CVE-2026-72961
Out-of-bounds read in Windows Hyper-V allows an authorized attacker to elevate privileges locally.
- CVSS
- 8,2
- EPSS
- 0,35 %
- Publikacja
- Poprawka
- Status poprawki nieustalony
KATALOG PODATNOŚCI
Wyszukuj po identyfikatorze CVE, nazwie produktu lub opisie. Filtruj według sygnałów ryzyka.
Pełny dostępny katalog: publikacje z ostatnich 365 dni oraz całe dostępne KEV.
Out-of-bounds read in Windows Hyper-V allows an authorized attacker to elevate privileges locally.
Integer underflow (wrap or wraparound) in Windows File History Service allows an authorized attacker to elevate privileges locally.
Relative path traversal in Windows DNS allows an authorized attacker to elevate privileges locally.
Null pointer dereference in Windows SMB Server Network Transport Driver (srvnet.sys) allows an unauthorized attacker to deny service over a network.
Out-of-bounds read in Windows Spaceport.sys allows an authorized attacker to execute code locally.
Heap-based buffer overflow in Windows USB Driver allows an authorized attacker to elevate privileges locally.
Use after free in Windows Deployment Services allows an authorized attacker to execute code over a network.
Przepełnienie bufora w Windows Biometric Service umożliwia lokalne podniesienie uprawnień przez atakującego.
Use after free in Windows Deployment Services allows an authorized attacker to execute code over a network.
Heap-based buffer overflow in Windows Fax Service allows an authorized attacker to elevate privileges locally.
Przepełnienie bufora w Storage Port Driver umożliwia lokalne podniesienie uprawnień przez atakującego.
Use after free in Windows SMB Client allows an unauthorized attacker to execute code over a network.
Heap-based buffer overflow in Windows Schannel allows an unauthorized attacker to execute code over a network.
Wykorzystanie po zwolnieniu pamięci w Windows DNS pozwala atakującemu na zdalne wykonanie kodu.
Improper validation of integrity check value in Windows Installer allows an authorized attacker to elevate privileges locally.
Use after free in Windows Secure Socket Tunneling Protocol (SSTP) allows an authorized attacker to execute code locally.
Buffer over-read in Windows Message Queuing Queue Manager allows an unauthorized attacker to disclose information over a network.
Heap-based buffer overflow in Microsoft WDAC OLE DB provider for SQL allows an unauthorized attacker to execute code over a network.
Double free in Windows Routing and Remote Access Service (RRAS) allows an authorized attacker to elevate privileges locally.
Nieograniczone zużycie zasobów w Microsoft.OpenApi.YamlReader prowadzi do awarii aplikacji.
Use after free in Windows Internet Connection Sharing (ICS) allows an authorized attacker to elevate privileges locally.
Heap-based buffer overflow in Winsock allows an authorized attacker to elevate privileges locally.
Double free in Windows Routing and Remote Access Service (RRAS) allows an authorized attacker to elevate privileges locally.
Integer underflow (wrap or wraparound) in Windows Remote Access Connection Manager allows an authorized attacker to execute code over a network.
Wykorzystanie po zwolnieniu pamięci w Windows Remote Access Connection Manager umożliwia lokalną eskalację uprawnień.
| CVE / produkt | Sygnały | Oceny | Publikacja | Zapisz |
|---|---|---|---|---|
| CVE-2026-72961 Out-of-bounds read in Windows Hyper-V allows an authorized attacker to elevate privileges locally. |
Monitoruj |
CVSS 8,2EPSS 0,35 % | ||
| CVE-2026-72947 Integer underflow (wrap or wraparound) in Windows File History Service allows an authorized attacker to elevate privileges locally. |
Monitoruj |
CVSS 7,0EPSS 0,27 % | ||
| CVE-2026-72948 Relative path traversal in Windows DNS allows an authorized attacker to elevate privileges locally. |
Monitoruj |
CVSS 7,8EPSS 0,38 % | ||
| CVE-2026-72949 Null pointer dereference in Windows SMB Server Network Transport Driver (srvnet.sys) allows an unauthorized attacker to deny service over a network. |
Monitoruj |
CVSS 7,5EPSS 1,17 % | ||
| CVE-2026-72952 Out-of-bounds read in Windows Spaceport.sys allows an authorized attacker to execute code locally. |
Monitoruj |
CVSS 7,0EPSS 0,26 % | ||
| CVE-2026-72953 Heap-based buffer overflow in Windows USB Driver allows an authorized attacker to elevate privileges locally. |
Monitoruj |
CVSS 7,8EPSS 0,33 % | ||
| CVE-2026-72954 Use after free in Windows Deployment Services allows an authorized attacker to execute code over a network. |
Monitoruj |
CVSS 7,5EPSS 0,66 % | ||
| CVE-2026-72941 Przepełnienie bufora w Windows Biometric Service umożliwia lokalne podniesienie uprawnień przez atakującego. |
Monitoruj |
CVSS 7,8EPSS 0,33 % | ||
| CVE-2026-72943 Use after free in Windows Deployment Services allows an authorized attacker to execute code over a network. |
Monitoruj |
CVSS 7,5EPSS 0,66 % | ||
| CVE-2026-72944 Heap-based buffer overflow in Windows Fax Service allows an authorized attacker to elevate privileges locally. |
Monitoruj |
CVSS 7,8EPSS 0,33 % | ||
| CVE-2026-72946 Przepełnienie bufora w Storage Port Driver umożliwia lokalne podniesienie uprawnień przez atakującego. |
Monitoruj |
CVSS 7,8EPSS 0,33 % | ||
| CVE-2026-72936 Use after free in Windows SMB Client allows an unauthorized attacker to execute code over a network. |
Monitoruj |
CVSS 8,1EPSS 0,71 % | ||
| CVE-2026-72940 Heap-based buffer overflow in Windows Schannel allows an unauthorized attacker to execute code over a network. |
Monitoruj |
CVSS 8,8EPSS 0,82 % | ||
| CVE-2026-72928 Wykorzystanie po zwolnieniu pamięci w Windows DNS pozwala atakującemu na zdalne wykonanie kodu. |
Monitoruj |
CVSS 7,5EPSS 0,66 % | ||
| CVE-2026-72929 Improper validation of integrity check value in Windows Installer allows an authorized attacker to elevate privileges locally. |
Monitoruj |
CVSS 7,8EPSS 0,23 % | ||
| CVE-2026-72930 Use after free in Windows Secure Socket Tunneling Protocol (SSTP) allows an authorized attacker to execute code locally. |
Monitoruj |
CVSS 7,0EPSS 0,26 % | ||
| CVE-2026-72932 Buffer over-read in Windows Message Queuing Queue Manager allows an unauthorized attacker to disclose information over a network. |
Monitoruj |
CVSS 7,5EPSS 1,03 % | ||
| CVE-2026-72933 Heap-based buffer overflow in Microsoft WDAC OLE DB provider for SQL allows an unauthorized attacker to execute code over a network. |
Monitoruj |
CVSS 8,8EPSS 0,82 % | ||
| CVE-2026-71353 Double free in Windows Routing and Remote Access Service (RRAS) allows an authorized attacker to elevate privileges locally. |
Monitoruj |
CVSS 7,0EPSS 0,26 % | ||
| CVE-2026-72923 Nieograniczone zużycie zasobów w Microsoft.OpenApi.YamlReader prowadzi do awarii aplikacji. |
Monitoruj |
CVSS 7,5EPSS 1,85 % | ||
| CVE-2026-72926 Use after free in Windows Internet Connection Sharing (ICS) allows an authorized attacker to elevate privileges locally. |
Monitoruj |
CVSS 7,0EPSS 0,26 % | ||
| CVE-2026-72927 Heap-based buffer overflow in Winsock allows an authorized attacker to elevate privileges locally. |
Monitoruj |
CVSS 7,8EPSS 0,34 % | ||
| CVE-2026-71351 Double free in Windows Routing and Remote Access Service (RRAS) allows an authorized attacker to elevate privileges locally. |
Monitoruj |
CVSS 7,0EPSS 0,26 % | ||
| CVE-2026-71352 Integer underflow (wrap or wraparound) in Windows Remote Access Connection Manager allows an authorized attacker to execute code over a network. |
Monitoruj |
CVSS 8,8EPSS 0,91 % | ||
| CVE-2026-71342 Wykorzystanie po zwolnieniu pamięci w Windows Remote Access Connection Manager umożliwia lokalną eskalację uprawnień. |
Monitoruj |
CVSS 7,0EPSS 0,26 % |
Zakres katalogu: ostatnie 365 dni oraz wszystkie zachowane KEV.
Ostatnio zakończone okno publikacji NVD: 10.11.2026, 08:02 UTC – 10.11.2026, 12:02 UTC. To pojedyncze okno importu, nie granica pokrycia katalogu.