CVE-2026-69957

A vulnerability in the Windows Overlay Filter component allows an authorized attacker to achieve local privilege escalation . The root cause is identified as an integer overflow or wraparound condition (CWE-190) and a buffer over-read (CWE-126). Impacting the system's confidentiality, integrity, ...

CVE-2026-69950

A buffer over-read vulnerability exists in the Windows Overlay Filter . This flaw allows an authorized attacker to perform a local privilege escalation . The vulnerability is confirmed with a CVSS 3.1 base score of 7.8 (High) . No specific exploit details or mitigation versions are provided in th...

CVE-2026-69967

An out-of-bounds read vulnerability exists in the Windows Overlay Filter . This flaw allows an authorized attacker to perform a local information disclosure . Specific exploitation details, including active exploits or proof-of-concept code, are not provided in the documents. Remediation is avail...

CVE-2026-69947

A heap-based buffer overflow vulnerability exists in the Windows Overlay Filter component. An unauthorized attacker can exploit this flaw via a physical attack to achieve Remote Code Execution (RCE). The vulnerability carries a MEDIUM severity rating (CVSS 3.1 score of 6.8) and can impact confide...

CVE-2026-69913

A Use after free vulnerability exists in the Windows TCP/IP stack. This flaw allows an unauthorized attacker to achieve remote code execution over a network. Exploitation details and specific affected versions are not provided in the documents, but the vulnerability is confirmed as a HIGH severit...

CVE-2026-69935

A Use after free vulnerability exists in Windows Storage , which could allow an authorized attacker to elevate privileges locally . The vulnerability is associated with CWE-416 and CWE-362 (Race Condition). No specific exploit details or patch versions are provided in the documents. Information r...

CVE-2026-69905

The Windows AppX Deployment Service is vulnerable to a missing authorization flaw. This issue allows an authorized attacker to perform tampering locally on the affected system. The vulnerability has been assigned a CVSSv3.1 score of 5.5 (Medium) and is associated with CWE-862 .

CVE-2026-69795

A null pointer dereference vulnerability exists in the Windows Clipboard Server . This flaw allows an authorized attacker to achieve local privilege escalation . No specific exploitation details or direct links are provided in the documentation, but the vulnerability is addressed via an official ...

CVE-2026-69763

A Use after free vulnerability in Windows Storage allows an authorized attacker to achieve local privilege escalation . The vulnerability is categorized under CWE-416 (Use After Free) and CWE-366 (Race Condition). Exploitation details and specific affected versions are not provided in the documen...

CVE-2026-69909

A heap-based buffer overflow exists in Microsoft COM for Windows , which could allow an authorized attacker to perform a local privilege elevation . The vulnerability is classified as HIGH severity with a CVSS 3.1 base score of 7.8. No specific exploit details or remediation steps are provided in...

CVE-2026-69850

A vulnerability exists in Windows Certificates due to an untrusted pointer dereference . This flaw allows an authorized attacker to perform a local privilege escalation . The provided documents do not specify the exact component, file, or specific software version affected, nor do they provide de...

CVE-2026-69914

The Windows AppX Deployment Service is vulnerable to an out-of-bounds read vulnerability. This flaw allows an authorized attacker to disclose information locally , potentially leading to access to sensitive data . While the root cause is identified as an out-of-bounds read, specific details regar...

CVE-2026-69840

A Use after free vulnerability in Windows Certificates allows an authorized attacker to achieve local privilege elevation . The vulnerability's base score is 7.0 (HIGH) . No specific affected versions, root causes, or exploitation details are provided in the documents beyond the general vulnerabi...

CVE-2026-69766

A Use after free vulnerability exists in Windows Storage , which allows an authorized attacker to achieve local privilege escalation . The issue is categorized under CWE-416 and CWE-362 (Race Condition). No specific software versions, file paths, or remediation instructions are provided in the do...

CVE-2026-69639

A heap-based buffer overflow vulnerability exists in Windows Libarchive , which allows an unauthorized attacker to achieve remote code execution over a network. The vulnerability is assigned a CVSS v3.1 score of 9.8 , indicating a critical risk level. Microsoft has released updates to address thi...

CVE-2026-69898

A heap-based buffer overflow exists in the Windows Kernel . This vulnerability allows an authorized attacker to perform a local privilege escalation . Information regarding specific affected versions, the root cause component, or a specific patch is not provided in the documents. No exploit detai...

CVE-2026-69363

A heap-based buffer overflow exists in Windows Error Reporting , which allows an authorized attacker to achieve privilege escalation over a network. The vulnerability is associated with CWE-122 and has a CVSS 3.1 base score of 8.0 (HIGH) . Remediation is available through an official fix .

CVE-2026-108461

A Use after free vulnerability in the Windows Broadcast DVR User Service allows an authorized attacker to achieve local privilege escalation . The vulnerability is categorized under CWE-416 and has a CVSS 3.1 base score of 7.0 (High) . While the documents confirm the existence of the vulnerabilit...

CVE-2026-108462

A Windows Kernel information disclosure vulnerability (CVE-2026-108462) allows an authorized attacker to disclose sensitive system information locally . The root cause is the exposure of sensitive system information to an unauthorized control sphere. The vulnerability has a Medium severity and a ...

CVE-2026-108460

A Use after free vulnerability exists in Windows Message Queuing , which could allow an unauthorized attacker to execute code over a network. The CVSS 3.1 score is 8.1 (HIGH) , reflecting high impacts on confidentiality, integrity, and availability. While specific technical root causes or affecte...