CVE-2026-69685

Windows Kerberos is affected by a heap-based buffer overflow that allows an authorized attacker to locally elevate privileges . Per Microsoft, the vulnerability carries a CVSS 3.1 score of 7.8 (HIGH) with a local attack vector, low complexity, low privileges required, and no user interaction, res...

CVE-2026-69476

A heap-based buffer overflow in the Windows Biometric Service allows an authorized attacker to escalate privileges locally. The vulnerability is rated CVSS 7.8 (High) with low complexity and low privileges required, resulting in high impact to confidentiality, integrity, and availability. No spec...

CVE-2026-69589

CVE-2026-69589 is a heap-based buffer overflow in Windows Biometric Service that allows an authorized, low-privilege attacker to achieve local privilege escalation . The vulnerability carries a CVSS v3.1 base score of 7.8 (HIGH) with a vector of AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H, indicating low...

CVE-2026-69638

CVE-2026-69638 is a heap-based buffer overflow in Windows NTFS (New Technology File System) that allows an unauthorized attacker to execute code locally. The vulnerability requires no privileges and no user interaction, yielding a CVSS 3.1 base score of 8.4 (HIGH) with high impact to confidential...

CVE-2026-69709

A heap-based buffer overflow in Windows NTFS allows an authorized attacker with low privileges and no user interaction to execute code locally. The vulnerability is rated CVSS 3.1 7.8 (HIGH) with full impact on confidentiality, integrity, and availability. The Microsoft reference points to a spec...

CVE-2026-69876

CVE-2026-69876 is a use after free vulnerability in Windows DHCP Server that allows an authorized attacker to execute code over an adjacent network . The Microsoft CVSS 3.1 score is 8.0 (HIGH) , with a vector of AV:A/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H, indicating low attack complexity and low require...

CVE-2026-69878

A heap-based buffer overflow in Windows DHCP Server allows an authorized attacker to execute code locally. The vulnerability is rated CVSS 3.1 6.4 (Medium) with a vector of AV:L/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H, indicating a local attack with high complexity and high privileges required, but full i...

CVE-2026-69890

CVE-2026-69890 is a Use-After-Free vulnerability in Windows Virtual Trusted Platform Module (vTPM) that allows an authorized local attacker to escalate privileges. The attack requires high privileges and high complexity , with no user interaction needed, but results in a scope change and high imp...

CVE-2026-70289

CVE-2026-70289 is a heap-based buffer overflow in the Windows Win32 Kernel Subsystem (Win32k) that allows an authorized (low-privilege) attacker to elevate privileges locally . The vulnerability is rated CVSS 7.8 (HIGH) with local attack vector, low complexity, and high impact to confidentiality,...

CVE-2026-71348

CVE-2026-71348 is a heap-based buffer overflow in Windows Spaceport.sys , a Windows system driver, that allows an unauthorized attacker with physical access to execute code on the target system. The CNA-assigned CVSS 3.1 score is 6.8 (MEDIUM) with vector AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H, refle...

CVE-2026-72932

CVE-2026-72932 is a buffer over-read in the Windows Message Queuing Queue Manager that allows an unauthorized, unauthenticated attacker to disclose information over a network . The CVSS 3.1 score is 7.5 (HIGH) , with a network attack vector, low complexity, and high confidentiality impact but no ...

CVE-2026-72962

CVE-2026-72962 is a heap-based buffer overflow in the Windows USB Video Driver that allows an authorized attacker to achieve local privilege escalation . The Microsoft CVSS 3.1 score is 8.2 (HIGH) with vector AV:L/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:H, indicating a local attack with low complexity, high...

CVE-2026-72967

A heap-based buffer overflow in the Windows Network Connection Broker component allows an authorized low-privilege attacker to escalate privileges locally. The vulnerability carries a CVSS 3.1 score of 7.8 (HIGH) with a local attack vector, low complexity, no user interaction, and high impact on ...

CVE-2026-73002

CVE-2026-73002 affects Windows Biometric Service , where an integer overflow or wraparound vulnerability allows a locally authenticated attacker to elevate privileges . The flaw requires low privileges , no user interaction, and low attack complexity, yet yields high impact on confidentiality, in...

CVE-2026-77489

CVE-2026-77489 is a null pointer dereference in Windows Biometric Service that allows an authorized local attacker to elevate privileges. The flaw carries a CVSS 3.1 score of 7.8 (HIGH) with a vector of AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H, meaning exploitation requires only low privileges and no ...

CVE-2026-77499

CVE-2026-77499 is a type confusion vulnerability in Windows DHCP Server that allows an unauthorized, remote attacker to cause a denial of service over the network with no privileges or user interaction required. The CVSS 3.1 score is 7.5 (High) with a primary impact on availability . CISA's SSVC ...

CVE-2026-77888

CVE-2026-77888 is a type confusion vulnerability in Windows DHCP Server that allows an unauthorized attacker to cause denial of service over a network. The flaw arises from accessing a resource using an incompatible type. Per the CNA (Microsoft), the CVSS 3.1 base score is 7.5 (HIGH) , with a net...

CVE-2026-77894

CVE-2026-77894 is a local privilege escalation vulnerability in Windows Installer caused by a race condition — specifically, concurrent execution of a shared resource with improper synchronization. An authorized attacker with low privileges can exploit this to gain high integrity over confidentia...

CVE-2026-77904

CVE-2026-77904 is a heap-based buffer overflow in the Windows Volume Manager Extension Driver that allows an attacker with low privileges to achieve local privilege escalation without user interaction. The vulnerability is rated HIGH (CVSS 7.8) with high impact on confidentiality, integrity, and ...

CVE-2026-78449

CVE-2026-78449 is a use-after-free vulnerability in the Windows Reliable Multicast Transport Driver (RMCAST) that allows an unauthorized attacker to execute code over the network. The vulnerability is rated CVSS 3.1: 8.1 (HIGH) with a vector of AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H, indicating a ne...

CVE-2026-78523

A use-after-free vulnerability in Windows DNS Server allows an unauthenticated, remote attacker to cause a denial of service over the network. NVD scores it 7.5 (HIGH) with low attack complexity, while Microsoft's CNA rates it 5.9 (MEDIUM) with high attack complexity. CISA's SSVC assessment indic...

CVE-2026-83975

Windows Biometric Service is affected by a heap-based buffer overflow that allows a locally authenticated attacker with low privileges to escalate to higher privilege. The vulnerability requires no user interaction and has low attack complexity , resulting in a CVSS 3.1 score of 7.8 (HIGH) with h...

CVE-2026-83977

CVE-2026-83977 is a heap-based buffer overflow in the Windows Biometric Service that allows an authorized, low-privilege local attacker to achieve local privilege escalation . The CVSS 3.1 score is 7.8 (HIGH) with vector AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H, indicating that exploitation requires n...

CVE-2026-69343

CVE-2026-69343 is an out-of-bounds read in the Windows Overlay Filter component that allows a low-privilege local attacker to achieve information disclosure without user interaction. The vulnerability is rated CVSS 5.5 (MEDIUM) with a vector of local attack, low complexity, and high confidentiali...

CVE-2026-69406

CVE-2026-69406 is a Windows Kernel information disclosure vulnerability. It stems from the exposure of sensitive system information to an unauthorized control sphere, allowing an authorized attacker to disclose information locally. The assigned CVSS 3.1 score is 5.5 (Medium) with a local attack v...

CVE-2026-69415

Windows DHCP Server contains a missing authentication for critical function vulnerability that allows an authorized attacker (high privileges required) to elevate privileges over a network . The CVSS 3.1 score is 6.8 (MEDIUM) with vector AV:N/AC:L/PR:H/UI:R/S:U/C:H/I:H/A:H, indicating that user i...

CVE-2026-69548

CVE-2026-69548 is a heap-based buffer overflow in Windows RNDIS that allows an unauthorized attacker to disclose information via a physical attack . The CVSS 3.1 score is 4.6 (MEDIUM) with a vector of AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N, reflecting high confidentiality impact but no integrity or ...

CVE-2026-69573

CVE-2026-69573 is a use-after-free vulnerability in the Windows Universal Disk Format File System Driver (UDFS) . An authorized local attacker can exploit it to achieve privilege escalation , potentially gaining full control over confidentiality, integrity, and availability (CVSS 3.1 score 7.0 HI...

CVE-2026-69575

Windows Storage Spaces Controller contains a use after free vulnerability that allows an authorized local attacker to elevate privileges , impacting confidentiality, integrity, and availability (CVSS 3.1: 7.0 HIGH , AV:L/AC:H/PR:L). Attack complexity is high and low privileges are required, with ...

CVE-2026-69581

CVE-2026-69581 is a use-after-free vulnerability in the Windows Device Association Service that allows an authorized, locally authenticated attacker to elevate privileges . The attack requires low privileges , involves high complexity , and needs no user interaction , with unchanged scope but hig...

CVE-2026-69619

CVE-2026-69619 is an out-of-bounds read in the Windows exFAT File System that allows an authorized attacker to elevate privileges over a network . The CVSS 3.1 base score is 8.0 (HIGH) with a vector of AV:N/AC:L/PR:L/UI:R, requiring low privileges and user interaction, with high impact on confide...

CVE-2026-69817

A use-after-free vulnerability in the Windows Bluetooth Port Driver allows an authorized local attacker to elevate privileges . The Microsoft-assigned CVSS 3.1 score is 7.0 (HIGH) , reflecting a local attack vector with high complexity , low privileges required , and no user interaction , resulti...

CVE-2026-69822

CVE-2026-69822 is a local privilege escalation vulnerability in Windows Kerberos caused by a numeric truncation error . An authorized attacker with low privileges can exploit this to achieve full confidentiality, integrity, and availability impact (CVSS 3.1: 7.8 HIGH , vector AV:L/AC:L/PR:L/UI:N/...

CVE-2026-69862

CVE-2026-69862 is an out-of-bounds read in the Windows Wireless Wide Area Network Service that allows an authorized local attacker to disclose information . The CVSS v3.1 score is 5.5 (Medium) with High confidentiality impact, no integrity or availability impact, and requires low privileges over ...

CVE-2026-69874

CVE-2026-69874 is a local privilege escalation vulnerability in Windows ALPC (Advanced Local Procedure Call) caused by an untrusted pointer dereference . An authorized attacker with local high-privilege access can exploit this to elevate privileges further. The vulnerability carries a CVSS 3.1 sc...

CVE-2026-69889

CVE-2026-69889 is a use-after-free vulnerability in the Windows Bluetooth Service that allows an authorized attacker to elevate privileges locally . The CVSS v3.1 base score is 7.0 (HIGH) , with a vector of AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H , indicating a local attack requiring low privileges, ...

CVE-2026-69891

CVE-2026-69891 is a use-after-free vulnerability in Windows Media that allows an authorized attacker to perform a local privilege escalation . The CVSS 3.1 score is 7.0 (HIGH) with a vector of AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H, indicating a local attack requiring low privileges and high complex...

CVE-2026-69895

This information disclosure vulnerability exists in the Windows Spaceport.sys kernel driver, caused by an out-of-bounds read . A local, authorized attacker with low privileges can exploit it to disclose information , with no impact on integrity or availability. The CVSS 3.1 score is 4.7 (Medium) ...

CVE-2026-69930

CVE-2026-69930 is an out-of-bounds read in Windows DHCP Server that allows an unauthorized, unauthenticated attacker to disclose information over a network. NVD rates it CVSS 3.1: 7.5 (HIGH) with low attack complexity, while Microsoft's CNA scores it 5.9 (MEDIUM) due to high attack complexity. CI...

CVE-2026-69989

This use-after-free vulnerability in Windows DNS Server allows an unauthorized, unprivileged attacker to execute code over a network. The CVSS 3.1 base score is 8.1 (HIGH) , reflecting a network vector with high attack complexity and no required privileges or user interaction, with high impact to...

CVE-2026-70091

CVE-2026-70091 is a race condition in Windows DNS caused by concurrent execution using a shared resource with improper synchronization. An unauthorized, network-based attacker can exploit this to cause a denial of service . The vulnerability is rated CVSS 5.9 (MEDIUM) with a network attack vector...

CVE-2026-70203

CVE-2026-70203 is a heap-based buffer overflow in Windows Media Player that allows an unauthorized attacker to execute code over a network . The vulnerability is classified as Remote Code Execution with a CVSS 3.1 score of 8.8 (HIGH) , reflecting a network attack vector, low complexity, no requir...

CVE-2026-72991

CVE-2026-72991 is a heap-based buffer overflow in the Windows Biometric Service that allows a locally authenticated attacker with low privileges to escalate to higher privileges. The vulnerability scores 7.8 (HIGH) under CVSS v3.1, with all three impact dimensions rated High. Attack requires loca...

CVE-2026-72996

CVE-2026-72996 is a heap-based buffer overflow in the Windows Biometric Service that allows an authorized, low-privilege attacker to escalate privileges locally. The vulnerability is rated CVSS 3.1 7.8 (HIGH) with the vector CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H, indicating low attack comp...

CVE-2026-73001

CVE-2026-73001 is a heap-based buffer overflow in Windows Biometric Service that allows an authorized attacker to elevate privileges locally . The vulnerability is rated CVSS 7.8 (HIGH) with a vector of AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H, indicating low attack complexity and that low privileges ...

CVE-2026-73017

CVE-2026-73017 is a heap-based buffer overflow in Windows Graphics Kernel that allows a local, authorized attacker to achieve code execution . The vulnerability requires high privileges and high attack complexity , with no user interaction needed. Scope is changed, with high impact on confidentia...

CVE-2026-73024

CVE-2026-73024 is a heap-based buffer overflow in the Windows Services for NFS ONCRPC XDR Driver that allows an authorized attacker to perform local privilege escalation . The CVSS v3.1 score is 7.8 (HIGH) with the vector AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H, indicating low attack complexity, low ...

CVE-2026-77494

Windows DHCP Server is affected by a type confusion vulnerability (access of resource using incompatible type), allowing an unauthenticated, remote attacker to trigger a denial of service over the network. The CVSS 3.1 score is 7.5 (HIGH) with a vector of AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H, indi...

CVE-2026-77889

CVE-2026-77889 is a type confusion vulnerability in Windows DHCP Server that allows an unauthorized, network-based attacker to cause a denial of service . The CVSS 3.1 score is 7.5 (High) , with no privileges or user interaction required. CISA's SSVC assessment rates exploitation as none , the vu...

CVE-2026-77890

CVE-2026-77890 is a type confusion vulnerability in Windows DHCP Server that allows an unauthorized, remote attacker to trigger a denial of service over a network. The flaw stems from access of a resource using an incompatible type. Per the CVSS 3.1 score of 7.5 (HIGH) , the attack requires no pr...