CVE-2026-69351: Exposure of Private Personal Information to an Unauthorized Actor

Exposure of private personal information to an unauthorized actor in Windows Universal Plug and Play UPnP Device Host allows an authorized attacker to disclose information locally...

CVE-2026-69318: Out-of-bounds Read

Out-of-bounds read in Windows Imaging Component allows an authorized attacker to disclose information locally...

CVE-2026-69308: Out-of-bounds Read

Out-of-bounds read in Microsoft Standard XPS allows an authorized attacker to disclose information locally...

CVE-2026-69321: Missing Authentication for Critical Function

Missing authentication for critical function in Windows Power Dependency Coordinator allows an authorized attacker to perform tampering locally...

CVE-2026-69300: Use After Free

Use after free in Windows Push Notifications allows an authorized attacker to elevate privileges locally...

CVE-2026-69294: Generation of Error Message Containing Sensitive Information

Generation of error message containing sensitive information in Microsoft COM for Windows allows an authorized attacker to disclose information locally...

CVE-2026-69289: Improper Link Resolution Before File Access

Improper link resolution before file access 'link following' in Windows Setup Files Cleanup allows an authorized attacker to elevate privileges locally...

CVE-2026-69283: Heap-based Buffer Overflow

Heap-based buffer overflow in Windows CD-ROM Driver allows an authorized attacker to elevate privileges locally...

CVE-2026-69275: Use After Free

Use after free in Kernel Streaming WOW Thunk Service Driver allows an authorized attacker to elevate privileges locally...

CVE-2026-68842: Exposure of Sensitive System Information to an Unauthorized Control Sphere

Exposure of sensitive system information to an unauthorized control sphere in Windows MIDI Service Module allows an authorized attacker to disclose information locally...

CVE-2026-69896: Use After Free

Use after free in Windows Error Reporting allows an authorized attacker to elevate privileges locally...

CVE-2026-69889: Use After Free

Use after free in Windows Bluetooth Service allows an authorized attacker to elevate privileges locally...

CVE-2026-69684: Generation of Error Message Containing Sensitive Information

Generation of error message containing sensitive information in Windows Error Reporting allows an authorized attacker to disclose information locally...

CVE-2026-69609: Out-of-bounds Read

Out-of-bounds read in Windows Win32K allows an authorized attacker to disclose information locally...

CVE-2026-69540: Use After Free

Use after free in Windows Audio Service allows an authorized attacker to elevate privileges locally...

CVE-2026-69527: Out-of-bounds Read

Out-of-bounds read in Windows USB Mass Storage Class Driver allows an authorized attacker to disclose information locally...

CVE-2026-69269: Integer Underflow (Wrap or Wraparound)

Integer underflow wrap or wraparound in Microsoft Standard XPS allows an authorized attacker to elevate privileges locally...

CVE-2026-69288: Use of Uninitialized Resource

Use of uninitialized resource in Windows GDI+ allows an authorized attacker to disclose information locally...

CVE-2026-68886: Use After Free

Use after free in Windows Network Connection Broker allows an authorized attacker to disclose information locally...

CVE-2026-68885: Heap-based Buffer Overflow

Heap-based buffer overflow in Microsoft Standard XPS allows an authorized attacker to elevate privileges locally...