Find the CVE cohort

Out-of-bounds read in Windows USB Video Driver allows an authorized attacker to disclose information with a physical attack.

Excerpt language: en.

Severity medium: primary CNA CVSS 4.3 v3.1 (worst CNA-provided scenario) Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2025-03-11T16:59:10.532Z. Updated 2026-02-13T19:38:54.680Z.

External control of file name or path in Windows NTLM allows an unauthorized attacker to perform spoofing over a network.

Excerpt language: en.

Severity medium: primary CNA CVSS 6.5 v3.1 (worst CNA-provided scenario) KEV listed. Forecast present in this snapshot.

Published 2025-03-11T16:59:09.963Z. Updated 2026-02-13T19:38:54.126Z.

Heap-based buffer overflow in Windows Routing and Remote Access Service (RRAS) allows an unauthorized attacker to execute code over a network.

Excerpt language: en.

Severity high: primary CNA CVSS 8.8 v3.1 (worst CNA-provided scenario) Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2025-03-11T16:59:09.304Z. Updated 2026-02-13T19:38:53.639Z.

Heap-based buffer overflow in Role: Windows Hyper-V allows an authorized attacker to elevate privileges locally.

Excerpt language: en.

Severity high: primary CNA CVSS 7.8 v3.1 (worst CNA-provided scenario) Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2025-03-11T16:59:08.737Z. Updated 2026-02-13T19:38:52.988Z.

Heap-based buffer overflow in Role: Windows Hyper-V allows an authorized attacker to elevate privileges locally.

Excerpt language: en.

Severity high: primary CNA CVSS 7.8 v3.1 (worst CNA-provided scenario) Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2025-03-11T16:59:08.240Z. Updated 2026-02-13T19:38:52.490Z.

Use after free in Microsoft Streaming Service allows an authorized attacker to elevate privileges locally.

Excerpt language: en.

Severity high: primary CNA CVSS 7.8 v3.1 (worst CNA-provided scenario) Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2025-03-11T16:59:07.742Z. Updated 2026-02-13T19:38:51.865Z.

Sensitive data storage in improperly locked memory in Windows Remote Desktop Services allows an unauthorized attacker to execute code over a network.

Excerpt language: en.

Severity high: primary CNA CVSS 8.1 v3.1 (worst CNA-provided scenario) Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2025-03-11T16:59:07.165Z. Updated 2026-02-13T19:38:51.311Z.

Improper privilege management in Azure Agent Installer allows an authorized attacker to elevate privileges locally.

Excerpt language: en.

Severity medium: primary CNA CVSS 6.7 v3.1 (worst CNA-provided scenario) Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2025-03-11T16:59:06.609Z. Updated 2026-02-13T19:38:50.700Z.

Improper resolution of path equivalence in Windows MapUrlToZone allows an unauthorized attacker to bypass a security feature over a network.

Excerpt language: en.

Severity medium: primary CNA CVSS 4.3 v3.1 (worst CNA-provided scenario) Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2025-03-11T16:59:06.022Z. Updated 2026-02-13T19:38:50.073Z.

Improper link resolution before file access ('link following') in Microsoft Windows allows an authorized attacker to elevate privileges locally.

Excerpt language: en.

Severity high: primary CNA CVSS 7.1 v3.1 (worst CNA-provided scenario) Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2025-03-11T16:59:05.451Z. Updated 2026-02-13T19:38:46.064Z.

Uncontrolled search path element in Visual Studio allows an authorized attacker to elevate privileges locally.

Excerpt language: en.

Severity high: primary CNA CVSS 7.3 v3.1 (worst CNA-provided scenario) Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2025-03-11T16:59:04.914Z. Updated 2026-02-13T19:38:45.407Z.

Uncontrolled search path element in Visual Studio allows an authorized attacker to elevate privileges locally.

Excerpt language: en.

Severity high: primary CNA CVSS 7.3 v3.1 (worst CNA-provided scenario) Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2025-03-11T16:59:04.304Z. Updated 2026-02-13T19:38:44.851Z.

Null pointer dereference in Windows Kernel Memory allows an authorized attacker to deny service locally.

Excerpt language: en.

Severity medium: primary CNA CVSS 4.4 v3.1 (worst CNA-provided scenario) Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2025-03-11T16:59:03.746Z. Updated 2026-02-13T19:38:44.205Z.

External control of file name or path in Windows NTLM allows an unauthorized attacker to perform spoofing over a network.

Excerpt language: en.

Severity medium: primary CNA CVSS 6.5 v3.1 (worst CNA-provided scenario) Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2025-03-11T16:59:03.202Z. Updated 2026-02-13T19:38:43.657Z.

Heap-based buffer overflow in Kernel Streaming WOW Thunk Service Driver allows an authorized attacker to elevate privileges locally.

Excerpt language: en.

Severity high: primary CNA CVSS 7.8 v3.1 (worst CNA-provided scenario) Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2025-03-11T16:59:02.436Z. Updated 2026-02-13T19:38:43.142Z.

Heap-based buffer overflow in Windows exFAT File System allows an unauthorized attacker to execute code locally.

Excerpt language: en.

Severity high: primary CNA CVSS 7.8 v3.1 (worst CNA-provided scenario) Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2025-03-11T16:59:01.782Z. Updated 2026-02-13T19:38:42.498Z.

Out-of-bounds read in Windows USB Video Driver allows an authorized attacker to elevate privileges with a physical attack.

Excerpt language: en.

Severity medium: primary CNA CVSS 6.6 v3.1 (worst CNA-provided scenario) Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2025-03-11T16:59:00.928Z. Updated 2026-02-13T19:38:41.926Z.

Out-of-bounds read in Windows USB Video Driver allows an authorized attacker to elevate privileges with a physical attack.

Excerpt language: en.

Severity medium: primary CNA CVSS 6.6 v3.1 (worst CNA-provided scenario) Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2025-03-11T16:59:00.254Z. Updated 2026-02-13T19:38:41.319Z.