CVE-2026-69344: Out-of-bounds Read

Out-of-bounds read in Windows Print Spooler Components allows an authorized attacker to disclose information locally...

CVE-2026-75809: Exposed IOCTL with Insufficient Access Control

Exposed IOCTL with insufficient access control in ASUS Armoury Crate allows a local user to disclosure information and disabling device functionality by bypassing driver authentication and using IOCTLs to read from and write to PCIe configuration space.Refer to the ' Security Update for Armoury...

CVE-2026-69575: Use After Free

Use after free in Windows Storage Spaces Controller allows an authorized attacker to elevate privileges locally...

CVE-2026-69426: Heap-based Buffer Overflow

Heap-based buffer overflow in Windows VOLSNAP.SYS allows an authorized attacker to execute code locally...

CVE-2026-73002: Integer Overflow or Wraparound

Integer overflow or wraparound in Windows Biometric Service allows an authorized attacker to elevate privileges locally...

CVE-2026-72997: Heap-based Buffer Overflow

Heap-based buffer overflow in Windows Biometric Service allows an authorized attacker to elevate privileges locally...

CVE-2026-69907: Improper Handling of Insufficient Permissions or Privileges

Improper handling of insufficient permissions or privileges in Windows Enterprise App Management allows an authorized attacker to elevate privileges locally...

CVE-2026-69785: Untrusted Search Path

Untrusted search path in Windows Smart Card allows an authorized attacker to elevate privileges locally...

CVE-2026-69866: Use After Free

Use after free in Windows Device Association Service allows an authorized attacker to elevate privileges locally...

CVE-2026-72953: Heap-based Buffer Overflow

Heap-based buffer overflow in Windows USB Driver allows an authorized attacker to elevate privileges locally...

CVE-2026-69891: Use After Free

Use after free in Windows Media allows an authorized attacker to elevate privileges locally...

CVE-2026-69792: Concurrent Execution using Shared Resource with Improper Synchronization

Concurrent execution using shared resource with improper synchronization 'race condition' in Windows Win32K allows an authorized attacker to bypass a security feature locally...

CVE-2026-69779: Time-of-check Time-of-use (TOCTOU) Race Condition

Time-of-check time-of-use toctou race condition in Windows Win32K allows an authorized attacker to elevate privileges locally...

CVE-2026-69489: Heap-based Buffer Overflow

Heap-based buffer overflow in Windows Biometric Service allows an authorized attacker to elevate privileges locally...

CVE-2026-69298: Integer Overflow or Wraparound

Integer overflow or wraparound in Windows Biometric Service allows an authorized attacker to elevate privileges locally...

CVE-2026-69376: Out-of-bounds Read

Out-of-bounds read in Microsoft Standard XPS allows an authorized attacker to disclose information locally...

CVE-2026-69351: Exposure of Private Personal Information to an Unauthorized Actor

Exposure of private personal information to an unauthorized actor in Windows Universal Plug and Play UPnP Device Host allows an authorized attacker to disclose information locally...

CVE-2026-69318: Out-of-bounds Read

Out-of-bounds read in Windows Imaging Component allows an authorized attacker to disclose information locally...

CVE-2026-69308: Out-of-bounds Read

Out-of-bounds read in Microsoft Standard XPS allows an authorized attacker to disclose information locally...

CVE-2026-69321: Missing Authentication for Critical Function

Missing authentication for critical function in Windows Power Dependency Coordinator allows an authorized attacker to perform tampering locally...