CVE-2026-69541

A heap-based buffer overflow in the Virtual Hard Disk (VHD) Miniport Driver allows an authorized (low-privilege) attacker to achieve local privilege escalation on an affected system. The vulnerability is scored CVSS 3.1: 7.8 (High) with impact to confidentiality, integrity, and availability all r...

CVE-2026-69566

CVE-2026-69566 is a heap-based buffer overflow in Windows NTFS that allows an unauthorized attacker to execute code with a physical attack . The assigned CVSS 3.1 score is 6.8 (Medium) with a vector of AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H, reflecting that exploitation requires physical access but ...

CVE-2026-69569

CVE-2026-69569 is an untrusted pointer dereference in Windows Print Spooler Components that allows an authorized attacker to cause a denial of service over a network. The CVSS v3.1 score is 5.7 (Medium) , with high availability impact but no confidentiality or integrity impact. Exploitation requi...

CVE-2026-69693

A use-after-free flaw in the Windows Device Association Broker service allows an authorized local attacker to achieve privilege escalation . The vulnerability is rated HIGH (CVSS 3.1: 7.0) with a vector of AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H , indicating that exploitation requires high attack com...

CVE-2026-69803

CVE-2026-69803 is an out-of-bounds read in Windows DHCP Server that allows an unauthorized, remote attacker to disclose information over the network. Microsoft rates it MEDIUM (CVSS 5.9, high attack complexity) while NVD scores it HIGH (CVSS 7.5, low attack complexity); both agree on high confide...

CVE-2026-69838

CVE-2026-69838 is a use-after-free vulnerability in Windows Print Spooler Components that allows an authorized attacker to achieve local privilege escalation . The attack vector is local, requires low privileges, and has high complexity with no user interaction needed. The CVSS 3.1 score is 7.0 (...

CVE-2026-69875

CVE-2026-69875 is a heap-based buffer overflow in Windows NTFS that allows an authorized attacker (low privileges, user interaction required) to elevate privileges over a network . The vulnerability carries a CVSS 3.1 score of 8.0 (HIGH) with impacts of High across confidentiality, integrity, and...

CVE-2026-70573

CVE-2026-70573 is a heap-based buffer overflow in Windows Biometric Service that allows a local attacker with low privileges to achieve privilege escalation . The vulnerability is rated CVSS 3.1: 7.0 (HIGH) with a vector of AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H, indicating a local attack vector wit...

CVE-2026-72941

CVE-2026-72941 is a heap-based buffer overflow in the Windows Biometric Service that allows an authorized attacker with local and low-privilege access to achieve local privilege escalation . The assigned CVSS 3.1 score is 7.8 (HIGH) with a vector of AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H , indicatin...

CVE-2026-72964

CVE-2026-72964 is a missing authentication vulnerability in Windows Internet Connection Sharing (ICS) . An attacker with low-level local privileges can tamper with critical ICS functions, resulting in a high integrity impact without affecting confidentiality or availability. The CVSS 3.1 score is...

CVE-2026-77494

Windows DHCP Server is affected by a type confusion vulnerability (access of resource using incompatible type), allowing an unauthenticated, remote attacker to trigger a denial of service over the network. The CVSS 3.1 score is 7.5 (HIGH) with a vector of AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H, indi...

CVE-2026-77501

CVE-2026-77501 is an out-of-bounds read vulnerability in Windows DHCP Server that allows an unauthorized, network-based attacker to cause a denial of service . The CVSS v3.1 base score is 7.5 (HIGH) with vector AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H, reflecting remote, unauthenticated exploitation w...

CVE-2026-77503

CVE-2026-77503 is an out-of-bounds read vulnerability in Windows NTFS that allows an unauthorized attacker to achieve local privilege escalation . The vulnerability is rated HIGH (CVSS 8.4) with a vector of AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H, meaning it requires no prior privileges or user inter...

CVE-2026-77892

CVE-2026-77892 is a privilege escalation vulnerability in Windows Boot Manager . An unauthorized attacker with physical access to the system can elevate privileges, with high impact on confidentiality, integrity, and availability (CVSS 3.1: 6.8 MEDIUM ). The vulnerability requires no prior privil...

CVE-2026-78455

CVE-2026-78455 is an out-of-bounds read in Xbox that allows an unauthorized attacker with physical access to disclose information (high confidentiality impact). The attack requires user interaction but no prior privileges. CVSS v3.1 scores it 4.3 (MEDIUM) with a physical attack vector. CISA's SSV...

CVE-2026-68841

Windows NTFS is affected by a heap-based buffer overflow that allows an authorized, local attacker with low privileges to elevate privileges without user interaction. The vulnerability is classified with a CVSS 3.1 score of 7.8 (HIGH) — AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H — indicating high impact...

CVE-2026-68889

A heap-based buffer overflow in Microsoft Standard XPS allows an authorized attacker to elevate privileges over a network. The CNA-assessed CVSS 3.1 score is 7.1 (HIGH) with a vector of AV:N/AC:H/PR:L/UI:R/S:U/C:H/I:H/A:H, indicating that exploitation requires low privileges, user interaction, an...

CVE-2026-68890

CVE-2026-68890 is a heap-based buffer overflow in Microsoft Standard XPS that allows an authorized local attacker to escalate privileges . The vulnerability is scored CVSS 3.1: 7.8 (HIGH) with a vector of AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H, reflecting low attack complexity, low privileges requir...

CVE-2026-69272

A heap-based buffer overflow in Microsoft Standard XPS allows an authorized attacker to elevate privileges over a network . The CVSS 3.1 score is 7.1 (HIGH) , with an attack vector of network, high complexity , low privileges required , and user interaction required , leading to high impact on co...

CVE-2026-69341

CVE-2026-69341 is a use-after-free vulnerability in Windows Image Acquisition (WIA) that allows an authorized local attacker to escalate privileges. The flaw resides in a memory-management error where a freed object is referenced again, enabling privilege escalation when exploited locally. The CV...

CVE-2026-69406

CVE-2026-69406 is a Windows Kernel information disclosure vulnerability. It stems from the exposure of sensitive system information to an unauthorized control sphere, allowing an authorized attacker to disclose information locally. The assigned CVSS 3.1 score is 5.5 (Medium) with a local attack v...

CVE-2026-69482

Windows Error Reporting contains a local tampering vulnerability caused by the creation of a temporary file in a directory with insecure permissions , allowing an authorized attacker to tamper with data locally. The vulnerability is rated CVSS 7.1 (HIGH) with a vector of local attack, low complex...

CVE-2026-69540

This Use After Free vulnerability affects the Windows Audio Service component and enables a locally authenticated attacker with low privileges to escalate to higher privileges. The CVSS 3.1 base score is 7.0 (High) , with an attack vector of local , high attack complexity, and no user interaction...

CVE-2026-69679

Windows DHCP Server is affected by an out-of-bounds read vulnerability that allows an authorized attacker (low privileges) to cause a denial of service over an adjacent network . The CVSS 3.1 score is 5.7 (Medium) with high availability impact and no confidentiality or integrity impact. CISA's SS...

CVE-2026-69881

CVE-2026-69881 is a null pointer dereference in the Windows Internet Key Exchange (IKE) Extension that allows an unauthenticated, network-based attacker to trigger a denial of service. The CVSS 3.1 score is 7.5 (HIGH) with vector AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H , meaning the impact is limited...

CVE-2026-70564

A heap-based buffer overflow in Windows Print Spooler Components allows an authorized local attacker to elevate privileges. The flaw requires low privileges and no user interaction, with high impact to confidentiality, integrity, and availability (CVSS 7.8, HIGH ). A reference to the Microsoft Se...

CVE-2026-70582

Windows Management Instrumentation (WMI) is affected by a race condition caused by concurrent execution using a shared resource with improper synchronization. An authorized local attacker can leverage this to elevate privileges . The CVSS 3.1 base score is 6.4 (MEDIUM) , reflecting a local attack...

CVE-2026-77492

CVE-2026-77492 is an out-of-bounds read vulnerability in the Windows Storage Port Driver that allows an authorized attacker to disclose information locally . The CVSS 3.1 score is 5.5 (MEDIUM) with the vector AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N, indicating a local attack requiring low privileges ...

CVE-2026-78448

CVE-2026-78448 is a heap-based buffer overflow in Windows Biometric Service that allows an authorized attacker to achieve local privilege escalation . The CVSS v3.1 score is 7.8 (HIGH) with a vector of AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H, reflecting that a low-privileged local attacker can compro...

CVE-2026-69286

CVE-2026-69286 is an out-of-bounds read in the Windows USB Audio Class driver (usbaudio.sys) that allows an authorized local attacker to disclose information . The vulnerability is rated CVSS 3.1: 5.5 (MEDIUM) with a local attack vector, low complexity, and high confidentiality impact but no inte...

CVE-2026-69313

Microsoft Standard XPS is affected by a heap-based buffer overflow that allows an authorized attacker to elevate privileges over a network. The CVSS 3.1 score is 7.1 (HIGH) , with a network attack vector, high complexity, low privileges required, and user interaction required, leading to high imp...

CVE-2026-69318

Windows Imaging Component contains an out-of-bounds read flaw that allows a locally authenticated attacker to disclose information. The vulnerability carries a CVSS 3.1 score of 5.5 (MEDIUM) , with a local attack vector, low complexity, low privileges required, no user interaction, and a High imp...

CVE-2026-69359

A heap-based buffer overflow in Active Directory Domain Services allows an authorized attacker to perform local privilege escalation . The attack requires local access with low privileges , no user interaction, and has low complexity , with high impact to confidentiality, integrity, and availabil...

CVE-2026-69362

CVE-2026-69362 is a use after free vulnerability in Windows Error Reporting that allows an authorized attacker to perform local privilege escalation . The CVSS 3.1 score is 7.0 (HIGH) , with a vector of AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H, indicating that exploitation requires low privileges , no...

CVE-2026-69412

Windows DHCP Server is vulnerable to a stack-based buffer overflow that allows an authorized attacker (low privileges, no user interaction) to achieve remote code execution over an adjacent network . The vulnerability is scored CVSS 3.1: 8.0 (HIGH) with high impact to confidentiality, integrity, ...

CVE-2026-69516

CVE-2026-69516 is a use-after-free vulnerability in the Connected Devices Platform Service (Cdpsvc) , a Windows component. An authorized local attacker can exploit this to achieve privilege escalation , with high impact on confidentiality, integrity, and availability (CVSS 3.1: 7.0 HIGH ; vector ...

CVE-2026-69554

CVE-2026-69554 is a missing authentication vulnerability in the Microsoft Windows Search Component , allowing a local, low-privilege attacker to perform tampering with high integrity impact (CVSS v3.1: 5.5 MEDIUM , AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N). No confidentiality or availability impact is...

CVE-2026-69624

Active Directory Certificate Services (AD CS) is affected by an incomplete list of disallowed inputs , enabling an authorized attacker to perform tampering over a network . The root cause is that the input validation does not fully cover all disallowed values, allowing manipulation of certificate...

CVE-2026-69645

CVE-2026-69645 is a use-after-free vulnerability in Windows Message Queuing that allows an authorized local attacker to escalate privileges. The flaw resides in the Windows Message Queuing component and results in high impact across confidentiality, integrity, and availability (CVSS 3.1 base scor...

CVE-2026-69859

A time-of-check time-of-use (TOCTOU) race condition in the Windows USB Audio Class driver (usbaudio.sys) allows an authorized local attacker to escalate privileges . The vulnerability is scored CVSS 3.1: 7.0 (HIGH) with a vector of AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H , reflecting high impact to c...

CVE-2026-69895

This information disclosure vulnerability exists in the Windows Spaceport.sys kernel driver, caused by an out-of-bounds read . A local, authorized attacker with low privileges can exploit it to disclose information , with no impact on integrity or availability. The CVSS 3.1 score is 4.7 (Medium) ...

CVE-2026-71339

CVE-2026-71339 is a heap-based buffer overflow in Windows Installer that allows an authorized local attacker to elevate privileges . The CVSS 3.1 score is 6.7 (MEDIUM) with a vector of AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H, indicating that while high privileges are required, the impact on confident...

CVE-2026-71341

CVE-2026-71341 is an out-of-bounds read in the Windows Partition Management Driver that allows a locally authenticated attacker with low privileges to disclose information. The vulnerability requires no user interaction and has low attack complexity. It carries a CVSS 3.1 score of 5.5 (Medium) wi...

CVE-2026-72942

CVE-2026-72942 is an out-of-bounds read vulnerability in the Windows Spaceport.sys driver that allows an unauthorized attacker to disclose information over a network. The vulnerability requires user interaction but no prior privileges , with high confidentiality impact and no impact on integrity ...

CVE-2026-77502

CVE-2026-77502 is an out-of-bounds read in Windows DHCP Server that allows an unauthorized attacker to cause denial of service over a network. The vulnerability requires no prior authentication or user interaction, and carries a CVSS 3.1 score of 7.5 (HIGH) with high impact to availability. No co...

CVE-2026-78446

CVE-2026-78446 is a use-after-free vulnerability in Windows Distributed File System (DFS) that allows an authorized attacker to cause a denial of service over a network. The CVSS 3.1 score is 5.3 (Medium) , reflecting a network attack vector with high complexity , low privileges required , and no...

CVE-2026-68830

CVE-2026-68830 is an information disclosure vulnerability in Windows Universal Plug and Play (UPnP) Device Host , caused by improper link resolution before file access ('link following'). An authorized local attacker (low privileges, no user interaction) can exploit this to disclose information, ...

CVE-2026-68831

CVE-2026-68831 is an information disclosure vulnerability in Windows Defender Firewall Service . The issue arises from files or directories accessible to external parties, allowing an authorized attacker with low privileges to disclose information locally (CVSS 3.1 score 5.5 – MEDIUM ; vector AV:...

CVE-2026-69294

Microsoft COM for Windows is affected by an information disclosure vulnerability caused by the generation of an error message containing sensitive information. An authorized local attacker can exploit this to disclose information, with no user interaction required. The CVSS 3.1 score is 5.5 (Medi...

CVE-2026-69324

CVE-2026-69324 is a local privilege elevation vulnerability in Windows Performance Monitor caused by type confusion (access of resource using incompatible type). An authorized attacker with low privileges can exploit this locally without user interaction to gain high impact on confidentiality, in...