CVE-2026-69299

Use after free in Microsoft COM for Windows allows an authorized attacker to elevate privileges locally...

CVE-2026-69294

Generation of error message containing sensitive information in Microsoft COM for Windows allows an authorized attacker to disclose information locally...

CVE-2026-69294

Microsoft COM for Windows is affected by an information disclosure vulnerability caused by the generation of an error message containing sensitive information. An authorized local attacker can exploit this to disclose information, with no user interaction required. The CVSS 3.1 score is 5.5 (Medi...

EUVD-2026-73439

Generation of error message containing sensitive information in Microsoft COM for Windows allows an authorized attacker to disclose information locally...

EUVD-2026-73434

Use after free in Microsoft COM for Windows allows an authorized attacker to elevate privileges locally...

CVE-2026-69299

Microsoft COM for Windows is affected by a use-after-free vulnerability that allows an authorized local attacker to achieve privilege escalation. The CVSS 3.1 score is 7.0 (HIGH) , with a local attack vector, high complexity, and low required privileges. No user interaction is needed, and all thr...

Microsoft COM for Windows Elevation of Privilege Vulnerability

Use after free in Microsoft COM for Windows allows an authorized attacker to elevate privileges locally...

Microsoft COM for Windows Information Disclosure Vulnerability

Generation of error message containing sensitive information in Microsoft COM for Windows allows an authorized attacker to disclose information locally...

PT-2026-87346

Name of the Vulnerable Software and Affected Versions Microsoft COM for Windows affected versions not specified Description A use-after-free condition in Microsoft COM for Windows allows an authorized attacker to elevate privileges locally. Use-after-free is a memory corruption issue that occurs...

CVE-2026-69294: Generation of Error Message Containing Sensitive Information

Generation of error message containing sensitive information in Microsoft COM for Windows allows an authorized attacker to disclose information locally...

PT-2026-87341

Name of the Vulnerable Software and Affected Versions Microsoft COM for Windows affected versions not specified Description An issue in Microsoft COM for Windows allows an authorized attacker to locally disclose sensitive information through the generation of error messages. Recommendations At th...

CVE-2026-69299: Use After Free

Use after free in Microsoft COM for Windows allows an authorized attacker to elevate privileges locally...

CVE-2026-59136

Use of uninitialized resource in Microsoft COM for Windows allows an authorized attacker to disclose information locally...

CVE-2026-59136

CVE-2026-59136 affects Microsoft COM for Windows due to use of an uninitialized resource, enabling a locally authorized attacker to disclose information. The vulnerability impact is information disclosure with a CVSS v3.1 base score of 5.5 (Medium); attack requires local access, low privileges, a...

CVE-2026-59136

Use of uninitialized resource in Microsoft COM for Windows allows an authorized attacker to disclose information locally...

CVE-2026-59136 Microsoft COM for Windows Information Disclosure Vulnerability

...

CVE-2026-59136 Microsoft COM for Windows Information Disclosure Vulnerability

...

EUVD-2026-56315

Use of uninitialized resource in Microsoft COM for Windows allows an authorized attacker to disclose information locally...

Microsoft COM for Windows Information Disclosure Vulnerability

Use of uninitialized resource in Microsoft COM for Windows allows an authorized attacker to disclose information locally...

PT-2026-70415

Name of the Vulnerable Software and Affected Versions Microsoft COM for Windows affected versions not specified Description An authorized attacker can locally disclose sensitive information due to the use of an uninitialized resource in Microsoft COM Component Object Model, a platform for softwar...