CVE-2026-69909

Heap-based buffer overflow in Microsoft COM for Windows allows an authorized attacker to elevate privileges locally...

CVE-2026-69914

Out-of-bounds read in Windows AppX Deployment Service allows an authorized attacker to disclose information locally...

CVE-2026-69882

Untrusted search path in Windows Update allows an authorized attacker to elevate privileges locally...

CVE-2026-69902

Untrusted pointer dereference in Windows NTFS allows an authorized attacker to execute code locally...

CVE-2026-69884

Buffer over-read in Windows GDI allows an authorized attacker to elevate privileges locally...

CVE-2026-69880

Access of resource using incompatible type 'type confusion' in Desktop Window Manager allows an authorized attacker to elevate privileges locally...

CVE-2026-69867

Out-of-bounds read in SQLite allows an authorized attacker to elevate privileges locally...

CVE-2026-69850

Untrusted pointer dereference in Windows Certificates allows an authorized attacker to elevate privileges locally...

CVE-2026-69856

Use after free in Windows Storage allows an authorized attacker to elevate privileges locally...

CVE-2026-69840

Use after free in Windows Certificates allows an authorized attacker to elevate privileges locally...

CVE-2026-69766

Use after free in Windows Storage allows an authorized attacker to elevate privileges locally...

CVE-2026-69783

External control of file name or path in Windows Update allows an authorized attacker to elevate privileges locally...

CVE-2026-69798

Use after free in Windows Wired AutoConfig Service allows an authorized attacker to elevate privileges locally...

CVE-2026-69795

Null pointer dereference in Windows Clipboard Server allows an authorized attacker to elevate privileges locally...

CVE-2026-69721

Out-of-bounds read in Windows iSCSI allows an authorized attacker to disclose information locally...

CVE-2026-69733

Untrusted search path in Windows Update allows an authorized attacker to elevate privileges locally...

CVE-2026-69736

Concurrent execution using shared resource with improper synchronization 'race condition' in Windows Credential Manager allows an authorized attacker to elevate privileges locally...

CVE-2026-69763

Use after free in Windows Storage allows an authorized attacker to elevate privileges locally...

CVE-2026-69743

Use after free in Windows Program Compatibility Assistant Service allows an authorized attacker to elevate privileges locally...

CVE-2026-69675

Out-of-bounds read in Windows Network File System allows an authorized attacker to disclose information locally...