CVE-2026-69918

A heap-based buffer overflow exists in Windows Core Messaging . This vulnerability allows an authorized attacker to achieve local privilege escalation . While specific affected versions or internal component files are not detailed in the provided documents, the impact is a local elevation of priv...

CVE-2026-69963

A Heap-based buffer overflow exists in the Microsoft Streaming Service (specifically the Kernel Streaming Service Driver ). This vulnerability allows an authorized attacker to achieve local privilege elevation . The vulnerability is associated with CWE-122 and CWE-190 (Integer Overflow or Wraparo...

CVE-2026-69957

A vulnerability in the Windows Overlay Filter component allows an authorized attacker to achieve local privilege escalation . The root cause is identified as an integer overflow or wraparound condition (CWE-190) and a buffer over-read (CWE-126). Impacting the system's confidentiality, integrity, ...

CVE-2026-69952

The Windows Overlay Filter component is vulnerable to an out-of-bounds read (CWE-125). This flaw allows an authorized attacker to perform a local privilege elevation . The severity is rated as HIGH with a CVSS 3.1 score of 7.8. No specific exploit details or in-the-wild exploitation information a...

CVE-2026-69766

A Use after free vulnerability exists in Windows Storage , which allows an authorized attacker to achieve local privilege escalation . The issue is categorized under CWE-416 and CWE-362 (Race Condition). No specific software versions, file paths, or remediation instructions are provided in the do...

CVE-2026-69914

The Windows AppX Deployment Service is vulnerable to an out-of-bounds read vulnerability. This flaw allows an authorized attacker to disclose information locally , potentially leading to access to sensitive data . While the root cause is identified as an out-of-bounds read, specific details regar...

CVE-2026-69867

An out-of-bounds read vulnerability exists in SQLite , which could allow an authorized attacker to achieve local privilege escalation . The vulnerability is documented as having a High severity base score of 7.8. No specific affected versions, underlying root causes, or remediation steps are prov...

CVE-2026-69905

The Windows AppX Deployment Service is vulnerable to a missing authorization flaw. This issue allows an authorized attacker to perform tampering locally on the affected system. The vulnerability has been assigned a CVSSv3.1 score of 5.5 (Medium) and is associated with CWE-862 .

CVE-2026-69935

A Use after free vulnerability exists in Windows Storage , which could allow an authorized attacker to elevate privileges locally . The vulnerability is associated with CWE-416 and CWE-362 (Race Condition). No specific exploit details or patch versions are provided in the documents. Information r...

CVE-2026-69763

A Use after free vulnerability in Windows Storage allows an authorized attacker to achieve local privilege escalation . The vulnerability is categorized under CWE-416 (Use After Free) and CWE-366 (Race Condition). Exploitation details and specific affected versions are not provided in the documen...

CVE-2026-69795

A null pointer dereference vulnerability exists in the Windows Clipboard Server . This flaw allows an authorized attacker to achieve local privilege escalation . No specific exploitation details or direct links are provided in the documentation, but the vulnerability is addressed via an official ...

CVE-2026-69840

A Use after free vulnerability in Windows Certificates allows an authorized attacker to achieve local privilege elevation . The vulnerability's base score is 7.0 (HIGH) . No specific affected versions, root causes, or exploitation details are provided in the documents beyond the general vulnerabi...

CVE-2026-69909

A heap-based buffer overflow exists in Microsoft COM for Windows , which could allow an authorized attacker to perform a local privilege elevation . The vulnerability is classified as HIGH severity with a CVSS 3.1 base score of 7.8. No specific exploit details or remediation steps are provided in...

CVE-2026-72968

A use after free vulnerability exists in the Windows Program Compatibility Assistant Service . This flaw allows an authorized attacker to perform a local privilege escalation . Exploitation details are not provided in the documentation, but the vulnerability is associated with CWE-416 .

CVE-2026-108464

A Use after free vulnerability exists in the Software Protection Platform (SPP) . This flaw allows an authorized attacker to perform a local privilege escalation . The vulnerability is confirmed with a CVSS 3.1 base score of 7.0 (High) . Official remediation is available via Microsoft updates; ho...

CVE-2026-49785

A vulnerability in Windows UEFI involving improper resource shutdown or release allows an authorized attacker to bypass a security feature locally. This issue specifically impacts the UEFI Secure Boot security feature. The CVSS 3.1 score is 7.8 (High) , with a local attack vector and low complexi...

CVE-2026-108465

A Use after free vulnerability in Windows Update Delivery Optimization allows an authorized attacker to achieve local privilege escalation . The flaw leads to a HIGH base severity impact on confidentiality, integrity, and availability. While the specific technical root cause or affected file is n...

CVE-2026-69898

A heap-based buffer overflow exists in the Windows Kernel . This vulnerability allows an authorized attacker to perform a local privilege escalation . Information regarding specific affected versions, the root cause component, or a specific patch is not provided in the documents. No exploit detai...

CVE-2026-70566

A null pointer dereference vulnerability exists in Windows Schannel , which could allow an authorized attacker to achieve local privilege elevation . The vulnerability is categorized under CWE-476 . While the specific component or file is not detailed in the provided documents, the impact is rate...

CVE-2026-108461

A Use after free vulnerability in the Windows Broadcast DVR User Service allows an authorized attacker to achieve local privilege escalation . The vulnerability is categorized under CWE-416 and has a CVSS 3.1 base score of 7.0 (High) . While the documents confirm the existence of the vulnerabilit...