CVE-2026-73000 is a heap-based buffer overflow vulnerability in the Windows Biometric Service on Microsoft Windows 10 Version 1607 and related builds. This flaw allows an authorized local attacker to elevate privileges. The vulnerability has a high severity score and has been officially fixed by Microsoft in multiple Windows 10 builds.
CVE-2026-73020 is a heap-based buffer overflow vulnerability in the Windows Biometric Service on Microsoft Windows 10 Version 1607 and related builds. This flaw allows an authorized local attacker to elevate privileges. The vulnerability has a high severity rating with a CVSS score of 7.8. Microsoft has released official patches to address this issue in multiple Windows 10 builds.
CVE-2026-73018 is a heap-based buffer overflow vulnerability in the Graphic Fonts component of Microsoft Windows 10 Version 1607 and related builds. This flaw allows an unauthorized attacker to execute code remotely over a network. The vulnerability affects multiple Windows 10 builds prior to specific patched versions. Microsoft has released official fixes for all affected versions.
CVE-2026-72997 is a heap-based buffer overflow vulnerability in the Windows Biometric Service on Microsoft Windows 10 Version 1607 and later updates. This flaw allows an authorized local attacker to elevate privileges. The vulnerability has a high severity rating and has been officially fixed in multiple Windows 10 builds.
CVE-2026-72996 is a heap-based buffer overflow vulnerability in the Windows Biometric Service on Microsoft Windows 10 Version 1607 and later builds. This flaw allows an authorized local attacker to elevate privileges. The vulnerability has been assigned a high severity score of 7.8 and has been officially fixed by Microsoft in multiple Windows 10 builds.
CVE-2026-72994 is a heap-based buffer overflow vulnerability in the Windows Biometric Service on Microsoft Windows 10 Version 1607 and later builds. It allows an authorized local attacker to elevate privileges. The vulnerability has been assigned a high severity with a CVSS score of 7.8. Official patches have been released to address this issue in multiple Windows 10 builds.
CVE-2026-72993 is a heap-based buffer overflow vulnerability in the Windows Biometric Service on Windows 10 Version 1607 and later builds. It allows an authorized local attacker to elevate privileges. The vulnerability has a high severity score of 7.8 and affects multiple Windows 10 builds prior to specific fixed versions. Microsoft has released official fixes for all affected versions.
CVE-2026-72992 is a heap-based buffer overflow vulnerability in the Windows Biometric Service on Microsoft Windows 10 Version 1607 and related builds. This flaw allows an authorized local attacker to elevate privileges. The vulnerability has a high severity score of 7.8 and has been officially fixed in multiple Windows 10 builds. No known exploits are reported in the wild at this time.
CVE-2026-72991 is a heap-based buffer overflow vulnerability in the Windows Biometric Service on Microsoft Windows 10 Version 1607 and related builds. This flaw allows an authorized local attacker to elevate privileges. The vulnerability has been assigned a high severity score of 7.8 and affects multiple Windows 10 versions prior to specific fixed builds. Official patches have been released by Microsoft to address this issue.
CVE-2026-72990 is a heap-based buffer overflow vulnerability in the Windows Biometric Service on Microsoft Windows 10 Version 1607 and later builds. This flaw allows an authorized local attacker to elevate privileges on the affected system. The vulnerability has been assigned a high severity rating with a CVSS score of 7.8. Microsoft has released official fixes for all affected versions.
CVE-2026-72988 is a heap-based buffer overflow vulnerability in the Windows Biometric Service on Microsoft Windows 10 Version 1607 and related builds. This flaw allows an authorized local attacker to elevate privileges. The vulnerability has been assigned a high severity score of 7.8 and affects multiple Windows 10 versions prior to specific fixed builds. Microsoft has released official fixes for this issue.
CVE-2026-72995 is a heap-based buffer overflow vulnerability in the Windows Biometric Service on Microsoft Windows 10 Version 1607 and related builds. This flaw allows an authorized local attacker to elevate privileges. The vulnerability has a high severity rating with a CVSS score of 7.8. Microsoft has issued official fixes for all affected versions.
CVE-2026-72985 is a heap-based buffer overflow vulnerability in the Windows Volume Shadow Copy component affecting multiple versions of Microsoft Windows 10, including Version 1607. This flaw allows an unauthorized attacker with physical access to elevate privileges on the affected system. The vulnerability has been assigned a CVSS v3.1 score of 6.8, indicating a medium severity level. Official patches have been released by Microsoft to address this issue.
CVE-2026-72973 is a heap-based buffer overflow vulnerability in Microsoft Office Word, part of Microsoft 365 Apps for Enterprise. This flaw allows an unauthorized attacker to execute code remotely over a network. The vulnerability affects multiple versions prior to specific fixed releases. Microsoft has issued official fixes for this vulnerability. The CVSS v3.1 score is 8.8, indicating high severity with impacts on confidentiality, integrity, and availability.
CVE-2026-72972 is a heap-based buffer overflow vulnerability in Microsoft Office Word within Microsoft 365 Apps for Enterprise. This flaw allows an unauthorized attacker to execute code remotely over a network. The vulnerability affects multiple versions prior to specific fixed releases. Microsoft has released official patches to address this issue.
CVE-2026-70203 is a heap-based buffer overflow vulnerability in Windows Media Player affecting multiple versions of Microsoft Windows 10, including Version 1607. This flaw allows an unauthorized attacker to execute code remotely over a network. The vulnerability has a high severity score of 8.8 and has been officially fixed in several Windows 10 builds.
CVE-2026-69906 is a heap-based buffer overflow vulnerability in the Windows Secure Kernel Mode of Microsoft Windows 10 Version 1607 and later builds. It allows an authorized local attacker to elevate privileges. The vulnerability has been assigned a high severity score of 8.2 and affects multiple Windows 10 builds prior to specific fixed versions. Microsoft has released official fixes for all affected versions.
CVE-2026-69439 is a heap-based buffer overflow vulnerability in Microsoft .NET 10.0 runtime and related versions. This flaw allows an unauthorized attacker to elevate privileges over a network. The vulnerability affects multiple versions of the .NET runtime and Visual Studio components. Microsoft has released official fixes for the affected versions.
CVE-2026-69477 is a heap-based buffer overflow vulnerability in Microsoft Office Access within Microsoft 365 Apps for Enterprise. This flaw allows an authorized attacker to execute code locally on affected systems. The vulnerability has a high severity rating with a CVSS score of 7.3. Microsoft has released official patches to address this issue in multiple versions of the software.
CVE-2026-69629 is a heap-based buffer overflow vulnerability in Microsoft Office Outlook, part of Microsoft 365 Apps for Enterprise. This flaw allows an unauthorized attacker to execute code remotely over a network. The vulnerability affects multiple versions prior to fixed releases. Microsoft has issued official fixes for the affected versions. The vulnerability has a high severity score of 8.8 but no known exploits in the wild have been reported.