CVE-2026-69351

Windows Universal Plug and Play (UPnP) Device Host contains an information disclosure vulnerability that allows a locally authenticated attacker with low privileges to expose private personal information without user interaction. The CVSS v3.1 score is 5.5 (Medium) with a high confidentiality imp...

CVE-2026-69413

CVE-2026-69413 is a use-after-free vulnerability in the Windows USB Audio Class driver (usbaudio.sys) that allows an authorized attacker to perform local privilege escalation . The CVSS 3.1 score is 7.0 (HIGH) with a vector of AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H, indicating high attack complexity...

CVE-2026-69461

CVE-2026-69461 is a stack-based buffer overflow in Windows NTFS that allows an unauthorized, unprivileged attacker to achieve remote code execution over a network. The vulnerability requires user interaction but no prior authentication, yielding a CVSS v3.1 score of 8.8 (HIGH) with full impact on...

CVE-2026-69497

Windows DHCP Server is vulnerable to a memory leak (missing release of memory after effective lifetime), allowing an authorized attacker with low privileges over the network to cause a denial of service . The CVSS 3.1 score is 6.5 (Medium) with a vector of AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H, ind...

CVE-2026-69576

CVE-2026-69576 is a use-after-free vulnerability in the Microsoft Graphic Fonts component that allows an authorized attacker with low privileges to elevate privileges locally without user interaction. The CNA-assigned CVSS v3.1 score is 7.8 (HIGH) , with high impact across confidentiality, integr...

CVE-2026-69604

CVE-2026-69604 is a heap-based buffer overflow in the Windows Audio Service that allows an authorized local attacker with low privileges to elevate privileges . The vulnerability requires a local attack vector , low privileges , and no user interaction , with a CVSS 3.1 base score of 7.8 (HIGH) a...

CVE-2026-69613

CVE-2026-69613 is a use after free vulnerability in Windows Image Acquisition (WIA) that allows an authorized attacker to perform local privilege escalation . The flaw requires low existing privileges and high attack complexity, with no user interaction needed (CVSS 3.1: 7.0 HIGH , vector AV:L/AC...

CVE-2026-69621

CVE-2026-69621 is a heap-based buffer overflow in the Windows Fax Service that allows an authorized local attacker to elevate privileges , resulting in full compromise of confidentiality, integrity, and availability (CVSS 3.1: 7.0 HIGH , AV:L/AC:H/PR:L). CISA's SSVC assessment indicates no known ...

CVE-2026-69779

CVE-2026-69779 is a time-of-check time-of-use (TOCTOU) race condition in the Windows Win32K component that allows an attacker with an existing low-privilege account to escalate privileges locally. The CVSS v3.1 score is 7.0 (HIGH) , with a local attack vector, high complexity, no user interaction...

CVE-2026-69860

CVE-2026-69860 is a heap-based buffer overflow in Windows Imaging Component that allows an unauthorized attacker to execute code over a network. The CVSS 3.1 score is 8.8 (HIGH) , with a vector of AV:N/AC:L/PR:N/UI:R, meaning the attack is network-based, requires user interaction , and needs no p...

CVE-2026-69862

CVE-2026-69862 is an out-of-bounds read in the Windows Wireless Wide Area Network Service that allows an authorized local attacker to disclose information . The CVSS v3.1 score is 5.5 (Medium) with High confidentiality impact, no integrity or availability impact, and requires low privileges over ...

CVE-2026-71334

CVE-2026-71334 is a heap-based buffer overflow in the Windows NFS Portmapper component that allows an authorized local attacker to elevate privileges. The Microsoft-assigned CVSS 3.1 base score is 7.8 (High) with a vector of AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H, reflecting low privilege requiremen...

CVE-2026-71342

A use-after-free flaw in Windows Remote Access Connection Manager enables a locally authenticated attacker to elevate privileges, as disclosed by Microsoft. The vulnerability is rated CVSS 3.1: 7.0 (HIGH) with a vector of local attack, high complexity, low privileges required, and no user interac...

CVE-2026-72992

A heap-based buffer overflow in the Windows Biometric Service allows an authorized local attacker to elevate privileges, resulting in high impact to confidentiality, integrity, and availability. The vulnerability carries a CVSS 3.1 score of 7.8 (HIGH) with a local attack vector, low complexity, a...

CVE-2026-73017

CVE-2026-73017 is a heap-based buffer overflow in Windows Graphics Kernel that allows a local, authorized attacker to achieve code execution . The vulnerability requires high privileges and high attack complexity , with no user interaction needed. Scope is changed, with high impact on confidentia...

CVE-2026-73021

CVE-2026-73021 is a heap-based buffer overflow in Windows Biometric Service that allows an authorized attacker to achieve local privilege escalation . The CVSS 3.1 base score is 7.8 (HIGH) with a local attack vector, low complexity, and low privileges required, impacting confidentiality, integrit...

CVE-2026-77491

CVE-2026-77491 is an out-of-bounds read in Windows GDI that allows an unauthorized local attacker to disclose information. The CVSS 3.1 base score is 5.5 (MEDIUM) with a local attack vector, no privileges required, user interaction required, and high confidentiality impact but no integrity or ava...

CVE-2026-77495

CVE-2026-77495 is a heap-based buffer overflow in Windows Imaging Component that allows an unauthorized attacker to execute code over a network. The vulnerability is rated CVSS 3.1: 8.8 (HIGH) with vector AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H, meaning it is exploitable over the network with low com...

CVE-2026-77498

CVE-2026-77498 is an out-of-bounds read vulnerability in Windows DHCP Server that allows an unauthorized attacker to cause a denial of service over a network. The attack requires no privileges, no user interaction, and has low complexity, with a CVSS 3.1 score of 7.5 (HIGH) — the impact is limite...

CVE-2026-77503

CVE-2026-77503 is an out-of-bounds read vulnerability in Windows NTFS that allows an unauthorized attacker to achieve local privilege escalation . The vulnerability is rated HIGH (CVSS 8.4) with a vector of AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H, meaning it requires no prior privileges or user inter...

CVE-2026-77887

CVE-2026-77887 is an out-of-bounds read vulnerability in Windows DHCP Server that allows an authorized attacker to achieve local code execution . Per the CVSS 3.1 vector (6.4 MEDIUM), exploitation requires a local attack vector with high complexity and high privileges , no user interaction, and y...

CVE-2026-77889

CVE-2026-77889 is a type confusion vulnerability in Windows DHCP Server that allows an unauthorized, network-based attacker to cause a denial of service . The CVSS 3.1 score is 7.5 (High) , with no privileges or user interaction required. CISA's SSVC assessment rates exploitation as none , the vu...

CVE-2026-25176

CVE-2026-25176 is a local elevation-of-privilege vulnerability in the Windows Ancillary Function Driver for WinSock. The CVSS v3.1 base score is 7.8 (HIGH) with LOCAL attack vector, LOW privileges required, and no user interaction. It impacts confidentiality, integrity, and availability. Exploita...

CVE-2026-62706

CVE-2026-62706 is an out-of-bounds read in Microsoft Windows Media Foundation that allows an unauthorized attacker to execute code over a network. The CVSS 3.1 score is 8.8 (HIGH) with a vector of AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H , meaning exploitation requires user interaction but no prior au...

CVE-2026-68887

CVE-2026-68887 is an out-of-bounds read in Windows Message Queuing Queue Manager that allows an unauthorized, network-based attacker to trigger a denial of service . The vulnerability requires no prior authentication or user interaction and carries a CVSS 3.1 base score of 7.5 (HIGH) , with impac...

CVE-2026-69284

CVE-2026-69284 is a heap-based buffer overflow in Windows DCOM Server that allows an authorized attacker to elevate privileges locally . The CVSS 3.1 score is 7.8 (HIGH) with a vector of CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H, indicating a local attack with low complexity and low privileges...

CVE-2026-69340

CVE-2026-69340 is a heap-based buffer overflow in Windows NTFS that allows an authorized, low-privilege attacker to elevate privileges over a network . The vulnerability requires user interaction and carries a high attack complexity, yielding a CVSS 3.1 base score of 7.1 (HIGH) with high impact t...

CVE-2026-69407

CVE-2026-69407 is an integer overflow or wraparound vulnerability in the Microsoft Volume Manager Driver that allows an authorized attacker to escalate privileges locally . The vulnerability is rated CVSS 3.1 7.8 (HIGH) with a local attack vector, low complexity, low privileges required, and high...

CVE-2026-69421

CVE-2026-69421 is an integer underflow (wrap/wraparound) vulnerability in a Windows Kernel Mode Driver . An authorized local attacker can exploit the flaw to elevate privileges , with full impact to confidentiality, integrity, and availability (CVSS 3.1: 7.8 HIGH , vector AV:L/AC:L/PR:L/UI:N/S:U/...

CVE-2026-69444

CVE-2026-69444 is a heap-based buffer overflow in Microsoft Windows Speech that allows an authorized attacker to escalate privileges locally. The vulnerability carries a CVSS 3.1 score of 7.8 (HIGH) , with a local attack vector, low complexity, low privileges required, and high impact across conf...

CVE-2026-69475

CVE-2026-69475 is an elevation of privilege vulnerability in Windows Remote Desktop Services , caused by an untrusted pointer dereference . An authorized local attacker with low privileges can exploit this with low complexity and no user interaction to gain high impact across confidentiality, int...

CVE-2026-69499

CVE-2026-69499 is an integer overflow or wraparound vulnerability in the Windows Imaging Component that allows an unauthorized attacker to achieve remote code execution over a network. The flaw requires user interaction (e.g., opening a crafted file), but no prior privileges are needed. The CVSS ...

CVE-2026-69616

Windows Remote Desktop Services is affected by an out-of-bounds read vulnerability that allows an authorized local attacker to disclose information (CVSS 3.1: 5.5 MEDIUM — local vector, low privileges required, high confidentiality impact, no integrity or availability impact). CISA's SSVC assessm...

CVE-2026-69625

A heap-based buffer overflow in Windows Connected User Experiences and Telemetry (UXTelemetry) allows an authorized attacker to elevate privileges over a network. The vulnerability requires low privileges and user interaction , but results in high impact to confidentiality, integrity, and availab...

CVE-2026-69844

CVE-2026-69844 is an out-of-bounds read vulnerability in the Windows Win32K component (the kernel-mode driver that handles the graphical subsystem). An authorized local attacker with low privileges can exploit it to elevate privileges on the affected system. Microsoft rates the severity as HIGH (...

CVE-2026-70581

An integer overflow or wraparound vulnerability in the Windows Biometric Service allows an authorized local attacker to elevate privileges . According to Microsoft's CVSS 3.1 scoring, the flaw rates 7.8 (HIGH) , with local attack vector, low complexity, low privileges required, no user interactio...

CVE-2026-70587

CVE-2026-70587 is an information disclosure vulnerability in Windows Remote Desktop Protocol (RDP) caused by improper null termination . An unauthenticated remote attacker can exploit this over a network to disclose sensitive information , with no user interaction required. The CVSS 3.1 base scor...

CVE-2026-71330

CVE-2026-71330 is an information disclosure vulnerability in Windows Services for NFS ONCRPC XDR Driver . An unauthorized network-based attacker with no privileges can expose sensitive system information over the network, resulting in a High confidentiality impact (CVSS 3.1: 7.5 ). CISA's SSVC as...

CVE-2026-72933

CVE-2026-72933 is a heap-based buffer overflow in the Microsoft WDAC (Windows Defender Application Control) OLE DB provider for SQL , allowing an unauthorized remote attacker to achieve code execution over a network . The vulnerability is rated CVSS 3.1 8.8 (HIGH) by Microsoft (CNA), with the vec...

CVE-2026-72989

CVE-2026-72989 affects Windows Failover Cluster due to a use of uninitialized resource , allowing an unauthorized attacker to disclose information over a network . The vulnerability carries a CVSS 3.1 score of 7.5 (High) with a vector of AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N, indicating a network-e...

CVE-2026-72996

CVE-2026-72996 is a heap-based buffer overflow in the Windows Biometric Service that allows an authorized, low-privilege attacker to escalate privileges locally. The vulnerability is rated CVSS 3.1 7.8 (HIGH) with the vector CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H, indicating low attack comp...

CVE-2026-73022

CVE-2026-73022 is a use-after-free vulnerability in Windows Modern Device Management (MDM) that allows an authorized attacker to escalate privileges locally . The CVSS 3.1 score is 7.0 (HIGH) with a local attack vector, high complexity, low privileges required, and no user interaction, resulting ...

CVE-2026-78452

Out-of-bounds read in the Microsoft Windows SCSI Class System File allows an unauthorized attacker with physical access to perform an information disclosure attack. The vulnerability requires no privileges and no user interaction , with a CVSS 3.1 base score of 4.6 (MEDIUM) . CISA's SSVC assessme...

CVE-2026-83955

CVE-2026-83955 is a heap-based buffer overflow in the Windows Biometric Service that allows an authorized attacker (low privileges, no user interaction) to achieve local privilege escalation . The assigned CVSS 3.1 score is 7.8 (HIGH) , with high impact to confidentiality, integrity, and availabi...

CVE-2025-60717

CVE-2025-60717 is a use-after-free vulnerability in Windows Broadcast DVR User Service that allows an authorized user to gain elevated privileges locally. The connected sources (NVD, CVE lists, and EU/NCSc advisories) corroborate the affected component and privilege-elevation impact, with no publ...

CVE-2026-68843

CVE-2026-68843 is a use-after-free vulnerability in Microsoft Office Word that allows an authorized attacker to disclose information locally. The flaw resides in Word's handling of memory objects, where freed memory is subsequently accessed, potentially leaking sensitive data to a local user with...

CVE-2026-69350

CVE-2026-69350 is a heap-based buffer overflow in Windows Overlay Filter that allows an authorized attacker to elevate privileges locally . The vulnerability requires high privileges and no user interaction, with a CVSS 3.1 score of 6.7 (MEDIUM) reflecting high impact to confidentiality, integrit...

CVE-2026-69384

A null pointer dereference in the Virtual Hard Disk (VHD) Miniport Driver allows an unauthorized local attacker to trigger a denial of service . The CVSS 3.1 score is 7.1 (HIGH) with a scope change, reflecting the local attack vector with no privileges required. CISA's SSVC assessment indicates n...

CVE-2026-69466

CVE-2026-69466 is a Time-of-Check Time-of-Use (TOCTOU) race condition in the Windows Kernel that allows a low-privileged local attacker to elevate privileges . The vulnerability carries a CVSS 3.1 score of 7.0 (High) , with high impact to confidentiality, integrity, and availability, though explo...

CVE-2026-69469

CVE-2026-69469 is an elevation of privilege vulnerability in the Windows USB Audio Class driver (usbaudio.sys). The root cause is an integer overflow or wraparound in the driver, which allows an unauthorized attacker with physical access to escalate privileges. The CVSS 3.1 base score is 6.6 (MED...