Fixes 31 records
Priority MEDIUM 52
Untrusted pointer dereference in Windows Distributed File System (DFS) allows an unauthorized attacker to elevate privileges over a network.
CVSS 3.1CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.01321 · Published 2026-10-13 · Fixed in 10.0.14393.9612, 10.0.17763.9376 +11 CWE-822
Priority MEDIUM 51
Integer underflow (wrap or wraparound) in Network Policy Server (NPS) allows an unauthorized attacker to execute code over a network.
CVSS 3.1CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.00908 · Published 2026-10-13 · Fixed in 10.0.14393.9612, 10.0.17763.9376 +11 CWE-121
Priority MEDIUM 51
Heap-based buffer overflow in Windows Shell allows an unauthorized attacker to execute code over a network.
CVSS 3.1CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.00989 · Published 2026-10-13 · Fixed in 10.0.14393.9612, 10.0.17763.9376 +11 CWE-122
Priority MEDIUM 51
Heap-based buffer overflow in Windows Error Reporting allows an unauthorized attacker to execute code over a network.
CVSS 3.1CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.01061 · Published 2026-10-13 · Fixed in 10.0.14393.9612, 10.0.17763.9376 +11 CWE-122
Priority MEDIUM 46
Use after free in Windows Network Load Balancing allows an unauthorized attacker to execute code over an adjacent network.
CVSS 3.1HIGH 8.8· Adjacent network · No auth · No interaction · EPSS 0.00411 · Published 2026-10-13 · Fixed in 10.0.14393.9612, 10.0.17763.9376 +4 CWE-416
Priority MEDIUM 42
No cwe for this issue in Active Directory Federation Services (AD FS) allows an unauthorized attacker to perform spoofing over a network.
CVSS 3.1HIGH 7.5· Network · No auth · No interaction · EPSS 0.00865 · Published 2026-10-13 · Fixed in 10.0.14393.9612, 10.0.17763.9376 +11 CWE-295
Priority MEDIUM 42
No cwe for this issue in Windows Schannel allows an unauthorized attacker to perform spoofing over a network.
CVSS 3.1CRITICAL 9.0· Network · No auth · No interaction · EPSS 0.00664 · Published 2026-10-13 · Fixed in 10.0.14393.9612, 10.0.17763.9376 +11 CWE-420
Priority MEDIUM 41
Heap-based buffer overflow in Windows iSCSI allows an unauthorized attacker to deny service over a network.
CVSS 3.1HIGH 7.5· Network · No auth · No interaction · EPSS 0.01273 · Published 2026-10-13 · Fixed in 10.0.14393.9612, 10.0.17763.9376 +11 CWE-122
Priority MEDIUM 40
Use after free in Windows DHCP Client allows an unauthorized attacker to execute code over an adjacent network.
CVSS 3.1HIGH 8.8· Adjacent network · No auth · No interaction · EPSS 0.00467 · Published 2026-10-13 · Fixed in 6.2.9200.26434, 6.3.9600.23470 +4 CWE-362
Priority LOW 38
Use after free in Windows iSCSI allows an unauthorized attacker to execute code over a network.
CVSS 3.1HIGH 8.1· Network · No auth · No interaction · EPSS 0.00656 · Published 2026-10-13 · Fixed in 10.0.14393.9612, 10.0.17763.9376 +11 CWE-416
Priority LOW 36
Heap-based buffer overflow in Windows exFAT File System allows an authorized attacker to elevate privileges locally.
CVSS 3.1HIGH 7.8· Local · Low privileges · No interaction · EPSS 0.00312 · Published 2026-10-13 · Fixed in 10.0.14393.9612, 10.0.17763.9376 +11 CWE-122
Priority LOW 36
Access of resource using incompatible type ('type confusion') in Windows CD-ROM Driver allows an authorized attacker to elevate privileges locally.
CVSS 3.1HIGH 7.8· Local · Low privileges · No interaction · EPSS 0.00312 · Published 2026-10-13 · Fixed in 10.0.14393.9612, 10.0.17763.9376 +11 CWE-843
Priority LOW 36
Heap-based buffer overflow in Windows TCP/IP allows an authorized attacker to elevate privileges locally.
CVSS 3.1HIGH 7.8· Local · Low privileges · No interaction · EPSS 0.00312 · Published 2026-10-13 · Fixed in 10.0.14393.9612, 10.0.17763.9376 +11 CWE-122
Priority LOW 36
Access of resource using incompatible type ('type confusion') in Windows Ancillary Function Driver for WinSock allows an authorized attacker to elevate privileges locally.
CVSS 3.1HIGH 7.8· Local · Low privileges · No interaction · EPSS 0.00423 · Published 2026-10-13 · Fixed in 10.0.14393.9612, 10.0.17763.9376 +11 CWE-843
Priority LOW 36
Heap-based buffer overflow in Windows iSCSI allows an unauthorized attacker to execute code over a network.
CVSS 3.1HIGH 7.5· Network · No auth · User interaction · EPSS 0.00632 · Published 2026-10-13 · Fixed in 10.0.14393.9612, 10.0.17763.9376 +11 CWE-122
Priority LOW 36
Heap-based buffer overflow in Windows NetBIOS allows an authorized attacker to elevate privileges locally.
CVSS 3.1HIGH 7.8· Local · Low privileges · No interaction · EPSS 0.00457 · Published 2026-10-13 · Fixed in 10.0.14393.9612, 10.0.17763.9376 +11 CWE-122
Priority LOW 36
Use after free in Windows Wired AutoConfig Service allows an authorized attacker to elevate privileges locally.
CVSS 3.1HIGH 7.8· Local · Low privileges · No interaction · EPSS 0.00379 · Published 2026-10-13 · Fixed in 10.0.14393.9612, 10.0.17763.9376 +11 CWE-416
Priority LOW 33
Use after free in Windows Win32 Kernel Subsystem allows an authorized attacker to elevate privileges locally.
CVSS 3.1HIGH 7.0· Local · Low privileges · No interaction · EPSS 0.00289 · Published 2026-10-13 · Fixed in 10.0.14393.9612, 10.0.17763.9376 +6 CWE-416
Priority LOW 33
Untrusted pointer dereference in Windows Storage Port Driver allows an unauthorized attacker to elevate privileges with a physical attack.
CVSS 3.1MEDIUM 6.8· Physical · No auth · No interaction · EPSS 0.0048 · Published 2026-10-13 · Fixed in 10.0.14393.9612, 10.0.17763.9376 +11 CWE-822
Priority LOW 33
Heap-based buffer overflow in Windows Common Log File System Driver allows an authorized attacker to elevate privileges locally.
CVSS 3.1HIGH 7.0· Local · Low privileges · No interaction · EPSS 0.00318 · Published 2026-10-13 · Fixed in 10.0.14393.9612, 10.0.17763.9376 +11 CWE-122
Priority LOW 33
Use after free in Windows Common Log File System Driver allows an authorized attacker to elevate privileges locally.
CVSS 3.1HIGH 7.0· Local · Low privileges · No interaction · EPSS 0.00279 · Published 2026-10-13 · Fixed in 10.0.14393.9612, 10.0.17763.9376 +11 CWE-416
Priority LOW 33
Inclusion of functionality from untrusted control sphere in Windows Common Log File System Driver allows an authorized attacker to elevate privileges locally.
CVSS 3.1HIGH 7.0· Local · Low privileges · No interaction · EPSS 0.00281 · Published 2026-10-13 · Fixed in 10.0.14393.9612, 10.0.17763.9376 +11 CWE-829
Priority LOW 33
Heap-based buffer overflow in Windows Storage allows an authorized attacker to elevate privileges locally.
CVSS 3.1HIGH 7.0· Local · Low privileges · No interaction · EPSS 0.003 · Published 2026-10-13 · Fixed in 10.0.14393.9612, 10.0.17763.9376 +11 CWE-122
Priority LOW 33
Stack-based buffer overflow in Windows Installer allows an authorized attacker to elevate privileges locally.
CVSS 3.1HIGH 7.0· Local · Low privileges · No interaction · EPSS 0.00279 · Published 2026-10-13 · Fixed in 10.0.14393.9612, 10.0.17763.9376 +11 CWE-121
Priority LOW 32
Heap-based buffer overflow in Windows Distributed File System (DFS) allows an authorized attacker to elevate privileges locally.
CVSS 3.1MEDIUM 6.7· Local · High privileges · No interaction · EPSS 0.00369 · Published 2026-10-13 · Fixed in 10.0.14393.9612, 10.0.17763.9376 +11 CWE-122
Priority LOW 32
Use after free in Windows Installer allows an authorized attacker to elevate privileges locally.
CVSS 3.1HIGH 7.0· Local · Low privileges · No interaction · EPSS 0.00252 · Published 2026-10-13 · Fixed in 10.0.14393.9612, 10.0.17763.9376 +11 CWE-416
Priority LOW 31
Untrusted pointer dereference in Windows Kernel allows an authorized attacker to deny service over a network.
CVSS 3.1MEDIUM 6.5· Network · Low privileges · No interaction · EPSS 0.01234 · Published 2026-10-13 · Fixed in 10.0.14393.9612, 10.0.17763.9376 +11 CWE-822
Priority LOW 26
Out-of-bounds read in Windows Fast FAT Driver allows an unauthorized attacker to disclose information locally.
CVSS 3.1MEDIUM 5.5· Local · No auth · User interaction · EPSS 0.00615 · Published 2026-10-13 · Fixed in 10.0.14393.9612, 10.0.17763.9376 +11 CWE-125
Priority LOW 25
Improper authorization in Windows Network List Service allows an authorized attacker to perform tampering locally.
CVSS 3.1MEDIUM 5.5· Local · Low privileges · No interaction · EPSS 0.00281 · Published 2026-10-13 · Fixed in 10.0.14393.9612, 10.0.17763.9376 +10 CWE-862
Priority LOW 25
Buffer over-read in Windows USB Driver allows an authorized attacker to disclose information locally.
CVSS 3.1MEDIUM 5.5· Local · Low privileges · No interaction · EPSS 0.00387 · Published 2026-10-13 · Fixed in 10.0.14393.9612, 10.0.17763.9376 +11 CWE-126
Priority LOW 25
Out-of-bounds read in Windows DNS allows an authorized attacker to disclose information locally.
CVSS 3.1MEDIUM 5.5· Local · Low privileges · No interaction · EPSS 0.00459 · Published 2026-10-13 · Fixed in 10.0.14393.9612, 10.0.17763.9376 +4 CWE-125