CVE-2026-69311

CVE-2026-69311 is a use-after-free vulnerability in Windows Audio Service that allows a locally authenticated attacker to elevate privileges . The flaw requires low privileges , high attack complexity , and no user interaction , but yields high impact across confidentiality, integrity, and availa...

CVE-2026-69353

CVE-2026-69353 is an out-of-bounds read vulnerability in Windows Text Shaping that allows a locally authenticated attacker with low privileges to disclose information. The attack vector is local, requires no user interaction, and the scope is unchanged. The CVSS v3.1 base score is 5.5 (Medium) , ...

CVE-2026-69357

Windows NDIS (Network Driver Interface Specification) contains a use-after-free vulnerability that allows an authorized attacker to elevate privileges over a network. The flaw requires low privileges , user interaction , and a high-attack-complexity network vector to succeed, resulting in high im...

CVE-2026-69421

CVE-2026-69421 is an integer underflow (wrap/wraparound) vulnerability in a Windows Kernel Mode Driver . An authorized local attacker can exploit the flaw to elevate privileges , with full impact to confidentiality, integrity, and availability (CVSS 3.1: 7.8 HIGH , vector AV:L/AC:L/PR:L/UI:N/S:U/...

CVE-2026-69499

CVE-2026-69499 is an integer overflow or wraparound vulnerability in the Windows Imaging Component that allows an unauthorized attacker to achieve remote code execution over a network. The flaw requires user interaction (e.g., opening a crafted file), but no prior privileges are needed. The CVSS ...

CVE-2026-69575

Windows Storage Spaces Controller contains a use after free vulnerability that allows an authorized local attacker to elevate privileges , impacting confidentiality, integrity, and availability (CVSS 3.1: 7.0 HIGH , AV:L/AC:H/PR:L). Attack complexity is high and low privileges are required, with ...

CVE-2026-69604

CVE-2026-69604 is a heap-based buffer overflow in the Windows Audio Service that allows an authorized local attacker with low privileges to elevate privileges . The vulnerability requires a local attack vector , low privileges , and no user interaction , with a CVSS 3.1 base score of 7.8 (HIGH) a...

CVE-2026-69620

CVE-2026-69620 is a stack-based buffer overflow in Windows DHCP Server that allows an unauthorized attacker to achieve remote code execution over a network. The CVSS 3.1 score is 8.1 (HIGH) with a vector of AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H, indicating network-based exploitation with high compl...

CVE-2026-69672

Windows DNS contains an information disclosure vulnerability caused by a use of uninitialized resource . An authenticated attacker with local access and low privileges can exploit it to disclose information, with no user interaction required. The CVSS 3.1 score is 5.5 (MEDIUM) , reflecting high c...

CVE-2026-69674

Windows Modern Device Management (MDM) contains a missing authentication vulnerability in a critical function that allows a locally authenticated attacker to bypass a security feature . The CVSS v3.1 score is 5.5 (MEDIUM) with a vector of AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N , indicating a local a...

CVE-2026-69808

CVE-2026-69808 is an out-of-bounds read vulnerability in the Windows Win32K component that allows an authorized attacker with local access to disclose information . The CVSS 3.1 base score is 5.5 (MEDIUM) , reflecting a local attack vector, low complexity, low privileges required, no user interac...

CVE-2026-69834

CVE-2026-69834 is a use-after-free vulnerability in Windows ALPC (Advanced Local Procedure Call) that allows an authorized local attacker to elevate privileges . The attack requires local access , high complexity , and low privileges , with no user interaction needed. The CVSS v3.1 base score is ...

CVE-2026-70145

CVE-2026-70145 is an out-of-bounds read in the Microsoft Windows Search Component that allows an authorized attacker to disclose information locally. The vulnerability is rated CVSS 5.5 (MEDIUM) with a local attack vector, low complexity, low privileges required, and no user interaction. The prim...

CVE-2026-72939

CVE-2026-72939 is a null pointer dereference in Windows Routing and Remote Access Service (RRAS) that allows an authorized attacker to cause a denial of service over a network. The CVSS 3.1 score is 6.5 (Medium) with vector AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H , indicating a network-attackable fla...

CVE-2026-77886

CVE-2026-77886 is an out-of-bounds read in Windows DHCP Server that allows an unauthorized, network-based attacker to cause a denial of service . The vulnerability requires no user interaction or prior authentication, with a CVSS 3.1 score of 7.5 (HIGH) — driven entirely by the availability impac...

CVE-2026-77904

CVE-2026-77904 is a heap-based buffer overflow in the Windows Volume Manager Extension Driver that allows an attacker with low privileges to achieve local privilege escalation without user interaction. The vulnerability is rated HIGH (CVSS 7.8) with high impact on confidentiality, integrity, and ...

CVE-2026-78452

Out-of-bounds read in the Microsoft Windows SCSI Class System File allows an unauthorized attacker with physical access to perform an information disclosure attack. The vulnerability requires no privileges and no user interaction , with a CVSS 3.1 base score of 4.6 (MEDIUM) . CISA's SSVC assessme...

CVE-2026-83974

CVE-2026-83974 is a heap-based buffer overflow in the Windows Biometric Service that allows an authorized attacker to achieve local privilege escalation . The CNA (Microsoft) assigns a CVSS 3.1 score of 7.8 (High) with vector AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H, reflecting low attack complexity, ...

CVE-2026-83976

CVE-2026-83976 is a heap-based buffer overflow in the Windows Biometric Service that allows an authorized attacker to achieve local privilege escalation . The vulnerability requires low privileges and no user interaction , with an attack vector of local and low complexity , rated CVSS 7.8 (HIGH) ...

CVE-2025-62457

CVE-2025-62457 affects the Windows Cloud Files Mini Filter Driver and is described as an out-of-bounds read that enables an authorized attacker to escalate privileges locally. The connected sources corroborate this vulnerability exists in Windows components and list the Cloud Files Mini Filter Dr...

CVE-2026-20874

CVE-2026-20874 is a Windows Management Services race condition that can lead to local privilege elevation. The initial description states the issue is a race condition in Windows Management Services exploited by an authorized attacker to escalate privileges. Connected documents corroborate this u...

CVE-2026-32153

CVSS and impact : CVE-2026-32153 is a local privilege escalation in the Windows Speech Runtime (Windows Speech) caused by a use-after-free condition in Microsoft Windows Speech. The vulnerability can be exploited locally by an authorized user with low privileges and no user interaction to obtain ...

CVE-2026-58637

CVE-2026-58637 affects Windows Client-Side Caching (CSC) Service. Description and sources confirm a use-after-free vulnerability that enables an authorized local attacker to elevate privileges. Metrics indicate local attack vector, low privileges required, and no user interaction, with high confi...

CVE-2026-68848

CVE-2026-68848 is a heap-based buffer overflow in Windows Print Spooler Components that allows an authorized local attacker to escalate privileges . The vulnerability requires low privileges , has low attack complexity , and needs no user interaction , yielding a CVSS 3.1 score of 7.8 (HIGH) with...

CVE-2026-68887

CVE-2026-68887 is an out-of-bounds read in Windows Message Queuing Queue Manager that allows an unauthorized, network-based attacker to trigger a denial of service . The vulnerability requires no prior authentication or user interaction and carries a CVSS 3.1 base score of 7.5 (HIGH) , with impac...

CVE-2026-68888

CVE-2026-68888 is a heap-based buffer overflow in Microsoft Standard XPS that allows an authorized local attacker to escalate privileges . The CVSS 3.1 score is 7.8 (High) , reflecting a local attack vector with low complexity, low privileges required, no user interaction, and high impact to conf...

CVE-2026-69301

A stack-based buffer overflow in the Windows Win32K component allows an authorized attacker to achieve privilege elevation over a network. The CVSS 3.1 score is 8.0 (HIGH) , with low attack complexity, low privileges required, and user interaction required. Exploitation details are not yet public...

CVE-2026-69358

Microsoft Remote Desktop Client is affected by a use of uninitialized resource flaw that allows an authorized attacker to achieve remote code execution over a network. The vulnerability requires user interaction and carries a CVSS 3.1 score of 7.1 (HIGH) with high impact on confidentiality, integ...

CVE-2026-69413

CVE-2026-69413 is a use-after-free vulnerability in the Windows USB Audio Class driver (usbaudio.sys) that allows an authorized attacker to perform local privilege escalation . The CVSS 3.1 score is 7.0 (HIGH) with a vector of AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H, indicating high attack complexity...

CVE-2026-69483

CVE-2026-69483 is an out-of-bounds read vulnerability in Windows Image Acquisition (WIA) that allows an authorized, local attacker to achieve information disclosure with high confidentiality impact . The CVSS 3.1 score is 4.7 (Medium) , with a vector of AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N, indica...

CVE-2026-69490

CVE-2026-69490 is an out-of-bounds read vulnerability in the Windows USB Mass Storage Class Driver that allows an unauthorized attacker to elevate privileges via a physical attack . The CVSS 3.1 base score is 6.8 (Medium) , reflecting the physical attack vector requirement (AV:P), low complexity,...

CVE-2026-69568

CVE-2026-69568 is an out-of-bounds read vulnerability in the Windows Storage Spaces Controller component. An authorized attacker with local access and low privileges can exploit this flaw to achieve information disclosure (high confidentiality impact, no integrity or availability impact). The CVS...

CVE-2026-69585

CVE-2026-69585 affects the Microsoft Windows Search Component , where an incorrect type conversion or cast allows an authorized attacker to perform local privilege escalation . The vulnerability scores 7.8 (HIGH) under CVSS 3.1, with low attack complexity, low privileges required, no user interac...

CVE-2026-69625

A heap-based buffer overflow in Windows Connected User Experiences and Telemetry (UXTelemetry) allows an authorized attacker to elevate privileges over a network. The vulnerability requires low privileges and user interaction , but results in high impact to confidentiality, integrity, and availab...

CVE-2026-69682

CVE-2026-69682 is a use-after-free vulnerability in the Windows Host Guardian Service component that allows an authorized local attacker to elevate privileges . The CVSS 3.1 score is 7.0 (HIGH) with a vector of AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H, reflecting high attack complexity and required lo...

CVE-2026-69688

CVE-2026-69688 is a heap-based buffer overflow in Windows Encrypting File System (EFS) that allows an authorized attacker to achieve privilege elevation over a network. The Microsoft Security Response Center classifies it as an Elevation of Privilege vulnerability. The CVSS 3.1 score is 7.1 (HIGH...

CVE-2026-69791

CVE-2026-69791 is a use-after-free vulnerability in the Windows Device Association Service that allows an authorized attacker to achieve local privilege escalation . The vulnerability carries a CVSS 3.1 base score of 7.0 (HIGH) , with a local attack vector, high complexity, low privileges require...

CVE-2026-69839

CVE-2026-69839 is a denial-of-service vulnerability in the Windows iSCSI Target Service , caused by an uncaught exception that allows an authorized attacker (low privileges) to deny service over the network. The CVSS v3.1 score is 6.5 (Medium) with a vector of AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H,...

CVE-2026-69860

CVE-2026-69860 is a heap-based buffer overflow in Windows Imaging Component that allows an unauthorized attacker to execute code over a network. The CVSS 3.1 score is 8.8 (HIGH) , with a vector of AV:N/AC:L/PR:N/UI:R, meaning the attack is network-based, requires user interaction , and needs no p...

CVE-2026-69907

CVE-2026-69907 affects Windows Enterprise App Management , where improper handling of insufficient permissions or privileges allows an authorized attacker to elevate privileges locally . The vulnerability is rated CVSS 3.1: 7.8 (HIGH) with a local attack vector , low complexity , low privileges r...

CVE-2026-69989

This use-after-free vulnerability in Windows DNS Server allows an unauthorized, unprivileged attacker to execute code over a network. The CVSS 3.1 base score is 8.1 (HIGH) , reflecting a network vector with high attack complexity and no required privileges or user interaction, with high impact to...

CVE-2026-71334

CVE-2026-71334 is a heap-based buffer overflow in the Windows NFS Portmapper component that allows an authorized local attacker to elevate privileges. The Microsoft-assigned CVSS 3.1 base score is 7.8 (High) with a vector of AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H, reflecting low privilege requiremen...

CVE-2026-72933

CVE-2026-72933 is a heap-based buffer overflow in the Microsoft WDAC (Windows Defender Application Control) OLE DB provider for SQL , allowing an unauthorized remote attacker to achieve code execution over a network . The vulnerability is rated CVSS 3.1 8.8 (HIGH) by Microsoft (CNA), with the vec...

CVE-2026-73007

CVE-2026-73007 is a heap-based buffer overflow in the Windows Biometric Service that allows an authorized attacker to achieve local privilege escalation . The vulnerability requires low privileges, no user interaction, and has low attack complexity, yielding a CVSS 3.1 score of 7.8 (HIGH) with fu...

CVE-2026-73021

CVE-2026-73021 is a heap-based buffer overflow in Windows Biometric Service that allows an authorized attacker to achieve local privilege escalation . The CVSS 3.1 base score is 7.8 (HIGH) with a local attack vector, low complexity, and low privileges required, impacting confidentiality, integrit...

CVE-2026-77489

CVE-2026-77489 is a null pointer dereference in Windows Biometric Service that allows an authorized local attacker to elevate privileges. The flaw carries a CVSS 3.1 score of 7.8 (HIGH) with a vector of AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H, meaning exploitation requires only low privileges and no ...

CVE-2026-77890

CVE-2026-77890 is a type confusion vulnerability in Windows DHCP Server that allows an unauthorized, remote attacker to trigger a denial of service over a network. The flaw stems from access of a resource using an incompatible type. Per the CVSS 3.1 score of 7.5 (HIGH) , the attack requires no pr...

CVE-2026-77894

CVE-2026-77894 is a local privilege escalation vulnerability in Windows Installer caused by a race condition — specifically, concurrent execution of a shared resource with improper synchronization. An authorized attacker with low privileges can exploit this to gain high integrity over confidentia...

CVE-2026-78454

An out-of-bounds read in the Windows CD-ROM Driver allows a local, low-privilege attacker to achieve information disclosure . The CVSS 3.1 score is 5.5 (Medium) , reflecting a local attack vector, low complexity, and high confidentiality impact with no integrity or availability impact. CISA's SSV...

CVE-2026-68833

CVE-2026-68833 is a heap-based buffer overflow in Windows NTFS (New Technology File System) that allows an unauthorized attacker to achieve code execution . The attack requires physical access to the system (CVSS:3.1 AV:P), with no privileges or user interaction needed, and results in high impact...