CVE-2026-68828

CVE-2026-68828 is a heap-based buffer overflow in the Microsoft Remote Desktop Client that allows an unauthorized attacker to execute arbitrary code over a network. The vulnerability is rated CVSS 3.1: 8.8 (HIGH) with the vector AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H, indicating network-based exploi...

CVE-2026-69323

CVE-2026-69323 is a heap-based buffer overflow in Windows Biometric Service that allows an authorized attacker with low privileges to achieve local privilege escalation . The vulnerability requires no user interaction and carries a CVSS 3.1 score of 7.8 (HIGH) with high impact to confidentiality,...

CVE-2026-69630

CVE-2026-69630 is an out-of-bounds read vulnerability in the Windows Win32K kernel driver that allows a locally authenticated attacker to escalate privileges . The CVSS v3.1 score is 7.0 (HIGH) with vector AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H, reflecting the high complexity and required low-privil...

CVE-2026-72991

CVE-2026-72991 is a heap-based buffer overflow in the Windows Biometric Service that allows a locally authenticated attacker with low privileges to escalate to higher privileges. The vulnerability scores 7.8 (HIGH) under CVSS v3.1, with all three impact dimensions rated High. Attack requires loca...

CVE-2026-72992

A heap-based buffer overflow in the Windows Biometric Service allows an authorized local attacker to elevate privileges, resulting in high impact to confidentiality, integrity, and availability. The vulnerability carries a CVSS 3.1 score of 7.8 (HIGH) with a local attack vector, low complexity, a...

CVE-2026-72997

CVE-2026-72997 is a heap-based buffer overflow in Windows Biometric Service that allows an authorized attacker with low privileges and no user interaction to escalate privileges locally. The vulnerability is rated CVSS 3.1: 7.8 (HIGH) with high impact to confidentiality, integrity, and availabili...

CVE-2026-77890

CVE-2026-77890 is a type confusion vulnerability in Windows DHCP Server that allows an unauthorized, remote attacker to trigger a denial of service over a network. The flaw stems from access of a resource using an incompatible type. Per the CVSS 3.1 score of 7.5 (HIGH) , the attack requires no pr...

CVE-2026-77894

CVE-2026-77894 is a local privilege escalation vulnerability in Windows Installer caused by a race condition — specifically, concurrent execution of a shared resource with improper synchronization. An authorized attacker with low privileges can exploit this to gain high integrity over confidentia...

CVE-2026-68832

CVE-2026-68832 is a local privilege escalation vulnerability in Windows NTFS caused by an integer overflow or wraparound . An authorized attacker with low privileges can exploit this with low complexity and no user interaction to achieve high impact on confidentiality, integrity, and availability...

CVE-2026-68874

CVE-2026-68874 is an out-of-bounds read vulnerability in the Windows Program Compatibility Assistant Service that allows an authorized attacker with low privileges to disclose information over a network. The vulnerability requires user interaction and results in a High confidentiality impact with...

CVE-2026-69310

CVE-2026-69310 is a use-after-free vulnerability in Windows DNS that allows an authorized attacker to elevate privileges locally. The flaw resides in the DNS component and requires local access with low privileges and no user interaction, though the attack complexity is rated as high. The CVSS 3....

CVE-2026-69343

CVE-2026-69343 is an out-of-bounds read in the Windows Overlay Filter component that allows a low-privilege local attacker to achieve information disclosure without user interaction. The vulnerability is rated CVSS 5.5 (MEDIUM) with a vector of local attack, low complexity, and high confidentiali...

CVE-2026-69352

CVE-2026-69352 is a heap-based buffer overflow in Windows Biometric Service that allows an authorized local attacker to elevate privileges . The vulnerability is rated HIGH (CVSS 7.8) with a vector of AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H , meaning an attacker with low privileges and no user intera...

CVE-2026-69391

CVE-2026-69391 is a stack-based buffer overflow in the Windows Broker Infrastructure Service that allows an authorized attacker to achieve local privilege escalation . The vulnerability requires low privileges and local access, with no user interaction needed. Microsoft rates it CVSS 7.8 (High) ,...

CVE-2026-69511

CVE-2026-69511 is a heap-based buffer overflow in Microsoft Windows Media Foundation that allows an unauthorized attacker to achieve remote code execution over a network. The vulnerability requires user interaction but no prior privileges, with a CVSS 3.1 base score of 8.8 (HIGH) and high impact ...

CVE-2026-69568

CVE-2026-69568 is an out-of-bounds read vulnerability in the Windows Storage Spaces Controller component. An authorized attacker with local access and low privileges can exploit this flaw to achieve information disclosure (high confidentiality impact, no integrity or availability impact). The CVS...

CVE-2026-69583

Windows Biometric Service is affected by a heap-based buffer overflow that allows an authorized attacker to achieve local privilege escalation . The vulnerability carries a CVSS 3.1 base score of 7.8 (HIGH) , with local attack vector, low complexity, and low privileges required, resulting in high...

CVE-2026-69643

Windows Spaceport.sys (a system driver) contains a heap-based buffer overflow that allows an authorized attacker to escalate privileges over a network. The CVSS v3.1 score is 8.0 (HIGH) with vector AV:N/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H, indicating low attack complexity and required user interaction...

CVE-2026-69672

Windows DNS contains an information disclosure vulnerability caused by a use of uninitialized resource . An authenticated attacker with local access and low privileges can exploit it to disclose information, with no user interaction required. The CVSS 3.1 score is 5.5 (MEDIUM) , reflecting high c...

CVE-2026-69727

A heap-based buffer overflow in Windows Biometric Service allows an authorized attacker to elevate privileges over a network. The vulnerability is rated CVSS 8.0 (High) with vector AV:N/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H, indicating a network attack vector with low complexity, requiring low privilege...

CVE-2026-69779

CVE-2026-69779 is a time-of-check time-of-use (TOCTOU) race condition in the Windows Win32K component that allows an attacker with an existing low-privilege account to escalate privileges locally. The CVSS v3.1 score is 7.0 (HIGH) , with a local attack vector, high complexity, no user interaction...

CVE-2026-69785

CVE-2026-69785 is an untrusted search path vulnerability in Windows Smart Card that allows an authorized attacker to elevate privileges locally. The flaw resides in how Windows Smart Card resolves file paths, permitting a local attacker with low privileges (no user interaction required) to achiev...

CVE-2026-69816

CVE-2026-69816 is a use-after-free vulnerability in Windows Accounts Control that allows an authorized attacker to elevate privileges locally . The CVSS 3.1 base score is 7.0 (HIGH) with a local attack vector, high complexity, low privileges required, and no user interaction, resulting in high im...

CVE-2026-69832

CVE-2026-69832 is an information disclosure vulnerability in Windows Win32K , a kernel-mode component handling graphics and input processing. Exposure of sensitive system information to an unauthorized control sphere allows a low-privilege local attacker to read sensitive data. The CVSS 3.1 score...

CVE-2026-69839

CVE-2026-69839 is a denial-of-service vulnerability in the Windows iSCSI Target Service , caused by an uncaught exception that allows an authorized attacker (low privileges) to deny service over the network. The CVSS v3.1 score is 6.5 (Medium) with a vector of AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H,...

CVE-2026-70203

CVE-2026-70203 is a heap-based buffer overflow in Windows Media Player that allows an unauthorized attacker to execute code over a network . The vulnerability is classified as Remote Code Execution with a CVSS 3.1 score of 8.8 (HIGH) , reflecting a network attack vector, low complexity, no requir...

CVE-2026-70289

CVE-2026-70289 is a heap-based buffer overflow in the Windows Win32 Kernel Subsystem (Win32k) that allows an authorized (low-privilege) attacker to elevate privileges locally . The vulnerability is rated CVSS 7.8 (HIGH) with local attack vector, low complexity, and high impact to confidentiality,...

CVE-2026-70581

An integer overflow or wraparound vulnerability in the Windows Biometric Service allows an authorized local attacker to elevate privileges . According to Microsoft's CVSS 3.1 scoring, the flaw rates 7.8 (HIGH) , with local attack vector, low complexity, low privileges required, no user interactio...

CVE-2026-71332

CVE-2026-71332 is a use-after-free vulnerability in Windows Secure Socket Tunneling Protocol (SSTP) that allows an authorized attacker to perform a local privilege escalation . The CVSS 3.1 score is 7.0 (HIGH) with a vector of AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H, indicating a high-attack-complexi...

CVE-2026-77489

CVE-2026-77489 is a null pointer dereference in Windows Biometric Service that allows an authorized local attacker to elevate privileges. The flaw carries a CVSS 3.1 score of 7.8 (HIGH) with a vector of AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H, meaning exploitation requires only low privileges and no ...

CVE-2026-77889

CVE-2026-77889 is a type confusion vulnerability in Windows DHCP Server that allows an unauthorized, network-based attacker to cause a denial of service . The CVSS 3.1 score is 7.5 (High) , with no privileges or user interaction required. CISA's SSVC assessment rates exploitation as none , the vu...

CVE-2026-83969

A heap-based buffer overflow in Windows Biometric Service allows an authorized attacker with low privileges to escalate privileges locally, resulting in high impact to confidentiality, integrity, and availability. The CVSS 3.1 score is 7.8 (HIGH) with a local attack vector and no user interaction...

CVE-2025-62217

Technical details about CVE-2025-62217 are not provided in the supplied documents. Monitor for updates from Microsoft and CVE repositories for affected products, impact, and remediation.

CVE-2026-20823

CVE-2026-20823 is a Windows File Explorer information disclosure vulnerability that could allow a local attacker to view sensitive data. The CVE is mapped to Windows components handling File Explorer data exposure; its impact is confined to local access with low complexity and low privileges requ...

CVE-2026-68833

CVE-2026-68833 is a heap-based buffer overflow in Windows NTFS (New Technology File System) that allows an unauthorized attacker to achieve code execution . The attack requires physical access to the system (CVSS:3.1 AV:P), with no privileges or user interaction needed, and results in high impact...

CVE-2026-68838

CVE-2026-68838 is a stack-based buffer overflow in Windows NTFS that allows an authorized attacker with low privileges to elevate privileges over a network, requiring user interaction. Microsoft assigned a CVSS 3.1 score of 8.0 (HIGH) with high impacts to confidentiality, integrity, and availabil...

CVE-2026-69269

CVE-2026-69269 is an integer underflow (wrap or wraparound) vulnerability in Microsoft Standard XPS that allows an authorized attacker with local access and low privileges to achieve local privilege escalation with high impact on confidentiality, integrity, and availability (CVSS 3.1: 7.8 HIGH )....

CVE-2026-69335

CVE-2026-69335 is a use-after-free vulnerability in Windows Win32K that allows an authorized attacker to elevate privileges locally . Microsoft rates it CVSS 3.1: 7.0 (HIGH) with a vector of AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H, meaning exploitation requires local access, low privileges, and high ...

CVE-2026-69350

CVE-2026-69350 is a heap-based buffer overflow in Windows Overlay Filter that allows an authorized attacker to elevate privileges locally . The vulnerability requires high privileges and no user interaction, with a CVSS 3.1 score of 6.7 (MEDIUM) reflecting high impact to confidentiality, integrit...

CVE-2026-69424

CVE-2026-69424 is a heap-based buffer overflow in Windows Distributed File System (DFS) that allows an authorized attacker to elevate privileges locally . The CVSS 3.1 score is 7.8 (HIGH) with a vector of AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H, indicating low attack complexity and no user interactio...

CVE-2026-69466

CVE-2026-69466 is a Time-of-Check Time-of-Use (TOCTOU) race condition in the Windows Kernel that allows a low-privileged local attacker to elevate privileges . The vulnerability carries a CVSS 3.1 score of 7.0 (High) , with high impact to confidentiality, integrity, and availability, though explo...

CVE-2026-69604

CVE-2026-69604 is a heap-based buffer overflow in the Windows Audio Service that allows an authorized local attacker with low privileges to elevate privileges . The vulnerability requires a local attack vector , low privileges , and no user interaction , with a CVSS 3.1 base score of 7.8 (HIGH) a...

CVE-2026-69608

CVE-2026-69608 is a local elevation of privilege vulnerability in the Microsoft Windows Search Component , caused by an integer overflow or wraparound . An authorized (low-privilege) attacker can exploit it locally without user interaction to achieve high impact across confidentiality, integrity,...

CVE-2026-69621

CVE-2026-69621 is a heap-based buffer overflow in the Windows Fax Service that allows an authorized local attacker to elevate privileges , resulting in full compromise of confidentiality, integrity, and availability (CVSS 3.1: 7.0 HIGH , AV:L/AC:H/PR:L). CISA's SSVC assessment indicates no known ...

CVE-2026-69680

CVE-2026-69680 is an origin validation error in Windows DNS that allows an unauthorized network attacker to perform spoofing . Microsoft rates the vulnerability CVSS 8.1 (High) with a network attack vector, high complexity, no required privileges, and no user interaction, resulting in high impact...

CVE-2026-69808

CVE-2026-69808 is an out-of-bounds read vulnerability in the Windows Win32K component that allows an authorized attacker with local access to disclose information . The CVSS 3.1 base score is 5.5 (MEDIUM) , reflecting a local attack vector, low complexity, low privileges required, no user interac...

CVE-2026-69841

A heap-based buffer overflow in Windows Encrypting File System (EFS) allows an authorized attacker to perform local privilege escalation . The vulnerability requires low privileges, no user interaction, and has low attack complexity, with high impact to confidentiality, integrity, and availabilit...

CVE-2026-69907

CVE-2026-69907 affects Windows Enterprise App Management , where improper handling of insufficient permissions or privileges allows an authorized attacker to elevate privileges locally . The vulnerability is rated CVSS 3.1: 7.8 (HIGH) with a local attack vector , low complexity , low privileges r...

CVE-2026-71350

CVE-2026-71350 is a heap-based buffer overflow in the Windows Spaceport.sys driver that allows an unauthorized attacker to execute code on the target system. The vulnerability requires a physical attack vector (CVSS 3.1: AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H , base score 6.8 – MEDIUM ), meaning the...

CVE-2026-72933

CVE-2026-72933 is a heap-based buffer overflow in the Microsoft WDAC (Windows Defender Application Control) OLE DB provider for SQL , allowing an unauthorized remote attacker to achieve code execution over a network . The vulnerability is rated CVSS 3.1 8.8 (HIGH) by Microsoft (CNA), with the vec...