VDB

GCVE-110-NCSC-2026-284

GCVE-110-NCSC-2026-284
Advisory PublishedCVSS 5.5/10
Vulnetix · Advisory published August 11, 2026
A heap-based buffer overflow vulnerability in Windows LUAFV enables an authorized local attacker to elevate privileges by exploiting memory corruption.

Weaknesses (CWE)

CWE-122Heap-based Buffer OverflowCWE-426Untrusted Search PathCWE-770Allocation of Resources Without Limits or ThrottlingCWE-77Improper Neutralization of Special Elements used in a Command ('Command Injection')CWE-208Observable Timing DiscrepancyCWE-190Integer Overflow or WraparoundCWE-125Out-of-bounds ReadCWE-476NULL Pointer DereferenceCWE-1390Weak AuthenticationCWE-908Use of Uninitialized ResourceCWE-416Use After FreeCWE-126Buffer Over-readCWE-306Missing Authentication for Critical FunctionCWE-415Double FreeCWE-863Incorrect AuthorizationCWE-312Cleartext Storage of Sensitive InformationCWE-862Missing AuthorizationCWE-362Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition')CWE-191Integer Underflow (Wrap or Wraparound)CWE-187Partial String ComparisonCWE-121Stack-based Buffer OverflowCWE-59Improper Link Resolution Before File Access ('Link Following')CWE-787Out-of-bounds WriteCWE-843Access of Resource Using Incompatible Type ('Type Confusion')CWE-822Untrusted Pointer DereferenceCWE-197Numeric Truncation ErrorCWE-1220Insufficient Granularity of Access ControlCWE-347Improper Verification of Cryptographic SignatureCWE-326Inadequate Encryption StrengthCWE-346Origin Validation ErrorCWE-502Deserialization of Untrusted DataCWE-250Execution with Unnecessary Privileges

Risk Scores

CVSS 3.1
5.5/10
Medium · CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C

Affected Products

VendorProductVersionsPlatforms
Microsoftvers:unknown/*

Aliases

CVE-2026-42976CVE-2026-49179CVE-2026-50472CVE-2026-54113CVE-2026-54984CVE-2026-56174CVE-2026-56179CVE-2026-59122CVE-2026-59124CVE-2026-59125CVE-2026-59126CVE-2026-59127CVE-2026-59128CVE-2026-59130CVE-2026-59131CVE-2026-59132CVE-2026-59133CVE-2026-59134CVE-2026-59135CVE-2026-59136CVE-2026-59137CVE-2026-59138CVE-2026-61345CVE-2026-61346CVE-2026-61347CVE-2026-61348CVE-2026-61349CVE-2026-61350CVE-2026-61352CVE-2026-61353CVE-2026-61355CVE-2026-61356CVE-2026-61357CVE-2026-61358CVE-2026-61359CVE-2026-61360CVE-2026-61361CVE-2026-61363CVE-2026-61364CVE-2026-61365CVE-2026-61366CVE-2026-61367CVE-2026-61368CVE-2026-61918CVE-2026-61920CVE-2026-61921CVE-2026-61923CVE-2026-61924CVE-2026-61925CVE-2026-61926CVE-2026-61927CVE-2026-61928CVE-2026-61929CVE-2026-61930CVE-2026-61932CVE-2026-61933CVE-2026-61934CVE-2026-61936CVE-2026-61937CVE-2026-61938CVE-2026-61939CVE-2026-62688CVE-2026-62690CVE-2026-62692CVE-2026-62693CVE-2026-62695CVE-2026-62696CVE-2026-62698CVE-2026-62699CVE-2026-62700CVE-2026-62701CVE-2026-62702CVE-2026-62703CVE-2026-62705CVE-2026-62707CVE-2026-62708CVE-2026-62709CVE-2026-62710CVE-2026-62711CVE-2026-62712CVE-2026-62713CVE-2026-62714CVE-2026-62715CVE-2026-62716CVE-2026-62717CVE-2026-62718CVE-2026-62719CVE-2026-62720CVE-2026-62721CVE-2026-62722CVE-2026-62723CVE-2026-62724CVE-2026-62725CVE-2026-62726CVE-2026-62728CVE-2026-62729CVE-2026-62730CVE-2026-62732CVE-2026-62733CVE-2026-62734CVE-2026-62735CVE-2026-62736CVE-2026-62737CVE-2026-62738CVE-2026-62739CVE-2026-62740CVE-2026-62741CVE-2026-62742CVE-2026-62743CVE-2026-62745CVE-2026-62746CVE-2026-62747CVE-2026-62748CVE-2026-62749CVE-2026-62750CVE-2026-62751CVE-2026-62752CVE-2026-62753CVE-2026-62754CVE-2026-62755CVE-2026-62757CVE-2026-62758CVE-2026-62761CVE-2026-62766CVE-2026-62768CVE-2026-62769CVE-2026-62770CVE-2026-62771CVE-2026-62772CVE-2026-62773CVE-2026-62774CVE-2026-62775CVE-2026-62776CVE-2026-62777CVE-2026-62778CVE-2026-62779CVE-2026-62780CVE-2026-62781CVE-2026-62782CVE-2026-62783CVE-2026-62784CVE-2026-62785CVE-2026-62786CVE-2026-62787CVE-2026-62788CVE-2026-62790CVE-2026-62792CVE-2026-62793CVE-2026-62795CVE-2026-62796CVE-2026-62797CVE-2026-62798CVE-2026-62799CVE-2026-62800CVE-2026-62803CVE-2026-62807CVE-2026-62811CVE-2026-62812CVE-2026-62814CVE-2026-62815CVE-2026-62816CVE-2026-62817CVE-2026-62818CVE-2026-62819CVE-2026-62820CVE-2026-62822CVE-2026-62823CVE-2026-62824CVE-2026-62832CVE-2026-62876CVE-2026-62877CVE-2026-62878CVE-2026-62880CVE-2026-62881CVE-2026-62883CVE-2026-62885CVE-2026-62887CVE-2026-62888CVE-2026-62889CVE-2026-62890CVE-2026-62892CVE-2026-62893CVE-2026-62894CVE-2026-62908CVE-2026-65662CVE-2026-65671CVE-2026-65672CVE-2026-65678CVE-2026-65679CVE-2026-65681CVE-2026-65773CVE-2026-65774CVE-2026-65775CVE-2026-65776CVE-2026-65777CVE-2026-65778CVE-2026-65779CVE-2026-65780CVE-2026-65781CVE-2026-65782CVE-2026-65783CVE-2026-65784CVE-2026-65785CVE-2026-65786CVE-2026-65787CVE-2026-65788CVE-2026-65789CVE-2026-65790CVE-2026-65791CVE-2026-65794CVE-2026-65795CVE-2026-65796CVE-2026-65797CVE-2026-65798CVE-2026-65799CVE-2026-65814CVE-2026-66799CVE-2026-66802CVE-2026-66804CVE-2026-6726CVE-2026-6727CVE-2026-68819CVE-2026-68820CVE-2026-70304CVE-2026-70307CVE-2026-70330CVE-2026-70344CVE-2026-70345CVE-2026-70346CVE-2026-70347CVE-2026-70348CVE-2026-71331

References

advisory
advisory
advisory
advisory
advisory
advisory
advisory
advisory
advisory
advisory
advisory
advisory
advisory
advisory
advisory
advisory
advisory
advisory
advisory
advisory
advisory
advisory
advisory
advisory
advisory
advisory
advisory
advisory
advisory
advisory
advisory
advisory
advisory
advisory
advisory
advisory
advisory
advisory
advisory
advisory
advisory
advisory
advisory
advisory
advisory
advisory
advisory
advisory
advisory
advisory
advisory
advisory
advisory
advisory
advisory
advisory
advisory
advisory
advisory
advisory
advisory
advisory
advisory
advisory
advisory
advisory
advisory
advisory
advisory
advisory
advisory
advisory
advisory
advisory
advisory
advisory
advisory
advisory
advisory
advisory
advisory
advisory
advisory
advisory
advisory
advisory
advisory
advisory
advisory
advisory
advisory
advisory
advisory
advisory
advisory
advisory
advisory
advisory
advisory
advisory
advisory
advisory
advisory
advisory
advisory
advisory
advisory
advisory
advisory
advisory
advisory
advisory
advisory
advisory
advisory
advisory
advisory
advisory
advisory
advisory
advisory
advisory
advisory
advisory
advisory
advisory
advisory
advisory
advisory
advisory
advisory
advisory
advisory
advisory
advisory
advisory
advisory
advisory
advisory
advisory
advisory
advisory
advisory
advisory
advisory
advisory
advisory
advisory
advisory
advisory
advisory
advisory
advisory
advisory
advisory
advisory
advisory
advisory
advisory
advisory
advisory
advisory
advisory
advisory
advisory
advisory
advisory
advisory
advisory
advisory
advisory
advisory
advisory
advisory
advisory
advisory
advisory
advisory
advisory
advisory
advisory
advisory
advisory
advisory
advisory
advisory
advisory
advisory
advisory
advisory
advisory
advisory
advisory
advisory
advisory
advisory
advisory
advisory
advisory
advisory
advisory
advisory
advisory
advisory
advisory
advisory
advisory
advisory
advisory
advisory
advisory
advisory
advisory
advisory
advisory
advisory
advisory
advisory
advisory
advisory
advisory
advisory
advisory
advisory
advisory
advisory
advisory
advisory
advisory
advisory
advisory
advisory
advisory

Browse GCVE Records

3,521 records in the GCVE database · Updated September 6, 2026

No matching records found.

Explore Further

Investigate this vulnerability in the interactive console or download the raw GCVE record.

$ Console Community · 100/wk Open console ›