CVE-2026-72963
Wykorzystanie po zwolnieniu pamięci w Windows Modern Execution Server pozwala na lokalną eskalację uprawnień.
- CVSS
- 7,0
- EPSS
- 0,26 %
- Publikacja
- Poprawka
- Status poprawki nieustalony
KATALOG PODATNOŚCI
Wyszukuj po identyfikatorze CVE, nazwie produktu lub opisie. Filtruj według sygnałów ryzyka.
Pełny dostępny katalog: publikacje z ostatnich 365 dni oraz całe dostępne KEV.
Wykorzystanie po zwolnieniu pamięci w Windows Modern Execution Server pozwala na lokalną eskalację uprawnień.
Use after free in Windows WebClient Service allows an authorized attacker to elevate privileges locally.
Przepełnienie bufora w Windows Network Connection Broker umożliwia lokalną eskalację uprawnień.
Heap-based buffer overflow in Windows Deployment Services allows an authorized attacker to execute code locally.
Double free in Windows Credential Guard allows an authorized attacker to elevate privileges locally.
Remote Code Execution in Windows Routing and Remote Access Service (RRAS) allows attacker to gain an unauthorized access to victim's machine
Heap-based buffer overflow in Windows Media Player allows an unauthorized attacker to execute code over a network.
Out-of-bounds read in Windows Hyper-V allows an authorized attacker to elevate privileges locally.
Integer underflow (wrap or wraparound) in Windows File History Service allows an authorized attacker to elevate privileges locally.
Relative path traversal in Windows DNS allows an authorized attacker to elevate privileges locally.
Null pointer dereference in Windows SMB Server Network Transport Driver (srvnet.sys) allows an unauthorized attacker to deny service over a network.
Out-of-bounds read in Windows Spaceport.sys allows an authorized attacker to execute code locally.
Heap-based buffer overflow in Windows USB Driver allows an authorized attacker to elevate privileges locally.
Use after free in Windows Deployment Services allows an authorized attacker to execute code over a network.
Przepełnienie bufora w Windows Biometric Service umożliwia lokalne podniesienie uprawnień przez atakującego.
Use after free in Windows Deployment Services allows an authorized attacker to execute code over a network.
Heap-based buffer overflow in Windows Fax Service allows an authorized attacker to elevate privileges locally.
Przepełnienie bufora w Storage Port Driver umożliwia lokalne podniesienie uprawnień przez atakującego.
Use after free in Windows SMB Client allows an unauthorized attacker to execute code over a network.
Heap-based buffer overflow in Windows Schannel allows an unauthorized attacker to execute code over a network.
Wykorzystanie po zwolnieniu pamięci w Windows DNS pozwala atakującemu na zdalne wykonanie kodu.
Improper validation of integrity check value in Windows Installer allows an authorized attacker to elevate privileges locally.
Use after free in Windows Secure Socket Tunneling Protocol (SSTP) allows an authorized attacker to execute code locally.
Buffer over-read in Windows Message Queuing Queue Manager allows an unauthorized attacker to disclose information over a network.
Heap-based buffer overflow in Microsoft WDAC OLE DB provider for SQL allows an unauthorized attacker to execute code over a network.
| CVE / produkt | Sygnały | Oceny | Publikacja | Zapisz |
|---|---|---|---|---|
| CVE-2026-72963 Wykorzystanie po zwolnieniu pamięci w Windows Modern Execution Server pozwala na lokalną eskalację uprawnień. |
Monitoruj |
CVSS 7,0EPSS 0,26 % | ||
| CVE-2026-72965 Use after free in Windows WebClient Service allows an authorized attacker to elevate privileges locally. |
Monitoruj |
CVSS 7,8EPSS 0,33 % | ||
| CVE-2026-72967 Przepełnienie bufora w Windows Network Connection Broker umożliwia lokalną eskalację uprawnień. |
Monitoruj |
CVSS 7,8EPSS 0,33 % | ||
| CVE-2026-72957 Heap-based buffer overflow in Windows Deployment Services allows an authorized attacker to execute code locally. |
Monitoruj |
CVSS 7,8EPSS 0,33 % | ||
| CVE-2026-72958 Double free in Windows Credential Guard allows an authorized attacker to elevate privileges locally. |
Monitoruj |
CVSS 8,2EPSS 0,35 % | ||
| CVE-2026-72959 Remote Code Execution in Windows Routing and Remote Access Service (RRAS) allows attacker to gain an unauthorized access to victim's machine |
Monitoruj |
CVSS 8,8EPSS 0,91 % | ||
| CVE-2026-72960 Heap-based buffer overflow in Windows Media Player allows an unauthorized attacker to execute code over a network. |
Monitoruj |
CVSS 8,8EPSS 0,82 % | ||
| CVE-2026-72961 Out-of-bounds read in Windows Hyper-V allows an authorized attacker to elevate privileges locally. |
Monitoruj |
CVSS 8,2EPSS 0,35 % | ||
| CVE-2026-72947 Integer underflow (wrap or wraparound) in Windows File History Service allows an authorized attacker to elevate privileges locally. |
Monitoruj |
CVSS 7,0EPSS 0,27 % | ||
| CVE-2026-72948 Relative path traversal in Windows DNS allows an authorized attacker to elevate privileges locally. |
Monitoruj |
CVSS 7,8EPSS 0,38 % | ||
| CVE-2026-72949 Null pointer dereference in Windows SMB Server Network Transport Driver (srvnet.sys) allows an unauthorized attacker to deny service over a network. |
Monitoruj |
CVSS 7,5EPSS 1,17 % | ||
| CVE-2026-72952 Out-of-bounds read in Windows Spaceport.sys allows an authorized attacker to execute code locally. |
Monitoruj |
CVSS 7,0EPSS 0,26 % | ||
| CVE-2026-72953 Heap-based buffer overflow in Windows USB Driver allows an authorized attacker to elevate privileges locally. |
Monitoruj |
CVSS 7,8EPSS 0,33 % | ||
| CVE-2026-72954 Use after free in Windows Deployment Services allows an authorized attacker to execute code over a network. |
Monitoruj |
CVSS 7,5EPSS 0,66 % | ||
| CVE-2026-72941 Przepełnienie bufora w Windows Biometric Service umożliwia lokalne podniesienie uprawnień przez atakującego. |
Monitoruj |
CVSS 7,8EPSS 0,33 % | ||
| CVE-2026-72943 Use after free in Windows Deployment Services allows an authorized attacker to execute code over a network. |
Monitoruj |
CVSS 7,5EPSS 0,66 % | ||
| CVE-2026-72944 Heap-based buffer overflow in Windows Fax Service allows an authorized attacker to elevate privileges locally. |
Monitoruj |
CVSS 7,8EPSS 0,33 % | ||
| CVE-2026-72946 Przepełnienie bufora w Storage Port Driver umożliwia lokalne podniesienie uprawnień przez atakującego. |
Monitoruj |
CVSS 7,8EPSS 0,33 % | ||
| CVE-2026-72936 Use after free in Windows SMB Client allows an unauthorized attacker to execute code over a network. |
Monitoruj |
CVSS 8,1EPSS 0,71 % | ||
| CVE-2026-72940 Heap-based buffer overflow in Windows Schannel allows an unauthorized attacker to execute code over a network. |
Monitoruj |
CVSS 8,8EPSS 0,82 % | ||
| CVE-2026-72928 Wykorzystanie po zwolnieniu pamięci w Windows DNS pozwala atakującemu na zdalne wykonanie kodu. |
Monitoruj |
CVSS 7,5EPSS 0,66 % | ||
| CVE-2026-72929 Improper validation of integrity check value in Windows Installer allows an authorized attacker to elevate privileges locally. |
Monitoruj |
CVSS 7,8EPSS 0,23 % | ||
| CVE-2026-72930 Use after free in Windows Secure Socket Tunneling Protocol (SSTP) allows an authorized attacker to execute code locally. |
Monitoruj |
CVSS 7,0EPSS 0,26 % | ||
| CVE-2026-72932 Buffer over-read in Windows Message Queuing Queue Manager allows an unauthorized attacker to disclose information over a network. |
Monitoruj |
CVSS 7,5EPSS 1,03 % | ||
| CVE-2026-72933 Heap-based buffer overflow in Microsoft WDAC OLE DB provider for SQL allows an unauthorized attacker to execute code over a network. |
Monitoruj |
CVSS 8,8EPSS 0,82 % |
Zakres katalogu: ostatnie 365 dni oraz wszystkie zachowane KEV.
Ostatnio zakończone okno publikacji NVD: 10.11.2026, 07:32 UTC – 10.11.2026, 09:02 UTC. To pojedyncze okno importu, nie granica pokrycia katalogu.