Security Vulnerabilities
Generation of error message containing sensitive information in Windows Print Spooler Components allows an authorized attacker to disclose information over a network.
CVSS Score
5.7
EPSS Score
0.009
Published
2026-09-08
Use after free in Windows Remote Desktop Services allows an authorized attacker to execute code over a network.
CVSS Score
7.5
EPSS Score
0.007
Published
2026-09-08
Use after free in Windows Audio Service allows an authorized attacker to elevate privileges locally.
CVSS Score
7.0
EPSS Score
0.003
Published
2026-09-08
Heap-based buffer overflow in Windows Camera Frame Server Monitor allows an authorized attacker to elevate privileges locally.
CVSS Score
7.8
EPSS Score
0.003
Published
2026-09-08
Heap-based buffer overflow in Windows SMB Client allows an authorized attacker to elevate privileges locally.
CVSS Score
7.8
EPSS Score
0.003
Published
2026-09-08
Unintended proxy or intermediary ('confused deputy') in Microsoft Windows Speech allows an authorized attacker to perform tampering locally.
CVSS Score
5.5
EPSS Score
0.003
Published
2026-09-08
Out-of-bounds read in Windows NTFS allows an authorized attacker to elevate privileges locally.
CVSS Score
7.8
EPSS Score
0.003
Published
2026-09-08
Improper neutralization of special elements used in a command ('command injection') in Windows Program Compatibility Assistant Service allows an authorized attacker to elevate privileges locally.
CVSS Score
7.8
EPSS Score
0.003
Published
2026-09-08
Numeric truncation error in Windows Spaceport.sys allows an authorized attacker to elevate privileges locally.
CVSS Score
7.8
EPSS Score
0.003
Published
2026-09-08
Use after free in Windows Remote Desktop Services allows an authorized attacker to execute code over a network.
CVSS Score
7.1
EPSS Score
0.006
Published
2026-09-08