CVE-2026-70010

A heap-based buffer overflow vulnerability exists in Windows NTFS . This flaw allows an authorized attacker to achieve local privilege escalation . No specific exploit details or remediation versions are provided in the documents, but a high-severity OFFICIAL_FIX is noted in the security metrics.

CVE-2026-69970

A heap-based buffer overflow exists in the Microsoft Streaming Service (specifically identified in some documents as the Kernel Streaming Service Driver ). This vulnerability allows an authorized attacker to achieve local privilege escalation . No specific exploit code or in-the-wild exploitation...

EUVD-2026-99118

Heap-based buffer overflow in Microsoft Streaming Service allows an authorized attacker to elevate privileges locally...

EUVD-2026-99113

Buffer over-read in Windows Overlay Filter allows an authorized attacker to elevate privileges locally...

EUVD-2026-99114

Buffer over-read in Windows Overlay Filter allows an authorized attacker to disclose information locally...

EUVD-2026-99111

Heap-based buffer overflow in Windows Overlay Filter allows an unauthorized attacker to execute code with a physical attack...

EUVD-2026-99110

Buffer over-read in Windows Overlay Filter allows an authorized attacker to elevate privileges locally...

EUVD-2026-99107

Heap-based buffer overflow in Windows Core Messaging allows an authorized attacker to elevate privileges locally...

EUVD-2026-99108

Buffer over-read in Windows Overlay Filter allows an authorized attacker to execute code locally...

EUVD-2026-99116

Heap-based buffer overflow in Windows Overlay Filter allows an unauthorized attacker to execute code with a physical attack...

CVE-2026-69954

A buffer over-read vulnerability exists in the Windows Overlay Filter component. This flaw allows an authorized attacker to perform a local information disclosure, potentially exposing sensitive data. The vulnerability has a Medium severity (CVSS 3.1 score of 5.5) and requires low privileges for ...

CVE-2026-69918

A heap-based buffer overflow exists in Windows Core Messaging . This vulnerability allows an authorized attacker to achieve local privilege escalation . While specific affected versions or internal component files are not detailed in the provided documents, the impact is a local elevation of priv...

CVE-2026-69953

A buffer over-read vulnerability exists in the Windows Overlay Filter . This flaw allows an authorized attacker to achieve local privilege escalation . No specific root cause details or affected versions are provided in the documents. Remediation details are not explicitly stated in the provided ...

CVE-2026-69950

A buffer over-read vulnerability exists in the Windows Overlay Filter . This flaw allows an authorized attacker to perform a local privilege escalation . The vulnerability is confirmed with a CVSS 3.1 base score of 7.8 (High) . No specific exploit details or mitigation versions are provided in th...

CVE-2026-69942

A buffer over-read vulnerability exists in the Windows Overlay Filter component. This flaw allows an authorized attacker to achieve local code execution . The vulnerability is associated with CWE-126 and has been assigned a high severity score. Specific exploitation details and remediation steps ...

CVE-2026-69963

A Heap-based buffer overflow exists in the Microsoft Streaming Service (specifically the Kernel Streaming Service Driver ). This vulnerability allows an authorized attacker to achieve local privilege elevation . The vulnerability is associated with CWE-122 and CWE-190 (Integer Overflow or Wraparo...

CVE-2026-69958

A heap-based buffer overflow exists in the Windows Overlay Filter component. This vulnerability allows an unauthorized attacker to achieve Remote Code Execution (RCE) by performing a physical attack . Exploitation details or specific evidence of in-the-wild activity are not provided in the docume...

CVE-2026-69947

A heap-based buffer overflow vulnerability exists in the Windows Overlay Filter component. An unauthorized attacker can exploit this flaw via a physical attack to achieve Remote Code Execution (RCE). The vulnerability carries a MEDIUM severity rating (CVSS 3.1 score of 6.8) and can impact confide...

EUVD-2026-99105

Heap-based buffer overflow in Microsoft COM for Windows allows an authorized attacker to elevate privileges locally...

CVE-2026-69909

A heap-based buffer overflow exists in Microsoft COM for Windows , which could allow an authorized attacker to perform a local privilege elevation . The vulnerability is classified as HIGH severity with a CVSS 3.1 base score of 7.8. No specific exploit details or remediation steps are provided in...