CVE-2026-69299: Use After Free

Use after free in Microsoft COM for Windows allows an authorized attacker to elevate privileges locally...

Android XR Bulletin—September 2026Stay organized with collectionsSave and categorize content based on your preferences.

The XR Security Bulletin contains details of security vulnerabilities affecting the XR platform. The full XR update comprises the security patch level of 2026-09-05 or later from the September 2026 Android Security Bulletin in addition to all issues in this bulletin. We encourage all customers to...

CVE-2026-69785: Untrusted Search Path

Untrusted search path in Windows Smart Card allows an authorized attacker to elevate privileges locally...

CVE-2026-68825: Use After Free

Use after free in Windows Bind Filter Driver allows an authorized attacker to elevate privileges locally...

CVE-2026-69617: Out-of-bounds Read

Out-of-bounds read in Windows Resilient File System ReFS allows an authorized attacker to elevate privileges locally...

CVE-2026-72963: Use After Free

Use after free in Windows Modern Execution Server allows an authorized attacker to elevate privileges locally...

CVE-2026-83952: Heap-based Buffer Overflow

Heap-based buffer overflow in Windows Resilient File System ReFS allows an authorized attacker to elevate privileges locally...

CVE-2026-80096: Out-of-bounds Read

Out-of-bounds read in Windows Remote Desktop Services allows an authorized attacker to elevate privileges over a network...

CVE-2026-83954: Heap-based Buffer Overflow

Heap-based buffer overflow in Windows Biometric Service allows an authorized attacker to elevate privileges locally...

PT-2026-87320

Name of the Vulnerable Software and Affected Versions Microsoft Standard XPS affected versions not specified Description A heap-based buffer overflow occurs in Microsoft Standard XPS, which allows an authorized attacker to elevate privileges over a network. A heap-based buffer overflow is a memor...

CVE-2026-69433: Heap-based Buffer Overflow

Heap-based buffer overflow in Windows Error Reporting allows an authorized attacker to elevate privileges locally...

CVE-2026-69801: Heap-based Buffer Overflow

Heap-based buffer overflow in Windows Audio Service allows an authorized attacker to elevate privileges locally...

CVE-2026-83939: Untrusted Pointer Dereference

Untrusted pointer dereference in Windows Secure Kernel Mode allows an authorized attacker to elevate privileges locally...

CVE-2026-72929: Improper Validation of Integrity Check Value

Improper validation of integrity check value in Windows Installer allows an authorized attacker to elevate privileges locally...

CVE-2026-71334: Heap-based Buffer Overflow

Heap-based buffer overflow in Windows NFS Portmapper allows an authorized attacker to elevate privileges locally...

CVE-2026-69716: Improper Neutralization of Special Elements used in an SQL Command

Improper neutralization of special elements used in an sql command 'sql injection' in Microsoft Office SharePoint allows an authorized attacker to elevate privileges over a network...

CVE-2026-71338: Double Free

Double free in Windows Failover Cluster allows an authorized attacker to elevate privileges locally...

CVE-2026-69332: Out-of-bounds Read

Out-of-bounds read in Windows NTFS allows an authorized attacker to elevate privileges over a network...

CVE-2026-69458: Out-of-bounds Read

Out-of-bounds read in Windows BitLocker allows an authorized attacker to elevate privileges over a network...

CVE-2026-68847: Use After Free

Use after free in Windows Connected User Experiences and Telemetry allows an authorized attacker to elevate privileges locally...