CVE-2026-69974

An out-of-bounds read vulnerability exists in the Desktop Window Manager , which allows an authorized attacker to disclose information locally . The vulnerability is classified as a CWE-125 issue. No specific exploit details or proof-of-concept code are provided in the documents, and remediation ...

CVE-2026-69979

The Windows AppX Deployment Service is affected by a security feature bypass vulnerability (CVE-2026-69979 ) caused by improper protection of an alternate path . An authorized attacker can exploit this flaw locally to evade security measures. The vulnerability is assigned a CVSS 3.1 score of 5.5 ...

CVE-2026-69978

A null pointer dereference vulnerability exists in Windows VMSwitch . This flaw allows an authorized attacker to cause a local denial of service (DoS). The vulnerability is associated with CWE-476 . While the documents confirm the existence of the flaw and its impact on availability, no specific ...

CVE-2026-69969

The Windows AppX Deployment Service is vulnerable to an information disclosure vulnerability (CVE-2026-69969) due to improper link resolution before file access (link following). An authorized attacker can exploit this flaw to disclose information locally. Exploitation details and specific remedi...

CVE-2026-69964

A Use after free vulnerability exists in the Microsoft Streaming Service (specifically identified as the Kernel Streaming Service Driver ). This flaw allows an authorized attacker to achieve local privilege elevation . The vulnerability is associated with CWE-416 . While the CVSS v3.1 score indic...

CVE-2026-69970

A heap-based buffer overflow exists in the Microsoft Streaming Service (specifically identified in some documents as the Kernel Streaming Service Driver ). This vulnerability allows an authorized attacker to achieve local privilege escalation . No specific exploit code or in-the-wild exploitation...

CVE-2026-70010

A heap-based buffer overflow vulnerability exists in Windows NTFS . This flaw allows an authorized attacker to achieve local privilege escalation . No specific exploit details or remediation versions are provided in the documents, but a high-severity OFFICIAL_FIX is noted in the security metrics.

CVE-2026-69971

This vulnerability exists in Windows Kernel-Mode Drivers due to incorrect authorization (CWE-863). It allows an authorized attacker to perform a local information disclosure . The impact is categorized as high for confidentiality. An official fix is available, as indicated by the remediation leve...

CVE-2026-69966

An integer overflow or wraparound vulnerability exists in the Microsoft Streaming Service (specifically identified as the Kernel Streaming Service Driver ). This flaw allows an authorized attacker to achieve local privilege escalation . A formal official fix is available, and the vulnerability is...

CVE-2026-69945

The Windows AppX Deployment Extensions component is vulnerable to a local elevation of privilege due to missing authorization . An authorized attacker can exploit this flaw to obtain elevated privileges on the system. The vulnerability has a CVSS 3.1 score of 8.8 (HIGH) and is officially document...

CVE-2026-69942

A buffer over-read vulnerability exists in the Windows Overlay Filter component. This flaw allows an authorized attacker to achieve local code execution . The vulnerability is associated with CWE-126 and has been assigned a high severity score. Specific exploitation details and remediation steps ...

CVE-2026-69957

A vulnerability in the Windows Overlay Filter component allows an authorized attacker to achieve local privilege escalation . The root cause is identified as an integer overflow or wraparound condition (CWE-190) and a buffer over-read (CWE-126). Impacting the system's confidentiality, integrity, ...

CVE-2026-69918

A heap-based buffer overflow exists in Windows Core Messaging . This vulnerability allows an authorized attacker to achieve local privilege escalation . While specific affected versions or internal component files are not detailed in the provided documents, the impact is a local elevation of priv...

CVE-2026-69959

An out-of-bounds read vulnerability exists in the Windows Overlay Filter . This flaw allows an authorized attacker to perform local code execution . The vulnerability is listed with a High base severity (7.8) and includes an official fix provided by Microsoft. No specific exploit links or further...

CVE-2026-69952

The Windows Overlay Filter component is vulnerable to an out-of-bounds read (CWE-125). This flaw allows an authorized attacker to perform a local privilege elevation . The severity is rated as HIGH with a CVSS 3.1 score of 7.8. No specific exploit details or in-the-wild exploitation information a...

CVE-2026-69950

A buffer over-read vulnerability exists in the Windows Overlay Filter . This flaw allows an authorized attacker to perform a local privilege escalation . The vulnerability is confirmed with a CVSS 3.1 base score of 7.8 (High) . No specific exploit details or mitigation versions are provided in th...

CVE-2026-69953

A buffer over-read vulnerability exists in the Windows Overlay Filter . This flaw allows an authorized attacker to achieve local privilege escalation . No specific root cause details or affected versions are provided in the documents. Remediation details are not explicitly stated in the provided ...

CVE-2026-69954

A buffer over-read vulnerability exists in the Windows Overlay Filter component. This flaw allows an authorized attacker to perform a local information disclosure, potentially exposing sensitive data. The vulnerability has a Medium severity (CVSS 3.1 score of 5.5) and requires low privileges for ...

CVE-2026-69967

An out-of-bounds read vulnerability exists in the Windows Overlay Filter . This flaw allows an authorized attacker to perform a local information disclosure . Specific exploitation details, including active exploits or proof-of-concept code, are not provided in the documents. Remediation is avail...

CVE-2026-69963

A Heap-based buffer overflow exists in the Microsoft Streaming Service (specifically the Kernel Streaming Service Driver ). This vulnerability allows an authorized attacker to achieve local privilege elevation . The vulnerability is associated with CWE-122 and CWE-190 (Integer Overflow or Wraparo...