CVE-2026-69605

Use after free in Microsoft Install Service allows an authorized attacker to elevate privileges locally...

CVE-2026-69600

Use after free in Microsoft Windows Search Component allows an authorized attacker to elevate privileges locally...

CVE-2026-69601

Heap-based buffer overflow in Microsoft Windows Media Foundation allows an unauthorized attacker to execute code over a network...

CVE-2026-69594

Heap-based buffer overflow in Microsoft Local Security Authority Server lsasrv allows an authorized attacker to elevate privileges locally...

CVE-2026-69586

Integer overflow or wraparound in Microsoft Windows PDF allows an unauthorized attacker to execute code over a network...

CVE-2026-69556

Heap-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code over a network...

CVE-2026-69559

Origin validation error in Microsoft Teams for Android allows an authorized attacker to disclose information over a network...

CVE-2026-69531

Unintended proxy or intermediary 'confused deputy' in Microsoft Windows Speech allows an authorized attacker to perform tampering locally...

CVE-2026-69511

Heap-based buffer overflow in Microsoft Windows Media Foundation allows an unauthorized attacker to execute code over a network...

CVE-2026-69477

Heap-based buffer overflow in Microsoft Office Access allows an authorized attacker to execute code locally...

CVE-2026-69464

Execution with unnecessary privileges in Microsoft Office SharePoint allows an authorized attacker to elevate privileges over a network...

CVE-2026-69467

Stack-based buffer overflow in Microsoft Graphics Component allows an authorized attacker to elevate privileges locally...

CVE-2026-69465

Missing authorization in Microsoft Office SharePoint allows an authorized attacker to execute code over a network...

CVE-2026-69453

Missing authorization in Microsoft Windows Search Component allows an authorized attacker to perform tampering locally...

CVE-2026-69442

Heap-based buffer overflow in Microsoft Office allows an unauthorized attacker to execute code over a network...

CVE-2026-69438

Incorrect conversion between numeric types in Microsoft JScript allows an unauthorized attacker to execute code over a network...

CVE-2026-69417

Improper neutralization of input during web page generation 'cross-site scripting' in Microsoft Office SharePoint allows an authorized attacker to perform spoofing over a network...

CVE-2026-69409

Execution with unnecessary privileges in Microsoft Office SharePoint allows an authorized attacker to disclose information over a network...

CVE-2026-69402

Improper neutralization of input during web page generation 'cross-site scripting' in Microsoft Office SharePoint allows an authorized attacker to perform spoofing over a network...

CVE-2026-69382

Use of a broken or risky cryptographic algorithm in Microsoft Exchange Server allows an unauthorized attacker to disclose information over a network...