CVE-2026-69978

A null pointer dereference vulnerability exists in Windows VMSwitch . This flaw allows an authorized attacker to cause a local denial of service (DoS). The vulnerability is associated with CWE-476 . While the documents confirm the existence of the flaw and its impact on availability, no specific ...

CVE-2026-69979

The Windows AppX Deployment Service is affected by a security feature bypass vulnerability (CVE-2026-69979 ) caused by improper protection of an alternate path . An authorized attacker can exploit this flaw locally to evade security measures. The vulnerability is assigned a CVSS 3.1 score of 5.5 ...

CVE-2026-69968

A relative path traversal vulnerability exists in Windows Libarchive . This flaw allows an unauthorized attacker to perform tampering over a network. The vulnerability is rated as Medium severity (CVSS 3.1: 6.5) with a focus on integrity impact . Exploitation details are not provided in the docum...

CVE-2026-69971

This vulnerability exists in Windows Kernel-Mode Drivers due to incorrect authorization (CWE-863). It allows an authorized attacker to perform a local information disclosure . The impact is categorized as high for confidentiality. An official fix is available, as indicated by the remediation leve...

CVE-2026-69973

A path traversal vulnerability exists in Windows Libarchive due to an improper limitation of a pathname to a restricted directory. This flaw allows an unauthorized attacker to perform tampering over a network. The vulnerability has been assigned a MEDIUM severity with a CVSS 3.1 score of 6.5, whe...

CVE-2026-70010

A heap-based buffer overflow vulnerability exists in Windows NTFS . This flaw allows an authorized attacker to achieve local privilege escalation . No specific exploit details or remediation versions are provided in the documents, but a high-severity OFFICIAL_FIX is noted in the security metrics.

CVE-2026-69953

A buffer over-read vulnerability exists in the Windows Overlay Filter . This flaw allows an authorized attacker to achieve local privilege escalation . No specific root cause details or affected versions are provided in the documents. Remediation details are not explicitly stated in the provided ...

CVE-2026-69942

A buffer over-read vulnerability exists in the Windows Overlay Filter component. This flaw allows an authorized attacker to achieve local code execution . The vulnerability is associated with CWE-126 and has been assigned a high severity score. Specific exploitation details and remediation steps ...

CVE-2026-69952

The Windows Overlay Filter component is vulnerable to an out-of-bounds read (CWE-125). This flaw allows an authorized attacker to perform a local privilege elevation . The severity is rated as HIGH with a CVSS 3.1 score of 7.8. No specific exploit details or in-the-wild exploitation information a...

CVE-2026-69945

The Windows AppX Deployment Extensions component is vulnerable to a local elevation of privilege due to missing authorization . An authorized attacker can exploit this flaw to obtain elevated privileges on the system. The vulnerability has a CVSS 3.1 score of 8.8 (HIGH) and is officially document...

CVE-2026-69947

A heap-based buffer overflow vulnerability exists in the Windows Overlay Filter component. An unauthorized attacker can exploit this flaw via a physical attack to achieve Remote Code Execution (RCE). The vulnerability carries a MEDIUM severity rating (CVSS 3.1 score of 6.8) and can impact confide...

CVE-2026-69950

A buffer over-read vulnerability exists in the Windows Overlay Filter . This flaw allows an authorized attacker to perform a local privilege escalation . The vulnerability is confirmed with a CVSS 3.1 base score of 7.8 (High) . No specific exploit details or mitigation versions are provided in th...

CVE-2026-69967

An out-of-bounds read vulnerability exists in the Windows Overlay Filter . This flaw allows an authorized attacker to perform a local information disclosure . Specific exploitation details, including active exploits or proof-of-concept code, are not provided in the documents. Remediation is avail...

CVE-2026-69958

A heap-based buffer overflow exists in the Windows Overlay Filter component. This vulnerability allows an unauthorized attacker to achieve Remote Code Execution (RCE) by performing a physical attack . Exploitation details or specific evidence of in-the-wild activity are not provided in the docume...

CVE-2026-69954

A buffer over-read vulnerability exists in the Windows Overlay Filter component. This flaw allows an authorized attacker to perform a local information disclosure, potentially exposing sensitive data. The vulnerability has a Medium severity (CVSS 3.1 score of 5.5) and requires low privileges for ...

CVE-2026-69957

A vulnerability in the Windows Overlay Filter component allows an authorized attacker to achieve local privilege escalation . The root cause is identified as an integer overflow or wraparound condition (CWE-190) and a buffer over-read (CWE-126). Impacting the system's confidentiality, integrity, ...

CVE-2026-69918

A heap-based buffer overflow exists in Windows Core Messaging . This vulnerability allows an authorized attacker to achieve local privilege escalation . While specific affected versions or internal component files are not detailed in the provided documents, the impact is a local elevation of priv...

CVE-2026-69959

An out-of-bounds read vulnerability exists in the Windows Overlay Filter . This flaw allows an authorized attacker to perform local code execution . The vulnerability is listed with a High base severity (7.8) and includes an official fix provided by Microsoft. No specific exploit links or further...

CVE-2026-69766

A Use after free vulnerability exists in Windows Storage , which allows an authorized attacker to achieve local privilege escalation . The issue is categorized under CWE-416 and CWE-362 (Race Condition). No specific software versions, file paths, or remediation instructions are provided in the do...

CVE-2026-69914

The Windows AppX Deployment Service is vulnerable to an out-of-bounds read vulnerability. This flaw allows an authorized attacker to disclose information locally , potentially leading to access to sensitive data . While the root cause is identified as an out-of-bounds read, specific details regar...