CVE-2026-68874

Out-of-bounds read in Windows Program Compatibility Assistant Service allows an authorized attacker to disclose information over a network...

CVE-2026-68873

Insertion of sensitive information into log file in Windows Program Compatibility Assistant Service allows an authorized attacker to disclose information locally...

CVE-2026-68845

Heap-based buffer overflow in Windows Program Compatibility Assistant Service allows an authorized attacker to elevate privileges locally...

EUVD-2026-73413

Insertion of sensitive information into log file in Windows Program Compatibility Assistant Service allows an authorized attacker to disclose information locally...

CVE-2026-68873

CVE-2026-68873 is an information disclosure vulnerability in the Windows Program Compatibility Assistant Service . The root cause is the insertion of sensitive information into a log file maintained by the service, allowing an authorized local attacker with low privileges to read and disclose tha...

EUVD-2026-73409

Out-of-bounds read in Windows Program Compatibility Assistant Service allows an authorized attacker to disclose information over a network...

CVE-2026-68876

Windows Program Compatibility Assistant Service is affected by a heap-based buffer overflow that allows an authorized attacker to elevate privileges over a network . The CVSS 3.1 score is 8.0 (HIGH) with vector AV:N/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H, indicating a network-based attack with low comple...

CVE-2026-69563

CVE-2026-69563 is a heap-based buffer overflow in the Windows Program Compatibility Assistant Service that allows an authorized attacker to achieve local privilege escalation . The vulnerability carries a CVSS 3.1 score of 7.0 (HIGH) , with a vector of AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H, indicat...

EUVD-2026-73016

Heap-based buffer overflow in Windows Program Compatibility Assistant Service allows an authorized attacker to elevate privileges locally...

EUVD-2026-73011

Improper neutralization of special elements used in a command 'command injection' in Windows Program Compatibility Assistant Service allows an authorized attacker to elevate privileges locally...

CVE-2026-69534

CVE-2026-69534 is a command injection vulnerability in the Windows Program Compatibility Assistant Service , caused by improper neutralization of special elements used in a command. An authorized attacker can leverage this flaw to achieve local privilege escalation , with a CVSS 3.1 score of 7.8 ...

EUVD-2026-73199

Heap-based buffer overflow in Windows Program Compatibility Assistant Service allows an authorized attacker to elevate privileges locally...

CVE-2026-68845

CVE-2026-68845 is a heap-based buffer overflow in the Windows Program Compatibility Assistant Service that allows an authorized attacker to perform local privilege escalation . Microsoft rates it HIGH severity (CVSS 3.1: 7.8) with a local attack vector, low complexity, low privileges required, an...

Windows Program Compatibility Assistant Service Elevation of Privilege Vulnerability

Improper neutralization of special elements used in a command 'command injection' in Windows Program Compatibility Assistant Service allows an authorized attacker to elevate privileges locally...

Windows Program Compatibility Assistant Service Information Disclosure Vulnerability

Out-of-bounds read in Windows Program Compatibility Assistant Service allows an authorized attacker to disclose information over a network...

Windows Program Compatibility Assistant Service Elevation of Privilege Vulnerability

Heap-based buffer overflow in Windows Program Compatibility Assistant Service allows an authorized attacker to elevate privileges over a network...

Windows Program Compatibility Assistant Service Elevation of Privilege Vulnerability

Heap-based buffer overflow in Windows Program Compatibility Assistant Service allows an authorized attacker to elevate privileges locally...

Windows Program Compatibility Assistant Service Elevation of Privilege Vulnerability

Heap-based buffer overflow in Windows Program Compatibility Assistant Service allows an authorized attacker to elevate privileges locally...

CVE-2026-62696

Integer underflow wrap or wraparound in Windows Program Compatibility Assistant Service allows an authorized attacker to elevate privileges locally...

CVE-2026-62696

CVE-2026-62696 impacts the Windows Program Compatibility Assistant Service. The advisory describes an integer underflow (wrap/wraparound) that allows an authorized local attacker to elevate privileges. CVSS: 3.1, Base score 7.8 (HIGH), with Local attack vector, Low attack complexity, Privileges r...