CVE-2026-69623

CVE-2026-69623 is a heap-based buffer overflow in Windows HTTP Print Provider that allows an authorized attacker to achieve remote code execution over a network. The CVSS 3.1 score is 8.0 (HIGH) , with a network attack vector, low complexity, low privileges required, and user interaction required...

CVE-2026-70124

CVE-2026-70124 is an out-of-bounds read in Windows DHCP Server that allows an unauthorized, unprivileged network attacker to disclose information. NVD assigns CVSS 3.1: 7.5 (HIGH) with low attack complexity, while Microsoft's CNA scores it 5.9 (MEDIUM) citing high attack complexity. CISA SSVC ass...

CVE-2026-70290

CVE-2026-70290 is an information disclosure vulnerability in the Windows Win32 Kernel Subsystem (Win32k) caused by the use of an uninitialized resource . An authorized local attacker with low privileges can leverage this to read sensitive kernel information, with no user interaction required. The...

CVE-2026-83982

CVE-2026-83982 is a heap-based buffer overflow in the Windows Biometric Service that allows an authorized attacker to perform a local privilege escalation . The vulnerability is rated HIGH (CVSS 3.1: 7.8 ) with a local attack vector, low complexity, low privileges required, and no user interactio...

CVE-2026-83996

Windows Error Reporting in Windows is affected by a heap-based buffer overflow that allows an authorized attacker to elevate privileges locally . The assigned CVSS 3.1 score is 8.8 (HIGH) with a scope change (vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H), indicating that successful exploi...

CVE-2026-62694

CVE-2026-62694 is a use-after-free vulnerability in Windows Installer that allows a locally authenticated attacker with low privileges to escalate privileges . The attack requires high complexity and no user interaction , with high impact on confidentiality, integrity, and availability (CVSS 3.1:...

CVE-2026-68851

CVE-2026-68851 is a buffer over-read vulnerability in Windows NTFS that allows an authorized local attacker to disclose information . The CVSS 3.1 score is 5.5 (Medium) with a local attack vector, low complexity, low privileges required, and no user interaction; impact is limited to high confiden...

CVE-2026-69293

CVE-2026-69293 is a heap-based buffer overflow in the Windows Biometric Service that allows an authorized attacker to achieve local privilege escalation . The vulnerability is rated CVSS 3.1 7.8 (HIGH) with a local attack vector, low complexity, and low privileges required, resulting in high impa...

CVE-2026-69450

CVE-2026-69450 is a local privilege escalation vulnerability in Windows Error Reporting , caused by an out-of-bounds read . An authorized attacker with low privileges can exploit this locally without user interaction to gain high impact on confidentiality, integrity, and availability (CVSS 3.1 sc...

CVE-2026-69669

CVE-2026-69669 is a heap-based buffer overflow in the Windows Kernel that allows an unauthorized attacker to achieve remote code execution over a network. The Microsoft-provided CVSS 3.1 score is 8.8 (HIGH) with the vector AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H, indicating a network-reachable attack...

CVE-2026-69723

CVE-2026-69723 is an information disclosure vulnerability in the Windows Kernel . The flaw exposes sensitive system information to an unauthorized control sphere, allowing an authorized attacker to disclose information over a network. The CVSS 3.1 score is 5.7 (MEDIUM) with high confidentiality i...

CVE-2026-69738

CVE-2026-69738 is an integer overflow or wraparound in the Windows Biometric Service that allows an authorized local attacker to elevate privileges . The vulnerability scores CVSS 7.8 (HIGH) with a local attack vector, low complexity, low privileges required, and high impact to confidentiality, i...

CVE-2026-69773

A heap-based buffer overflow in the Windows Biometric Service allows an authorized attacker to elevate privileges over a network. The CVSS 3.1 score is 8.0 (HIGH) with a vector of AV:N/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H, indicating that exploitation requires low privileges and user interaction , but ...

CVE-2026-69787

CVE-2026-69787 is a heap-based buffer overflow in the Windows Biometric Service that allows an authorized local attacker to escalate privileges. The assigned CVSS 3.1 score is 7.8 (High) , with a vector of AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H, indicating low attack complexity and low privileges re...

CVE-2026-70572

CVE-2026-70572 is an integer overflow or wraparound vulnerability in Windows Biometric Service that allows a locally authenticated attacker to elevate privileges . The root cause lies in improper handling of integer operations within the biometric service component. The vulnerability carries a CV...

CVE-2026-73023

A heap-based buffer overflow in the Windows Imaging Component allows an unauthorized attacker to achieve remote code execution over a network . The vulnerability is rated CVSS 8.8 (HIGH) with a vector of AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H, indicating network reachability, low complexity, no priv...

CVE-2026-78454

An out-of-bounds read in the Windows CD-ROM Driver allows a local, low-privilege attacker to achieve information disclosure . The CVSS 3.1 score is 5.5 (Medium) , reflecting a local attack vector, low complexity, and high confidentiality impact with no integrity or availability impact. CISA's SSV...

CVE-2026-83973

CVE-2026-83973 is a heap-based buffer overflow in the Windows Biometric Service component, allowing a locally authenticated attacker with low privileges to achieve privilege escalation with high impact to confidentiality, integrity, and availability (CVSS 3.1 score 7.8 – HIGH ). CISA's SSVC asses...

CVE-2026-56650

CVE-2026-56650 is a Windows Network File System (NFS) vulnerability. A heap-based buffer overflow in NFS allows an authenticated local attacker to escalate privileges. The CVE entry is supported by multiple sources (NVD/MSRC/CIRCL/NCSC) with consistent description and references. Microsoft has re...

CVE-2026-69295

CVE-2026-69295 is an out-of-bounds read in the Windows USB Driver that allows an authorized local attacker to escalate privileges. The flaw yields high impact across confidentiality, integrity, and availability (CVSS 3.1 score 7.8 HIGH , vector AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H), meaning a low-...

CVE-2026-69598

CVE-2026-69598 affects Windows iSCSI and stems from an incorrect calculation of buffer size , which allows an unauthorized attacker to execute code over a network. The assigned CVSS 3.1 score is 8.8 (HIGH) with vector AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H, indicating a network-exploitable flaw with...

CVE-2026-69717

CVE-2026-69717 is a privilege elevation vulnerability in Windows Group Policy caused by an untrusted pointer dereference . An authorized attacker with low privileges can exploit this over the network, with user interaction required, to gain high impact on confidentiality, integrity, and availabil...

CVE-2026-69770

CVE-2026-69770 is an information disclosure vulnerability in the Windows Spaceport.sys kernel driver, caused by the use of an uninitialized resource . An authorized attacker with local access and low privileges can exploit it to disclose sensitive information (high confidentiality impact, no inte...

CVE-2026-70283

CVE-2026-70283 affects Windows Win32K , the kernel-mode component handling window management. The root cause is an incorrect authorization flaw that allows a local attacker with low privileges to achieve local privilege escalation , resulting in full compromise of confidentiality, integrity, and ...

CVE-2026-72947

CVE-2026-72947 is an integer underflow (wrap/wraparound) in the Windows File History Service that allows an authorized attacker to achieve local privilege escalation . Microsoft rates it 6.4 MEDIUM (CVSS 3.1, high privileges required), while NVD assigns 7.0 HIGH (low privileges required). CISA's ...

CVE-2026-73016

A heap-based buffer overflow in DirectWrite , a component of Microsoft's Graphics Component, allows an unauthorized attacker to achieve remote code execution over a network. The attack requires low complexity, no privileges, and user interaction, with full impact on confidentiality, integrity, an...

CVE-2026-73019

CVE-2026-73019 involves an improper resolution of path equivalence in the Windows URL Moniker component, allowing an unauthorized attacker to bypass a security feature over a network. The vulnerability requires user interaction and grants low confidentiality impact with no integrity or availabili...

CVE-2026-77905

CVE-2026-77905 is a use-after-free vulnerability in Windows Management Instrumentation (WMI) that allows an authorized attacker to escalate privileges locally. The flaw carries a CVSS 3.1 score of 7.0 (HIGH) , with a local attack vector, high complexity, low privileges required, and no user inter...

CVE-2025-62209

CVE-2025-62209 concerns the Windows License Manager. The vulnerability involves insertion of sensitive information into a log file, which could allow an authorized local attacker to disclose sensitive information. The CVSS 3.1 metrics (local, low attack complexity, low privileges required) indica...

CVE-2026-69381

CVE-2026-69381 is an out-of-bounds read in the Windows Storage Port Driver that allows an unauthorized attacker with physical access to disclose information. The vulnerability requires no prior privileges or user interaction, but the physical attack vector limits its practical exploitability. The...

CVE-2026-69443

CVE-2026-69443 is an out-of-bounds read in Windows Device Health Attestation (DHA) that allows an unauthorized attacker to disclose information over a network . The vulnerability is rated CVSS 7.5 (High) with a vector of AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N, meaning it is exploitable over the netw...

CVE-2026-69578

CVE-2026-69578 is a numeric truncation error in the Windows Kernel that allows an authorized attacker with low privileges to elevate privileges locally . The vulnerability carries a CVSS 3.1 score of 7.0 (HIGH) with a vector of AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H, reflecting high attack complexit...

CVE-2026-69813

A use-after-free flaw in Windows DNS Server allows an unauthenticated remote attacker to achieve code execution over the network . The vulnerability is rated CVSS 3.1 8.1 (HIGH) , with an attack vector of network, high complexity, and no required privileges or user interaction. No specific affect...

CVE-2026-72954

CVE-2026-72954 is a use-after-free vulnerability in Windows Deployment Services (Microsoft) that allows an authorized attacker (low privileges) to achieve remote code execution over a network. The CVSS 3.1 score is 7.5 (HIGH) with vector AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H, reflecting high attack...

CVE-2026-72961

CVE-2026-72961 is an out-of-bounds read vulnerability in Windows Hyper-V that allows a local, authorized attacker to elevate privileges. The CVSS 3.1 score is 8.2 (HIGH) , with a vector of AV:L/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:H, indicating that exploitation requires existing high privileges on the s...

CVE-2026-73011

CVE-2026-73011 is a heap-based buffer overflow in Windows Biometric Service that allows an authorized attacker to achieve local privilege escalation . The vulnerability carries a CVSS 3.1 score of 7.8 (High) with high impact to confidentiality, integrity, and availability. CISA's SSVC assessment ...

CVE-2026-83968

CVE-2026-83968 is a use-after-free vulnerability in the Windows Biometric Service that allows an authorized attacker to elevate privileges locally . The CVSS 3.1 score is 7.8 (High) with impacts to confidentiality, integrity, and availability all rated High. CISA's SSVC assessment indicates no kn...

CVE-2026-83979

CVE-2026-83979 is a use-after-free vulnerability in Windows Biometric Service that allows an authorized attacker to achieve local privilege escalation . The Microsoft CVSS 3.1 score is 7.8 (HIGH) with a vector of AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H, indicating low attack complexity and no require...

CVE-2026-68833

CVE-2026-68833 is a heap-based buffer overflow in Windows NTFS (New Technology File System) that allows an unauthorized attacker to achieve code execution . The attack requires physical access to the system (CVSS:3.1 AV:P), with no privileges or user interaction needed, and results in high impact...

CVE-2026-68835

CVE-2026-68835 is a use-after-free vulnerability in Windows Print Spooler Components that allows an authorized attacker to elevate privileges over a network . The Microsoft-assigned CVSS 3.1 score is 7.1 (HIGH) , with an attack vector of network, high complexity, low privileges required, and user...

CVE-2026-68893

CVE-2026-68893 is a use-after-free vulnerability in the Windows Remote Desktop Licensing Service that allows an authorized attacker to elevate privileges over a network . The flaw is rated CVSS 3.1: 7.1 (High) with a vector requiring network access, high complexity, low privileges, and user inter...

CVE-2026-69297

CVE-2026-69297 affects Windows DHCP Server , where passwords are stored in a recoverable format, allowing an authorized attacker (with low privileges) to disclose information over a network. The CVSS v3.1 score is 6.5 (MEDIUM) with high confidentiality impact and no integrity or availability impa...

CVE-2026-69428

Windows LDAP (Lightweight Directory Access Protocol) is vulnerable to an out-of-bounds read that allows an unauthorized, network-based attacker to cause a denial of service , with a CVSS 3.1 base score of 7.5 (HIGH) . The vulnerability requires no privileges and no user interaction, though it imp...

CVE-2026-69637

CVE-2026-69637 is an out-of-bounds read vulnerability in Windows DHCP Server that allows an authorized attacker (low privileges) to trigger a denial of service over an adjacent network . The CVSS 3.1 base score is 5.7 (MEDIUM) with a vector of AV:A/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H, reflecting high ...

CVE-2026-69654

CVE-2026-69654 is a use-after-free vulnerability in Windows Accounts Control that allows an authorized attacker to achieve local privilege escalation . The CVSS 3.1 score is 7.0 (HIGH) with vector AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H, indicating a local attack requiring high complexity and low pri...

CVE-2026-69687

CVE-2026-69687 is an integer underflow (wrap or wraparound) vulnerability in the Windows USB Audio Class driver (usbaudio.sys). An authorized local attacker can exploit this flaw to elevate privileges , achieving high impact on confidentiality, integrity, and availability (CVSS 3.1: 7.8 HIGH ; ve...

CVE-2026-69689

An out-of-bounds read in the Windows Win32K component allows an authorized attacker to elevate privileges over a network . The CVSS v3.1 score is 8.0 (HIGH) with vector AV:N/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H , indicating a network-based attack requiring low privileges and user interaction, with high...

CVE-2026-69713

CVE-2026-69713 is a security feature bypass in Windows Secure Boot caused by a dependency on a vulnerable third-party component . An authorized attacker with high privileges can exploit this vulnerability locally to bypass a security feature, resulting in a high integrity impact but no confidenti...

CVE-2026-69846

An integer overflow or wraparound in Windows Secure Kernel Mode allows an authorized attacker to elevate privileges locally. The flaw requires high privileges and low attack complexity with no user interaction, but changes scope to affect the full system with high impact on confidentiality, integ...

CVE-2026-72926

CVE-2026-72926 is a use-after-free vulnerability in Windows Internet Connection Sharing (ICS) that allows an authorized attacker to achieve local privilege elevation . The CVSS v3.1 score is 7.0 (HIGH) with a local attack vector, high complexity, and low privileges required; impact is rated high ...