGH 7.8· Local · Low privileges · No interaction · EPSS 0.00333 · Published 2026-09-08 · Fixed in 10.0.14393.9512, 10.0.17763.9245 +8 CWE-122
Priority LOW 36
Heap-based buffer overflow in Windows Biometric Service allows an authorized attacker to elevate privileges locally.
CVSS 3.1HIGH 7.8· Local · Low privileges · No interaction · EPSS 0.00333 · Published 2026-09-08 · Fixed in 10.0.14393.9512, 10.0.17763.9245 +8 CWE-122
Priority LOW 36
Heap-based buffer overflow in Windows Biometric Service allows an authorized attacker to elevate privileges locally.
CVSS 3.1HIGH 7.8· Local · Low privileges · No interaction · EPSS 0.00333 · Published 2026-09-08 · Fixed in 10.0.14393.9512, 10.0.17763.9245 +8 CWE-122
Priority LOW 36
Heap-based buffer overflow in Windows Biometric Service allows an authorized attacker to elevate privileges locally.
CVSS 3.1HIGH 7.8· Local · Low privileges · No interaction · EPSS 0.00333 · Published 2026-09-08 · Fixed in 10.0.14393.9512, 10.0.17763.9245 +8 CWE-122
Priority LOW 36
Heap-based buffer overflow in Windows Biometric Service allows an authorized attacker to elevate privileges locally.
CVSS 3.1HIGH 7.8· Local · Low privileges · No interaction · EPSS 0.00333 · Published 2026-09-08 · Fixed in 10.0.14393.9512, 10.0.17763.9245 +8 CWE-122
Priority LOW 36
Heap-based buffer overflow in Windows Biometric Service allows an authorized attacker to elevate privileges locally.
CVSS 3.1HIGH 7.8· Local · Low privileges · No interaction · EPSS 0.00333 · Published 2026-09-08 · Fixed in 10.0.14393.9512, 10.0.17763.9245 +8 CWE-122
Priority LOW 36
Heap-based buffer overflow in Windows Biometric Service allows an authorized attacker to elevate privileges locally.
CVSS 3.1HIGH 7.8· Local · Low privileges · No interaction · EPSS 0.00333 · Published 2026-09-08 · Fixed in 10.0.14393.9512, 10.0.17763.9245 +8 CWE-122
Priority LOW 36
Heap-based buffer overflow in Windows Biometric Service allows an authorized attacker to elevate privileges locally.
CVSS 3.1HIGH 7.8· Local · Low privileges · No interaction · EPSS 0.00333 · Published 2026-09-08 · Fixed in 10.0.14393.9512, 10.0.17763.9245 +8 CWE-122
Priority LOW 36
Heap-based buffer overflow in Windows Biometric Service allows an authorized attacker to elevate privileges locally.
CVSS 3.1HIGH 7.8· Local · Low privileges · No interaction · EPSS 0.00333 · Published 2026-09-08 · Fixed in 10.0.14393.9512, 10.0.17763.9245 +8 CWE-122
Priority LOW 36
Heap-based buffer overflow in Windows Biometric Service allows an authorized attacker to elevate privileges locally.
CVSS 3.1HIGH 7.8· Local · Low privileges · No interaction · EPSS 0.00333 · Published 2026-09-08 · Fixed in 10.0.14393.9512, 10.0.17763.9245 +8 CWE-122
Priority LOW 36
Use after free in Windows Biometric Service allows an authorized attacker to elevate privileges locally.
CVSS 3.1HIGH 7.8· Local · Low privileges · No interaction · EPSS 0.00333 · Published 2026-09-08 · Fixed in 10.0.14393.9512, 10.0.17763.9245 +8 CWE-400
Priority LOW 36
Heap-based buffer overflow in Windows Biometric Service allows an authorized attacker to elevate privileges locally.
CVSS 3.1HIGH 7.8· Local · Low privileges · No interaction · EPSS 0.00333 · Published 2026-09-08 · Fixed in 10.0.14393.9512, 10.0.17763.9245 +8 CWE-122
Priority LOW 36
Heap-based buffer overflow in Windows Biometric Service allows an authorized attacker to elevate privileges locally.
CVSS 3.1HIGH 7.8· Local · Low privileges · No interaction · EPSS 0.00333 · Published 2026-09-08 · Fixed in 10.0.14393.9512, 10.0.17763.9245 +8 CWE-122
Priority LOW 36
Heap-based buffer overflow in Windows Biometric Service allows an authorized attacker to elevate privileges locally.
CVSS 3.1HIGH 7.8· Local · Low privileges · No interaction · EPSS 0.00333 · Published 2026-09-08 · Fixed in 10.0.14393.9512, 10.0.17763.9245 +8 CWE-122
Priority LOW 36
Heap-based buffer overflow in Windows Resilient File System (ReFS) allows an authorized attacker to elevate privileges locally.
CVSS 3.1HIGH 7.8· Local · Low privileges · No interaction · EPSS 0.00333 · Published 2026-09-08 · Fixed in 10.0.26100.9445, 10.0.26200.9445 +2 CWE-122
Priority LOW 36
Missing authorization in Windows Kernel allows an authorized attacker to elevate privileges locally.
CVSS 3.1HIGH 7.8· Local · Low privileges · No interaction · EPSS 0.00298 · Published 2026-09-08 · Fixed in 10.0.17763.9245, 10.0.19044.7725 +7 CWE-862
Priority LOW 36
Untrusted pointer dereference in Windows Virtualization-Based Security (VBS) Enclave allows an authorized attacker to elevate privileges locally.
CVSS 3.1HIGH 7.8· Local · Low privileges · No interaction · EPSS 0.00333 · Published 2026-09-08 · Fixed in 10.0.22631.7582, 10.0.26100.9445 +3 CWE-822
Priority LOW 36
Heap-based buffer overflow in Virtual Hard Disk (VHD) Miniport Driver allows an authorized attacker to execute code locally.
CVSS 3.1HIGH 7.8· Local · Low privileges · No interaction · EPSS 0.00268 · Published 2026-09-08 · Fixed in 10.0.14393.9512, 10.0.17763.9245 +10 CWE-122
Priority LOW 36
Heap-based buffer overflow in Windows Work Folders allows an authorized attacker to elevate privileges locally.
CVSS 3.1HIGH 7.8· Local · Low privileges · No interaction · EPSS 0.00333 · Published 2026-09-08 · Fixed in 10.0.14393.9512, 10.0.17763.9245 +9 CWE-122
Priority LOW 36
Heap-based buffer overflow in Windows Biometric Service allows an authorized attacker to elevate privileges locally.
CVSS 3.1HIGH 7.8· Local · Low privileges · No interaction · EPSS 0.00333 · Published 2026-09-08 · Fixed in 10.0.14393.9512, 10.0.17763.9245 +8 CWE-122
Priority LOW 36
Heap-based buffer overflow in Windows Biometric Service allows an authorized attacker to elevate privileges locally.
CVSS 3.1HIGH 7.8· Local · Low privileges · No interaction · EPSS 0.00333 · Published 2026-09-08 · Fixed in 10.0.14393.9512, 10.0.17763.9245 +8 CWE-122
Priority LOW 36
Heap-based buffer overflow in Windows Volume Manager Extension Driver allows an authorized attacker to elevate privileges locally.
CVSS 3.1HIGH 7.8· Local · Low privileges · No interaction · EPSS 0.00333 · Published 2026-09-08 · Fixed in 10.0.14393.9512, 10.0.17763.9245 +10 CWE-122
Priority LOW 36
Release of invalid pointer or reference in Windows Device Association Service allows an authorized attacker to elevate privileges locally.
CVSS 3.1HIGH 7.8· Local · Low privileges · No interaction · EPSS 0.00333 · Published 2026-09-08 · Fixed in 10.0.14393.9512, 10.0.17763.9245 +6 CWE-763
Priority LOW 36
Null pointer dereference in Windows Biometric Service allows an authorized attacker to elevate privileges locally.
CVSS 3.1HIGH 7.8· Local · Low privileges · No interaction · EPSS 0.00333 · Published 2026-09-08 · Fixed in 10.0.14393.9512, 10.0.17763.9245 +8 CWE-476
Priority LOW 36
Heap-based buffer overflow in Windows Biometric Service allows an authorized attacker to elevate privileges locally.
CVSS 3.1HIGH 7.8· Local · Low privileges · No interaction · EPSS 0.00333 · Published 2026-09-08 · Fixed in 10.0.14393.9512, 10.0.17763.9245 +8 CWE-122
Priority LOW 36
Heap-based buffer overflow in Windows Services for NFS ONCRPC XDR Driver allows an authorized attacker to elevate privileges locally.
CVSS 3.1HIGH 7.8· Local · Low privileges · No interaction · EPSS 0.00333 · Published 2026-09-08 · Fixed in 10.0.14393.9512, 10.0.17763.9245 +10 CWE-122
Priority LOW 36
Heap-based buffer overflow in Windows Biometric Service allows an authorized attacker to elevate privileges locally.
CVSS 3.1HIGH 7.8· Local · Low privileges · No interaction · EPSS 0.00333 · Published 2026-09-08 · Fixed in 10.0.14393.9512, 10.0.17763.9245 +8 CWE-122
Priority LOW 36
Heap-based buffer overflow in Windows Biometric Service allows an authorized attacker to elevate privileges locally.
CVSS 3.1HIGH 7.8· Local · Low privileges · No interaction · EPSS 0.00333 · Published 2026-09-08 · Fixed in 10.0.14393.9512, 10.0.17763.9245 +8 CWE-122
Priority LOW 36
Heap-based buffer overflow in Windows Biometric Service allows an authorized attacker to elevate privileges locally.
CVSS 3.1HIGH 7.8· Local · Low privileges · No interaction · EPSS 0.00333 · Published 2026-09-08 · Fixed in 10.0.14393.9512, 10.0.17763.9245 +8 CWE-122
Priority LOW 36
Missing authorization in Data Sharing Service Client allows an authorized attacker to elevate privileges locally.
CVSS 3.1HIGH 7.8· Local · Low privileges · No interaction · EPSS 0.00298 · Published 2026-09-08 · Fixed in 10.0.14393.9512, 10.0.17763.9245 +8 CWE-862
Priority LOW 36
Heap-based buffer overflow in Windows Biometric Service allows an authorized attacker to elevate privileges locally.
CVSS 3.1HIGH 7.8· Local · Low privileges · No interaction · EPSS 0.00333 · Published 2026-09-08 · Fixed in 10.0.14393.9512, 10.0.17763.9245 +8 CWE-122
Priority LOW 36
Heap-based buffer overflow in Windows Biometric Service allows an authorized attacker to elevate privileges locally.
CVSS 3.1HIGH 7.8· Local · Low privileges · No interaction · EPSS 0.00333 · Published 2026-09-08 · Fixed in 10.0.14393.9512, 10.0.17763.9245 +8 CWE-122
Priority LOW 36
Integer overflow or wraparound in Windows Biometric Service allows an authorized attacker to elevate privileges locally.
CVSS 3.1HIGH 7.8· Local · Low privileges · No interaction · EPSS 0.00333 · Published 2026-09-08 · Fixed in 10.0.14393.9512, 10.0.17763.9245 +8 CWE-190
Priority LOW 36
Heap-based buffer overflow in Windows Biometric Service allows an authorized attacker to elevate privileges locally.
CVSS 3.1HIGH 7.8· Local · Low privileges · No interaction · EPSS 0.00333 · Published 2026-09-08 · Fixed in 10.0.14393.9512, 10.0.17763.9245 +8 CWE-122
Priority LOW 36
Heap-based buffer overflow in Windows Biometric Service allows an authorized attacker to elevate privileges locally.
CVSS 3.1HIGH 7.8· Local · Low privileges · No interaction · EPSS 0.00333 · Published 2026-09-08 · Fixed in 10.0.14393.9512, 10.0.17763.9245 +8 CWE-122
Priority LOW 36
Heap-based buffer overflow in Windows Biometric Service allows an authorized attacker to elevate privileges locally.
CVSS 3.1HIGH 7.8· Local · Low privileges · No interaction · EPSS 0.00333 · Published 2026-09-08 · Fixed in 10.0.14393.9512, 10.0.17763.9245 +8 CWE-122
Priority LOW 36
Heap-based buffer overflow in Windows Biometric Service allows an authorized attacker to elevate privileges locally.
CVSS 3.1HIGH 7.8· Local · Low privileges · No interaction · EPSS 0.00333 · Published 2026-09-08 · Fixed in 10.0.14393.9512, 10.0.17763.9245 +8 CWE-122
Priority LOW 36
Heap-based buffer overflow in Windows Biometric Service allows an authorized attacker to elevate privileges locally.
CVSS 3.1HIGH 7.8· Local · Low privileges · No interaction · EPSS 0.00333 · Published 2026-09-08 · Fixed in 10.0.14393.9512, 10.0.17763.9245 +8 CWE-122
Priority LOW 36
Heap-based buffer overflow in Windows Biometric Service allows an authorized attacker to elevate privileges locally.
CVSS 3.1HIGH 7.8· Local · Low privileges · No interaction · EPSS 0.00333 · Published 2026-09-08 · Fixed in 10.0.14393.9512, 10.0.17763.9245 +8 CWE-122
Priority LOW 36
Heap-based buffer overflow in Windows Biometric Service allows an authorized attacker to elevate privileges locally.
CVSS 3.1HIGH 7.8· Local · Low privileges · No interaction · EPSS 0.00333 · Published 2026-09-08 · Fixed in 10.0.14393.9512, 10.0.17763.9245 +8 CWE-122
Priority LOW 36
Heap-based buffer overflow in Windows Biometric Service allows an authorized attacker to elevate privileges locally.
CVSS 3.1HIGH 7.8· Local · Low privileges · No interaction · EPSS 0.00333 · Published 2026-09-08 · Fixed in 10.0.14393.9512, 10.0.17763.9245 +8 CWE-122
Priority LOW 36
Heap-based buffer overflow in Windows Biometric Service allows an authorized attacker to elevate privileges locally.
CVSS 3.1HIGH 7.8· Local · Low privileges · No interaction · EPSS 0.00333 · Published 2026-09-08 · Fixed in 10.0.14393.9512, 10.0.17763.9245 +8 CWE-122
Priority LOW 36
Heap-based buffer overflow in Windows Biometric Service allows an authorized attacker to elevate privileges locally.
CVSS 3.1HIGH 7.8· Local · Low privileges · No interaction · EPSS 0.00333 · Published 2026-09-08 · Fixed in 10.0.14393.9512, 10.0.17763.9245 +8 CWE-122
Priority LOW 36
Heap-based buffer overflow in Windows Biometric Service allows an authorized attacker to elevate privileges locally.
CVSS 3.1HIGH 7.8· Local · Low privileges · No interaction · EPSS 0.00333 · Published 2026-09-08 · Fixed in 10.0.14393.9512, 10.0.17763.9245 +8 CWE-122
Priority LOW 36
Heap-based buffer overflow in Windows Network Connection Broker allows an authorized attacker to elevate privileges locally.
CVSS 3.1HIGH 7.8· Local · Low privileges · No interaction · EPSS 0.00333 · Published 2026-09-08 · Fixed in 10.0.14393.9512, 10.0.17763.9245 +10 CWE-122
Priority LOW 36
Use after free in Windows WebClient Service allows an authorized attacker to elevate privileges locally.
CVSS 3.1HIGH 7.8· Local · Low privileges · No interaction · EPSS 0.00333 · Published 2026-09-08 · Fixed in 10.0.14393.9512, 10.0.17763.9245 +10 CWE-416
Priority LOW 36
Heap-based buffer overflow in Windows USB Driver allows an authorized attacker to elevate privileges locally.
CVSS 3.1HIGH 7.8· Local · Low privileges · No interaction · EPSS 0.00333 · Published 2026-09-08 · Fixed in 10.0.19044.7725, 10.0.19045.7725 +6 CWE-122
Priority LOW 36
Heap-based buffer overflow in Storage Port Driver allows an authorized attacker to elevate privileges locally.
CVSS 3.1HIGH 7.8· Local · Low privileges · No interaction · EPSS 0.00333 · Published 2026-09-08 · Fixed in 10.0.26100.9445, 10.0.26200.9445 +2 CWE-122
Priority LOW 36
Heap-based buffer overflow in Windows Fax Service allows an authorized attacker to elevate privileges locally.
CVSS 3.1HIGH 7.8· Local · Low privileges · No interaction · EPSS 0.00333 · Published 2026-09-08 · Fixed in 10.0.14393.9512, 10.0.17763.9245 +10 CWE-122
Priority LOW 36
Heap-based buffer overflow in Windows Biometric Service allows an authorized attacker to elevate privileges locally.
CVSS 3.1HIGH 7.8· Local · Low privileges · No interaction · EPSS 0.00333 · Published 2026-09-08 · Fixed in 10.0.14393.9512, 10.0.17763.9245 +8 CWE-122
Priority LOW 36
Improper validation of integrity check value in Windows Installer allows an authorized attacker to elevate privileges locally.
CVSS 3.1HIGH 7.8· Local · Low privileges · No interaction · EPSS 0.0023 · Published 2026-09-08 · Fixed in 10.0.22631.7582, 10.0.26100.9445 +3 CWE-354
Priority LOW 36
Heap-based buffer overflow in Winsock allows an authorized attacker to elevate privileges locally.
CVSS 3.1HIGH 7.8· Local · Low privileges · No interaction · EPSS 0.00338 · Published 2026-09-08 · Fixed in 10.0.14393.9512, 10.0.17763.9245 +10 CWE-122
Priority LOW 36
Out-of-bounds write in Windows Spaceport.sys allows an authorized attacker to execute code locally.
CVSS 3.1HIGH 7.8· Local · Low privileges · No interaction · EPSS 0.00333 · Published 2026-09-08 · Fixed in 10.0.14393.9512, 10.0.17763.9245 +10 CWE-787
Priority LOW 36
Heap-based buffer overflow in Windows Remote Access Connection Manager allows an authorized attacker to execute code locally.
CVSS 3.1HIGH 7.8· Local · Low privileges · No interaction · EPSS 0.00333 · Published 2026-09-08 · Fixed in 10.0.14393.9512, 10.0.17763.9245 +10 CWE-122
Priority LOW 36
Stack-based buffer overflow in Windows Storage Management Provider allows an authorized attacker to elevate privileges locally.
CVSS 3.1HIGH 7.8· Local · Low privileges · No interaction · EPSS 0.00333 · Published 2026-09-08 · Fixed in 10.0.19044.7725, 10.0.19045.7725 +6 CWE-121
Priority LOW 36
Heap-based buffer overflow in Windows NFS Portmapper allows an authorized attacker to elevate privileges locally.
CVSS 3.1HIGH 7.8· Local · Low privileges · No interaction · EPSS 0.00333 · Published 2026-09-08 · Fixed in 10.0.14393.9512, 10.0.17763.9245 +10 CWE-122
Priority LOW 36
Access of resource using incompatible type ('type confusion') in Windows Core Messaging allows an authorized attacker to elevate privileges locally.
CVSS 3.1HIGH 7.8· Local · Low privileges · No interaction · EPSS 0.00333 · Published 2026-09-08 · Fixed in 10.0.14393.9512, 10.0.17763.9245 +8 CWE-843
Priority LOW 36
Integer overflow or wraparound in Windows Biometric Service allows an authorized attacker to elevate privileges locally.
CVSS 3.1HIGH 7.8· Local · Low privileges · No interaction · EPSS 0.00333 · Published 2026-09-08 · Fixed in 10.0.14393.9512, 10.0.17763.9245 +8 CWE-190
Priority LOW 36
Out-of-bounds read in Virtual Hard Disk (VHD) Miniport Driver allows an authorized attacker to elevate privileges locally.
CVSS 3.1HIGH 7.8· Local · Low privileges · No interaction · EPSS 0.00333 · Published 2026-09-08 · Fixed in 10.0.14393.9512, 10.0.17763.9245 +10 CWE-125
Priority LOW 36
Integer overflow or wraparound in Windows Biometric Service allows an authorized attacker to elevate privileges locally.
CVSS 3.1HIGH 7.8· Local · Low privileges · No interaction · EPSS 0.00333 · Published 2026-09-08 · Fixed in 10.0.14393.9512, 10.0.17763.9245 +8 CWE-190
Priority LOW 36
Out-of-bounds read in Windows Spaceport.sys allows an authorized attacker to elevate privileges locally.
CVSS 3.1HIGH 7.8· Local · Low privileges · No interaction · EPSS 0.00333 · Published 2026-09-08 · Fixed in 10.0.22631.7582, 10.0.26100.9445 +4 CWE-125
Priority LOW 36
Heap-based buffer overflow in Windows Print Spooler Components allows an authorized attacker to elevate privileges locally.
CVSS 3.1HIGH 7.8· Local · Low privileges · No interaction · EPSS 0.00333 · Published 2026-09-08 · Fixed in 10.0.14393.9512, 10.0.17763.9245 +10 CWE-122
Priority LOW 36
Heap-based buffer overflow in Windows Win32 Kernel Subsystem allows an authorized attacker to elevate privileges locally.
CVSS 3.1HIGH 7.8· Local · Low privileges · No interaction · EPSS 0.00333 · Published 2026-09-08 · Fixed in 10.0.14393.9512, 10.0.17763.9245 +10 CWE-122
Priority LOW 36
Heap-based buffer overflow in Windows Print Spooler Components allows an authorized attacker to elevate privileges locally.
CVSS 3.1HIGH 7.8· Local · Low privileges · No interaction · EPSS 0.00333 · Published 2026-09-08 · Fixed in 10.0.19044.7725, 10.0.19045.7725 +6 CWE-122
Priority LOW 36
Improper handling of insufficient permissions or privileges in Windows Enterprise App Management allows an authorized attacker to elevate privileges locally.
CVSS 3.1HIGH 7.8· Local · Low privileges · No interaction · EPSS 0.00298 · Published 2026-09-08 · Fixed in 10.0.14393.9512, 10.0.17763.9245 +8 CWE-280
Priority LOW 36
Untrusted pointer dereference in Kernel Streaming WOW Thunk Service Driver allows an authorized attacker to elevate privileges locally.
CVSS 3.1HIGH 7.8· Local · Low privileges · No interaction · EPSS 0.00333 · Published 2026-09-08 · Fixed in 10.0.19044.7725, 10.0.19045.7725 +5 CWE-822
Priority LOW 36
Use after free in Windows Hello allows an authorized attacker to elevate privileges locally.
CVSS 3.1HIGH 7.8· Local · Low privileges · No interaction · EPSS 0.00264 · Published 2026-09-08 · Fixed in 10.0.19044.7725, 10.0.19045.7725 +4 CWE-416
Priority LOW 36
Remote Code Execution in Windows Routing and Remote Access Service (RRAS) allows attacker to gain an unauthorized access to victim's machine
CVSS 3.1HIGH 7.5· Network · Low privileges · No interaction · EPSS 0.00663 · Published 2026-09-08 · Fixed in 10.0.14393.9512, 10.0.17763.9245 +10 CWE-122
Priority LOW 36
Out-of-bounds read in Windows Win32K allows an authorized attacker to elevate privileges locally.
CVSS 3.1HIGH 7.8· Local · Low privileges · No interaction · EPSS 0.00333 · Published 2026-09-08 · Fixed in 10.0.14393.9512, 10.0.17763.9245 +10 CWE-125
Priority LOW 36
Heap-based buffer overflow in Windows Encrypting File System (EFS) allows an authorized attacker to elevate privileges locally.
CVSS 3.1HIGH 7.8· Local · Low privileges · No interaction · EPSS 0.00333 · Published 2026-09-08 · Fixed in 10.0.14393.9512, 10.0.17763.9245 +10 CWE-122
Priority LOW 36
Numeric truncation error in Windows Kerberos allows an authorized attacker to elevate privileges locally.
CVSS 3.1HIGH 7.8· Local · Low privileges · No interaction · EPSS 0.00333 · Published 2026-09-08 · Fixed in 10.0.17763.9245, 10.0.19044.7725 +7 CWE-122
Priority LOW 36
Heap-based buffer overflow in Windows Audio Service allows an authorized attacker to elevate privileges locally.
CVSS 3.1HIGH 7.8· Local · Low privileges · No interaction · EPSS 0.00333 · Published 2026-09-08 · Fixed in 10.0.17763.9245, 10.0.19044.7725 +7 CWE-122
Priority LOW 36
Heap-based buffer overflow in Windows Credential Providers allows an authorized attacker to elevate privileges locally.
CVSS 3.1HIGH 7.8· Local · Low privileges · No interaction · EPSS 0.00333 · Published 2026-09-08 · Fixed in 10.0.17763.9245, 10.0.19044.7725 +7 CWE-122
Priority LOW 36
Heap-based buffer overflow in Windows Biometric Service allows an authorized attacker to elevate privileges locally.
CVSS 3.1HIGH 7.8· Local · Low privileges · No interaction · EPSS 0.00333 · Published 2026-09-08 · Fixed in 10.0.14393.9512, 10.0.17763.9245 +8 CWE-122
Priority LOW 36
Untrusted search path in Windows Smart Card allows an authorized attacker to elevate privileges locally.
CVSS 3.1HIGH 7.8· Local · Low privileges · No interaction · EPSS 0.00457 · Published 2026-09-08 · Fixed in 10.0.14393.9512, 10.0.17763.9245 +10 CWE-426
Priority LOW 36
Use after free in Windows TCP/IP allows an authorized attacker to elevate privileges over a network.
CVSS 3.1HIGH 7.5· Network · Low privileges · No interaction · EPSS 0.0057 · Published 2026-09-08 · Fixed in 10.0.14393.9512, 10.0.17763.9245 +10 CWE-416
Priority LOW 36
Heap-based buffer overflow in Windows Universal Disk Format File System Driver (UDFS) allows an authorized attacker to elevate privileges locally.
CVSS 3.1HIGH 7.8· Local · Low privileges · No interaction · EPSS 0.00333 · Published 2026-09-08 · Fixed in 10.0.14393.9512, 10.0.17763.9245 +10 CWE-122
Priority LOW 36
Use after free in Windows TCP/IP allows an authorized attacker to elevate privileges over a network.
CVSS 3.1HIGH 7.5· Network · Low privileges · No interaction · EPSS 0.0057 · Published 2026-09-08 · Fixed in 10.0.17763.9245, 10.0.19044.7725 +7 CWE-416
Priority LOW 36
Integer overflow or wraparound in Windows Biometric Service allows an authorized attacker to elevate privileges locally.
CVSS 3.1HIGH 7.8· Local · Low privileges · No interaction · EPSS 0.00333 · Published 2026-09-08 · Fixed in 10.0.14393.9512, 10.0.17763.9245 +8 CWE-122
Priority LOW 36
Heap-based buffer overflow in HID class driver allows an authorized attacker to elevate privileges locally.
CVSS 3.1HIGH 7.8· Local · Low privileges · No interaction · EPSS 0.00333 · Published 2026-09-08 · Fixed in 10.0.14393.9512, 10.0.17763.9245 +10 CWE-122
Priority LOW 36
Double free in Windows Hello allows an authorized attacker to elevate privileges locally.
CVSS 3.1HIGH 7.8· Local · Low privileges · No interaction · EPSS 0.00333 · Published 2026-09-08 · Fixed in 10.0.19044.7725, 10.0.19045.7725 +4 CWE-415
Priority LOW 36
Heap-based buffer overflow in Windows MIDI Service Module allows an authorized attacker to elevate privileges locally.
CVSS 3.1HIGH 7.8· Local · Low privileges · No interaction · EPSS 0.00333 · Published 2026-09-08 · Fixed in 10.0.26100.9445, 10.0.26200.9445 +1 CWE-122
Priority LOW 36
Heap-based buffer overflow in Windows NTFS allows an authorized attacker to execute code locally.
CVSS 3.1HIGH 7.8· Local · Low privileges · No interaction · EPSS 0.00333 · Published 2026-09-08 · Fixed in 10.0.14393.9512, 10.0.17763.9245 +10 CWE-122
Priority LOW 36
Integer overflow or wraparound in Windows USB Audio Class driver (usbaudio.sys) allows an authorized attacker to elevate privileges locally.
CVSS 3.1HIGH 7.8· Local · Low privileges · No interaction · EPSS 0.00333 · Published 2026-09-08 · Fixed in 10.0.14393.9512, 10.0.17763.9245 +10 CWE-190
Priority LOW 36
Use after free in Windows Win32K allows an authorized attacker to elevate privileges over a network.
CVSS 3.1HIGH 7.5· Network · Low privileges · No interaction · EPSS 0.0057 · Published 2026-09-08 · Fixed in 10.0.14393.9512, 10.0.17763.9245 +10 CWE-416
Priority LOW 36
Heap-based buffer overflow in Windows Spaceport.sys allows an authorized attacker to elevate privileges locally.
CVSS 3.1HIGH 7.8· Local · Low privileges · No interaction · EPSS 0.00333 · Published 2026-09-08 · Fixed in 10.0.14393.9512, 10.0.17763.9245 +10 CWE-122
Priority LOW 36
Heap-based buffer overflow in Windows Encrypting File System (EFS) allows an authorized attacker to elevate privileges over a network.
CVSS 3.1HIGH 7.5· Network · Low privileges · No interaction · EPSS 0.0057 · Published 2026-09-08 · Fixed in 10.0.14393.9512, 10.0.17763.9245 +10 CWE-122
Priority LOW 36
Integer underflow (wrap or wraparound) in Windows USB Audio Class driver (usbaudio.sys) allows an authorized attacker to elevate privileges locally.
CVSS 3.1HIGH 7.8· Local · Low privileges · No interaction · EPSS 0.00333 · Published 2026-09-08 · Fixed in 10.0.14393.9512, 10.0.17763.9245 +10 CWE-191
Priority LOW 36
Heap-based buffer overflow in Windows Kerberos allows an authorized attacker to elevate privileges locally.
CVSS 3.1HIGH 7.8· Local · Low privileges · No interaction · EPSS 0.00333 · Published 2026-09-08 · Fixed in 10.0.14393.9512, 10.0.17763.9245 +10 CWE-122
Priority LOW 36
Absolute path traversal in Windows Error Reporting allows an authorized attacker to elevate privileges locally.
CVSS 3.1HIGH 7.8· Local · Low privileges · No interaction · EPSS 0.0037 · Published 2026-09-08 · Fixed in 10.0.14393.9512, 10.0.17763.9245 +10 CWE-36
Priority LOW 36
Integer overflow or wraparound in Microsoft Windows Search Component allows an authorized attacker to elevate privileges locally.
CVSS 3.1HIGH 7.8· Local · Low privileges · No interaction · EPSS 0.00333 · Published 2026-09-08 · Fixed in 10.0.14393.9512, 10.0.17763.9245 +10 CWE-190
Priority LOW 36
Heap-based buffer overflow in Windows Audio Service allows an authorized attacker to elevate privileges locally.
CVSS 3.1HIGH 7.8· Local · Low privileges · No interaction · EPSS 0.00333 · Published 2026-09-08 · Fixed in 10.0.14393.9512, 10.0.17763.9245 +10 CWE-122
Priority LOW 36
Use after free in Windows PrintWorkflowUserSvc allows an authorized attacker to elevate privileges over a network.
CVSS 3.1HIGH 7.5· Network · Low privileges · No interaction · EPSS 0.0057 · Published 2026-09-08 · Fixed in 10.0.17763.9245, 10.0.19044.7725 +7 CWE-416
Priority LOW 36
Use after free in Windows Remote Desktop Services allows an authorized attacker to execute code over a network.
CVSS 3.1HIGH 7.5· Network · Low privileges · No interaction · EPSS 0.00663 · Published 2026-09-08 · Fixed in 10.0.22631.7582, 10.0.26100.9445 +3 CWE-416
Priority LOW 36
Use after free in Windows HTTP.sys allows an authorized attacker to elevate privileges over a network.
CVSS 3.1HIGH 7.5· Network · Low privileges · No interaction · EPSS 0.0057 · Published 2026-09-08 · Fixed in 10.0.22631.7582, 10.0.26100.9445 +3 CWE-416
Priority LOW 36
Heap-based buffer overflow in Microsoft Local Security Authority Server (lsasrv) allows an authorized attacker to elevate privileges locally.
CVSS 3.1HIGH 7.8· Local · Low privileges · No interaction · EPSS 0.00333 · Published 2026-09-08 · Fixed in 10.0.26100.9445, 10.0.26200.9445 +2 CWE-122
Priority LOW 36
Heap-based buffer overflow in Windows Biometric Service allows an authorized attacker to elevate privileges locally.
CVSS 3.1HIGH 7.8· Local · Low privileges · No interaction · EPSS 0.00333 · Published 2026-09-08 · Fixed in 10.0.14393.9512, 10.0.17763.9245 +8 CWE-122
Priority LOW 36
Heap-based buffer overflow in Windows Universal Disk Format File System Driver (UDFS) allows an authorized attacker to elevate privileges locally.
CVSS 3.1HIGH 7.8· Local · Low privileges · No interaction · EPSS 0.00333 · Published 2026-09-08 · Fixed in 10.0.14393.9512, 10.0.17763.9245 +10 CWE-122
Priority LOW 36
Heap-based buffer overflow in Windows Biometric Service allows an authorized attacker to elevate privileges locally.
CVSS 3.1HIGH 7.8· Local · Low privileges · No interaction · EPSS 0.00333 · Published 2026-09-08 · Fixed in 10.0.14393.9512, 10.0.17763.9245 +8 CWE-122
Priority LOW 36
Incorrect type conversion or cast in Microsoft Windows Search Component allows an authorized attacker to elevate privileges locally.
CVSS 3.1HIGH 7.8· Local · Low privileges · No interaction · EPSS 0.00333 · Published 2026-09-08 · Fixed in 10.0.14393.9512, 10.0.17763.9245 +10 CWE-704
Priority LOW 36
Integer overflow or wraparound in Windows USB Video Driver allows an authorized attacker to elevate privileges locally.
CVSS 3.1HIGH 7.8· Local · Low privileges · No interaction · EPSS 0.00333 · Published 2026-09-08 · Fixed in 10.0.14393.9512, 10.0.17763.9245 +10 CWE-190
Priority LOW 36
Heap-based buffer overflow in Windows Biometric Service allows an authorized attacker to elevate privileges locally.
CVSS 3.1HIGH 7.8· Local · Low privileges · No interaction · EPSS 0.00333 · Published 2026-09-08 · Fixed in 10.0.14393.9512, 10.0.17763.9245 +8 CWE-122
Priority LOW 36
Buffer over-read in Windows Volume Manager Extension Driver allows an authorized attacker to elevate privileges locally.
CVSS 3.1HIGH 7.8· Local · Low privileges · No interaction · EPSS 0.00333 · Published 2026-09-08 · Fixed in 10.0.14393.9512, 10.0.17763.9245 +10 CWE-126
Priority LOW 36
Heap-based buffer overflow in Windows Biometric Service allows an authorized attacker to elevate privileges locally.
CVSS 3.1HIGH 7.8· Local · Low privileges · No interaction · EPSS 0.00333 · Published 2026-09-08 · Fixed in 10.0.14393.9512, 10.0.17763.9245 +8 CWE-122
Priority LOW 36
Heap-based buffer overflow in Windows USB Audio Class driver (usbaudio.sys) allows an authorized attacker to elevate privileges locally.
CVSS 3.1HIGH 7.8· Local · Low privileges · No interaction · EPSS 0.00333 · Published 2026-09-08 · Fixed in 10.0.14393.9512, 10.0.17763.9245 +10 CWE-122
Priority LOW 36
Out-of-bounds read in Windows CD-ROM Driver allows an authorized attacker to elevate privileges locally.
CVSS 3.1HIGH 7.8· Local · Low privileges · No interaction · EPSS 0.00333 · Published 2026-09-08 · Fixed in 10.0.14393.9512, 10.0.17763.9245 +10 CWE-125
Priority LOW 36
Heap-based buffer overflow in Windows SMB Client allows an authorized attacker to elevate privileges locally.
CVSS 3.1HIGH 7.8· Local · Low privileges · No interaction · EPSS 0.00333 · Published 2026-09-08 · Fixed in 10.0.28000.2954 CWE-122
Priority LOW 36
Heap-based buffer overflow in Windows Camera Frame Server Monitor allows an authorized attacker to elevate privileges locally.
CVSS 3.1HIGH 7.8· Local · Low privileges · No interaction · EPSS 0.00333 · Published 2026-09-08 · Fixed in 10.0.26100.9445, 10.0.26200.9445 +2 CWE-122
Priority LOW 36
Heap-based buffer overflow in Virtual Hard Disk (VHD) Miniport Driver allows an authorized attacker to elevate privileges locally.
CVSS 3.1HIGH 7.8· Local · Low privileges · No interaction · EPSS 0.00333 · Published 2026-09-08 · Fixed in 10.0.14393.9512, 10.0.17763.9245 +10 CWE-122
Priority LOW 36
Use after free in Windows Remote Desktop Services allows an authorized attacker to execute code over a network.
CVSS 3.1HIGH 7.5· Network · Low privileges · No interaction · EPSS 0.00663 · Published 2026-09-08 · Fixed in 10.0.14393.9512, 10.0.17763.9245 +10 CWE-416
Priority LOW 36
Out-of-bounds read in Windows Spaceport.sys allows an authorized attacker to execute code locally.
CVSS 3.1HIGH 7.8· Local · Low privileges · No interaction · EPSS 0.00333 · Published 2026-09-08 · Fixed in 10.0.14393.9512, 10.0.17763.9245 +10 CWE-125
Priority LOW 36
Numeric truncation error in Windows Spaceport.sys allows an authorized attacker to elevate privileges locally.
CVSS 3.1HIGH 7.8· Local · Low privileges · No interaction · EPSS 0.00333 · Published 2026-09-08 · Fixed in 10.0.19044.7725, 10.0.19045.7725 +6 CWE-122
Priority LOW 36
Improper neutralization of special elements used in a command ('command injection') in Windows Program Compatibility Assistant Service allows an authorized attacker to elevate privileges locally.
CVSS 3.1HIGH 7.8· Local · Low privileges · No interaction · EPSS 0.00322 · Published 2026-09-08 · Fixed in 10.0.14393.9512, 10.0.17763.9245 +8 CWE-77
Priority LOW 36
Out-of-bounds read in Windows NTFS allows an authorized attacker to elevate privileges locally.
CVSS 3.1HIGH 7.8· Local · Low privileges · No interaction · EPSS 0.00333 · Published 2026-09-08 · Fixed in 10.0.14393.9512, 10.0.17763.9245 +10 CWE-125
Priority LOW 36
Missing authentication for critical function in Windows Shell allows an authorized attacker to elevate privileges locally.
CVSS 3.1HIGH 7.8· Local · Low privileges · No interaction · EPSS 0.00298 · Published 2026-09-08 · Fixed in 10.0.22631.7582, 10.0.26100.9445 +3 CWE-306
Priority LOW 36
Heap-based buffer overflow in Windows Remote Desktop Services allows an authorized attacker to execute code over a network.
CVSS 3.1HIGH 7.5· Network · Low privileges · No interaction · EPSS 0.00663 · Published 2026-09-08 · Fixed in 10.0.14393.9512, 10.0.17763.9245 +10 CWE-122
Priority LOW 36
Heap-based buffer overflow in Windows Error Reporting allows an authorized attacker to elevate privileges locally.
CVSS 3.1HIGH 7.8· Local · Low privileges · No interaction · EPSS 0.00333 · Published 2026-09-08 · Fixed in 10.0.17763.9245, 10.0.19044.7725 +7 CWE-122
Priority LOW 36
Heap-based buffer overflow in Windows Fax Service allows an authorized attacker to elevate privileges locally.
CVSS 3.1HIGH 7.8· Local · Low privileges · No interaction · EPSS 0.00333 · Published 2026-09-08 · Fixed in 10.0.14393.9512, 10.0.17763.9245 +10 CWE-122
Priority LOW 36
Stack-based buffer overflow in Windows MIDI Service Module allows an authorized attacker to elevate privileges locally.
CVSS 3.1HIGH 7.8· Local · Low privileges · No interaction · EPSS 0.00333 · Published 2026-09-08 · Fixed in 10.0.26100.9445, 10.0.26200.9445 +1 CWE-121
Priority LOW 36
Heap-based buffer overflow in Windows Biometric Service allows an authorized attacker to elevate privileges locally.
CVSS 3.1HIGH 7.8· Local · Low privileges · No interaction · EPSS 0.00333 · Published 2026-09-08 · Fixed in 10.0.14393.9512, 10.0.17763.9245 +8 CWE-122
Priority LOW 36
Heap-based buffer overflow in Windows Partition Management Driver allows an authorized attacker to elevate privileges locally.
CVSS 3.1HIGH 7.8· Local · Low privileges · No interaction · EPSS 0.00333 · Published 2026-09-08 · Fixed in 10.0.19044.7725, 10.0.19045.7725 +6 CWE-122
Priority LOW 36
Heap-based buffer overflow in Windows Device Association Service allows an authorized attacker to elevate privileges locally.
CVSS 3.1HIGH 7.8· Local · Low privileges · No interaction · EPSS 0.00333 · Published 2026-09-08 · Fixed in 10.0.14393.9512, 10.0.17763.9245 +8 CWE-122
Priority LOW 36
Heap-based buffer overflow in Windows Biometric Service allows an authorized attacker to elevate privileges locally.
CVSS 3.1HIGH 7.8· Local · Low privileges · No interaction · EPSS 0.00333 · Published 2026-09-08 · Fixed in 10.0.14393.9512, 10.0.17763.9245 +8 CWE-122
Priority LOW 36
Untrusted pointer dereference in Windows Remote Desktop Services allows an authorized attacker to elevate privileges locally.
CVSS 3.1HIGH 7.8· Local · Low privileges · No interaction · EPSS 0.00333 · Published 2026-09-08 · Fixed in 10.0.14393.9512, 10.0.17763.9245 +10 CWE-822
Priority LOW 36
Stack-based buffer overflow in Microsoft Graphics Component allows an authorized attacker to elevate privileges locally.
CVSS 3.1HIGH 7.8· Local · Low privileges · No interaction · EPSS 0.00333 · Published 2026-09-08 · Fixed in 10.0.19044.7725, 10.0.19045.7725 +4 CWE-121
Priority LOW 36
Heap-based buffer overflow in Windows Power Dependency Coordinator allows an authorized attacker to elevate privileges locally.
CVSS 3.1HIGH 7.8· Local · Low privileges · No interaction · EPSS 0.00333 · Published 2026-09-08 · Fixed in 10.0.17763.9245, 10.0.19044.7725 +7 CWE-122
Priority LOW 36
Heap-based buffer overflow in Microsoft Windows Speech allows an authorized attacker to elevate privileges locally.
CVSS 3.1HIGH 7.8· Local · Low privileges · No interaction · EPSS 0.00333 · Published 2026-09-08 · Fixed in 10.0.14393.9512, 10.0.17763.9245 +8 CWE-122
Priority LOW 36
Heap-based buffer overflow in Windows Remote Access Connection Manager allows an authorized attacker to elevate privileges locally.
CVSS 3.1HIGH 7.8· Local · Low privileges · No interaction · EPSS 0.00333 · Published 2026-09-08 · Fixed in 10.0.14393.9512, 10.0.17763.9245 +9 CWE-122
Priority LOW 36
Out-of-bounds read in Windows Error Reporting allows an authorized attacker to elevate privileges locally.
CVSS 3.1HIGH 7.8· Local · Low privileges · No interaction · EPSS 0.00333 · Published 2026-09-08 · Fixed in 10.0.14393.9512, 10.0.17763.9245 +10 CWE-125
Priority LOW 36
Heap-based buffer overflow in Windows Audio Service allows an authorized attacker to elevate privileges locally.
CVSS 3.1HIGH 7.8· Local · Low privileges · No interaction · EPSS 0.00333 · Published 2026-09-08 · Fixed in 10.0.22631.7582, 10.0.26100.9445 +3 CWE-122
Priority LOW 36
Improper limitation of a pathname to a restricted directory ('path traversal') in Windows Compressed Folder allows an authorized attacker to elevate privileges locally.
CVSS 3.1HIGH 7.8· Local · Low privileges · No interaction · EPSS 0.0037 · Published 2026-09-08 · Fixed in 10.0.14393.9512, 10.0.17763.9245 +10 CWE-22
Priority LOW 36
Heap-based buffer overflow in Microsoft Windows Speech allows an authorized attacker to elevate privileges locally.
CVSS 3.1HIGH 7.8· Local · Low privileges · No interaction · EPSS 0.00333 · Published 2026-09-08 · Fixed in 10.0.14393.9512, 10.0.17763.9245 +8 CWE-122
Priority LOW 36
Heap-based buffer overflow in Windows State Repository Service allows an authorized attacker to elevate privileges locally.
CVSS 3.1HIGH 7.8· Local · Low privileges · No interaction · EPSS 0.00333 · Published 2026-09-08 · Fixed in 10.0.17763.9245, 10.0.19044.7725 +7 CWE-122
Priority LOW 36
Heap-based buffer overflow in Windows Error Reporting allows an authorized attacker to elevate privileges locally.
CVSS 3.1HIGH 7.8· Local · Low privileges · No interaction · EPSS 0.00333 · Published 2026-09-08 · Fixed in 10.0.14393.9512, 10.0.17763.9245 +8 CWE-122
Priority LOW 36
Heap-based buffer overflow in Volume Manager Driver allows an authorized attacker to elevate privileges locally.
CVSS 3.1HIGH 7.8· Local · Low privileges · No interaction · EPSS 0.00333 · Published 2026-09-08 · Fixed in 10.0.14393.9512, 10.0.17763.9245 +10 CWE-122
Priority LOW 36
Heap-based buffer overflow in Windows IKE Extension allows an authorized attacker to execute code over a network.
CVSS 3.1HIGH 7.5· Network · Low privileges · No interaction · EPSS 0.00663 · Published 2026-09-08 · Fixed in 10.0.17763.9245, 10.0.19044.7725 +7 CWE-122
Priority LOW 36
Heap-based buffer overflow in Windows VOLSNAP.SYS allows an authorized attacker to execute code locally.
CVSS 3.1HIGH 7.8· Local · Low privileges · No interaction · EPSS 0.00333 · Published 2026-09-08 · Fixed in 10.0.14393.9512, 10.0.17763.9245 +10 CWE-122
Priority LOW 36
Heap-based buffer overflow in Windows Distributed File System (DFS) allows an authorized attacker to elevate privileges locally.
CVSS 3.1HIGH 7.8· Local · Low privileges · No interaction · EPSS 0.00333 · Published 2026-09-08 · Fixed in 10.0.14393.9512, 10.0.17763.9245 +10 CWE-122
Priority LOW 36
Integer underflow (wrap or wraparound) in Windows Kernel Mode Driver allows an authorized attacker to elevate privileges locally.
CVSS 3.1HIGH 7.8· Local · Low privileges · No interaction · EPSS 0.00333 · Published 2026-09-08 · Fixed in 10.0.14393.9512, 10.0.17763.9245 +10 CWE-122
Priority LOW 36
Heap-based buffer overflow in Windows VOLSNAP.SYS allows an authorized attacker to elevate privileges locally.
CVSS 3.1HIGH 7.8· Local · Low privileges · No interaction · EPSS 0.00333 · Published 2026-09-08 · Fixed in 10.0.14393.9512, 10.0.17763.9245 +10 CWE-122
Priority LOW 36
Integer overflow or wraparound in Volume Manager Driver allows an authorized attacker to elevate privileges locally.
CVSS 3.1HIGH 7.8· Local · Low privileges · No interaction · EPSS 0.00333 · Published 2026-09-08 · Fixed in 10.0.14393.9512, 10.0.17763.9245 +10 CWE-190
Priority LOW 36
Use after free in OpenSSH for Windows allows an unauthorized attacker to execute code over a network.
CVSS 3.1HIGH 7.5· Network · No auth · User interaction · EPSS 0.00608 · Published 2026-09-08 · Fixed in 10.0.17763.9245, 10.0.19044.7725 +7 CWE-416
Priority LOW 36
Use after free in Windows Shell allows an authorized attacker to elevate privileges locally.
CVSS 3.1HIGH 7.8· Local · Low privileges · No interaction · EPSS 0.00264 · Published 2026-09-08 · Fixed in 10.0.22631.7582, 10.0.26100.9445 +3 CWE-416
Priority LOW 36
Stack-based buffer overflow in Windows Broker Infrastructure Service allows an authorized attacker to elevate privileges locally.
CVSS 3.1HIGH 7.8· Local · Low privileges · No interaction · EPSS 0.00333 · Published 2026-09-08 · Fixed in 10.0.14393.9512, 10.0.17763.9245 +8 CWE-121
Priority LOW 36
Heap-based buffer overflow in Windows Storage Management Provider allows an authorized attacker to elevate privileges locally.
CVSS 3.1HIGH 7.8· Local · Low privileges · No interaction · EPSS 0.00333 · Published 2026-09-08 · Fixed in 10.0.14393.9512, 10.0.17763.9245 +10 CWE-122
Priority LOW 36
Missing authorization in Windows Modern Device Management (MDM) allows an authorized attacker to elevate privileges locally.
CVSS 3.1HIGH 7.8· Local · Low privileges · No interaction · EPSS 0.00298 · Published 2026-09-08 · Fixed in 10.0.17763.9245, 10.0.19044.7725 +7 CWE-862
Priority LOW 36
Heap-based buffer overflow in Windows Overlay Filter allows an authorized attacker to elevate privileges locally.
CVSS 3.1HIGH 7.8· Local · Low privileges · No interaction · EPSS 0.00333 · Published 2026-09-08 · Fixed in 10.0.14393.9512, 10.0.17763.9245 +9 CWE-122
Priority LOW 36
Heap-based buffer overflow in Active Directory Domain Services allows an authorized attacker to elevate privileges locally.
CVSS 3.1HIGH 7.8· Local · Low privileges · No interaction · EPSS 0.00333 · Published 2026-09-08 · Fixed in 10.0.14393.9512, 10.0.17763.9245 +8 CWE-122
Priority LOW 36
Heap-based buffer overflow in Windows Biometric Service allows an authorized attacker to elevate privileges locally.
CVSS 3.1HIGH 7.8· Local · Low privileges · No interaction · EPSS 0.00333 · Published 2026-09-08 · Fixed in 10.0.14393.9512, 10.0.17763.9245 +8 CWE-122
Priority LOW 36
Heap-based buffer overflow in Windows Win32K allows an authorized attacker to elevate privileges locally.
CVSS 3.1HIGH 7.8· Local · Low privileges · No interaction · EPSS 0.00333 · Published 2026-09-08 · Fixed in 10.0.26100.9445, 10.0.26200.9445 +2 CWE-122
Priority LOW 36
Untrusted search path in Windows Storage allows an authorized attacker to elevate privileges locally.
CVSS 3.1HIGH 7.8· Local · Low privileges · No interaction · EPSS 0.00457 · Published 2026-09-08 · Fixed in 10.0.14393.9512, 10.0.17763.9245 +8 CWE-426
Priority LOW 36
Access of resource using incompatible type ('type confusion') in Windows Performance Monitor allows an authorized attacker to elevate privileges locally.
CVSS 3.1HIGH 7.8· Local · Low privileges · No interaction · EPSS 0.00333 · Published 2026-09-08 · Fixed in 10.0.14393.9512, 10.0.17763.9245 +10 CWE-125
Priority LOW 36
Heap-based buffer overflow in Windows Biometric Service allows an authorized attacker to elevate privileges locally.
CVSS 3.1HIGH 7.8· Local · Low privileges · No interaction · EPSS 0.00333 · Published 2026-09-08 · Fixed in 10.0.14393.9512, 10.0.17763.9245 +8 CWE-122
Priority LOW 36
Out-of-bounds read in Windows NTFS allows an authorized attacker to elevate privileges locally.
CVSS 3.1HIGH 7.8· Local · Low privileges · No interaction · EPSS 0.00333 · Published 2026-09-08 · Fixed in 10.0.14393.9512, 10.0.17763.9245 +10 CWE-125
Priority LOW 36
Heap-based buffer overflow in Windows USB Audio Class driver (usbaudio.sys) allows an authorized attacker to elevate privileges locally.
CVSS 3.1HIGH 7.8· Local · Low privileges · No interaction · EPSS 0.00333 · Published 2026-09-08 · Fixed in 10.0.14393.9512, 10.0.17763.9245 +10 CWE-122
Priority LOW 36
Integer overflow or wraparound in Windows Biometric Service allows an authorized attacker to elevate privileges locally.
CVSS 3.1HIGH 7.8· Local · Low privileges · No interaction · EPSS 0.00333 · Published 2026-09-08 · Fixed in 10.0.14393.9512, 10.0.17763.9245 +8 CWE-190
Priority LOW 36
Out-of-bounds read in Windows USB Driver allows an authorized attacker to elevate privileges locally.
CVSS 3.1HIGH 7.8· Local · Low privileges · No interaction · EPSS 0.00333 · Published 2026-09-08 · Fixed in 10.0.14393.9512, 10.0.17763.9245 +9 CWE-125
Priority LOW 36
Heap-based buffer overflow in Windows Biometric Service allows an authorized attacker to elevate privileges locally.
CVSS 3.1HIGH 7.8· Local · Low privileges · No interaction · EPSS 0.00333 · Published 2026-09-08 · Fixed in 10.0.14393.9512, 10.0.17763.9245 +8 CWE-122
Priority LOW 36
Stack-based buffer overflow in Windows Storage Spaces Controller allows an authorized attacker to elevate privileges locally.
CVSS 3.1HIGH 7.8· Local · Low privileges · No interaction · EPSS 0.00333 · Published 2026-09-08 · Fixed in 10.0.14393.9512, 10.0.17763.9245 +10 CWE-121
Priority LOW 36
Improper link resolution before file access ('link following') in Windows Setup Files Cleanup allows an authorized attacker to elevate privileges locally.
CVSS 3.1HIGH 7.8· Local · Low privileges · No interaction · EPSS 0.0037 · Published 2026-09-08 · Fixed in 10.0.14393.9512, 10.0.17763.9245 +10 CWE-59
Priority LOW 36
Stack-based buffer overflow in Microsoft Local Security Authority Server (lsasrv) allows an authorized attacker to elevate privileges locally.
CVSS 3.1HIGH 7.8· Local · Low privileges · No interaction · EPSS 0.00333 · Published 2026-09-08 · Fixed in 10.0.14393.9512, 10.0.17763.9245 +10 CWE-121
Priority LOW 36
Heap-based buffer overflow in Windows USB Audio Class driver (usbaudio.sys) allows an authorized attacker to elevate privileges locally.
CVSS 3.1HIGH 7.8· Local · Low privileges · No interaction · EPSS 0.00333 · Published 2026-09-08 · Fixed in 10.0.14393.9512, 10.0.17763.9245 +10 CWE-122
Priority LOW 36
Integer underflow (wrap or wraparound) in Microsoft Standard XPS allows an authorized attacker to elevate privileges locally.
CVSS 3.1HIGH 7.8· Local · Low privileges · No interaction · EPSS 0.00333 · Published 2026-09-08 · Fixed in 10.0.14393.9512, 10.0.17763.9245 +10 CWE-191
Priority LOW 36
Out-of-bounds read in Windows NTFS allows an authorized attacker to elevate privileges locally.
CVSS 3.1HIGH 7.8· Local · Low privileges · No interaction · EPSS 0.00333 · Published 2026-09-08 · Fixed in 10.0.14393.9512, 10.0.17763.9245 +10 CWE-125
Priority LOW 36
Absolute path traversal in Microsoft Windows Search Component allows an authorized attacker to elevate privileges locally.
CVSS 3.1HIGH 7.8· Local · Low privileges · No interaction · EPSS 0.0037 · Published 2026-09-08 · Fixed in 10.0.22631.7582, 10.0.26100.9445 +4 CWE-36
Priority LOW 36
Heap-based buffer overflow in Microsoft Standard XPS allows an authorized attacker to elevate privileges locally.
CVSS 3.1HIGH 7.8· Local · Low privileges · No interaction · EPSS 0.00333 · Published 2026-09-08 · Fixed in 10.0.14393.9512, 10.0.17763.9245 +10 CWE-122
Priority LOW 36
Heap-based buffer overflow in Microsoft Standard XPS allows an authorized attacker to elevate privileges locally.
CVSS 3.1HIGH 7.8· Local · Low privileges · No interaction · EPSS 0.00333 · Published 2026-09-08 · Fixed in 10.0.14393.9512, 10.0.17763.9245 +10 CWE-122
Priority LOW 36
Heap-based buffer overflow in Microsoft Standard XPS allows an authorized attacker to elevate privileges locally.
CVSS 3.1HIGH 7.8· Local · Low privileges · No interaction · EPSS 0.00333 · Published 2026-09-08 · Fixed in 10.0.14393.9512, 10.0.17763.9245 +10 CWE-122
Priority LOW 36
Heap-based buffer overflow in Microsoft Standard XPS allows an authorized attacker to elevate privileges locally.
CVSS 3.1HIGH 7.8· Local · Low privileges · No interaction · EPSS 0.00333 · Published 2026-09-08 · Fixed in 10.0.14393.9512, 10.0.17763.9245 +10 CWE-122
Priority LOW 36
Heap-based buffer overflow in Windows Storage Spaces Controller allows an authorized attacker to execute code locally.
CVSS 3.1HIGH 7.8· Local · Low privileges · No interaction · EPSS 0.00333 · Published 2026-09-08 · Fixed in 10.0.14393.9512, 10.0.17763.9245 +8 CWE-122
Priority LOW 36
Buffer over-read in Windows NTFS allows an authorized attacker to execute code locally.
CVSS 3.1HIGH 7.8· Local · Low privileges · No interaction · EPSS 0.00333 · Published 2026-09-08 · Fixed in 10.0.14393.9512, 10.0.17763.9245 +10 CWE-126
Priority LOW 36
Heap-based buffer overflow in Windows Print Spooler Components allows an authorized attacker to elevate privileges locally.
CVSS 3.1HIGH 7.8· Local · Low privileges · No interaction · EPSS 0.00333 · Published 2026-09-08 · Fixed in 10.0.14393.9512, 10.0.17763.9245 +10 CWE-122
Priority LOW 36
Heap-based buffer overflow in Windows Program Compatibility Assistant Service allows an authorized attacker to elevate privileges locally.
CVSS 3.1HIGH 7.8· Local · Low privileges · No interaction · EPSS 0.00333 · Published 2026-09-08 · Fixed in 10.0.14393.9512, 10.0.17763.9245 +10 CWE-122
Priority LOW 36
Heap-based buffer overflow in Windows Storage Spaces Controller allows an authorized attacker to execute code locally.
CVSS 3.1HIGH 7.8· Local · Low privileges · No interaction · EPSS 0.00333 · Published 2026-09-08 · Fixed in 10.0.14393.9512, 10.0.17763.9245 +8 CWE-122
Priority LOW 36
Heap-based buffer overflow in Windows NTFS allows an authorized attacker to elevate privileges locally.
CVSS 3.1HIGH 7.8· Local · Low privileges · No interaction · EPSS 0.00333 · Published 2026-09-08 · Fixed in 10.0.14393.9512, 10.0.17763.9245 +10 CWE-122
Priority LOW 36
Integer overflow or wraparound in Windows NTFS allows an authorized attacker to elevate privileges locally.
CVSS 3.1HIGH 7.8· Local · Low privileges · No interaction · EPSS 0.00333 · Published 2026-09-08 · Fixed in 10.0.14393.9512, 10.0.17763.9245 +10 CWE-190
Priority LOW 36
Use after free in Active Directory Domain Services allows an authorized attacker to execute code over a network.
CVSS 3.1HIGH 7.5· Network · Low privileges · No interaction · EPSS 0.00663 · Published 2026-09-08 · Fixed in 10.0.14393.9512, 10.0.17763.9245 +10 CWE-416
Priority LOW 36
Heap-based buffer overflow in Active Directory Certificate Services (AD CS) allows an authorized attacker to elevate privileges locally.
CVSS 3.1HIGH 7.8· Local · Low privileges · No interaction · EPSS 0.00333 · Published 2026-09-08 · Fixed in 10.0.14393.9512, 10.0.17763.9245 +10 CWE-122
Priority LOW 36
Use after free in Windows Push Notifications allows an authorized attacker to elevate privileges locally.
CVSS 3.1HIGH 7.8· Local · Low privileges · No interaction · EPSS 0.00333 · Published 2026-09-08 · Fixed in 10.0.19044.7725, 10.0.19045.7725 +6 CWE-416
Priority LOW 36
Out-of-bounds read in Microsoft Trace Data Helper allows an authorized attacker to elevate privileges locally.
CVSS 3.1HIGH 7.8· Local · Low privileges · No interaction · EPSS 0.00333 · Published 2026-09-08 · Fixed in 10.0.26100.9445, 10.0.26200.9445 +2 CWE-125
Priority LOW 36
Use after free in Windows Server allows an authorized attacker to elevate privileges locally.
CVSS 3.1HIGH 7.8· Local · Low privileges · No interaction · EPSS 0.00333 · Published 2026-09-08 · Fixed in 10.0.14393.9512, 10.0.17763.9245 +8 CWE-416
Priority LOW 36
Use after free in Windows VHD miniport driver allows an authorized attacker to elevate privileges locally.
CVSS 3.1HIGH 7.8· Local · Low privileges · No interaction · EPSS 0.00333 · Published 2026-09-08 · Fixed in 10.0.17763.9245, 10.0.19044.7725 +7 CWE-416
Priority LOW 35
Heap-based buffer overflow in Windows Graphics Kernel allows an authorized attacker to execute code locally.
CVSS 3.1HIGH 7.5· Local · High privileges · No interaction · EPSS 0.00276 · Published 2026-09-08 · Fixed in 10.0.17763.9245, 10.0.19044.7725 +7 CWE-122
Priority LOW 35
Use after free in Windows Virtual Trusted Platform Module allows an authorized attacker to elevate privileges locally.
CVSS 3.1HIGH 7.5· Local · High privileges · No interaction · EPSS 0.00276 · Published 2026-09-08 · Fixed in 10.0.17763.9245, 10.0.19044.7725 +7 CWE-416
Priority LOW 35
Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Hello allows an authorized attacker to elevate privileges locally.
CVSS 3.1HIGH 7.8· Local · Low privileges · No interaction · EPSS 0.00202 · Published 2026-09-08 · Fixed in 10.0.19044.7725, 10.0.19045.7725 +4 CWE-362
Priority LOW 35
Missing authorization in Windows Hyper-V allows an authorized attacker to elevate privileges over a network.
CVSS 3.1HIGH 7.5· Network · Low privileges · No interaction · EPSS 0.00486 · Published 2026-09-08 · Fixed in 10.0.17763.9245, 10.0.19044.7725 +7 CWE-862
Priority LOW 35
Authentication bypass by spoofing in Windows Netlogon allows an unauthorized attacker to perform spoofing over an adjacent network.
CVSS 3.1HIGH 7.5· Adjacent network · No auth · No interaction · EPSS 0.00383 · Published 2026-09-08 · Fixed in 10.0.14393.9512, 10.0.17763.9245 +10 CWE-290
Priority LOW 34
Integer overflow or wraparound in Remote Desktop Client allows an unauthorized attacker to deny service over a network.
CVSS 3.1HIGH 7.5· Network · No auth · No interaction · EPSS 0.007 · Published 2026-09-08 · Fixed in 10.0.14393.9512, 10.0.17763.9245 +8 CWE-190
Priority LOW 34
Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Hello allows an authorized attacker to elevate privileges locally.
CVSS 3.1HIGH 7.5· Local · High privileges · No interaction · EPSS 0.00211 · Published 2026-09-08 · Fixed in 10.0.19044.7725, 10.0.19045.7725 +4 CWE-362
Priority LOW 34
Use after free in Windows Remote Desktop Services allows an authorized attacker to execute code over a network.
CVSS 3.1HIGH 7.1· Network · Low privileges · User interaction · EPSS 0.0057 · Published 2026-09-08 · Fixed in 10.0.22631.7582, 10.0.26100.9445 +3 CWE-416
Priority LOW 34
Creation of temporary file in directory with insecure permissions in Windows Error Reporting allows an authorized attacker to perform tampering locally.
CVSS 3.1HIGH 7.1· Local · Low privileges · No interaction · EPSS 0.00463 · Published 2026-09-08 · Fixed in 10.0.14393.9512, 10.0.17763.9245 +8 CWE-379
Priority LOW 34
Use after free in Windows Modern Device Management (MDM) allows an authorized attacker to elevate privileges over a network.
CVSS 3.1HIGH 7.1· Network · Low privileges · User interaction · EPSS 0.0057 · Published 2026-09-08 · Fixed in 10.0.17763.9245, 10.0.19044.7725 +7 CWE-416
Priority LOW 34
Use after free in Windows Management Instrumentation allows an authorized attacker to elevate privileges over a network.
CVSS 3.1HIGH 7.1· Network · Low privileges · User interaction · EPSS 0.0057 · Published 2026-09-08 · Fixed in 10.0.14393.9512, 10.0.17763.9245 +10 CWE-416
Priority LOW 34
Use after free in Windows NDIS allows an authorized attacker to elevate privileges over a network.
CVSS 3.1HIGH 7.1· Network · Low privileges · User interaction · EPSS 0.0057 · Published 2026-09-08 · Fixed in 10.0.14393.9512, 10.0.17763.9245 +10 CWE-416
Priority LOW 34
Use after free in Windows Kernel allows an authorized attacker to elevate privileges over a network.
CVSS 3.1HIGH 7.1· Network · Low privileges · User interaction · EPSS 0.0057 · Published 2026-09-08 · Fixed in 10.0.14393.9512, 10.0.17763.9245 +10 CWE-416
Priority LOW 34
Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Print Spooler Components allows an authorized attacker to elevate privileges over a network.
CVSS 3.1HIGH 7.1· Network · Low privileges · User interaction · EPSS 0.00437 · Published 2026-09-08 · Fixed in 10.0.14393.9512, 10.0.17763.9245 +10 CWE-362
Priority LOW 34
Use of uninitialized resource in Remote Desktop Client allows an authorized attacker to execute code over a network.
CVSS 3.1HIGH 7.1· Network · Low privileges · User interaction · EPSS 0.0057 · Published 2026-09-08 · Fixed in 10.0.14393.9512, 10.0.17763.9245 +8 CWE-908
Priority LOW 34
Heap-based buffer overflow in Windows Fast FAT Driver allows an unauthorized attacker to execute code locally.
CVSS 3.1HIGH 7.4· Local · No auth · No interaction · EPSS 0.00288 · Published 2026-09-08 · Fixed in 10.0.14393.9512, 10.0.17763.9245 +10 CWE-122
Priority LOW 34
Heap-based buffer overflow in Windows NTFS allows an authorized attacker to elevate privileges over a network.
CVSS 3.1HIGH 7.1· Network · Low privileges · User interaction · EPSS 0.0057 · Published 2026-09-08 · Fixed in 10.0.14393.9512, 10.0.17763.9245 +10 CWE-122
Priority LOW 34
Double free in Windows Registry allows an authorized attacker to elevate privileges over a network.
CVSS 3.1HIGH 7.1· Network · Low privileges · User interaction · EPSS 0.0057 · Published 2026-09-08 · Fixed in 10.0.14393.9512, 10.0.17763.9245 +10 CWE-415
Priority LOW 34
Heap-based buffer overflow in Microsoft Standard XPS allows an authorized attacker to elevate privileges over a network.
CVSS 3.1HIGH 7.1· Network · Low privileges · User interaction · EPSS 0.0057 · Published 2026-09-08 · Fixed in 10.0.14393.9512, 10.0.17763.9245 +10 CWE-122
Priority LOW 34
Use after free in Windows Device Association Broker service allows an authorized attacker to elevate privileges over a network.
CVSS 3.1HIGH 7.1· Network · Low privileges · User interaction · EPSS 0.0057 · Published 2026-09-08 · Fixed in 10.0.14393.9512, 10.0.17763.9245 +8 CWE-416
Priority LOW 34
Heap-based buffer overflow in Microsoft Standard XPS allows an authorized attacker to elevate privileges over a network.
CVSS 3.1HIGH 7.1· Network · Low privileges · User interaction · EPSS 0.0057 · Published 2026-09-08 · Fixed in 10.0.14393.9512, 10.0.17763.9245 +10 CWE-122
Priority LOW 34
Use after free in Microsoft Windows Search Component allows an authorized attacker to elevate privileges over a network.
CVSS 3.1HIGH 7.1· Network · Low privileges · User interaction · EPSS 0.0057 · Published 2026-09-08 · Fixed in 10.0.14393.9512, 10.0.17763.9245 +10 CWE-416
Priority LOW 34
Use after free in Windows Device Association Service allows an authorized attacker to elevate privileges over a network.
CVSS 3.1HIGH 7.1· Network · Low privileges · User interaction · EPSS 0.0057 · Published 2026-09-08 · Fixed in 10.0.14393.9512, 10.0.17763.9245 +10 CWE-416
Priority LOW 34
Use after free in Windows Win32K allows an authorized attacker to elevate privileges over a network.
CVSS 3.1HIGH 7.1· Network · Low privileges · User interaction · EPSS 0.0057 · Published 2026-09-08 · Fixed in 10.0.14393.9512, 10.0.17763.9245 +9 CWE-416
Priority LOW 34
Heap-based buffer overflow in Microsoft Standard XPS allows an authorized attacker to elevate privileges over a network.
CVSS 3.1HIGH 7.1· Network · Low privileges · User interaction · EPSS 0.0057 · Published 2026-09-08 · Fixed in 10.0.14393.9512, 10.0.17763.9245 +10 CWE-122
Priority LOW 34
Heap-based buffer overflow in Microsoft Standard XPS allows an authorized attacker to elevate privileges over a network.
CVSS 3.1HIGH 7.1· Network · Low privileges · User interaction · EPSS 0.0057 · Published 2026-09-08 · Fixed in 10.0.14393.9512, 10.0.17763.9245 +10 CWE-122
Priority LOW 34
Use after free in Windows Kernel allows an authorized attacker to elevate privileges over a network.
CVSS 3.1HIGH 7.1· Network · Low privileges · User interaction · EPSS 0.0057 · Published 2026-09-08 · Fixed in 10.0.14393.9512, 10.0.17763.9245 +10 CWE-416
Priority LOW 34
Use after free in Windows Print Spooler Components allows an authorized attacker to elevate privileges over a network.
CVSS 3.1HIGH 7.1· Network · Low privileges · User interaction · EPSS 0.0057 · Published 2026-09-08 · Fixed in 10.0.14393.9512, 10.0.17763.9245 +10 CWE-416
Priority LOW 33
Improper link resolution before file access ('link following') in Windows Resilient File System (ReFS) Deduplication Service allows an authorized attacker to elevate privileges locally.
CVSS 3.1HIGH 7.0· Local · Low privileges · No interaction · EPSS 0.00283 · Published 2026-09-08 · Fixed in 10.0.26100.9445, 10.0.26200.9445 +2 CWE-59
Priority LOW 33
Use after free in Windows Cloud Files Mini Filter Driver allows an authorized attacker to elevate privileges locally.
CVSS 3.1HIGH 7.0· Local · Low privileges · No interaction · EPSS 0.00323 · Published 2026-09-08 · Fixed in 10.0.17763.9245, 10.0.19044.7725 +7 CWE-416
Priority LOW 33
Use after free in Windows Distributed File System (DFS) allows an authorized attacker to execute code over a network.
CVSS 3.1HIGH 7.5· Network · Low privileges · No interaction · EPSS 0.00476 · Published 2026-09-08 · Fixed in 10.0.14393.9512, 10.0.17763.9245 +10 CWE-416
Priority LOW 33
Heap-based buffer overflow in Windows Biometric Service allows an authorized attacker to elevate privileges locally.
CVSS 3.1HIGH 7.0· Local · Low privileges · No interaction · EPSS 0.00281 · Published 2026-09-08 · Fixed in 10.0.14393.9512, 10.0.17763.9245 +8 CWE-122
Priority LOW 33
Out-of-bounds read in Virtual Hard Disk (VHD) Miniport Driver allows an authorized attacker to elevate privileges locally.
CVSS 3.1HIGH 7.0· Local · Low privileges · No interaction · EPSS 0.00312 · Published 2026-09-08 · Fixed in 10.0.17763.9245, 10.0.19044.7725 +7 CWE-125
Priority LOW 33
External control of file name or path in Windows Shell allows an authorized attacker to elevate privileges locally.
CVSS 3.1HIGH 7.0· Local · Low privileges · No interaction · EPSS 0.00362 · Published 2026-09-08 · Fixed in 10.0.22631.7582, 10.0.26100.9445 +3 CWE-73
Priority LOW 33
Improper link resolution before file access ('link following') in Windows NTFS allows an authorized attacker to elevate privileges locally.
CVSS 3.1HIGH 7.0· Local · Low privileges · No interaction · EPSS 0.00283 · Published 2026-09-08 · Fixed in 10.0.22631.7582, 10.0.26100.9445 +3 CWE-59
Priority LOW 32
Use after free in Windows Kernel allows an authorized attacker to elevate privileges locally.
CVSS 3.1HIGH 7.0· Local · Low privileges · No interaction · EPSS 0.00264 · Published 2026-09-08 · Fixed in 10.0.14393.9512, 10.0.17763.9245 +10 CWE-416
Priority LOW 32
Use after free in Windows Device Association Service allows an authorized attacker to elevate privileges locally.
CVSS 3.1HIGH 7.0· Local · Low privileges · No interaction · EPSS 0.00264 · Published 2026-09-08 · Fixed in 10.0.14393.9512, 10.0.17763.9245 +8 CWE-416
Priority LOW 32
Time-of-check time-of-use (toctou) race condition in Windows MIDI Service Module allows an authorized attacker to elevate privileges locally.
CVSS 3.1HIGH 7.0· Local · Low privileges · No interaction · EPSS 0.00202 · Published 2026-09-08 · Fixed in 10.0.26100.9445, 10.0.26200.9445 +1 CWE-367
Priority LOW 32
Use after free in Windows Security App allows an authorized attacker to elevate privileges locally.
CVSS 3.1HIGH 7.0· Local · Low privileges · No interaction · EPSS 0.00264 · Published 2026-09-08 · Fixed in 10.0.26100.9445, 10.0.26200.9445 +3 CWE-416
Priority LOW 32
Untrusted pointer dereference in Microsoft Windows SCSI Class System File allows an unauthorized attacker to elevate privileges with a physical attack.
CVSS 3.1MEDIUM 6.8· Physical · No auth · No interaction · EPSS 0.00438 · Published 2026-09-08 · Fixed in 10.0.17763.9245, 10.0.19044.7725 +7 CWE-822
Priority LOW 32
Use after free in Windows Management Instrumentation allows an authorized attacker to elevate privileges locally.
CVSS 3.1HIGH 7.0· Local · Low privileges · No interaction · EPSS 0.00264 · Published 2026-09-08 · Fixed in 10.0.14393.9512, 10.0.17763.9245 +10 CWE-416
Priority LOW 32
Use after free in Windows Security Center allows an authorized attacker to elevate privileges locally.
CVSS 3.1HIGH 7.0· Local · Low privileges · No interaction · EPSS 0.00264 · Published 2026-09-08 · Fixed in 10.0.26100.9445, 10.0.26200.9445 +2 CWE-416
Priority LOW 32
Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Installer allows an authorized attacker to elevate privileges locally.
CVSS 3.1HIGH 7.0· Local · Low privileges · No interaction · EPSS 0.00202 · Published 2026-09-08 · Fixed in 10.0.14393.9512, 10.0.17763.9245 +10 CWE-362
Priority LOW 32
No cwe for this issue in Windows Boot Manager allows an unauthorized attacker to elevate privileges with a physical attack.
CVSS 3.1MEDIUM 6.8· Physical · No auth · No interaction · EPSS 0.00438 · Published 2026-09-08 · Fixed in 10.0.14393.9512, 10.0.17763.9245 +10 CWE-693
Priority LOW 32
Use after free in Windows Modern Device Management (MDM) allows an authorized attacker to elevate privileges locally.
CVSS 3.1HIGH 7.0· Local · Low privileges · No interaction · EPSS 0.00264 · Published 2026-09-08 · Fixed in 10.0.17763.9245, 10.0.19044.7725 +7 CWE-416
Priority LOW 32
Use after free in Windows Authentication Methods allows an authorized attacker to elevate privileges locally.
CVSS 3.1HIGH 7.0· Local · Low privileges · No interaction · EPSS 0.00202 · Published 2026-09-08 · Fixed in 10.0.14393.9512, 10.0.17763.9245 +8 CWE-362
Priority LOW 32
Use after free in Windows Modern Device Management (MDM) allows an authorized attacker to elevate privileges locally.
CVSS 3.1HIGH 7.0· Local · Low privileges · No interaction · EPSS 0.00264 · Published 2026-09-08 · Fixed in 10.0.17763.9245, 10.0.19044.7725 +7 CWE-416
Priority LOW 32
Out-of-bounds read in Windows USB Hub Driver allows an unauthorized attacker to elevate privileges with a physical attack.
CVSS 3.1MEDIUM 6.8· Physical · No auth · No interaction · EPSS 0.00438 · Published 2026-09-08 · Fixed in 10.0.14393.9512, 10.0.17763.9245 +8 CWE-125
Priority LOW 32
Heap-based buffer overflow in Windows Volume Shadow Copy allows an unauthorized attacker to elevate privileges with a physical attack.
CVSS 3.1MEDIUM 6.8· Physical · No auth · No interaction · EPSS 0.00438 · Published 2026-09-08 · Fixed in 10.0.14393.9512, 10.0.17763.9245 +10 CWE-122
Priority LOW 32
Use after free in Windows Modern Execution Server allows an authorized attacker to elevate privileges locally.
CVSS 3.1HIGH 7.0· Local · Low privileges · No interaction · EPSS 0.00264 · Published 2026-09-08 · Fixed in 10.0.14393.9512, 10.0.17763.9245 +8 CWE-416
Priority LOW 32
Out-of-bounds read in Windows Spaceport.sys allows an authorized attacker to execute code locally.
CVSS 3.1HIGH 7.0· Local · Low privileges · No interaction · EPSS 0.00264 · Published 2026-09-08 · Fixed in 10.0.17763.9245, 10.0.19044.7725 +7 CWE-125
Priority LOW 32
Integer underflow (wrap or wraparound) in Windows File History Service allows an authorized attacker to elevate privileges locally.
CVSS 3.1HIGH 7.0· Local · Low privileges · No interaction · EPSS 0.00268 · Published 2026-09-08 · Fixed in 10.0.14393.9512, 10.0.17763.9245 +6 CWE-191
Priority LOW 32
Out-of-bounds read in Windows NTFS allows an authorized attacker to elevate privileges locally.
CVSS 3.1MEDIUM 6.7· Local · High privileges · No interaction · EPSS 0.00348 · Published 2026-09-08 · Fixed in 10.0.14393.9512, 10.0.17763.9245 +10 CWE-125
Priority LOW 32
Use after free in Windows Secure Socket Tunneling Protocol (SSTP) allows an authorized attacker to execute code locally.
CVSS 3.1HIGH 7.0· Local · Low privileges · No interaction · EPSS 0.00264 · Published 2026-09-08 · Fixed in 10.0.14393.9512, 10.0.17763.9245 +10 CWE-416
Priority LOW 32
Use after free in Windows Internet Connection Sharing (ICS) allows an authorized attacker to elevate privileges locally.
CVSS 3.1HIGH 7.0· Local · Low privileges · No interaction · EPSS 0.00264 · Published 2026-09-08 · Fixed in 10.0.14393.9512, 10.0.17763.9245 +8 CWE-416
Priority LOW 32
Double free in Windows Routing and Remote Access Service (RRAS) allows an authorized attacker to elevate privileges locally.
CVSS 3.1HIGH 7.0· Local · Low privileges · No interaction · EPSS 0.00264 · Published 2026-09-08 · Fixed in 10.0.14393.9512, 10.0.17763.9245 +10 CWE-415
Priority LOW 32
Double free in Windows Routing and Remote Access Service (RRAS) allows an authorized attacker to elevate privileges locally.
CVSS 3.1HIGH 7.0· Local · Low privileges · No interaction · EPSS 0.00264 · Published 2026-09-08 · Fixed in 10.0.14393.9512, 10.0.17763.9245 +10 CWE-415
Priority LOW 32
Heap-based buffer overflow in Windows Spaceport.sys allows an unauthorized attacker to execute code with a physical attack.
CVSS 3.1MEDIUM 6.8· Physical · No auth · No interaction · EPSS 0.00438 · Published 2026-09-08 · Fixed in 10.0.14393.9512, 10.0.17763.9245 +10 CWE-122
Priority LOW 32
Heap-based buffer overflow in Windows Spaceport.sys allows an unauthorized attacker to execute code with a physical attack.
CVSS 3.1MEDIUM 6.8· Physical · No auth · No interaction · EPSS 0.00438 · Published 2026-09-08 · Fixed in 10.0.14393.9512, 10.0.17763.9245 +10 CWE-122
Priority LOW 32
Heap-based buffer overflow in Windows Spaceport.sys allows an unauthorized attacker to execute code with a physical attack.
CVSS 3.1MEDIUM 6.8· Physical · No auth · No interaction · EPSS 0.00438 · Published 2026-09-08 · Fixed in 10.0.14393.9512, 10.0.17763.9245 +10 CWE-122
Priority LOW 32
Use after free in Windows Remote Access Connection Manager allows an authorized attacker to elevate privileges locally.
CVSS 3.1HIGH 7.0· Local · Low privileges · No interaction · EPSS 0.00264 · Published 2026-09-08 · Fixed in 10.0.14393.9512, 10.0.17763.9245 +9 CWE-416
Priority LOW 32
Use after free in Windows File History Service allows an authorized attacker to elevate privileges locally.
CVSS 3.1HIGH 7.0· Local · Low privileges · No interaction · EPSS 0.00264 · Published 2026-09-08 · Fixed in 10.0.14393.9512, 10.0.17763.9245 +6 CWE-416
Priority LOW 32
Use after free in Windows Remote Access Connection Manager allows an authorized attacker to elevate privileges locally.
CVSS 3.1HIGH 7.0· Local · Low privileges · No interaction · EPSS 0.00264 · Published 2026-09-08 · Fixed in 10.0.14393.9512, 10.0.17763.9245 +10 CWE-416
Priority LOW 32
Use after free in Windows Secure Socket Tunneling Protocol (SSTP) allows an authorized attacker to elevate privileges locally.
CVSS 3.1HIGH 7.0· Local · Low privileges · No interaction · EPSS 0.00264 · Published 2026-09-08 · Fixed in 10.0.14393.9512, 10.0.17763.9245 +8 CWE-416
Priority LOW 32
Heap-based buffer overflow in Windows NTFS allows an unauthorized attacker to execute code with a physical attack.
CVSS 3.1MEDIUM 6.8· Physical · No auth · No interaction · EPSS 0.00438 · Published 2026-09-08 · Fixed in 10.0.14393.9512, 10.0.17763.9245 +10 CWE-122
Priority LOW 32
Heap-based buffer overflow in Windows Credential Guard allows an authorized attacker to elevate privileges locally.
CVSS 3.1HIGH 7.0· Local · Low privileges · No interaction · EPSS 0.00264 · Published 2026-09-08 · Fixed in 10.0.19044.7725, 10.0.19045.7725 +4 CWE-122
Priority LOW 32
Use after free in Windows Modern Device Management (MDM) allows an authorized attacker to elevate privileges locally.
CVSS 3.1HIGH 7.0· Local · Low privileges · No interaction · EPSS 0.00264 · Published 2026-09-08 · Fixed in 10.0.17763.9245, 10.0.19044.7725 +7 CWE-416
Priority LOW 32
Heap-based buffer overflow in Windows Defender Firewall Service allows an authorized attacker to elevate privileges locally.
CVSS 3.1HIGH 7.0· Local · Low privileges · No interaction · EPSS 0.00264 · Published 2026-09-08 · Fixed in 10.0.14393.9512, 10.0.17763.9245 +10 CWE-122
Priority LOW 32
Double free in Windows Display Enhancement Service allows an authorized attacker to elevate privileges locally.
CVSS 3.1HIGH 7.0· Local · Low privileges · No interaction · EPSS 0.00264 · Published 2026-09-08 · Fixed in 10.0.26100.9445, 10.0.26200.9445 +2 CWE-415
Priority LOW 32
Use after free in Windows AF_UNIX Socket Provider allows an authorized attacker to elevate privileges locally.
CVSS 3.1HIGH 7.0· Local · Low privileges · No interaction · EPSS 0.00264 · Published 2026-09-08 · Fixed in 10.0.14393.9512, 10.0.17763.9245 +10 CWE-416
Priority LOW 32
Double free in Windows Audio Service allows an authorized attacker to elevate privileges locally.
CVSS 3.1HIGH 7.0· Local · Low privileges · No interaction · EPSS 0.00264 · Published 2026-09-08 · Fixed in 10.0.14393.9512, 10.0.17763.9245 +10 CWE-415
Priority LOW 32
Incorrect authorization in Windows Win32K allows an authorized attacker to elevate privileges locally.
CVSS 3.1HIGH 7.0· Local · Low privileges · No interaction · EPSS 0.00236 · Published 2026-09-08 · Fixed in 10.0.14393.9512, 10.0.17763.9245 +10 CWE-863
Priority LOW 32
Use after free in Microsoft Windows Search Component allows an authorized attacker to elevate privileges locally.
CVSS 3.1HIGH 7.0· Local · Low privileges · No interaction · EPSS 0.00264 · Published 2026-09-08 · Fixed in 10.0.14393.9512, 10.0.17763.9245 +10 CWE-416
Priority LOW 32
Use after free in Windows Error Reporting allows an authorized attacker to elevate privileges locally.
CVSS 3.1HIGH 7.0· Local · Low privileges · No interaction · EPSS 0.00264 · Published 2026-09-08 · Fixed in 10.0.26100.9445, 10.0.26200.9445 +2 CWE-416
Priority LOW 32
Use after free in Windows Media allows an authorized attacker to elevate privileges locally.
CVSS 3.1HIGH 7.0· Local · Low privileges · No interaction · EPSS 0.00264 · Published 2026-09-08 · Fixed in 10.0.14393.9512, 10.0.17763.9245 +8 CWE-416
Priority LOW 32
Use after free in Windows Bluetooth Service allows an authorized attacker to elevate privileges locally.
CVSS 3.1HIGH 7.0· Local · Low privileges · No interaction · EPSS 0.00264 · Published 2026-09-08 · Fixed in 10.0.17763.9245, 10.0.19044.7725 +7 CWE-416
Priority LOW 32
Use after free in Windows Device Association Service allows an authorized attacker to elevate privileges locally.
CVSS 3.1HIGH 7.0· Local · Low privileges · No interaction · EPSS 0.00264 · Published 2026-09-08 · Fixed in 10.0.17763.9245, 10.0.19044.7725 +7 CWE-416
Priority LOW 32
Time-of-check time-of-use (toctou) race condition in Windows USB Audio Class driver (usbaudio.sys) allows an authorized attacker to elevate privileges locally.
CVSS 3.1HIGH 7.0· Local · Low privileges · No interaction · EPSS 0.00202 · Published 2026-09-08 · Fixed in 10.0.14393.9512, 10.0.17763.9245 +10 CWE-191
Priority LOW 32
Use after free in Windows Print Spooler Components allows an authorized attacker to elevate privileges locally.
CVSS 3.1HIGH 7.0· Local · Low privileges · No interaction · EPSS 0.00264 · Published 2026-09-08 · Fixed in 10.0.14393.9512, 10.0.17763.9245 +9 CWE-416
Priority LOW 32
Use after free in Windows ALPC allows an authorized attacker to elevate privileges locally.
CVSS 3.1HIGH 7.0· Local · Low privileges · No interaction · EPSS 0.00264 · Published 2026-09-08 · Fixed in 10.0.14393.9512, 10.0.17763.9245 +10 CWE-416
Priority LOW 32
Use after free in Windows Win32K allows an authorized attacker to elevate privileges locally.
CVSS 3.1HIGH 7.0· Local · Low privileges · No interaction · EPSS 0.00264 · Published 2026-09-08 · Fixed in 10.0.26100.9445, 10.0.26200.9445 +2 CWE-416
Priority LOW 32
Use after free in Windows Bluetooth Port Driver allows an authorized attacker to elevate privileges locally.
CVSS 3.1HIGH 7.0· Local · Low privileges · No interaction · EPSS 0.00264 · Published 2026-09-08 · Fixed in 10.0.14393.9512, 10.0.17763.9245 +10 CWE-416
Priority LOW 32
Use after free in Windows Accounts Control allows an authorized attacker to elevate privileges locally.
CVSS 3.1HIGH 7.0· Local · Low privileges · No interaction · EPSS 0.00264 · Published 2026-09-08 · Fixed in 10.0.14393.9512, 10.0.17763.9245 +8 CWE-416
Priority LOW 32
Use after free in Windows Credential Providers allows an authorized attacker to elevate privileges locally.
CVSS 3.1HIGH 7.0· Local · Low privileges · No interaction · EPSS 0.00264 · Published 2026-09-08 · Fixed in 10.0.22631.7582, 10.0.26100.9445 +3 CWE-416
Priority LOW 32
Use after free in Windows Device Association Service allows an authorized attacker to elevate privileges locally.
CVSS 3.1HIGH 7.0· Local · Low privileges · No interaction · EPSS 0.00264 · Published 2026-09-08 · Fixed in 10.0.17763.9245, 10.0.19044.7725 +7 CWE-416
Priority LOW 32
Time-of-check time-of-use (toctou) race condition in Windows Win32K allows an authorized attacker to elevate privileges locally.
CVSS 3.1HIGH 7.0· Local · Low privileges · No interaction · EPSS 0.00202 · Published 2026-09-08 · Fixed in 10.0.14393.9512, 10.0.17763.9245 +10 CWE-367
Priority LOW 32
Use after free in Windows Broadcast DVR User Service allows an authorized attacker to elevate privileges locally.
CVSS 3.1HIGH 7.0· Local · Low privileges · No interaction · EPSS 0.00264 · Published 2026-09-08 · Fixed in 10.0.14393.9512, 10.0.17763.9245 +6 CWE-416
Priority LOW 32
Use after free in Windows Device Association Service allows an authorized attacker to elevate privileges locally.
CVSS 3.1HIGH 7.0· Local · Low privileges · No interaction · EPSS 0.00264 · Published 2026-09-08 · Fixed in 10.0.14393.9512, 10.0.17763.9245 +8 CWE-416
Priority LOW 32
Use after free in Windows Web Platform Storage allows an authorized attacker to elevate privileges locally.
CVSS 3.1HIGH 7.0· Local · Low privileges · No interaction · EPSS 0.00264 · Published 2026-09-08 · Fixed in 10.0.17763.9245, 10.0.19044.7725 +7 CWE-416
Priority LOW 32
Use after free in Windows Device Association Broker service allows an authorized attacker to elevate privileges locally.
CVSS 3.1HIGH 7.0· Local · Low privileges · No interaction · EPSS 0.00264 · Published 2026-09-08 · Fixed in 10.0.14393.9512, 10.0.17763.9245 +8 CWE-416
Priority LOW 32
Use after free in Windows Audio Service allows an authorized attacker to elevate privileges locally.
CVSS 3.1HIGH 7.0· Local · Low privileges · No interaction · EPSS 0.00264 · Published 2026-09-08 · Fixed in 10.0.14393.9512, 10.0.17763.9245 +10 CWE-416
Priority LOW 32
Use after free in Windows Host Guardian Service allows an authorized attacker to elevate privileges locally.
CVSS 3.1HIGH 7.0· Local · Low privileges · No interaction · EPSS 0.00202 · Published 2026-09-08 · Fixed in 10.0.17763.9245, 10.0.19044.7725 +7 CWE-362
Priority LOW 32
Use after free in Windows Accounts Control allows an authorized attacker to elevate privileges locally.
CVSS 3.1HIGH 7.0· Local · Low privileges · No interaction · EPSS 0.00264 · Published 2026-09-08 · Fixed in 10.0.14393.9512, 10.0.17763.9245 +8 CWE-416
Priority LOW 32
Use after free in Windows Win32K allows an authorized attacker to elevate privileges locally.
CVSS 3.1HIGH 7.0· Local · Low privileges · No interaction · EPSS 0.00264 · Published 2026-09-08 · Fixed in 10.0.14393.9512, 10.0.17763.9245 +8 CWE-416
Priority LOW 32
Use after free in Windows Notification allows an authorized attacker to elevate privileges locally.
CVSS 3.1HIGH 7.0· Local · Low privileges · No interaction · EPSS 0.00264 · Published 2026-09-08 · Fixed in 10.0.19044.7725, 10.0.19045.7725 +6 CWE-416
Priority LOW 32
Use after free in Windows Message Queuing allows an authorized attacker to elevate privileges locally.
CVSS 3.1HIGH 7.0· Local · Low privileges · No interaction · EPSS 0.00264 · Published 2026-09-08 · Fixed in 10.0.14393.9512, 10.0.17763.9245 +10 CWE-416
Priority LOW 32
Out-of-bounds read in Windows Win32K allows an authorized attacker to elevate privileges locally.
CVSS 3.1HIGH 7.0· Local · Low privileges · No interaction · EPSS 0.00264 · Published 2026-09-08 · Fixed in 10.0.14393.9512, 10.0.17763.9245 +10 CWE-125
Priority LOW 32
Heap-based buffer overflow in Windows Fax Service allows an authorized attacker to elevate privileges locally.
CVSS 3.1HIGH 7.0· Local · Low privileges · No interaction · EPSS 0.00264 · Published 2026-09-08 · Fixed in 10.0.14393.9512, 10.0.17763.9245 +10 CWE-122
Priority LOW 32
Out-of-bounds read in Windows Resilient File System (ReFS) allows an authorized attacker to elevate privileges locally.
CVSS 3.1HIGH 7.0· Local · Low privileges · No interaction · EPSS 0.00264 · Published 2026-09-08 · Fixed in 10.0.28000.2954, 10.0.26100.33438 CWE-125
Priority LOW 32
Use after free in Windows Image Acquisition allows an authorized attacker to elevate privileges locally.
CVSS 3.1HIGH 7.0· Local · Low privileges · No interaction · EPSS 0.00264 · Published 2026-09-08 · Fixed in 10.0.14393.9512, 10.0.17763.9245 +10 CWE-416
Priority LOW 32
Use after free in Virtual Hard Disk (VHD) Miniport Driver allows an authorized attacker to elevate privileges locally.
CVSS 3.1HIGH 7.0· Local · Low privileges · No interaction · EPSS 0.00264 · Published 2026-09-08 · Fixed in 10.0.14393.9512, 10.0.17763.9245 +8 CWE-416
Priority LOW 32
Buffer over-read in Windows Win32K allows an authorized attacker to elevate privileges locally.
CVSS 3.1HIGH 7.0· Local · Low privileges · No interaction · EPSS 0.00264 · Published 2026-09-08 · Fixed in 16.112.26090911 CWE-126
Priority LOW 32
Use after free in Windows Shell allows an authorized attacker to elevate privileges locally.
CVSS 3.1HIGH 7.0· Local · Low privileges · No interaction · EPSS 0.00264 · Published 2026-09-08 · Fixed in 10.0.22631.7582, 10.0.26100.9445 +3 CWE-416
Priority LOW 32
Use after free in Microsoft Install Service allows an authorized attacker to elevate privileges locally.
CVSS 3.1HIGH 7.0· Local · Low privileges · No interaction · EPSS 0.00264 · Published 2026-09-08 · Fixed in 10.0.19044.7725, 10.0.19045.7725 +6 CWE-416
Priority LOW 32
Use after free in Microsoft Windows Search Component allows an authorized attacker to elevate privileges locally.
CVSS 3.1HIGH 7.0· Local · Low privileges · No interaction · EPSS 0.00264 · Published 2026-09-08 · Fixed in 10.0.14393.9512, 10.0.17763.9245 +10 CWE-416
Priority LOW 32
Use after free in Windows Device Association Service allows an authorized attacker to elevate privileges locally.
CVSS 3.1HIGH 7.0· Local · Low privileges · No interaction · EPSS 0.00202 · Published 2026-09-08 · Fixed in 10.0.14393.9512, 10.0.17763.9245 +9 CWE-362
Priority LOW 32
Numeric truncation error in Windows Kernel allows an authorized attacker to elevate privileges locally.
CVSS 3.1HIGH 7.0· Local · Low privileges · No interaction · EPSS 0.00264 · Published 2026-09-08 · Fixed in 10.0.14393.9512, 10.0.17763.9245 +10 CWE-122
Priority LOW 32
Use after free in Windows Storage Spaces Controller allows an authorized attacker to elevate privileges locally.
CVSS 3.1HIGH 7.0· Local · Low privileges · No interaction · EPSS 0.00264 · Published 2026-09-08 · Fixed in 10.0.14393.9512, 10.0.17763.9245 +8 CWE-416
Priority LOW 32
Use after free in Windows Device Association Service allows an authorized attacker to elevate privileges locally.
CVSS 3.1HIGH 7.0· Local · Low privileges · No interaction · EPSS 0.00264 · Published 2026-09-08 · Fixed in 10.0.17763.9245, 10.0.19044.7725 +7 CWE-416
Priority LOW 32
Use after free in Windows Universal Disk Format File System Driver (UDFS) allows an authorized attacker to elevate privileges locally.
CVSS 3.1HIGH 7.0· Local · Low privileges · No interaction · EPSS 0.00264 · Published 2026-09-08 · Fixed in 10.0.14393.9512, 10.0.17763.9245 +10 CWE-416
Priority LOW 32
Use after free in Windows NTFS allows an authorized attacker to elevate privileges locally.
CVSS 3.1HIGH 7.0· Local · Low privileges · No interaction · EPSS 0.00264 · Published 2026-09-08 · Fixed in 10.0.14393.9512, 10.0.17763.9245 +10 CWE-416
Priority LOW 32
Heap-based buffer overflow in Windows NTFS allows an unauthorized attacker to execute code with a physical attack.
CVSS 3.1MEDIUM 6.8· Physical · No auth · No interaction · EPSS 0.00438 · Published 2026-09-08 · Fixed in 10.0.14393.9512, 10.0.17763.9245 +10 CWE-122
Priority LOW 32
Heap-based buffer overflow in Windows Program Compatibility Assistant Service allows an authorized attacker to elevate privileges locally.
CVSS 3.1HIGH 7.0· Local · Low privileges · No interaction · EPSS 0.00202 · Published 2026-09-08 · Fixed in 10.0.14393.9512, 10.0.17763.9245 +8 CWE-122
Priority LOW 32
Use after free in Windows Work Folder Service allows an authorized attacker to elevate privileges locally.
CVSS 3.1HIGH 7.0· Local · Low privileges · No interaction · EPSS 0.00264 · Published 2026-09-08 · Fixed in 10.0.14393.9512, 10.0.17763.9245 +8 CWE-416
Priority LOW 32
Use after free in Windows Audio Service allows an authorized attacker to elevate privileges locally.
CVSS 3.1HIGH 7.0· Local · Low privileges · No interaction · EPSS 0.00264 · Published 2026-09-08 · Fixed in 10.0.17763.9245, 10.0.19044.7725 +7 CWE-416
Priority LOW 32
Use after free in Windows Wireless Networking allows an authorized attacker to elevate privileges locally.
CVSS 3.1HIGH 7.0· Local · Low privileges · No interaction · EPSS 0.00264 · Published 2026-09-08 · Fixed in 10.0.17763.9245, 10.0.19044.7725 +7 CWE-416
Priority LOW 32
Use after free in Connected Devices Platform Service (Cdpsvc) allows an authorized attacker to elevate privileges locally.
CVSS 3.1HIGH 7.0· Local · Low privileges · No interaction · EPSS 0.00264 · Published 2026-09-08 · Fixed in 10.0.17763.9245, 10.0.19044.7725 +7 CWE-416
Priority LOW 32
Untrusted pointer dereference in Windows Secure Kernel Mode allows an authorized attacker to elevate privileges locally.
CVSS 3.1HIGH 7.0· Local · Low privileges · No interaction · EPSS 0.00264 · Published 2026-09-08 · Fixed in 10.0.19044.7725, 10.0.19045.7725 +6 CWE-822
Priority LOW 32
Use after free in Windows Image Acquisition allows an authorized attacker to elevate privileges locally.
CVSS 3.1HIGH 7.0· Local · Low privileges · No interaction · EPSS 0.00264 · Published 2026-09-08 · Fixed in 10.0.14393.9512, 10.0.17763.9245 +10 CWE-416
Priority LOW 32
Use after free in Windows Win32K allows an authorized attacker to elevate privileges locally.
CVSS 3.1HIGH 7.0· Local · Low privileges · No interaction · EPSS 0.00264 · Published 2026-09-08 · Fixed in 10.0.17763.9245, 10.0.19044.7725 +7 CWE-416
Priority LOW 32
Heap-based buffer overflow in Windows Partition Management Driver allows an authorized attacker to elevate privileges locally.
CVSS 3.1HIGH 7.0· Local · Low privileges · No interaction · EPSS 0.00264 · Published 2026-09-08 · Fixed in 10.0.14393.9512, 10.0.17763.9245 +10 CWE-122
Priority LOW 32
Out-of-bounds read in Windows USB Mass Storage Class Driver allows an unauthorized attacker to elevate privileges with a physical attack.
CVSS 3.1MEDIUM 6.8· Physical · No auth · No interaction · EPSS 0.00438 · Published 2026-09-08 · Fixed in 10.0.14393.9512, 10.0.17763.9245 +10 CWE-125
Priority LOW 32
Use after free in Windows Device Association Service allows an authorized attacker to elevate privileges locally.
CVSS 3.1HIGH 7.0· Local · Low privileges · No interaction · EPSS 0.00264 · Published 2026-09-08 · Fixed in 10.0.14393.9512, 10.0.17763.9245 +9 CWE-416
Priority LOW 32
Use after free in Windows Devices Human Interface allows an authorized attacker to elevate privileges locally.
CVSS 3.1HIGH 7.0· Local · Low privileges · No interaction · EPSS 0.00264 · Published 2026-09-08 · Fixed in 10.0.14393.9512, 10.0.17763.9245 +8 CWE-416
Priority LOW 32
Use after free in Windows Connected User Experiences and Telemetry allows an authorized attacker to elevate privileges locally.
CVSS 3.1HIGH 7.0· Local · Low privileges · No interaction · EPSS 0.00264 · Published 2026-09-08 · Fixed in 10.0.14393.9512, 10.0.17763.9245 +8 CWE-416
Priority LOW 32
Integer overflow or wraparound in Windows USB Audio Class driver (usbaudio.sys) allows an unauthorized attacker to elevate privileges with a physical attack.
CVSS 3.1MEDIUM 6.6· Physical · No auth · User interaction · EPSS 0.00483 · Published 2026-09-08 · Fixed in 10.0.17763.9245, 10.0.19044.7725 +7 CWE-122
Priority LOW 32
Heap-based buffer overflow in Windows Volume Manager Extension Driver allows an authorized attacker to elevate privileges locally.
CVSS 3.1HIGH 7.0· Local · Low privileges · No interaction · EPSS 0.00264 · Published 2026-09-08 · Fixed in 10.0.14393.9512, 10.0.17763.9245 +10 CWE-122
Priority LOW 32
Time-of-check time-of-use (toctou) race condition in Windows Kernel allows an authorized attacker to elevate privileges locally.
CVSS 3.1HIGH 7.0· Local · Low privileges · No interaction · EPSS 0.00202 · Published 2026-09-08 · Fixed in 10.0.14393.9512, 10.0.17763.9245 +10 CWE-367
Priority LOW 32
Heap-based buffer overflow in Windows BitLocker allows an authorized attacker to execute code locally.
CVSS 3.1MEDIUM 6.7· Local · High privileges · No interaction · EPSS 0.00348 · Published 2026-09-08 · Fixed in 10.0.14393.9512, 10.0.17763.9245 +10 CWE-122
Priority LOW 32
Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Bluetooth Service allows an authorized attacker to elevate privileges locally.
CVSS 3.1HIGH 7.0· Local · Low privileges · No interaction · EPSS 0.00202 · Published 2026-09-08 · Fixed in 10.0.19044.7725, 10.0.19045.7725 +6 CWE-362
Priority LOW 32
Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Installer allows an authorized attacker to elevate privileges locally.
CVSS 3.1HIGH 7.0· Local · Low privileges · No interaction · EPSS 0.00202 · Published 2026-09-08 · Fixed in 10.0.14393.9512, 10.0.17763.9245 +10 CWE-362
Priority LOW 32
Time-of-check time-of-use (toctou) race condition in Windows MIDI Service Module allows an authorized attacker to elevate privileges locally.
CVSS 3.1HIGH 7.0· Local · Low privileges · No interaction · EPSS 0.00202 · Published 2026-09-08 · Fixed in 10.0.26100.9445, 10.0.26200.9445 +1 CWE-367
Priority LOW 32
Use after free in Windows Embedded Mode Service allows an authorized attacker to elevate privileges locally.
CVSS 3.1HIGH 7.0· Local · Low privileges · No interaction · EPSS 0.00268 · Published 2026-09-08 · Fixed in 10.0.14393.9512, 10.0.17763.9245 +8 CWE-416
Priority LOW 32
Use after free in Windows USB Video Driver allows an authorized attacker to elevate privileges locally.
CVSS 3.1HIGH 7.0· Local · Low privileges · No interaction · EPSS 0.00264 · Published 2026-09-08 · Fixed in 10.0.26100.9445, 10.0.26200.9445 +2 CWE-416
Priority LOW 32
Use after free in Windows USB Audio Class driver (usbaudio.sys) allows an authorized attacker to elevate privileges locally.
CVSS 3.1HIGH 7.0· Local · Low privileges · No interaction · EPSS 0.00264 · Published 2026-09-08 · Fixed in 10.0.14393.9512, 10.0.17763.9245 +10 CWE-416
Priority LOW 32
Concurrent execution using shared resource with improper synchronization ('race condition') in Windows TCP/IP allows an authorized attacker to elevate privileges locally.
CVSS 3.1HIGH 7.0· Local · Low privileges · No interaction · EPSS 0.00202 · Published 2026-09-08 · Fixed in 10.0.14393.9512, 10.0.17763.9245 +10 CWE-362
Priority LOW 32
Use after free in Audio Video Control Transport Protocol allows an authorized attacker to elevate privileges locally.
CVSS 3.1HIGH 7.0· Local · Low privileges · No interaction · EPSS 0.00264 · Published 2026-09-08 · Fixed in 10.0.26100.9445, 10.0.26200.9445 +2 CWE-416
Priority LOW 32
Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Bluetooth Service allows an authorized attacker to elevate privileges locally.
CVSS 3.1HIGH 7.0· Local · Low privileges · No interaction · EPSS 0.00202 · Published 2026-09-08 · Fixed in 10.0.17763.9245, 10.0.19044.7725 +7 CWE-362
Priority LOW 32
Heap-based buffer overflow in Windows Audio Service allows an authorized attacker to elevate privileges locally.
CVSS 3.1HIGH 7.0· Local · Low privileges · No interaction · EPSS 0.00264 · Published 2026-09-08 · Fixed in 10.0.14393.9512, 10.0.17763.9245 +10 CWE-122
Priority LOW 32
Use after free in Windows Bluetooth Service allows an authorized attacker to elevate privileges locally.
CVSS 3.1HIGH 7.0· Local · Low privileges · No interaction · EPSS 0.00264 · Published 2026-09-08 · Fixed in 10.0.17763.9245, 10.0.19044.7725 +7 CWE-416
Priority LOW 32
Concurrent execution using shared resource with improper synchronization ('race condition') in Windows TCP/IP allows an authorized attacker to elevate privileges locally.
CVSS 3.1HIGH 7.0· Local · Low privileges · No interaction · EPSS 0.00202 · Published 2026-09-08 · Fixed in 10.0.14393.9512, 10.0.17763.9245 +10 CWE-362
Priority LOW 32
Null pointer dereference in Virtual Hard Disk (VHD) Miniport Driver allows an unauthorized attacker to deny service locally.
CVSS 3.1HIGH 7.1· Local · No auth · No interaction · EPSS 0.00422 · Published 2026-09-08 · Fixed in 10.0.14393.9512, 10.0.17763.9245 +8 CWE-476
Priority LOW 32
Integer overflow or wraparound in Windows Overlay Filter allows an authorized attacker to elevate privileges locally.
CVSS 3.1MEDIUM 6.7· Local · High privileges · No interaction · EPSS 0.00348 · Published 2026-09-08 · Fixed in 10.0.14393.9512, 10.0.17763.9245 +9 CWE-125
Priority LOW 32
Use after free in Windows Error Reporting allows an authorized attacker to elevate privileges locally.
CVSS 3.1HIGH 7.0· Local · Low privileges · No interaction · EPSS 0.00264 · Published 2026-09-08 · Fixed in 10.0.14393.9512, 10.0.17763.9245 +10 CWE-416
Priority LOW 32
Heap-based buffer overflow in Windows Overlay Filter allows an authorized attacker to elevate privileges locally.
CVSS 3.1MEDIUM 6.7· Local · High privileges · No interaction · EPSS 0.00348 · Published 2026-09-08 · Fixed in 10.0.14393.9512, 10.0.17763.9245 +9 CWE-122
Priority LOW 32
Use after free in Windows Image Acquisition allows an authorized attacker to elevate privileges locally.
CVSS 3.1HIGH 7.0· Local · Low privileges · No interaction · EPSS 0.00264 · Published 2026-09-08 · Fixed in 10.0.14393.9512, 10.0.17763.9245 +10 CWE-416
Priority LOW 32
Use after free in Windows Win32K allows an authorized attacker to elevate privileges locally.
CVSS 3.1HIGH 7.0· Local · Low privileges · No interaction · EPSS 0.00264 · Published 2026-09-08 · Fixed in 10.0.14393.9512, 10.0.17763.9245 +10 CWE-416
Priority LOW 32
Use after free in Windows Win32K allows an authorized attacker to elevate privileges locally.
CVSS 3.1HIGH 7.0· Local · Low privileges · No interaction · EPSS 0.00264 · Published 2026-09-08 · Fixed in 10.0.26100.9445, 10.0.26200.9445 +1 CWE-416
Priority LOW 32
Use after free in Windows Remote Access Connection Manager allows an authorized attacker to elevate privileges locally.
CVSS 3.1HIGH 7.0· Local · Low privileges · No interaction · EPSS 0.00264 · Published 2026-09-08 · Fixed in 10.0.14393.9512, 10.0.17763.9245 +9 CWE-416
Priority LOW 32
Concurrent execution using shared resource with improper synchronization ('race condition') in Windows USB Video Driver allows an authorized attacker to elevate privileges locally.
CVSS 3.1HIGH 7.0· Local · Low privileges · No interaction · EPSS 0.00202 · Published 2026-09-08 · Fixed in 10.0.14393.9512, 10.0.17763.9245 +10 CWE-362
Priority LOW 32
Use after free in Windows Audio Service allows an authorized attacker to elevate privileges locally.
CVSS 3.1HIGH 7.0· Local · Low privileges · No interaction · EPSS 0.00264 · Published 2026-09-08 · Fixed in 10.0.14393.9512, 10.0.17763.9245 +9 CWE-416
Priority LOW 32
Use after free in Windows DNS allows an authorized attacker to elevate privileges locally.
CVSS 3.1HIGH 7.0· Local · Low privileges · No interaction · EPSS 0.00264 · Published 2026-09-08 · Fixed in 10.0.14393.9512, 10.0.17763.9245 +9 CWE-416