Microsoft Security Updates - September 2026

hello@craftedsignal.io — Thu, 03 Sep 2026 23:23:58 +0000

This roundup covers 965 Microsoft security vulnerabilities. CVSS base scores range from 3.5 to 9.8. None are reported as actively exploited at the time of release. The issues affect .NET, ASP.NET Core, Account, Active Directory Certificate Services, Active Directory Domain Services, Active Directory Federation Services, Authentication Library, Azure AI Language, Azure Active Directory B2C, Azure Arc, Azure CLI, Azure Cosmos DB, Azure CycleCloud, Azure HDInsight, BitLocker, BranchCache, COM, Connected Devices Platform Service, Connected User Experiences and Telemetry, Copilot Studio, DNS Server, Data Sharing Service Client, Direct Show, DirectMusic, Discovery Studio, Dynamics 365, Entra ID, Excel, Exchange Server, Fabric, GDI+, GitHub Copilot, Graphic Fonts, Graphics Component, HEIF Image Extensions, Host Guardian Service, Hyper-V, IP Address Management, Install Service, Internet Connection Sharing, Internet Storage Name Service, JScript, Kernel Streaming WOW Thunk Service Driver, Local Security Authority Server, Microsoft Account, NTFS, Netlogon, Office, Office Access, Office Excel, Office Outlook, Office PowerPoint, Office Publisher, Office SharePoint, Office Word, OpenSSH for Windows, Outlook, Paint, Power Automate, Power Automate Desktop, PowerPoint, PowerShell, Push Message Routing Service, Raw Image Extension, Remote Access Connection Manager, Remote Desktop Client, Remote Desktop Gateway Service, Remote Desktop Services, Resilient File System, Routing and Remote Access Service, SQL Server, SharePoint, Skype for Business, Standard XPS, Storage Port Driver, Teams, Trace Data Helper, UxTheme Library, Virtual Hard Disk, Visual Studio, Visual Studio Code, Volume Manager Driver, WDAC OLE DB provider for SQL, WebP Image Extension, Windows, Windows Accounts Control, Windows Ancillary Function Driver for WinSock, Windows Audio Service, Windows Authentication Methods, Windows Autopilot, Windows Bind Filter Driver, Windows Biometric Service, Windows BitLocker, Windows Bluetooth Port Driver, Windows Bluetooth Service, Windows Boot Manager, Windows Broadcast DVR User Service, Windows Broker Infrastructure Service, Windows CD-ROM Driver, Windows Camera Frame Server Monitor, Windows Cloud Files Mini Filter Driver, Windows Codecs Library, Windows Compressed Folder, Windows Connected User Experiences and Telemetry, Windows Container Manager Service, Windows Core Messaging, Windows Credential Guard, Windows Credential Providers, Windows DHCP Client, Windows DHCP Server, Windows DNS, Windows DNS Server, Windows Defender Firewall Service, Windows Deployment Services, Windows Device Association Broker service, Windows Device Association Service, Windows Device Health Attestation, Windows Display Enhancement Service, Windows Distributed File System, Windows Embedded Mode Service, Windows Encrypting File System, Windows Enterprise App Management, Windows Error Reporting, Windows Event Logging Service, Windows Failover Cluster, Windows Fast FAT Driver, Windows Fax Service, Windows File History Service, Windows GDI+, Windows Graphics Component, Windows Graphics Kernel, Windows HTTP Print Provider, Windows HTTP.sys, Windows Hello, Windows Image Acquisition, Windows Imaging Component, Windows Installer, Windows Internet Key Exchange, Windows Kerberos, Windows Kernel, Windows Key Distribution Center, Windows License Manager, Windows Link Layer Topology Discovery Protocol, Windows MIDI Service Module, Windows Management Instrumentation, Windows Management Services, Windows Media, Windows Media Foundation, Windows Media Player, Windows Message Queuing, Windows Message Queuing Queue Manager, Windows Mobile Broadband, Windows Modern Device Management, Windows Modern Execution Server, Windows NDIS, Windows NFS Portmapper, Windows NTFS, Windows Netlogon, Windows Network Connection Broker, Windows Network File System, Windows OLE DB, Windows Overlay Filter, Windows Partition Management Driver, Windows Performance Monitor, Windows Print Spooler, Windows Print Spooler Components, Windows PrintWorkflowUserSvc, Windows Program Compatibility Assistant Service, Windows Push Notifications, Windows RDP Client, Windows Reliable Multicast Transport Driver, Windows Remote Access Connection Manager, Windows Remote Desktop, Windows Remote Desktop Licensing Service, Windows Remote Desktop Protocol, Windows Remote Desktop Services, Windows Routing and Remote Access Service, Windows SCSI Class System File, Windows SMB Client, Windows SMB Server, Windows Search Component, Windows Secure Boot, Windows Secure Kernel Mode, Windows Secure Socket Tunneling Protocol, Windows Security Center, Windows Security Health Service, Windows Server, Windows Services for NFS, Windows Shell, Windows Speech, Windows Storage, Windows Storage Management Provider, Windows Storage Port Driver, Windows Storage Spaces Controller, Windows TCP/IP, Windows Task Scheduler, Windows USB Audio Class Driver, Windows USB Driver, Windows USB Hub Driver, Windows USB Mass Storage Class Driver, Windows USB Video Driver, Windows Universal Disk Format File System Driver, Windows Universal Plug and Play, Windows Virtual Trusted Platform Module, Windows Volume Manager Driver, Windows Volume Manager Extension Driver, Windows Web Platform Storage, Windows WebClient Service, Windows Wireless Wide Area Network Service, Windows Work Folder Service, Windows Work Folders, Windows iSCSI, Windows iSCSI Target Service, Word, XBox Gaming Services, Xbox.

Summary

CVE	Product	Severity	CVSS	EPSS	KEV	Source
CVE-2026-62916	Entra ID				no	NVD (authoritative)
CVE-2026-70352	Azure AI Language				no	NVD (authoritative)
CVE-2026-80098	Copilot Studio	Critical	9.3	0.29%	no	NVD (authoritative)
CVE-2026-83711	Azure Active Directory B2C				no	NVD (authoritative)
CVE-2026-62906	Discovery Studio				no	NVD (authoritative)
CVE-2026-65818	Power Automate				no	NVD (authoritative)
CVE-2026-69857	Azure Cosmos DB	High	8.5	0.42%	no	NVD (authoritative)
CVE-2026-70178	Fabric				no	NVD (authoritative)
CVE-2026-81963	Windows				no	source (authoritative)
CVE-2026-85880	Windows	High	7.8		no	source (authoritative)
CVE-2026-65669	SQL Server				no	NVD (authoritative)
CVE-2026-68839	Windows USB Mass Storage Class Driver				no	NVD (authoritative)
CVE-2026-69276	UxTheme Library				no	NVD (authoritative)
CVE-2026-69356	Exchange Server				no	NVD (authoritative)
CVE-2026-69408	Windows Media Foundation				no	NVD (authoritative)
CVE-2026-69463	NTFS				no	NVD (authoritative)
CVE-2026-69491	DirectMusic	Critical	9.8		no	NVD (authoritative)
CVE-2026-69493	Windows Event Logging Service				no	NVD (authoritative)
CVE-2026-69496	Windows				no	NVD (authoritative)
CVE-2026-69525	Remote Desktop Services				no	NVD (authoritative)
CVE-2026-69579	Windows Message Queuing	Critical	9.8		no	NVD (authoritative)
CVE-2026-69586	Windows				no	NVD (authoritative)
CVE-2026-69590	Routing and Remote Access Service				no	NVD (authoritative)
CVE-2026-69595	Windows Services for NFS	Critical	9.8		no	NVD (authoritative)
CVE-2026-69641	Exchange Server				no	NVD (authoritative)
CVE-2026-69715	Direct Show				no	NVD (authoritative)
CVE-2026-69730	Windows DNS	Critical	9.8		no	NVD (authoritative)
CVE-2026-69768	Windows				no	NVD (authoritative)
CVE-2026-69769	Windows HTTP Print Provider				no	NVD (authoritative)
CVE-2026-69824	Standard XPS				no	NVD (authoritative)
CVE-2026-69829	Windows Shell				no	NVD (authoritative)
CVE-2026-69845	Windows DHCP Server				no	NVD (authoritative)
CVE-2026-69910	Hyper-V				no	NVD (authoritative)
CVE-2026-70296	Windows Imaging Component				no	NVD (authoritative)
CVE-2026-72979	Windows DHCP Server				no	NVD (authoritative)
CVE-2026-72982	Netlogon				no	NVD (authoritative)
CVE-2026-72983	Internet Connection Sharing				no	NVD (authoritative)
CVE-2026-73009	Windows Secure Socket Tunneling Protocol	Critical	9.8		no	NVD (authoritative)
CVE-2026-73010	Windows Failover Cluster				no	NVD (authoritative)
CVE-2026-73025	Windows				no	NVD (authoritative)
CVE-2026-77493	Graphics Component				no	NVD (authoritative)
CVE-2026-78445	Windows Services for NFS				no	NVD (authoritative)
CVE-2026-81376	Visual Studio Code				no	NVD (authoritative)
CVE-2026-83941	Entra ID				no	NVD (authoritative)
CVE-2026-66302	Skype for Business				no	NVD (authoritative)
CVE-2026-47297	SQL Server				no	NVD (authoritative)
CVE-2026-50349	Windows Ancillary Function Driver for WinSock	High	7.0		no	NVD (authoritative)
CVE-2026-55007	Exchange Server	High	8.1		no	NVD (authoritative)
CVE-2026-56172	Windows	High	7.8		no	NVD (authoritative)
CVE-2026-56177	Windows Server				no	NVD (authoritative)
CVE-2026-56198	Trace Data Helper	High	7.8		no	NVD (authoritative)
CVE-2026-57098	Windows RDP Client				no	NVD (authoritative)
CVE-2026-57099	ASP.NET Core	High	7.5		no	NVD (authoritative)
CVE-2026-58599	Windows Codecs Library				no	NVD (authoritative)
CVE-2026-58600	Windows Codecs Library	High	7.8		no	NVD (authoritative)
CVE-2026-58611	XBox Gaming Services				no	NVD (authoritative)
CVE-2026-62694	Windows Installer				no	NVD (authoritative)
CVE-2026-62697	Windows Push Notifications				no	NVD (authoritative)
CVE-2026-62744	Windows Media Foundation				no	NVD (authoritative)
CVE-2026-62759	Windows Netlogon				no	NVD (authoritative)
CVE-2026-62810	Active Directory Certificate Services				no	NVD (authoritative)
CVE-2026-62813	Active Directory Domain Services				no	NVD (authoritative)
CVE-2026-62895	Azure Arc	High	8.8		no	NVD (authoritative)
CVE-2026-65772	Dynamics 365				no	NVD (authoritative)
CVE-2026-66814	SQL Server	High	8.8		no	NVD (authoritative)
CVE-2026-66818	SQL Server				no	NVD (authoritative)
CVE-2026-66819	SQL Server				no	NVD (authoritative)
CVE-2026-66820	SQL Server				no	NVD (authoritative)
CVE-2026-67368	SQL Server				no	NVD (authoritative)
CVE-2026-67370	SQL Server	High	8.8		no	NVD (authoritative)
CVE-2026-67373	SQL Server				no	NVD (authoritative)
CVE-2026-67376	SQL Server				no	NVD (authoritative)
CVE-2026-67378	SQL Server				no	NVD (authoritative)
CVE-2026-67379	SQL Server				no	NVD (authoritative)
CVE-2026-67380	SQL Server				no	NVD (authoritative)
CVE-2026-67381	SQL Server	High	8.8		no	NVD (authoritative)
CVE-2026-67384	SQL Server	High	8.8		no	NVD (authoritative)
CVE-2026-67385	SQL Server	High	8.8		no	NVD (authoritative)
CVE-2026-67388	SQL Server				no	NVD (authoritative)
CVE-2026-67631	SQL Server				no	NVD (authoritative)
CVE-2026-67636	SQL Server				no	NVD (authoritative)
CVE-2026-67638	SQL Server	High	8.8		no	NVD (authoritative)
CVE-2026-67639	SQL Server	High	8.8		no	NVD (authoritative)
CVE-2026-67642	SQL Server	High	8.8		no	NVD (authoritative)
CVE-2026-67643	SQL Server				no	NVD (authoritative)
CVE-2026-68775	SQL Server				no	NVD (authoritative)
CVE-2026-68786	SQL Server				no	NVD (authoritative)
CVE-2026-68787	SQL Server				no	NVD (authoritative)
CVE-2026-68824	Windows Connected User Experiences and Telemetry				no	NVD (authoritative)
CVE-2026-68825	Windows Bind Filter Driver	High	7.0		no	NVD (authoritative)
CVE-2026-68827	GDI+				no	NVD (authoritative)
CVE-2026-68828	Remote Desktop Client	High	8.8		no	NVD (authoritative)
CVE-2026-68832	Windows				no	NVD (authoritative)
CVE-2026-68834	Windows				no	NVD (authoritative)
CVE-2026-68835	Windows Print Spooler				no	NVD (authoritative)
CVE-2026-68837	Windows File History Service				no	NVD (authoritative)
CVE-2026-68838	Windows	High	8.0		no	NVD (authoritative)
CVE-2026-68840	Windows USB Driver				no	NVD (authoritative)
CVE-2026-68841	Windows	High	7.8		no	NVD (authoritative)
CVE-2026-68844	Windows Storage Spaces Controller				no	NVD (authoritative)
CVE-2026-68845	Windows Program Compatibility Assistant Service				no	NVD (authoritative)
CVE-2026-68846	Windows Kernel				no	NVD (authoritative)
CVE-2026-68847	Windows Connected User Experiences and Telemetry	High	7.0		no	NVD (authoritative)
CVE-2026-68848	Windows Print Spooler				no	NVD (authoritative)
CVE-2026-68850	Account				no	NVD (authoritative)
CVE-2026-68875	Windows	High	7.8		no	NVD (authoritative)
CVE-2026-68876	Windows Program Compatibility Assistant Service				no	NVD (authoritative)
CVE-2026-68877	Windows				no	NVD (authoritative)
CVE-2026-68878	Windows Fast FAT Driver	High	8.0		no	NVD (authoritative)
CVE-2026-68880	Windows				no	NVD (authoritative)
CVE-2026-68884	Windows Kernel				no	NVD (authoritative)
CVE-2026-68885	Standard XPS	High	7.8		no	NVD (authoritative)
CVE-2026-68887	Windows Message Queuing	High	7.5		no	NVD (authoritative)
CVE-2026-68888	Standard XPS				no	NVD (authoritative)
CVE-2026-68889	Standard XPS				no	NVD (authoritative)
CVE-2026-68890	Standard XPS				no	NVD (authoritative)
CVE-2026-68892	Standard XPS				no	NVD (authoritative)
CVE-2026-68893	Windows Remote Desktop Licensing Service				no	NVD (authoritative)
CVE-2026-68894	Windows Error Reporting				no	NVD (authoritative)
CVE-2026-68896	Windows Search Component				no	NVD (authoritative)
CVE-2026-68897	Standard XPS				no	NVD (authoritative)
CVE-2026-69265	Windows				no	NVD (authoritative)
CVE-2026-69266	Windows DHCP Server				no	NVD (authoritative)
CVE-2026-69268	SharePoint	High	8.8		no	NVD (authoritative)
CVE-2026-69269	Standard XPS				no	NVD (authoritative)
CVE-2026-69270	Windows				no	NVD (authoritative)
CVE-2026-69271	Standard XPS				no	NVD (authoritative)
CVE-2026-69272	Standard XPS	High	7.1		no	NVD (authoritative)
CVE-2026-69273	SharePoint				no	NVD (authoritative)
CVE-2026-69274	Windows	High	7.1		no	NVD (authoritative)
CVE-2026-69275	Windows				no	NVD (authoritative)
CVE-2026-69277	Local Security Authority Server				no	NVD (authoritative)
CVE-2026-69279	Windows Cloud Files Mini Filter Driver				no	NVD (authoritative)
CVE-2026-69280	Windows	High	7.0		no	NVD (authoritative)
CVE-2026-69281	Windows License Manager	High	7.0		no	NVD (authoritative)
CVE-2026-69282	SharePoint				no	NVD (authoritative)
CVE-2026-69283	Windows				no	NVD (authoritative)
CVE-2026-69284	Windows	High	7.8		no	NVD (authoritative)
CVE-2026-69285	Office				no	NVD (authoritative)
CVE-2026-69287	Remote Desktop Services				no	NVD (authoritative)
CVE-2026-69289	Windows				no	NVD (authoritative)
CVE-2026-69290	Windows Storage Spaces Controller				no	NVD (authoritative)
CVE-2026-69291	Windows Volume Manager Extension Driver	High	8.8		no	NVD (authoritative)
CVE-2026-69292	Remote Desktop Gateway Service				no	NVD (authoritative)
CVE-2026-69293	Windows Biometric Service				no	NVD (authoritative)
CVE-2026-69295	Windows USB Driver	High	7.8		no	NVD (authoritative)
CVE-2026-69296	Windows				no	NVD (authoritative)
CVE-2026-69298	Windows Biometric Service				no	NVD (authoritative)
CVE-2026-69299	COM				no	NVD (authoritative)
CVE-2026-69300	Windows				no	NVD (authoritative)
CVE-2026-69301	Windows				no	NVD (authoritative)
CVE-2026-69305	Windows Search Component				no	NVD (authoritative)
CVE-2026-69307	Windows				no	NVD (authoritative)
CVE-2026-69309	Windows Print Spooler				no	NVD (authoritative)
CVE-2026-69310	Windows DNS				no	NVD (authoritative)
CVE-2026-69311	Windows Audio Service				no	NVD (authoritative)
CVE-2026-69312	Windows	High	7.8		no	NVD (authoritative)
CVE-2026-69313	Standard XPS				no	NVD (authoritative)
CVE-2026-69314	Windows	High	7.1		no	NVD (authoritative)
CVE-2026-69319	Windows USB Video Driver	High	7.0		no	NVD (authoritative)
CVE-2026-69322	Windows Search Component				no	NVD (authoritative)
CVE-2026-69323	Windows Biometric Service	High	7.8		no	NVD (authoritative)
CVE-2026-69324	Windows Performance Monitor				no	NVD (authoritative)
CVE-2026-69325	JScript				no	NVD (authoritative)
CVE-2026-69328	Windows Storage				no	NVD (authoritative)
CVE-2026-69329	BranchCache				no	NVD (authoritative)
CVE-2026-69331	Windows Remote Access Connection Manager				no	NVD (authoritative)
CVE-2026-69332	Windows				no	NVD (authoritative)
CVE-2026-69333	Windows				no	NVD (authoritative)
CVE-2026-69334	Windows Volume Manager Extension Driver				no	NVD (authoritative)
CVE-2026-69335	Windows	High	7.0		no	NVD (authoritative)
CVE-2026-69336	Standard XPS				no	NVD (authoritative)
CVE-2026-62706	Windows Media Foundation	High	8.8		no	MSRC (authoritative)
CVE-2026-66304	Skype for Business				no	MSRC (authoritative)
CVE-2026-66306	Skype for Business				no	MSRC (authoritative)
CVE-2026-66308	Skype for Business	Medium	6.5		no	MSRC (authoritative)
CVE-2026-69341	Windows Image Acquisition	High	7.0		no	MSRC (authoritative)
CVE-2026-69522	Visual Studio				no	MSRC (authoritative)
CVE-2026-70091	Windows DNS				no	MSRC (authoritative)
CVE-2026-69782	DNS Server				no	MSRC (authoritative)
CVE-2026-85360	Windows Kernel				no	MSRC (authoritative)
CVE-2026-77482	SQL Server				no	MSRC (authoritative)
CVE-2026-62801	PowerShell				no	MSRC (authoritative)
CVE-2026-67629	SQL Server	Medium	6.5		no	MSRC (authoritative)
CVE-2026-67630	SQL Server				no	MSRC (authoritative)
CVE-2026-67633	SQL Server				no	MSRC (authoritative)
CVE-2026-68781	SQL Server	Medium	6.5		no	MSRC (authoritative)
CVE-2026-68784	SQL Server	Medium	6.5		no	MSRC (authoritative)
CVE-2026-68785	SQL Server	Medium	4.9		no	MSRC (authoritative)
CVE-2026-68830	Windows Universal Plug and Play (UPnP) Device Host				no	MSRC (authoritative)
CVE-2026-68833	Windows	Medium	6.8		no	MSRC (authoritative)
CVE-2026-68849	Windows Bluetooth Port Driver				no	MSRC (authoritative)
CVE-2026-68851	Windows				no	MSRC (authoritative)
CVE-2026-68881	Standard XPS				no	MSRC (authoritative)
CVE-2026-69267	Windows Connected User Experiences and Telemetry				no	MSRC (authoritative)
CVE-2026-69366	Windows	High	7.1		no	MSRC (authoritative)
CVE-2026-69337	Windows				no	MSRC (authoritative)
CVE-2026-69339	Windows MIDI Service Module				no	MSRC (authoritative)
CVE-2026-69338	Remote Desktop Gateway Service				no	MSRC (authoritative)
CVE-2026-69347	Windows				no	MSRC (authoritative)
CVE-2026-69345	Standard XPS				no	MSRC (authoritative)
CVE-2026-69377	Windows Modern Device Management	High	7.8		no	MSRC (authoritative)
CVE-2026-69349	Windows Management Instrumentation	Medium	5.7		no	MSRC (authoritative)
CVE-2026-69362	Windows Error Reporting	High	7.0		no	MSRC (authoritative)
CVE-2026-69359	Active Directory Domain Services				no	MSRC (authoritative)
CVE-2026-69367	Standard XPS				no	MSRC (authoritative)
CVE-2026-69389	Windows Storage Management Provider				no	MSRC (authoritative)
CVE-2026-69368	Windows Overlay Filter	High	7.8		no	MSRC (authoritative)
CVE-2026-69371	Windows Overlay Filter				no	MSRC (authoritative)
CVE-2026-69379	Windows	High	7.0		no	MSRC (authoritative)
CVE-2026-69391	Windows Broker Infrastructure Service	High	7.8		no	MSRC (authoritative)
CVE-2026-69404	Windows TCP/IP				no	MSRC (authoritative)
CVE-2026-69390	Windows				no	MSRC (authoritative)
CVE-2026-69406	Windows Kernel				no	MSRC (authoritative)
CVE-2026-69401	Windows				no	MSRC (authoritative)
CVE-2026-69413	Windows				no	MSRC (authoritative)
CVE-2026-69418	Volume Manager Driver				no	MSRC (authoritative)
CVE-2026-69457	Windows USB Driver				no	MSRC (authoritative)
CVE-2026-69412	Windows DHCP Server				no	MSRC (authoritative)
CVE-2026-69415	Windows DHCP Server	Medium	6.8		no	MSRC (authoritative)
CVE-2026-69420	Windows				no	MSRC (authoritative)
CVE-2026-69436	Windows Error Reporting				no	MSRC (authoritative)
CVE-2026-69423	Windows USB Video Driver	High	8.0		no	MSRC (authoritative)
CVE-2026-69429	Windows				no	MSRC (authoritative)
CVE-2026-69458	BitLocker				no	MSRC (authoritative)
CVE-2026-69448	Windows				no	MSRC (authoritative)
CVE-2026-69432	Volume Manager Driver				no	MSRC (authoritative)
CVE-2026-69513	Windows Error Reporting				no	MSRC (authoritative)
CVE-2026-69455	Windows				no	MSRC (authoritative)
CVE-2026-69532	Windows	High	7.8		no	MSRC (authoritative)
CVE-2026-69451	Windows Management Instrumentation				no	MSRC (authoritative)
CVE-2026-69450	Windows Error Reporting				no	MSRC (authoritative)
CVE-2026-69485	Remote Desktop Client				no	MSRC (authoritative)
CVE-2026-69461	Windows NTFS	High	8.8		no	MSRC (authoritative)
CVE-2026-69472	Windows				no	MSRC (authoritative)
CVE-2026-69468	Windows Volume Manager Extension Driver				no	MSRC (authoritative)
CVE-2026-69470	Connected User Experiences and Telemetry				no	MSRC (authoritative)
CVE-2026-69473	Windows Kernel				no	MSRC (authoritative)
CVE-2026-69479	Windows	High	8.4		no	MSRC (authoritative)
CVE-2026-69481	Windows Enterprise App Management				no	MSRC (authoritative)
CVE-2026-69494	Windows Event Logging Service				no	MSRC (authoritative)
CVE-2026-69495	Windows Event Logging Service	High	8.8		no	MSRC (authoritative)
CVE-2026-69531	Windows				no	MSRC (authoritative)
CVE-2026-69517	Windows				no	MSRC (authoritative)
CVE-2026-69500	Windows Image Acquisition				no	MSRC (authoritative)
CVE-2026-69505	Windows				no	MSRC (authoritative)
CVE-2026-69504	Windows	Medium	5.5		no	MSRC (authoritative)
CVE-2026-69507	Windows Search Component				no	MSRC (authoritative)
CVE-2026-69551	Windows DNS Server				no	MSRC (authoritative)
CVE-2026-69514	Remote Desktop Services	High	7.5		no	MSRC (authoritative)
CVE-2026-69516	Connected Devices Platform Service				no	MSRC (authoritative)
CVE-2026-69621	Windows Fax Service				no	MSRC (authoritative)
CVE-2026-69527	Windows				no	MSRC (authoritative)
CVE-2026-69539	Remote Desktop Services				no	MSRC (authoritative)
CVE-2026-69582	Windows Volume Manager Extension Driver				no	MSRC (authoritative)
CVE-2026-69524	Active Directory Domain Services	High	8.1		no	MSRC (authoritative)
CVE-2026-69528	Windows Shell				no	MSRC (authoritative)
CVE-2026-69534	Windows Program Compatibility Assistant Service				no	MSRC (authoritative)
CVE-2026-69574	Windows Device Association Service				no	MSRC (authoritative)
CVE-2026-69540	Windows Audio Service				no	MSRC (authoritative)
CVE-2026-69549	Windows				no	MSRC (authoritative)
CVE-2026-69541	Virtual Hard Disk (VHD) Miniport Driver				no	MSRC (authoritative)
CVE-2026-69563	Windows Program Compatibility Assistant Service				no	MSRC (authoritative)
CVE-2026-69553	Hyper-V				no	MSRC (authoritative)
CVE-2026-69552	Windows Print Spooler				no	MSRC (authoritative)
CVE-2026-69554	Windows Search Component				no	MSRC (authoritative)
CVE-2026-69572	Windows SMB Client	Medium	5.7		no	MSRC (authoritative)
CVE-2026-69585	Windows Search Component				no	MSRC (authoritative)
CVE-2026-69608	Windows Search Component				no	MSRC (authoritative)
CVE-2026-69588	Windows				no	MSRC (authoritative)
CVE-2026-69587	Windows Internet Key Exchange (IKE) Extension				no	MSRC (authoritative)
CVE-2026-69609	Windows				no	MSRC (authoritative)
CVE-2026-69594	Local Security Authority Server				no	MSRC (authoritative)
CVE-2026-69605	Install Service				no	MSRC (authoritative)
CVE-2026-69645	Windows Message Queuing				no	MSRC (authoritative)
CVE-2026-69648	Windows				no	MSRC (authoritative)
CVE-2026-69684	Windows Error Reporting				no	MSRC (authoritative)
CVE-2026-69623	Windows HTTP Print Provider				no	MSRC (authoritative)
CVE-2026-69689	Windows				no	MSRC (authoritative)
CVE-2026-69627	Windows Remote Desktop Licensing Service				no	MSRC (authoritative)
CVE-2026-69628	Windows iSCSI				no	MSRC (authoritative)
CVE-2026-69790	Windows				no	MSRC (authoritative)
CVE-2026-69631	Windows DNS				no	MSRC (authoritative)
CVE-2026-69638	Windows				no	MSRC (authoritative)
CVE-2026-69859	Windows				no	MSRC (authoritative)
CVE-2026-69693	Windows Device Association Broker service				no	MSRC (authoritative)
CVE-2026-69729	Windows Credential Providers				no	MSRC (authoritative)
CVE-2026-69717	Windows				no	MSRC (authoritative)
CVE-2026-69711	Windows				no	MSRC (authoritative)
CVE-2026-69694	IP Address Management (IPAM) Service				no	MSRC (authoritative)
CVE-2026-69875	Windows				no	MSRC (authoritative)
CVE-2026-69723	Windows Kernel	Medium	5.7		no	MSRC (authoritative)
CVE-2026-69889	Windows				no	MSRC (authoritative)
CVE-2026-69757	Windows				no	MSRC (authoritative)
CVE-2026-69681	Virtual Hard Disk (VHD) Miniport Driver				no	MSRC (authoritative)
CVE-2026-69896	Windows Error Reporting	High	7.0		no	MSRC (authoritative)
CVE-2026-69735	Windows Broadcast DVR User Service	High	7.0		no	MSRC (authoritative)
CVE-2026-69741	Windows				no	MSRC (authoritative)
CVE-2026-69762	Windows				no	MSRC (authoritative)
CVE-2026-69744	Windows				no	MSRC (authoritative)
CVE-2026-69862	Windows Wireless Wide Area Network Service				no	MSRC (authoritative)
CVE-2026-69832	Windows				no	MSRC (authoritative)
CVE-2026-69691	Windows	High	7.8		no	MSRC (authoritative)
CVE-2026-69838	Windows Print Spooler	High	7.0		no	MSRC (authoritative)
CVE-2026-69808	Windows				no	MSRC (authoritative)
CVE-2026-69839	Windows iSCSI Target Service	Medium	6.5		no	MSRC (authoritative)
CVE-2026-69772	Windows Network File System	High	8.8		no	MSRC (authoritative)
CVE-2026-69775	Windows				no	MSRC (authoritative)
CVE-2026-69758	Windows Universal Disk Format File System Driver				no	MSRC (authoritative)
CVE-2026-69771	Windows Container Manager Service				no	MSRC (authoritative)
CVE-2026-69822	Windows				no	MSRC (authoritative)
CVE-2026-69732	Windows Link Layer Topology Discovery Protocol	High	8.1		no	MSRC (authoritative)
CVE-2026-69770	Windows				no	MSRC (authoritative)
CVE-2026-69860	Windows Imaging Component				no	MSRC (authoritative)
CVE-2026-69712	Windows Key Distribution Center				no	MSRC (authoritative)
CVE-2026-69676	Windows				no	MSRC (authoritative)
CVE-2026-69740	Windows Hello				no	MSRC (authoritative)
CVE-2026-69890	Windows Virtual Trusted Platform Module				no	MSRC (authoritative)
CVE-2026-63523	Skype for Business				no	MSRC (authoritative)
CVE-2026-66305	Skype for Business				no	MSRC (authoritative)
CVE-2026-70334	Visual Studio Code	High	7.8		no	MSRC (authoritative)
CVE-2026-70289	Windows				no	MSRC (authoritative)
CVE-2026-70342	Windows Ancillary Function Driver for WinSock				no	MSRC (authoritative)
CVE-2026-70351	WebP Image Extension				no	MSRC (authoritative)
CVE-2026-70562	Windows Audio Service				no	MSRC (authoritative)
CVE-2026-70563	Windows				no	MSRC (authoritative)
CVE-2026-70564	Windows Print Spooler	High	7.8		no	MSRC (authoritative)
CVE-2026-70582	Windows Management Instrumentation				no	MSRC (authoritative)
CVE-2026-70584	Windows Core Messaging				no	MSRC (authoritative)
CVE-2026-70585	Windows Services for NFS				no	MSRC (authoritative)
CVE-2026-70586	Paint				no	MSRC (authoritative)
CVE-2026-70587	Windows Remote Desktop Protocol	High	7.5		no	MSRC (authoritative)
CVE-2026-71329	Windows				no	MSRC (authoritative)
CVE-2026-71336	Windows Work Folder Service				no	MSRC (authoritative)
CVE-2026-71330	Windows Services for NFS				no	MSRC (authoritative)
CVE-2026-71333	Windows Remote Access Connection Manager				no	MSRC (authoritative)
CVE-2026-71337	Windows Storage Management Provider				no	MSRC (authoritative)
CVE-2026-71332	Windows	High	7.0		no	MSRC (authoritative)
CVE-2026-71334	Windows NFS Portmapper				no	MSRC (authoritative)
CVE-2026-71338	Windows Failover Cluster				no	MSRC (authoritative)
CVE-2026-71340	Windows File History Service				no	MSRC (authoritative)
CVE-2026-71339	Windows Installer				no	MSRC (authoritative)
CVE-2026-71350	Windows				no	MSRC (authoritative)
CVE-2026-71348	Windows				no	MSRC (authoritative)
CVE-2026-72926	Internet Connection Sharing				no	MSRC (authoritative)
CVE-2026-71343	Remote Access Connection Manager				no	MSRC (authoritative)
CVE-2026-71341	Windows Partition Management Driver				no	MSRC (authoritative)
CVE-2026-71353	Windows Routing and Remote Access Service				no	MSRC (authoritative)
CVE-2026-71345	Windows				no	MSRC (authoritative)
CVE-2026-72929	Windows Installer				no	MSRC (authoritative)
CVE-2026-71351	Routing and Remote Access Service				no	MSRC (authoritative)
CVE-2026-72930	Windows Secure Socket Tunneling Protocol (SSTP)				no	MSRC (authoritative)
CVE-2026-72935	Windows NTFS	Medium	6.7		no	MSRC (authoritative)
CVE-2026-72939	Routing and Remote Access Service				no	MSRC (authoritative)
CVE-2026-72944	Windows Fax Service				no	MSRC (authoritative)
CVE-2026-72946	Storage Port Driver				no	MSRC (authoritative)
CVE-2026-72943	Windows Deployment Services				no	MSRC (authoritative)
CVE-2026-72945	Windows Task Scheduler				no	MSRC (authoritative)
CVE-2026-72948	Windows DNS				no	MSRC (authoritative)
CVE-2026-72958	Windows Credential Guard				no	MSRC (authoritative)
CVE-2026-72962	Windows USB Video Driver				no	MSRC (authoritative)
CVE-2026-72963	Windows Modern Execution Server				no	MSRC (authoritative)
CVE-2026-69355	Exchange Server				no	MSRC (authoritative)
CVE-2026-69361	Exchange Server	Medium	6.5		no	MSRC (authoritative)
CVE-2026-69375	Exchange Server				no	MSRC (authoritative)
CVE-2026-69378	Exchange Server				no	MSRC (authoritative)
CVE-2026-69380	Exchange Server				no	MSRC (authoritative)
CVE-2026-69382	Exchange Server				no	MSRC (authoritative)
CVE-2026-69383	Windows Shell				no	MSRC (authoritative)
CVE-2026-69394	Windows Audio Service	High	7.0		no	MSRC (authoritative)
CVE-2026-69443	Windows Device Health Attestation				no	MSRC (authoritative)
CVE-2026-69469	Windows				no	MSRC (authoritative)
CVE-2026-69501	Windows				no	MSRC (authoritative)
CVE-2026-69518	Windows Remote Desktop	High	8.8		no	MSRC (authoritative)
CVE-2026-69544	Windows SMB Client				no	MSRC (authoritative)
CVE-2026-69548	Windows				no	MSRC (authoritative)
CVE-2026-69556	Office Word				no	MSRC (authoritative)
CVE-2026-69583	Windows Biometric Service				no	MSRC (authoritative)
CVE-2026-69589	Windows Biometric Service				no	MSRC (authoritative)
CVE-2026-69580	Windows Biometric Service				no	MSRC (authoritative)
CVE-2026-69576	Graphic Fonts	High	7.8		no	MSRC (authoritative)
CVE-2026-69604	Windows Audio Service				no	MSRC (authoritative)
CVE-2026-69603	Hyper-V				no	MSRC (authoritative)
CVE-2026-69642	Skype for Business				no	MSRC (authoritative)
CVE-2026-69646	Skype for Business				no	MSRC (authoritative)
CVE-2026-69649	Raw Image Extension	High	8.8		no	MSRC (authoritative)
CVE-2026-69671	Office Word				no	MSRC (authoritative)
CVE-2026-69678	Office PowerPoint				no	MSRC (authoritative)
CVE-2026-69686	Office Word				no	MSRC (authoritative)
CVE-2026-69722	Office Word	High	8.8		no	MSRC (authoritative)
CVE-2026-69716	SharePoint				no	MSRC (authoritative)
CVE-2026-69734	Office Word				no	MSRC (authoritative)
CVE-2026-69742	Office Publisher				no	MSRC (authoritative)
CVE-2026-69724	SharePoint	High	8.8		no	MSRC (authoritative)
CVE-2026-69719	Office Word				no	MSRC (authoritative)
CVE-2026-69690	SharePoint				no	MSRC (authoritative)
CVE-2026-69739	Office				no	MSRC (authoritative)
CVE-2026-69683	SharePoint				no	MSRC (authoritative)
CVE-2026-69529	Office Access				no	MSRC (authoritative)
CVE-2026-69759	Office Word				no	MSRC (authoritative)
CVE-2026-69764	Office Word	High	8.8		no	MSRC (authoritative)
CVE-2026-69778	Office Access				no	MSRC (authoritative)
CVE-2026-69767	PowerPoint				no	MSRC (authoritative)
CVE-2026-69797	PowerPoint				no	MSRC (authoritative)
CVE-2026-69804	SharePoint	High	7.5		no	MSRC (authoritative)
CVE-2026-69846	Windows				no	MSRC (authoritative)
CVE-2026-69929	Windows DHCP Server				no	MSRC (authoritative)
CVE-2026-69930	Windows DHCP Server				no	MSRC (authoritative)
CVE-2026-70124	Windows DHCP Server				no	MSRC (authoritative)
CVE-2026-70283	Windows				no	MSRC (authoritative)
CVE-2026-72978	Active Directory Federation Services	Medium	5.9		no	MSRC (authoritative)
CVE-2026-77495	Windows Imaging Component				no	MSRC (authoritative)
CVE-2026-72980	Windows Hello				no	MSRC (authoritative)
CVE-2026-72981	Windows				no	MSRC (authoritative)
CVE-2026-69476	Windows Biometric Service				no	MSRC (authoritative)
CVE-2026-69787	Windows Biometric Service				no	MSRC (authoritative)
CVE-2026-77489	Windows Biometric Service				no	MSRC (authoritative)
CVE-2026-77491	Windows				no	MSRC (authoritative)
CVE-2026-77492	Windows	Medium	5.5		no	MSRC (authoritative)
CVE-2026-77494	Windows DHCP Server				no	MSRC (authoritative)
CVE-2026-77498	Windows DHCP Server				no	MSRC (authoritative)
CVE-2026-77500	Windows Device Association Service				no	MSRC (authoritative)
CVE-2026-77499	Windows DHCP Server				no	MSRC (authoritative)
CVE-2026-77501	Windows DHCP Server				no	MSRC (authoritative)
CVE-2026-77502	Windows DHCP Server				no	MSRC (authoritative)
CVE-2026-77503	Windows	High	8.4		no	MSRC (authoritative)
CVE-2026-77887	Windows DHCP Server				no	MSRC (authoritative)
CVE-2026-77504	Office				no	MSRC (authoritative)
CVE-2026-77505	Windows DNS Server				no	MSRC (authoritative)
CVE-2026-77888	Windows DHCP Server				no	MSRC (authoritative)
CVE-2026-77886	Windows DHCP Server				no	MSRC (authoritative)
CVE-2026-77890	Windows DHCP Server				no	MSRC (authoritative)
CVE-2026-77889	Windows DHCP Server	High	7.5		no	MSRC (authoritative)
CVE-2026-77891	Windows DHCP Server				no	MSRC (authoritative)
CVE-2026-77892	Windows Boot Manager				no	MSRC (authoritative)
CVE-2026-77893	Windows DHCP Server				no	MSRC (authoritative)
CVE-2026-77894	Windows Installer				no	MSRC (authoritative)
CVE-2026-77895	Windows DHCP Server				no	MSRC (authoritative)
CVE-2026-77896	Remote Desktop Client				no	MSRC (authoritative)
CVE-2026-77898	Office				no	MSRC (authoritative)
CVE-2026-77899	Windows Security Center				no	MSRC (authoritative)
CVE-2026-77904	Windows Volume Manager Extension Driver	High	7.8		no	MSRC (authoritative)
CVE-2026-77907	Visual Studio				no	MSRC (authoritative)
CVE-2026-77908	Dynamics 365				no	MSRC (authoritative)
CVE-2026-77909	Azure CycleCloud				no	MSRC (authoritative)
CVE-2026-78439	Office	High	8.8		no	MSRC (authoritative)
CVE-2026-78461	Visual Studio Code				no	MSRC (authoritative)
CVE-2026-78463	Remote Desktop Client				no	MSRC (authoritative)
CVE-2026-67383	SQL Server				no	MSRC (authoritative)
CVE-2026-78511	Office Word				no	MSRC (authoritative)
CVE-2026-78502	Office Word				no	MSRC (authoritative)
CVE-2026-78515	Excel	Medium	6.5		no	MSRC (authoritative)
CVE-2026-78505	Office	High	8.8		no	MSRC (authoritative)
CVE-2026-78510	Word				no	MSRC (authoritative)
CVE-2026-78508	Windows CD-ROM Driver	Medium	4.6		no	MSRC (authoritative)
CVE-2026-78513	PowerPoint				no	MSRC (authoritative)
CVE-2026-78504	Office Word				no	MSRC (authoritative)
CVE-2026-78517	Office Word				no	MSRC (authoritative)
CVE-2026-78509	Outlook				no	MSRC (authoritative)
CVE-2026-67389	SQL Server	Medium	6.5		no	MSRC (authoritative)
CVE-2026-78518	Office Excel	High	8.8		no	MSRC (authoritative)
CVE-2026-73029	SQL Server				no	MSRC (authoritative)
CVE-2026-78523	Windows DNS Server				no	MSRC (authoritative)
CVE-2026-80074	Remote Desktop Client				no	MSRC (authoritative)
CVE-2026-80077	Remote Desktop Client	High	8.8		no	MSRC (authoritative)
CVE-2026-80075	Windows Work Folders	High	7.8		no	MSRC (authoritative)
CVE-2026-80083	Hyper-V				no	MSRC (authoritative)
CVE-2026-80093	Windows				no	MSRC (authoritative)
CVE-2026-81349	Azure HDInsight				no	MSRC (authoritative)
CVE-2026-81355	Virtual Hard Disk (VHD) Miniport Driver				no	MSRC (authoritative)
CVE-2026-81356	Visual Studio Code	High	8.2		no	MSRC (authoritative)
CVE-2026-81357	Visual Studio Code				no	MSRC (authoritative)
CVE-2026-81377	Visual Studio Code				no	MSRC (authoritative)
CVE-2026-81378	Visual Studio Code				no	MSRC (authoritative)
CVE-2026-81379	Visual Studio Code	High	8.2		no	MSRC (authoritative)
CVE-2026-81380	GitHub Copilot	Medium	5.3		no	MSRC (authoritative)
CVE-2026-81381	GitHub Copilot				no	MSRC (authoritative)
CVE-2026-70065	Windows DHCP Server				no	MSRC (authoritative)
CVE-2026-83942	Windows Kernel	High	7.8		no	MSRC (authoritative)
CVE-2026-83952	Resilient File System	High	7.8		no	MSRC (authoritative)
CVE-2026-69989	Windows DNS Server	High	8.1		no	MSRC (authoritative)
CVE-2026-69827	Windows DNS Server				no	MSRC (authoritative)
CVE-2026-72947	Windows File History Service				no	MSRC (authoritative)
CVE-2026-72949	Windows				no	MSRC (authoritative)
CVE-2026-70019	Windows				no	MSRC (authoritative)
CVE-2026-72940	Windows				no	MSRC (authoritative)
CVE-2026-69573	Windows				no	MSRC (authoritative)
CVE-2026-72937	Windows Storage Port Driver				no	MSRC (authoritative)
CVE-2026-69492	Windows Partition Management Driver				no	MSRC (authoritative)
CVE-2026-83955	Windows Biometric Service				no	MSRC (authoritative)
CVE-2026-83986	Windows Biometric Service				no	MSRC (authoritative)
CVE-2026-83969	Windows Biometric Service				no	MSRC (authoritative)
CVE-2026-83988	Windows Biometric Service				no	MSRC (authoritative)
CVE-2026-83979	Windows Biometric Service				no	MSRC (authoritative)
CVE-2026-83974	Windows Biometric Service	High	7.8		no	MSRC (authoritative)
CVE-2026-83975	Windows Biometric Service				no	MSRC (authoritative)
CVE-2026-83976	Windows Biometric Service				no	MSRC (authoritative)
CVE-2026-70290	Windows				no	MSRC (authoritative)
CVE-2026-83991	Windows				no	MSRC (authoritative)
CVE-2026-83996	Windows Error Reporting				no	MSRC (authoritative)
CVE-2026-83998	Remote Desktop Client	High	8.8		no	MSRC (authoritative)
CVE-2026-83999	Windows	High	7.0		no	MSRC (authoritative)
CVE-2026-84001	Windows Key Distribution Center				no	MSRC (authoritative)
CVE-2026-85877	Windows Print Spooler				no	MSRC (authoritative)
CVE-2026-62762	Active Directory Domain Services				no	MSRC (authoritative)
CVE-2026-66816	SQL Server				no	MSRC (authoritative)
CVE-2026-67386	SQL Server				no	MSRC (authoritative)
CVE-2026-67390	SQL Server	Medium	6.5		no	MSRC (authoritative)
CVE-2026-67393	SQL Server				no	MSRC (authoritative)
CVE-2026-67641	SQL Server	Medium	6.5		no	MSRC (authoritative)
CVE-2026-67648	SQL Server	Medium	6.5		no	MSRC (authoritative)
CVE-2026-68776	SQL Server				no	MSRC (authoritative)
CVE-2026-68777	SQL Server				no	MSRC (authoritative)
CVE-2026-68778	SQL Server				no	MSRC (authoritative)
CVE-2026-68779	SQL Server				no	MSRC (authoritative)
CVE-2026-68780	SQL Server	Medium	6.5		no	MSRC (authoritative)
CVE-2026-68831	Windows Defender Firewall Service				no	MSRC (authoritative)
CVE-2026-68843	Office Word	Medium	5.5		no	MSRC (authoritative)
CVE-2026-68842	Windows MIDI Service Module				no	MSRC (authoritative)
CVE-2026-68874	Windows Program Compatibility Assistant Service				no	MSRC (authoritative)
CVE-2026-68852	Microsoft Account	Medium	5.5		no	MSRC (authoritative)
CVE-2026-68873	Windows Program Compatibility Assistant Service				no	MSRC (authoritative)
CVE-2026-68898	Windows iSCSI	Medium	6.5		no	MSRC (authoritative)
CVE-2026-68886	Windows Network Connection Broker				no	MSRC (authoritative)
CVE-2026-68891	Standard XPS				no	MSRC (authoritative)
CVE-2026-69288	Windows GDI+				no	MSRC (authoritative)
CVE-2026-68895	Internet Storage Name Service				no	MSRC (authoritative)
CVE-2026-69286	Windows USB Audio Class Driver				no	MSRC (authoritative)
CVE-2026-69297	Windows DHCP Server				no	MSRC (authoritative)
CVE-2026-69294	COM				no	MSRC (authoritative)
CVE-2026-69321	Windows				no	MSRC (authoritative)
CVE-2026-69303	Push Message Routing Service				no	MSRC (authoritative)
CVE-2026-69315	Windows License Manager				no	MSRC (authoritative)
CVE-2026-69308	Standard XPS				no	MSRC (authoritative)
CVE-2026-69318	Windows Imaging Component				no	MSRC (authoritative)
CVE-2026-69317	Remote Desktop Client	Medium	5.7		no	MSRC (authoritative)
CVE-2026-69316	Windows				no	MSRC (authoritative)
CVE-2026-69351	Windows Universal Plug and Play (UPnP) Device Host				no	MSRC (authoritative)
CVE-2026-69340	Windows	High	7.1		no	MSRC (authoritative)
CVE-2026-69342	Windows DHCP Server				no	MSRC (authoritative)
CVE-2026-69343	Windows Overlay Filter				no	MSRC (authoritative)
CVE-2026-69344	Windows Print Spooler				no	MSRC (authoritative)
CVE-2026-69346	Windows Print Spooler	High	8.0		no	MSRC (authoritative)
CVE-2026-69348	Windows				no	MSRC (authoritative)
CVE-2026-69350	Windows				no	MSRC (authoritative)
CVE-2026-69353	Windows				no	MSRC (authoritative)
CVE-2026-69358	Remote Desktop Client				no	MSRC (authoritative)
CVE-2026-69357	Windows				no	MSRC (authoritative)
CVE-2026-69376	Standard XPS				no	MSRC (authoritative)
CVE-2026-69384	Virtual Hard Disk (VHD) Miniport Driver				no	MSRC (authoritative)
CVE-2026-69372	Windows Network File System				no	MSRC (authoritative)
CVE-2026-69360	Office Word				no	MSRC (authoritative)
CVE-2026-69365	Local Security Authority Server				no	MSRC (authoritative)
CVE-2026-69364	Windows Print Spooler Components				no	MSRC (authoritative)
CVE-2026-69369	Windows DNS				no	MSRC (authoritative)
CVE-2026-69403	Windows SMB Server				no	MSRC (authoritative)
CVE-2026-69373	Windows Overlay Filter				no	MSRC (authoritative)
CVE-2026-69374	Windows SMB Server				no	MSRC (authoritative)
CVE-2026-69385	Windows TCP/IP				no	MSRC (authoritative)
CVE-2026-69386	Windows Media Foundation				no	MSRC (authoritative)
CVE-2026-69388	Windows Bluetooth Service	High	7.0		no	MSRC (authoritative)
CVE-2026-69393	Windows				no	MSRC (authoritative)
CVE-2026-69396	Windows NDIS				no	MSRC (authoritative)
CVE-2026-69410	Windows				no	MSRC (authoritative)
CVE-2026-69398	Windows Bluetooth Service				no	MSRC (authoritative)
CVE-2026-69421	Windows				no	MSRC (authoritative)
CVE-2026-69405	Windows DHCP Server	Medium	5.7		no	MSRC (authoritative)
CVE-2026-69407	Windows Volume Manager Driver				no	MSRC (authoritative)
CVE-2026-69416	Windows DHCP Server				no	MSRC (authoritative)
CVE-2026-69424	Windows Distributed File System				no	MSRC (authoritative)
CVE-2026-69428	Windows	High	7.5		no	MSRC (authoritative)
CVE-2026-69422	Windows USB Video Driver	High	7.0		no	MSRC (authoritative)
CVE-2026-69438	JScript				no	MSRC (authoritative)
CVE-2026-69425	Windows				no	MSRC (authoritative)
CVE-2026-69427	Windows				no	MSRC (authoritative)
CVE-2026-69475	Windows Remote Desktop Services				no	MSRC (authoritative)
CVE-2026-69430	Windows Embedded Mode Service				no	MSRC (authoritative)
CVE-2026-69449	Windows BitLocker	Medium	6.7		no	MSRC (authoritative)
CVE-2026-69447	Windows Audio Service				no	MSRC (authoritative)
CVE-2026-69433	Windows Error Reporting				no	MSRC (authoritative)
CVE-2026-69434	Windows				no	MSRC (authoritative)
CVE-2026-69440	Windows MIDI Service Module				no	MSRC (authoritative)
CVE-2026-69444	Windows Speech				no	MSRC (authoritative)
CVE-2026-69466	Windows Kernel	High	7.0		no	MSRC (authoritative)
CVE-2026-69445	Windows Compressed Folder				no	MSRC (authoritative)
CVE-2026-69462	Windows Error Reporting	High	8.0		no	MSRC (authoritative)
CVE-2026-69453	Windows Search Component	Medium	5.5		no	MSRC (authoritative)
CVE-2026-69456	Windows				no	MSRC (authoritative)
CVE-2026-69459	Windows	High	7.8		no	MSRC (authoritative)
CVE-2026-69460	Windows Modern Device Management				no	MSRC (authoritative)
CVE-2026-69467	Graphics Component	High	7.8		no	MSRC (authoritative)
CVE-2026-69474	Windows Overlay Filter				no	MSRC (authoritative)
CVE-2026-69482	Windows Error Reporting				no	MSRC (authoritative)
CVE-2026-69478	Windows				no	MSRC (authoritative)
CVE-2026-69561	Windows	High	7.8		no	MSRC (authoritative)
CVE-2026-69480	Windows Partition Management Driver	High	7.8		no	MSRC (authoritative)
CVE-2026-69483	Windows Image Acquisition				no	MSRC (authoritative)
CVE-2026-69578	Windows Kernel				no	MSRC (authoritative)
CVE-2026-69488	Windows Device Association Service				no	MSRC (authoritative)
CVE-2026-69511	Windows Media Foundation				no	MSRC (authoritative)
CVE-2026-69497	Windows DHCP Server				no	MSRC (authoritative)
CVE-2026-69512	Windows				no	MSRC (authoritative)
CVE-2026-69498	Windows	High	7.0		no	MSRC (authoritative)
CVE-2026-69503	Windows USB Driver				no	MSRC (authoritative)
CVE-2026-69508	Windows MIDI Service Module				no	MSRC (authoritative)
CVE-2026-69509	Windows Fax Service	High	7.8		no	MSRC (authoritative)
CVE-2026-69599	Remote Desktop Services				no	MSRC (authoritative)
CVE-2026-69547	Windows DHCP Server				no	MSRC (authoritative)
CVE-2026-69536	Remote Desktop Services				no	MSRC (authoritative)
CVE-2026-69546	Active Directory Domain Services				no	MSRC (authoritative)
CVE-2026-69571	Windows				no	MSRC (authoritative)
CVE-2026-69535	Windows				no	MSRC (authoritative)
CVE-2026-69538	Windows				no	MSRC (authoritative)
CVE-2026-69542	Windows Camera Frame Server Monitor				no	MSRC (authoritative)
CVE-2026-69591	Windows				no	MSRC (authoritative)
CVE-2026-69569	Windows Print Spooler				no	MSRC (authoritative)
CVE-2026-69581	Windows Device Association Service				no	MSRC (authoritative)
CVE-2026-69612	Windows Error Reporting				no	MSRC (authoritative)
CVE-2026-69566	Windows				no	MSRC (authoritative)
CVE-2026-69567	Windows				no	MSRC (authoritative)
CVE-2026-69592	Windows Universal Disk Format File System Driver				no	MSRC (authoritative)
CVE-2026-69584	Windows	High	7.8		no	MSRC (authoritative)
CVE-2026-69600	Windows Search Component				no	MSRC (authoritative)
CVE-2026-69606	Windows Shell				no	MSRC (authoritative)
CVE-2026-69625	Connected User Experiences and Telemetry				no	MSRC (authoritative)
CVE-2026-69618	Windows SMB Client				no	MSRC (authoritative)
CVE-2026-69624	Active Directory Certificate Services				no	MSRC (authoritative)
CVE-2026-69597	Windows HTTP.sys				no	MSRC (authoritative)
CVE-2026-69602	Windows PrintWorkflowUserSvc				no	MSRC (authoritative)
CVE-2026-69611	Virtual Hard Disk (VHD) Miniport Driver				no	MSRC (authoritative)
CVE-2026-69617	Windows				no	MSRC (authoritative)
CVE-2026-69616	Remote Desktop Services				no	MSRC (authoritative)
CVE-2026-69630	Windows				no	MSRC (authoritative)
CVE-2026-69610	Windows				no	MSRC (authoritative)
CVE-2026-69613	Windows Image Acquisition				no	MSRC (authoritative)
CVE-2026-69669	Windows Kernel				no	MSRC (authoritative)
CVE-2026-69881	Windows				no	MSRC (authoritative)
CVE-2026-69680	Windows				no	MSRC (authoritative)
CVE-2026-69817	Windows Bluetooth Port Driver				no	MSRC (authoritative)
CVE-2026-69619	Windows	High	8.0		no	MSRC (authoritative)
CVE-2026-69620	Windows DHCP Server	High	8.1		no	MSRC (authoritative)
CVE-2026-69720	Windows MIDI Service Module				no	MSRC (authoritative)
CVE-2026-69821	Active Directory Certificate Services				no	MSRC (authoritative)
CVE-2026-69637	Windows DHCP Server				no	MSRC (authoritative)
CVE-2026-69682	Host Guardian Service	High	7.0		no	MSRC (authoritative)
CVE-2026-69685	Windows				no	MSRC (authoritative)
CVE-2026-69803	Windows DHCP Server	Medium	5.9		no	MSRC (authoritative)
CVE-2026-69643	Windows				no	MSRC (authoritative)
CVE-2026-69687	Windows				no	MSRC (authoritative)
CVE-2026-69791	Windows				no	MSRC (authoritative)
CVE-2026-69707	Windows				no	MSRC (authoritative)
CVE-2026-69652	Windows				no	MSRC (authoritative)
CVE-2026-69834	Windows				no	MSRC (authoritative)
CVE-2026-69654	Windows Accounts Control				no	MSRC (authoritative)
CVE-2026-69816	Windows Accounts Control				no	MSRC (authoritative)
CVE-2026-69714	Windows Device Association Service				no	MSRC (authoritative)
CVE-2026-69709	Windows	High	7.8		no	MSRC (authoritative)
CVE-2026-69844	Windows				no	MSRC (authoritative)
CVE-2026-69679	Windows DHCP Server				no	MSRC (authoritative)
CVE-2026-69866	Windows Device Association Service	High	7.0		no	MSRC (authoritative)
CVE-2026-69674	Windows Modern Device Management (MDM)				no	MSRC (authoritative)
CVE-2026-69688	Windows Encrypting File System	High	7.1		no	MSRC (authoritative)
CVE-2026-69841	Windows Encrypting File System				no	MSRC (authoritative)
CVE-2026-69727	Windows Biometric Service				no	MSRC (authoritative)
CVE-2026-69826	Windows Biometric Service				no	MSRC (authoritative)
CVE-2026-69738	Windows Biometric Service				no	MSRC (authoritative)
CVE-2026-69801	Windows Audio Service	High	7.8		no	MSRC (authoritative)
CVE-2026-69692	Windows Audio Service				no	MSRC (authoritative)
CVE-2026-69814	Windows	High	7.0		no	MSRC (authoritative)
CVE-2026-69731	Windows				no	MSRC (authoritative)
CVE-2026-69773	Windows Biometric Service				no	MSRC (authoritative)
CVE-2026-69794	Windows Encrypting File System				no	MSRC (authoritative)
CVE-2026-69706	Windows				no	MSRC (authoritative)
CVE-2026-69713	Windows Secure Boot				no	MSRC (authoritative)
CVE-2026-69793	Windows TCP/IP	High	7.5		no	MSRC (authoritative)
CVE-2026-69921	Windows Print Spooler				no	MSRC (authoritative)
CVE-2026-69779	Windows				no	MSRC (authoritative)
CVE-2026-69895	Windows				no	MSRC (authoritative)
CVE-2026-69672	Windows DNS	Medium	5.5		no	MSRC (authoritative)
CVE-2026-69809	Active Directory Domain Services	High	7.5		no	MSRC (authoritative)
CVE-2026-69792	Windows	Medium	4.7		no	MSRC (authoritative)
CVE-2026-69853	Windows				no	MSRC (authoritative)
CVE-2026-69761	Windows				no	MSRC (authoritative)
CVE-2026-69708	Windows Web Platform Storage	High	7.0		no	MSRC (authoritative)
CVE-2026-69878	Windows DHCP Server				no	MSRC (authoritative)
CVE-2026-69785	Windows				no	MSRC (authoritative)
CVE-2026-69907	Windows Enterprise App Management				no	MSRC (authoritative)
CVE-2026-69818	Windows				no	MSRC (authoritative)
CVE-2026-69900	Kernel Streaming WOW Thunk Service Driver				no	MSRC (authoritative)
CVE-2026-69891	Windows Media	High	7.0		no	MSRC (authoritative)
CVE-2026-69847	Windows DHCP Server				no	MSRC (authoritative)
CVE-2026-69911	Windows Search Component	High	7.0		no	MSRC (authoritative)
CVE-2026-69760	Windows Kerberos				no	MSRC (authoritative)
CVE-2026-69777	Windows DHCP Client				no	MSRC (authoritative)
CVE-2026-69807	PowerShell				no	MSRC (authoritative)
CVE-2026-69781	Windows DHCP Client				no	MSRC (authoritative)
CVE-2026-69876	Windows DHCP Server				no	MSRC (authoritative)
CVE-2026-69852	Windows Routing and Remote Access Service				no	MSRC (authoritative)
CVE-2026-69786	Windows				no	MSRC (authoritative)
CVE-2026-69799	Windows Hello				no	MSRC (authoritative)
CVE-2026-69813	Windows DNS Server				no	MSRC (authoritative)
CVE-2026-69710	Windows Hello	High	7.5		no	MSRC (authoritative)
CVE-2026-69858	Windows DNS Server				no	MSRC (authoritative)
CVE-2026-69874	Windows				no	MSRC (authoritative)
CVE-2026-69725	Windows Hello				no	MSRC (authoritative)
CVE-2026-69864	Windows Hello				no	MSRC (authoritative)
CVE-2026-69820	Windows Hello	High	8.2		no	MSRC (authoritative)
CVE-2026-69784	Windows Hello				no	MSRC (authoritative)
CVE-2026-64918	Office	Medium	6.5		no	MSRC (authoritative)
CVE-2026-70565	Windows				no	MSRC (authoritative)
CVE-2026-70574	Windows				no	MSRC (authoritative)
CVE-2026-70567	Windows Display Enhancement Service				no	MSRC (authoritative)
CVE-2026-70568	Windows Defender Firewall Service				no	MSRC (authoritative)
CVE-2026-70569	Windows				no	MSRC (authoritative)
CVE-2026-70573	Windows Biometric Service				no	MSRC (authoritative)
CVE-2026-70572	Windows Biometric Service				no	MSRC (authoritative)
CVE-2026-70575	Windows				no	MSRC (authoritative)
CVE-2026-70581	Windows Biometric Service				no	MSRC (authoritative)
CVE-2026-70577	Windows Modern Device Management				no	MSRC (authoritative)
CVE-2026-70578	Windows Credential Guard	High	7.0		no	MSRC (authoritative)
CVE-2026-70579	Windows Mobile Broadband	High	7.5		no	MSRC (authoritative)
CVE-2026-70583	Windows Core Messaging	High	7.8		no	MSRC (authoritative)
CVE-2026-71349	Windows	Medium	6.8		no	MSRC (authoritative)
CVE-2026-71342	Windows Remote Access Connection Manager				no	MSRC (authoritative)
CVE-2026-71352	Windows Remote Access Connection Manager				no	MSRC (authoritative)
CVE-2026-72927	Windows				no	MSRC (authoritative)
CVE-2026-72928	Windows DNS Server				no	MSRC (authoritative)
CVE-2026-72931	Windows Secure Socket Tunneling Protocol				no	MSRC (authoritative)
CVE-2026-72936	Windows SMB Client				no	MSRC (authoritative)
CVE-2026-72933	WDAC OLE DB provider for SQL				no	MSRC (authoritative)
CVE-2026-72932	Windows Message Queuing Queue Manager				no	MSRC (authoritative)
CVE-2026-72952	Windows				no	MSRC (authoritative)
CVE-2026-72953	Windows USB Driver				no	MSRC (authoritative)
CVE-2026-72941	Windows Biometric Service				no	MSRC (authoritative)
CVE-2026-72942	Windows	Medium	6.5		no	MSRC (authoritative)
CVE-2026-72957	Windows Deployment Services				no	MSRC (authoritative)
CVE-2026-72950	Routing and Remote Access Service				no	MSRC (authoritative)
CVE-2026-72959	Routing and Remote Access Service	High	8.8		no	MSRC (authoritative)
CVE-2026-72954	Windows Deployment Services				no	MSRC (authoritative)
CVE-2026-72960	Windows Media Player				no	MSRC (authoritative)
CVE-2026-72961	Hyper-V				no	MSRC (authoritative)
CVE-2026-72964	Internet Connection Sharing				no	MSRC (authoritative)
CVE-2026-72966	Windows				no	MSRC (authoritative)
CVE-2026-72967	Windows	High	7.8		no	MSRC (authoritative)
CVE-2026-69352	Windows Biometric Service				no	MSRC (authoritative)
CVE-2026-69392	Windows Shell				no	MSRC (authoritative)
CVE-2026-69395	Active Directory Certificate Services				no	MSRC (authoritative)
CVE-2026-69397	OpenSSH for Windows				no	MSRC (authoritative)
CVE-2026-69402	SharePoint				no	MSRC (authoritative)
CVE-2026-69409	SharePoint				no	MSRC (authoritative)
CVE-2026-69417	SharePoint				no	MSRC (authoritative)
CVE-2026-69426	Windows				no	MSRC (authoritative)
CVE-2026-69489	Windows Biometric Service	High	7.8		no	MSRC (authoritative)
CVE-2026-69490	Windows USB Mass Storage Class Driver	Medium	6.8		no	MSRC (authoritative)
CVE-2026-69499	Windows Imaging Component	High	8.8		no	MSRC (authoritative)
CVE-2026-69510	Windows DHCP Server	High	8.1		no	MSRC (authoritative)
CVE-2026-69560	Windows Work Folder Service				no	MSRC (authoritative)
CVE-2026-69564	Windows				no	MSRC (authoritative)
CVE-2026-69593	Windows Biometric Service				no	MSRC (authoritative)
CVE-2026-69568	Windows Storage Spaces Controller	Medium	5.5		no	MSRC (authoritative)
CVE-2026-69575	Windows Storage Spaces Controller				no	MSRC (authoritative)
CVE-2026-69607	Windows Deployment Services	High	7.5		no	MSRC (authoritative)
CVE-2026-69601	Windows Media Foundation				no	MSRC (authoritative)
CVE-2026-69442	Office				no	MSRC (authoritative)
CVE-2026-69615	Office SharePoint	Low	3.5		no	MSRC (authoritative)
CVE-2026-69464	SharePoint	High	8.8		no	MSRC (authoritative)
CVE-2026-69614	Office Access	High	8.8		no	MSRC (authoritative)
CVE-2026-69636	SharePoint				no	MSRC (authoritative)
CVE-2026-69629	Office Outlook				no	MSRC (authoritative)
CVE-2026-69477	Office Access				no	MSRC (authoritative)
CVE-2026-69626	Office				no	MSRC (authoritative)
CVE-2026-69632	Office	High	8.8		no	MSRC (authoritative)
CVE-2026-69439	.NET	High	8.8		no	MSRC (authoritative)
CVE-2026-69805	.NET				no	MSRC (authoritative)
CVE-2026-58649	.NET	Medium	6.5		no	MSRC (authoritative)
CVE-2026-69441	Windows Installer				no	MSRC (authoritative)
CVE-2026-69904	SharePoint				no	MSRC (authoritative)
CVE-2026-69906	Windows Secure Kernel Mode				no	MSRC (authoritative)
CVE-2026-70203	Windows Media Player				no	MSRC (authoritative)
CVE-2026-70570	Routing and Remote Access Service				no	MSRC (authoritative)
CVE-2026-72956	Office PowerPoint				no	MSRC (authoritative)
CVE-2026-72972	Office Word				no	MSRC (authoritative)
CVE-2026-72938	Office				no	MSRC (authoritative)
CVE-2026-72973	Office				no	MSRC (authoritative)
CVE-2026-72974	Office Excel				no	MSRC (authoritative)
CVE-2026-72977	Office PowerPoint	Medium	6.5		no	MSRC (authoritative)
CVE-2026-72975	PowerPoint				no	MSRC (authoritative)
CVE-2026-72976	Office Word	Medium	5.0		no	MSRC (authoritative)
CVE-2026-72985	Windows	Medium	6.8		no	MSRC (authoritative)
CVE-2026-65812	Teams for Android				no	MSRC (authoritative)
CVE-2026-69304	ASP.NET Core				no	MSRC (authoritative)
CVE-2026-72989	Windows Failover Cluster				no	MSRC (authoritative)
CVE-2026-72987	Windows DNS	High	8.1		no	MSRC (authoritative)
CVE-2026-72995	Windows Biometric Service				no	MSRC (authoritative)
CVE-2026-72988	Windows Biometric Service				no	MSRC (authoritative)
CVE-2026-72990	Windows Biometric Service				no	MSRC (authoritative)
CVE-2026-72991	Windows Biometric Service				no	MSRC (authoritative)
CVE-2026-72992	Windows Biometric Service				no	MSRC (authoritative)
CVE-2026-72993	Windows Biometric Service	High	7.8		no	MSRC (authoritative)
CVE-2026-72994	Windows Biometric Service				no	MSRC (authoritative)
CVE-2026-72996	Windows Biometric Service	High	7.8		no	MSRC (authoritative)
CVE-2026-72997	Windows Biometric Service				no	MSRC (authoritative)
CVE-2026-73018	Graphic Fonts	High	8.8		no	MSRC (authoritative)
CVE-2026-73019	Windows				no	MSRC (authoritative)
CVE-2026-72999	Windows USB Hub Driver				no	MSRC (authoritative)
CVE-2026-73002	Windows Biometric Service				no	MSRC (authoritative)
CVE-2026-73020	Windows Biometric Service				no	MSRC (authoritative)
CVE-2026-73000	Windows Biometric Service				no	MSRC (authoritative)
CVE-2026-73001	Windows Biometric Service				no	MSRC (authoritative)
CVE-2026-73021	Windows Biometric Service	High	7.8		no	MSRC (authoritative)
CVE-2026-73015	Windows Biometric Service				no	MSRC (authoritative)
CVE-2026-73003	Windows Modern Device Management				no	MSRC (authoritative)
CVE-2026-73022	Windows Modern Device Management				no	MSRC (authoritative)
CVE-2026-73011	Windows Biometric Service				no	MSRC (authoritative)
CVE-2026-73014	Data Sharing Service Client				no	MSRC (authoritative)
CVE-2026-73008	Windows Biometric Service				no	MSRC (authoritative)
CVE-2026-73005	Windows Authentication Methods				no	MSRC (authoritative)
CVE-2026-73024	Windows Services for NFS				no	MSRC (authoritative)
CVE-2026-73007	Windows Biometric Service	High	7.8		no	MSRC (authoritative)
CVE-2026-73026	Windows Biometric Service				no	MSRC (authoritative)
CVE-2026-73004	Windows Autopilot				no	MSRC (authoritative)
CVE-2026-73012	Windows Management Services				no	MSRC (authoritative)
CVE-2026-73006	Graphics Component				no	MSRC (authoritative)
CVE-2026-73023	Windows Imaging Component				no	MSRC (authoritative)
CVE-2026-73013	Windows Imaging Component				no	MSRC (authoritative)
CVE-2026-73016	Graphics Component				no	MSRC (authoritative)
CVE-2026-73017	Windows Graphics Kernel				no	MSRC (authoritative)
CVE-2026-71328	Visual Studio				no	MSRC (authoritative)
CVE-2026-73028	SQL Server				no	MSRC (authoritative)
CVE-2026-77480	SQL Server				no	MSRC (authoritative)
CVE-2026-77483	SQL Server				no	MSRC (authoritative)
CVE-2026-77484	SQL Server				no	MSRC (authoritative)
CVE-2026-77487	SQL Server				no	MSRC (authoritative)
CVE-2026-77485	SQL Server				no	MSRC (authoritative)
CVE-2026-77486	SQL Server	High	8.8		no	MSRC (authoritative)
CVE-2026-77488	SQL Server				no	MSRC (authoritative)
CVE-2026-77901	Office Word				no	MSRC (authoritative)
CVE-2026-77905	Windows Management Instrumentation				no	MSRC (authoritative)
CVE-2026-77911	Office Word				no	MSRC (authoritative)
CVE-2026-69562	SQL Server				no	MSRC (authoritative)
CVE-2026-78442	Windows OLE DB				no	MSRC (authoritative)
CVE-2026-78441	Windows OLE DB				no	MSRC (authoritative)
CVE-2026-78446	Windows Distributed File System				no	MSRC (authoritative)
CVE-2026-78449	Windows Reliable Multicast Transport Driver (RMCAST)	High	8.1		no	MSRC (authoritative)
CVE-2026-78444	Windows Failover Cluster				no	MSRC (authoritative)
CVE-2026-78450	Windows Reliable Multicast Transport Driver				no	MSRC (authoritative)
CVE-2026-78447	Windows Biometric Service				no	MSRC (authoritative)
CVE-2026-78448	Windows Biometric Service	High	7.8		no	MSRC (authoritative)
CVE-2026-78451	Windows				no	MSRC (authoritative)
CVE-2026-78453	Windows SCSI Class System File	Medium	6.5		no	MSRC (authoritative)
CVE-2026-78455	Xbox				no	MSRC (authoritative)
CVE-2026-78452	Windows				no	MSRC (authoritative)
CVE-2026-78454	Windows CD-ROM Driver	Medium	5.5		no	MSRC (authoritative)
CVE-2026-78456	SQL Server				no	MSRC (authoritative)
CVE-2026-78457	Windows Security Health Service				no	MSRC (authoritative)
CVE-2026-78462	Visual Studio Code				no	MSRC (authoritative)
CVE-2026-78464	Windows MIDI Service Module				no	MSRC (authoritative)
CVE-2026-67369	SQL Server				no	MSRC (authoritative)
CVE-2026-78507	Office Word				no	MSRC (authoritative)
CVE-2026-78506	Office Word				no	MSRC (authoritative)
CVE-2026-78512	Office				no	MSRC (authoritative)
CVE-2026-78514	Office Word	High	8.8		no	MSRC (authoritative)
CVE-2026-78503	Office Word				no	MSRC (authoritative)
CVE-2026-78516	Windows Storage	Medium	4.3		no	MSRC (authoritative)
CVE-2026-67624	SQL Server				no	MSRC (authoritative)
CVE-2026-67645	SQL Server				no	MSRC (authoritative)
CVE-2026-77481	SQL Server				no	MSRC (authoritative)
CVE-2026-78519	Office Outlook				no	MSRC (authoritative)
CVE-2026-80079	Office				no	MSRC (authoritative)
CVE-2026-78521	Office Word				no	MSRC (authoritative)
CVE-2026-80073	Office Outlook				no	MSRC (authoritative)
CVE-2026-78522	Office Word				no	MSRC (authoritative)
CVE-2026-78520	Office Outlook				no	MSRC (authoritative)
CVE-2026-78524	Office				no	MSRC (authoritative)
CVE-2026-80078	Office				no	MSRC (authoritative)
CVE-2026-80076	Office				no	MSRC (authoritative)
CVE-2026-78526	Office Word				no	MSRC (authoritative)
CVE-2026-80084	Office Outlook				no	MSRC (authoritative)
CVE-2026-78525	Office Outlook				no	MSRC (authoritative)
CVE-2026-80086	PowerPoint				no	MSRC (authoritative)
CVE-2026-80080	Office Word				no	MSRC (authoritative)
CVE-2026-80087	Office				no	MSRC (authoritative)
CVE-2026-80085	Office				no	MSRC (authoritative)
CVE-2026-80088	Office				no	MSRC (authoritative)
CVE-2026-80091	Office				no	MSRC (authoritative)
CVE-2026-80089	Office				no	MSRC (authoritative)
CVE-2026-80090	Office				no	MSRC (authoritative)
CVE-2026-80081	PowerPoint	High	8.8		no	MSRC (authoritative)
CVE-2026-80082	Office				no	MSRC (authoritative)
CVE-2026-80096	Windows Remote Desktop Services				no	MSRC (authoritative)
CVE-2026-81352	Windows Codecs Library				no	MSRC (authoritative)
CVE-2026-81353	HEIF Image Extensions				no	MSRC (authoritative)
CVE-2026-81354	Windows Hello				no	MSRC (authoritative)
CVE-2026-81383	Visual Studio Code				no	MSRC (authoritative)
CVE-2026-81385	Office Publisher				no	MSRC (authoritative)
CVE-2026-81398	Excel				no	MSRC (authoritative)
CVE-2026-81386	Excel				no	MSRC (authoritative)
CVE-2026-81947	Excel				no	MSRC (authoritative)
CVE-2026-81387	Excel				no	MSRC (authoritative)
CVE-2026-81954	Excel				no	MSRC (authoritative)
CVE-2026-81390	Excel				no	MSRC (authoritative)
CVE-2026-81399	Excel				no	MSRC (authoritative)
CVE-2026-81391	Excel				no	MSRC (authoritative)
CVE-2026-81401	Excel				no	MSRC (authoritative)
CVE-2026-81958	Excel				no	MSRC (authoritative)
CVE-2026-81396	Excel				no	MSRC (authoritative)
CVE-2026-81392	Excel				no	MSRC (authoritative)
CVE-2026-81397	Excel				no	MSRC (authoritative)
CVE-2026-81956	Excel				no	MSRC (authoritative)
CVE-2026-81393	Excel	Medium	5.5		no	MSRC (authoritative)
CVE-2026-81400	Excel				no	MSRC (authoritative)
CVE-2026-81389	Excel				no	MSRC (authoritative)
CVE-2026-81394	Excel				no	MSRC (authoritative)
CVE-2026-81960	Excel				no	MSRC (authoritative)
CVE-2026-81395	Excel				no	MSRC (authoritative)
CVE-2026-81957	Excel				no	MSRC (authoritative)
CVE-2026-81388	Excel				no	MSRC (authoritative)
CVE-2026-81955	Windows Graphics Component				no	MSRC (authoritative)
CVE-2026-81951	Excel				no	MSRC (authoritative)
CVE-2026-81952	Word				no	MSRC (authoritative)
CVE-2026-81959	Excel				no	MSRC (authoritative)
CVE-2026-81953	Excel				no	MSRC (authoritative)
CVE-2026-81949	Excel				no	MSRC (authoritative)
CVE-2026-81950	Excel				no	MSRC (authoritative)
CVE-2026-81948	Excel				no	MSRC (authoritative)
CVE-2026-77906	Visual Studio				no	MSRC (authoritative)
CVE-2026-83940	Windows				no	MSRC (authoritative)
CVE-2026-83939	Windows Secure Kernel Mode				no	MSRC (authoritative)
CVE-2026-77897	Power Automate Desktop				no	MSRC (authoritative)
CVE-2026-83948	Azure CLI				no	MSRC (authoritative)
CVE-2026-83951	Office Word				no	MSRC (authoritative)
CVE-2026-83949	Office Word				no	MSRC (authoritative)
CVE-2026-69530	Windows Reliable Multicast Transport Driver				no	MSRC (authoritative)
CVE-2026-69381	Windows Storage Port Driver				no	MSRC (authoritative)
CVE-2026-72965	Windows WebClient Service				no	MSRC (authoritative)
CVE-2026-69598	Windows				no	MSRC (authoritative)
CVE-2026-83971	Windows Biometric Service				no	MSRC (authoritative)
CVE-2026-83954	Windows Biometric Service				no	MSRC (authoritative)
CVE-2026-83967	Windows Biometric Service				no	MSRC (authoritative)
CVE-2026-83970	Windows Biometric Service				no	MSRC (authoritative)
CVE-2026-83972	Windows Biometric Service				no	MSRC (authoritative)
CVE-2026-83968	Windows Biometric Service				no	MSRC (authoritative)
CVE-2026-70145	Windows Search Component				no	MSRC (authoritative)
CVE-2026-83973	Windows Biometric Service				no	MSRC (authoritative)
CVE-2026-83981	Windows Biometric Service				no	MSRC (authoritative)
CVE-2026-83977	Windows Biometric Service				no	MSRC (authoritative)
CVE-2026-83978	Windows Biometric Service				no	MSRC (authoritative)
CVE-2026-83982	Windows Biometric Service				no	MSRC (authoritative)
CVE-2026-83980	Windows Biometric Service	High	7.8		no	MSRC (authoritative)
CVE-2026-83987	Windows Biometric Service				no	MSRC (authoritative)
CVE-2026-83983	Windows Biometric Service				no	MSRC (authoritative)
CVE-2026-83985	Windows Biometric Service				no	MSRC (authoritative)
CVE-2026-83989	Windows Services for NFS				no	MSRC (authoritative)
CVE-2026-83990	Graphics Component				no	MSRC (authoritative)
CVE-2026-83992	Windows Imaging Component				no	MSRC (authoritative)
CVE-2026-83995	Windows				no	MSRC (authoritative)
CVE-2026-83997	Windows Message Queuing				no	MSRC (authoritative)
CVE-2026-84000	Graphics Component				no	MSRC (authoritative)
CVE-2026-69806	.NET				no	MSRC (authoritative)
CVE-2026-85875	Excel				no	MSRC (authoritative)
CVE-2026-83501	Windows				no	MSRC (authoritative)
CVE-2026-83498	Windows				no	MSRC (authoritative)
CVE-2026-84003	Authentication Library (MSAL) for Node.js				no	MSRC (authoritative)
CVE-2026-66303	Skype for Business				no	MSRC (authoritative)
CVE-2026-66307	Skype for Business				no	MSRC (authoritative)

CVE-2026-62916

CVE-2026-62916 is an authentication bypass vulnerability in Microsoft Entra ID arising from the use of an alternate path or channel. This vulnerability permits an unauthorized remote attacker to perform privilege escalation within the identity management environment.

Affected products:

Entra ID

Source: https://nvd.nist.gov/vuln/detail/CVE-2026-62916

Related in this roundup: CVE-2026-83941.

CVE-2026-70352

CVE-2026-70352 describes a critical vulnerability in Microsoft's Azure AI Language service where a missing authentication control on a critical function allows an unauthorized remote attacker to perform privilege escalation. The vulnerability carries a CVSS base score of 10.0, indicating high severity and potential for exploitation over a network.

Affected products:

Azure AI Language

Source: https://nvd.nist.gov/vuln/detail/CVE-2026-70352

CVE-2026-80098

CVE-2026-80098 is a vulnerability in Microsoft Copilot Studio involving improper verification of cryptographic signatures. This flaw allows an unauthorized attacker to perform a privilege escalation attack over a network, presenting a significant security risk given its high CVSS base score.

Affected products:

Copilot Studio

Source: https://nvd.nist.gov/vuln/detail/CVE-2026-80098

CVE-2026-83711

An authorization bypass vulnerability exists in Microsoft Azure Active Directory B2C due to improper handling of user-controlled keys. An unauthenticated attacker can exploit this flaw over the network to elevate privileges, leading to a critical security impact.

Affected products:

Azure Active Directory B2C

Source: https://nvd.nist.gov/vuln/detail/CVE-2026-83711

CVE-2026-62906

CVE-2026-62906 describes an improper neutralization of special elements in data query logic within Microsoft Discovery Studio. This vulnerability allows an unauthorized remote attacker to perform unauthorized data disclosure over a network, potentially exposing sensitive information due to flawed query handling.

Affected products:

Discovery Studio

Source: https://nvd.nist.gov/vuln/detail/CVE-2026-62906

CVE-2026-65818

CVE-2026-65818 is a server-side request forgery (SSRF) vulnerability in Microsoft Power Automate that enables an authorized attacker to perform privilege escalation over a network.

Affected products:

Power Automate

Source: https://nvd.nist.gov/vuln/detail/CVE-2026-65818

CVE-2026-69857

CVE-2026-69857 describes an authorization bypass vulnerability in Azure Cosmos DB, where a user-controlled key allows an already authorized attacker to perform network spoofing, potentially escalating access or manipulating data communication.

Affected products:

Azure Cosmos DB

Source: https://nvd.nist.gov/vuln/detail/CVE-2026-69857

CVE-2026-70178

CVE-2026-70178 is a privilege escalation vulnerability in Microsoft Fabric caused by a missing authorization check, which allows an attacker with existing network access to gain unauthorized elevated privileges.

Affected products:

Fabric

Source: https://nvd.nist.gov/vuln/detail/CVE-2026-70178

CVE-2026-81963

CVE-2026-81963 is a link following vulnerability in the Microsoft Windows Update Stack that allows a local attacker to escalate privileges to SYSTEM. Detection engineers should prioritize patching affected assets in accordance with CISA's BOD 26-04 guidelines.

Affected products:

Windows

Source: https://www.cve.org/CVERecord?id=CVE-2026-81963

Related in this roundup: CVE-2026-85880, CVE-2026-69496, CVE-2026-69586, CVE-2026-69768, CVE-2026-73025, CVE-2026-56172, CVE-2026-68832, CVE-2026-68834, CVE-2026-68838, CVE-2026-68841, CVE-2026-68875, CVE-2026-68877, CVE-2026-68880, CVE-2026-69265, CVE-2026-69270, CVE-2026-69274, CVE-2026-69275, CVE-2026-69280, CVE-2026-69283, CVE-2026-69284, CVE-2026-69289, CVE-2026-69296, CVE-2026-69300, CVE-2026-69301, CVE-2026-69307, CVE-2026-69312, CVE-2026-69314, CVE-2026-69332, CVE-2026-69333, CVE-2026-69335, CVE-2026-68833, CVE-2026-68851, CVE-2026-69366, CVE-2026-69337, CVE-2026-69347, CVE-2026-69379, CVE-2026-69390, CVE-2026-69401, CVE-2026-69413, CVE-2026-69420, CVE-2026-69429, CVE-2026-69448, CVE-2026-69455, CVE-2026-69532, CVE-2026-69472, CVE-2026-69479, CVE-2026-69531, CVE-2026-69517, CVE-2026-69505, CVE-2026-69504, CVE-2026-69527, CVE-2026-69549, CVE-2026-69588, CVE-2026-69609, CVE-2026-69648, CVE-2026-69689, CVE-2026-69790, CVE-2026-69638, CVE-2026-69859, CVE-2026-69717, CVE-2026-69711, CVE-2026-69875, CVE-2026-69889, CVE-2026-69757, CVE-2026-69741, CVE-2026-69762, CVE-2026-69744, CVE-2026-69832, CVE-2026-69691, CVE-2026-69808, CVE-2026-69775, CVE-2026-69822, CVE-2026-69770, CVE-2026-69676, CVE-2026-70289, CVE-2026-70563, CVE-2026-71329, CVE-2026-71332, CVE-2026-71350, CVE-2026-71348, CVE-2026-71345, CVE-2026-69469, CVE-2026-69501, CVE-2026-69548, CVE-2026-69846, CVE-2026-70283, CVE-2026-72981, CVE-2026-77491, CVE-2026-77492, CVE-2026-77503, CVE-2026-80093, CVE-2026-72949, CVE-2026-70019, CVE-2026-72940, CVE-2026-69573, CVE-2026-70290, CVE-2026-83991, CVE-2026-83999, CVE-2026-69321, CVE-2026-69316, CVE-2026-69340, CVE-2026-69348, CVE-2026-69350, CVE-2026-69353, CVE-2026-69357, CVE-2026-69393, CVE-2026-69410, CVE-2026-69421, CVE-2026-69428, CVE-2026-69425, CVE-2026-69427, CVE-2026-69434, CVE-2026-69456, CVE-2026-69459, CVE-2026-69478, CVE-2026-69561, CVE-2026-69512, CVE-2026-69498, CVE-2026-69571, CVE-2026-69535, CVE-2026-69538, CVE-2026-69591, CVE-2026-69566, CVE-2026-69567, CVE-2026-69584, CVE-2026-69617, CVE-2026-69630, CVE-2026-69610, CVE-2026-69881, CVE-2026-69680, CVE-2026-69619, CVE-2026-69685, CVE-2026-69643, CVE-2026-69687, CVE-2026-69791, CVE-2026-69707, CVE-2026-69652, CVE-2026-69834, CVE-2026-69709, CVE-2026-69844, CVE-2026-69814, CVE-2026-69731, CVE-2026-69706, CVE-2026-69779, CVE-2026-69895, CVE-2026-69792, CVE-2026-69853, CVE-2026-69761, CVE-2026-69785, CVE-2026-69818, CVE-2026-69786, CVE-2026-69874, CVE-2026-70565, CVE-2026-70574, CVE-2026-70569, CVE-2026-70575, CVE-2026-71349, CVE-2026-72927, CVE-2026-72952, CVE-2026-72942, CVE-2026-72966, CVE-2026-72967, CVE-2026-69426, CVE-2026-69564, CVE-2026-72985, CVE-2026-73019, CVE-2026-78451, CVE-2026-78452, CVE-2026-83940, CVE-2026-69598, CVE-2026-83995, CVE-2026-83501, CVE-2026-83498.

CVE-2026-85880

A heap-based buffer overflow vulnerability exists in the Microsoft Windows Advanced Local Procedure Call (ALPC) component, which can be exploited by a local attacker to achieve privilege escalation.

Affected products:

Windows

Source: https://www.cve.org/CVERecord?id=CVE-2026-85880

Related in this roundup: CVE-2026-81963, CVE-2026-69496, CVE-2026-69586, CVE-2026-69768, CVE-2026-73025, CVE-2026-56172, CVE-2026-68832, CVE-2026-68834, CVE-2026-68838, CVE-2026-68841, CVE-2026-68875, CVE-2026-68877, CVE-2026-68880, CVE-2026-69265, CVE-2026-69270, CVE-2026-69274, CVE-2026-69275, CVE-2026-69280, CVE-2026-69283, CVE-2026-69284, CVE-2026-69289, CVE-2026-69296, CVE-2026-69300, CVE-2026-69301, CVE-2026-69307, CVE-2026-69312, CVE-2026-69314, CVE-2026-69332, CVE-2026-69333, CVE-2026-69335, CVE-2026-68833, CVE-2026-68851, CVE-2026-69366, CVE-2026-69337, CVE-2026-69347, CVE-2026-69379, CVE-2026-69390, CVE-2026-69401, CVE-2026-69413, CVE-2026-69420, CVE-2026-69429, CVE-2026-69448, CVE-2026-69455, CVE-2026-69532, CVE-2026-69472, CVE-2026-69479, CVE-2026-69531, CVE-2026-69517, CVE-2026-69505, CVE-2026-69504, CVE-2026-69527, CVE-2026-69549, CVE-2026-69588, CVE-2026-69609, CVE-2026-69648, CVE-2026-69689, CVE-2026-69790, CVE-2026-69638, CVE-2026-69859, CVE-2026-69717, CVE-2026-69711, CVE-2026-69875, CVE-2026-69889, CVE-2026-69757, CVE-2026-69741, CVE-2026-69762, CVE-2026-69744, CVE-2026-69832, CVE-2026-69691, CVE-2026-69808, CVE-2026-69775, CVE-2026-69822, CVE-2026-69770, CVE-2026-69676, CVE-2026-70289, CVE-2026-70563, CVE-2026-71329, CVE-2026-71332, CVE-2026-71350, CVE-2026-71348, CVE-2026-71345, CVE-2026-69469, CVE-2026-69501, CVE-2026-69548, CVE-2026-69846, CVE-2026-70283, CVE-2026-72981, CVE-2026-77491, CVE-2026-77492, CVE-2026-77503, CVE-2026-80093, CVE-2026-72949, CVE-2026-70019, CVE-2026-72940, CVE-2026-69573, CVE-2026-70290, CVE-2026-83991, CVE-2026-83999, CVE-2026-69321, CVE-2026-69316, CVE-2026-69340, CVE-2026-69348, CVE-2026-69350, CVE-2026-69353, CVE-2026-69357, CVE-2026-69393, CVE-2026-69410, CVE-2026-69421, CVE-2026-69428, CVE-2026-69425, CVE-2026-69427, CVE-2026-69434, CVE-2026-69456, CVE-2026-69459, CVE-2026-69478, CVE-2026-69561, CVE-2026-69512, CVE-2026-69498, CVE-2026-69571, CVE-2026-69535, CVE-2026-69538, CVE-2026-69591, CVE-2026-69566, CVE-2026-69567, CVE-2026-69584, CVE-2026-69617, CVE-2026-69630, CVE-2026-69610, CVE-2026-69881, CVE-2026-69680, CVE-2026-69619, CVE-2026-69685, CVE-2026-69643, CVE-2026-69687, CVE-2026-69791, CVE-2026-69707, CVE-2026-69652, CVE-2026-69834, CVE-2026-69709, CVE-2026-69844, CVE-2026-69814, CVE-2026-69731, CVE-2026-69706, CVE-2026-69779, CVE-2026-69895, CVE-2026-69792, CVE-2026-69853, CVE-2026-69761, CVE-2026-69785, CVE-2026-69818, CVE-2026-69786, CVE-2026-69874, CVE-2026-70565, CVE-2026-70574, CVE-2026-70569, CVE-2026-70575, CVE-2026-71349, CVE-2026-72927, CVE-2026-72952, CVE-2026-72942, CVE-2026-72966, CVE-2026-72967, CVE-2026-69426, CVE-2026-69564, CVE-2026-72985, CVE-2026-73019, CVE-2026-78451, CVE-2026-78452, CVE-2026-83940, CVE-2026-69598, CVE-2026-83995, CVE-2026-83501, CVE-2026-83498.

CVE-2026-65669

CVE-2026-65669 describes an injection vulnerability in Microsoft SQL Server that allows an unauthorized network-based attacker to escalate privileges. The vulnerability stems from improper neutralization of special elements in output used by a downstream component.

Affected products:

SQL Server

Source: https://nvd.nist.gov/vuln/detail/CVE-2026-65669

Related in this roundup: CVE-2026-47297, CVE-2026-66814, CVE-2026-66818, CVE-2026-66819, CVE-2026-66820, CVE-2026-67368, CVE-2026-67370, CVE-2026-67373, CVE-2026-67376, CVE-2026-67378, CVE-2026-67379, CVE-2026-67380, CVE-2026-67381, CVE-2026-67384, CVE-2026-67385, CVE-2026-67388, CVE-2026-67631, CVE-2026-67636, CVE-2026-67638, CVE-2026-67639, CVE-2026-67642, CVE-2026-67643, CVE-2026-68775, CVE-2026-68786, CVE-2026-68787, CVE-2026-77482, CVE-2026-67629, CVE-2026-67630, CVE-2026-67633, CVE-2026-68781, CVE-2026-68784, CVE-2026-68785, CVE-2026-67383, CVE-2026-67389, CVE-2026-73029, CVE-2026-66816, CVE-2026-67386, CVE-2026-67390, CVE-2026-67393, CVE-2026-67641, CVE-2026-67648, CVE-2026-68776, CVE-2026-68777, CVE-2026-68778, CVE-2026-68779, CVE-2026-68780, CVE-2026-73028, CVE-2026-77480, CVE-2026-77483, CVE-2026-77484, CVE-2026-77487, CVE-2026-77485, CVE-2026-77486, CVE-2026-77488, CVE-2026-69562, CVE-2026-78456, CVE-2026-67369, CVE-2026-67624, CVE-2026-67645, CVE-2026-77481.

CVE-2026-68839

CVE-2026-68839 is a heap-based buffer overflow vulnerability within the Windows USB Mass Storage Class Driver. An unauthorized remote attacker can exploit this flaw to achieve remote code execution, indicating a significant security risk for Windows systems that interact with malicious USB mass storage devices over a network context.

Affected products:

Windows USB Mass Storage Class Driver

Source: https://nvd.nist.gov/vuln/detail/CVE-2026-68839

Related in this roundup: CVE-2026-69490.

CVE-2026-69276

CVE-2026-69276 describes an integer underflow vulnerability within the Microsoft UxTheme Library (uxtheme.dll). An unauthenticated attacker can exploit this flaw to achieve remote code execution over a network, carrying a CVSS base score of 9.8.

Affected products:

UxTheme Library

Source: https://nvd.nist.gov/vuln/detail/CVE-2026-69276

CVE-2026-69356

CVE-2026-69356 describes a cross-site scripting (XSS) vulnerability in Microsoft Exchange Server resulting from improper input neutralization. This flaw enables an unauthorized network-based attacker to perform spoofing activities by injecting malicious content into generated web pages.

Affected products:

Exchange Server

Source: https://nvd.nist.gov/vuln/detail/CVE-2026-69356

Related in this roundup: CVE-2026-69641, CVE-2026-55007, CVE-2026-69355, CVE-2026-69361, CVE-2026-69375, CVE-2026-69378, CVE-2026-69380, CVE-2026-69382.

CVE-2026-69408

CVE-2026-69408 describes an integer overflow or wraparound vulnerability within the Microsoft Windows Media Foundation component. This flaw can be exploited by a remote, unauthorized attacker to achieve remote code execution (RCE) over a network, presenting a high risk as indicated by a CVSS v3.1 base score of 9.8.

Affected products:

Windows Media Foundation

Source: https://nvd.nist.gov/vuln/detail/CVE-2026-69408

Related in this roundup: CVE-2026-62744, CVE-2026-62706, CVE-2026-69386, CVE-2026-69511, CVE-2026-69601.

CVE-2026-69463

CVE-2026-69463 is a heap-based buffer overflow vulnerability located in the Windows NTFS implementation. The vulnerability allows an unauthorized attacker to achieve remote code execution over a network, carrying a CVSS v3.1 base score of 9.8.

Affected products:

NTFS

Source: https://nvd.nist.gov/vuln/detail/CVE-2026-69463

CVE-2026-69491

CVE-2026-69491 is a critical heap-based buffer overflow vulnerability within the Microsoft DirectMusic component of Windows. An unauthenticated attacker can exploit this flaw remotely over a network to achieve arbitrary code execution on the target system.

Affected products:

DirectMusic

Source: https://nvd.nist.gov/vuln/detail/CVE-2026-69491

CVE-2026-69493

CVE-2026-69493 describes an out-of-bounds read vulnerability in the Windows Event Logging Service that can be exploited by an unauthorized remote attacker to achieve remote code execution. The vulnerability is rated with a CVSS v3.1 base score of 9.8, indicating a critical severity due to the potential for network-based exploitation.

Affected products:

Windows Event Logging Service

Source: https://nvd.nist.gov/vuln/detail/CVE-2026-69493

Related in this roundup: CVE-2026-69494, CVE-2026-69495.

CVE-2026-69496

CVE-2026-69496 is a heap-based buffer overflow vulnerability within the Windows Compressed Folder feature. This vulnerability allows an unauthenticated, remote attacker to achieve remote code execution on an affected system via network-based exploitation.

Affected products:

Windows

Source: https://nvd.nist.gov/vuln/detail/CVE-2026-69496

Related in this roundup: CVE-2026-81963, CVE-2026-85880, CVE-2026-69586, CVE-2026-69768, CVE-2026-73025, CVE-2026-56172, CVE-2026-68832, CVE-2026-68834, CVE-2026-68838, CVE-2026-68841, CVE-2026-68875, CVE-2026-68877, CVE-2026-68880, CVE-2026-69265, CVE-2026-69270, CVE-2026-69274, CVE-2026-69275, CVE-2026-69280, CVE-2026-69283, CVE-2026-69284, CVE-2026-69289, CVE-2026-69296, CVE-2026-69300, CVE-2026-69301, CVE-2026-69307, CVE-2026-69312, CVE-2026-69314, CVE-2026-69332, CVE-2026-69333, CVE-2026-69335, CVE-2026-68833, CVE-2026-68851, CVE-2026-69366, CVE-2026-69337, CVE-2026-69347, CVE-2026-69379, CVE-2026-69390, CVE-2026-69401, CVE-2026-69413, CVE-2026-69420, CVE-2026-69429, CVE-2026-69448, CVE-2026-69455, CVE-2026-69532, CVE-2026-69472, CVE-2026-69479, CVE-2026-69531, CVE-2026-69517, CVE-2026-69505, CVE-2026-69504, CVE-2026-69527, CVE-2026-69549, CVE-2026-69588, CVE-2026-69609, CVE-2026-69648, CVE-2026-69689, CVE-2026-69790, CVE-2026-69638, CVE-2026-69859, CVE-2026-69717, CVE-2026-69711, CVE-2026-69875, CVE-2026-69889, CVE-2026-69757, CVE-2026-69741, CVE-2026-69762, CVE-2026-69744, CVE-2026-69832, CVE-2026-69691, CVE-2026-69808, CVE-2026-69775, CVE-2026-69822, CVE-2026-69770, CVE-2026-69676, CVE-2026-70289, CVE-2026-70563, CVE-2026-71329, CVE-2026-71332, CVE-2026-71350, CVE-2026-71348, CVE-2026-71345, CVE-2026-69469, CVE-2026-69501, CVE-2026-69548, CVE-2026-69846, CVE-2026-70283, CVE-2026-72981, CVE-2026-77491, CVE-2026-77492, CVE-2026-77503, CVE-2026-80093, CVE-2026-72949, CVE-2026-70019, CVE-2026-72940, CVE-2026-69573, CVE-2026-70290, CVE-2026-83991, CVE-2026-83999, CVE-2026-69321, CVE-2026-69316, CVE-2026-69340, CVE-2026-69348, CVE-2026-69350, CVE-2026-69353, CVE-2026-69357, CVE-2026-69393, CVE-2026-69410, CVE-2026-69421, CVE-2026-69428, CVE-2026-69425, CVE-2026-69427, CVE-2026-69434, CVE-2026-69456, CVE-2026-69459, CVE-2026-69478, CVE-2026-69561, CVE-2026-69512, CVE-2026-69498, CVE-2026-69571, CVE-2026-69535, CVE-2026-69538, CVE-2026-69591, CVE-2026-69566, CVE-2026-69567, CVE-2026-69584, CVE-2026-69617, CVE-2026-69630, CVE-2026-69610, CVE-2026-69881, CVE-2026-69680, CVE-2026-69619, CVE-2026-69685, CVE-2026-69643, CVE-2026-69687, CVE-2026-69791, CVE-2026-69707, CVE-2026-69652, CVE-2026-69834, CVE-2026-69709, CVE-2026-69844, CVE-2026-69814, CVE-2026-69731, CVE-2026-69706, CVE-2026-69779, CVE-2026-69895, CVE-2026-69792, CVE-2026-69853, CVE-2026-69761, CVE-2026-69785, CVE-2026-69818, CVE-2026-69786, CVE-2026-69874, CVE-2026-70565, CVE-2026-70574, CVE-2026-70569, CVE-2026-70575, CVE-2026-71349, CVE-2026-72927, CVE-2026-72952, CVE-2026-72942, CVE-2026-72966, CVE-2026-72967, CVE-2026-69426, CVE-2026-69564, CVE-2026-72985, CVE-2026-73019, CVE-2026-78451, CVE-2026-78452, CVE-2026-83940, CVE-2026-69598, CVE-2026-83995, CVE-2026-83501, CVE-2026-83498.

CVE-2026-69525

CVE-2026-69525 is a critical use-after-free vulnerability in Microsoft Windows Remote Desktop Services that can be exploited by an unauthenticated attacker to achieve remote code execution over a network with a CVSS v3.1 score of 9.8.

Affected products:

Remote Desktop Services

Source: https://nvd.nist.gov/vuln/detail/CVE-2026-69525

Related in this roundup: CVE-2026-69287, CVE-2026-69514, CVE-2026-69539, CVE-2026-69599, CVE-2026-69536, CVE-2026-69616.

CVE-2026-69579

A use-after-free vulnerability in Windows Message Queuing enables an unauthorized remote attacker to execute arbitrary code. The vulnerability allows for exploitation over the network with a CVSS score of 9.8, indicating a critical severity level requiring immediate patching.

Affected products:

Windows Message Queuing

Source: https://nvd.nist.gov/vuln/detail/CVE-2026-69579

Related in this roundup: CVE-2026-68887, CVE-2026-69645, CVE-2026-83997.

CVE-2026-69586

CVE-2026-69586 describes an integer overflow or wraparound vulnerability within the Microsoft Windows PDF component. This flaw permits an unauthorized remote attacker to execute arbitrary code over the network, carrying a high CVSS base score of 9.8.

Affected products:

Windows

Source: https://nvd.nist.gov/vuln/detail/CVE-2026-69586

Related in this roundup: CVE-2026-81963, CVE-2026-85880, CVE-2026-69496, CVE-2026-69768, CVE-2026-73025, CVE-2026-56172, CVE-2026-68832, CVE-2026-68834, CVE-2026-68838, CVE-2026-68841, CVE-2026-68875, CVE-2026-68877, CVE-2026-68880, CVE-2026-69265, CVE-2026-69270, CVE-2026-69274, CVE-2026-69275, CVE-2026-69280, CVE-2026-69283, CVE-2026-69284, CVE-2026-69289, CVE-2026-69296, CVE-2026-69300, CVE-2026-69301, CVE-2026-69307, CVE-2026-69312, CVE-2026-69314, CVE-2026-69332, CVE-2026-69333, CVE-2026-69335, CVE-2026-68833, CVE-2026-68851, CVE-2026-69366, CVE-2026-69337, CVE-2026-69347, CVE-2026-69379, CVE-2026-69390, CVE-2026-69401, CVE-2026-69413, CVE-2026-69420, CVE-2026-69429, CVE-2026-69448, CVE-2026-69455, CVE-2026-69532, CVE-2026-69472, CVE-2026-69479, CVE-2026-69531, CVE-2026-69517, CVE-2026-69505, CVE-2026-69504, CVE-2026-69527, CVE-2026-69549, CVE-2026-69588, CVE-2026-69609, CVE-2026-69648, CVE-2026-69689, CVE-2026-69790, CVE-2026-69638, CVE-2026-69859, CVE-2026-69717, CVE-2026-69711, CVE-2026-69875, CVE-2026-69889, CVE-2026-69757, CVE-2026-69741, CVE-2026-69762, CVE-2026-69744, CVE-2026-69832, CVE-2026-69691, CVE-2026-69808, CVE-2026-69775, CVE-2026-69822, CVE-2026-69770, CVE-2026-69676, CVE-2026-70289, CVE-2026-70563, CVE-2026-71329, CVE-2026-71332, CVE-2026-71350, CVE-2026-71348, CVE-2026-71345, CVE-2026-69469, CVE-2026-69501, CVE-2026-69548, CVE-2026-69846, CVE-2026-70283, CVE-2026-72981, CVE-2026-77491, CVE-2026-77492, CVE-2026-77503, CVE-2026-80093, CVE-2026-72949, CVE-2026-70019, CVE-2026-72940, CVE-2026-69573, CVE-2026-70290, CVE-2026-83991, CVE-2026-83999, CVE-2026-69321, CVE-2026-69316, CVE-2026-69340, CVE-2026-69348, CVE-2026-69350, CVE-2026-69353, CVE-2026-69357, CVE-2026-69393, CVE-2026-69410, CVE-2026-69421, CVE-2026-69428, CVE-2026-69425, CVE-2026-69427, CVE-2026-69434, CVE-2026-69456, CVE-2026-69459, CVE-2026-69478, CVE-2026-69561, CVE-2026-69512, CVE-2026-69498, CVE-2026-69571, CVE-2026-69535, CVE-2026-69538, CVE-2026-69591, CVE-2026-69566, CVE-2026-69567, CVE-2026-69584, CVE-2026-69617, CVE-2026-69630, CVE-2026-69610, CVE-2026-69881, CVE-2026-69680, CVE-2026-69619, CVE-2026-69685, CVE-2026-69643, CVE-2026-69687, CVE-2026-69791, CVE-2026-69707, CVE-2026-69652, CVE-2026-69834, CVE-2026-69709, CVE-2026-69844, CVE-2026-69814, CVE-2026-69731, CVE-2026-69706, CVE-2026-69779, CVE-2026-69895, CVE-2026-69792, CVE-2026-69853, CVE-2026-69761, CVE-2026-69785, CVE-2026-69818, CVE-2026-69786, CVE-2026-69874, CVE-2026-70565, CVE-2026-70574, CVE-2026-70569, CVE-2026-70575, CVE-2026-71349, CVE-2026-72927, CVE-2026-72952, CVE-2026-72942, CVE-2026-72966, CVE-2026-72967, CVE-2026-69426, CVE-2026-69564, CVE-2026-72985, CVE-2026-73019, CVE-2026-78451, CVE-2026-78452, CVE-2026-83940, CVE-2026-69598, CVE-2026-83995, CVE-2026-83501, CVE-2026-83498.

CVE-2026-69590

CVE-2026-69590 describes a critical Remote Code Execution (RCE) vulnerability within the Microsoft Windows Routing and Remote Access Service (RRAS). An unauthenticated attacker can exploit this flaw to execute arbitrary code with elevated privileges on the target system, potentially leading to a full system compromise. The vulnerability is characterized by a CVSS v3.1 base score of 9.8, indicating high severity.

Affected products:

Routing and Remote Access Service

Source: https://nvd.nist.gov/vuln/detail/CVE-2026-69590

Related in this roundup: CVE-2026-71351, CVE-2026-72939, CVE-2026-72950, CVE-2026-72959, CVE-2026-70570.

CVE-2026-69595

CVE-2026-69595 describes a use-after-free vulnerability in the Windows Services for NFS ONCRPC XDR driver. An unauthorized remote attacker can exploit this flaw to execute arbitrary code with elevated privileges, resulting in a CVSS v3.1 base score of 9.8.

Affected products:

Windows Services for NFS

Source: https://nvd.nist.gov/vuln/detail/CVE-2026-69595

Related in this roundup: CVE-2026-78445, CVE-2026-70585, CVE-2026-71330, CVE-2026-73024, CVE-2026-83989.

CVE-2026-69641

CVE-2026-69641 is a privilege escalation vulnerability in Microsoft Exchange Server resulting from a missing authorization check. An attacker who has already gained authorized access to the network can exploit this flaw to elevate their privileges, potentially gaining administrative control over the affected server instance.

Affected products:

Exchange Server

Source: https://nvd.nist.gov/vuln/detail/CVE-2026-69641

Related in this roundup: CVE-2026-69356, CVE-2026-55007, CVE-2026-69355, CVE-2026-69361, CVE-2026-69375, CVE-2026-69378, CVE-2026-69380, CVE-2026-69382.

CVE-2026-69715

CVE-2026-69715 is an out-of-bounds read vulnerability in the Windows Direct Show component. This flaw can be exploited by an unauthorized remote attacker to achieve remote code execution over a network, presenting a critical risk to affected Windows systems.

Affected products:

Direct Show

Source: https://nvd.nist.gov/vuln/detail/CVE-2026-69715

CVE-2026-69730

CVE-2026-69730 is a critical use-after-free vulnerability in the Windows DNS component that allows remote, unauthenticated attackers to achieve remote code execution (RCE) over the network. With a CVSS base score of 9.8, this flaw poses a significant risk to the integrity and availability of affected Windows systems by allowing potential full system compromise.

Affected products:

Windows DNS

Source: https://nvd.nist.gov/vuln/detail/CVE-2026-69730

Related in this roundup: CVE-2026-69310, CVE-2026-70091, CVE-2026-69631, CVE-2026-72948, CVE-2026-69369, CVE-2026-69672, CVE-2026-72987.

CVE-2026-69768

A heap-based buffer overflow vulnerability exists in the Windows Remote Network Driver Interface Specification (RNDIS) implementation. An unauthenticated attacker can exploit this flaw by sending specifically crafted network traffic, potentially leading to remote code execution on the target Windows system.

Affected products:

Windows

Source: https://nvd.nist.gov/vuln/detail/CVE-2026-69768

Related in this roundup: CVE-2026-81963, CVE-2026-85880, CVE-2026-69496, CVE-2026-69586, CVE-2026-73025, CVE-2026-56172, CVE-2026-68832, CVE-2026-68834, CVE-2026-68838, CVE-2026-68841, CVE-2026-68875, CVE-2026-68877, CVE-2026-68880, CVE-2026-69265, CVE-2026-69270, CVE-2026-69274, CVE-2026-69275, CVE-2026-69280, CVE-2026-69283, CVE-2026-69284, CVE-2026-69289, CVE-2026-69296, CVE-2026-69300, CVE-2026-69301, CVE-2026-69307, CVE-2026-69312, CVE-2026-69314, CVE-2026-69332, CVE-2026-69333, CVE-2026-69335, CVE-2026-68833, CVE-2026-68851, CVE-2026-69366, CVE-2026-69337, CVE-2026-69347, CVE-2026-69379, CVE-2026-69390, CVE-2026-69401, CVE-2026-69413, CVE-2026-69420, CVE-2026-69429, CVE-2026-69448, CVE-2026-69455, CVE-2026-69532, CVE-2026-69472, CVE-2026-69479, CVE-2026-69531, CVE-2026-69517, CVE-2026-69505, CVE-2026-69504, CVE-2026-69527, CVE-2026-69549, CVE-2026-69588, CVE-2026-69609, CVE-2026-69648, CVE-2026-69689, CVE-2026-69790, CVE-2026-69638, CVE-2026-69859, CVE-2026-69717, CVE-2026-69711, CVE-2026-69875, CVE-2026-69889, CVE-2026-69757, CVE-2026-69741, CVE-2026-69762, CVE-2026-69744, CVE-2026-69832, CVE-2026-69691, CVE-2026-69808, CVE-2026-69775, CVE-2026-69822, CVE-2026-69770, CVE-2026-69676, CVE-2026-70289, CVE-2026-70563, CVE-2026-71329, CVE-2026-71332, CVE-2026-71350, CVE-2026-71348, CVE-2026-71345, CVE-2026-69469, CVE-2026-69501, CVE-2026-69548, CVE-2026-69846, CVE-2026-70283, CVE-2026-72981, CVE-2026-77491, CVE-2026-77492, CVE-2026-77503, CVE-2026-80093, CVE-2026-72949, CVE-2026-70019, CVE-2026-72940, CVE-2026-69573, CVE-2026-70290, CVE-2026-83991, CVE-2026-83999, CVE-2026-69321, CVE-2026-69316, CVE-2026-69340, CVE-2026-69348, CVE-2026-69350, CVE-2026-69353, CVE-2026-69357, CVE-2026-69393, CVE-2026-69410, CVE-2026-69421, CVE-2026-69428, CVE-2026-69425, CVE-2026-69427, CVE-2026-69434, CVE-2026-69456, CVE-2026-69459, CVE-2026-69478, CVE-2026-69561, CVE-2026-69512, CVE-2026-69498, CVE-2026-69571, CVE-2026-69535, CVE-2026-69538, CVE-2026-69591, CVE-2026-69566, CVE-2026-69567, CVE-2026-69584, CVE-2026-69617, CVE-2026-69630, CVE-2026-69610, CVE-2026-69881, CVE-2026-69680, CVE-2026-69619, CVE-2026-69685, CVE-2026-69643, CVE-2026-69687, CVE-2026-69791, CVE-2026-69707, CVE-2026-69652, CVE-2026-69834, CVE-2026-69709, CVE-2026-69844, CVE-2026-69814, CVE-2026-69731, CVE-2026-69706, CVE-2026-69779, CVE-2026-69895, CVE-2026-69792, CVE-2026-69853, CVE-2026-69761, CVE-2026-69785, CVE-2026-69818, CVE-2026-69786, CVE-2026-69874, CVE-2026-70565, CVE-2026-70574, CVE-2026-70569, CVE-2026-70575, CVE-2026-71349, CVE-2026-72927, CVE-2026-72952, CVE-2026-72942, CVE-2026-72966, CVE-2026-72967, CVE-2026-69426, CVE-2026-69564, CVE-2026-72985, CVE-2026-73019, CVE-2026-78451, CVE-2026-78452, CVE-2026-83940, CVE-2026-69598, CVE-2026-83995, CVE-2026-83501, CVE-2026-83498.

CVE-2026-69769

CVE-2026-69769 describes a heap-based buffer overflow vulnerability in the Windows HTTP Print Provider, which can be exploited by an unauthorized remote attacker to achieve arbitrary code execution. The vulnerability is highly critical with a CVSS base score of 9.8, indicating the potential for unauthenticated network-based exploitation.

Affected products:

Windows HTTP Print Provider

Source: https://nvd.nist.gov/vuln/detail/CVE-2026-69769

Related in this roundup: CVE-2026-69623.

CVE-2026-69824

An integer underflow vulnerability exists in Microsoft Standard XPS that allows a remote, unauthorized attacker to execute arbitrary code over a network. The vulnerability is classified as a critical security flaw due to the potential for remote code execution.

Affected products:

Standard XPS

Source: https://nvd.nist.gov/vuln/detail/CVE-2026-69824

Related in this roundup: CVE-2026-68885, CVE-2026-68888, CVE-2026-68889, CVE-2026-68890, CVE-2026-68892, CVE-2026-68897, CVE-2026-69269, CVE-2026-69271, CVE-2026-69272, CVE-2026-69313, CVE-2026-69336, CVE-2026-68881, CVE-2026-69345, CVE-2026-69367, CVE-2026-68891, CVE-2026-69308, CVE-2026-69376.

CVE-2026-69829

CVE-2026-69829 is a critical heap-based buffer overflow vulnerability within the Windows Shell component. The vulnerability allows an unauthenticated remote attacker to achieve arbitrary code execution on the target system by sending a specially crafted request over the network.

Affected products:

Windows Shell

Source: https://nvd.nist.gov/vuln/detail/CVE-2026-69829

Related in this roundup: CVE-2026-69528, CVE-2026-69383, CVE-2026-69606, CVE-2026-69392.

CVE-2026-69845

A heap-based buffer overflow vulnerability exists in the Windows DHCP Server service, enabling an unauthenticated remote attacker to achieve remote code execution over the network with a CVSS score of 9.8.

Affected products:

Windows DHCP Server

Source: https://nvd.nist.gov/vuln/detail/CVE-2026-69845

Related in this roundup: CVE-2026-72979, CVE-2026-69266, CVE-2026-69412, CVE-2026-69415, CVE-2026-69929, CVE-2026-69930, CVE-2026-70124, CVE-2026-77494, CVE-2026-77498, CVE-2026-77499, CVE-2026-77501, CVE-2026-77502, CVE-2026-77887, CVE-2026-77888, CVE-2026-77886, CVE-2026-77890, CVE-2026-77889, CVE-2026-77891, CVE-2026-77893, CVE-2026-77895, CVE-2026-70065, CVE-2026-69297, CVE-2026-69342, CVE-2026-69405, CVE-2026-69416, CVE-2026-69497, CVE-2026-69547, CVE-2026-69620, CVE-2026-69637, CVE-2026-69803, CVE-2026-69679, CVE-2026-69878, CVE-2026-69847, CVE-2026-69876, CVE-2026-69510.

CVE-2026-69910

CVE-2026-69910 describes a critical stack-based buffer overflow vulnerability in Microsoft Hyper-V. The vulnerability allows an unauthorized remote attacker to achieve arbitrary code execution via network-based exploitation, presenting a high risk to the hypervisor environment.

Affected products:

Hyper-V

Source: https://nvd.nist.gov/vuln/detail/CVE-2026-69910

Related in this roundup: CVE-2026-69553, CVE-2026-69603, CVE-2026-80083, CVE-2026-72961.

CVE-2026-70296

CVE-2026-70296 is a critical out-of-bounds write vulnerability in the Windows Imaging Component. It enables an unauthenticated, remote attacker to trigger memory corruption and achieve remote code execution, necessitating prompt patching of affected Windows systems.

Affected products:

Windows Imaging Component

Source: https://nvd.nist.gov/vuln/detail/CVE-2026-70296

Related in this roundup: CVE-2026-69860, CVE-2026-77495, CVE-2026-69318, CVE-2026-69499, CVE-2026-73023, CVE-2026-73013, CVE-2026-83992.

CVE-2026-72979

CVE-2026-72979 is a use-after-free vulnerability in the Microsoft Windows DHCP Server service. An unauthorized remote attacker can exploit this flaw to achieve remote code execution by sending specifically crafted network traffic to the affected service.

Affected products:

Windows DHCP Server

Source: https://nvd.nist.gov/vuln/detail/CVE-2026-72979

Related in this roundup: CVE-2026-69845, CVE-2026-69266, CVE-2026-69412, CVE-2026-69415, CVE-2026-69929, CVE-2026-69930, CVE-2026-70124, CVE-2026-77494, CVE-2026-77498, CVE-2026-77499, CVE-2026-77501, CVE-2026-77502, CVE-2026-77887, CVE-2026-77888, CVE-2026-77886, CVE-2026-77890, CVE-2026-77889, CVE-2026-77891, CVE-2026-77893, CVE-2026-77895, CVE-2026-70065, CVE-2026-69297, CVE-2026-69342, CVE-2026-69405, CVE-2026-69416, CVE-2026-69497, CVE-2026-69547, CVE-2026-69620, CVE-2026-69637, CVE-2026-69803, CVE-2026-69679, CVE-2026-69878, CVE-2026-69847, CVE-2026-69876, CVE-2026-69510.

CVE-2026-72982

CVE-2026-72982 describes a critical stack-based buffer overflow vulnerability in the Windows Netlogon service. An unauthenticated attacker can exploit this flaw remotely over a network to achieve arbitrary code execution, carrying a CVSS v3.1 base score of 9.8.

Affected products:

Netlogon

Source: https://nvd.nist.gov/vuln/detail/CVE-2026-72982

CVE-2026-72983

CVE-2026-72983 is a use-after-free vulnerability within the Windows Internet Connection Sharing (ICS) component. An unauthorized remote attacker can leverage this flaw to achieve remote code execution over a network, posing a critical security risk to systems with ICS enabled.

Affected products:

Internet Connection Sharing

Source: https://nvd.nist.gov/vuln/detail/CVE-2026-72983

Related in this roundup: CVE-2026-72926, CVE-2026-72964.

CVE-2026-73009

CVE-2026-73009 is a critical use-after-free vulnerability within the Windows Secure Socket Tunneling Protocol (SSTP) that permits a remote, unauthorized attacker to achieve arbitrary code execution over a network connection.

Affected products:

Windows Secure Socket Tunneling Protocol

Source: https://nvd.nist.gov/vuln/detail/CVE-2026-73009

Related in this roundup: CVE-2026-72930, CVE-2026-72931.

CVE-2026-73010

CVE-2026-73010 is a critical use-after-free vulnerability in the Windows Failover Cluster component. An unauthorized remote attacker can trigger this vulnerability to execute arbitrary code over a network with a CVSS v3.1 base score of 9.8.

Affected products:

Windows Failover Cluster

Source: https://nvd.nist.gov/vuln/detail/CVE-2026-73010

Related in this roundup: CVE-2026-71338, CVE-2026-72989, CVE-2026-78444.

CVE-2026-73025

CVE-2026-73025 describes a critical vulnerability in the Windows iSCSI implementation involving weak authentication mechanisms. This flaw allows an unauthorized, network-based attacker to bypass security features, potentially leading to unauthorized access or control over iSCSI targets/initiators.

Affected products:

Windows

Source: https://nvd.nist.gov/vuln/detail/CVE-2026-73025

Related in this roundup: CVE-2026-81963, CVE-2026-85880, CVE-2026-69496, CVE-2026-69586, CVE-2026-69768, CVE-2026-56172, CVE-2026-68832, CVE-2026-68834, CVE-2026-68838, CVE-2026-68841, CVE-2026-68875, CVE-2026-68877, CVE-2026-68880, CVE-2026-69265, CVE-2026-69270, CVE-2026-69274, CVE-2026-69275, CVE-2026-69280, CVE-2026-69283, CVE-2026-69284, CVE-2026-69289, CVE-2026-69296, CVE-2026-69300, CVE-2026-69301, CVE-2026-69307, CVE-2026-69312, CVE-2026-69314, CVE-2026-69332, CVE-2026-69333, CVE-2026-69335, CVE-2026-68833, CVE-2026-68851, CVE-2026-69366, CVE-2026-69337, CVE-2026-69347, CVE-2026-69379, CVE-2026-69390, CVE-2026-69401, CVE-2026-69413, CVE-2026-69420, CVE-2026-69429, CVE-2026-69448, CVE-2026-69455, CVE-2026-69532, CVE-2026-69472, CVE-2026-69479, CVE-2026-69531, CVE-2026-69517, CVE-2026-69505, CVE-2026-69504, CVE-2026-69527, CVE-2026-69549, CVE-2026-69588, CVE-2026-69609, CVE-2026-69648, CVE-2026-69689, CVE-2026-69790, CVE-2026-69638, CVE-2026-69859, CVE-2026-69717, CVE-2026-69711, CVE-2026-69875, CVE-2026-69889, CVE-2026-69757, CVE-2026-69741, CVE-2026-69762, CVE-2026-69744, CVE-2026-69832, CVE-2026-69691, CVE-2026-69808, CVE-2026-69775, CVE-2026-69822, CVE-2026-69770, CVE-2026-69676, CVE-2026-70289, CVE-2026-70563, CVE-2026-71329, CVE-2026-71332, CVE-2026-71350, CVE-2026-71348, CVE-2026-71345, CVE-2026-69469, CVE-2026-69501, CVE-2026-69548, CVE-2026-69846, CVE-2026-70283, CVE-2026-72981, CVE-2026-77491, CVE-2026-77492, CVE-2026-77503, CVE-2026-80093, CVE-2026-72949, CVE-2026-70019, CVE-2026-72940, CVE-2026-69573, CVE-2026-70290, CVE-2026-83991, CVE-2026-83999, CVE-2026-69321, CVE-2026-69316, CVE-2026-69340, CVE-2026-69348, CVE-2026-69350, CVE-2026-69353, CVE-2026-69357, CVE-2026-69393, CVE-2026-69410, CVE-2026-69421, CVE-2026-69428, CVE-2026-69425, CVE-2026-69427, CVE-2026-69434, CVE-2026-69456, CVE-2026-69459, CVE-2026-69478, CVE-2026-69561, CVE-2026-69512, CVE-2026-69498, CVE-2026-69571, CVE-2026-69535, CVE-2026-69538, CVE-2026-69591, CVE-2026-69566, CVE-2026-69567, CVE-2026-69584, CVE-2026-69617, CVE-2026-69630, CVE-2026-69610, CVE-2026-69881, CVE-2026-69680, CVE-2026-69619, CVE-2026-69685, CVE-2026-69643, CVE-2026-69687, CVE-2026-69791, CVE-2026-69707, CVE-2026-69652, CVE-2026-69834, CVE-2026-69709, CVE-2026-69844, CVE-2026-69814, CVE-2026-69731, CVE-2026-69706, CVE-2026-69779, CVE-2026-69895, CVE-2026-69792, CVE-2026-69853, CVE-2026-69761, CVE-2026-69785, CVE-2026-69818, CVE-2026-69786, CVE-2026-69874, CVE-2026-70565, CVE-2026-70574, CVE-2026-70569, CVE-2026-70575, CVE-2026-71349, CVE-2026-72927, CVE-2026-72952, CVE-2026-72942, CVE-2026-72966, CVE-2026-72967, CVE-2026-69426, CVE-2026-69564, CVE-2026-72985, CVE-2026-73019, CVE-2026-78451, CVE-2026-78452, CVE-2026-83940, CVE-2026-69598, CVE-2026-83995, CVE-2026-83501, CVE-2026-83498.

CVE-2026-77493

A double free vulnerability exists in the Microsoft Graphics Component, allowing a remote, unauthorized attacker to achieve arbitrary code execution over a network. The vulnerability carries a high CVSS base score of 9.8.

Affected products:

Graphics Component

Source: https://nvd.nist.gov/vuln/detail/CVE-2026-77493

Related in this roundup: CVE-2026-69467, CVE-2026-73006, CVE-2026-73016, CVE-2026-83990, CVE-2026-84000.

CVE-2026-78445

A use-after-free vulnerability exists in the ONCRPC XDR driver within Microsoft Windows Services for NFS. An unauthorized remote attacker can exploit this flaw to trigger memory corruption and achieve remote code execution over a network.

Affected products:

Windows Services for NFS

Source: https://nvd.nist.gov/vuln/detail/CVE-2026-78445

Related in this roundup: CVE-2026-69595, CVE-2026-70585, CVE-2026-71330, CVE-2026-73024, CVE-2026-83989.

CVE-2026-81376

CVE-2026-81376 is a vulnerability in Visual Studio Code involving an incomplete comparison with missing factors, which allows an unauthorized remote attacker to bypass security features, potentially leading to unauthorized access or control within the application environment.

Affected products:

Visual Studio Code

Source: https://nvd.nist.gov/vuln/detail/CVE-2026-81376

Related in this roundup: CVE-2026-70334, CVE-2026-78461, CVE-2026-81356, CVE-2026-81357, CVE-2026-81377, CVE-2026-81378, CVE-2026-81379, CVE-2026-78462, CVE-2026-81383.

CVE-2026-83941

CVE-2026-83941 describes a missing authorization vulnerability in Microsoft Entra ID. An authorized attacker can exploit this flaw to perform privilege escalation over a network, potentially leading to unauthorized access or administrative control within the identity environment.

Affected products:

Entra ID

Source: https://nvd.nist.gov/vuln/detail/CVE-2026-83941

Related in this roundup: CVE-2026-62916.

CVE-2026-66302

CVE-2026-66302 describes a vulnerability in Microsoft Skype for Business resulting from external control of a file name or path. This flaw allows an unauthorized remote attacker to achieve code execution over a network with a CVSS base score of 9.8, indicating a critical security risk.

Affected products:

Skype for Business

Source: https://nvd.nist.gov/vuln/detail/CVE-2026-66302

Related in this roundup: CVE-2026-66304, CVE-2026-66306, CVE-2026-66308, CVE-2026-63523, CVE-2026-66305, CVE-2026-69642, CVE-2026-69646, CVE-2026-66303, CVE-2026-66307.

CVE-2026-47297

CVE-2026-47297 is a deserialization vulnerability in Microsoft SQL Server that enables an unauthorized remote attacker to execute arbitrary code via a network connection. Successful exploitation relies on the application failing to properly validate untrusted data before processing it through insecure deserialization functions, potentially leading to full system compromise.

Affected products:

SQL Server

Source: https://nvd.nist.gov/vuln/detail/CVE-2026-47297

Related in this roundup: CVE-2026-65669, CVE-2026-66814, CVE-2026-66818, CVE-2026-66819, CVE-2026-66820, CVE-2026-67368, CVE-2026-67370, CVE-2026-67373, CVE-2026-67376, CVE-2026-67378, CVE-2026-67379, CVE-2026-67380, CVE-2026-67381, CVE-2026-67384, CVE-2026-67385, CVE-2026-67388, CVE-2026-67631, CVE-2026-67636, CVE-2026-67638, CVE-2026-67639, CVE-2026-67642, CVE-2026-67643, CVE-2026-68775, CVE-2026-68786, CVE-2026-68787, CVE-2026-77482, CVE-2026-67629, CVE-2026-67630, CVE-2026-67633, CVE-2026-68781, CVE-2026-68784, CVE-2026-68785, CVE-2026-67383, CVE-2026-67389, CVE-2026-73029, CVE-2026-66816, CVE-2026-67386, CVE-2026-67390, CVE-2026-67393, CVE-2026-67641, CVE-2026-67648, CVE-2026-68776, CVE-2026-68777, CVE-2026-68778, CVE-2026-68779, CVE-2026-68780, CVE-2026-73028, CVE-2026-77480, CVE-2026-77483, CVE-2026-77484, CVE-2026-77487, CVE-2026-77485, CVE-2026-77486, CVE-2026-77488, CVE-2026-69562, CVE-2026-78456, CVE-2026-67369, CVE-2026-67624, CVE-2026-67645, CVE-2026-77481.

CVE-2026-50349

CVE-2026-50349 describes a race condition vulnerability in the Windows Ancillary Function Driver for WinSock (afdsys). An authorized local attacker can exploit this synchronization flaw to achieve privilege escalation on the host system.

Affected products:

Windows Ancillary Function Driver for WinSock

Source: https://nvd.nist.gov/vuln/detail/CVE-2026-50349

Related in this roundup: CVE-2026-70342.

CVE-2026-55007

CVE-2026-55007 is a double free vulnerability in Microsoft Exchange Server that allows an unauthenticated remote attacker to execute arbitrary code over the network. The vulnerability poses a significant security risk due to its ability to be triggered remotely without prior authorization.

Affected products:

Exchange Server

Source: https://nvd.nist.gov/vuln/detail/CVE-2026-55007

Related in this roundup: CVE-2026-69356, CVE-2026-69641, CVE-2026-69355, CVE-2026-69361, CVE-2026-69375, CVE-2026-69378, CVE-2026-69380, CVE-2026-69382.

CVE-2026-56172

A use-after-free vulnerability exists in the Windows VHD miniport driver, which can be exploited by a local, authorized attacker to achieve privilege escalation on the host system.

Affected products:

Windows

Source: https://nvd.nist.gov/vuln/detail/CVE-2026-56172

Related in this roundup: CVE-2026-81963, CVE-2026-85880, CVE-2026-69496, CVE-2026-69586, CVE-2026-69768, CVE-2026-73025, CVE-2026-68832, CVE-2026-68834, CVE-2026-68838, CVE-2026-68841, CVE-2026-68875, CVE-2026-68877, CVE-2026-68880, CVE-2026-69265, CVE-2026-69270, CVE-2026-69274, CVE-2026-69275, CVE-2026-69280, CVE-2026-69283, CVE-2026-69284, CVE-2026-69289, CVE-2026-69296, CVE-2026-69300, CVE-2026-69301, CVE-2026-69307, CVE-2026-69312, CVE-2026-69314, CVE-2026-69332, CVE-2026-69333, CVE-2026-69335, CVE-2026-68833, CVE-2026-68851, CVE-2026-69366, CVE-2026-69337, CVE-2026-69347, CVE-2026-69379, CVE-2026-69390, CVE-2026-69401, CVE-2026-69413, CVE-2026-69420, CVE-2026-69429, CVE-2026-69448, CVE-2026-69455, CVE-2026-69532, CVE-2026-69472, CVE-2026-69479, CVE-2026-69531, CVE-2026-69517, CVE-2026-69505, CVE-2026-69504, CVE-2026-69527, CVE-2026-69549, CVE-2026-69588, CVE-2026-69609, CVE-2026-69648, CVE-2026-69689, CVE-2026-69790, CVE-2026-69638, CVE-2026-69859, CVE-2026-69717, CVE-2026-69711, CVE-2026-69875, CVE-2026-69889, CVE-2026-69757, CVE-2026-69741, CVE-2026-69762, CVE-2026-69744, CVE-2026-69832, CVE-2026-69691, CVE-2026-69808, CVE-2026-69775, CVE-2026-69822, CVE-2026-69770, CVE-2026-69676, CVE-2026-70289, CVE-2026-70563, CVE-2026-71329, CVE-2026-71332, CVE-2026-71350, CVE-2026-71348, CVE-2026-71345, CVE-2026-69469, CVE-2026-69501, CVE-2026-69548, CVE-2026-69846, CVE-2026-70283, CVE-2026-72981, CVE-2026-77491, CVE-2026-77492, CVE-2026-77503, CVE-2026-80093, CVE-2026-72949, CVE-2026-70019, CVE-2026-72940, CVE-2026-69573, CVE-2026-70290, CVE-2026-83991, CVE-2026-83999, CVE-2026-69321, CVE-2026-69316, CVE-2026-69340, CVE-2026-69348, CVE-2026-69350, CVE-2026-69353, CVE-2026-69357, CVE-2026-69393, CVE-2026-69410, CVE-2026-69421, CVE-2026-69428, CVE-2026-69425, CVE-2026-69427, CVE-2026-69434, CVE-2026-69456, CVE-2026-69459, CVE-2026-69478, CVE-2026-69561, CVE-2026-69512, CVE-2026-69498, CVE-2026-69571, CVE-2026-69535, CVE-2026-69538, CVE-2026-69591, CVE-2026-69566, CVE-2026-69567, CVE-2026-69584, CVE-2026-69617, CVE-2026-69630, CVE-2026-69610, CVE-2026-69881, CVE-2026-69680, CVE-2026-69619, CVE-2026-69685, CVE-2026-69643, CVE-2026-69687, CVE-2026-69791, CVE-2026-69707, CVE-2026-69652, CVE-2026-69834, CVE-2026-69709, CVE-2026-69844, CVE-2026-69814, CVE-2026-69731, CVE-2026-69706, CVE-2026-69779, CVE-2026-69895, CVE-2026-69792, CVE-2026-69853, CVE-2026-69761, CVE-2026-69785, CVE-2026-69818, CVE-2026-69786, CVE-2026-69874, CVE-2026-70565, CVE-2026-70574, CVE-2026-70569, CVE-2026-70575, CVE-2026-71349, CVE-2026-72927, CVE-2026-72952, CVE-2026-72942, CVE-2026-72966, CVE-2026-72967, CVE-2026-69426, CVE-2026-69564, CVE-2026-72985, CVE-2026-73019, CVE-2026-78451, CVE-2026-78452, CVE-2026-83940, CVE-2026-69598, CVE-2026-83995, CVE-2026-83501, CVE-2026-83498.

CVE-2026-56177

CVE-2026-56177 is a use-after-free vulnerability in Windows Server that enables an already authorized local attacker to elevate their privileges. Successful exploitation allows the attacker to execute code or perform operations with higher permissions than their initial account level, posing a significant risk to system security.

Affected products:

Windows Server

Source: https://nvd.nist.gov/vuln/detail/CVE-2026-56177

CVE-2026-56198

CVE-2026-56198 is an out-of-bounds read vulnerability in the Microsoft Trace Data Helper component. An attacker with local authorization can exploit this flaw to escalate privileges on the affected Windows system.

Affected products:

Trace Data Helper

Source: https://nvd.nist.gov/vuln/detail/CVE-2026-56198

CVE-2026-57098

CVE-2026-57098 describes an information disclosure vulnerability in the Windows RDP Client caused by improper verification of cryptographic signatures. This flaw allows an unauthorized attacker with network access to intercept or expose sensitive data during RDP communication, presenting a risk to secure remote access sessions.

Affected products:

Windows RDP Client

Source: https://nvd.nist.gov/vuln/detail/CVE-2026-57098

CVE-2026-57099

CVE-2026-57099 is a denial-of-service vulnerability in ASP.NET Core resulting from improper allocation of resources without limits or throttling. An unauthorized remote attacker can exploit this flaw to exhaust system resources, leading to service unavailability.

Affected products:

ASP.NET Core

Source: https://nvd.nist.gov/vuln/detail/CVE-2026-57099

Related in this roundup: CVE-2026-69304.

CVE-2026-58599

A heap-based buffer overflow vulnerability in the Microsoft Windows Codecs Library allows a local, unauthorized attacker to execute arbitrary code. The vulnerability is triggered by parsing malformed media files or data streams handled by the library, potentially leading to remote or local code execution.

Affected products:

Windows Codecs Library

Source: https://nvd.nist.gov/vuln/detail/CVE-2026-58599

Related in this roundup: CVE-2026-58600, CVE-2026-81352.

CVE-2026-58600

A heap-based buffer overflow vulnerability exists in the Microsoft Windows Codecs Library that allows an unauthorized local attacker to execute arbitrary code with elevated privileges, resulting in local privilege escalation.

Affected products:

Windows Codecs Library

Source: https://nvd.nist.gov/vuln/detail/CVE-2026-58600

Related in this roundup: CVE-2026-58599, CVE-2026-81352.

CVE-2026-58611

CVE-2026-58611 describes an improper authorization vulnerability in the Microsoft XBox Gaming Services component. An attacker with existing local access can exploit this flaw to perform privilege escalation on the affected system. This requires the attacker to already be authorized on the machine to interact with the service.

Affected products:

XBox Gaming Services

Source: https://nvd.nist.gov/vuln/detail/CVE-2026-58611

CVE-2026-62694

A use-after-free vulnerability exists in the Microsoft Windows Installer service, which can be exploited by a locally authorized attacker to achieve privilege escalation on the affected system.

Affected products:

Windows Installer

Source: https://nvd.nist.gov/vuln/detail/CVE-2026-62694

Related in this roundup: CVE-2026-71339, CVE-2026-72929, CVE-2026-77894, CVE-2026-69441.

CVE-2026-62697

A use-after-free vulnerability in the Windows Push Notifications component allows an authenticated local attacker to achieve privilege escalation. The vulnerability exists within the memory management of the notification service, enabling potential code execution or system state manipulation with elevated permissions.

Affected products:

Windows Push Notifications

Source: https://nvd.nist.gov/vuln/detail/CVE-2026-62697

CVE-2026-62744

CVE-2026-62744 is a heap-based buffer overflow vulnerability in Microsoft Windows Media Foundation that allows an unauthenticated, remote attacker to execute arbitrary code. The flaw exists within the component's handling of media data, potentially leading to system compromise when processing specially crafted media content.

Affected products:

Windows Media Foundation

Source: https://nvd.nist.gov/vuln/detail/CVE-2026-62744

Related in this roundup: CVE-2026-69408, CVE-2026-62706, CVE-2026-69386, CVE-2026-69511, CVE-2026-69601.

CVE-2026-62759

CVE-2026-62759 describes an authentication bypass vulnerability in the Windows Netlogon service. An unauthorized attacker located on an adjacent network can exploit this flaw to perform spoofing attacks, potentially leading to unauthorized access or privilege escalation within a Windows environment.

Affected products:

Windows Netlogon

Source: https://nvd.nist.gov/vuln/detail/CVE-2026-62759

CVE-2026-62810

CVE-2026-62810 describes a heap-based buffer overflow vulnerability within the Microsoft Active Directory Certificate Services (AD CS) component. The vulnerability allows an attacker who already possesses authorized local access to exploit the overflow condition to escalate their privileges within the host system.

Affected products:

Active Directory Certificate Services

Source: https://nvd.nist.gov/vuln/detail/CVE-2026-62810

Related in this roundup: CVE-2026-69624, CVE-2026-69821, CVE-2026-69395.

CVE-2026-62813

CVE-2026-62813 describes a use-after-free vulnerability within Microsoft Active Directory Domain Services. The flaw allows an authenticated network attacker to achieve remote code execution, necessitating internal monitoring for unexpected process execution or memory corruption patterns within ADDS-related services.

Affected products:

Active Directory Domain Services

Source: https://nvd.nist.gov/vuln/detail/CVE-2026-62813

Related in this roundup: CVE-2026-69359, CVE-2026-69524, CVE-2026-62762, CVE-2026-69546, CVE-2026-69809.

CVE-2026-62895

CVE-2026-62895 identifies a vulnerability in Microsoft Azure Arc involving an overly permissive cross-domain policy. This flaw allows an unauthorized remote attacker to perform cross-domain requests that lead to privilege escalation over the network.

Affected products:

Azure Arc

Source: https://nvd.nist.gov/vuln/detail/CVE-2026-62895

CVE-2026-65772

CVE-2026-65772 describes a deserialization of untrusted data vulnerability in Microsoft Dynamics 365 that allows an authorized attacker to achieve remote code execution over a network.

Affected products:

Dynamics 365

Source: https://nvd.nist.gov/vuln/detail/CVE-2026-65772

Related in this roundup: CVE-2026-77908.

CVE-2026-66814

CVE-2026-66814 is a privilege escalation vulnerability in Microsoft SQL Server caused by insufficient granularity in access control mechanisms. An authorized attacker with network access can exploit this flaw to elevate their privileges within the database environment.

Affected products:

SQL Server

Source: https://nvd.nist.gov/vuln/detail/CVE-2026-66814

Related in this roundup: CVE-2026-65669, CVE-2026-47297, CVE-2026-66818, CVE-2026-66819, CVE-2026-66820, CVE-2026-67368, CVE-2026-67370, CVE-2026-67373, CVE-2026-67376, CVE-2026-67378, CVE-2026-67379, CVE-2026-67380, CVE-2026-67381, CVE-2026-67384, CVE-2026-67385, CVE-2026-67388, CVE-2026-67631, CVE-2026-67636, CVE-2026-67638, CVE-2026-67639, CVE-2026-67642, CVE-2026-67643, CVE-2026-68775, CVE-2026-68786, CVE-2026-68787, CVE-2026-77482, CVE-2026-67629, CVE-2026-67630, CVE-2026-67633, CVE-2026-68781, CVE-2026-68784, CVE-2026-68785, CVE-2026-67383, CVE-2026-67389, CVE-2026-73029, CVE-2026-66816, CVE-2026-67386, CVE-2026-67390, CVE-2026-67393, CVE-2026-67641, CVE-2026-67648, CVE-2026-68776, CVE-2026-68777, CVE-2026-68778, CVE-2026-68779, CVE-2026-68780, CVE-2026-73028, CVE-2026-77480, CVE-2026-77483, CVE-2026-77484, CVE-2026-77487, CVE-2026-77485, CVE-2026-77486, CVE-2026-77488, CVE-2026-69562, CVE-2026-78456, CVE-2026-67369, CVE-2026-67624, CVE-2026-67645, CVE-2026-77481.

CVE-2026-66818

CVE-2026-66818 describes an improper privilege management vulnerability in Microsoft SQL Server that allows an authenticated user to perform privilege escalation over the network, resulting in a CVSS base score of 8.8.

Affected products:

SQL Server

Source: https://nvd.nist.gov/vuln/detail/CVE-2026-66818

Related in this roundup: CVE-2026-65669, CVE-2026-47297, CVE-2026-66814, CVE-2026-66819, CVE-2026-66820, CVE-2026-67368, CVE-2026-67370, CVE-2026-67373, CVE-2026-67376, CVE-2026-67378, CVE-2026-67379, CVE-2026-67380, CVE-2026-67381, CVE-2026-67384, CVE-2026-67385, CVE-2026-67388, CVE-2026-67631, CVE-2026-67636, CVE-2026-67638, CVE-2026-67639, CVE-2026-67642, CVE-2026-67643, CVE-2026-68775, CVE-2026-68786, CVE-2026-68787, CVE-2026-77482, CVE-2026-67629, CVE-2026-67630, CVE-2026-67633, CVE-2026-68781, CVE-2026-68784, CVE-2026-68785, CVE-2026-67383, CVE-2026-67389, CVE-2026-73029, CVE-2026-66816, CVE-2026-67386, CVE-2026-67390, CVE-2026-67393, CVE-2026-67641, CVE-2026-67648, CVE-2026-68776, CVE-2026-68777, CVE-2026-68778, CVE-2026-68779, CVE-2026-68780, CVE-2026-73028, CVE-2026-77480, CVE-2026-77483, CVE-2026-77484, CVE-2026-77487, CVE-2026-77485, CVE-2026-77486, CVE-2026-77488, CVE-2026-69562, CVE-2026-78456, CVE-2026-67369, CVE-2026-67624, CVE-2026-67645, CVE-2026-77481.

CVE-2026-66819

CVE-2026-66819 is a SQL injection vulnerability in Microsoft SQL Server that allows an authenticated attacker to perform unauthorized actions and escalate privileges over the network.

Affected products:

SQL Server

Source: https://nvd.nist.gov/vuln/detail/CVE-2026-66819

Related in this roundup: CVE-2026-65669, CVE-2026-47297, CVE-2026-66814, CVE-2026-66818, CVE-2026-66820, CVE-2026-67368, CVE-2026-67370, CVE-2026-67373, CVE-2026-67376, CVE-2026-67378, CVE-2026-67379, CVE-2026-67380, CVE-2026-67381, CVE-2026-67384, CVE-2026-67385, CVE-2026-67388, CVE-2026-67631, CVE-2026-67636, CVE-2026-67638, CVE-2026-67639, CVE-2026-67642, CVE-2026-67643, CVE-2026-68775, CVE-2026-68786, CVE-2026-68787, CVE-2026-77482, CVE-2026-67629, CVE-2026-67630, CVE-2026-67633, CVE-2026-68781, CVE-2026-68784, CVE-2026-68785, CVE-2026-67383, CVE-2026-67389, CVE-2026-73029, CVE-2026-66816, CVE-2026-67386, CVE-2026-67390, CVE-2026-67393, CVE-2026-67641, CVE-2026-67648, CVE-2026-68776, CVE-2026-68777, CVE-2026-68778, CVE-2026-68779, CVE-2026-68780, CVE-2026-73028, CVE-2026-77480, CVE-2026-77483, CVE-2026-77484, CVE-2026-77487, CVE-2026-77485, CVE-2026-77486, CVE-2026-77488, CVE-2026-69562, CVE-2026-78456, CVE-2026-67369, CVE-2026-67624, CVE-2026-67645, CVE-2026-77481.

CVE-2026-66820

CVE-2026-66820 is an SQL injection vulnerability in Microsoft SQL Server that allows an authenticated attacker to perform unauthorized actions or escalate privileges within the database environment by injecting malicious SQL commands.

Affected products:

SQL Server

Source: https://nvd.nist.gov/vuln/detail/CVE-2026-66820

Related in this roundup: CVE-2026-65669, CVE-2026-47297, CVE-2026-66814, CVE-2026-66818, CVE-2026-66819, CVE-2026-67368, CVE-2026-67370, CVE-2026-67373, CVE-2026-67376, CVE-2026-67378, CVE-2026-67379, CVE-2026-67380, CVE-2026-67381, CVE-2026-67384, CVE-2026-67385, CVE-2026-67388, CVE-2026-67631, CVE-2026-67636, CVE-2026-67638, CVE-2026-67639, CVE-2026-67642, CVE-2026-67643, CVE-2026-68775, CVE-2026-68786, CVE-2026-68787, CVE-2026-77482, CVE-2026-67629, CVE-2026-67630, CVE-2026-67633, CVE-2026-68781, CVE-2026-68784, CVE-2026-68785, CVE-2026-67383, CVE-2026-67389, CVE-2026-73029, CVE-2026-66816, CVE-2026-67386, CVE-2026-67390, CVE-2026-67393, CVE-2026-67641, CVE-2026-67648, CVE-2026-68776, CVE-2026-68777, CVE-2026-68778, CVE-2026-68779, CVE-2026-68780, CVE-2026-73028, CVE-2026-77480, CVE-2026-77483, CVE-2026-77484, CVE-2026-77487, CVE-2026-77485, CVE-2026-77486, CVE-2026-77488, CVE-2026-69562, CVE-2026-78456, CVE-2026-67369, CVE-2026-67624, CVE-2026-67645, CVE-2026-77481.

CVE-2026-67368

CVE-2026-67368 describes an improper link resolution vulnerability (link following) in Microsoft SQL Server. This vulnerability allows an authorized attacker with existing access to perform a privilege escalation attack over the network by manipulating file access resolution.

Affected products:

SQL Server

Source: https://nvd.nist.gov/vuln/detail/CVE-2026-67368

Related in this roundup: CVE-2026-65669, CVE-2026-47297, CVE-2026-66814, CVE-2026-66818, CVE-2026-66819, CVE-2026-66820, CVE-2026-67370, CVE-2026-67373, CVE-2026-67376, CVE-2026-67378, CVE-2026-67379, CVE-2026-67380, CVE-2026-67381, CVE-2026-67384, CVE-2026-67385, CVE-2026-67388, CVE-2026-67631, CVE-2026-67636, CVE-2026-67638, CVE-2026-67639, CVE-2026-67642, CVE-2026-67643, CVE-2026-68775, CVE-2026-68786, CVE-2026-68787, CVE-2026-77482, CVE-2026-67629, CVE-2026-67630, CVE-2026-67633, CVE-2026-68781, CVE-2026-68784, CVE-2026-68785, CVE-2026-67383, CVE-2026-67389, CVE-2026-73029, CVE-2026-66816, CVE-2026-67386, CVE-2026-67390, CVE-2026-67393, CVE-2026-67641, CVE-2026-67648, CVE-2026-68776, CVE-2026-68777, CVE-2026-68778, CVE-2026-68779, CVE-2026-68780, CVE-2026-73028, CVE-2026-77480, CVE-2026-77483, CVE-2026-77484, CVE-2026-77487, CVE-2026-77485, CVE-2026-77486, CVE-2026-77488, CVE-2026-69562, CVE-2026-78456, CVE-2026-67369, CVE-2026-67624, CVE-2026-67645, CVE-2026-77481.

CVE-2026-67370

CVE-2026-67370 describes a SQL injection vulnerability in Microsoft SQL Server that enables an authorized attacker to escalate privileges over a network. The vulnerability arises from improper neutralization of special elements used in SQL commands.

Affected products:

SQL Server

Source: https://nvd.nist.gov/vuln/detail/CVE-2026-67370

Related in this roundup: CVE-2026-65669, CVE-2026-47297, CVE-2026-66814, CVE-2026-66818, CVE-2026-66819, CVE-2026-66820, CVE-2026-67368, CVE-2026-67373, CVE-2026-67376, CVE-2026-67378, CVE-2026-67379, CVE-2026-67380, CVE-2026-67381, CVE-2026-67384, CVE-2026-67385, CVE-2026-67388, CVE-2026-67631, CVE-2026-67636, CVE-2026-67638, CVE-2026-67639, CVE-2026-67642, CVE-2026-67643, CVE-2026-68775, CVE-2026-68786, CVE-2026-68787, CVE-2026-77482, CVE-2026-67629, CVE-2026-67630, CVE-2026-67633, CVE-2026-68781, CVE-2026-68784, CVE-2026-68785, CVE-2026-67383, CVE-2026-67389, CVE-2026-73029, CVE-2026-66816, CVE-2026-67386, CVE-2026-67390, CVE-2026-67393, CVE-2026-67641, CVE-2026-67648, CVE-2026-68776, CVE-2026-68777, CVE-2026-68778, CVE-2026-68779, CVE-2026-68780, CVE-2026-73028, CVE-2026-77480, CVE-2026-77483, CVE-2026-77484, CVE-2026-77487, CVE-2026-77485, CVE-2026-77486, CVE-2026-77488, CVE-2026-69562, CVE-2026-78456, CVE-2026-67369, CVE-2026-67624, CVE-2026-67645, CVE-2026-77481.

CVE-2026-67373

A heap-based buffer overflow vulnerability in Microsoft SQL Server allows an authenticated attacker to achieve remote code execution via specially crafted network packets.

Affected products:

SQL Server

Source: https://nvd.nist.gov/vuln/detail/CVE-2026-67373

Related in this roundup: CVE-2026-65669, CVE-2026-47297, CVE-2026-66814, CVE-2026-66818, CVE-2026-66819, CVE-2026-66820, CVE-2026-67368, CVE-2026-67370, CVE-2026-67376, CVE-2026-67378, CVE-2026-67379, CVE-2026-67380, CVE-2026-67381, CVE-2026-67384, CVE-2026-67385, CVE-2026-67388, CVE-2026-67631, CVE-2026-67636, CVE-2026-67638, CVE-2026-67639, CVE-2026-67642, CVE-2026-67643, CVE-2026-68775, CVE-2026-68786, CVE-2026-68787, CVE-2026-77482, CVE-2026-67629, CVE-2026-67630, CVE-2026-67633, CVE-2026-68781, CVE-2026-68784, CVE-2026-68785, CVE-2026-67383, CVE-2026-67389, CVE-2026-73029, CVE-2026-66816, CVE-2026-67386, CVE-2026-67390, CVE-2026-67393, CVE-2026-67641, CVE-2026-67648, CVE-2026-68776, CVE-2026-68777, CVE-2026-68778, CVE-2026-68779, CVE-2026-68780, CVE-2026-73028, CVE-2026-77480, CVE-2026-77483, CVE-2026-77484, CVE-2026-77487, CVE-2026-77485, CVE-2026-77486, CVE-2026-77488, CVE-2026-69562, CVE-2026-78456, CVE-2026-67369, CVE-2026-67624, CVE-2026-67645, CVE-2026-77481.

CVE-2026-67376

An integer overflow or wraparound vulnerability in Microsoft SQL Server allows an unauthorized remote attacker to cause a denial of service (DoS) condition over a network.

Affected products:

SQL Server

Source: https://nvd.nist.gov/vuln/detail/CVE-2026-67376

Related in this roundup: CVE-2026-65669, CVE-2026-47297, CVE-2026-66814, CVE-2026-66818, CVE-2026-66819, CVE-2026-66820, CVE-2026-67368, CVE-2026-67370, CVE-2026-67373, CVE-2026-67378, CVE-2026-67379, CVE-2026-67380, CVE-2026-67381, CVE-2026-67384, CVE-2026-67385, CVE-2026-67388, CVE-2026-67631, CVE-2026-67636, CVE-2026-67638, CVE-2026-67639, CVE-2026-67642, CVE-2026-67643, CVE-2026-68775, CVE-2026-68786, CVE-2026-68787, CVE-2026-77482, CVE-2026-67629, CVE-2026-67630, CVE-2026-67633, CVE-2026-68781, CVE-2026-68784, CVE-2026-68785, CVE-2026-67383, CVE-2026-67389, CVE-2026-73029, CVE-2026-66816, CVE-2026-67386, CVE-2026-67390, CVE-2026-67393, CVE-2026-67641, CVE-2026-67648, CVE-2026-68776, CVE-2026-68777, CVE-2026-68778, CVE-2026-68779, CVE-2026-68780, CVE-2026-73028, CVE-2026-77480, CVE-2026-77483, CVE-2026-77484, CVE-2026-77487, CVE-2026-77485, CVE-2026-77486, CVE-2026-77488, CVE-2026-69562, CVE-2026-78456, CVE-2026-67369, CVE-2026-67624, CVE-2026-67645, CVE-2026-77481.

CVE-2026-67378

CVE-2026-67378 describes an untrusted pointer dereference vulnerability in Microsoft SQL Server. This vulnerability allows an authorized attacker to achieve remote code execution over a network. Detection engineers should monitor for unauthorized or unusual execution patterns originating from database service accounts or anomalous memory access patterns indicative of exploitation attempts.

Affected products:

SQL Server

Source: https://nvd.nist.gov/vuln/detail/CVE-2026-67378

Related in this roundup: CVE-2026-65669, CVE-2026-47297, CVE-2026-66814, CVE-2026-66818, CVE-2026-66819, CVE-2026-66820, CVE-2026-67368, CVE-2026-67370, CVE-2026-67373, CVE-2026-67376, CVE-2026-67379, CVE-2026-67380, CVE-2026-67381, CVE-2026-67384, CVE-2026-67385, CVE-2026-67388, CVE-2026-67631, CVE-2026-67636, CVE-2026-67638, CVE-2026-67639, CVE-2026-67642, CVE-2026-67643, CVE-2026-68775, CVE-2026-68786, CVE-2026-68787, CVE-2026-77482, CVE-2026-67629, CVE-2026-67630, CVE-2026-67633, CVE-2026-68781, CVE-2026-68784, CVE-2026-68785, CVE-2026-67383, CVE-2026-67389, CVE-2026-73029, CVE-2026-66816, CVE-2026-67386, CVE-2026-67390, CVE-2026-67393, CVE-2026-67641, CVE-2026-67648, CVE-2026-68776, CVE-2026-68777, CVE-2026-68778, CVE-2026-68779, CVE-2026-68780, CVE-2026-73028, CVE-2026-77480, CVE-2026-77483, CVE-2026-77484, CVE-2026-77487, CVE-2026-77485, CVE-2026-77486, CVE-2026-77488, CVE-2026-69562, CVE-2026-78456, CVE-2026-67369, CVE-2026-67624, CVE-2026-67645, CVE-2026-77481.

CVE-2026-67379

CVE-2026-67379 describes a stack-based buffer overflow vulnerability in Microsoft SQL Server. An authorized attacker can leverage this flaw to execute arbitrary code over the network, posing a significant risk to database security and integrity.

Affected products:

SQL Server

Source: https://nvd.nist.gov/vuln/detail/CVE-2026-67379

Related in this roundup: CVE-2026-65669, CVE-2026-47297, CVE-2026-66814, CVE-2026-66818, CVE-2026-66819, CVE-2026-66820, CVE-2026-67368, CVE-2026-67370, CVE-2026-67373, CVE-2026-67376, CVE-2026-67378, CVE-2026-67380, CVE-2026-67381, CVE-2026-67384, CVE-2026-67385, CVE-2026-67388, CVE-2026-67631, CVE-2026-67636, CVE-2026-67638, CVE-2026-67639, CVE-2026-67642, CVE-2026-67643, CVE-2026-68775, CVE-2026-68786, CVE-2026-68787, CVE-2026-77482, CVE-2026-67629, CVE-2026-67630, CVE-2026-67633, CVE-2026-68781, CVE-2026-68784, CVE-2026-68785, CVE-2026-67383, CVE-2026-67389, CVE-2026-73029, CVE-2026-66816, CVE-2026-67386, CVE-2026-67390, CVE-2026-67393, CVE-2026-67641, CVE-2026-67648, CVE-2026-68776, CVE-2026-68777, CVE-2026-68778, CVE-2026-68779, CVE-2026-68780, CVE-2026-73028, CVE-2026-77480, CVE-2026-77483, CVE-2026-77484, CVE-2026-77487, CVE-2026-77485, CVE-2026-77486, CVE-2026-77488, CVE-2026-69562, CVE-2026-78456, CVE-2026-67369, CVE-2026-67624, CVE-2026-67645, CVE-2026-77481.

CVE-2026-67380

CVE-2026-67380 describes a heap-based buffer overflow vulnerability in Microsoft SQL Server. An authorized attacker can leverage this flaw to achieve remote code execution over a network, potentially compromising the host system.

Affected products:

SQL Server

Source: https://nvd.nist.gov/vuln/detail/CVE-2026-67380

Related in this roundup: CVE-2026-65669, CVE-2026-47297, CVE-2026-66814, CVE-2026-66818, CVE-2026-66819, CVE-2026-66820, CVE-2026-67368, CVE-2026-67370, CVE-2026-67373, CVE-2026-67376, CVE-2026-67378, CVE-2026-67379, CVE-2026-67381, CVE-2026-67384, CVE-2026-67385, CVE-2026-67388, CVE-2026-67631, CVE-2026-67636, CVE-2026-67638, CVE-2026-67639, CVE-2026-67642, CVE-2026-67643, CVE-2026-68775, CVE-2026-68786, CVE-2026-68787, CVE-2026-77482, CVE-2026-67629, CVE-2026-67630, CVE-2026-67633, CVE-2026-68781, CVE-2026-68784, CVE-2026-68785, CVE-2026-67383, CVE-2026-67389, CVE-2026-73029, CVE-2026-66816, CVE-2026-67386, CVE-2026-67390, CVE-2026-67393, CVE-2026-67641, CVE-2026-67648, CVE-2026-68776, CVE-2026-68777, CVE-2026-68778, CVE-2026-68779, CVE-2026-68780, CVE-2026-73028, CVE-2026-77480, CVE-2026-77483, CVE-2026-77484, CVE-2026-77487, CVE-2026-77485, CVE-2026-77486, CVE-2026-77488, CVE-2026-69562, CVE-2026-78456, CVE-2026-67369, CVE-2026-67624, CVE-2026-67645, CVE-2026-77481.

CVE-2026-67381

CVE-2026-67381 is a heap-based buffer overflow vulnerability in Microsoft SQL Server that enables an authenticated attacker to perform privilege escalation over a network connection.

Affected products:

SQL Server

Source: https://nvd.nist.gov/vuln/detail/CVE-2026-67381

Related in this roundup: CVE-2026-65669, CVE-2026-47297, CVE-2026-66814, CVE-2026-66818, CVE-2026-66819, CVE-2026-66820, CVE-2026-67368, CVE-2026-67370, CVE-2026-67373, CVE-2026-67376, CVE-2026-67378, CVE-2026-67379, CVE-2026-67380, CVE-2026-67384, CVE-2026-67385, CVE-2026-67388, CVE-2026-67631, CVE-2026-67636, CVE-2026-67638, CVE-2026-67639, CVE-2026-67642, CVE-2026-67643, CVE-2026-68775, CVE-2026-68786, CVE-2026-68787, CVE-2026-77482, CVE-2026-67629, CVE-2026-67630, CVE-2026-67633, CVE-2026-68781, CVE-2026-68784, CVE-2026-68785, CVE-2026-67383, CVE-2026-67389, CVE-2026-73029, CVE-2026-66816, CVE-2026-67386, CVE-2026-67390, CVE-2026-67393, CVE-2026-67641, CVE-2026-67648, CVE-2026-68776, CVE-2026-68777, CVE-2026-68778, CVE-2026-68779, CVE-2026-68780, CVE-2026-73028, CVE-2026-77480, CVE-2026-77483, CVE-2026-77484, CVE-2026-77487, CVE-2026-77485, CVE-2026-77486, CVE-2026-77488, CVE-2026-69562, CVE-2026-78456, CVE-2026-67369, CVE-2026-67624, CVE-2026-67645, CVE-2026-77481.

CVE-2026-67384

CVE-2026-67384 describes an integer overflow or wraparound vulnerability in Microsoft SQL Server that allows an authenticated attacker to achieve remote code execution over a network. The vulnerability is characterized by a CVSS base score of 8.8, indicating high severity.

Affected products:

SQL Server

Source: https://nvd.nist.gov/vuln/detail/CVE-2026-67384

Related in this roundup: CVE-2026-65669, CVE-2026-47297, CVE-2026-66814, CVE-2026-66818, CVE-2026-66819, CVE-2026-66820, CVE-2026-67368, CVE-2026-67370, CVE-2026-67373, CVE-2026-67376, CVE-2026-67378, CVE-2026-67379, CVE-2026-67380, CVE-2026-67381, CVE-2026-67385, CVE-2026-67388, CVE-2026-67631, CVE-2026-67636, CVE-2026-67638, CVE-2026-67639, CVE-2026-67642, CVE-2026-67643, CVE-2026-68775, CVE-2026-68786, CVE-2026-68787, CVE-2026-77482, CVE-2026-67629, CVE-2026-67630, CVE-2026-67633, CVE-2026-68781, CVE-2026-68784, CVE-2026-68785, CVE-2026-67383, CVE-2026-67389, CVE-2026-73029, CVE-2026-66816, CVE-2026-67386, CVE-2026-67390, CVE-2026-67393, CVE-2026-67641, CVE-2026-67648, CVE-2026-68776, CVE-2026-68777, CVE-2026-68778, CVE-2026-68779, CVE-2026-68780, CVE-2026-73028, CVE-2026-77480, CVE-2026-77483, CVE-2026-77484, CVE-2026-77487, CVE-2026-77485, CVE-2026-77486, CVE-2026-77488, CVE-2026-69562, CVE-2026-78456, CVE-2026-67369, CVE-2026-67624, CVE-2026-67645, CVE-2026-77481.

CVE-2026-67385

CVE-2026-67385 is a use-after-free vulnerability in Microsoft SQL Server that enables an authorized attacker to achieve remote code execution over a network. The vulnerability necessitates existing authorization to exploit, posing a significant risk to database availability and system integrity.

Affected products:

SQL Server

Source: https://nvd.nist.gov/vuln/detail/CVE-2026-67385

Related in this roundup: CVE-2026-65669, CVE-2026-47297, CVE-2026-66814, CVE-2026-66818, CVE-2026-66819, CVE-2026-66820, CVE-2026-67368, CVE-2026-67370, CVE-2026-67373, CVE-2026-67376, CVE-2026-67378, CVE-2026-67379, CVE-2026-67380, CVE-2026-67381, CVE-2026-67384, CVE-2026-67388, CVE-2026-67631, CVE-2026-67636, CVE-2026-67638, CVE-2026-67639, CVE-2026-67642, CVE-2026-67643, CVE-2026-68775, CVE-2026-68786, CVE-2026-68787, CVE-2026-77482, CVE-2026-67629, CVE-2026-67630, CVE-2026-67633, CVE-2026-68781, CVE-2026-68784, CVE-2026-68785, CVE-2026-67383, CVE-2026-67389, CVE-2026-73029, CVE-2026-66816, CVE-2026-67386, CVE-2026-67390, CVE-2026-67393, CVE-2026-67641, CVE-2026-67648, CVE-2026-68776, CVE-2026-68777, CVE-2026-68778, CVE-2026-68779, CVE-2026-68780, CVE-2026-73028, CVE-2026-77480, CVE-2026-77483, CVE-2026-77484, CVE-2026-77487, CVE-2026-77485, CVE-2026-77486, CVE-2026-77488, CVE-2026-69562, CVE-2026-78456, CVE-2026-67369, CVE-2026-67624, CVE-2026-67645, CVE-2026-77481.

CVE-2026-67388

CVE-2026-67388 is a heap-based buffer overflow vulnerability in Microsoft SQL Server that allows an authenticated attacker to achieve remote code execution over a network. The vulnerability exists due to improper handling of memory during data processing, which can be exploited by an authorized user to execute arbitrary code with the privileges of the SQL Server process.

Affected products:

SQL Server

Source: https://nvd.nist.gov/vuln/detail/CVE-2026-67388

Related in this roundup: CVE-2026-65669, CVE-2026-47297, CVE-2026-66814, CVE-2026-66818, CVE-2026-66819, CVE-2026-66820, CVE-2026-67368, CVE-2026-67370, CVE-2026-67373, CVE-2026-67376, CVE-2026-67378, CVE-2026-67379, CVE-2026-67380, CVE-2026-67381, CVE-2026-67384, CVE-2026-67385, CVE-2026-67631, CVE-2026-67636, CVE-2026-67638, CVE-2026-67639, CVE-2026-67642, CVE-2026-67643, CVE-2026-68775, CVE-2026-68786, CVE-2026-68787, CVE-2026-77482, CVE-2026-67629, CVE-2026-67630, CVE-2026-67633, CVE-2026-68781, CVE-2026-68784, CVE-2026-68785, CVE-2026-67383, CVE-2026-67389, CVE-2026-73029, CVE-2026-66816, CVE-2026-67386, CVE-2026-67390, CVE-2026-67393, CVE-2026-67641, CVE-2026-67648, CVE-2026-68776, CVE-2026-68777, CVE-2026-68778, CVE-2026-68779, CVE-2026-68780, CVE-2026-73028, CVE-2026-77480, CVE-2026-77483, CVE-2026-77484, CVE-2026-77487, CVE-2026-77485, CVE-2026-77486, CVE-2026-77488, CVE-2026-69562, CVE-2026-78456, CVE-2026-67369, CVE-2026-67624, CVE-2026-67645, CVE-2026-77481.

CVE-2026-67631

CVE-2026-67631 is a heap-based buffer overflow vulnerability in Microsoft SQL Server that allows an authenticated attacker to achieve remote code execution over a network. Detection should focus on monitoring anomalous memory usage, unexpected process spawning, or unauthorized execution patterns originating from SQL Server service accounts.

Affected products:

SQL Server

Source: https://nvd.nist.gov/vuln/detail/CVE-2026-67631

Related in this roundup: CVE-2026-65669, CVE-2026-47297, CVE-2026-66814, CVE-2026-66818, CVE-2026-66819, CVE-2026-66820, CVE-2026-67368, CVE-2026-67370, CVE-2026-67373, CVE-2026-67376, CVE-2026-67378, CVE-2026-67379, CVE-2026-67380, CVE-2026-67381, CVE-2026-67384, CVE-2026-67385, CVE-2026-67388, CVE-2026-67636, CVE-2026-67638, CVE-2026-67639, CVE-2026-67642, CVE-2026-67643, CVE-2026-68775, CVE-2026-68786, CVE-2026-68787, CVE-2026-77482, CVE-2026-67629, CVE-2026-67630, CVE-2026-67633, CVE-2026-68781, CVE-2026-68784, CVE-2026-68785, CVE-2026-67383, CVE-2026-67389, CVE-2026-73029, CVE-2026-66816, CVE-2026-67386, CVE-2026-67390, CVE-2026-67393, CVE-2026-67641, CVE-2026-67648, CVE-2026-68776, CVE-2026-68777, CVE-2026-68778, CVE-2026-68779, CVE-2026-68780, CVE-2026-73028, CVE-2026-77480, CVE-2026-77483, CVE-2026-77484, CVE-2026-77487, CVE-2026-77485, CVE-2026-77486, CVE-2026-77488, CVE-2026-69562, CVE-2026-78456, CVE-2026-67369, CVE-2026-67624, CVE-2026-67645, CVE-2026-77481.

CVE-2026-67636

CVE-2026-67636 is an out-of-bounds read vulnerability in Microsoft SQL Server that can be exploited by an authorized attacker to achieve remote code execution over a network, carrying a CVSS base score of 8.5.

Affected products:

SQL Server

Source: https://nvd.nist.gov/vuln/detail/CVE-2026-67636

Related in this roundup: CVE-2026-65669, CVE-2026-47297, CVE-2026-66814, CVE-2026-66818, CVE-2026-66819, CVE-2026-66820, CVE-2026-67368, CVE-2026-67370, CVE-2026-67373, CVE-2026-67376, CVE-2026-67378, CVE-2026-67379, CVE-2026-67380, CVE-2026-67381, CVE-2026-67384, CVE-2026-67385, CVE-2026-67388, CVE-2026-67631, CVE-2026-67638, CVE-2026-67639, CVE-2026-67642, CVE-2026-67643, CVE-2026-68775, CVE-2026-68786, CVE-2026-68787, CVE-2026-77482, CVE-2026-67629, CVE-2026-67630, CVE-2026-67633, CVE-2026-68781, CVE-2026-68784, CVE-2026-68785, CVE-2026-67383, CVE-2026-67389, CVE-2026-73029, CVE-2026-66816, CVE-2026-67386, CVE-2026-67390, CVE-2026-67393, CVE-2026-67641, CVE-2026-67648, CVE-2026-68776, CVE-2026-68777, CVE-2026-68778, CVE-2026-68779, CVE-2026-68780, CVE-2026-73028, CVE-2026-77480, CVE-2026-77483, CVE-2026-77484, CVE-2026-77487, CVE-2026-77485, CVE-2026-77486, CVE-2026-77488, CVE-2026-69562, CVE-2026-78456, CVE-2026-67369, CVE-2026-67624, CVE-2026-67645, CVE-2026-77481.

CVE-2026-67638

CVE-2026-67638 is a heap-based buffer overflow vulnerability in Microsoft SQL Server that enables an authorized attacker to achieve remote code execution over a network. The vulnerability carries a CVSS v3.1 base score of 8.8, indicating high severity.

Affected products:

SQL Server

Source: https://nvd.nist.gov/vuln/detail/CVE-2026-67638

Related in this roundup: CVE-2026-65669, CVE-2026-47297, CVE-2026-66814, CVE-2026-66818, CVE-2026-66819, CVE-2026-66820, CVE-2026-67368, CVE-2026-67370, CVE-2026-67373, CVE-2026-67376, CVE-2026-67378, CVE-2026-67379, CVE-2026-67380, CVE-2026-67381, CVE-2026-67384, CVE-2026-67385, CVE-2026-67388, CVE-2026-67631, CVE-2026-67636, CVE-2026-67639, CVE-2026-67642, CVE-2026-67643, CVE-2026-68775, CVE-2026-68786, CVE-2026-68787, CVE-2026-77482, CVE-2026-67629, CVE-2026-67630, CVE-2026-67633, CVE-2026-68781, CVE-2026-68784, CVE-2026-68785, CVE-2026-67383, CVE-2026-67389, CVE-2026-73029, CVE-2026-66816, CVE-2026-67386, CVE-2026-67390, CVE-2026-67393, CVE-2026-67641, CVE-2026-67648, CVE-2026-68776, CVE-2026-68777, CVE-2026-68778, CVE-2026-68779, CVE-2026-68780, CVE-2026-73028, CVE-2026-77480, CVE-2026-77483, CVE-2026-77484, CVE-2026-77487, CVE-2026-77485, CVE-2026-77486, CVE-2026-77488, CVE-2026-69562, CVE-2026-78456, CVE-2026-67369, CVE-2026-67624, CVE-2026-67645, CVE-2026-77481.

CVE-2026-67639

CVE-2026-67639 is a heap-based buffer overflow vulnerability in Microsoft SQL Server that enables an authorized attacker to achieve remote code execution over a network. The vulnerability requires existing authorization, but allows for system-level exploitation once triggered.

Affected products:

SQL Server

Source: https://nvd.nist.gov/vuln/detail/CVE-2026-67639

Related in this roundup: CVE-2026-65669, CVE-2026-47297, CVE-2026-66814, CVE-2026-66818, CVE-2026-66819, CVE-2026-66820, CVE-2026-67368, CVE-2026-67370, CVE-2026-67373, CVE-2026-67376, CVE-2026-67378, CVE-2026-67379, CVE-2026-67380, CVE-2026-67381, CVE-2026-67384, CVE-2026-67385, CVE-2026-67388, CVE-2026-67631, CVE-2026-67636, CVE-2026-67638, CVE-2026-67642, CVE-2026-67643, CVE-2026-68775, CVE-2026-68786, CVE-2026-68787, CVE-2026-77482, CVE-2026-67629, CVE-2026-67630, CVE-2026-67633, CVE-2026-68781, CVE-2026-68784, CVE-2026-68785, CVE-2026-67383, CVE-2026-67389, CVE-2026-73029, CVE-2026-66816, CVE-2026-67386, CVE-2026-67390, CVE-2026-67393, CVE-2026-67641, CVE-2026-67648, CVE-2026-68776, CVE-2026-68777, CVE-2026-68778, CVE-2026-68779, CVE-2026-68780, CVE-2026-73028, CVE-2026-77480, CVE-2026-77483, CVE-2026-77484, CVE-2026-77487, CVE-2026-77485, CVE-2026-77486, CVE-2026-77488, CVE-2026-69562, CVE-2026-78456, CVE-2026-67369, CVE-2026-67624, CVE-2026-67645, CVE-2026-77481.

CVE-2026-67642

CVE-2026-67642 is a heap-based buffer overflow vulnerability in Microsoft SQL Server that allows an authenticated attacker to achieve remote code execution over a network. The vulnerability carries a CVSS v3.1 base score of 8.8, indicating high severity.

Affected products:

SQL Server

Source: https://nvd.nist.gov/vuln/detail/CVE-2026-67642

Related in this roundup: CVE-2026-65669, CVE-2026-47297, CVE-2026-66814, CVE-2026-66818, CVE-2026-66819, CVE-2026-66820, CVE-2026-67368, CVE-2026-67370, CVE-2026-67373, CVE-2026-67376, CVE-2026-67378, CVE-2026-67379, CVE-2026-67380, CVE-2026-67381, CVE-2026-67384, CVE-2026-67385, CVE-2026-67388, CVE-2026-67631, CVE-2026-67636, CVE-2026-67638, CVE-2026-67639, CVE-2026-67643, CVE-2026-68775, CVE-2026-68786, CVE-2026-68787, CVE-2026-77482, CVE-2026-67629, CVE-2026-67630, CVE-2026-67633, CVE-2026-68781, CVE-2026-68784, CVE-2026-68785, CVE-2026-67383, CVE-2026-67389, CVE-2026-73029, CVE-2026-66816, CVE-2026-67386, CVE-2026-67390, CVE-2026-67393, CVE-2026-67641, CVE-2026-67648, CVE-2026-68776, CVE-2026-68777, CVE-2026-68778, CVE-2026-68779, CVE-2026-68780, CVE-2026-73028, CVE-2026-77480, CVE-2026-77483, CVE-2026-77484, CVE-2026-77487, CVE-2026-77485, CVE-2026-77486, CVE-2026-77488, CVE-2026-69562, CVE-2026-78456, CVE-2026-67369, CVE-2026-67624, CVE-2026-67645, CVE-2026-77481.

CVE-2026-67643

CVE-2026-67643 is a heap-based buffer overflow vulnerability in Microsoft SQL Server that enables an authorized network-based attacker to achieve remote code execution on the target system.

Affected products:

SQL Server

Source: https://nvd.nist.gov/vuln/detail/CVE-2026-67643

Related in this roundup: CVE-2026-65669, CVE-2026-47297, CVE-2026-66814, CVE-2026-66818, CVE-2026-66819, CVE-2026-66820, CVE-2026-67368, CVE-2026-67370, CVE-2026-67373, CVE-2026-67376, CVE-2026-67378, CVE-2026-67379, CVE-2026-67380, CVE-2026-67381, CVE-2026-67384, CVE-2026-67385, CVE-2026-67388, CVE-2026-67631, CVE-2026-67636, CVE-2026-67638, CVE-2026-67639, CVE-2026-67642, CVE-2026-68775, CVE-2026-68786, CVE-2026-68787, CVE-2026-77482, CVE-2026-67629, CVE-2026-67630, CVE-2026-67633, CVE-2026-68781, CVE-2026-68784, CVE-2026-68785, CVE-2026-67383, CVE-2026-67389, CVE-2026-73029, CVE-2026-66816, CVE-2026-67386, CVE-2026-67390, CVE-2026-67393, CVE-2026-67641, CVE-2026-67648, CVE-2026-68776, CVE-2026-68777, CVE-2026-68778, CVE-2026-68779, CVE-2026-68780, CVE-2026-73028, CVE-2026-77480, CVE-2026-77483, CVE-2026-77484, CVE-2026-77487, CVE-2026-77485, CVE-2026-77486, CVE-2026-77488, CVE-2026-69562, CVE-2026-78456, CVE-2026-67369, CVE-2026-67624, CVE-2026-67645, CVE-2026-77481.

CVE-2026-68775

CVE-2026-68775 describes a heap-based buffer overflow vulnerability in Microsoft SQL Server that enables an authorized attacker to achieve remote code execution over a network. Detection efforts should focus on identifying abnormal memory access patterns or unauthorized network traffic directed at SQL Server instances.

Affected products:

SQL Server

Source: https://nvd.nist.gov/vuln/detail/CVE-2026-68775

Related in this roundup: CVE-2026-65669, CVE-2026-47297, CVE-2026-66814, CVE-2026-66818, CVE-2026-66819, CVE-2026-66820, CVE-2026-67368, CVE-2026-67370, CVE-2026-67373, CVE-2026-67376, CVE-2026-67378, CVE-2026-67379, CVE-2026-67380, CVE-2026-67381, CVE-2026-67384, CVE-2026-67385, CVE-2026-67388, CVE-2026-67631, CVE-2026-67636, CVE-2026-67638, CVE-2026-67639, CVE-2026-67642, CVE-2026-67643, CVE-2026-68786, CVE-2026-68787, CVE-2026-77482, CVE-2026-67629, CVE-2026-67630, CVE-2026-67633, CVE-2026-68781, CVE-2026-68784, CVE-2026-68785, CVE-2026-67383, CVE-2026-67389, CVE-2026-73029, CVE-2026-66816, CVE-2026-67386, CVE-2026-67390, CVE-2026-67393, CVE-2026-67641, CVE-2026-67648, CVE-2026-68776, CVE-2026-68777, CVE-2026-68778, CVE-2026-68779, CVE-2026-68780, CVE-2026-73028, CVE-2026-77480, CVE-2026-77483, CVE-2026-77484, CVE-2026-77487, CVE-2026-77485, CVE-2026-77486, CVE-2026-77488, CVE-2026-69562, CVE-2026-78456, CVE-2026-67369, CVE-2026-67624, CVE-2026-67645, CVE-2026-77481.

CVE-2026-68786

CVE-2026-68786 describes a heap-based buffer overflow vulnerability in Microsoft SQL Server. An authorized attacker can exploit this flaw over a network to achieve remote code execution, necessitating robust monitoring of database server traffic and service-level permissions.

Affected products:

SQL Server

Source: https://nvd.nist.gov/vuln/detail/CVE-2026-68786

Related in this roundup: CVE-2026-65669, CVE-2026-47297, CVE-2026-66814, CVE-2026-66818, CVE-2026-66819, CVE-2026-66820, CVE-2026-67368, CVE-2026-67370, CVE-2026-67373, CVE-2026-67376, CVE-2026-67378, CVE-2026-67379, CVE-2026-67380, CVE-2026-67381, CVE-2026-67384, CVE-2026-67385, CVE-2026-67388, CVE-2026-67631, CVE-2026-67636, CVE-2026-67638, CVE-2026-67639, CVE-2026-67642, CVE-2026-67643, CVE-2026-68775, CVE-2026-68787, CVE-2026-77482, CVE-2026-67629, CVE-2026-67630, CVE-2026-67633, CVE-2026-68781, CVE-2026-68784, CVE-2026-68785, CVE-2026-67383, CVE-2026-67389, CVE-2026-73029, CVE-2026-66816, CVE-2026-67386, CVE-2026-67390, CVE-2026-67393, CVE-2026-67641, CVE-2026-67648, CVE-2026-68776, CVE-2026-68777, CVE-2026-68778, CVE-2026-68779, CVE-2026-68780, CVE-2026-73028, CVE-2026-77480, CVE-2026-77483, CVE-2026-77484, CVE-2026-77487, CVE-2026-77485, CVE-2026-77486, CVE-2026-77488, CVE-2026-69562, CVE-2026-78456, CVE-2026-67369, CVE-2026-67624, CVE-2026-67645, CVE-2026-77481.

CVE-2026-68787

CVE-2026-68787 describes a heap-based buffer overflow vulnerability in Microsoft SQL Server. An authorized attacker with local access can exploit this flaw to execute arbitrary code, potentially leading to local privilege escalation.

Affected products:

SQL Server

Source: https://nvd.nist.gov/vuln/detail/CVE-2026-68787

Related in this roundup: CVE-2026-65669, CVE-2026-47297, CVE-2026-66814, CVE-2026-66818, CVE-2026-66819, CVE-2026-66820, CVE-2026-67368, CVE-2026-67370, CVE-2026-67373, CVE-2026-67376, CVE-2026-67378, CVE-2026-67379, CVE-2026-67380, CVE-2026-67381, CVE-2026-67384, CVE-2026-67385, CVE-2026-67388, CVE-2026-67631, CVE-2026-67636, CVE-2026-67638, CVE-2026-67639, CVE-2026-67642, CVE-2026-67643, CVE-2026-68775, CVE-2026-68786, CVE-2026-77482, CVE-2026-67629, CVE-2026-67630, CVE-2026-67633, CVE-2026-68781, CVE-2026-68784, CVE-2026-68785, CVE-2026-67383, CVE-2026-67389, CVE-2026-73029, CVE-2026-66816, CVE-2026-67386, CVE-2026-67390, CVE-2026-67393, CVE-2026-67641, CVE-2026-67648, CVE-2026-68776, CVE-2026-68777, CVE-2026-68778, CVE-2026-68779, CVE-2026-68780, CVE-2026-73028, CVE-2026-77480, CVE-2026-77483, CVE-2026-77484, CVE-2026-77487, CVE-2026-77485, CVE-2026-77486, CVE-2026-77488, CVE-2026-69562, CVE-2026-78456, CVE-2026-67369, CVE-2026-67624, CVE-2026-67645, CVE-2026-77481.

CVE-2026-68824

CVE-2026-68824 is a race condition vulnerability within the Windows Connected User Experiences and Telemetry service. An authorized local attacker can exploit this improper synchronization of shared resources to achieve privilege escalation on the target system.

Affected products:

Windows Connected User Experiences and Telemetry

Source: https://nvd.nist.gov/vuln/detail/CVE-2026-68824

Related in this roundup: CVE-2026-68847, CVE-2026-69267.

CVE-2026-68825

CVE-2026-68825 describes a use-after-free vulnerability within the Windows Bind Filter Driver that can be exploited by an authenticated, local attacker to achieve privilege escalation.

Affected products:

Windows Bind Filter Driver

Source: https://nvd.nist.gov/vuln/detail/CVE-2026-68825

CVE-2026-68827

CVE-2026-68827 is an integer underflow vulnerability within the Windows GDI+ component. This flaw enables an authorized attacker to achieve privilege escalation over a network connection by triggering a wraparound condition, potentially allowing for arbitrary code execution or escalated system access.

Affected products:

GDI+

Source: https://nvd.nist.gov/vuln/detail/CVE-2026-68827

CVE-2026-68828

CVE-2026-68828 is a heap-based buffer overflow vulnerability within the Microsoft Remote Desktop Client. This vulnerability allows an unauthorized remote attacker to execute arbitrary code on the target system over a network connection, posing a critical risk to systems utilizing this client for remote management.

Affected products:

Remote Desktop Client

Source: https://nvd.nist.gov/vuln/detail/CVE-2026-68828

Related in this roundup: CVE-2026-69485, CVE-2026-77896, CVE-2026-78463, CVE-2026-80074, CVE-2026-80077, CVE-2026-83998, CVE-2026-69317, CVE-2026-69358.

CVE-2026-68832

An integer overflow or wraparound vulnerability exists in the Windows NTFS file system, which can be exploited by an authorized local attacker to achieve privilege escalation.

Affected products:

Windows

Source: https://nvd.nist.gov/vuln/detail/CVE-2026-68832

Related in this roundup: CVE-2026-81963, CVE-2026-85880, CVE-2026-69496, CVE-2026-69586, CVE-2026-69768, CVE-2026-73025, CVE-2026-56172, CVE-2026-68834, CVE-2026-68838, CVE-2026-68841, CVE-2026-68875, CVE-2026-68877, CVE-2026-68880, CVE-2026-69265, CVE-2026-69270, CVE-2026-69274, CVE-2026-69275, CVE-2026-69280, CVE-2026-69283, CVE-2026-69284, CVE-2026-69289, CVE-2026-69296, CVE-2026-69300, CVE-2026-69301, CVE-2026-69307, CVE-2026-69312, CVE-2026-69314, CVE-2026-69332, CVE-2026-69333, CVE-2026-69335, CVE-2026-68833, CVE-2026-68851, CVE-2026-69366, CVE-2026-69337, CVE-2026-69347, CVE-2026-69379, CVE-2026-69390, CVE-2026-69401, CVE-2026-69413, CVE-2026-69420, CVE-2026-69429, CVE-2026-69448, CVE-2026-69455, CVE-2026-69532, CVE-2026-69472, CVE-2026-69479, CVE-2026-69531, CVE-2026-69517, CVE-2026-69505, CVE-2026-69504, CVE-2026-69527, CVE-2026-69549, CVE-2026-69588, CVE-2026-69609, CVE-2026-69648, CVE-2026-69689, CVE-2026-69790, CVE-2026-69638, CVE-2026-69859, CVE-2026-69717, CVE-2026-69711, CVE-2026-69875, CVE-2026-69889, CVE-2026-69757, CVE-2026-69741, CVE-2026-69762, CVE-2026-69744, CVE-2026-69832, CVE-2026-69691, CVE-2026-69808, CVE-2026-69775, CVE-2026-69822, CVE-2026-69770, CVE-2026-69676, CVE-2026-70289, CVE-2026-70563, CVE-2026-71329, CVE-2026-71332, CVE-2026-71350, CVE-2026-71348, CVE-2026-71345, CVE-2026-69469, CVE-2026-69501, CVE-2026-69548, CVE-2026-69846, CVE-2026-70283, CVE-2026-72981, CVE-2026-77491, CVE-2026-77492, CVE-2026-77503, CVE-2026-80093, CVE-2026-72949, CVE-2026-70019, CVE-2026-72940, CVE-2026-69573, CVE-2026-70290, CVE-2026-83991, CVE-2026-83999, CVE-2026-69321, CVE-2026-69316, CVE-2026-69340, CVE-2026-69348, CVE-2026-69350, CVE-2026-69353, CVE-2026-69357, CVE-2026-69393, CVE-2026-69410, CVE-2026-69421, CVE-2026-69428, CVE-2026-69425, CVE-2026-69427, CVE-2026-69434, CVE-2026-69456, CVE-2026-69459, CVE-2026-69478, CVE-2026-69561, CVE-2026-69512, CVE-2026-69498, CVE-2026-69571, CVE-2026-69535, CVE-2026-69538, CVE-2026-69591, CVE-2026-69566, CVE-2026-69567, CVE-2026-69584, CVE-2026-69617, CVE-2026-69630, CVE-2026-69610, CVE-2026-69881, CVE-2026-69680, CVE-2026-69619, CVE-2026-69685, CVE-2026-69643, CVE-2026-69687, CVE-2026-69791, CVE-2026-69707, CVE-2026-69652, CVE-2026-69834, CVE-2026-69709, CVE-2026-69844, CVE-2026-69814, CVE-2026-69731, CVE-2026-69706, CVE-2026-69779, CVE-2026-69895, CVE-2026-69792, CVE-2026-69853, CVE-2026-69761, CVE-2026-69785, CVE-2026-69818, CVE-2026-69786, CVE-2026-69874, CVE-2026-70565, CVE-2026-70574, CVE-2026-70569, CVE-2026-70575, CVE-2026-71349, CVE-2026-72927, CVE-2026-72952, CVE-2026-72942, CVE-2026-72966, CVE-2026-72967, CVE-2026-69426, CVE-2026-69564, CVE-2026-72985, CVE-2026-73019, CVE-2026-78451, CVE-2026-78452, CVE-2026-83940, CVE-2026-69598, CVE-2026-83995, CVE-2026-83501, CVE-2026-83498.

CVE-2026-68834

CVE-2026-68834 is a stack-based buffer overflow vulnerability residing in the Windows NTFS file system driver. This flaw allows a locally authorized attacker to perform privilege escalation across a network, potentially gaining elevated system rights.

Affected products:

Windows

Source: https://nvd.nist.gov/vuln/detail/CVE-2026-68834

Related in this roundup: CVE-2026-81963, CVE-2026-85880, CVE-2026-69496, CVE-2026-69586, CVE-2026-69768, CVE-2026-73025, CVE-2026-56172, CVE-2026-68832, CVE-2026-68838, CVE-2026-68841, CVE-2026-68875, CVE-2026-68877, CVE-2026-68880, CVE-2026-69265, CVE-2026-69270, CVE-2026-69274, CVE-2026-69275, CVE-2026-69280, CVE-2026-69283, CVE-2026-69284, CVE-2026-69289, CVE-2026-69296, CVE-2026-69300, CVE-2026-69301, CVE-2026-69307, CVE-2026-69312, CVE-2026-69314, CVE-2026-69332, CVE-2026-69333, CVE-2026-69335, CVE-2026-68833, CVE-2026-68851, CVE-2026-69366, CVE-2026-69337, CVE-2026-69347, CVE-2026-69379, CVE-2026-69390, CVE-2026-69401, CVE-2026-69413, CVE-2026-69420, CVE-2026-69429, CVE-2026-69448, CVE-2026-69455, CVE-2026-69532, CVE-2026-69472, CVE-2026-69479, CVE-2026-69531, CVE-2026-69517, CVE-2026-69505, CVE-2026-69504, CVE-2026-69527, CVE-2026-69549, CVE-2026-69588, CVE-2026-69609, CVE-2026-69648, CVE-2026-69689, CVE-2026-69790, CVE-2026-69638, CVE-2026-69859, CVE-2026-69717, CVE-2026-69711, CVE-2026-69875, CVE-2026-69889, CVE-2026-69757, CVE-2026-69741, CVE-2026-69762, CVE-2026-69744, CVE-2026-69832, CVE-2026-69691, CVE-2026-69808, CVE-2026-69775, CVE-2026-69822, CVE-2026-69770, CVE-2026-69676, CVE-2026-70289, CVE-2026-70563, CVE-2026-71329, CVE-2026-71332, CVE-2026-71350, CVE-2026-71348, CVE-2026-71345, CVE-2026-69469, CVE-2026-69501, CVE-2026-69548, CVE-2026-69846, CVE-2026-70283, CVE-2026-72981, CVE-2026-77491, CVE-2026-77492, CVE-2026-77503, CVE-2026-80093, CVE-2026-72949, CVE-2026-70019, CVE-2026-72940, CVE-2026-69573, CVE-2026-70290, CVE-2026-83991, CVE-2026-83999, CVE-2026-69321, CVE-2026-69316, CVE-2026-69340, CVE-2026-69348, CVE-2026-69350, CVE-2026-69353, CVE-2026-69357, CVE-2026-69393, CVE-2026-69410, CVE-2026-69421, CVE-2026-69428, CVE-2026-69425, CVE-2026-69427, CVE-2026-69434, CVE-2026-69456, CVE-2026-69459, CVE-2026-69478, CVE-2026-69561, CVE-2026-69512, CVE-2026-69498, CVE-2026-69571, CVE-2026-69535, CVE-2026-69538, CVE-2026-69591, CVE-2026-69566, CVE-2026-69567, CVE-2026-69584, CVE-2026-69617, CVE-2026-69630, CVE-2026-69610, CVE-2026-69881, CVE-2026-69680, CVE-2026-69619, CVE-2026-69685, CVE-2026-69643, CVE-2026-69687, CVE-2026-69791, CVE-2026-69707, CVE-2026-69652, CVE-2026-69834, CVE-2026-69709, CVE-2026-69844, CVE-2026-69814, CVE-2026-69731, CVE-2026-69706, CVE-2026-69779, CVE-2026-69895, CVE-2026-69792, CVE-2026-69853, CVE-2026-69761, CVE-2026-69785, CVE-2026-69818, CVE-2026-69786, CVE-2026-69874, CVE-2026-70565, CVE-2026-70574, CVE-2026-70569, CVE-2026-70575, CVE-2026-71349, CVE-2026-72927, CVE-2026-72952, CVE-2026-72942, CVE-2026-72966, CVE-2026-72967, CVE-2026-69426, CVE-2026-69564, CVE-2026-72985, CVE-2026-73019, CVE-2026-78451, CVE-2026-78452, CVE-2026-83940, CVE-2026-69598, CVE-2026-83995, CVE-2026-83501, CVE-2026-83498.

CVE-2026-68835

A use-after-free vulnerability exists in the Windows Print Spooler components, allowing an authorized network-based attacker to elevate their privileges on the affected system.

Affected products:

Windows Print Spooler

Source: https://nvd.nist.gov/vuln/detail/CVE-2026-68835

Related in this roundup: CVE-2026-68848, CVE-2026-69309, CVE-2026-69552, CVE-2026-69838, CVE-2026-70564, CVE-2026-85877, CVE-2026-69344, CVE-2026-69346, CVE-2026-69569, CVE-2026-69921.

CVE-2026-68837

CVE-2026-68837 describes a use-after-free vulnerability within the Windows File History Service. An attacker with local, authorized access can exploit this flaw to execute code or operations with elevated privileges on the affected Windows system.

Affected products:

Windows File History Service

Source: https://nvd.nist.gov/vuln/detail/CVE-2026-68837

Related in this roundup: CVE-2026-71340, CVE-2026-72947.

CVE-2026-68838

CVE-2026-68838 identifies a stack-based buffer overflow vulnerability within the Windows NTFS file system driver. This flaw allows an authenticated attacker to execute code or elevate privileges on a targeted system via a network-based vector.

Affected products:

Windows

Source: https://nvd.nist.gov/vuln/detail/CVE-2026-68838

Related in this roundup: CVE-2026-81963, CVE-2026-85880, CVE-2026-69496, CVE-2026-69586, CVE-2026-69768, CVE-2026-73025, CVE-2026-56172, CVE-2026-68832, CVE-2026-68834, CVE-2026-68841, CVE-2026-68875, CVE-2026-68877, CVE-2026-68880, CVE-2026-69265, CVE-2026-69270, CVE-2026-69274, CVE-2026-69275, CVE-2026-69280, CVE-2026-69283, CVE-2026-69284, CVE-2026-69289, CVE-2026-69296, CVE-2026-69300, CVE-2026-69301, CVE-2026-69307, CVE-2026-69312, CVE-2026-69314, CVE-2026-69332, CVE-2026-69333, CVE-2026-69335, CVE-2026-68833, CVE-2026-68851, CVE-2026-69366, CVE-2026-69337, CVE-2026-69347, CVE-2026-69379, CVE-2026-69390, CVE-2026-69401, CVE-2026-69413, CVE-2026-69420, CVE-2026-69429, CVE-2026-69448, CVE-2026-69455, CVE-2026-69532, CVE-2026-69472, CVE-2026-69479, CVE-2026-69531, CVE-2026-69517, CVE-2026-69505, CVE-2026-69504, CVE-2026-69527, CVE-2026-69549, CVE-2026-69588, CVE-2026-69609, CVE-2026-69648, CVE-2026-69689, CVE-2026-69790, CVE-2026-69638, CVE-2026-69859, CVE-2026-69717, CVE-2026-69711, CVE-2026-69875, CVE-2026-69889, CVE-2026-69757, CVE-2026-69741, CVE-2026-69762, CVE-2026-69744, CVE-2026-69832, CVE-2026-69691, CVE-2026-69808, CVE-2026-69775, CVE-2026-69822, CVE-2026-69770, CVE-2026-69676, CVE-2026-70289, CVE-2026-70563, CVE-2026-71329, CVE-2026-71332, CVE-2026-71350, CVE-2026-71348, CVE-2026-71345, CVE-2026-69469, CVE-2026-69501, CVE-2026-69548, CVE-2026-69846, CVE-2026-70283, CVE-2026-72981, CVE-2026-77491, CVE-2026-77492, CVE-2026-77503, CVE-2026-80093, CVE-2026-72949, CVE-2026-70019, CVE-2026-72940, CVE-2026-69573, CVE-2026-70290, CVE-2026-83991, CVE-2026-83999, CVE-2026-69321, CVE-2026-69316, CVE-2026-69340, CVE-2026-69348, CVE-2026-69350, CVE-2026-69353, CVE-2026-69357, CVE-2026-69393, CVE-2026-69410, CVE-2026-69421, CVE-2026-69428, CVE-2026-69425, CVE-2026-69427, CVE-2026-69434, CVE-2026-69456, CVE-2026-69459, CVE-2026-69478, CVE-2026-69561, CVE-2026-69512, CVE-2026-69498, CVE-2026-69571, CVE-2026-69535, CVE-2026-69538, CVE-2026-69591, CVE-2026-69566, CVE-2026-69567, CVE-2026-69584, CVE-2026-69617, CVE-2026-69630, CVE-2026-69610, CVE-2026-69881, CVE-2026-69680, CVE-2026-69619, CVE-2026-69685, CVE-2026-69643, CVE-2026-69687, CVE-2026-69791, CVE-2026-69707, CVE-2026-69652, CVE-2026-69834, CVE-2026-69709, CVE-2026-69844, CVE-2026-69814, CVE-2026-69731, CVE-2026-69706, CVE-2026-69779, CVE-2026-69895, CVE-2026-69792, CVE-2026-69853, CVE-2026-69761, CVE-2026-69785, CVE-2026-69818, CVE-2026-69786, CVE-2026-69874, CVE-2026-70565, CVE-2026-70574, CVE-2026-70569, CVE-2026-70575, CVE-2026-71349, CVE-2026-72927, CVE-2026-72952, CVE-2026-72942, CVE-2026-72966, CVE-2026-72967, CVE-2026-69426, CVE-2026-69564, CVE-2026-72985, CVE-2026-73019, CVE-2026-78451, CVE-2026-78452, CVE-2026-83940, CVE-2026-69598, CVE-2026-83995, CVE-2026-83501, CVE-2026-83498.

CVE-2026-68840

A race condition vulnerability in the Windows USB Driver allows a local, authorized attacker to achieve privilege escalation due to improper synchronization during concurrent execution using a shared resource.

Affected products:

Windows USB Driver

Source: https://nvd.nist.gov/vuln/detail/CVE-2026-68840

Related in this roundup: CVE-2026-69295, CVE-2026-69457, CVE-2026-69503, CVE-2026-72953.

CVE-2026-68841

CVE-2026-68841 describes a heap-based buffer overflow vulnerability within the Windows New Technology File System (NTFS) driver. The vulnerability allows an authenticated local attacker to execute arbitrary code or trigger a condition that results in local privilege escalation.

Affected products:

Windows

Source: https://nvd.nist.gov/vuln/detail/CVE-2026-68841

Related in this roundup: CVE-2026-81963, CVE-2026-85880, CVE-2026-69496, CVE-2026-69586, CVE-2026-69768, CVE-2026-73025, CVE-2026-56172, CVE-2026-68832, CVE-2026-68834, CVE-2026-68838, CVE-2026-68875, CVE-2026-68877, CVE-2026-68880, CVE-2026-69265, CVE-2026-69270, CVE-2026-69274, CVE-2026-69275, CVE-2026-69280, CVE-2026-69283, CVE-2026-69284, CVE-2026-69289, CVE-2026-69296, CVE-2026-69300, CVE-2026-69301, CVE-2026-69307, CVE-2026-69312, CVE-2026-69314, CVE-2026-69332, CVE-2026-69333, CVE-2026-69335, CVE-2026-68833, CVE-2026-68851, CVE-2026-69366, CVE-2026-69337, CVE-2026-69347, CVE-2026-69379, CVE-2026-69390, CVE-2026-69401, CVE-2026-69413, CVE-2026-69420, CVE-2026-69429, CVE-2026-69448, CVE-2026-69455, CVE-2026-69532, CVE-2026-69472, CVE-2026-69479, CVE-2026-69531, CVE-2026-69517, CVE-2026-69505, CVE-2026-69504, CVE-2026-69527, CVE-2026-69549, CVE-2026-69588, CVE-2026-69609, CVE-2026-69648, CVE-2026-69689, CVE-2026-69790, CVE-2026-69638, CVE-2026-69859, CVE-2026-69717, CVE-2026-69711, CVE-2026-69875, CVE-2026-69889, CVE-2026-69757, CVE-2026-69741, CVE-2026-69762, CVE-2026-69744, CVE-2026-69832, CVE-2026-69691, CVE-2026-69808, CVE-2026-69775, CVE-2026-69822, CVE-2026-69770, CVE-2026-69676, CVE-2026-70289, CVE-2026-70563, CVE-2026-71329, CVE-2026-71332, CVE-2026-71350, CVE-2026-71348, CVE-2026-71345, CVE-2026-69469, CVE-2026-69501, CVE-2026-69548, CVE-2026-69846, CVE-2026-70283, CVE-2026-72981, CVE-2026-77491, CVE-2026-77492, CVE-2026-77503, CVE-2026-80093, CVE-2026-72949, CVE-2026-70019, CVE-2026-72940, CVE-2026-69573, CVE-2026-70290, CVE-2026-83991, CVE-2026-83999, CVE-2026-69321, CVE-2026-69316, CVE-2026-69340, CVE-2026-69348, CVE-2026-69350, CVE-2026-69353, CVE-2026-69357, CVE-2026-69393, CVE-2026-69410, CVE-2026-69421, CVE-2026-69428, CVE-2026-69425, CVE-2026-69427, CVE-2026-69434, CVE-2026-69456, CVE-2026-69459, CVE-2026-69478, CVE-2026-69561, CVE-2026-69512, CVE-2026-69498, CVE-2026-69571, CVE-2026-69535, CVE-2026-69538, CVE-2026-69591, CVE-2026-69566, CVE-2026-69567, CVE-2026-69584, CVE-2026-69617, CVE-2026-69630, CVE-2026-69610, CVE-2026-69881, CVE-2026-69680, CVE-2026-69619, CVE-2026-69685, CVE-2026-69643, CVE-2026-69687, CVE-2026-69791, CVE-2026-69707, CVE-2026-69652, CVE-2026-69834, CVE-2026-69709, CVE-2026-69844, CVE-2026-69814, CVE-2026-69731, CVE-2026-69706, CVE-2026-69779, CVE-2026-69895, CVE-2026-69792, CVE-2026-69853, CVE-2026-69761, CVE-2026-69785, CVE-2026-69818, CVE-2026-69786, CVE-2026-69874, CVE-2026-70565, CVE-2026-70574, CVE-2026-70569, CVE-2026-70575, CVE-2026-71349, CVE-2026-72927, CVE-2026-72952, CVE-2026-72942, CVE-2026-72966, CVE-2026-72967, CVE-2026-69426, CVE-2026-69564, CVE-2026-72985, CVE-2026-73019, CVE-2026-78451, CVE-2026-78452, CVE-2026-83940, CVE-2026-69598, CVE-2026-83995, CVE-2026-83501, CVE-2026-83498.

CVE-2026-68844

CVE-2026-68844 identifies a heap-based buffer overflow vulnerability in the Windows Storage Spaces Controller. This flaw permits an authorized local attacker to achieve code execution on the target system, potentially leading to privilege escalation.

Affected products:

Windows Storage Spaces Controller

Source: https://nvd.nist.gov/vuln/detail/CVE-2026-68844

Related in this roundup: CVE-2026-69290, CVE-2026-69568, CVE-2026-69575.

CVE-2026-68845

CVE-2026-68845 is a heap-based buffer overflow vulnerability within the Windows Program Compatibility Assistant Service. The flaw allows an authenticated local attacker to execute arbitrary code or gain elevated privileges on an affected Windows system.

Affected products:

Windows Program Compatibility Assistant Service

Source: https://nvd.nist.gov/vuln/detail/CVE-2026-68845

Related in this roundup: CVE-2026-68876, CVE-2026-69534, CVE-2026-69563, CVE-2026-68874, CVE-2026-68873.

CVE-2026-68846

CVE-2026-68846 is a use-after-free vulnerability in the Windows Kernel that enables an authenticated attacker to perform local or network-based privilege escalation. Detection efforts should focus on monitoring for unauthorized kernel-mode activity or suspicious system calls indicative of exploitation attempts.

Affected products:

Windows Kernel

Source: https://nvd.nist.gov/vuln/detail/CVE-2026-68846

Related in this roundup: CVE-2026-68884, CVE-2026-85360, CVE-2026-69406, CVE-2026-69473, CVE-2026-69723, CVE-2026-83942, CVE-2026-69466, CVE-2026-69578, CVE-2026-69669.

CVE-2026-68847

CVE-2026-68847 is a use-after-free vulnerability located in the Windows Connected User Experiences and Telemetry component. An authorized local attacker can exploit this flaw to execute code or manipulate system states to achieve privilege escalation on the affected Windows system.

Affected products:

Windows Connected User Experiences and Telemetry

Source: https://nvd.nist.gov/vuln/detail/CVE-2026-68847

Related in this roundup: CVE-2026-68824, CVE-2026-69267.

CVE-2026-68848

CVE-2026-68848 is a heap-based buffer overflow vulnerability within the Windows Print Spooler component. The flaw can be exploited by an authorized local attacker to achieve privilege escalation on the affected system.

Affected products:

Windows Print Spooler

Source: https://nvd.nist.gov/vuln/detail/CVE-2026-68848

Related in this roundup: CVE-2026-68835, CVE-2026-69309, CVE-2026-69552, CVE-2026-69838, CVE-2026-70564, CVE-2026-85877, CVE-2026-69344, CVE-2026-69346, CVE-2026-69569, CVE-2026-69921.

CVE-2026-68850

A heap-based buffer overflow vulnerability exists in the Microsoft Account component, which can be exploited by a locally authorized attacker to gain elevated privileges on the system.

Affected products:

Account

Source: https://nvd.nist.gov/vuln/detail/CVE-2026-68850

CVE-2026-68875

CVE-2026-68875 describes a buffer over-read vulnerability within the Windows NTFS file system driver. An authorized attacker can exploit this flaw to achieve local code execution, likely resulting in privilege escalation on the affected system.

Affected products:

Windows

Source: https://nvd.nist.gov/vuln/detail/CVE-2026-68875

Related in this roundup: CVE-2026-81963, CVE-2026-85880, CVE-2026-69496, CVE-2026-69586, CVE-2026-69768, CVE-2026-73025, CVE-2026-56172, CVE-2026-68832, CVE-2026-68834, CVE-2026-68838, CVE-2026-68841, CVE-2026-68877, CVE-2026-68880, CVE-2026-69265, CVE-2026-69270, CVE-2026-69274, CVE-2026-69275, CVE-2026-69280, CVE-2026-69283, CVE-2026-69284, CVE-2026-69289, CVE-2026-69296, CVE-2026-69300, CVE-2026-69301, CVE-2026-69307, CVE-2026-69312, CVE-2026-69314, CVE-2026-69332, CVE-2026-69333, CVE-2026-69335, CVE-2026-68833, CVE-2026-68851, CVE-2026-69366, CVE-2026-69337, CVE-2026-69347, CVE-2026-69379, CVE-2026-69390, CVE-2026-69401, CVE-2026-69413, CVE-2026-69420, CVE-2026-69429, CVE-2026-69448, CVE-2026-69455, CVE-2026-69532, CVE-2026-69472, CVE-2026-69479, CVE-2026-69531, CVE-2026-69517, CVE-2026-69505, CVE-2026-69504, CVE-2026-69527, CVE-2026-69549, CVE-2026-69588, CVE-2026-69609, CVE-2026-69648, CVE-2026-69689, CVE-2026-69790, CVE-2026-69638, CVE-2026-69859, CVE-2026-69717, CVE-2026-69711, CVE-2026-69875, CVE-2026-69889, CVE-2026-69757, CVE-2026-69741, CVE-2026-69762, CVE-2026-69744, CVE-2026-69832, CVE-2026-69691, CVE-2026-69808, CVE-2026-69775, CVE-2026-69822, CVE-2026-69770, CVE-2026-69676, CVE-2026-70289, CVE-2026-70563, CVE-2026-71329, CVE-2026-71332, CVE-2026-71350, CVE-2026-71348, CVE-2026-71345, CVE-2026-69469, CVE-2026-69501, CVE-2026-69548, CVE-2026-69846, CVE-2026-70283, CVE-2026-72981, CVE-2026-77491, CVE-2026-77492, CVE-2026-77503, CVE-2026-80093, CVE-2026-72949, CVE-2026-70019, CVE-2026-72940, CVE-2026-69573, CVE-2026-70290, CVE-2026-83991, CVE-2026-83999, CVE-2026-69321, CVE-2026-69316, CVE-2026-69340, CVE-2026-69348, CVE-2026-69350, CVE-2026-69353, CVE-2026-69357, CVE-2026-69393, CVE-2026-69410, CVE-2026-69421, CVE-2026-69428, CVE-2026-69425, CVE-2026-69427, CVE-2026-69434, CVE-2026-69456, CVE-2026-69459, CVE-2026-69478, CVE-2026-69561, CVE-2026-69512, CVE-2026-69498, CVE-2026-69571, CVE-2026-69535, CVE-2026-69538, CVE-2026-69591, CVE-2026-69566, CVE-2026-69567, CVE-2026-69584, CVE-2026-69617, CVE-2026-69630, CVE-2026-69610, CVE-2026-69881, CVE-2026-69680, CVE-2026-69619, CVE-2026-69685, CVE-2026-69643, CVE-2026-69687, CVE-2026-69791, CVE-2026-69707, CVE-2026-69652, CVE-2026-69834, CVE-2026-69709, CVE-2026-69844, CVE-2026-69814, CVE-2026-69731, CVE-2026-69706, CVE-2026-69779, CVE-2026-69895, CVE-2026-69792, CVE-2026-69853, CVE-2026-69761, CVE-2026-69785, CVE-2026-69818, CVE-2026-69786, CVE-2026-69874, CVE-2026-70565, CVE-2026-70574, CVE-2026-70569, CVE-2026-70575, CVE-2026-71349, CVE-2026-72927, CVE-2026-72952, CVE-2026-72942, CVE-2026-72966, CVE-2026-72967, CVE-2026-69426, CVE-2026-69564, CVE-2026-72985, CVE-2026-73019, CVE-2026-78451, CVE-2026-78452, CVE-2026-83940, CVE-2026-69598, CVE-2026-83995, CVE-2026-83501, CVE-2026-83498.

CVE-2026-68876

CVE-2026-68876 is a heap-based buffer overflow vulnerability within the Windows Program Compatibility Assistant Service. The flaw allows an authorized attacker with network access to elevate their privileges on the host system.

Affected products:

Windows Program Compatibility Assistant Service

Source: https://nvd.nist.gov/vuln/detail/CVE-2026-68876

Related in this roundup: CVE-2026-68845, CVE-2026-69534, CVE-2026-69563, CVE-2026-68874, CVE-2026-68873.

CVE-2026-68877

CVE-2026-68877 describes a heap-based buffer overflow vulnerability in the Windows Storage Spaces Controller. The flaw allows an authorized local attacker to execute arbitrary code with elevated privileges on affected Windows systems.

Affected products:

Windows

Source: https://nvd.nist.gov/vuln/detail/CVE-2026-68877

Related in this roundup: CVE-2026-81963, CVE-2026-85880, CVE-2026-69496, CVE-2026-69586, CVE-2026-69768, CVE-2026-73025, CVE-2026-56172, CVE-2026-68832, CVE-2026-68834, CVE-2026-68838, CVE-2026-68841, CVE-2026-68875, CVE-2026-68880, CVE-2026-69265, CVE-2026-69270, CVE-2026-69274, CVE-2026-69275, CVE-2026-69280, CVE-2026-69283, CVE-2026-69284, CVE-2026-69289, CVE-2026-69296, CVE-2026-69300, CVE-2026-69301, CVE-2026-69307, CVE-2026-69312, CVE-2026-69314, CVE-2026-69332, CVE-2026-69333, CVE-2026-69335, CVE-2026-68833, CVE-2026-68851, CVE-2026-69366, CVE-2026-69337, CVE-2026-69347, CVE-2026-69379, CVE-2026-69390, CVE-2026-69401, CVE-2026-69413, CVE-2026-69420, CVE-2026-69429, CVE-2026-69448, CVE-2026-69455, CVE-2026-69532, CVE-2026-69472, CVE-2026-69479, CVE-2026-69531, CVE-2026-69517, CVE-2026-69505, CVE-2026-69504, CVE-2026-69527, CVE-2026-69549, CVE-2026-69588, CVE-2026-69609, CVE-2026-69648, CVE-2026-69689, CVE-2026-69790, CVE-2026-69638, CVE-2026-69859, CVE-2026-69717, CVE-2026-69711, CVE-2026-69875, CVE-2026-69889, CVE-2026-69757, CVE-2026-69741, CVE-2026-69762, CVE-2026-69744, CVE-2026-69832, CVE-2026-69691, CVE-2026-69808, CVE-2026-69775, CVE-2026-69822, CVE-2026-69770, CVE-2026-69676, CVE-2026-70289, CVE-2026-70563, CVE-2026-71329, CVE-2026-71332, CVE-2026-71350, CVE-2026-71348, CVE-2026-71345, CVE-2026-69469, CVE-2026-69501, CVE-2026-69548, CVE-2026-69846, CVE-2026-70283, CVE-2026-72981, CVE-2026-77491, CVE-2026-77492, CVE-2026-77503, CVE-2026-80093, CVE-2026-72949, CVE-2026-70019, CVE-2026-72940, CVE-2026-69573, CVE-2026-70290, CVE-2026-83991, CVE-2026-83999, CVE-2026-69321, CVE-2026-69316, CVE-2026-69340, CVE-2026-69348, CVE-2026-69350, CVE-2026-69353, CVE-2026-69357, CVE-2026-69393, CVE-2026-69410, CVE-2026-69421, CVE-2026-69428, CVE-2026-69425, CVE-2026-69427, CVE-2026-69434, CVE-2026-69456, CVE-2026-69459, CVE-2026-69478, CVE-2026-69561, CVE-2026-69512, CVE-2026-69498, CVE-2026-69571, CVE-2026-69535, CVE-2026-69538, CVE-2026-69591, CVE-2026-69566, CVE-2026-69567, CVE-2026-69584, CVE-2026-69617, CVE-2026-69630, CVE-2026-69610, CVE-2026-69881, CVE-2026-69680, CVE-2026-69619, CVE-2026-69685, CVE-2026-69643, CVE-2026-69687, CVE-2026-69791, CVE-2026-69707, CVE-2026-69652, CVE-2026-69834, CVE-2026-69709, CVE-2026-69844, CVE-2026-69814, CVE-2026-69731, CVE-2026-69706, CVE-2026-69779, CVE-2026-69895, CVE-2026-69792, CVE-2026-69853, CVE-2026-69761, CVE-2026-69785, CVE-2026-69818, CVE-2026-69786, CVE-2026-69874, CVE-2026-70565, CVE-2026-70574, CVE-2026-70569, CVE-2026-70575, CVE-2026-71349, CVE-2026-72927, CVE-2026-72952, CVE-2026-72942, CVE-2026-72966, CVE-2026-72967, CVE-2026-69426, CVE-2026-69564, CVE-2026-72985, CVE-2026-73019, CVE-2026-78451, CVE-2026-78452, CVE-2026-83940, CVE-2026-69598, CVE-2026-83995, CVE-2026-83501, CVE-2026-83498.

CVE-2026-68878

CVE-2026-68878 describes a stack-based buffer overflow vulnerability within the Windows Fast FAT Driver. This flaw allows an authenticated attacker to execute code or elevate privileges on a compromised system via network-based exploitation.

Affected products:

Windows Fast FAT Driver

Source: https://nvd.nist.gov/vuln/detail/CVE-2026-68878

CVE-2026-68880

CVE-2026-68880 is a heap-based buffer overflow vulnerability in the Windows Win32K subsystem. The flaw allows an authenticated attacker to achieve privilege escalation over a network connection by exploiting the vulnerable component.

Affected products:

Windows

Source: https://nvd.nist.gov/vuln/detail/CVE-2026-68880

Related in this roundup: CVE-2026-81963, CVE-2026-85880, CVE-2026-69496, CVE-2026-69586, CVE-2026-69768, CVE-2026-73025, CVE-2026-56172, CVE-2026-68832, CVE-2026-68834, CVE-2026-68838, CVE-2026-68841, CVE-2026-68875, CVE-2026-68877, CVE-2026-69265, CVE-2026-69270, CVE-2026-69274, CVE-2026-69275, CVE-2026-69280, CVE-2026-69283, CVE-2026-69284, CVE-2026-69289, CVE-2026-69296, CVE-2026-69300, CVE-2026-69301, CVE-2026-69307, CVE-2026-69312, CVE-2026-69314, CVE-2026-69332, CVE-2026-69333, CVE-2026-69335, CVE-2026-68833, CVE-2026-68851, CVE-2026-69366, CVE-2026-69337, CVE-2026-69347, CVE-2026-69379, CVE-2026-69390, CVE-2026-69401, CVE-2026-69413, CVE-2026-69420, CVE-2026-69429, CVE-2026-69448, CVE-2026-69455, CVE-2026-69532, CVE-2026-69472, CVE-2026-69479, CVE-2026-69531, CVE-2026-69517, CVE-2026-69505, CVE-2026-69504, CVE-2026-69527, CVE-2026-69549, CVE-2026-69588, CVE-2026-69609, CVE-2026-69648, CVE-2026-69689, CVE-2026-69790, CVE-2026-69638, CVE-2026-69859, CVE-2026-69717, CVE-2026-69711, CVE-2026-69875, CVE-2026-69889, CVE-2026-69757, CVE-2026-69741, CVE-2026-69762, CVE-2026-69744, CVE-2026-69832, CVE-2026-69691, CVE-2026-69808, CVE-2026-69775, CVE-2026-69822, CVE-2026-69770, CVE-2026-69676, CVE-2026-70289, CVE-2026-70563, CVE-2026-71329, CVE-2026-71332, CVE-2026-71350, CVE-2026-71348, CVE-2026-71345, CVE-2026-69469, CVE-2026-69501, CVE-2026-69548, CVE-2026-69846, CVE-2026-70283, CVE-2026-72981, CVE-2026-77491, CVE-2026-77492, CVE-2026-77503, CVE-2026-80093, CVE-2026-72949, CVE-2026-70019, CVE-2026-72940, CVE-2026-69573, CVE-2026-70290, CVE-2026-83991, CVE-2026-83999, CVE-2026-69321, CVE-2026-69316, CVE-2026-69340, CVE-2026-69348, CVE-2026-69350, CVE-2026-69353, CVE-2026-69357, CVE-2026-69393, CVE-2026-69410, CVE-2026-69421, CVE-2026-69428, CVE-2026-69425, CVE-2026-69427, CVE-2026-69434, CVE-2026-69456, CVE-2026-69459, CVE-2026-69478, CVE-2026-69561, CVE-2026-69512, CVE-2026-69498, CVE-2026-69571, CVE-2026-69535, CVE-2026-69538, CVE-2026-69591, CVE-2026-69566, CVE-2026-69567, CVE-2026-69584, CVE-2026-69617, CVE-2026-69630, CVE-2026-69610, CVE-2026-69881, CVE-2026-69680, CVE-2026-69619, CVE-2026-69685, CVE-2026-69643, CVE-2026-69687, CVE-2026-69791, CVE-2026-69707, CVE-2026-69652, CVE-2026-69834, CVE-2026-69709, CVE-2026-69844, CVE-2026-69814, CVE-2026-69731, CVE-2026-69706, CVE-2026-69779, CVE-2026-69895, CVE-2026-69792, CVE-2026-69853, CVE-2026-69761, CVE-2026-69785, CVE-2026-69818, CVE-2026-69786, CVE-2026-69874, CVE-2026-70565, CVE-2026-70574, CVE-2026-70569, CVE-2026-70575, CVE-2026-71349, CVE-2026-72927, CVE-2026-72952, CVE-2026-72942, CVE-2026-72966, CVE-2026-72967, CVE-2026-69426, CVE-2026-69564, CVE-2026-72985, CVE-2026-73019, CVE-2026-78451, CVE-2026-78452, CVE-2026-83940, CVE-2026-69598, CVE-2026-83995, CVE-2026-83501, CVE-2026-83498.

CVE-2026-68884

CVE-2026-68884 is a heap-based buffer overflow vulnerability in the Windows Kernel that enables a locally authenticated attacker to perform a privilege escalation attack. Detection should focus on monitoring for anomalous kernel-mode memory access patterns or unexpected process token modifications initiated by low-privileged local user accounts.

Affected products:

Windows Kernel

Source: https://nvd.nist.gov/vuln/detail/CVE-2026-68884

Related in this roundup: CVE-2026-68846, CVE-2026-85360, CVE-2026-69406, CVE-2026-69473, CVE-2026-69723, CVE-2026-83942, CVE-2026-69466, CVE-2026-69578, CVE-2026-69669.

CVE-2026-68885

CVE-2026-68885 describes a heap-based buffer overflow vulnerability within the Microsoft Standard XPS component. An authorized attacker can exploit this flaw to execute code or manipulate memory, ultimately leading to local privilege escalation on the affected system.

Affected products:

Standard XPS

Source: https://nvd.nist.gov/vuln/detail/CVE-2026-68885

Related in this roundup: CVE-2026-69824, CVE-2026-68888, CVE-2026-68889, CVE-2026-68890, CVE-2026-68892, CVE-2026-68897, CVE-2026-69269, CVE-2026-69271, CVE-2026-69272, CVE-2026-69313, CVE-2026-69336, CVE-2026-68881, CVE-2026-69345, CVE-2026-69367, CVE-2026-68891, CVE-2026-69308, CVE-2026-69376.

CVE-2026-68887

CVE-2026-68887 is an out-of-bounds read vulnerability in the Windows Message Queuing (MSMQ) service that allows an unauthenticated, remote attacker to trigger a denial-of-service condition via a specially crafted network request.

Affected products:

Windows Message Queuing

Source: https://nvd.nist.gov/vuln/detail/CVE-2026-68887

Related in this roundup: CVE-2026-69579, CVE-2026-69645, CVE-2026-83997.

CVE-2026-68888

CVE-2026-68888 is a heap-based buffer overflow vulnerability in Microsoft Standard XPS. The vulnerability allows an authorized local attacker to achieve privilege escalation by exploiting the memory corruption flaw.

Affected products:

Standard XPS

Source: https://nvd.nist.gov/vuln/detail/CVE-2026-68888

Related in this roundup: CVE-2026-69824, CVE-2026-68885, CVE-2026-68889, CVE-2026-68890, CVE-2026-68892, CVE-2026-68897, CVE-2026-69269, CVE-2026-69271, CVE-2026-69272, CVE-2026-69313, CVE-2026-69336, CVE-2026-68881, CVE-2026-69345, CVE-2026-69367, CVE-2026-68891, CVE-2026-69308, CVE-2026-69376.

CVE-2026-68889

CVE-2026-68889 describes a heap-based buffer overflow vulnerability in Microsoft Standard XPS. An authorized attacker can leverage this flaw to perform privilege escalation over a network.

Affected products:

Standard XPS

Source: https://nvd.nist.gov/vuln/detail/CVE-2026-68889

Related in this roundup: CVE-2026-69824, CVE-2026-68885, CVE-2026-68888, CVE-2026-68890, CVE-2026-68892, CVE-2026-68897, CVE-2026-69269, CVE-2026-69271, CVE-2026-69272, CVE-2026-69313, CVE-2026-69336, CVE-2026-68881, CVE-2026-69345, CVE-2026-69367, CVE-2026-68891, CVE-2026-69308, CVE-2026-69376.

CVE-2026-68890

CVE-2026-68890 is a heap-based buffer overflow vulnerability in Microsoft Standard XPS that allows an authorized local attacker to elevate privileges. Detection engineering should focus on monitoring for unusual process execution patterns or memory access violations associated with the XPS rendering component.

Affected products:

Standard XPS

Source: https://nvd.nist.gov/vuln/detail/CVE-2026-68890

Related in this roundup: CVE-2026-69824, CVE-2026-68885, CVE-2026-68888, CVE-2026-68889, CVE-2026-68892, CVE-2026-68897, CVE-2026-69269, CVE-2026-69271, CVE-2026-69272, CVE-2026-69313, CVE-2026-69336, CVE-2026-68881, CVE-2026-69345, CVE-2026-69367, CVE-2026-68891, CVE-2026-69308, CVE-2026-69376.

CVE-2026-68892

CVE-2026-68892 is a heap-based buffer overflow vulnerability in Microsoft Standard XPS that allows an authorized local attacker to achieve privilege escalation on the affected system.

Affected products:

Standard XPS

Source: https://nvd.nist.gov/vuln/detail/CVE-2026-68892

Related in this roundup: CVE-2026-69824, CVE-2026-68885, CVE-2026-68888, CVE-2026-68889, CVE-2026-68890, CVE-2026-68897, CVE-2026-69269, CVE-2026-69271, CVE-2026-69272, CVE-2026-69313, CVE-2026-69336, CVE-2026-68881, CVE-2026-69345, CVE-2026-69367, CVE-2026-68891, CVE-2026-69308, CVE-2026-69376.

CVE-2026-68893

A use-after-free vulnerability in the Windows Remote Desktop Licensing Service allows an authenticated network attacker to perform privilege escalation. This issue impacts the Licensing service component on affected Windows platforms.

Affected products:

Windows Remote Desktop Licensing Service

Source: https://nvd.nist.gov/vuln/detail/CVE-2026-68893

Related in this roundup: CVE-2026-69627.

CVE-2026-68894

A heap-based buffer overflow vulnerability exists in the Windows Error Reporting component, which can be exploited by an authorized attacker over a network to achieve privilege escalation on the affected system.

Affected products:

Windows Error Reporting

Source: https://nvd.nist.gov/vuln/detail/CVE-2026-68894

Related in this roundup: CVE-2026-69362, CVE-2026-69436, CVE-2026-69513, CVE-2026-69450, CVE-2026-69684, CVE-2026-69896, CVE-2026-83996, CVE-2026-69433, CVE-2026-69462, CVE-2026-69482, CVE-2026-69612.

CVE-2026-68896

CVE-2026-68896 is an absolute path traversal vulnerability within the Microsoft Windows Search Component. The flaw allows a locally authenticated attacker to manipulate file paths to elevate privileges on the affected Windows system.

Affected products:

Windows Search Component

Source: https://nvd.nist.gov/vuln/detail/CVE-2026-68896

Related in this roundup: CVE-2026-69305, CVE-2026-69322, CVE-2026-69507, CVE-2026-69554, CVE-2026-69585, CVE-2026-69608, CVE-2026-69453, CVE-2026-69600, CVE-2026-69911, CVE-2026-70145.

CVE-2026-68897

A heap-based buffer overflow vulnerability in Microsoft Standard XPS allows an authenticated attacker to perform local privilege escalation. Detection efforts should focus on identifying abnormal process behavior or crashes related to the XPS processing component.

Affected products:

Standard XPS

Source: https://nvd.nist.gov/vuln/detail/CVE-2026-68897

Related in this roundup: CVE-2026-69824, CVE-2026-68885, CVE-2026-68888, CVE-2026-68889, CVE-2026-68890, CVE-2026-68892, CVE-2026-69269, CVE-2026-69271, CVE-2026-69272, CVE-2026-69313, CVE-2026-69336, CVE-2026-68881, CVE-2026-69345, CVE-2026-69367, CVE-2026-68891, CVE-2026-69308, CVE-2026-69376.

CVE-2026-69265

CVE-2026-69265 describes an out-of-bounds read vulnerability in the Windows NTFS driver that can be exploited by an authorized local attacker to achieve privilege escalation. Detection efforts should focus on monitoring for unauthorized attempts to interact with the NTFS filesystem driver or anomalous system calls that trigger memory read violations within kernel space.

Affected products:

Windows

Source: https://nvd.nist.gov/vuln/detail/CVE-2026-69265

Related in this roundup: CVE-2026-81963, CVE-2026-85880, CVE-2026-69496, CVE-2026-69586, CVE-2026-69768, CVE-2026-73025, CVE-2026-56172, CVE-2026-68832, CVE-2026-68834, CVE-2026-68838, CVE-2026-68841, CVE-2026-68875, CVE-2026-68877, CVE-2026-68880, CVE-2026-69270, CVE-2026-69274, CVE-2026-69275, CVE-2026-69280, CVE-2026-69283, CVE-2026-69284, CVE-2026-69289, CVE-2026-69296, CVE-2026-69300, CVE-2026-69301, CVE-2026-69307, CVE-2026-69312, CVE-2026-69314, CVE-2026-69332, CVE-2026-69333, CVE-2026-69335, CVE-2026-68833, CVE-2026-68851, CVE-2026-69366, CVE-2026-69337, CVE-2026-69347, CVE-2026-69379, CVE-2026-69390, CVE-2026-69401, CVE-2026-69413, CVE-2026-69420, CVE-2026-69429, CVE-2026-69448, CVE-2026-69455, CVE-2026-69532, CVE-2026-69472, CVE-2026-69479, CVE-2026-69531, CVE-2026-69517, CVE-2026-69505, CVE-2026-69504, CVE-2026-69527, CVE-2026-69549, CVE-2026-69588, CVE-2026-69609, CVE-2026-69648, CVE-2026-69689, CVE-2026-69790, CVE-2026-69638, CVE-2026-69859, CVE-2026-69717, CVE-2026-69711, CVE-2026-69875, CVE-2026-69889, CVE-2026-69757, CVE-2026-69741, CVE-2026-69762, CVE-2026-69744, CVE-2026-69832, CVE-2026-69691, CVE-2026-69808, CVE-2026-69775, CVE-2026-69822, CVE-2026-69770, CVE-2026-69676, CVE-2026-70289, CVE-2026-70563, CVE-2026-71329, CVE-2026-71332, CVE-2026-71350, CVE-2026-71348, CVE-2026-71345, CVE-2026-69469, CVE-2026-69501, CVE-2026-69548, CVE-2026-69846, CVE-2026-70283, CVE-2026-72981, CVE-2026-77491, CVE-2026-77492, CVE-2026-77503, CVE-2026-80093, CVE-2026-72949, CVE-2026-70019, CVE-2026-72940, CVE-2026-69573, CVE-2026-70290, CVE-2026-83991, CVE-2026-83999, CVE-2026-69321, CVE-2026-69316, CVE-2026-69340, CVE-2026-69348, CVE-2026-69350, CVE-2026-69353, CVE-2026-69357, CVE-2026-69393, CVE-2026-69410, CVE-2026-69421, CVE-2026-69428, CVE-2026-69425, CVE-2026-69427, CVE-2026-69434, CVE-2026-69456, CVE-2026-69459, CVE-2026-69478, CVE-2026-69561, CVE-2026-69512, CVE-2026-69498, CVE-2026-69571, CVE-2026-69535, CVE-2026-69538, CVE-2026-69591, CVE-2026-69566, CVE-2026-69567, CVE-2026-69584, CVE-2026-69617, CVE-2026-69630, CVE-2026-69610, CVE-2026-69881, CVE-2026-69680, CVE-2026-69619, CVE-2026-69685, CVE-2026-69643, CVE-2026-69687, CVE-2026-69791, CVE-2026-69707, CVE-2026-69652, CVE-2026-69834, CVE-2026-69709, CVE-2026-69844, CVE-2026-69814, CVE-2026-69731, CVE-2026-69706, CVE-2026-69779, CVE-2026-69895, CVE-2026-69792, CVE-2026-69853, CVE-2026-69761, CVE-2026-69785, CVE-2026-69818, CVE-2026-69786, CVE-2026-69874, CVE-2026-70565, CVE-2026-70574, CVE-2026-70569, CVE-2026-70575, CVE-2026-71349, CVE-2026-72927, CVE-2026-72952, CVE-2026-72942, CVE-2026-72966, CVE-2026-72967, CVE-2026-69426, CVE-2026-69564, CVE-2026-72985, CVE-2026-73019, CVE-2026-78451, CVE-2026-78452, CVE-2026-83940, CVE-2026-69598, CVE-2026-83995, CVE-2026-83501, CVE-2026-83498.

CVE-2026-69266

CVE-2026-69266 is a vulnerability in the Windows DHCP Server component resulting from an integer overflow or wraparound condition. This flaw allows an unauthorized remote attacker to execute arbitrary code on the affected server over a network, presenting a high risk to availability and system integrity.

Affected products:

Windows DHCP Server

Source: https://nvd.nist.gov/vuln/detail/CVE-2026-69266

Related in this roundup: CVE-2026-69845, CVE-2026-72979, CVE-2026-69412, CVE-2026-69415, CVE-2026-69929, CVE-2026-69930, CVE-2026-70124, CVE-2026-77494, CVE-2026-77498, CVE-2026-77499, CVE-2026-77501, CVE-2026-77502, CVE-2026-77887, CVE-2026-77888, CVE-2026-77886, CVE-2026-77890, CVE-2026-77889, CVE-2026-77891, CVE-2026-77893, CVE-2026-77895, CVE-2026-70065, CVE-2026-69297, CVE-2026-69342, CVE-2026-69405, CVE-2026-69416, CVE-2026-69497, CVE-2026-69547, CVE-2026-69620, CVE-2026-69637, CVE-2026-69803, CVE-2026-69679, CVE-2026-69878, CVE-2026-69847, CVE-2026-69876, CVE-2026-69510.

CVE-2026-69268

CVE-2026-69268 is a vulnerability in Microsoft Office SharePoint caused by improper access control. The vulnerability allows an authorized attacker to achieve remote code execution over a network with a CVSS v3.1 base score of 8.8.

Affected products:

SharePoint

Source: https://nvd.nist.gov/vuln/detail/CVE-2026-69268

Related in this roundup: CVE-2026-69273, CVE-2026-69282, CVE-2026-69716, CVE-2026-69724, CVE-2026-69690, CVE-2026-69683, CVE-2026-69804, CVE-2026-69402, CVE-2026-69409, CVE-2026-69417, CVE-2026-69464, CVE-2026-69636, CVE-2026-69904.

CVE-2026-69269

CVE-2026-69269 describes an integer underflow vulnerability within the Microsoft Standard XPS component. This flaw enables an authorized local attacker to achieve privilege escalation, likely by exploiting the wraparound condition during document processing or rendering operations.

Affected products:

Standard XPS

Source: https://nvd.nist.gov/vuln/detail/CVE-2026-69269

Related in this roundup: CVE-2026-69824, CVE-2026-68885, CVE-2026-68888, CVE-2026-68889, CVE-2026-68890, CVE-2026-68892, CVE-2026-68897, CVE-2026-69271, CVE-2026-69272, CVE-2026-69313, CVE-2026-69336, CVE-2026-68881, CVE-2026-69345, CVE-2026-69367, CVE-2026-68891, CVE-2026-69308, CVE-2026-69376.

CVE-2026-69270

The Windows USB Audio Class driver (usbaudio.sys) contains a heap-based buffer overflow vulnerability that can be exploited by an authorized local attacker to achieve privilege escalation.

Affected products:

Windows

Source: https://nvd.nist.gov/vuln/detail/CVE-2026-69270

Related in this roundup: CVE-2026-81963, CVE-2026-85880, CVE-2026-69496, CVE-2026-69586, CVE-2026-69768, CVE-2026-73025, CVE-2026-56172, CVE-2026-68832, CVE-2026-68834, CVE-2026-68838, CVE-2026-68841, CVE-2026-68875, CVE-2026-68877, CVE-2026-68880, CVE-2026-69265, CVE-2026-69274, CVE-2026-69275, CVE-2026-69280, CVE-2026-69283, CVE-2026-69284, CVE-2026-69289, CVE-2026-69296, CVE-2026-69300, CVE-2026-69301, CVE-2026-69307, CVE-2026-69312, CVE-2026-69314, CVE-2026-69332, CVE-2026-69333, CVE-2026-69335, CVE-2026-68833, CVE-2026-68851, CVE-2026-69366, CVE-2026-69337, CVE-2026-69347, CVE-2026-69379, CVE-2026-69390, CVE-2026-69401, CVE-2026-69413, CVE-2026-69420, CVE-2026-69429, CVE-2026-69448, CVE-2026-69455, CVE-2026-69532, CVE-2026-69472, CVE-2026-69479, CVE-2026-69531, CVE-2026-69517, CVE-2026-69505, CVE-2026-69504, CVE-2026-69527, CVE-2026-69549, CVE-2026-69588, CVE-2026-69609, CVE-2026-69648, CVE-2026-69689, CVE-2026-69790, CVE-2026-69638, CVE-2026-69859, CVE-2026-69717, CVE-2026-69711, CVE-2026-69875, CVE-2026-69889, CVE-2026-69757, CVE-2026-69741, CVE-2026-69762, CVE-2026-69744, CVE-2026-69832, CVE-2026-69691, CVE-2026-69808, CVE-2026-69775, CVE-2026-69822, CVE-2026-69770, CVE-2026-69676, CVE-2026-70289, CVE-2026-70563, CVE-2026-71329, CVE-2026-71332, CVE-2026-71350, CVE-2026-71348, CVE-2026-71345, CVE-2026-69469, CVE-2026-69501, CVE-2026-69548, CVE-2026-69846, CVE-2026-70283, CVE-2026-72981, CVE-2026-77491, CVE-2026-77492, CVE-2026-77503, CVE-2026-80093, CVE-2026-72949, CVE-2026-70019, CVE-2026-72940, CVE-2026-69573, CVE-2026-70290, CVE-2026-83991, CVE-2026-83999, CVE-2026-69321, CVE-2026-69316, CVE-2026-69340, CVE-2026-69348, CVE-2026-69350, CVE-2026-69353, CVE-2026-69357, CVE-2026-69393, CVE-2026-69410, CVE-2026-69421, CVE-2026-69428, CVE-2026-69425, CVE-2026-69427, CVE-2026-69434, CVE-2026-69456, CVE-2026-69459, CVE-2026-69478, CVE-2026-69561, CVE-2026-69512, CVE-2026-69498, CVE-2026-69571, CVE-2026-69535, CVE-2026-69538, CVE-2026-69591, CVE-2026-69566, CVE-2026-69567, CVE-2026-69584, CVE-2026-69617, CVE-2026-69630, CVE-2026-69610, CVE-2026-69881, CVE-2026-69680, CVE-2026-69619, CVE-2026-69685, CVE-2026-69643, CVE-2026-69687, CVE-2026-69791, CVE-2026-69707, CVE-2026-69652, CVE-2026-69834, CVE-2026-69709, CVE-2026-69844, CVE-2026-69814, CVE-2026-69731, CVE-2026-69706, CVE-2026-69779, CVE-2026-69895, CVE-2026-69792, CVE-2026-69853, CVE-2026-69761, CVE-2026-69785, CVE-2026-69818, CVE-2026-69786, CVE-2026-69874, CVE-2026-70565, CVE-2026-70574, CVE-2026-70569, CVE-2026-70575, CVE-2026-71349, CVE-2026-72927, CVE-2026-72952, CVE-2026-72942, CVE-2026-72966, CVE-2026-72967, CVE-2026-69426, CVE-2026-69564, CVE-2026-72985, CVE-2026-73019, CVE-2026-78451, CVE-2026-78452, CVE-2026-83940, CVE-2026-69598, CVE-2026-83995, CVE-2026-83501, CVE-2026-83498.

CVE-2026-69271

CVE-2026-69271 is a heap-based buffer overflow vulnerability in Microsoft Standard XPS. The vulnerability allows an authorized attacker with network access to achieve privilege escalation on the affected system by exploiting memory corruption within the XPS processing component.

Affected products:

Standard XPS

Source: https://nvd.nist.gov/vuln/detail/CVE-2026-69271

Related in this roundup: CVE-2026-69824, CVE-2026-68885, CVE-2026-68888, CVE-2026-68889, CVE-2026-68890, CVE-2026-68892, CVE-2026-68897, CVE-2026-69269, CVE-2026-69272, CVE-2026-69313, CVE-2026-69336, CVE-2026-68881, CVE-2026-69345, CVE-2026-69367, CVE-2026-68891, CVE-2026-69308, CVE-2026-69376.

CVE-2026-69272

CVE-2026-69272 is a heap-based buffer overflow vulnerability in Microsoft Standard XPS. The vulnerability allows an authorized network-based attacker to execute arbitrary code or elevate privileges by triggering the overflow condition within the XPS processing component.

Affected products:

Standard XPS

Source: https://nvd.nist.gov/vuln/detail/CVE-2026-69272

Related in this roundup: CVE-2026-69824, CVE-2026-68885, CVE-2026-68888, CVE-2026-68889, CVE-2026-68890, CVE-2026-68892, CVE-2026-68897, CVE-2026-69269, CVE-2026-69271, CVE-2026-69313, CVE-2026-69336, CVE-2026-68881, CVE-2026-69345, CVE-2026-69367, CVE-2026-68891, CVE-2026-69308, CVE-2026-69376.

CVE-2026-69273

CVE-2026-69273 is a remote code execution vulnerability in Microsoft SharePoint caused by improper access control. An authorized attacker can exploit this flaw over a network to execute arbitrary code, necessitating strict access controls and prompt patching.

Affected products:

SharePoint

Source: https://nvd.nist.gov/vuln/detail/CVE-2026-69273

Related in this roundup: CVE-2026-69268, CVE-2026-69282, CVE-2026-69716, CVE-2026-69724, CVE-2026-69690, CVE-2026-69683, CVE-2026-69804, CVE-2026-69402, CVE-2026-69409, CVE-2026-69417, CVE-2026-69464, CVE-2026-69636, CVE-2026-69904.

CVE-2026-69274

CVE-2026-69274 is a use-after-free vulnerability within the Windows Win32K kernel component. An authorized attacker can leverage this flaw to achieve privilege escalation over a network connection.

Affected products:

Windows

Source: https://nvd.nist.gov/vuln/detail/CVE-2026-69274

Related in this roundup: CVE-2026-81963, CVE-2026-85880, CVE-2026-69496, CVE-2026-69586, CVE-2026-69768, CVE-2026-73025, CVE-2026-56172, CVE-2026-68832, CVE-2026-68834, CVE-2026-68838, CVE-2026-68841, CVE-2026-68875, CVE-2026-68877, CVE-2026-68880, CVE-2026-69265, CVE-2026-69270, CVE-2026-69275, CVE-2026-69280, CVE-2026-69283, CVE-2026-69284, CVE-2026-69289, CVE-2026-69296, CVE-2026-69300, CVE-2026-69301, CVE-2026-69307, CVE-2026-69312, CVE-2026-69314, CVE-2026-69332, CVE-2026-69333, CVE-2026-69335, CVE-2026-68833, CVE-2026-68851, CVE-2026-69366, CVE-2026-69337, CVE-2026-69347, CVE-2026-69379, CVE-2026-69390, CVE-2026-69401, CVE-2026-69413, CVE-2026-69420, CVE-2026-69429, CVE-2026-69448, CVE-2026-69455, CVE-2026-69532, CVE-2026-69472, CVE-2026-69479, CVE-2026-69531, CVE-2026-69517, CVE-2026-69505, CVE-2026-69504, CVE-2026-69527, CVE-2026-69549, CVE-2026-69588, CVE-2026-69609, CVE-2026-69648, CVE-2026-69689, CVE-2026-69790, CVE-2026-69638, CVE-2026-69859, CVE-2026-69717, CVE-2026-69711, CVE-2026-69875, CVE-2026-69889, CVE-2026-69757, CVE-2026-69741, CVE-2026-69762, CVE-2026-69744, CVE-2026-69832, CVE-2026-69691, CVE-2026-69808, CVE-2026-69775, CVE-2026-69822, CVE-2026-69770, CVE-2026-69676, CVE-2026-70289, CVE-2026-70563, CVE-2026-71329, CVE-2026-71332, CVE-2026-71350, CVE-2026-71348, CVE-2026-71345, CVE-2026-69469, CVE-2026-69501, CVE-2026-69548, CVE-2026-69846, CVE-2026-70283, CVE-2026-72981, CVE-2026-77491, CVE-2026-77492, CVE-2026-77503, CVE-2026-80093, CVE-2026-72949, CVE-2026-70019, CVE-2026-72940, CVE-2026-69573, CVE-2026-70290, CVE-2026-83991, CVE-2026-83999, CVE-2026-69321, CVE-2026-69316, CVE-2026-69340, CVE-2026-69348, CVE-2026-69350, CVE-2026-69353, CVE-2026-69357, CVE-2026-69393, CVE-2026-69410, CVE-2026-69421, CVE-2026-69428, CVE-2026-69425, CVE-2026-69427, CVE-2026-69434, CVE-2026-69456, CVE-2026-69459, CVE-2026-69478, CVE-2026-69561, CVE-2026-69512, CVE-2026-69498, CVE-2026-69571, CVE-2026-69535, CVE-2026-69538, CVE-2026-69591, CVE-2026-69566, CVE-2026-69567, CVE-2026-69584, CVE-2026-69617, CVE-2026-69630, CVE-2026-69610, CVE-2026-69881, CVE-2026-69680, CVE-2026-69619, CVE-2026-69685, CVE-2026-69643, CVE-2026-69687, CVE-2026-69791, CVE-2026-69707, CVE-2026-69652, CVE-2026-69834, CVE-2026-69709, CVE-2026-69844, CVE-2026-69814, CVE-2026-69731, CVE-2026-69706, CVE-2026-69779, CVE-2026-69895, CVE-2026-69792, CVE-2026-69853, CVE-2026-69761, CVE-2026-69785, CVE-2026-69818, CVE-2026-69786, CVE-2026-69874, CVE-2026-70565, CVE-2026-70574, CVE-2026-70569, CVE-2026-70575, CVE-2026-71349, CVE-2026-72927, CVE-2026-72952, CVE-2026-72942, CVE-2026-72966, CVE-2026-72967, CVE-2026-69426, CVE-2026-69564, CVE-2026-72985, CVE-2026-73019, CVE-2026-78451, CVE-2026-78452, CVE-2026-83940, CVE-2026-69598, CVE-2026-83995, CVE-2026-83501, CVE-2026-83498.

CVE-2026-69275

The Kernel Streaming WOW Thunk Service Driver in Windows contains a use-after-free vulnerability that can be exploited by a locally authorized attacker to achieve privilege escalation.

Affected products:

Windows

Source: https://nvd.nist.gov/vuln/detail/CVE-2026-69275

Related in this roundup: CVE-2026-81963, CVE-2026-85880, CVE-2026-69496, CVE-2026-69586, CVE-2026-69768, CVE-2026-73025, CVE-2026-56172, CVE-2026-68832, CVE-2026-68834, CVE-2026-68838, CVE-2026-68841, CVE-2026-68875, CVE-2026-68877, CVE-2026-68880, CVE-2026-69265, CVE-2026-69270, CVE-2026-69274, CVE-2026-69280, CVE-2026-69283, CVE-2026-69284, CVE-2026-69289, CVE-2026-69296, CVE-2026-69300, CVE-2026-69301, CVE-2026-69307, CVE-2026-69312, CVE-2026-69314, CVE-2026-69332, CVE-2026-69333, CVE-2026-69335, CVE-2026-68833, CVE-2026-68851, CVE-2026-69366, CVE-2026-69337, CVE-2026-69347, CVE-2026-69379, CVE-2026-69390, CVE-2026-69401, CVE-2026-69413, CVE-2026-69420, CVE-2026-69429, CVE-2026-69448, CVE-2026-69455, CVE-2026-69532, CVE-2026-69472, CVE-2026-69479, CVE-2026-69531, CVE-2026-69517, CVE-2026-69505, CVE-2026-69504, CVE-2026-69527, CVE-2026-69549, CVE-2026-69588, CVE-2026-69609, CVE-2026-69648, CVE-2026-69689, CVE-2026-69790, CVE-2026-69638, CVE-2026-69859, CVE-2026-69717, CVE-2026-69711, CVE-2026-69875, CVE-2026-69889, CVE-2026-69757, CVE-2026-69741, CVE-2026-69762, CVE-2026-69744, CVE-2026-69832, CVE-2026-69691, CVE-2026-69808, CVE-2026-69775, CVE-2026-69822, CVE-2026-69770, CVE-2026-69676, CVE-2026-70289, CVE-2026-70563, CVE-2026-71329, CVE-2026-71332, CVE-2026-71350, CVE-2026-71348, CVE-2026-71345, CVE-2026-69469, CVE-2026-69501, CVE-2026-69548, CVE-2026-69846, CVE-2026-70283, CVE-2026-72981, CVE-2026-77491, CVE-2026-77492, CVE-2026-77503, CVE-2026-80093, CVE-2026-72949, CVE-2026-70019, CVE-2026-72940, CVE-2026-69573, CVE-2026-70290, CVE-2026-83991, CVE-2026-83999, CVE-2026-69321, CVE-2026-69316, CVE-2026-69340, CVE-2026-69348, CVE-2026-69350, CVE-2026-69353, CVE-2026-69357, CVE-2026-69393, CVE-2026-69410, CVE-2026-69421, CVE-2026-69428, CVE-2026-69425, CVE-2026-69427, CVE-2026-69434, CVE-2026-69456, CVE-2026-69459, CVE-2026-69478, CVE-2026-69561, CVE-2026-69512, CVE-2026-69498, CVE-2026-69571, CVE-2026-69535, CVE-2026-69538, CVE-2026-69591, CVE-2026-69566, CVE-2026-69567, CVE-2026-69584, CVE-2026-69617, CVE-2026-69630, CVE-2026-69610, CVE-2026-69881, CVE-2026-69680, CVE-2026-69619, CVE-2026-69685, CVE-2026-69643, CVE-2026-69687, CVE-2026-69791, CVE-2026-69707, CVE-2026-69652, CVE-2026-69834, CVE-2026-69709, CVE-2026-69844, CVE-2026-69814, CVE-2026-69731, CVE-2026-69706, CVE-2026-69779, CVE-2026-69895, CVE-2026-69792, CVE-2026-69853, CVE-2026-69761, CVE-2026-69785, CVE-2026-69818, CVE-2026-69786, CVE-2026-69874, CVE-2026-70565, CVE-2026-70574, CVE-2026-70569, CVE-2026-70575, CVE-2026-71349, CVE-2026-72927, CVE-2026-72952, CVE-2026-72942, CVE-2026-72966, CVE-2026-72967, CVE-2026-69426, CVE-2026-69564, CVE-2026-72985, CVE-2026-73019, CVE-2026-78451, CVE-2026-78452, CVE-2026-83940, CVE-2026-69598, CVE-2026-83995, CVE-2026-83501, CVE-2026-83498.

CVE-2026-69277

A stack-based buffer overflow vulnerability exists in the Microsoft Local Security Authority Server (lsasrv), which can be exploited by an authorized local attacker to achieve privilege escalation on affected Windows systems.

Affected products:

Local Security Authority Server

Source: https://nvd.nist.gov/vuln/detail/CVE-2026-69277

Related in this roundup: CVE-2026-69594, CVE-2026-69365.

CVE-2026-69279

CVE-2026-69279 is a use-after-free vulnerability located in the Windows Cloud Files Mini Filter Driver. An authorized local attacker can exploit this flaw to execute code or perform actions with elevated privileges on the affected system.

Affected products:

Windows Cloud Files Mini Filter Driver

Source: https://nvd.nist.gov/vuln/detail/CVE-2026-69279

CVE-2026-69280

CVE-2026-69280 is a use-after-free vulnerability in the Windows Push Notifications component that permits an authenticated local attacker to escalate their privileges. Successful exploitation allows for privilege escalation on the affected Windows host.

Affected products:

Windows

Source: https://nvd.nist.gov/vuln/detail/CVE-2026-69280

Related in this roundup: CVE-2026-81963, CVE-2026-85880, CVE-2026-69496, CVE-2026-69586, CVE-2026-69768, CVE-2026-73025, CVE-2026-56172, CVE-2026-68832, CVE-2026-68834, CVE-2026-68838, CVE-2026-68841, CVE-2026-68875, CVE-2026-68877, CVE-2026-68880, CVE-2026-69265, CVE-2026-69270, CVE-2026-69274, CVE-2026-69275, CVE-2026-69283, CVE-2026-69284, CVE-2026-69289, CVE-2026-69296, CVE-2026-69300, CVE-2026-69301, CVE-2026-69307, CVE-2026-69312, CVE-2026-69314, CVE-2026-69332, CVE-2026-69333, CVE-2026-69335, CVE-2026-68833, CVE-2026-68851, CVE-2026-69366, CVE-2026-69337, CVE-2026-69347, CVE-2026-69379, CVE-2026-69390, CVE-2026-69401, CVE-2026-69413, CVE-2026-69420, CVE-2026-69429, CVE-2026-69448, CVE-2026-69455, CVE-2026-69532, CVE-2026-69472, CVE-2026-69479, CVE-2026-69531, CVE-2026-69517, CVE-2026-69505, CVE-2026-69504, CVE-2026-69527, CVE-2026-69549, CVE-2026-69588, CVE-2026-69609, CVE-2026-69648, CVE-2026-69689, CVE-2026-69790, CVE-2026-69638, CVE-2026-69859, CVE-2026-69717, CVE-2026-69711, CVE-2026-69875, CVE-2026-69889, CVE-2026-69757, CVE-2026-69741, CVE-2026-69762, CVE-2026-69744, CVE-2026-69832, CVE-2026-69691, CVE-2026-69808, CVE-2026-69775, CVE-2026-69822, CVE-2026-69770, CVE-2026-69676, CVE-2026-70289, CVE-2026-70563, CVE-2026-71329, CVE-2026-71332, CVE-2026-71350, CVE-2026-71348, CVE-2026-71345, CVE-2026-69469, CVE-2026-69501, CVE-2026-69548, CVE-2026-69846, CVE-2026-70283, CVE-2026-72981, CVE-2026-77491, CVE-2026-77492, CVE-2026-77503, CVE-2026-80093, CVE-2026-72949, CVE-2026-70019, CVE-2026-72940, CVE-2026-69573, CVE-2026-70290, CVE-2026-83991, CVE-2026-83999, CVE-2026-69321, CVE-2026-69316, CVE-2026-69340, CVE-2026-69348, CVE-2026-69350, CVE-2026-69353, CVE-2026-69357, CVE-2026-69393, CVE-2026-69410, CVE-2026-69421, CVE-2026-69428, CVE-2026-69425, CVE-2026-69427, CVE-2026-69434, CVE-2026-69456, CVE-2026-69459, CVE-2026-69478, CVE-2026-69561, CVE-2026-69512, CVE-2026-69498, CVE-2026-69571, CVE-2026-69535, CVE-2026-69538, CVE-2026-69591, CVE-2026-69566, CVE-2026-69567, CVE-2026-69584, CVE-2026-69617, CVE-2026-69630, CVE-2026-69610, CVE-2026-69881, CVE-2026-69680, CVE-2026-69619, CVE-2026-69685, CVE-2026-69643, CVE-2026-69687, CVE-2026-69791, CVE-2026-69707, CVE-2026-69652, CVE-2026-69834, CVE-2026-69709, CVE-2026-69844, CVE-2026-69814, CVE-2026-69731, CVE-2026-69706, CVE-2026-69779, CVE-2026-69895, CVE-2026-69792, CVE-2026-69853, CVE-2026-69761, CVE-2026-69785, CVE-2026-69818, CVE-2026-69786, CVE-2026-69874, CVE-2026-70565, CVE-2026-70574, CVE-2026-70569, CVE-2026-70575, CVE-2026-71349, CVE-2026-72927, CVE-2026-72952, CVE-2026-72942, CVE-2026-72966, CVE-2026-72967, CVE-2026-69426, CVE-2026-69564, CVE-2026-72985, CVE-2026-73019, CVE-2026-78451, CVE-2026-78452, CVE-2026-83940, CVE-2026-69598, CVE-2026-83995, CVE-2026-83501, CVE-2026-83498.

CVE-2026-69281

A use-after-free vulnerability exists in the Windows License Manager component, enabling a locally authenticated attacker to escalate their privileges to a higher level of access.

Affected products:

Windows License Manager

Source: https://nvd.nist.gov/vuln/detail/CVE-2026-69281

Related in this roundup: CVE-2026-69315.

CVE-2026-69282

CVE-2026-69282 is a critical vulnerability in Microsoft Office SharePoint caused by improper access control. The flaw allows an authenticated attacker to perform remote code execution (RCE) over a network, presenting a significant risk to organizational infrastructure.

Affected products:

SharePoint

Source: https://nvd.nist.gov/vuln/detail/CVE-2026-69282

Related in this roundup: CVE-2026-69268, CVE-2026-69273, CVE-2026-69716, CVE-2026-69724, CVE-2026-69690, CVE-2026-69683, CVE-2026-69804, CVE-2026-69402, CVE-2026-69409, CVE-2026-69417, CVE-2026-69464, CVE-2026-69636, CVE-2026-69904.

CVE-2026-69283

CVE-2026-69283 is a heap-based buffer overflow vulnerability in the Windows CD-ROM driver. An authorized attacker can exploit this flaw to execute code with elevated privileges locally on the affected Windows system.

Affected products:

Windows

Source: https://nvd.nist.gov/vuln/detail/CVE-2026-69283

Related in this roundup: CVE-2026-81963, CVE-2026-85880, CVE-2026-69496, CVE-2026-69586, CVE-2026-69768, CVE-2026-73025, CVE-2026-56172, CVE-2026-68832, CVE-2026-68834, CVE-2026-68838, CVE-2026-68841, CVE-2026-68875, CVE-2026-68877, CVE-2026-68880, CVE-2026-69265, CVE-2026-69270, CVE-2026-69274, CVE-2026-69275, CVE-2026-69280, CVE-2026-69284, CVE-2026-69289, CVE-2026-69296, CVE-2026-69300, CVE-2026-69301, CVE-2026-69307, CVE-2026-69312, CVE-2026-69314, CVE-2026-69332, CVE-2026-69333, CVE-2026-69335, CVE-2026-68833, CVE-2026-68851, CVE-2026-69366, CVE-2026-69337, CVE-2026-69347, CVE-2026-69379, CVE-2026-69390, CVE-2026-69401, CVE-2026-69413, CVE-2026-69420, CVE-2026-69429, CVE-2026-69448, CVE-2026-69455, CVE-2026-69532, CVE-2026-69472, CVE-2026-69479, CVE-2026-69531, CVE-2026-69517, CVE-2026-69505, CVE-2026-69504, CVE-2026-69527, CVE-2026-69549, CVE-2026-69588, CVE-2026-69609, CVE-2026-69648, CVE-2026-69689, CVE-2026-69790, CVE-2026-69638, CVE-2026-69859, CVE-2026-69717, CVE-2026-69711, CVE-2026-69875, CVE-2026-69889, CVE-2026-69757, CVE-2026-69741, CVE-2026-69762, CVE-2026-69744, CVE-2026-69832, CVE-2026-69691, CVE-2026-69808, CVE-2026-69775, CVE-2026-69822, CVE-2026-69770, CVE-2026-69676, CVE-2026-70289, CVE-2026-70563, CVE-2026-71329, CVE-2026-71332, CVE-2026-71350, CVE-2026-71348, CVE-2026-71345, CVE-2026-69469, CVE-2026-69501, CVE-2026-69548, CVE-2026-69846, CVE-2026-70283, CVE-2026-72981, CVE-2026-77491, CVE-2026-77492, CVE-2026-77503, CVE-2026-80093, CVE-2026-72949, CVE-2026-70019, CVE-2026-72940, CVE-2026-69573, CVE-2026-70290, CVE-2026-83991, CVE-2026-83999, CVE-2026-69321, CVE-2026-69316, CVE-2026-69340, CVE-2026-69348, CVE-2026-69350, CVE-2026-69353, CVE-2026-69357, CVE-2026-69393, CVE-2026-69410, CVE-2026-69421, CVE-2026-69428, CVE-2026-69425, CVE-2026-69427, CVE-2026-69434, CVE-2026-69456, CVE-2026-69459, CVE-2026-69478, CVE-2026-69561, CVE-2026-69512, CVE-2026-69498, CVE-2026-69571, CVE-2026-69535, CVE-2026-69538, CVE-2026-69591, CVE-2026-69566, CVE-2026-69567, CVE-2026-69584, CVE-2026-69617, CVE-2026-69630, CVE-2026-69610, CVE-2026-69881, CVE-2026-69680, CVE-2026-69619, CVE-2026-69685, CVE-2026-69643, CVE-2026-69687, CVE-2026-69791, CVE-2026-69707, CVE-2026-69652, CVE-2026-69834, CVE-2026-69709, CVE-2026-69844, CVE-2026-69814, CVE-2026-69731, CVE-2026-69706, CVE-2026-69779, CVE-2026-69895, CVE-2026-69792, CVE-2026-69853, CVE-2026-69761, CVE-2026-69785, CVE-2026-69818, CVE-2026-69786, CVE-2026-69874, CVE-2026-70565, CVE-2026-70574, CVE-2026-70569, CVE-2026-70575, CVE-2026-71349, CVE-2026-72927, CVE-2026-72952, CVE-2026-72942, CVE-2026-72966, CVE-2026-72967, CVE-2026-69426, CVE-2026-69564, CVE-2026-72985, CVE-2026-73019, CVE-2026-78451, CVE-2026-78452, CVE-2026-83940, CVE-2026-69598, CVE-2026-83995, CVE-2026-83501, CVE-2026-83498.

CVE-2026-69284

CVE-2026-69284 describes a heap-based buffer overflow vulnerability in the Windows DCOM Server. An authorized, local attacker can leverage this flaw to execute code with elevated privileges, resulting in privilege escalation.

Affected products:

Windows

Source: https://nvd.nist.gov/vuln/detail/CVE-2026-69284

Related in this roundup: CVE-2026-81963, CVE-2026-85880, CVE-2026-69496, CVE-2026-69586, CVE-2026-69768, CVE-2026-73025, CVE-2026-56172, CVE-2026-68832, CVE-2026-68834, CVE-2026-68838, CVE-2026-68841, CVE-2026-68875, CVE-2026-68877, CVE-2026-68880, CVE-2026-69265, CVE-2026-69270, CVE-2026-69274, CVE-2026-69275, CVE-2026-69280, CVE-2026-69283, CVE-2026-69289, CVE-2026-69296, CVE-2026-69300, CVE-2026-69301, CVE-2026-69307, CVE-2026-69312, CVE-2026-69314, CVE-2026-69332, CVE-2026-69333, CVE-2026-69335, CVE-2026-68833, CVE-2026-68851, CVE-2026-69366, CVE-2026-69337, CVE-2026-69347, CVE-2026-69379, CVE-2026-69390, CVE-2026-69401, CVE-2026-69413, CVE-2026-69420, CVE-2026-69429, CVE-2026-69448, CVE-2026-69455, CVE-2026-69532, CVE-2026-69472, CVE-2026-69479, CVE-2026-69531, CVE-2026-69517, CVE-2026-69505, CVE-2026-69504, CVE-2026-69527, CVE-2026-69549, CVE-2026-69588, CVE-2026-69609, CVE-2026-69648, CVE-2026-69689, CVE-2026-69790, CVE-2026-69638, CVE-2026-69859, CVE-2026-69717, CVE-2026-69711, CVE-2026-69875, CVE-2026-69889, CVE-2026-69757, CVE-2026-69741, CVE-2026-69762, CVE-2026-69744, CVE-2026-69832, CVE-2026-69691, CVE-2026-69808, CVE-2026-69775, CVE-2026-69822, CVE-2026-69770, CVE-2026-69676, CVE-2026-70289, CVE-2026-70563, CVE-2026-71329, CVE-2026-71332, CVE-2026-71350, CVE-2026-71348, CVE-2026-71345, CVE-2026-69469, CVE-2026-69501, CVE-2026-69548, CVE-2026-69846, CVE-2026-70283, CVE-2026-72981, CVE-2026-77491, CVE-2026-77492, CVE-2026-77503, CVE-2026-80093, CVE-2026-72949, CVE-2026-70019, CVE-2026-72940, CVE-2026-69573, CVE-2026-70290, CVE-2026-83991, CVE-2026-83999, CVE-2026-69321, CVE-2026-69316, CVE-2026-69340, CVE-2026-69348, CVE-2026-69350, CVE-2026-69353, CVE-2026-69357, CVE-2026-69393, CVE-2026-69410, CVE-2026-69421, CVE-2026-69428, CVE-2026-69425, CVE-2026-69427, CVE-2026-69434, CVE-2026-69456, CVE-2026-69459, CVE-2026-69478, CVE-2026-69561, CVE-2026-69512, CVE-2026-69498, CVE-2026-69571, CVE-2026-69535, CVE-2026-69538, CVE-2026-69591, CVE-2026-69566, CVE-2026-69567, CVE-2026-69584, CVE-2026-69617, CVE-2026-69630, CVE-2026-69610, CVE-2026-69881, CVE-2026-69680, CVE-2026-69619, CVE-2026-69685, CVE-2026-69643, CVE-2026-69687, CVE-2026-69791, CVE-2026-69707, CVE-2026-69652, CVE-2026-69834, CVE-2026-69709, CVE-2026-69844, CVE-2026-69814, CVE-2026-69731, CVE-2026-69706, CVE-2026-69779, CVE-2026-69895, CVE-2026-69792, CVE-2026-69853, CVE-2026-69761, CVE-2026-69785, CVE-2026-69818, CVE-2026-69786, CVE-2026-69874, CVE-2026-70565, CVE-2026-70574, CVE-2026-70569, CVE-2026-70575, CVE-2026-71349, CVE-2026-72927, CVE-2026-72952, CVE-2026-72942, CVE-2026-72966, CVE-2026-72967, CVE-2026-69426, CVE-2026-69564, CVE-2026-72985, CVE-2026-73019, CVE-2026-78451, CVE-2026-78452, CVE-2026-83940, CVE-2026-69598, CVE-2026-83995, CVE-2026-83501, CVE-2026-83498.

CVE-2026-69285

CVE-2026-69285 is a heap-based buffer overflow vulnerability in Microsoft Office that enables an unauthorized remote attacker to achieve code execution over a network. The vulnerability carries a CVSS v3.1 base score of 8.8, indicating high impact.

Affected products:

Office

Source: https://nvd.nist.gov/vuln/detail/CVE-2026-69285

Related in this roundup: CVE-2026-69739, CVE-2026-77504, CVE-2026-77898, CVE-2026-78439, CVE-2026-78505, CVE-2026-64918, CVE-2026-69442, CVE-2026-69626, CVE-2026-69632, CVE-2026-72938, CVE-2026-72973, CVE-2026-78512, CVE-2026-80079, CVE-2026-78524, CVE-2026-80078, CVE-2026-80076, CVE-2026-80087, CVE-2026-80085, CVE-2026-80088, CVE-2026-80091, CVE-2026-80089, CVE-2026-80090, CVE-2026-80082.

CVE-2026-69287

CVE-2026-69287 is a use-after-free vulnerability within Microsoft Windows Remote Desktop Services. An authenticated local attacker can leverage this flaw to execute code with elevated privileges, potentially leading to full system compromise.

Affected products:

Remote Desktop Services

Source: https://nvd.nist.gov/vuln/detail/CVE-2026-69287

Related in this roundup: CVE-2026-69525, CVE-2026-69514, CVE-2026-69539, CVE-2026-69599, CVE-2026-69536, CVE-2026-69616.

CVE-2026-69289

CVE-2026-69289 is a privilege escalation vulnerability in the Windows Setup Files Cleanup component caused by improper link resolution before file access (link following). An authenticated attacker can exploit this flaw to gain elevated privileges locally by manipulating file system links.

Affected products:

Windows

Source: https://nvd.nist.gov/vuln/detail/CVE-2026-69289

Related in this roundup: CVE-2026-81963, CVE-2026-85880, CVE-2026-69496, CVE-2026-69586, CVE-2026-69768, CVE-2026-73025, CVE-2026-56172, CVE-2026-68832, CVE-2026-68834, CVE-2026-68838, CVE-2026-68841, CVE-2026-68875, CVE-2026-68877, CVE-2026-68880, CVE-2026-69265, CVE-2026-69270, CVE-2026-69274, CVE-2026-69275, CVE-2026-69280, CVE-2026-69283, CVE-2026-69284, CVE-2026-69296, CVE-2026-69300, CVE-2026-69301, CVE-2026-69307, CVE-2026-69312, CVE-2026-69314, CVE-2026-69332, CVE-2026-69333, CVE-2026-69335, CVE-2026-68833, CVE-2026-68851, CVE-2026-69366, CVE-2026-69337, CVE-2026-69347, CVE-2026-69379, CVE-2026-69390, CVE-2026-69401, CVE-2026-69413, CVE-2026-69420, CVE-2026-69429, CVE-2026-69448, CVE-2026-69455, CVE-2026-69532, CVE-2026-69472, CVE-2026-69479, CVE-2026-69531, CVE-2026-69517, CVE-2026-69505, CVE-2026-69504, CVE-2026-69527, CVE-2026-69549, CVE-2026-69588, CVE-2026-69609, CVE-2026-69648, CVE-2026-69689, CVE-2026-69790, CVE-2026-69638, CVE-2026-69859, CVE-2026-69717, CVE-2026-69711, CVE-2026-69875, CVE-2026-69889, CVE-2026-69757, CVE-2026-69741, CVE-2026-69762, CVE-2026-69744, CVE-2026-69832, CVE-2026-69691, CVE-2026-69808, CVE-2026-69775, CVE-2026-69822, CVE-2026-69770, CVE-2026-69676, CVE-2026-70289, CVE-2026-70563, CVE-2026-71329, CVE-2026-71332, CVE-2026-71350, CVE-2026-71348, CVE-2026-71345, CVE-2026-69469, CVE-2026-69501, CVE-2026-69548, CVE-2026-69846, CVE-2026-70283, CVE-2026-72981, CVE-2026-77491, CVE-2026-77492, CVE-2026-77503, CVE-2026-80093, CVE-2026-72949, CVE-2026-70019, CVE-2026-72940, CVE-2026-69573, CVE-2026-70290, CVE-2026-83991, CVE-2026-83999, CVE-2026-69321, CVE-2026-69316, CVE-2026-69340, CVE-2026-69348, CVE-2026-69350, CVE-2026-69353, CVE-2026-69357, CVE-2026-69393, CVE-2026-69410, CVE-2026-69421, CVE-2026-69428, CVE-2026-69425, CVE-2026-69427, CVE-2026-69434, CVE-2026-69456, CVE-2026-69459, CVE-2026-69478, CVE-2026-69561, CVE-2026-69512, CVE-2026-69498, CVE-2026-69571, CVE-2026-69535, CVE-2026-69538, CVE-2026-69591, CVE-2026-69566, CVE-2026-69567, CVE-2026-69584, CVE-2026-69617, CVE-2026-69630, CVE-2026-69610, CVE-2026-69881, CVE-2026-69680, CVE-2026-69619, CVE-2026-69685, CVE-2026-69643, CVE-2026-69687, CVE-2026-69791, CVE-2026-69707, CVE-2026-69652, CVE-2026-69834, CVE-2026-69709, CVE-2026-69844, CVE-2026-69814, CVE-2026-69731, CVE-2026-69706, CVE-2026-69779, CVE-2026-69895, CVE-2026-69792, CVE-2026-69853, CVE-2026-69761, CVE-2026-69785, CVE-2026-69818, CVE-2026-69786, CVE-2026-69874, CVE-2026-70565, CVE-2026-70574, CVE-2026-70569, CVE-2026-70575, CVE-2026-71349, CVE-2026-72927, CVE-2026-72952, CVE-2026-72942, CVE-2026-72966, CVE-2026-72967, CVE-2026-69426, CVE-2026-69564, CVE-2026-72985, CVE-2026-73019, CVE-2026-78451, CVE-2026-78452, CVE-2026-83940, CVE-2026-69598, CVE-2026-83995, CVE-2026-83501, CVE-2026-83498.

CVE-2026-69290

CVE-2026-69290 describes a stack-based buffer overflow vulnerability in the Windows Storage Spaces Controller. This flaw allows an authenticated local attacker to execute code with elevated privileges, potentially leading to full system compromise.

Affected products:

Windows Storage Spaces Controller

Source: https://nvd.nist.gov/vuln/detail/CVE-2026-69290

Related in this roundup: CVE-2026-68844, CVE-2026-69568, CVE-2026-69575.

CVE-2026-69291

CVE-2026-69291 is a heap-based buffer overflow vulnerability within the Windows Volume Manager Extension Driver. This vulnerability allows an unauthorized remote attacker to achieve remote code execution (RCE) on affected Windows systems via the network.

Affected products:

Windows Volume Manager Extension Driver

Source: https://nvd.nist.gov/vuln/detail/CVE-2026-69291

Related in this roundup: CVE-2026-69334, CVE-2026-69468, CVE-2026-69582, CVE-2026-77904.

CVE-2026-69292

A double free vulnerability exists in the Microsoft Remote Desktop Gateway Service. An authenticated attacker can leverage this flaw to perform local privilege escalation on the host system.

Affected products:

Remote Desktop Gateway Service

Source: https://nvd.nist.gov/vuln/detail/CVE-2026-69292

Related in this roundup: CVE-2026-69338.

CVE-2026-69293

CVE-2026-69293 is a heap-based buffer overflow vulnerability within the Windows Biometric Service that enables a locally authorized attacker to escalate their privileges. This vulnerability requires the attacker to already have a level of access to the system to exploit the service and achieve unauthorized administrative or elevated system control.

Affected products:

Windows Biometric Service

Source: https://nvd.nist.gov/vuln/detail/CVE-2026-69293

Related in this roundup: CVE-2026-69298, CVE-2026-69323, CVE-2026-69583, CVE-2026-69589, CVE-2026-69580, CVE-2026-69476, CVE-2026-69787, CVE-2026-77489, CVE-2026-83955, CVE-2026-83986, CVE-2026-83969, CVE-2026-83988, CVE-2026-83979, CVE-2026-83974, CVE-2026-83975, CVE-2026-83976, CVE-2026-69727, CVE-2026-69826, CVE-2026-69738, CVE-2026-69773, CVE-2026-70573, CVE-2026-70572, CVE-2026-70581, CVE-2026-72941, CVE-2026-69352, CVE-2026-69489, CVE-2026-69593, CVE-2026-72995, CVE-2026-72988, CVE-2026-72990, CVE-2026-72991, CVE-2026-72992, CVE-2026-72993, CVE-2026-72994, CVE-2026-72996, CVE-2026-72997, CVE-2026-73002, CVE-2026-73020, CVE-2026-73000, CVE-2026-73001, CVE-2026-73021, CVE-2026-73015, CVE-2026-73011, CVE-2026-73008, CVE-2026-73007, CVE-2026-73026, CVE-2026-78447, CVE-2026-78448, CVE-2026-83971, CVE-2026-83954, CVE-2026-83967, CVE-2026-83970, CVE-2026-83972, CVE-2026-83968, CVE-2026-83973, CVE-2026-83981, CVE-2026-83977, CVE-2026-83978, CVE-2026-83982, CVE-2026-83980, CVE-2026-83987, CVE-2026-83983, CVE-2026-83985.

CVE-2026-69295

CVE-2026-69295 is an out-of-bounds read vulnerability in the Windows USB Driver. An authorized local attacker can exploit this flaw to achieve privilege escalation on the affected system.

Affected products:

Windows USB Driver

Source: https://nvd.nist.gov/vuln/detail/CVE-2026-69295

Related in this roundup: CVE-2026-68840, CVE-2026-69457, CVE-2026-69503, CVE-2026-72953.

CVE-2026-69296

A use-after-free vulnerability exists in the Windows Device Association Service that can be exploited by an authenticated attacker to perform privilege escalation over a network.

Affected products:

Windows

Source: https://nvd.nist.gov/vuln/detail/CVE-2026-69296

Related in this roundup: CVE-2026-81963, CVE-2026-85880, CVE-2026-69496, CVE-2026-69586, CVE-2026-69768, CVE-2026-73025, CVE-2026-56172, CVE-2026-68832, CVE-2026-68834, CVE-2026-68838, CVE-2026-68841, CVE-2026-68875, CVE-2026-68877, CVE-2026-68880, CVE-2026-69265, CVE-2026-69270, CVE-2026-69274, CVE-2026-69275, CVE-2026-69280, CVE-2026-69283, CVE-2026-69284, CVE-2026-69289, CVE-2026-69300, CVE-2026-69301, CVE-2026-69307, CVE-2026-69312, CVE-2026-69314, CVE-2026-69332, CVE-2026-69333, CVE-2026-69335, CVE-2026-68833, CVE-2026-68851, CVE-2026-69366, CVE-2026-69337, CVE-2026-69347, CVE-2026-69379, CVE-2026-69390, CVE-2026-69401, CVE-2026-69413, CVE-2026-69420, CVE-2026-69429, CVE-2026-69448, CVE-2026-69455, CVE-2026-69532, CVE-2026-69472, CVE-2026-69479, CVE-2026-69531, CVE-2026-69517, CVE-2026-69505, CVE-2026-69504, CVE-2026-69527, CVE-2026-69549, CVE-2026-69588, CVE-2026-69609, CVE-2026-69648, CVE-2026-69689, CVE-2026-69790, CVE-2026-69638, CVE-2026-69859, CVE-2026-69717, CVE-2026-69711, CVE-2026-69875, CVE-2026-69889, CVE-2026-69757, CVE-2026-69741, CVE-2026-69762, CVE-2026-69744, CVE-2026-69832, CVE-2026-69691, CVE-2026-69808, CVE-2026-69775, CVE-2026-69822, CVE-2026-69770, CVE-2026-69676, CVE-2026-70289, CVE-2026-70563, CVE-2026-71329, CVE-2026-71332, CVE-2026-71350, CVE-2026-71348, CVE-2026-71345, CVE-2026-69469, CVE-2026-69501, CVE-2026-69548, CVE-2026-69846, CVE-2026-70283, CVE-2026-72981, CVE-2026-77491, CVE-2026-77492, CVE-2026-77503, CVE-2026-80093, CVE-2026-72949, CVE-2026-70019, CVE-2026-72940, CVE-2026-69573, CVE-2026-70290, CVE-2026-83991, CVE-2026-83999, CVE-2026-69321, CVE-2026-69316, CVE-2026-69340, CVE-2026-69348, CVE-2026-69350, CVE-2026-69353, CVE-2026-69357, CVE-2026-69393, CVE-2026-69410, CVE-2026-69421, CVE-2026-69428, CVE-2026-69425, CVE-2026-69427, CVE-2026-69434, CVE-2026-69456, CVE-2026-69459, CVE-2026-69478, CVE-2026-69561, CVE-2026-69512, CVE-2026-69498, CVE-2026-69571, CVE-2026-69535, CVE-2026-69538, CVE-2026-69591, CVE-2026-69566, CVE-2026-69567, CVE-2026-69584, CVE-2026-69617, CVE-2026-69630, CVE-2026-69610, CVE-2026-69881, CVE-2026-69680, CVE-2026-69619, CVE-2026-69685, CVE-2026-69643, CVE-2026-69687, CVE-2026-69791, CVE-2026-69707, CVE-2026-69652, CVE-2026-69834, CVE-2026-69709, CVE-2026-69844, CVE-2026-69814, CVE-2026-69731, CVE-2026-69706, CVE-2026-69779, CVE-2026-69895, CVE-2026-69792, CVE-2026-69853, CVE-2026-69761, CVE-2026-69785, CVE-2026-69818, CVE-2026-69786, CVE-2026-69874, CVE-2026-70565, CVE-2026-70574, CVE-2026-70569, CVE-2026-70575, CVE-2026-71349, CVE-2026-72927, CVE-2026-72952, CVE-2026-72942, CVE-2026-72966, CVE-2026-72967, CVE-2026-69426, CVE-2026-69564, CVE-2026-72985, CVE-2026-73019, CVE-2026-78451, CVE-2026-78452, CVE-2026-83940, CVE-2026-69598, CVE-2026-83995, CVE-2026-83501, CVE-2026-83498.

CVE-2026-69298

An integer overflow or wraparound vulnerability exists within the Windows Biometric Service. An authorized local attacker can exploit this flaw to execute code or perform actions with elevated privileges on the affected system.

Affected products:

Windows Biometric Service

Source: https://nvd.nist.gov/vuln/detail/CVE-2026-69298

Related in this roundup: CVE-2026-69293, CVE-2026-69323, CVE-2026-69583, CVE-2026-69589, CVE-2026-69580, CVE-2026-69476, CVE-2026-69787, CVE-2026-77489, CVE-2026-83955, CVE-2026-83986, CVE-2026-83969, CVE-2026-83988, CVE-2026-83979, CVE-2026-83974, CVE-2026-83975, CVE-2026-83976, CVE-2026-69727, CVE-2026-69826, CVE-2026-69738, CVE-2026-69773, CVE-2026-70573, CVE-2026-70572, CVE-2026-70581, CVE-2026-72941, CVE-2026-69352, CVE-2026-69489, CVE-2026-69593, CVE-2026-72995, CVE-2026-72988, CVE-2026-72990, CVE-2026-72991, CVE-2026-72992, CVE-2026-72993, CVE-2026-72994, CVE-2026-72996, CVE-2026-72997, CVE-2026-73002, CVE-2026-73020, CVE-2026-73000, CVE-2026-73001, CVE-2026-73021, CVE-2026-73015, CVE-2026-73011, CVE-2026-73008, CVE-2026-73007, CVE-2026-73026, CVE-2026-78447, CVE-2026-78448, CVE-2026-83971, CVE-2026-83954, CVE-2026-83967, CVE-2026-83970, CVE-2026-83972, CVE-2026-83968, CVE-2026-83973, CVE-2026-83981, CVE-2026-83977, CVE-2026-83978, CVE-2026-83982, CVE-2026-83980, CVE-2026-83987, CVE-2026-83983, CVE-2026-83985.

CVE-2026-69299

CVE-2026-69299 is a use-after-free vulnerability within the Microsoft COM component for Windows. The vulnerability allows an attacker who already possesses local authorized access to execute code or manipulate system states in a way that results in local privilege escalation.

Affected products:

Source: https://nvd.nist.gov/vuln/detail/CVE-2026-69299

Related in this roundup: CVE-2026-69294.

CVE-2026-69300

CVE-2026-69300 describes a use-after-free vulnerability within the Windows Push Notifications service. This flaw enables a locally authenticated attacker to trigger memory corruption and achieve privilege escalation on the affected host.

Affected products:

Windows

Source: https://nvd.nist.gov/vuln/detail/CVE-2026-69300

Related in this roundup: CVE-2026-81963, CVE-2026-85880, CVE-2026-69496, CVE-2026-69586, CVE-2026-69768, CVE-2026-73025, CVE-2026-56172, CVE-2026-68832, CVE-2026-68834, CVE-2026-68838, CVE-2026-68841, CVE-2026-68875, CVE-2026-68877, CVE-2026-68880, CVE-2026-69265, CVE-2026-69270, CVE-2026-69274, CVE-2026-69275, CVE-2026-69280, CVE-2026-69283, CVE-2026-69284, CVE-2026-69289, CVE-2026-69296, CVE-2026-69301, CVE-2026-69307, CVE-2026-69312, CVE-2026-69314, CVE-2026-69332, CVE-2026-69333, CVE-2026-69335, CVE-2026-68833, CVE-2026-68851, CVE-2026-69366, CVE-2026-69337, CVE-2026-69347, CVE-2026-69379, CVE-2026-69390, CVE-2026-69401, CVE-2026-69413, CVE-2026-69420, CVE-2026-69429, CVE-2026-69448, CVE-2026-69455, CVE-2026-69532, CVE-2026-69472, CVE-2026-69479, CVE-2026-69531, CVE-2026-69517, CVE-2026-69505, CVE-2026-69504, CVE-2026-69527, CVE-2026-69549, CVE-2026-69588, CVE-2026-69609, CVE-2026-69648, CVE-2026-69689, CVE-2026-69790, CVE-2026-69638, CVE-2026-69859, CVE-2026-69717, CVE-2026-69711, CVE-2026-69875, CVE-2026-69889, CVE-2026-69757, CVE-2026-69741, CVE-2026-69762, CVE-2026-69744, CVE-2026-69832, CVE-2026-69691, CVE-2026-69808, CVE-2026-69775, CVE-2026-69822, CVE-2026-69770, CVE-2026-69676, CVE-2026-70289, CVE-2026-70563, CVE-2026-71329, CVE-2026-71332, CVE-2026-71350, CVE-2026-71348, CVE-2026-71345, CVE-2026-69469, CVE-2026-69501, CVE-2026-69548, CVE-2026-69846, CVE-2026-70283, CVE-2026-72981, CVE-2026-77491, CVE-2026-77492, CVE-2026-77503, CVE-2026-80093, CVE-2026-72949, CVE-2026-70019, CVE-2026-72940, CVE-2026-69573, CVE-2026-70290, CVE-2026-83991, CVE-2026-83999, CVE-2026-69321, CVE-2026-69316, CVE-2026-69340, CVE-2026-69348, CVE-2026-69350, CVE-2026-69353, CVE-2026-69357, CVE-2026-69393, CVE-2026-69410, CVE-2026-69421, CVE-2026-69428, CVE-2026-69425, CVE-2026-69427, CVE-2026-69434, CVE-2026-69456, CVE-2026-69459, CVE-2026-69478, CVE-2026-69561, CVE-2026-69512, CVE-2026-69498, CVE-2026-69571, CVE-2026-69535, CVE-2026-69538, CVE-2026-69591, CVE-2026-69566, CVE-2026-69567, CVE-2026-69584, CVE-2026-69617, CVE-2026-69630, CVE-2026-69610, CVE-2026-69881, CVE-2026-69680, CVE-2026-69619, CVE-2026-69685, CVE-2026-69643, CVE-2026-69687, CVE-2026-69791, CVE-2026-69707, CVE-2026-69652, CVE-2026-69834, CVE-2026-69709, CVE-2026-69844, CVE-2026-69814, CVE-2026-69731, CVE-2026-69706, CVE-2026-69779, CVE-2026-69895, CVE-2026-69792, CVE-2026-69853, CVE-2026-69761, CVE-2026-69785, CVE-2026-69818, CVE-2026-69786, CVE-2026-69874, CVE-2026-70565, CVE-2026-70574, CVE-2026-70569, CVE-2026-70575, CVE-2026-71349, CVE-2026-72927, CVE-2026-72952, CVE-2026-72942, CVE-2026-72966, CVE-2026-72967, CVE-2026-69426, CVE-2026-69564, CVE-2026-72985, CVE-2026-73019, CVE-2026-78451, CVE-2026-78452, CVE-2026-83940, CVE-2026-69598, CVE-2026-83995, CVE-2026-83501, CVE-2026-83498.

CVE-2026-69301

CVE-2026-69301 describes a stack-based buffer overflow vulnerability in the Windows Win32K kernel-mode driver. This flaw allows an authorized attacker with network access to execute arbitrary code or elevate privileges on the target system, potentially leading to a full system compromise.

Affected products:

Windows

Source: https://nvd.nist.gov/vuln/detail/CVE-2026-69301

Related in this roundup: CVE-2026-81963, CVE-2026-85880, CVE-2026-69496, CVE-2026-69586, CVE-2026-69768, CVE-2026-73025, CVE-2026-56172, CVE-2026-68832, CVE-2026-68834, CVE-2026-68838, CVE-2026-68841, CVE-2026-68875, CVE-2026-68877, CVE-2026-68880, CVE-2026-69265, CVE-2026-69270, CVE-2026-69274, CVE-2026-69275, CVE-2026-69280, CVE-2026-69283, CVE-2026-69284, CVE-2026-69289, CVE-2026-69296, CVE-2026-69300, CVE-2026-69307, CVE-2026-69312, CVE-2026-69314, CVE-2026-69332, CVE-2026-69333, CVE-2026-69335, CVE-2026-68833, CVE-2026-68851, CVE-2026-69366, CVE-2026-69337, CVE-2026-69347, CVE-2026-69379, CVE-2026-69390, CVE-2026-69401, CVE-2026-69413, CVE-2026-69420, CVE-2026-69429, CVE-2026-69448, CVE-2026-69455, CVE-2026-69532, CVE-2026-69472, CVE-2026-69479, CVE-2026-69531, CVE-2026-69517, CVE-2026-69505, CVE-2026-69504, CVE-2026-69527, CVE-2026-69549, CVE-2026-69588, CVE-2026-69609, CVE-2026-69648, CVE-2026-69689, CVE-2026-69790, CVE-2026-69638, CVE-2026-69859, CVE-2026-69717, CVE-2026-69711, CVE-2026-69875, CVE-2026-69889, CVE-2026-69757, CVE-2026-69741, CVE-2026-69762, CVE-2026-69744, CVE-2026-69832, CVE-2026-69691, CVE-2026-69808, CVE-2026-69775, CVE-2026-69822, CVE-2026-69770, CVE-2026-69676, CVE-2026-70289, CVE-2026-70563, CVE-2026-71329, CVE-2026-71332, CVE-2026-71350, CVE-2026-71348, CVE-2026-71345, CVE-2026-69469, CVE-2026-69501, CVE-2026-69548, CVE-2026-69846, CVE-2026-70283, CVE-2026-72981, CVE-2026-77491, CVE-2026-77492, CVE-2026-77503, CVE-2026-80093, CVE-2026-72949, CVE-2026-70019, CVE-2026-72940, CVE-2026-69573, CVE-2026-70290, CVE-2026-83991, CVE-2026-83999, CVE-2026-69321, CVE-2026-69316, CVE-2026-69340, CVE-2026-69348, CVE-2026-69350, CVE-2026-69353, CVE-2026-69357, CVE-2026-69393, CVE-2026-69410, CVE-2026-69421, CVE-2026-69428, CVE-2026-69425, CVE-2026-69427, CVE-2026-69434, CVE-2026-69456, CVE-2026-69459, CVE-2026-69478, CVE-2026-69561, CVE-2026-69512, CVE-2026-69498, CVE-2026-69571, CVE-2026-69535, CVE-2026-69538, CVE-2026-69591, CVE-2026-69566, CVE-2026-69567, CVE-2026-69584, CVE-2026-69617, CVE-2026-69630, CVE-2026-69610, CVE-2026-69881, CVE-2026-69680, CVE-2026-69619, CVE-2026-69685, CVE-2026-69643, CVE-2026-69687, CVE-2026-69791, CVE-2026-69707, CVE-2026-69652, CVE-2026-69834, CVE-2026-69709, CVE-2026-69844, CVE-2026-69814, CVE-2026-69731, CVE-2026-69706, CVE-2026-69779, CVE-2026-69895, CVE-2026-69792, CVE-2026-69853, CVE-2026-69761, CVE-2026-69785, CVE-2026-69818, CVE-2026-69786, CVE-2026-69874, CVE-2026-70565, CVE-2026-70574, CVE-2026-70569, CVE-2026-70575, CVE-2026-71349, CVE-2026-72927, CVE-2026-72952, CVE-2026-72942, CVE-2026-72966, CVE-2026-72967, CVE-2026-69426, CVE-2026-69564, CVE-2026-72985, CVE-2026-73019, CVE-2026-78451, CVE-2026-78452, CVE-2026-83940, CVE-2026-69598, CVE-2026-83995, CVE-2026-83501, CVE-2026-83498.

CVE-2026-69305

CVE-2026-69305 is a use-after-free vulnerability within the Microsoft Windows Search Component. This flaw allows a locally authorized attacker to perform privilege escalation across a network, indicating a critical risk for internal lateral movement or gaining higher system authority.

Affected products:

Windows Search Component

Source: https://nvd.nist.gov/vuln/detail/CVE-2026-69305

Related in this roundup: CVE-2026-68896, CVE-2026-69322, CVE-2026-69507, CVE-2026-69554, CVE-2026-69585, CVE-2026-69608, CVE-2026-69453, CVE-2026-69600, CVE-2026-69911, CVE-2026-70145.

CVE-2026-69307

CVE-2026-69307 is a heap-based buffer overflow vulnerability residing in the Windows USB Audio Class driver (usbaudio.sys). An authorized local attacker can exploit this flaw to achieve privilege escalation on affected Windows systems.

Affected products:

Windows

Source: https://nvd.nist.gov/vuln/detail/CVE-2026-69307

Related in this roundup: CVE-2026-81963, CVE-2026-85880, CVE-2026-69496, CVE-2026-69586, CVE-2026-69768, CVE-2026-73025, CVE-2026-56172, CVE-2026-68832, CVE-2026-68834, CVE-2026-68838, CVE-2026-68841, CVE-2026-68875, CVE-2026-68877, CVE-2026-68880, CVE-2026-69265, CVE-2026-69270, CVE-2026-69274, CVE-2026-69275, CVE-2026-69280, CVE-2026-69283, CVE-2026-69284, CVE-2026-69289, CVE-2026-69296, CVE-2026-69300, CVE-2026-69301, CVE-2026-69312, CVE-2026-69314, CVE-2026-69332, CVE-2026-69333, CVE-2026-69335, CVE-2026-68833, CVE-2026-68851, CVE-2026-69366, CVE-2026-69337, CVE-2026-69347, CVE-2026-69379, CVE-2026-69390, CVE-2026-69401, CVE-2026-69413, CVE-2026-69420, CVE-2026-69429, CVE-2026-69448, CVE-2026-69455, CVE-2026-69532, CVE-2026-69472, CVE-2026-69479, CVE-2026-69531, CVE-2026-69517, CVE-2026-69505, CVE-2026-69504, CVE-2026-69527, CVE-2026-69549, CVE-2026-69588, CVE-2026-69609, CVE-2026-69648, CVE-2026-69689, CVE-2026-69790, CVE-2026-69638, CVE-2026-69859, CVE-2026-69717, CVE-2026-69711, CVE-2026-69875, CVE-2026-69889, CVE-2026-69757, CVE-2026-69741, CVE-2026-69762, CVE-2026-69744, CVE-2026-69832, CVE-2026-69691, CVE-2026-69808, CVE-2026-69775, CVE-2026-69822, CVE-2026-69770, CVE-2026-69676, CVE-2026-70289, CVE-2026-70563, CVE-2026-71329, CVE-2026-71332, CVE-2026-71350, CVE-2026-71348, CVE-2026-71345, CVE-2026-69469, CVE-2026-69501, CVE-2026-69548, CVE-2026-69846, CVE-2026-70283, CVE-2026-72981, CVE-2026-77491, CVE-2026-77492, CVE-2026-77503, CVE-2026-80093, CVE-2026-72949, CVE-2026-70019, CVE-2026-72940, CVE-2026-69573, CVE-2026-70290, CVE-2026-83991, CVE-2026-83999, CVE-2026-69321, CVE-2026-69316, CVE-2026-69340, CVE-2026-69348, CVE-2026-69350, CVE-2026-69353, CVE-2026-69357, CVE-2026-69393, CVE-2026-69410, CVE-2026-69421, CVE-2026-69428, CVE-2026-69425, CVE-2026-69427, CVE-2026-69434, CVE-2026-69456, CVE-2026-69459, CVE-2026-69478, CVE-2026-69561, CVE-2026-69512, CVE-2026-69498, CVE-2026-69571, CVE-2026-69535, CVE-2026-69538, CVE-2026-69591, CVE-2026-69566, CVE-2026-69567, CVE-2026-69584, CVE-2026-69617, CVE-2026-69630, CVE-2026-69610, CVE-2026-69881, CVE-2026-69680, CVE-2026-69619, CVE-2026-69685, CVE-2026-69643, CVE-2026-69687, CVE-2026-69791, CVE-2026-69707, CVE-2026-69652, CVE-2026-69834, CVE-2026-69709, CVE-2026-69844, CVE-2026-69814, CVE-2026-69731, CVE-2026-69706, CVE-2026-69779, CVE-2026-69895, CVE-2026-69792, CVE-2026-69853, CVE-2026-69761, CVE-2026-69785, CVE-2026-69818, CVE-2026-69786, CVE-2026-69874, CVE-2026-70565, CVE-2026-70574, CVE-2026-70569, CVE-2026-70575, CVE-2026-71349, CVE-2026-72927, CVE-2026-72952, CVE-2026-72942, CVE-2026-72966, CVE-2026-72967, CVE-2026-69426, CVE-2026-69564, CVE-2026-72985, CVE-2026-73019, CVE-2026-78451, CVE-2026-78452, CVE-2026-83940, CVE-2026-69598, CVE-2026-83995, CVE-2026-83501, CVE-2026-83498.

CVE-2026-69309

CVE-2026-69309 is a double free vulnerability in the Windows Print Spooler components that permits a locally authenticated attacker to perform a privilege escalation attack. Detection should focus on monitoring anomalous process behaviors or memory-related crashes originating from the Print Spooler service.

Affected products:

Windows Print Spooler

Source: https://nvd.nist.gov/vuln/detail/CVE-2026-69309

Related in this roundup: CVE-2026-68835, CVE-2026-68848, CVE-2026-69552, CVE-2026-69838, CVE-2026-70564, CVE-2026-85877, CVE-2026-69344, CVE-2026-69346, CVE-2026-69569, CVE-2026-69921.

CVE-2026-69310

CVE-2026-69310 describes a use-after-free vulnerability in the Windows DNS component. The vulnerability allows an attacker who already has local access to the system to exploit the memory corruption to escalate their privileges, potentially gaining higher-level administrative rights on the host.

Affected products:

Windows DNS

Source: https://nvd.nist.gov/vuln/detail/CVE-2026-69310

Related in this roundup: CVE-2026-69730, CVE-2026-70091, CVE-2026-69631, CVE-2026-72948, CVE-2026-69369, CVE-2026-69672, CVE-2026-72987.

CVE-2026-69311

CVE-2026-69311 is a use-after-free vulnerability in the Windows Audio Service that allows a local, authorized attacker to elevate their privileges on an affected system. This vulnerability impacts the core audio management service within the Windows operating system.

Affected products:

Windows Audio Service

Source: https://nvd.nist.gov/vuln/detail/CVE-2026-69311

Related in this roundup: CVE-2026-69540, CVE-2026-70562, CVE-2026-69394, CVE-2026-69604, CVE-2026-69447, CVE-2026-69801, CVE-2026-69692.

CVE-2026-69312

CVE-2026-69312 is an out-of-bounds read vulnerability in the Windows NTFS filesystem driver. The flaw allows an authenticated local attacker to perform unauthorized actions or potentially elevate their privileges on the host system.

Affected products:

Windows

Source: https://nvd.nist.gov/vuln/detail/CVE-2026-69312

Related in this roundup: CVE-2026-81963, CVE-2026-85880, CVE-2026-69496, CVE-2026-69586, CVE-2026-69768, CVE-2026-73025, CVE-2026-56172, CVE-2026-68832, CVE-2026-68834, CVE-2026-68838, CVE-2026-68841, CVE-2026-68875, CVE-2026-68877, CVE-2026-68880, CVE-2026-69265, CVE-2026-69270, CVE-2026-69274, CVE-2026-69275, CVE-2026-69280, CVE-2026-69283, CVE-2026-69284, CVE-2026-69289, CVE-2026-69296, CVE-2026-69300, CVE-2026-69301, CVE-2026-69307, CVE-2026-69314, CVE-2026-69332, CVE-2026-69333, CVE-2026-69335, CVE-2026-68833, CVE-2026-68851, CVE-2026-69366, CVE-2026-69337, CVE-2026-69347, CVE-2026-69379, CVE-2026-69390, CVE-2026-69401, CVE-2026-69413, CVE-2026-69420, CVE-2026-69429, CVE-2026-69448, CVE-2026-69455, CVE-2026-69532, CVE-2026-69472, CVE-2026-69479, CVE-2026-69531, CVE-2026-69517, CVE-2026-69505, CVE-2026-69504, CVE-2026-69527, CVE-2026-69549, CVE-2026-69588, CVE-2026-69609, CVE-2026-69648, CVE-2026-69689, CVE-2026-69790, CVE-2026-69638, CVE-2026-69859, CVE-2026-69717, CVE-2026-69711, CVE-2026-69875, CVE-2026-69889, CVE-2026-69757, CVE-2026-69741, CVE-2026-69762, CVE-2026-69744, CVE-2026-69832, CVE-2026-69691, CVE-2026-69808, CVE-2026-69775, CVE-2026-69822, CVE-2026-69770, CVE-2026-69676, CVE-2026-70289, CVE-2026-70563, CVE-2026-71329, CVE-2026-71332, CVE-2026-71350, CVE-2026-71348, CVE-2026-71345, CVE-2026-69469, CVE-2026-69501, CVE-2026-69548, CVE-2026-69846, CVE-2026-70283, CVE-2026-72981, CVE-2026-77491, CVE-2026-77492, CVE-2026-77503, CVE-2026-80093, CVE-2026-72949, CVE-2026-70019, CVE-2026-72940, CVE-2026-69573, CVE-2026-70290, CVE-2026-83991, CVE-2026-83999, CVE-2026-69321, CVE-2026-69316, CVE-2026-69340, CVE-2026-69348, CVE-2026-69350, CVE-2026-69353, CVE-2026-69357, CVE-2026-69393, CVE-2026-69410, CVE-2026-69421, CVE-2026-69428, CVE-2026-69425, CVE-2026-69427, CVE-2026-69434, CVE-2026-69456, CVE-2026-69459, CVE-2026-69478, CVE-2026-69561, CVE-2026-69512, CVE-2026-69498, CVE-2026-69571, CVE-2026-69535, CVE-2026-69538, CVE-2026-69591, CVE-2026-69566, CVE-2026-69567, CVE-2026-69584, CVE-2026-69617, CVE-2026-69630, CVE-2026-69610, CVE-2026-69881, CVE-2026-69680, CVE-2026-69619, CVE-2026-69685, CVE-2026-69643, CVE-2026-69687, CVE-2026-69791, CVE-2026-69707, CVE-2026-69652, CVE-2026-69834, CVE-2026-69709, CVE-2026-69844, CVE-2026-69814, CVE-2026-69731, CVE-2026-69706, CVE-2026-69779, CVE-2026-69895, CVE-2026-69792, CVE-2026-69853, CVE-2026-69761, CVE-2026-69785, CVE-2026-69818, CVE-2026-69786, CVE-2026-69874, CVE-2026-70565, CVE-2026-70574, CVE-2026-70569, CVE-2026-70575, CVE-2026-71349, CVE-2026-72927, CVE-2026-72952, CVE-2026-72942, CVE-2026-72966, CVE-2026-72967, CVE-2026-69426, CVE-2026-69564, CVE-2026-72985, CVE-2026-73019, CVE-2026-78451, CVE-2026-78452, CVE-2026-83940, CVE-2026-69598, CVE-2026-83995, CVE-2026-83501, CVE-2026-83498.

CVE-2026-69313

CVE-2026-69313 is a heap-based buffer overflow vulnerability in Microsoft Standard XPS. The vulnerability allows an authenticated attacker to perform a privilege escalation attack over a network, potentially resulting in unauthorized system access or control.

Affected products:

Standard XPS

Source: https://nvd.nist.gov/vuln/detail/CVE-2026-69313

Related in this roundup: CVE-2026-69824, CVE-2026-68885, CVE-2026-68888, CVE-2026-68889, CVE-2026-68890, CVE-2026-68892, CVE-2026-68897, CVE-2026-69269, CVE-2026-69271, CVE-2026-69272, CVE-2026-69336, CVE-2026-68881, CVE-2026-69345, CVE-2026-69367, CVE-2026-68891, CVE-2026-69308, CVE-2026-69376.

CVE-2026-69314

CVE-2026-69314 is a use-after-free vulnerability in the Windows Device Association Broker service. The vulnerability allows an authenticated attacker to perform a local privilege escalation over the network by exploiting the flaw in how the service manages memory associated with device associations.

Affected products:

Windows

Source: https://nvd.nist.gov/vuln/detail/CVE-2026-69314

Related in this roundup: CVE-2026-81963, CVE-2026-85880, CVE-2026-69496, CVE-2026-69586, CVE-2026-69768, CVE-2026-73025, CVE-2026-56172, CVE-2026-68832, CVE-2026-68834, CVE-2026-68838, CVE-2026-68841, CVE-2026-68875, CVE-2026-68877, CVE-2026-68880, CVE-2026-69265, CVE-2026-69270, CVE-2026-69274, CVE-2026-69275, CVE-2026-69280, CVE-2026-69283, CVE-2026-69284, CVE-2026-69289, CVE-2026-69296, CVE-2026-69300, CVE-2026-69301, CVE-2026-69307, CVE-2026-69312, CVE-2026-69332, CVE-2026-69333, CVE-2026-69335, CVE-2026-68833, CVE-2026-68851, CVE-2026-69366, CVE-2026-69337, CVE-2026-69347, CVE-2026-69379, CVE-2026-69390, CVE-2026-69401, CVE-2026-69413, CVE-2026-69420, CVE-2026-69429, CVE-2026-69448, CVE-2026-69455, CVE-2026-69532, CVE-2026-69472, CVE-2026-69479, CVE-2026-69531, CVE-2026-69517, CVE-2026-69505, CVE-2026-69504, CVE-2026-69527, CVE-2026-69549, CVE-2026-69588, CVE-2026-69609, CVE-2026-69648, CVE-2026-69689, CVE-2026-69790, CVE-2026-69638, CVE-2026-69859, CVE-2026-69717, CVE-2026-69711, CVE-2026-69875, CVE-2026-69889, CVE-2026-69757, CVE-2026-69741, CVE-2026-69762, CVE-2026-69744, CVE-2026-69832, CVE-2026-69691, CVE-2026-69808, CVE-2026-69775, CVE-2026-69822, CVE-2026-69770, CVE-2026-69676, CVE-2026-70289, CVE-2026-70563, CVE-2026-71329, CVE-2026-71332, CVE-2026-71350, CVE-2026-71348, CVE-2026-71345, CVE-2026-69469, CVE-2026-69501, CVE-2026-69548, CVE-2026-69846, CVE-2026-70283, CVE-2026-72981, CVE-2026-77491, CVE-2026-77492, CVE-2026-77503, CVE-2026-80093, CVE-2026-72949, CVE-2026-70019, CVE-2026-72940, CVE-2026-69573, CVE-2026-70290, CVE-2026-83991, CVE-2026-83999, CVE-2026-69321, CVE-2026-69316, CVE-2026-69340, CVE-2026-69348, CVE-2026-69350, CVE-2026-69353, CVE-2026-69357, CVE-2026-69393, CVE-2026-69410, CVE-2026-69421, CVE-2026-69428, CVE-2026-69425, CVE-2026-69427, CVE-2026-69434, CVE-2026-69456, CVE-2026-69459, CVE-2026-69478, CVE-2026-69561, CVE-2026-69512, CVE-2026-69498, CVE-2026-69571, CVE-2026-69535, CVE-2026-69538, CVE-2026-69591, CVE-2026-69566, CVE-2026-69567, CVE-2026-69584, CVE-2026-69617, CVE-2026-69630, CVE-2026-69610, CVE-2026-69881, CVE-2026-69680, CVE-2026-69619, CVE-2026-69685, CVE-2026-69643, CVE-2026-69687, CVE-2026-69791, CVE-2026-69707, CVE-2026-69652, CVE-2026-69834, CVE-2026-69709, CVE-2026-69844, CVE-2026-69814, CVE-2026-69731, CVE-2026-69706, CVE-2026-69779, CVE-2026-69895, CVE-2026-69792, CVE-2026-69853, CVE-2026-69761, CVE-2026-69785, CVE-2026-69818, CVE-2026-69786, CVE-2026-69874, CVE-2026-70565, CVE-2026-70574, CVE-2026-70569, CVE-2026-70575, CVE-2026-71349, CVE-2026-72927, CVE-2026-72952, CVE-2026-72942, CVE-2026-72966, CVE-2026-72967, CVE-2026-69426, CVE-2026-69564, CVE-2026-72985, CVE-2026-73019, CVE-2026-78451, CVE-2026-78452, CVE-2026-83940, CVE-2026-69598, CVE-2026-83995, CVE-2026-83501, CVE-2026-83498.

CVE-2026-69319

A race condition vulnerability in the Windows USB Video Driver allows a local, authorized attacker to achieve privilege escalation by exploiting improper synchronization during concurrent execution. The vulnerability is classified as a race condition, impacting system-level driver security.

Affected products:

Windows USB Video Driver

Source: https://nvd.nist.gov/vuln/detail/CVE-2026-69319

Related in this roundup: CVE-2026-69423, CVE-2026-72962, CVE-2026-69422.

CVE-2026-69322

CVE-2026-69322 describes a double-free vulnerability in the Microsoft Windows Search Component that can be exploited by an authorized network attacker to achieve privilege escalation on affected Windows systems.

Affected products:

Windows Search Component

Source: https://nvd.nist.gov/vuln/detail/CVE-2026-69322

Related in this roundup: CVE-2026-68896, CVE-2026-69305, CVE-2026-69507, CVE-2026-69554, CVE-2026-69585, CVE-2026-69608, CVE-2026-69453, CVE-2026-69600, CVE-2026-69911, CVE-2026-70145.

CVE-2026-69323

A heap-based buffer overflow vulnerability in the Windows Biometric Service allows a locally authorized attacker to escalate their privileges. The vulnerability is triggered during the processing of biometric data, potentially granting higher-level access to the system.

Affected products:

Windows Biometric Service

Source: https://nvd.nist.gov/vuln/detail/CVE-2026-69323

Related in this roundup: CVE-2026-69293, CVE-2026-69298, CVE-2026-69583, CVE-2026-69589, CVE-2026-69580, CVE-2026-69476, CVE-2026-69787, CVE-2026-77489, CVE-2026-83955, CVE-2026-83986, CVE-2026-83969, CVE-2026-83988, CVE-2026-83979, CVE-2026-83974, CVE-2026-83975, CVE-2026-83976, CVE-2026-69727, CVE-2026-69826, CVE-2026-69738, CVE-2026-69773, CVE-2026-70573, CVE-2026-70572, CVE-2026-70581, CVE-2026-72941, CVE-2026-69352, CVE-2026-69489, CVE-2026-69593, CVE-2026-72995, CVE-2026-72988, CVE-2026-72990, CVE-2026-72991, CVE-2026-72992, CVE-2026-72993, CVE-2026-72994, CVE-2026-72996, CVE-2026-72997, CVE-2026-73002, CVE-2026-73020, CVE-2026-73000, CVE-2026-73001, CVE-2026-73021, CVE-2026-73015, CVE-2026-73011, CVE-2026-73008, CVE-2026-73007, CVE-2026-73026, CVE-2026-78447, CVE-2026-78448, CVE-2026-83971, CVE-2026-83954, CVE-2026-83967, CVE-2026-83970, CVE-2026-83972, CVE-2026-83968, CVE-2026-83973, CVE-2026-83981, CVE-2026-83977, CVE-2026-83978, CVE-2026-83982, CVE-2026-83980, CVE-2026-83987, CVE-2026-83983, CVE-2026-83985.

CVE-2026-69324

CVE-2026-69324 is a type confusion vulnerability in the Windows Performance Monitor component. An attacker with local access can exploit this flaw to execute code or operations in a higher privilege context, resulting in local privilege escalation.

Affected products:

Windows Performance Monitor

Source: https://nvd.nist.gov/vuln/detail/CVE-2026-69324

CVE-2026-69325

CVE-2026-69325 describes a heap-based buffer overflow vulnerability in Microsoft JScript, which can be exploited by an unauthorized attacker to achieve remote code execution over a network. Detection efforts should focus on monitoring for anomalous JScript execution patterns or unexpected heap memory manipulation within the targeted Microsoft environment.

Affected products:

JScript

Source: https://nvd.nist.gov/vuln/detail/CVE-2026-69325

Related in this roundup: CVE-2026-69438.

CVE-2026-69328

CVE-2026-69328 describes an untrusted search path vulnerability within Windows Storage that enables an already authorized local attacker to achieve privilege escalation by manipulating the environment to load arbitrary or malicious components.

Affected products:

Windows Storage

Source: https://nvd.nist.gov/vuln/detail/CVE-2026-69328

Related in this roundup: CVE-2026-78516.

CVE-2026-69329

CVE-2026-69329 is an out-of-bounds read vulnerability in the BranchCache component of Microsoft Windows, which can be exploited by an unauthorized remote attacker to cause a denial-of-service condition via a network connection.

Affected products:

BranchCache

Source: https://nvd.nist.gov/vuln/detail/CVE-2026-69329

CVE-2026-69331

A use-after-free vulnerability in the Windows Remote Access Connection Manager allows a locally authenticated attacker to achieve privilege escalation by exploiting memory management flaws in the service.

Affected products:

Windows Remote Access Connection Manager

Source: https://nvd.nist.gov/vuln/detail/CVE-2026-69331

Related in this roundup: CVE-2026-71333, CVE-2026-71342, CVE-2026-71352.

CVE-2026-69332

CVE-2026-69332 is an out-of-bounds read vulnerability in the Windows NTFS file system that enables an authorized attacker to achieve privilege escalation over a network connection.

Affected products:

Windows

Source: https://nvd.nist.gov/vuln/detail/CVE-2026-69332

Related in this roundup: CVE-2026-81963, CVE-2026-85880, CVE-2026-69496, CVE-2026-69586, CVE-2026-69768, CVE-2026-73025, CVE-2026-56172, CVE-2026-68832, CVE-2026-68834, CVE-2026-68838, CVE-2026-68841, CVE-2026-68875, CVE-2026-68877, CVE-2026-68880, CVE-2026-69265, CVE-2026-69270, CVE-2026-69274, CVE-2026-69275, CVE-2026-69280, CVE-2026-69283, CVE-2026-69284, CVE-2026-69289, CVE-2026-69296, CVE-2026-69300, CVE-2026-69301, CVE-2026-69307, CVE-2026-69312, CVE-2026-69314, CVE-2026-69333, CVE-2026-69335, CVE-2026-68833, CVE-2026-68851, CVE-2026-69366, CVE-2026-69337, CVE-2026-69347, CVE-2026-69379, CVE-2026-69390, CVE-2026-69401, CVE-2026-69413, CVE-2026-69420, CVE-2026-69429, CVE-2026-69448, CVE-2026-69455, CVE-2026-69532, CVE-2026-69472, CVE-2026-69479, CVE-2026-69531, CVE-2026-69517, CVE-2026-69505, CVE-2026-69504, CVE-2026-69527, CVE-2026-69549, CVE-2026-69588, CVE-2026-69609, CVE-2026-69648, CVE-2026-69689, CVE-2026-69790, CVE-2026-69638, CVE-2026-69859, CVE-2026-69717, CVE-2026-69711, CVE-2026-69875, CVE-2026-69889, CVE-2026-69757, CVE-2026-69741, CVE-2026-69762, CVE-2026-69744, CVE-2026-69832, CVE-2026-69691, CVE-2026-69808, CVE-2026-69775, CVE-2026-69822, CVE-2026-69770, CVE-2026-69676, CVE-2026-70289, CVE-2026-70563, CVE-2026-71329, CVE-2026-71332, CVE-2026-71350, CVE-2026-71348, CVE-2026-71345, CVE-2026-69469, CVE-2026-69501, CVE-2026-69548, CVE-2026-69846, CVE-2026-70283, CVE-2026-72981, CVE-2026-77491, CVE-2026-77492, CVE-2026-77503, CVE-2026-80093, CVE-2026-72949, CVE-2026-70019, CVE-2026-72940, CVE-2026-69573, CVE-2026-70290, CVE-2026-83991, CVE-2026-83999, CVE-2026-69321, CVE-2026-69316, CVE-2026-69340, CVE-2026-69348, CVE-2026-69350, CVE-2026-69353, CVE-2026-69357, CVE-2026-69393, CVE-2026-69410, CVE-2026-69421, CVE-2026-69428, CVE-2026-69425, CVE-2026-69427, CVE-2026-69434, CVE-2026-69456, CVE-2026-69459, CVE-2026-69478, CVE-2026-69561, CVE-2026-69512, CVE-2026-69498, CVE-2026-69571, CVE-2026-69535, CVE-2026-69538, CVE-2026-69591, CVE-2026-69566, CVE-2026-69567, CVE-2026-69584, CVE-2026-69617, CVE-2026-69630, CVE-2026-69610, CVE-2026-69881, CVE-2026-69680, CVE-2026-69619, CVE-2026-69685, CVE-2026-69643, CVE-2026-69687, CVE-2026-69791, CVE-2026-69707, CVE-2026-69652, CVE-2026-69834, CVE-2026-69709, CVE-2026-69844, CVE-2026-69814, CVE-2026-69731, CVE-2026-69706, CVE-2026-69779, CVE-2026-69895, CVE-2026-69792, CVE-2026-69853, CVE-2026-69761, CVE-2026-69785, CVE-2026-69818, CVE-2026-69786, CVE-2026-69874, CVE-2026-70565, CVE-2026-70574, CVE-2026-70569, CVE-2026-70575, CVE-2026-71349, CVE-2026-72927, CVE-2026-72952, CVE-2026-72942, CVE-2026-72966, CVE-2026-72967, CVE-2026-69426, CVE-2026-69564, CVE-2026-72985, CVE-2026-73019, CVE-2026-78451, CVE-2026-78452, CVE-2026-83940, CVE-2026-69598, CVE-2026-83995, CVE-2026-83501, CVE-2026-83498.

CVE-2026-69333

CVE-2026-69333 is a use-after-free vulnerability within the Windows Win32K subsystem. A local, authorized attacker can exploit this flaw to execute code with elevated privileges on the affected system.

Affected products:

Windows

Source: https://nvd.nist.gov/vuln/detail/CVE-2026-69333

Related in this roundup: CVE-2026-81963, CVE-2026-85880, CVE-2026-69496, CVE-2026-69586, CVE-2026-69768, CVE-2026-73025, CVE-2026-56172, CVE-2026-68832, CVE-2026-68834, CVE-2026-68838, CVE-2026-68841, CVE-2026-68875, CVE-2026-68877, CVE-2026-68880, CVE-2026-69265, CVE-2026-69270, CVE-2026-69274, CVE-2026-69275, CVE-2026-69280, CVE-2026-69283, CVE-2026-69284, CVE-2026-69289, CVE-2026-69296, CVE-2026-69300, CVE-2026-69301, CVE-2026-69307, CVE-2026-69312, CVE-2026-69314, CVE-2026-69332, CVE-2026-69335, CVE-2026-68833, CVE-2026-68851, CVE-2026-69366, CVE-2026-69337, CVE-2026-69347, CVE-2026-69379, CVE-2026-69390, CVE-2026-69401, CVE-2026-69413, CVE-2026-69420, CVE-2026-69429, CVE-2026-69448, CVE-2026-69455, CVE-2026-69532, CVE-2026-69472, CVE-2026-69479, CVE-2026-69531, CVE-2026-69517, CVE-2026-69505, CVE-2026-69504, CVE-2026-69527, CVE-2026-69549, CVE-2026-69588, CVE-2026-69609, CVE-2026-69648, CVE-2026-69689, CVE-2026-69790, CVE-2026-69638, CVE-2026-69859, CVE-2026-69717, CVE-2026-69711, CVE-2026-69875, CVE-2026-69889, CVE-2026-69757, CVE-2026-69741, CVE-2026-69762, CVE-2026-69744, CVE-2026-69832, CVE-2026-69691, CVE-2026-69808, CVE-2026-69775, CVE-2026-69822, CVE-2026-69770, CVE-2026-69676, CVE-2026-70289, CVE-2026-70563, CVE-2026-71329, CVE-2026-71332, CVE-2026-71350, CVE-2026-71348, CVE-2026-71345, CVE-2026-69469, CVE-2026-69501, CVE-2026-69548, CVE-2026-69846, CVE-2026-70283, CVE-2026-72981, CVE-2026-77491, CVE-2026-77492, CVE-2026-77503, CVE-2026-80093, CVE-2026-72949, CVE-2026-70019, CVE-2026-72940, CVE-2026-69573, CVE-2026-70290, CVE-2026-83991, CVE-2026-83999, CVE-2026-69321, CVE-2026-69316, CVE-2026-69340, CVE-2026-69348, CVE-2026-69350, CVE-2026-69353, CVE-2026-69357, CVE-2026-69393, CVE-2026-69410, CVE-2026-69421, CVE-2026-69428, CVE-2026-69425, CVE-2026-69427, CVE-2026-69434, CVE-2026-69456, CVE-2026-69459, CVE-2026-69478, CVE-2026-69561, CVE-2026-69512, CVE-2026-69498, CVE-2026-69571, CVE-2026-69535, CVE-2026-69538, CVE-2026-69591, CVE-2026-69566, CVE-2026-69567, CVE-2026-69584, CVE-2026-69617, CVE-2026-69630, CVE-2026-69610, CVE-2026-69881, CVE-2026-69680, CVE-2026-69619, CVE-2026-69685, CVE-2026-69643, CVE-2026-69687, CVE-2026-69791, CVE-2026-69707, CVE-2026-69652, CVE-2026-69834, CVE-2026-69709, CVE-2026-69844, CVE-2026-69814, CVE-2026-69731, CVE-2026-69706, CVE-2026-69779, CVE-2026-69895, CVE-2026-69792, CVE-2026-69853, CVE-2026-69761, CVE-2026-69785, CVE-2026-69818, CVE-2026-69786, CVE-2026-69874, CVE-2026-70565, CVE-2026-70574, CVE-2026-70569, CVE-2026-70575, CVE-2026-71349, CVE-2026-72927, CVE-2026-72952, CVE-2026-72942, CVE-2026-72966, CVE-2026-72967, CVE-2026-69426, CVE-2026-69564, CVE-2026-72985, CVE-2026-73019, CVE-2026-78451, CVE-2026-78452, CVE-2026-83940, CVE-2026-69598, CVE-2026-83995, CVE-2026-83501, CVE-2026-83498.

CVE-2026-69334

CVE-2026-69334 is a heap-based buffer overflow vulnerability within the Windows Volume Manager Extension Driver. An unauthenticated attacker can exploit this flaw to achieve remote code execution over a network, potentially leading to a full system compromise.

Affected products:

Windows Volume Manager Extension Driver

Source: https://nvd.nist.gov/vuln/detail/CVE-2026-69334

Related in this roundup: CVE-2026-69291, CVE-2026-69468, CVE-2026-69582, CVE-2026-77904.

CVE-2026-69335

CVE-2026-69335 is a use-after-free vulnerability located in the Windows Win32k kernel driver. An authenticated local attacker can leverage this flaw to trigger memory corruption and achieve privilege escalation on the affected system.

Affected products:

Windows

Source: https://nvd.nist.gov/vuln/detail/CVE-2026-69335

Related in this roundup: CVE-2026-81963, CVE-2026-85880, CVE-2026-69496, CVE-2026-69586, CVE-2026-69768, CVE-2026-73025, CVE-2026-56172, CVE-2026-68832, CVE-2026-68834, CVE-2026-68838, CVE-2026-68841, CVE-2026-68875, CVE-2026-68877, CVE-2026-68880, CVE-2026-69265, CVE-2026-69270, CVE-2026-69274, CVE-2026-69275, CVE-2026-69280, CVE-2026-69283, CVE-2026-69284, CVE-2026-69289, CVE-2026-69296, CVE-2026-69300, CVE-2026-69301, CVE-2026-69307, CVE-2026-69312, CVE-2026-69314, CVE-2026-69332, CVE-2026-69333, CVE-2026-68833, CVE-2026-68851, CVE-2026-69366, CVE-2026-69337, CVE-2026-69347, CVE-2026-69379, CVE-2026-69390, CVE-2026-69401, CVE-2026-69413, CVE-2026-69420, CVE-2026-69429, CVE-2026-69448, CVE-2026-69455, CVE-2026-69532, CVE-2026-69472, CVE-2026-69479, CVE-2026-69531, CVE-2026-69517, CVE-2026-69505, CVE-2026-69504, CVE-2026-69527, CVE-2026-69549, CVE-2026-69588, CVE-2026-69609, CVE-2026-69648, CVE-2026-69689, CVE-2026-69790, CVE-2026-69638, CVE-2026-69859, CVE-2026-69717, CVE-2026-69711, CVE-2026-69875, CVE-2026-69889, CVE-2026-69757, CVE-2026-69741, CVE-2026-69762, CVE-2026-69744, CVE-2026-69832, CVE-2026-69691, CVE-2026-69808, CVE-2026-69775, CVE-2026-69822, CVE-2026-69770, CVE-2026-69676, CVE-2026-70289, CVE-2026-70563, CVE-2026-71329, CVE-2026-71332, CVE-2026-71350, CVE-2026-71348, CVE-2026-71345, CVE-2026-69469, CVE-2026-69501, CVE-2026-69548, CVE-2026-69846, CVE-2026-70283, CVE-2026-72981, CVE-2026-77491, CVE-2026-77492, CVE-2026-77503, CVE-2026-80093, CVE-2026-72949, CVE-2026-70019, CVE-2026-72940, CVE-2026-69573, CVE-2026-70290, CVE-2026-83991, CVE-2026-83999, CVE-2026-69321, CVE-2026-69316, CVE-2026-69340, CVE-2026-69348, CVE-2026-69350, CVE-2026-69353, CVE-2026-69357, CVE-2026-69393, CVE-2026-69410, CVE-2026-69421, CVE-2026-69428, CVE-2026-69425, CVE-2026-69427, CVE-2026-69434, CVE-2026-69456, CVE-2026-69459, CVE-2026-69478, CVE-2026-69561, CVE-2026-69512, CVE-2026-69498, CVE-2026-69571, CVE-2026-69535, CVE-2026-69538, CVE-2026-69591, CVE-2026-69566, CVE-2026-69567, CVE-2026-69584, CVE-2026-69617, CVE-2026-69630, CVE-2026-69610, CVE-2026-69881, CVE-2026-69680, CVE-2026-69619, CVE-2026-69685, CVE-2026-69643, CVE-2026-69687, CVE-2026-69791, CVE-2026-69707, CVE-2026-69652, CVE-2026-69834, CVE-2026-69709, CVE-2026-69844, CVE-2026-69814, CVE-2026-69731, CVE-2026-69706, CVE-2026-69779, CVE-2026-69895, CVE-2026-69792, CVE-2026-69853, CVE-2026-69761, CVE-2026-69785, CVE-2026-69818, CVE-2026-69786, CVE-2026-69874, CVE-2026-70565, CVE-2026-70574, CVE-2026-70569, CVE-2026-70575, CVE-2026-71349, CVE-2026-72927, CVE-2026-72952, CVE-2026-72942, CVE-2026-72966, CVE-2026-72967, CVE-2026-69426, CVE-2026-69564, CVE-2026-72985, CVE-2026-73019, CVE-2026-78451, CVE-2026-78452, CVE-2026-83940, CVE-2026-69598, CVE-2026-83995, CVE-2026-83501, CVE-2026-83498.

CVE-2026-69336

CVE-2026-69336 describes a heap-based buffer overflow vulnerability in Microsoft Standard XPS. An authorized attacker can exploit this flaw over a network to achieve privilege escalation on the targeted system.

Affected products:

Standard XPS

Source: https://nvd.nist.gov/vuln/detail/CVE-2026-69336

Related in this roundup: CVE-2026-69824, CVE-2026-68885, CVE-2026-68888, CVE-2026-68889, CVE-2026-68890, CVE-2026-68892, CVE-2026-68897, CVE-2026-69269, CVE-2026-69271, CVE-2026-69272, CVE-2026-69313, CVE-2026-68881, CVE-2026-69345, CVE-2026-69367, CVE-2026-68891, CVE-2026-69308, CVE-2026-69376.

CVE-2026-62706

CVE-2026-62706 is an out-of-bounds read vulnerability in Microsoft Windows Media Foundation that enables a remote attacker to achieve code execution over a network. Detection efforts should focus on identifying anomalous behavior or memory access violations within processes utilizing the Media Foundation framework.

Affected products:

Windows Media Foundation

Source: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-62706

Related in this roundup: CVE-2026-69408, CVE-2026-62744, CVE-2026-69386, CVE-2026-69511, CVE-2026-69601.

CVE-2026-66304

CVE-2026-66304 is an information disclosure vulnerability in Skype for Business caused by a server-side request forgery (SSRF) flaw, which allows an unauthorized attacker to potentially access sensitive information across a network.

Affected products:

Skype for Business

Source: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-66304

Related in this roundup: CVE-2026-66302, CVE-2026-66306, CVE-2026-66308, CVE-2026-63523, CVE-2026-66305, CVE-2026-69642, CVE-2026-69646, CVE-2026-66303, CVE-2026-66307.

CVE-2026-66306

CVE-2026-66306 is an information disclosure vulnerability in Skype for Business caused by the generation of error messages containing sensitive data. An unauthenticated attacker can exploit this flaw over a network to retrieve sensitive information.

Affected products:

Skype for Business

Source: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-66306

Related in this roundup: CVE-2026-66302, CVE-2026-66304, CVE-2026-66308, CVE-2026-63523, CVE-2026-66305, CVE-2026-69642, CVE-2026-69646, CVE-2026-66303, CVE-2026-66307.

CVE-2026-66308

A vulnerability in Microsoft Skype for Business and Lync allows an authorized attacker to trigger an out-of-bounds read over a network, resulting in a denial of service (DoS) condition.

Affected products:

Skype for Business
Lync

Source: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-66308

Related in this roundup: CVE-2026-66302, CVE-2026-66304, CVE-2026-66306, CVE-2026-63523, CVE-2026-66305, CVE-2026-69642, CVE-2026-69646, CVE-2026-66303, CVE-2026-66307.

CVE-2026-69341

A use-after-free vulnerability exists in the Windows Image Acquisition service, which can be exploited by a locally authenticated attacker to achieve privilege escalation on the target Windows system.

Affected products:

Windows Image Acquisition

Source: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-69341

Related in this roundup: CVE-2026-69500, CVE-2026-69483, CVE-2026-69613.

CVE-2026-69522

CVE-2026-69522 is a heap-based buffer overflow vulnerability in Microsoft Visual Studio that enables a remote, unauthorized attacker to achieve remote code execution (RCE) over a network.

Affected products:

Visual Studio

Source: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-69522

Related in this roundup: CVE-2026-77907, CVE-2026-71328, CVE-2026-77906.

CVE-2026-70091

CVE-2026-70091 is a denial of service vulnerability in the Windows DNS component caused by a race condition during concurrent execution using shared resources. An unauthorized remote attacker can trigger this vulnerability to disrupt DNS service availability.

Affected products:

Windows DNS

Source: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-70091

Related in this roundup: CVE-2026-69730, CVE-2026-69310, CVE-2026-69631, CVE-2026-72948, CVE-2026-69369, CVE-2026-69672, CVE-2026-72987.

CVE-2026-69782

CVE-2026-69782 is a remote code execution vulnerability in the Microsoft Windows DNS Server component. The flaw arises from a race condition during concurrent execution using shared resources, which an unauthenticated remote attacker can exploit to execute arbitrary code on the affected server.

Affected products:

DNS Server

Source: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-69782

CVE-2026-85360

CVE-2026-85360 is a use-after-free vulnerability within the Windows Kernel that allows a locally authenticated attacker to escalate their privileges to a higher level of access.

Affected products:

Windows Kernel

Source: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-85360

Related in this roundup: CVE-2026-68846, CVE-2026-68884, CVE-2026-69406, CVE-2026-69473, CVE-2026-69723, CVE-2026-83942, CVE-2026-69466, CVE-2026-69578, CVE-2026-69669.

CVE-2026-77482

CVE-2026-77482 is a heap-based buffer overflow vulnerability in Microsoft SQL Server that enables an unauthenticated attacker to achieve remote code execution over a network.

Affected products:

SQL Server

Source: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-77482

Related in this roundup: CVE-2026-65669, CVE-2026-47297, CVE-2026-66814, CVE-2026-66818, CVE-2026-66819, CVE-2026-66820, CVE-2026-67368, CVE-2026-67370, CVE-2026-67373, CVE-2026-67376, CVE-2026-67378, CVE-2026-67379, CVE-2026-67380, CVE-2026-67381, CVE-2026-67384, CVE-2026-67385, CVE-2026-67388, CVE-2026-67631, CVE-2026-67636, CVE-2026-67638, CVE-2026-67639, CVE-2026-67642, CVE-2026-67643, CVE-2026-68775, CVE-2026-68786, CVE-2026-68787, CVE-2026-67629, CVE-2026-67630, CVE-2026-67633, CVE-2026-68781, CVE-2026-68784, CVE-2026-68785, CVE-2026-67383, CVE-2026-67389, CVE-2026-73029, CVE-2026-66816, CVE-2026-67386, CVE-2026-67390, CVE-2026-67393, CVE-2026-67641, CVE-2026-67648, CVE-2026-68776, CVE-2026-68777, CVE-2026-68778, CVE-2026-68779, CVE-2026-68780, CVE-2026-73028, CVE-2026-77480, CVE-2026-77483, CVE-2026-77484, CVE-2026-77487, CVE-2026-77485, CVE-2026-77486, CVE-2026-77488, CVE-2026-69562, CVE-2026-78456, CVE-2026-67369, CVE-2026-67624, CVE-2026-67645, CVE-2026-77481.

CVE-2026-62801

A path traversal vulnerability (CVE-2026-62801) in Microsoft PowerShell allows an unauthenticated remote attacker to bypass security features, potentially leading to unauthorized access or execution in restricted directories.

Affected products:

PowerShell

Source: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-62801

Related in this roundup: CVE-2026-69807.

CVE-2026-67629

CVE-2026-67629 is an out-of-bounds read vulnerability in Microsoft SQL Server that allows an authenticated attacker to disclose sensitive information over the network. Detection engineers should monitor for unusual network traffic or unauthorized access patterns within the SQL Server environment.

Affected products:

SQL Server

Source: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-67629

Related in this roundup: CVE-2026-65669, CVE-2026-47297, CVE-2026-66814, CVE-2026-66818, CVE-2026-66819, CVE-2026-66820, CVE-2026-67368, CVE-2026-67370, CVE-2026-67373, CVE-2026-67376, CVE-2026-67378, CVE-2026-67379, CVE-2026-67380, CVE-2026-67381, CVE-2026-67384, CVE-2026-67385, CVE-2026-67388, CVE-2026-67631, CVE-2026-67636, CVE-2026-67638, CVE-2026-67639, CVE-2026-67642, CVE-2026-67643, CVE-2026-68775, CVE-2026-68786, CVE-2026-68787, CVE-2026-77482, CVE-2026-67630, CVE-2026-67633, CVE-2026-68781, CVE-2026-68784, CVE-2026-68785, CVE-2026-67383, CVE-2026-67389, CVE-2026-73029, CVE-2026-66816, CVE-2026-67386, CVE-2026-67390, CVE-2026-67393, CVE-2026-67641, CVE-2026-67648, CVE-2026-68776, CVE-2026-68777, CVE-2026-68778, CVE-2026-68779, CVE-2026-68780, CVE-2026-73028, CVE-2026-77480, CVE-2026-77483, CVE-2026-77484, CVE-2026-77487, CVE-2026-77485, CVE-2026-77486, CVE-2026-77488, CVE-2026-69562, CVE-2026-78456, CVE-2026-67369, CVE-2026-67624, CVE-2026-67645, CVE-2026-77481.

CVE-2026-67630

CVE-2026-67630 is an out-of-bounds read vulnerability in Microsoft SQL Server that allows an authenticated attacker to disclose sensitive information over the network.

Affected products:

SQL Server

Source: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-67630

Related in this roundup: CVE-2026-65669, CVE-2026-47297, CVE-2026-66814, CVE-2026-66818, CVE-2026-66819, CVE-2026-66820, CVE-2026-67368, CVE-2026-67370, CVE-2026-67373, CVE-2026-67376, CVE-2026-67378, CVE-2026-67379, CVE-2026-67380, CVE-2026-67381, CVE-2026-67384, CVE-2026-67385, CVE-2026-67388, CVE-2026-67631, CVE-2026-67636, CVE-2026-67638, CVE-2026-67639, CVE-2026-67642, CVE-2026-67643, CVE-2026-68775, CVE-2026-68786, CVE-2026-68787, CVE-2026-77482, CVE-2026-67629, CVE-2026-67633, CVE-2026-68781, CVE-2026-68784, CVE-2026-68785, CVE-2026-67383, CVE-2026-67389, CVE-2026-73029, CVE-2026-66816, CVE-2026-67386, CVE-2026-67390, CVE-2026-67393, CVE-2026-67641, CVE-2026-67648, CVE-2026-68776, CVE-2026-68777, CVE-2026-68778, CVE-2026-68779, CVE-2026-68780, CVE-2026-73028, CVE-2026-77480, CVE-2026-77483, CVE-2026-77484, CVE-2026-77487, CVE-2026-77485, CVE-2026-77486, CVE-2026-77488, CVE-2026-69562, CVE-2026-78456, CVE-2026-67369, CVE-2026-67624, CVE-2026-67645, CVE-2026-77481.

CVE-2026-67633

CVE-2026-67633 describes an out-of-bounds read vulnerability in Microsoft SQL Server that can be exploited by an authorized attacker to trigger a denial of service condition over a network.

Affected products:

SQL Server

Source: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-67633

Related in this roundup: CVE-2026-65669, CVE-2026-47297, CVE-2026-66814, CVE-2026-66818, CVE-2026-66819, CVE-2026-66820, CVE-2026-67368, CVE-2026-67370, CVE-2026-67373, CVE-2026-67376, CVE-2026-67378, CVE-2026-67379, CVE-2026-67380, CVE-2026-67381, CVE-2026-67384, CVE-2026-67385, CVE-2026-67388, CVE-2026-67631, CVE-2026-67636, CVE-2026-67638, CVE-2026-67639, CVE-2026-67642, CVE-2026-67643, CVE-2026-68775, CVE-2026-68786, CVE-2026-68787, CVE-2026-77482, CVE-2026-67629, CVE-2026-67630, CVE-2026-68781, CVE-2026-68784, CVE-2026-68785, CVE-2026-67383, CVE-2026-67389, CVE-2026-73029, CVE-2026-66816, CVE-2026-67386, CVE-2026-67390, CVE-2026-67393, CVE-2026-67641, CVE-2026-67648, CVE-2026-68776, CVE-2026-68777, CVE-2026-68778, CVE-2026-68779, CVE-2026-68780, CVE-2026-73028, CVE-2026-77480, CVE-2026-77483, CVE-2026-77484, CVE-2026-77487, CVE-2026-77485, CVE-2026-77486, CVE-2026-77488, CVE-2026-69562, CVE-2026-78456, CVE-2026-67369, CVE-2026-67624, CVE-2026-67645, CVE-2026-77481.

CVE-2026-68781

CVE-2026-68781 is an out-of-bounds read vulnerability in Microsoft SQL Server that allows an authenticated attacker to perform unauthorized information disclosure over the network. Detection should focus on monitoring for unusual memory access patterns or unauthorized database queries originating from authenticated users.

Affected products:

SQL Server

Source: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-68781

Related in this roundup: CVE-2026-65669, CVE-2026-47297, CVE-2026-66814, CVE-2026-66818, CVE-2026-66819, CVE-2026-66820, CVE-2026-67368, CVE-2026-67370, CVE-2026-67373, CVE-2026-67376, CVE-2026-67378, CVE-2026-67379, CVE-2026-67380, CVE-2026-67381, CVE-2026-67384, CVE-2026-67385, CVE-2026-67388, CVE-2026-67631, CVE-2026-67636, CVE-2026-67638, CVE-2026-67639, CVE-2026-67642, CVE-2026-67643, CVE-2026-68775, CVE-2026-68786, CVE-2026-68787, CVE-2026-77482, CVE-2026-67629, CVE-2026-67630, CVE-2026-67633, CVE-2026-68784, CVE-2026-68785, CVE-2026-67383, CVE-2026-67389, CVE-2026-73029, CVE-2026-66816, CVE-2026-67386, CVE-2026-67390, CVE-2026-67393, CVE-2026-67641, CVE-2026-67648, CVE-2026-68776, CVE-2026-68777, CVE-2026-68778, CVE-2026-68779, CVE-2026-68780, CVE-2026-73028, CVE-2026-77480, CVE-2026-77483, CVE-2026-77484, CVE-2026-77487, CVE-2026-77485, CVE-2026-77486, CVE-2026-77488, CVE-2026-69562, CVE-2026-78456, CVE-2026-67369, CVE-2026-67624, CVE-2026-67645, CVE-2026-77481.

CVE-2026-68784

CVE-2026-68784 is an out-of-bounds read vulnerability in Microsoft SQL Server that allows an authenticated attacker to perform unauthorized information disclosure over a network connection.

Affected products:

SQL Server

Source: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-68784

Related in this roundup: CVE-2026-65669, CVE-2026-47297, CVE-2026-66814, CVE-2026-66818, CVE-2026-66819, CVE-2026-66820, CVE-2026-67368, CVE-2026-67370, CVE-2026-67373, CVE-2026-67376, CVE-2026-67378, CVE-2026-67379, CVE-2026-67380, CVE-2026-67381, CVE-2026-67384, CVE-2026-67385, CVE-2026-67388, CVE-2026-67631, CVE-2026-67636, CVE-2026-67638, CVE-2026-67639, CVE-2026-67642, CVE-2026-67643, CVE-2026-68775, CVE-2026-68786, CVE-2026-68787, CVE-2026-77482, CVE-2026-67629, CVE-2026-67630, CVE-2026-67633, CVE-2026-68781, CVE-2026-68785, CVE-2026-67383, CVE-2026-67389, CVE-2026-73029, CVE-2026-66816, CVE-2026-67386, CVE-2026-67390, CVE-2026-67393, CVE-2026-67641, CVE-2026-67648, CVE-2026-68776, CVE-2026-68777, CVE-2026-68778, CVE-2026-68779, CVE-2026-68780, CVE-2026-73028, CVE-2026-77480, CVE-2026-77483, CVE-2026-77484, CVE-2026-77487, CVE-2026-77485, CVE-2026-77486, CVE-2026-77488, CVE-2026-69562, CVE-2026-78456, CVE-2026-67369, CVE-2026-67624, CVE-2026-67645, CVE-2026-77481.

CVE-2026-68785

CVE-2026-68785 is a heap-based buffer overflow vulnerability in Microsoft SQL Server that allows an authenticated attacker to achieve remote code execution over a network.

Affected products:

SQL Server

Source: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-68785

Related in this roundup: CVE-2026-65669, CVE-2026-47297, CVE-2026-66814, CVE-2026-66818, CVE-2026-66819, CVE-2026-66820, CVE-2026-67368, CVE-2026-67370, CVE-2026-67373, CVE-2026-67376, CVE-2026-67378, CVE-2026-67379, CVE-2026-67380, CVE-2026-67381, CVE-2026-67384, CVE-2026-67385, CVE-2026-67388, CVE-2026-67631, CVE-2026-67636, CVE-2026-67638, CVE-2026-67639, CVE-2026-67642, CVE-2026-67643, CVE-2026-68775, CVE-2026-68786, CVE-2026-68787, CVE-2026-77482, CVE-2026-67629, CVE-2026-67630, CVE-2026-67633, CVE-2026-68781, CVE-2026-68784, CVE-2026-67383, CVE-2026-67389, CVE-2026-73029, CVE-2026-66816, CVE-2026-67386, CVE-2026-67390, CVE-2026-67393, CVE-2026-67641, CVE-2026-67648, CVE-2026-68776, CVE-2026-68777, CVE-2026-68778, CVE-2026-68779, CVE-2026-68780, CVE-2026-73028, CVE-2026-77480, CVE-2026-77483, CVE-2026-77484, CVE-2026-77487, CVE-2026-77485, CVE-2026-77486, CVE-2026-77488, CVE-2026-69562, CVE-2026-78456, CVE-2026-67369, CVE-2026-67624, CVE-2026-67645, CVE-2026-77481.

CVE-2026-68830

CVE-2026-68830 describes a vulnerability in the Windows UPnP Device Host component due to improper link resolution before file access. An authorized local attacker can exploit this flaw to perform unauthorized information disclosure, potentially exposing sensitive system files.

Affected products:

Windows Universal Plug and Play (UPnP) Device Host

Source: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-68830

Related in this roundup: CVE-2026-69351.

CVE-2026-68833

CVE-2026-68833 is a heap-based buffer overflow vulnerability within the Windows NTFS file system, which may allow an attacker with physical access to the target device to achieve remote code execution.

Affected products:

Windows

Source: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-68833

Related in this roundup: CVE-2026-81963, CVE-2026-85880, CVE-2026-69496, CVE-2026-69586, CVE-2026-69768, CVE-2026-73025, CVE-2026-56172, CVE-2026-68832, CVE-2026-68834, CVE-2026-68838, CVE-2026-68841, CVE-2026-68875, CVE-2026-68877, CVE-2026-68880, CVE-2026-69265, CVE-2026-69270, CVE-2026-69274, CVE-2026-69275, CVE-2026-69280, CVE-2026-69283, CVE-2026-69284, CVE-2026-69289, CVE-2026-69296, CVE-2026-69300, CVE-2026-69301, CVE-2026-69307, CVE-2026-69312, CVE-2026-69314, CVE-2026-69332, CVE-2026-69333, CVE-2026-69335, CVE-2026-68851, CVE-2026-69366, CVE-2026-69337, CVE-2026-69347, CVE-2026-69379, CVE-2026-69390, CVE-2026-69401, CVE-2026-69413, CVE-2026-69420, CVE-2026-69429, CVE-2026-69448, CVE-2026-69455, CVE-2026-69532, CVE-2026-69472, CVE-2026-69479, CVE-2026-69531, CVE-2026-69517, CVE-2026-69505, CVE-2026-69504, CVE-2026-69527, CVE-2026-69549, CVE-2026-69588, CVE-2026-69609, CVE-2026-69648, CVE-2026-69689, CVE-2026-69790, CVE-2026-69638, CVE-2026-69859, CVE-2026-69717, CVE-2026-69711, CVE-2026-69875, CVE-2026-69889, CVE-2026-69757, CVE-2026-69741, CVE-2026-69762, CVE-2026-69744, CVE-2026-69832, CVE-2026-69691, CVE-2026-69808, CVE-2026-69775, CVE-2026-69822, CVE-2026-69770, CVE-2026-69676, CVE-2026-70289, CVE-2026-70563, CVE-2026-71329, CVE-2026-71332, CVE-2026-71350, CVE-2026-71348, CVE-2026-71345, CVE-2026-69469, CVE-2026-69501, CVE-2026-69548, CVE-2026-69846, CVE-2026-70283, CVE-2026-72981, CVE-2026-77491, CVE-2026-77492, CVE-2026-77503, CVE-2026-80093, CVE-2026-72949, CVE-2026-70019, CVE-2026-72940, CVE-2026-69573, CVE-2026-70290, CVE-2026-83991, CVE-2026-83999, CVE-2026-69321, CVE-2026-69316, CVE-2026-69340, CVE-2026-69348, CVE-2026-69350, CVE-2026-69353, CVE-2026-69357, CVE-2026-69393, CVE-2026-69410, CVE-2026-69421, CVE-2026-69428, CVE-2026-69425, CVE-2026-69427, CVE-2026-69434, CVE-2026-69456, CVE-2026-69459, CVE-2026-69478, CVE-2026-69561, CVE-2026-69512, CVE-2026-69498, CVE-2026-69571, CVE-2026-69535, CVE-2026-69538, CVE-2026-69591, CVE-2026-69566, CVE-2026-69567, CVE-2026-69584, CVE-2026-69617, CVE-2026-69630, CVE-2026-69610, CVE-2026-69881, CVE-2026-69680, CVE-2026-69619, CVE-2026-69685, CVE-2026-69643, CVE-2026-69687, CVE-2026-69791, CVE-2026-69707, CVE-2026-69652, CVE-2026-69834, CVE-2026-69709, CVE-2026-69844, CVE-2026-69814, CVE-2026-69731, CVE-2026-69706, CVE-2026-69779, CVE-2026-69895, CVE-2026-69792, CVE-2026-69853, CVE-2026-69761, CVE-2026-69785, CVE-2026-69818, CVE-2026-69786, CVE-2026-69874, CVE-2026-70565, CVE-2026-70574, CVE-2026-70569, CVE-2026-70575, CVE-2026-71349, CVE-2026-72927, CVE-2026-72952, CVE-2026-72942, CVE-2026-72966, CVE-2026-72967, CVE-2026-69426, CVE-2026-69564, CVE-2026-72985, CVE-2026-73019, CVE-2026-78451, CVE-2026-78452, CVE-2026-83940, CVE-2026-69598, CVE-2026-83995, CVE-2026-83501, CVE-2026-83498.

CVE-2026-68849

CVE-2026-68849 describes an out-of-bounds read vulnerability in the Windows Bluetooth Port Driver. An authenticated attacker can exploit this flaw to perform local information disclosure, potentially leading to the unauthorized exposure of sensitive memory contents.

Affected products:

Windows Bluetooth Port Driver

Source: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-68849

Related in this roundup: CVE-2026-69817.

CVE-2026-68851

CVE-2026-68851 is an information disclosure vulnerability in Windows NTFS caused by a buffer over-read. An authorized, locally-authenticated attacker can exploit this flaw to read sensitive data from system memory.

Affected products:

Windows

Source: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-68851

Related in this roundup: CVE-2026-81963, CVE-2026-85880, CVE-2026-69496, CVE-2026-69586, CVE-2026-69768, CVE-2026-73025, CVE-2026-56172, CVE-2026-68832, CVE-2026-68834, CVE-2026-68838, CVE-2026-68841, CVE-2026-68875, CVE-2026-68877, CVE-2026-68880, CVE-2026-69265, CVE-2026-69270, CVE-2026-69274, CVE-2026-69275, CVE-2026-69280, CVE-2026-69283, CVE-2026-69284, CVE-2026-69289, CVE-2026-69296, CVE-2026-69300, CVE-2026-69301, CVE-2026-69307, CVE-2026-69312, CVE-2026-69314, CVE-2026-69332, CVE-2026-69333, CVE-2026-69335, CVE-2026-68833, CVE-2026-69366, CVE-2026-69337, CVE-2026-69347, CVE-2026-69379, CVE-2026-69390, CVE-2026-69401, CVE-2026-69413, CVE-2026-69420, CVE-2026-69429, CVE-2026-69448, CVE-2026-69455, CVE-2026-69532, CVE-2026-69472, CVE-2026-69479, CVE-2026-69531, CVE-2026-69517, CVE-2026-69505, CVE-2026-69504, CVE-2026-69527, CVE-2026-69549, CVE-2026-69588, CVE-2026-69609, CVE-2026-69648, CVE-2026-69689, CVE-2026-69790, CVE-2026-69638, CVE-2026-69859, CVE-2026-69717, CVE-2026-69711, CVE-2026-69875, CVE-2026-69889, CVE-2026-69757, CVE-2026-69741, CVE-2026-69762, CVE-2026-69744, CVE-2026-69832, CVE-2026-69691, CVE-2026-69808, CVE-2026-69775, CVE-2026-69822, CVE-2026-69770, CVE-2026-69676, CVE-2026-70289, CVE-2026-70563, CVE-2026-71329, CVE-2026-71332, CVE-2026-71350, CVE-2026-71348, CVE-2026-71345, CVE-2026-69469, CVE-2026-69501, CVE-2026-69548, CVE-2026-69846, CVE-2026-70283, CVE-2026-72981, CVE-2026-77491, CVE-2026-77492, CVE-2026-77503, CVE-2026-80093, CVE-2026-72949, CVE-2026-70019, CVE-2026-72940, CVE-2026-69573, CVE-2026-70290, CVE-2026-83991, CVE-2026-83999, CVE-2026-69321, CVE-2026-69316, CVE-2026-69340, CVE-2026-69348, CVE-2026-69350, CVE-2026-69353, CVE-2026-69357, CVE-2026-69393, CVE-2026-69410, CVE-2026-69421, CVE-2026-69428, CVE-2026-69425, CVE-2026-69427, CVE-2026-69434, CVE-2026-69456, CVE-2026-69459, CVE-2026-69478, CVE-2026-69561, CVE-2026-69512, CVE-2026-69498, CVE-2026-69571, CVE-2026-69535, CVE-2026-69538, CVE-2026-69591, CVE-2026-69566, CVE-2026-69567, CVE-2026-69584, CVE-2026-69617, CVE-2026-69630, CVE-2026-69610, CVE-2026-69881, CVE-2026-69680, CVE-2026-69619, CVE-2026-69685, CVE-2026-69643, CVE-2026-69687, CVE-2026-69791, CVE-2026-69707, CVE-2026-69652, CVE-2026-69834, CVE-2026-69709, CVE-2026-69844, CVE-2026-69814, CVE-2026-69731, CVE-2026-69706, CVE-2026-69779, CVE-2026-69895, CVE-2026-69792, CVE-2026-69853, CVE-2026-69761, CVE-2026-69785, CVE-2026-69818, CVE-2026-69786, CVE-2026-69874, CVE-2026-70565, CVE-2026-70574, CVE-2026-70569, CVE-2026-70575, CVE-2026-71349, CVE-2026-72927, CVE-2026-72952, CVE-2026-72942, CVE-2026-72966, CVE-2026-72967, CVE-2026-69426, CVE-2026-69564, CVE-2026-72985, CVE-2026-73019, CVE-2026-78451, CVE-2026-78452, CVE-2026-83940, CVE-2026-69598, CVE-2026-83995, CVE-2026-83501, CVE-2026-83498.

CVE-2026-68881

CVE-2026-68881 is an out-of-bounds read vulnerability in the Microsoft Standard XPS component. An authorized, local attacker can exploit this flaw to disclose sensitive information from the system memory.

Affected products:

Standard XPS

Source: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-68881

Related in this roundup: CVE-2026-69824, CVE-2026-68885, CVE-2026-68888, CVE-2026-68889, CVE-2026-68890, CVE-2026-68892, CVE-2026-68897, CVE-2026-69269, CVE-2026-69271, CVE-2026-69272, CVE-2026-69313, CVE-2026-69336, CVE-2026-69345, CVE-2026-69367, CVE-2026-68891, CVE-2026-69308, CVE-2026-69376.

CVE-2026-69267

An information disclosure vulnerability exists in the Windows Connected User Experiences and Telemetry component due to insufficient access control granularity, allowing an authorized local attacker to access sensitive information.

Affected products:

Windows Connected User Experiences and Telemetry

Source: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-69267

Related in this roundup: CVE-2026-68824, CVE-2026-68847.

CVE-2026-69366

CVE-2026-69366 is a use-after-free vulnerability within the Windows Kernel. An authenticated attacker can exploit this flaw to perform a privilege escalation attack over a network, potentially gaining elevated access on the target system.

Affected products:

Windows

Source: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-69366

Related in this roundup: CVE-2026-81963, CVE-2026-85880, CVE-2026-69496, CVE-2026-69586, CVE-2026-69768, CVE-2026-73025, CVE-2026-56172, CVE-2026-68832, CVE-2026-68834, CVE-2026-68838, CVE-2026-68841, CVE-2026-68875, CVE-2026-68877, CVE-2026-68880, CVE-2026-69265, CVE-2026-69270, CVE-2026-69274, CVE-2026-69275, CVE-2026-69280, CVE-2026-69283, CVE-2026-69284, CVE-2026-69289, CVE-2026-69296, CVE-2026-69300, CVE-2026-69301, CVE-2026-69307, CVE-2026-69312, CVE-2026-69314, CVE-2026-69332, CVE-2026-69333, CVE-2026-69335, CVE-2026-68833, CVE-2026-68851, CVE-2026-69337, CVE-2026-69347, CVE-2026-69379, CVE-2026-69390, CVE-2026-69401, CVE-2026-69413, CVE-2026-69420, CVE-2026-69429, CVE-2026-69448, CVE-2026-69455, CVE-2026-69532, CVE-2026-69472, CVE-2026-69479, CVE-2026-69531, CVE-2026-69517, CVE-2026-69505, CVE-2026-69504, CVE-2026-69527, CVE-2026-69549, CVE-2026-69588, CVE-2026-69609, CVE-2026-69648, CVE-2026-69689, CVE-2026-69790, CVE-2026-69638, CVE-2026-69859, CVE-2026-69717, CVE-2026-69711, CVE-2026-69875, CVE-2026-69889, CVE-2026-69757, CVE-2026-69741, CVE-2026-69762, CVE-2026-69744, CVE-2026-69832, CVE-2026-69691, CVE-2026-69808, CVE-2026-69775, CVE-2026-69822, CVE-2026-69770, CVE-2026-69676, CVE-2026-70289, CVE-2026-70563, CVE-2026-71329, CVE-2026-71332, CVE-2026-71350, CVE-2026-71348, CVE-2026-71345, CVE-2026-69469, CVE-2026-69501, CVE-2026-69548, CVE-2026-69846, CVE-2026-70283, CVE-2026-72981, CVE-2026-77491, CVE-2026-77492, CVE-2026-77503, CVE-2026-80093, CVE-2026-72949, CVE-2026-70019, CVE-2026-72940, CVE-2026-69573, CVE-2026-70290, CVE-2026-83991, CVE-2026-83999, CVE-2026-69321, CVE-2026-69316, CVE-2026-69340, CVE-2026-69348, CVE-2026-69350, CVE-2026-69353, CVE-2026-69357, CVE-2026-69393, CVE-2026-69410, CVE-2026-69421, CVE-2026-69428, CVE-2026-69425, CVE-2026-69427, CVE-2026-69434, CVE-2026-69456, CVE-2026-69459, CVE-2026-69478, CVE-2026-69561, CVE-2026-69512, CVE-2026-69498, CVE-2026-69571, CVE-2026-69535, CVE-2026-69538, CVE-2026-69591, CVE-2026-69566, CVE-2026-69567, CVE-2026-69584, CVE-2026-69617, CVE-2026-69630, CVE-2026-69610, CVE-2026-69881, CVE-2026-69680, CVE-2026-69619, CVE-2026-69685, CVE-2026-69643, CVE-2026-69687, CVE-2026-69791, CVE-2026-69707, CVE-2026-69652, CVE-2026-69834, CVE-2026-69709, CVE-2026-69844, CVE-2026-69814, CVE-2026-69731, CVE-2026-69706, CVE-2026-69779, CVE-2026-69895, CVE-2026-69792, CVE-2026-69853, CVE-2026-69761, CVE-2026-69785, CVE-2026-69818, CVE-2026-69786, CVE-2026-69874, CVE-2026-70565, CVE-2026-70574, CVE-2026-70569, CVE-2026-70575, CVE-2026-71349, CVE-2026-72927, CVE-2026-72952, CVE-2026-72942, CVE-2026-72966, CVE-2026-72967, CVE-2026-69426, CVE-2026-69564, CVE-2026-72985, CVE-2026-73019, CVE-2026-78451, CVE-2026-78452, CVE-2026-83940, CVE-2026-69598, CVE-2026-83995, CVE-2026-83501, CVE-2026-83498.

CVE-2026-69337

A double free vulnerability exists in the Windows Registry component that allows an authorized network-based attacker to elevate privileges on the target system.

Affected products:

Windows

Source: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-69337

Related in this roundup: CVE-2026-81963, CVE-2026-85880, CVE-2026-69496, CVE-2026-69586, CVE-2026-69768, CVE-2026-73025, CVE-2026-56172, CVE-2026-68832, CVE-2026-68834, CVE-2026-68838, CVE-2026-68841, CVE-2026-68875, CVE-2026-68877, CVE-2026-68880, CVE-2026-69265, CVE-2026-69270, CVE-2026-69274, CVE-2026-69275, CVE-2026-69280, CVE-2026-69283, CVE-2026-69284, CVE-2026-69289, CVE-2026-69296, CVE-2026-69300, CVE-2026-69301, CVE-2026-69307, CVE-2026-69312, CVE-2026-69314, CVE-2026-69332, CVE-2026-69333, CVE-2026-69335, CVE-2026-68833, CVE-2026-68851, CVE-2026-69366, CVE-2026-69347, CVE-2026-69379, CVE-2026-69390, CVE-2026-69401, CVE-2026-69413, CVE-2026-69420, CVE-2026-69429, CVE-2026-69448, CVE-2026-69455, CVE-2026-69532, CVE-2026-69472, CVE-2026-69479, CVE-2026-69531, CVE-2026-69517, CVE-2026-69505, CVE-2026-69504, CVE-2026-69527, CVE-2026-69549, CVE-2026-69588, CVE-2026-69609, CVE-2026-69648, CVE-2026-69689, CVE-2026-69790, CVE-2026-69638, CVE-2026-69859, CVE-2026-69717, CVE-2026-69711, CVE-2026-69875, CVE-2026-69889, CVE-2026-69757, CVE-2026-69741, CVE-2026-69762, CVE-2026-69744, CVE-2026-69832, CVE-2026-69691, CVE-2026-69808, CVE-2026-69775, CVE-2026-69822, CVE-2026-69770, CVE-2026-69676, CVE-2026-70289, CVE-2026-70563, CVE-2026-71329, CVE-2026-71332, CVE-2026-71350, CVE-2026-71348, CVE-2026-71345, CVE-2026-69469, CVE-2026-69501, CVE-2026-69548, CVE-2026-69846, CVE-2026-70283, CVE-2026-72981, CVE-2026-77491, CVE-2026-77492, CVE-2026-77503, CVE-2026-80093, CVE-2026-72949, CVE-2026-70019, CVE-2026-72940, CVE-2026-69573, CVE-2026-70290, CVE-2026-83991, CVE-2026-83999, CVE-2026-69321, CVE-2026-69316, CVE-2026-69340, CVE-2026-69348, CVE-2026-69350, CVE-2026-69353, CVE-2026-69357, CVE-2026-69393, CVE-2026-69410, CVE-2026-69421, CVE-2026-69428, CVE-2026-69425, CVE-2026-69427, CVE-2026-69434, CVE-2026-69456, CVE-2026-69459, CVE-2026-69478, CVE-2026-69561, CVE-2026-69512, CVE-2026-69498, CVE-2026-69571, CVE-2026-69535, CVE-2026-69538, CVE-2026-69591, CVE-2026-69566, CVE-2026-69567, CVE-2026-69584, CVE-2026-69617, CVE-2026-69630, CVE-2026-69610, CVE-2026-69881, CVE-2026-69680, CVE-2026-69619, CVE-2026-69685, CVE-2026-69643, CVE-2026-69687, CVE-2026-69791, CVE-2026-69707, CVE-2026-69652, CVE-2026-69834, CVE-2026-69709, CVE-2026-69844, CVE-2026-69814, CVE-2026-69731, CVE-2026-69706, CVE-2026-69779, CVE-2026-69895, CVE-2026-69792, CVE-2026-69853, CVE-2026-69761, CVE-2026-69785, CVE-2026-69818, CVE-2026-69786, CVE-2026-69874, CVE-2026-70565, CVE-2026-70574, CVE-2026-70569, CVE-2026-70575, CVE-2026-71349, CVE-2026-72927, CVE-2026-72952, CVE-2026-72942, CVE-2026-72966, CVE-2026-72967, CVE-2026-69426, CVE-2026-69564, CVE-2026-72985, CVE-2026-73019, CVE-2026-78451, CVE-2026-78452, CVE-2026-83940, CVE-2026-69598, CVE-2026-83995, CVE-2026-83501, CVE-2026-83498.

CVE-2026-69339

CVE-2026-69339 is an information disclosure vulnerability in the Windows MIDI Service Module. A local, authorized attacker can exploit this flaw to gain unauthorized access to sensitive system information, potentially aiding in further exploitation or reconnaissance.

Affected products:

Windows MIDI Service Module

Source: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-69339

Related in this roundup: CVE-2026-68842, CVE-2026-69440, CVE-2026-69508, CVE-2026-69720, CVE-2026-78464.

CVE-2026-69338

An authorized attacker can exploit a use-after-free vulnerability in the Remote Desktop Gateway Service to achieve privilege escalation over the network.

Affected products:

Remote Desktop Gateway Service

Source: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-69338

Related in this roundup: CVE-2026-69292.

CVE-2026-69347

A heap-based buffer overflow vulnerability exists in the Windows Fast FAT Driver that can be exploited by an authenticated attacker to achieve local remote code execution. The vulnerability is triggered by improper handling of memory operations within the driver, potentially leading to system compromise.

Affected products:

Windows

Source: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-69347

Related in this roundup: CVE-2026-81963, CVE-2026-85880, CVE-2026-69496, CVE-2026-69586, CVE-2026-69768, CVE-2026-73025, CVE-2026-56172, CVE-2026-68832, CVE-2026-68834, CVE-2026-68838, CVE-2026-68841, CVE-2026-68875, CVE-2026-68877, CVE-2026-68880, CVE-2026-69265, CVE-2026-69270, CVE-2026-69274, CVE-2026-69275, CVE-2026-69280, CVE-2026-69283, CVE-2026-69284, CVE-2026-69289, CVE-2026-69296, CVE-2026-69300, CVE-2026-69301, CVE-2026-69307, CVE-2026-69312, CVE-2026-69314, CVE-2026-69332, CVE-2026-69333, CVE-2026-69335, CVE-2026-68833, CVE-2026-68851, CVE-2026-69366, CVE-2026-69337, CVE-2026-69379, CVE-2026-69390, CVE-2026-69401, CVE-2026-69413, CVE-2026-69420, CVE-2026-69429, CVE-2026-69448, CVE-2026-69455, CVE-2026-69532, CVE-2026-69472, CVE-2026-69479, CVE-2026-69531, CVE-2026-69517, CVE-2026-69505, CVE-2026-69504, CVE-2026-69527, CVE-2026-69549, CVE-2026-69588, CVE-2026-69609, CVE-2026-69648, CVE-2026-69689, CVE-2026-69790, CVE-2026-69638, CVE-2026-69859, CVE-2026-69717, CVE-2026-69711, CVE-2026-69875, CVE-2026-69889, CVE-2026-69757, CVE-2026-69741, CVE-2026-69762, CVE-2026-69744, CVE-2026-69832, CVE-2026-69691, CVE-2026-69808, CVE-2026-69775, CVE-2026-69822, CVE-2026-69770, CVE-2026-69676, CVE-2026-70289, CVE-2026-70563, CVE-2026-71329, CVE-2026-71332, CVE-2026-71350, CVE-2026-71348, CVE-2026-71345, CVE-2026-69469, CVE-2026-69501, CVE-2026-69548, CVE-2026-69846, CVE-2026-70283, CVE-2026-72981, CVE-2026-77491, CVE-2026-77492, CVE-2026-77503, CVE-2026-80093, CVE-2026-72949, CVE-2026-70019, CVE-2026-72940, CVE-2026-69573, CVE-2026-70290, CVE-2026-83991, CVE-2026-83999, CVE-2026-69321, CVE-2026-69316, CVE-2026-69340, CVE-2026-69348, CVE-2026-69350, CVE-2026-69353, CVE-2026-69357, CVE-2026-69393, CVE-2026-69410, CVE-2026-69421, CVE-2026-69428, CVE-2026-69425, CVE-2026-69427, CVE-2026-69434, CVE-2026-69456, CVE-2026-69459, CVE-2026-69478, CVE-2026-69561, CVE-2026-69512, CVE-2026-69498, CVE-2026-69571, CVE-2026-69535, CVE-2026-69538, CVE-2026-69591, CVE-2026-69566, CVE-2026-69567, CVE-2026-69584, CVE-2026-69617, CVE-2026-69630, CVE-2026-69610, CVE-2026-69881, CVE-2026-69680, CVE-2026-69619, CVE-2026-69685, CVE-2026-69643, CVE-2026-69687, CVE-2026-69791, CVE-2026-69707, CVE-2026-69652, CVE-2026-69834, CVE-2026-69709, CVE-2026-69844, CVE-2026-69814, CVE-2026-69731, CVE-2026-69706, CVE-2026-69779, CVE-2026-69895, CVE-2026-69792, CVE-2026-69853, CVE-2026-69761, CVE-2026-69785, CVE-2026-69818, CVE-2026-69786, CVE-2026-69874, CVE-2026-70565, CVE-2026-70574, CVE-2026-70569, CVE-2026-70575, CVE-2026-71349, CVE-2026-72927, CVE-2026-72952, CVE-2026-72942, CVE-2026-72966, CVE-2026-72967, CVE-2026-69426, CVE-2026-69564, CVE-2026-72985, CVE-2026-73019, CVE-2026-78451, CVE-2026-78452, CVE-2026-83940, CVE-2026-69598, CVE-2026-83995, CVE-2026-83501, CVE-2026-83498.

CVE-2026-69345

CVE-2026-69345 is an out-of-bounds read vulnerability in Microsoft Standard XPS. An authorized attacker can exploit this flaw to perform local information disclosure, potentially leading to unauthorized access to sensitive data processed by the affected component.

Affected products:

Standard XPS

Source: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-69345

Related in this roundup: CVE-2026-69824, CVE-2026-68885, CVE-2026-68888, CVE-2026-68889, CVE-2026-68890, CVE-2026-68892, CVE-2026-68897, CVE-2026-69269, CVE-2026-69271, CVE-2026-69272, CVE-2026-69313, CVE-2026-69336, CVE-2026-68881, CVE-2026-69367, CVE-2026-68891, CVE-2026-69308, CVE-2026-69376.

CVE-2026-69377

A missing authorization vulnerability exists within the Windows Modern Device Management (MDM) component that permits a locally authenticated attacker to escalate their privileges to a higher level, potentially gaining unauthorized system control.

Affected products:

Windows Modern Device Management

Source: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-69377

Related in this roundup: CVE-2026-69460, CVE-2026-69674, CVE-2026-70577, CVE-2026-73003, CVE-2026-73022.

CVE-2026-69349

CVE-2026-69349 describes a vulnerability in Windows Management Instrumentation (WMI) where the use of an uninitialized resource permits an authorized attacker to disclose sensitive information over the network.

Affected products:

Windows Management Instrumentation

Source: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-69349

Related in this roundup: CVE-2026-69451, CVE-2026-70582, CVE-2026-77905.

CVE-2026-69362

CVE-2026-69362 is a use-after-free vulnerability within the Windows Error Reporting component that allows a local, authenticated attacker to escalate privileges on a target Windows system.

Affected products:

Windows Error Reporting

Source: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-69362

Related in this roundup: CVE-2026-68894, CVE-2026-69436, CVE-2026-69513, CVE-2026-69450, CVE-2026-69684, CVE-2026-69896, CVE-2026-83996, CVE-2026-69433, CVE-2026-69462, CVE-2026-69482, CVE-2026-69612.

CVE-2026-69359

CVE-2026-69359 is a heap-based buffer overflow vulnerability in Active Directory Domain Services that enables an authorized local attacker to elevate their privileges within the domain environment.

Affected products:

Active Directory Domain Services

Source: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-69359

Related in this roundup: CVE-2026-62813, CVE-2026-69524, CVE-2026-62762, CVE-2026-69546, CVE-2026-69809.

CVE-2026-69367

CVE-2026-69367 describes an out-of-bounds read vulnerability within Microsoft Standard XPS that enables an authorized local attacker to perform information disclosure. Detection efforts should focus on monitoring for unusual memory access patterns or unauthorized attempts to access or dump protected data processed by the XPS rendering components.

Affected products:

Standard XPS

Source: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-69367

Related in this roundup: CVE-2026-69824, CVE-2026-68885, CVE-2026-68888, CVE-2026-68889, CVE-2026-68890, CVE-2026-68892, CVE-2026-68897, CVE-2026-69269, CVE-2026-69271, CVE-2026-69272, CVE-2026-69313, CVE-2026-69336, CVE-2026-68881, CVE-2026-69345, CVE-2026-68891, CVE-2026-69308, CVE-2026-69376.

CVE-2026-69389

A heap-based buffer overflow vulnerability in the Windows Storage Management Provider allows a locally authenticated attacker to elevate their privileges to a higher level within the system.

Affected products:

Windows Storage Management Provider

Source: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-69389

Related in this roundup: CVE-2026-71337.

CVE-2026-69368

CVE-2026-69368 is a heap-based buffer overflow vulnerability in the Windows Overlay Filter that enables an authenticated local attacker to gain elevated privileges on the targeted system.

Affected products:

Windows Overlay Filter

Source: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-69368

Related in this roundup: CVE-2026-69371, CVE-2026-69343, CVE-2026-69373, CVE-2026-69474.

CVE-2026-69371

CVE-2026-69371 is a heap-based buffer overflow vulnerability within the Windows Overlay Filter. An authorized attacker can exploit this flaw to execute code with elevated privileges over a network, potentially leading to full system compromise.

Affected products:

Windows Overlay Filter

Source: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-69371

Related in this roundup: CVE-2026-69368, CVE-2026-69343, CVE-2026-69373, CVE-2026-69474.

CVE-2026-69379

CVE-2026-69379 is a local privilege escalation vulnerability in the Windows NTFS file system caused by improper link resolution during file access. An authorized attacker can exploit this flaw by following symlinks or hard links to perform unauthorized actions with elevated privileges on the system.

Affected products:

Windows

Source: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-69379

Related in this roundup: CVE-2026-81963, CVE-2026-85880, CVE-2026-69496, CVE-2026-69586, CVE-2026-69768, CVE-2026-73025, CVE-2026-56172, CVE-2026-68832, CVE-2026-68834, CVE-2026-68838, CVE-2026-68841, CVE-2026-68875, CVE-2026-68877, CVE-2026-68880, CVE-2026-69265, CVE-2026-69270, CVE-2026-69274, CVE-2026-69275, CVE-2026-69280, CVE-2026-69283, CVE-2026-69284, CVE-2026-69289, CVE-2026-69296, CVE-2026-69300, CVE-2026-69301, CVE-2026-69307, CVE-2026-69312, CVE-2026-69314, CVE-2026-69332, CVE-2026-69333, CVE-2026-69335, CVE-2026-68833, CVE-2026-68851, CVE-2026-69366, CVE-2026-69337, CVE-2026-69347, CVE-2026-69390, CVE-2026-69401, CVE-2026-69413, CVE-2026-69420, CVE-2026-69429, CVE-2026-69448, CVE-2026-69455, CVE-2026-69532, CVE-2026-69472, CVE-2026-69479, CVE-2026-69531, CVE-2026-69517, CVE-2026-69505, CVE-2026-69504, CVE-2026-69527, CVE-2026-69549, CVE-2026-69588, CVE-2026-69609, CVE-2026-69648, CVE-2026-69689, CVE-2026-69790, CVE-2026-69638, CVE-2026-69859, CVE-2026-69717, CVE-2026-69711, CVE-2026-69875, CVE-2026-69889, CVE-2026-69757, CVE-2026-69741, CVE-2026-69762, CVE-2026-69744, CVE-2026-69832, CVE-2026-69691, CVE-2026-69808, CVE-2026-69775, CVE-2026-69822, CVE-2026-69770, CVE-2026-69676, CVE-2026-70289, CVE-2026-70563, CVE-2026-71329, CVE-2026-71332, CVE-2026-71350, CVE-2026-71348, CVE-2026-71345, CVE-2026-69469, CVE-2026-69501, CVE-2026-69548, CVE-2026-69846, CVE-2026-70283, CVE-2026-72981, CVE-2026-77491, CVE-2026-77492, CVE-2026-77503, CVE-2026-80093, CVE-2026-72949, CVE-2026-70019, CVE-2026-72940, CVE-2026-69573, CVE-2026-70290, CVE-2026-83991, CVE-2026-83999, CVE-2026-69321, CVE-2026-69316, CVE-2026-69340, CVE-2026-69348, CVE-2026-69350, CVE-2026-69353, CVE-2026-69357, CVE-2026-69393, CVE-2026-69410, CVE-2026-69421, CVE-2026-69428, CVE-2026-69425, CVE-2026-69427, CVE-2026-69434, CVE-2026-69456, CVE-2026-69459, CVE-2026-69478, CVE-2026-69561, CVE-2026-69512, CVE-2026-69498, CVE-2026-69571, CVE-2026-69535, CVE-2026-69538, CVE-2026-69591, CVE-2026-69566, CVE-2026-69567, CVE-2026-69584, CVE-2026-69617, CVE-2026-69630, CVE-2026-69610, CVE-2026-69881, CVE-2026-69680, CVE-2026-69619, CVE-2026-69685, CVE-2026-69643, CVE-2026-69687, CVE-2026-69791, CVE-2026-69707, CVE-2026-69652, CVE-2026-69834, CVE-2026-69709, CVE-2026-69844, CVE-2026-69814, CVE-2026-69731, CVE-2026-69706, CVE-2026-69779, CVE-2026-69895, CVE-2026-69792, CVE-2026-69853, CVE-2026-69761, CVE-2026-69785, CVE-2026-69818, CVE-2026-69786, CVE-2026-69874, CVE-2026-70565, CVE-2026-70574, CVE-2026-70569, CVE-2026-70575, CVE-2026-71349, CVE-2026-72927, CVE-2026-72952, CVE-2026-72942, CVE-2026-72966, CVE-2026-72967, CVE-2026-69426, CVE-2026-69564, CVE-2026-72985, CVE-2026-73019, CVE-2026-78451, CVE-2026-78452, CVE-2026-83940, CVE-2026-69598, CVE-2026-83995, CVE-2026-83501, CVE-2026-83498.

CVE-2026-69391

A stack-based buffer overflow vulnerability in the Windows Broker Infrastructure Service allows an authorized local attacker to achieve privilege escalation on the affected system.

Affected products:

Windows Broker Infrastructure Service

Source: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-69391

CVE-2026-69404

A race condition exists in the Windows TCP/IP stack due to improper synchronization during concurrent execution with shared resources. This vulnerability allows an authenticated local attacker to escalate their privileges.

Affected products:

Windows TCP/IP

Source: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-69404

Related in this roundup: CVE-2026-69385, CVE-2026-69793.

CVE-2026-69390

An out-of-bounds read vulnerability exists in the Windows Spaceport.sys driver, which can be exploited by an authorized attacker to gain unauthorized access to sensitive information via local information disclosure.

Affected products:

Windows

Source: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-69390

Related in this roundup: CVE-2026-81963, CVE-2026-85880, CVE-2026-69496, CVE-2026-69586, CVE-2026-69768, CVE-2026-73025, CVE-2026-56172, CVE-2026-68832, CVE-2026-68834, CVE-2026-68838, CVE-2026-68841, CVE-2026-68875, CVE-2026-68877, CVE-2026-68880, CVE-2026-69265, CVE-2026-69270, CVE-2026-69274, CVE-2026-69275, CVE-2026-69280, CVE-2026-69283, CVE-2026-69284, CVE-2026-69289, CVE-2026-69296, CVE-2026-69300, CVE-2026-69301, CVE-2026-69307, CVE-2026-69312, CVE-2026-69314, CVE-2026-69332, CVE-2026-69333, CVE-2026-69335, CVE-2026-68833, CVE-2026-68851, CVE-2026-69366, CVE-2026-69337, CVE-2026-69347, CVE-2026-69379, CVE-2026-69401, CVE-2026-69413, CVE-2026-69420, CVE-2026-69429, CVE-2026-69448, CVE-2026-69455, CVE-2026-69532, CVE-2026-69472, CVE-2026-69479, CVE-2026-69531, CVE-2026-69517, CVE-2026-69505, CVE-2026-69504, CVE-2026-69527, CVE-2026-69549, CVE-2026-69588, CVE-2026-69609, CVE-2026-69648, CVE-2026-69689, CVE-2026-69790, CVE-2026-69638, CVE-2026-69859, CVE-2026-69717, CVE-2026-69711, CVE-2026-69875, CVE-2026-69889, CVE-2026-69757, CVE-2026-69741, CVE-2026-69762, CVE-2026-69744, CVE-2026-69832, CVE-2026-69691, CVE-2026-69808, CVE-2026-69775, CVE-2026-69822, CVE-2026-69770, CVE-2026-69676, CVE-2026-70289, CVE-2026-70563, CVE-2026-71329, CVE-2026-71332, CVE-2026-71350, CVE-2026-71348, CVE-2026-71345, CVE-2026-69469, CVE-2026-69501, CVE-2026-69548, CVE-2026-69846, CVE-2026-70283, CVE-2026-72981, CVE-2026-77491, CVE-2026-77492, CVE-2026-77503, CVE-2026-80093, CVE-2026-72949, CVE-2026-70019, CVE-2026-72940, CVE-2026-69573, CVE-2026-70290, CVE-2026-83991, CVE-2026-83999, CVE-2026-69321, CVE-2026-69316, CVE-2026-69340, CVE-2026-69348, CVE-2026-69350, CVE-2026-69353, CVE-2026-69357, CVE-2026-69393, CVE-2026-69410, CVE-2026-69421, CVE-2026-69428, CVE-2026-69425, CVE-2026-69427, CVE-2026-69434, CVE-2026-69456, CVE-2026-69459, CVE-2026-69478, CVE-2026-69561, CVE-2026-69512, CVE-2026-69498, CVE-2026-69571, CVE-2026-69535, CVE-2026-69538, CVE-2026-69591, CVE-2026-69566, CVE-2026-69567, CVE-2026-69584, CVE-2026-69617, CVE-2026-69630, CVE-2026-69610, CVE-2026-69881, CVE-2026-69680, CVE-2026-69619, CVE-2026-69685, CVE-2026-69643, CVE-2026-69687, CVE-2026-69791, CVE-2026-69707, CVE-2026-69652, CVE-2026-69834, CVE-2026-69709, CVE-2026-69844, CVE-2026-69814, CVE-2026-69731, CVE-2026-69706, CVE-2026-69779, CVE-2026-69895, CVE-2026-69792, CVE-2026-69853, CVE-2026-69761, CVE-2026-69785, CVE-2026-69818, CVE-2026-69786, CVE-2026-69874, CVE-2026-70565, CVE-2026-70574, CVE-2026-70569, CVE-2026-70575, CVE-2026-71349, CVE-2026-72927, CVE-2026-72952, CVE-2026-72942, CVE-2026-72966, CVE-2026-72967, CVE-2026-69426, CVE-2026-69564, CVE-2026-72985, CVE-2026-73019, CVE-2026-78451, CVE-2026-78452, CVE-2026-83940, CVE-2026-69598, CVE-2026-83995, CVE-2026-83501, CVE-2026-83498.

CVE-2026-69406

CVE-2026-69406 is an information disclosure vulnerability in the Windows Kernel that allows an authorized local attacker to gain unauthorized access to sensitive system information.

Affected products:

Windows Kernel

Source: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-69406

Related in this roundup: CVE-2026-68846, CVE-2026-68884, CVE-2026-85360, CVE-2026-69473, CVE-2026-69723, CVE-2026-83942, CVE-2026-69466, CVE-2026-69578, CVE-2026-69669.

CVE-2026-69401

CVE-2026-69401 describes a use-after-free vulnerability within the Audio Video Control Transport Protocol that permits an authenticated attacker to perform local privilege escalation on affected Windows systems.

Affected products:

Windows

Source: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-69401

Related in this roundup: CVE-2026-81963, CVE-2026-85880, CVE-2026-69496, CVE-2026-69586, CVE-2026-69768, CVE-2026-73025, CVE-2026-56172, CVE-2026-68832, CVE-2026-68834, CVE-2026-68838, CVE-2026-68841, CVE-2026-68875, CVE-2026-68877, CVE-2026-68880, CVE-2026-69265, CVE-2026-69270, CVE-2026-69274, CVE-2026-69275, CVE-2026-69280, CVE-2026-69283, CVE-2026-69284, CVE-2026-69289, CVE-2026-69296, CVE-2026-69300, CVE-2026-69301, CVE-2026-69307, CVE-2026-69312, CVE-2026-69314, CVE-2026-69332, CVE-2026-69333, CVE-2026-69335, CVE-2026-68833, CVE-2026-68851, CVE-2026-69366, CVE-2026-69337, CVE-2026-69347, CVE-2026-69379, CVE-2026-69390, CVE-2026-69413, CVE-2026-69420, CVE-2026-69429, CVE-2026-69448, CVE-2026-69455, CVE-2026-69532, CVE-2026-69472, CVE-2026-69479, CVE-2026-69531, CVE-2026-69517, CVE-2026-69505, CVE-2026-69504, CVE-2026-69527, CVE-2026-69549, CVE-2026-69588, CVE-2026-69609, CVE-2026-69648, CVE-2026-69689, CVE-2026-69790, CVE-2026-69638, CVE-2026-69859, CVE-2026-69717, CVE-2026-69711, CVE-2026-69875, CVE-2026-69889, CVE-2026-69757, CVE-2026-69741, CVE-2026-69762, CVE-2026-69744, CVE-2026-69832, CVE-2026-69691, CVE-2026-69808, CVE-2026-69775, CVE-2026-69822, CVE-2026-69770, CVE-2026-69676, CVE-2026-70289, CVE-2026-70563, CVE-2026-71329, CVE-2026-71332, CVE-2026-71350, CVE-2026-71348, CVE-2026-71345, CVE-2026-69469, CVE-2026-69501, CVE-2026-69548, CVE-2026-69846, CVE-2026-70283, CVE-2026-72981, CVE-2026-77491, CVE-2026-77492, CVE-2026-77503, CVE-2026-80093, CVE-2026-72949, CVE-2026-70019, CVE-2026-72940, CVE-2026-69573, CVE-2026-70290, CVE-2026-83991, CVE-2026-83999, CVE-2026-69321, CVE-2026-69316, CVE-2026-69340, CVE-2026-69348, CVE-2026-69350, CVE-2026-69353, CVE-2026-69357, CVE-2026-69393, CVE-2026-69410, CVE-2026-69421, CVE-2026-69428, CVE-2026-69425, CVE-2026-69427, CVE-2026-69434, CVE-2026-69456, CVE-2026-69459, CVE-2026-69478, CVE-2026-69561, CVE-2026-69512, CVE-2026-69498, CVE-2026-69571, CVE-2026-69535, CVE-2026-69538, CVE-2026-69591, CVE-2026-69566, CVE-2026-69567, CVE-2026-69584, CVE-2026-69617, CVE-2026-69630, CVE-2026-69610, CVE-2026-69881, CVE-2026-69680, CVE-2026-69619, CVE-2026-69685, CVE-2026-69643, CVE-2026-69687, CVE-2026-69791, CVE-2026-69707, CVE-2026-69652, CVE-2026-69834, CVE-2026-69709, CVE-2026-69844, CVE-2026-69814, CVE-2026-69731, CVE-2026-69706, CVE-2026-69779, CVE-2026-69895, CVE-2026-69792, CVE-2026-69853, CVE-2026-69761, CVE-2026-69785, CVE-2026-69818, CVE-2026-69786, CVE-2026-69874, CVE-2026-70565, CVE-2026-70574, CVE-2026-70569, CVE-2026-70575, CVE-2026-71349, CVE-2026-72927, CVE-2026-72952, CVE-2026-72942, CVE-2026-72966, CVE-2026-72967, CVE-2026-69426, CVE-2026-69564, CVE-2026-72985, CVE-2026-73019, CVE-2026-78451, CVE-2026-78452, CVE-2026-83940, CVE-2026-69598, CVE-2026-83995, CVE-2026-83501, CVE-2026-83498.

CVE-2026-69413

A use-after-free vulnerability exists in the Windows USB Audio Class driver (usbaudio.sys), which could allow a locally authenticated attacker to escalate their privileges on the affected system by triggering the vulnerability.

Affected products:

Windows

Source: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-69413

Related in this roundup: CVE-2026-81963, CVE-2026-85880, CVE-2026-69496, CVE-2026-69586, CVE-2026-69768, CVE-2026-73025, CVE-2026-56172, CVE-2026-68832, CVE-2026-68834, CVE-2026-68838, CVE-2026-68841, CVE-2026-68875, CVE-2026-68877, CVE-2026-68880, CVE-2026-69265, CVE-2026-69270, CVE-2026-69274, CVE-2026-69275, CVE-2026-69280, CVE-2026-69283, CVE-2026-69284, CVE-2026-69289, CVE-2026-69296, CVE-2026-69300, CVE-2026-69301, CVE-2026-69307, CVE-2026-69312, CVE-2026-69314, CVE-2026-69332, CVE-2026-69333, CVE-2026-69335, CVE-2026-68833, CVE-2026-68851, CVE-2026-69366, CVE-2026-69337, CVE-2026-69347, CVE-2026-69379, CVE-2026-69390, CVE-2026-69401, CVE-2026-69420, CVE-2026-69429, CVE-2026-69448, CVE-2026-69455, CVE-2026-69532, CVE-2026-69472, CVE-2026-69479, CVE-2026-69531, CVE-2026-69517, CVE-2026-69505, CVE-2026-69504, CVE-2026-69527, CVE-2026-69549, CVE-2026-69588, CVE-2026-69609, CVE-2026-69648, CVE-2026-69689, CVE-2026-69790, CVE-2026-69638, CVE-2026-69859, CVE-2026-69717, CVE-2026-69711, CVE-2026-69875, CVE-2026-69889, CVE-2026-69757, CVE-2026-69741, CVE-2026-69762, CVE-2026-69744, CVE-2026-69832, CVE-2026-69691, CVE-2026-69808, CVE-2026-69775, CVE-2026-69822, CVE-2026-69770, CVE-2026-69676, CVE-2026-70289, CVE-2026-70563, CVE-2026-71329, CVE-2026-71332, CVE-2026-71350, CVE-2026-71348, CVE-2026-71345, CVE-2026-69469, CVE-2026-69501, CVE-2026-69548, CVE-2026-69846, CVE-2026-70283, CVE-2026-72981, CVE-2026-77491, CVE-2026-77492, CVE-2026-77503, CVE-2026-80093, CVE-2026-72949, CVE-2026-70019, CVE-2026-72940, CVE-2026-69573, CVE-2026-70290, CVE-2026-83991, CVE-2026-83999, CVE-2026-69321, CVE-2026-69316, CVE-2026-69340, CVE-2026-69348, CVE-2026-69350, CVE-2026-69353, CVE-2026-69357, CVE-2026-69393, CVE-2026-69410, CVE-2026-69421, CVE-2026-69428, CVE-2026-69425, CVE-2026-69427, CVE-2026-69434, CVE-2026-69456, CVE-2026-69459, CVE-2026-69478, CVE-2026-69561, CVE-2026-69512, CVE-2026-69498, CVE-2026-69571, CVE-2026-69535, CVE-2026-69538, CVE-2026-69591, CVE-2026-69566, CVE-2026-69567, CVE-2026-69584, CVE-2026-69617, CVE-2026-69630, CVE-2026-69610, CVE-2026-69881, CVE-2026-69680, CVE-2026-69619, CVE-2026-69685, CVE-2026-69643, CVE-2026-69687, CVE-2026-69791, CVE-2026-69707, CVE-2026-69652, CVE-2026-69834, CVE-2026-69709, CVE-2026-69844, CVE-2026-69814, CVE-2026-69731, CVE-2026-69706, CVE-2026-69779, CVE-2026-69895, CVE-2026-69792, CVE-2026-69853, CVE-2026-69761, CVE-2026-69785, CVE-2026-69818, CVE-2026-69786, CVE-2026-69874, CVE-2026-70565, CVE-2026-70574, CVE-2026-70569, CVE-2026-70575, CVE-2026-71349, CVE-2026-72927, CVE-2026-72952, CVE-2026-72942, CVE-2026-72966, CVE-2026-72967, CVE-2026-69426, CVE-2026-69564, CVE-2026-72985, CVE-2026-73019, CVE-2026-78451, CVE-2026-78452, CVE-2026-83940, CVE-2026-69598, CVE-2026-83995, CVE-2026-83501, CVE-2026-83498.

CVE-2026-69418

CVE-2026-69418 describes a heap-based buffer overflow vulnerability within the Windows Volume Manager Driver. An authenticated attacker can exploit this flaw to execute code or perform actions with elevated privileges over the network.

Affected products:

Volume Manager Driver

Source: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-69418

Related in this roundup: CVE-2026-69432.

CVE-2026-69457

CVE-2026-69457 is an out-of-bounds read vulnerability in the Windows USB Driver that allows an authenticated local attacker to perform an information disclosure attack.

Affected products:

Windows USB Driver

Source: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-69457

Related in this roundup: CVE-2026-68840, CVE-2026-69295, CVE-2026-69503, CVE-2026-72953.

CVE-2026-69412

CVE-2026-69412 is a stack-based buffer overflow vulnerability in the Windows DHCP Server component. An authorized attacker on an adjacent network can exploit this flaw to achieve remote code execution on the target server. Detection should focus on anomalous traffic patterns or unexpected process execution originating from the DHCP service.

Affected products:

Windows DHCP Server

Source: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-69412

Related in this roundup: CVE-2026-69845, CVE-2026-72979, CVE-2026-69266, CVE-2026-69415, CVE-2026-69929, CVE-2026-69930, CVE-2026-70124, CVE-2026-77494, CVE-2026-77498, CVE-2026-77499, CVE-2026-77501, CVE-2026-77502, CVE-2026-77887, CVE-2026-77888, CVE-2026-77886, CVE-2026-77890, CVE-2026-77889, CVE-2026-77891, CVE-2026-77893, CVE-2026-77895, CVE-2026-70065, CVE-2026-69297, CVE-2026-69342, CVE-2026-69405, CVE-2026-69416, CVE-2026-69497, CVE-2026-69547, CVE-2026-69620, CVE-2026-69637, CVE-2026-69803, CVE-2026-69679, CVE-2026-69878, CVE-2026-69847, CVE-2026-69876, CVE-2026-69510.

CVE-2026-69415

CVE-2026-69415 describes a vulnerability in the Windows DHCP Server component where a lack of authentication for a critical function enables an authorized network-based attacker to perform privilege escalation. Detection engineers should monitor for unauthorized or unusual administrative activity originating from DHCP service accounts or unexpected attempts to interact with the DHCP server management functions by non-privileged entities.

Affected products:

Windows DHCP Server

Source: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-69415

Related in this roundup: CVE-2026-69845, CVE-2026-72979, CVE-2026-69266, CVE-2026-69412, CVE-2026-69929, CVE-2026-69930, CVE-2026-70124, CVE-2026-77494, CVE-2026-77498, CVE-2026-77499, CVE-2026-77501, CVE-2026-77502, CVE-2026-77887, CVE-2026-77888, CVE-2026-77886, CVE-2026-77890, CVE-2026-77889, CVE-2026-77891, CVE-2026-77893, CVE-2026-77895, CVE-2026-70065, CVE-2026-69297, CVE-2026-69342, CVE-2026-69405, CVE-2026-69416, CVE-2026-69497, CVE-2026-69547, CVE-2026-69620, CVE-2026-69637, CVE-2026-69803, CVE-2026-69679, CVE-2026-69878, CVE-2026-69847, CVE-2026-69876, CVE-2026-69510.

CVE-2026-69420

A heap-based buffer overflow vulnerability in the Microsoft Windows VOLSNAP.SYS kernel driver allows an authenticated attacker to perform local privilege escalation. The vulnerability is triggered by manipulating the volume snapshot driver.

Affected products:

Windows

Source: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-69420

Related in this roundup: CVE-2026-81963, CVE-2026-85880, CVE-2026-69496, CVE-2026-69586, CVE-2026-69768, CVE-2026-73025, CVE-2026-56172, CVE-2026-68832, CVE-2026-68834, CVE-2026-68838, CVE-2026-68841, CVE-2026-68875, CVE-2026-68877, CVE-2026-68880, CVE-2026-69265, CVE-2026-69270, CVE-2026-69274, CVE-2026-69275, CVE-2026-69280, CVE-2026-69283, CVE-2026-69284, CVE-2026-69289, CVE-2026-69296, CVE-2026-69300, CVE-2026-69301, CVE-2026-69307, CVE-2026-69312, CVE-2026-69314, CVE-2026-69332, CVE-2026-69333, CVE-2026-69335, CVE-2026-68833, CVE-2026-68851, CVE-2026-69366, CVE-2026-69337, CVE-2026-69347, CVE-2026-69379, CVE-2026-69390, CVE-2026-69401, CVE-2026-69413, CVE-2026-69429, CVE-2026-69448, CVE-2026-69455, CVE-2026-69532, CVE-2026-69472, CVE-2026-69479, CVE-2026-69531, CVE-2026-69517, CVE-2026-69505, CVE-2026-69504, CVE-2026-69527, CVE-2026-69549, CVE-2026-69588, CVE-2026-69609, CVE-2026-69648, CVE-2026-69689, CVE-2026-69790, CVE-2026-69638, CVE-2026-69859, CVE-2026-69717, CVE-2026-69711, CVE-2026-69875, CVE-2026-69889, CVE-2026-69757, CVE-2026-69741, CVE-2026-69762, CVE-2026-69744, CVE-2026-69832, CVE-2026-69691, CVE-2026-69808, CVE-2026-69775, CVE-2026-69822, CVE-2026-69770, CVE-2026-69676, CVE-2026-70289, CVE-2026-70563, CVE-2026-71329, CVE-2026-71332, CVE-2026-71350, CVE-2026-71348, CVE-2026-71345, CVE-2026-69469, CVE-2026-69501, CVE-2026-69548, CVE-2026-69846, CVE-2026-70283, CVE-2026-72981, CVE-2026-77491, CVE-2026-77492, CVE-2026-77503, CVE-2026-80093, CVE-2026-72949, CVE-2026-70019, CVE-2026-72940, CVE-2026-69573, CVE-2026-70290, CVE-2026-83991, CVE-2026-83999, CVE-2026-69321, CVE-2026-69316, CVE-2026-69340, CVE-2026-69348, CVE-2026-69350, CVE-2026-69353, CVE-2026-69357, CVE-2026-69393, CVE-2026-69410, CVE-2026-69421, CVE-2026-69428, CVE-2026-69425, CVE-2026-69427, CVE-2026-69434, CVE-2026-69456, CVE-2026-69459, CVE-2026-69478, CVE-2026-69561, CVE-2026-69512, CVE-2026-69498, CVE-2026-69571, CVE-2026-69535, CVE-2026-69538, CVE-2026-69591, CVE-2026-69566, CVE-2026-69567, CVE-2026-69584, CVE-2026-69617, CVE-2026-69630, CVE-2026-69610, CVE-2026-69881, CVE-2026-69680, CVE-2026-69619, CVE-2026-69685, CVE-2026-69643, CVE-2026-69687, CVE-2026-69791, CVE-2026-69707, CVE-2026-69652, CVE-2026-69834, CVE-2026-69709, CVE-2026-69844, CVE-2026-69814, CVE-2026-69731, CVE-2026-69706, CVE-2026-69779, CVE-2026-69895, CVE-2026-69792, CVE-2026-69853, CVE-2026-69761, CVE-2026-69785, CVE-2026-69818, CVE-2026-69786, CVE-2026-69874, CVE-2026-70565, CVE-2026-70574, CVE-2026-70569, CVE-2026-70575, CVE-2026-71349, CVE-2026-72927, CVE-2026-72952, CVE-2026-72942, CVE-2026-72966, CVE-2026-72967, CVE-2026-69426, CVE-2026-69564, CVE-2026-72985, CVE-2026-73019, CVE-2026-78451, CVE-2026-78452, CVE-2026-83940, CVE-2026-69598, CVE-2026-83995, CVE-2026-83501, CVE-2026-83498.

CVE-2026-69436

A heap-based buffer overflow vulnerability in the Windows Error Reporting component allows a locally authenticated attacker to escalate their privileges to a higher level of authority on the target system.

Affected products:

Windows Error Reporting

Source: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-69436

Related in this roundup: CVE-2026-68894, CVE-2026-69362, CVE-2026-69513, CVE-2026-69450, CVE-2026-69684, CVE-2026-69896, CVE-2026-83996, CVE-2026-69433, CVE-2026-69462, CVE-2026-69482, CVE-2026-69612.

CVE-2026-69423

A heap-based buffer overflow vulnerability exists in the Windows USB Video Driver that allows a locally authorized attacker to escalate privileges to a higher level of authority over a network connection.

Affected products:

Windows USB Video Driver

Source: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-69423

Related in this roundup: CVE-2026-69319, CVE-2026-72962, CVE-2026-69422.

CVE-2026-69429

CVE-2026-69429 describes a heap-based buffer overflow vulnerability in the Windows Internet Key Exchange (IKE) Protocol Extensions. This flaw allows an authorized remote attacker to execute arbitrary code over a network, potentially compromising affected Windows systems.

Affected products:

Windows

Source: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-69429

Related in this roundup: CVE-2026-81963, CVE-2026-85880, CVE-2026-69496, CVE-2026-69586, CVE-2026-69768, CVE-2026-73025, CVE-2026-56172, CVE-2026-68832, CVE-2026-68834, CVE-2026-68838, CVE-2026-68841, CVE-2026-68875, CVE-2026-68877, CVE-2026-68880, CVE-2026-69265, CVE-2026-69270, CVE-2026-69274, CVE-2026-69275, CVE-2026-69280, CVE-2026-69283, CVE-2026-69284, CVE-2026-69289, CVE-2026-69296, CVE-2026-69300, CVE-2026-69301, CVE-2026-69307, CVE-2026-69312, CVE-2026-69314, CVE-2026-69332, CVE-2026-69333, CVE-2026-69335, CVE-2026-68833, CVE-2026-68851, CVE-2026-69366, CVE-2026-69337, CVE-2026-69347, CVE-2026-69379, CVE-2026-69390, CVE-2026-69401, CVE-2026-69413, CVE-2026-69420, CVE-2026-69448, CVE-2026-69455, CVE-2026-69532, CVE-2026-69472, CVE-2026-69479, CVE-2026-69531, CVE-2026-69517, CVE-2026-69505, CVE-2026-69504, CVE-2026-69527, CVE-2026-69549, CVE-2026-69588, CVE-2026-69609, CVE-2026-69648, CVE-2026-69689, CVE-2026-69790, CVE-2026-69638, CVE-2026-69859, CVE-2026-69717, CVE-2026-69711, CVE-2026-69875, CVE-2026-69889, CVE-2026-69757, CVE-2026-69741, CVE-2026-69762, CVE-2026-69744, CVE-2026-69832, CVE-2026-69691, CVE-2026-69808, CVE-2026-69775, CVE-2026-69822, CVE-2026-69770, CVE-2026-69676, CVE-2026-70289, CVE-2026-70563, CVE-2026-71329, CVE-2026-71332, CVE-2026-71350, CVE-2026-71348, CVE-2026-71345, CVE-2026-69469, CVE-2026-69501, CVE-2026-69548, CVE-2026-69846, CVE-2026-70283, CVE-2026-72981, CVE-2026-77491, CVE-2026-77492, CVE-2026-77503, CVE-2026-80093, CVE-2026-72949, CVE-2026-70019, CVE-2026-72940, CVE-2026-69573, CVE-2026-70290, CVE-2026-83991, CVE-2026-83999, CVE-2026-69321, CVE-2026-69316, CVE-2026-69340, CVE-2026-69348, CVE-2026-69350, CVE-2026-69353, CVE-2026-69357, CVE-2026-69393, CVE-2026-69410, CVE-2026-69421, CVE-2026-69428, CVE-2026-69425, CVE-2026-69427, CVE-2026-69434, CVE-2026-69456, CVE-2026-69459, CVE-2026-69478, CVE-2026-69561, CVE-2026-69512, CVE-2026-69498, CVE-2026-69571, CVE-2026-69535, CVE-2026-69538, CVE-2026-69591, CVE-2026-69566, CVE-2026-69567, CVE-2026-69584, CVE-2026-69617, CVE-2026-69630, CVE-2026-69610, CVE-2026-69881, CVE-2026-69680, CVE-2026-69619, CVE-2026-69685, CVE-2026-69643, CVE-2026-69687, CVE-2026-69791, CVE-2026-69707, CVE-2026-69652, CVE-2026-69834, CVE-2026-69709, CVE-2026-69844, CVE-2026-69814, CVE-2026-69731, CVE-2026-69706, CVE-2026-69779, CVE-2026-69895, CVE-2026-69792, CVE-2026-69853, CVE-2026-69761, CVE-2026-69785, CVE-2026-69818, CVE-2026-69786, CVE-2026-69874, CVE-2026-70565, CVE-2026-70574, CVE-2026-70569, CVE-2026-70575, CVE-2026-71349, CVE-2026-72927, CVE-2026-72952, CVE-2026-72942, CVE-2026-72966, CVE-2026-72967, CVE-2026-69426, CVE-2026-69564, CVE-2026-72985, CVE-2026-73019, CVE-2026-78451, CVE-2026-78452, CVE-2026-83940, CVE-2026-69598, CVE-2026-83995, CVE-2026-83501, CVE-2026-83498.

CVE-2026-69458

CVE-2026-69458 is an out-of-bounds read vulnerability in Windows BitLocker that enables an authorized attacker to achieve privilege escalation via a network connection.

Affected products:

BitLocker

Source: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-69458

CVE-2026-69448

CVE-2026-69448 describes a race condition vulnerability in the Windows Bluetooth Service that enables an authorized local attacker to elevate their privileges. Detection engineers should monitor for unauthorized modifications to system-level Bluetooth service processes or suspicious activity occurring within the context of the Bluetooth service account.

Affected products:

Windows

Source: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-69448

Related in this roundup: CVE-2026-81963, CVE-2026-85880, CVE-2026-69496, CVE-2026-69586, CVE-2026-69768, CVE-2026-73025, CVE-2026-56172, CVE-2026-68832, CVE-2026-68834, CVE-2026-68838, CVE-2026-68841, CVE-2026-68875, CVE-2026-68877, CVE-2026-68880, CVE-2026-69265, CVE-2026-69270, CVE-2026-69274, CVE-2026-69275, CVE-2026-69280, CVE-2026-69283, CVE-2026-69284, CVE-2026-69289, CVE-2026-69296, CVE-2026-69300, CVE-2026-69301, CVE-2026-69307, CVE-2026-69312, CVE-2026-69314, CVE-2026-69332, CVE-2026-69333, CVE-2026-69335, CVE-2026-68833, CVE-2026-68851, CVE-2026-69366, CVE-2026-69337, CVE-2026-69347, CVE-2026-69379, CVE-2026-69390, CVE-2026-69401, CVE-2026-69413, CVE-2026-69420, CVE-2026-69429, CVE-2026-69455, CVE-2026-69532, CVE-2026-69472, CVE-2026-69479, CVE-2026-69531, CVE-2026-69517, CVE-2026-69505, CVE-2026-69504, CVE-2026-69527, CVE-2026-69549, CVE-2026-69588, CVE-2026-69609, CVE-2026-69648, CVE-2026-69689, CVE-2026-69790, CVE-2026-69638, CVE-2026-69859, CVE-2026-69717, CVE-2026-69711, CVE-2026-69875, CVE-2026-69889, CVE-2026-69757, CVE-2026-69741, CVE-2026-69762, CVE-2026-69744, CVE-2026-69832, CVE-2026-69691, CVE-2026-69808, CVE-2026-69775, CVE-2026-69822, CVE-2026-69770, CVE-2026-69676, CVE-2026-70289, CVE-2026-70563, CVE-2026-71329, CVE-2026-71332, CVE-2026-71350, CVE-2026-71348, CVE-2026-71345, CVE-2026-69469, CVE-2026-69501, CVE-2026-69548, CVE-2026-69846, CVE-2026-70283, CVE-2026-72981, CVE-2026-77491, CVE-2026-77492, CVE-2026-77503, CVE-2026-80093, CVE-2026-72949, CVE-2026-70019, CVE-2026-72940, CVE-2026-69573, CVE-2026-70290, CVE-2026-83991, CVE-2026-83999, CVE-2026-69321, CVE-2026-69316, CVE-2026-69340, CVE-2026-69348, CVE-2026-69350, CVE-2026-69353, CVE-2026-69357, CVE-2026-69393, CVE-2026-69410, CVE-2026-69421, CVE-2026-69428, CVE-2026-69425, CVE-2026-69427, CVE-2026-69434, CVE-2026-69456, CVE-2026-69459, CVE-2026-69478, CVE-2026-69561, CVE-2026-69512, CVE-2026-69498, CVE-2026-69571, CVE-2026-69535, CVE-2026-69538, CVE-2026-69591, CVE-2026-69566, CVE-2026-69567, CVE-2026-69584, CVE-2026-69617, CVE-2026-69630, CVE-2026-69610, CVE-2026-69881, CVE-2026-69680, CVE-2026-69619, CVE-2026-69685, CVE-2026-69643, CVE-2026-69687, CVE-2026-69791, CVE-2026-69707, CVE-2026-69652, CVE-2026-69834, CVE-2026-69709, CVE-2026-69844, CVE-2026-69814, CVE-2026-69731, CVE-2026-69706, CVE-2026-69779, CVE-2026-69895, CVE-2026-69792, CVE-2026-69853, CVE-2026-69761, CVE-2026-69785, CVE-2026-69818, CVE-2026-69786, CVE-2026-69874, CVE-2026-70565, CVE-2026-70574, CVE-2026-70569, CVE-2026-70575, CVE-2026-71349, CVE-2026-72927, CVE-2026-72952, CVE-2026-72942, CVE-2026-72966, CVE-2026-72967, CVE-2026-69426, CVE-2026-69564, CVE-2026-72985, CVE-2026-73019, CVE-2026-78451, CVE-2026-78452, CVE-2026-83940, CVE-2026-69598, CVE-2026-83995, CVE-2026-83501, CVE-2026-83498.

CVE-2026-69432

A heap-based buffer overflow vulnerability in the Windows Volume Manager Driver allows an authorized local attacker to achieve privilege escalation by exploiting the vulnerable driver component.

Affected products:

Volume Manager Driver

Source: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-69432

Related in this roundup: CVE-2026-69418.

CVE-2026-69513

A heap-based buffer overflow vulnerability exists in Windows Error Reporting that can be exploited by a locally authorized attacker to gain elevated privileges on the system.

Affected products:

Windows Error Reporting

Source: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-69513

Related in this roundup: CVE-2026-68894, CVE-2026-69362, CVE-2026-69436, CVE-2026-69450, CVE-2026-69684, CVE-2026-69896, CVE-2026-83996, CVE-2026-69433, CVE-2026-69462, CVE-2026-69482, CVE-2026-69612.

CVE-2026-69455

CVE-2026-69455 describes a heap-based buffer overflow vulnerability within the Windows Remote Access Connection Manager that enables a local, authorized attacker to achieve privilege escalation.

Affected products:

Windows

Source: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-69455

Related in this roundup: CVE-2026-81963, CVE-2026-85880, CVE-2026-69496, CVE-2026-69586, CVE-2026-69768, CVE-2026-73025, CVE-2026-56172, CVE-2026-68832, CVE-2026-68834, CVE-2026-68838, CVE-2026-68841, CVE-2026-68875, CVE-2026-68877, CVE-2026-68880, CVE-2026-69265, CVE-2026-69270, CVE-2026-69274, CVE-2026-69275, CVE-2026-69280, CVE-2026-69283, CVE-2026-69284, CVE-2026-69289, CVE-2026-69296, CVE-2026-69300, CVE-2026-69301, CVE-2026-69307, CVE-2026-69312, CVE-2026-69314, CVE-2026-69332, CVE-2026-69333, CVE-2026-69335, CVE-2026-68833, CVE-2026-68851, CVE-2026-69366, CVE-2026-69337, CVE-2026-69347, CVE-2026-69379, CVE-2026-69390, CVE-2026-69401, CVE-2026-69413, CVE-2026-69420, CVE-2026-69429, CVE-2026-69448, CVE-2026-69532, CVE-2026-69472, CVE-2026-69479, CVE-2026-69531, CVE-2026-69517, CVE-2026-69505, CVE-2026-69504, CVE-2026-69527, CVE-2026-69549, CVE-2026-69588, CVE-2026-69609, CVE-2026-69648, CVE-2026-69689, CVE-2026-69790, CVE-2026-69638, CVE-2026-69859, CVE-2026-69717, CVE-2026-69711, CVE-2026-69875, CVE-2026-69889, CVE-2026-69757, CVE-2026-69741, CVE-2026-69762, CVE-2026-69744, CVE-2026-69832, CVE-2026-69691, CVE-2026-69808, CVE-2026-69775, CVE-2026-69822, CVE-2026-69770, CVE-2026-69676, CVE-2026-70289, CVE-2026-70563, CVE-2026-71329, CVE-2026-71332, CVE-2026-71350, CVE-2026-71348, CVE-2026-71345, CVE-2026-69469, CVE-2026-69501, CVE-2026-69548, CVE-2026-69846, CVE-2026-70283, CVE-2026-72981, CVE-2026-77491, CVE-2026-77492, CVE-2026-77503, CVE-2026-80093, CVE-2026-72949, CVE-2026-70019, CVE-2026-72940, CVE-2026-69573, CVE-2026-70290, CVE-2026-83991, CVE-2026-83999, CVE-2026-69321, CVE-2026-69316, CVE-2026-69340, CVE-2026-69348, CVE-2026-69350, CVE-2026-69353, CVE-2026-69357, CVE-2026-69393, CVE-2026-69410, CVE-2026-69421, CVE-2026-69428, CVE-2026-69425, CVE-2026-69427, CVE-2026-69434, CVE-2026-69456, CVE-2026-69459, CVE-2026-69478, CVE-2026-69561, CVE-2026-69512, CVE-2026-69498, CVE-2026-69571, CVE-2026-69535, CVE-2026-69538, CVE-2026-69591, CVE-2026-69566, CVE-2026-69567, CVE-2026-69584, CVE-2026-69617, CVE-2026-69630, CVE-2026-69610, CVE-2026-69881, CVE-2026-69680, CVE-2026-69619, CVE-2026-69685, CVE-2026-69643, CVE-2026-69687, CVE-2026-69791, CVE-2026-69707, CVE-2026-69652, CVE-2026-69834, CVE-2026-69709, CVE-2026-69844, CVE-2026-69814, CVE-2026-69731, CVE-2026-69706, CVE-2026-69779, CVE-2026-69895, CVE-2026-69792, CVE-2026-69853, CVE-2026-69761, CVE-2026-69785, CVE-2026-69818, CVE-2026-69786, CVE-2026-69874, CVE-2026-70565, CVE-2026-70574, CVE-2026-70569, CVE-2026-70575, CVE-2026-71349, CVE-2026-72927, CVE-2026-72952, CVE-2026-72942, CVE-2026-72966, CVE-2026-72967, CVE-2026-69426, CVE-2026-69564, CVE-2026-72985, CVE-2026-73019, CVE-2026-78451, CVE-2026-78452, CVE-2026-83940, CVE-2026-69598, CVE-2026-83995, CVE-2026-83501, CVE-2026-83498.

CVE-2026-69532

CVE-2026-69532 is an out-of-bounds read vulnerability in the Windows NTFS driver. An authenticated local attacker can leverage this flaw to elevate their privileges on the target system.

Affected products:

Windows

Source: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-69532

Related in this roundup: CVE-2026-81963, CVE-2026-85880, CVE-2026-69496, CVE-2026-69586, CVE-2026-69768, CVE-2026-73025, CVE-2026-56172, CVE-2026-68832, CVE-2026-68834, CVE-2026-68838, CVE-2026-68841, CVE-2026-68875, CVE-2026-68877, CVE-2026-68880, CVE-2026-69265, CVE-2026-69270, CVE-2026-69274, CVE-2026-69275, CVE-2026-69280, CVE-2026-69283, CVE-2026-69284, CVE-2026-69289, CVE-2026-69296, CVE-2026-69300, CVE-2026-69301, CVE-2026-69307, CVE-2026-69312, CVE-2026-69314, CVE-2026-69332, CVE-2026-69333, CVE-2026-69335, CVE-2026-68833, CVE-2026-68851, CVE-2026-69366, CVE-2026-69337, CVE-2026-69347, CVE-2026-69379, CVE-2026-69390, CVE-2026-69401, CVE-2026-69413, CVE-2026-69420, CVE-2026-69429, CVE-2026-69448, CVE-2026-69455, CVE-2026-69472, CVE-2026-69479, CVE-2026-69531, CVE-2026-69517, CVE-2026-69505, CVE-2026-69504, CVE-2026-69527, CVE-2026-69549, CVE-2026-69588, CVE-2026-69609, CVE-2026-69648, CVE-2026-69689, CVE-2026-69790, CVE-2026-69638, CVE-2026-69859, CVE-2026-69717, CVE-2026-69711, CVE-2026-69875, CVE-2026-69889, CVE-2026-69757, CVE-2026-69741, CVE-2026-69762, CVE-2026-69744, CVE-2026-69832, CVE-2026-69691, CVE-2026-69808, CVE-2026-69775, CVE-2026-69822, CVE-2026-69770, CVE-2026-69676, CVE-2026-70289, CVE-2026-70563, CVE-2026-71329, CVE-2026-71332, CVE-2026-71350, CVE-2026-71348, CVE-2026-71345, CVE-2026-69469, CVE-2026-69501, CVE-2026-69548, CVE-2026-69846, CVE-2026-70283, CVE-2026-72981, CVE-2026-77491, CVE-2026-77492, CVE-2026-77503, CVE-2026-80093, CVE-2026-72949, CVE-2026-70019, CVE-2026-72940, CVE-2026-69573, CVE-2026-70290, CVE-2026-83991, CVE-2026-83999, CVE-2026-69321, CVE-2026-69316, CVE-2026-69340, CVE-2026-69348, CVE-2026-69350, CVE-2026-69353, CVE-2026-69357, CVE-2026-69393, CVE-2026-69410, CVE-2026-69421, CVE-2026-69428, CVE-2026-69425, CVE-2026-69427, CVE-2026-69434, CVE-2026-69456, CVE-2026-69459, CVE-2026-69478, CVE-2026-69561, CVE-2026-69512, CVE-2026-69498, CVE-2026-69571, CVE-2026-69535, CVE-2026-69538, CVE-2026-69591, CVE-2026-69566, CVE-2026-69567, CVE-2026-69584, CVE-2026-69617, CVE-2026-69630, CVE-2026-69610, CVE-2026-69881, CVE-2026-69680, CVE-2026-69619, CVE-2026-69685, CVE-2026-69643, CVE-2026-69687, CVE-2026-69791, CVE-2026-69707, CVE-2026-69652, CVE-2026-69834, CVE-2026-69709, CVE-2026-69844, CVE-2026-69814, CVE-2026-69731, CVE-2026-69706, CVE-2026-69779, CVE-2026-69895, CVE-2026-69792, CVE-2026-69853, CVE-2026-69761, CVE-2026-69785, CVE-2026-69818, CVE-2026-69786, CVE-2026-69874, CVE-2026-70565, CVE-2026-70574, CVE-2026-70569, CVE-2026-70575, CVE-2026-71349, CVE-2026-72927, CVE-2026-72952, CVE-2026-72942, CVE-2026-72966, CVE-2026-72967, CVE-2026-69426, CVE-2026-69564, CVE-2026-72985, CVE-2026-73019, CVE-2026-78451, CVE-2026-78452, CVE-2026-83940, CVE-2026-69598, CVE-2026-83995, CVE-2026-83501, CVE-2026-83498.

CVE-2026-69451

A use-after-free vulnerability in Windows Management Instrumentation (WMI) allows a local, authorized attacker to achieve privilege escalation via a network-based attack vector.

Affected products:

Windows Management Instrumentation

Source: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-69451

Related in this roundup: CVE-2026-69349, CVE-2026-70582, CVE-2026-77905.

CVE-2026-69450

CVE-2026-69450 is a privilege escalation vulnerability in the Windows Error Reporting component, stemming from an out-of-bounds read flaw. This vulnerability allows an attacker who already has local access to the system to escalate their privileges.

Affected products:

Windows Error Reporting

Source: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-69450

Related in this roundup: CVE-2026-68894, CVE-2026-69362, CVE-2026-69436, CVE-2026-69513, CVE-2026-69684, CVE-2026-69896, CVE-2026-83996, CVE-2026-69433, CVE-2026-69462, CVE-2026-69482, CVE-2026-69612.

CVE-2026-69485

CVE-2026-69485 describes a remote code execution vulnerability in the Microsoft Remote Desktop Client caused by the use of an uninitialized resource. An authorized attacker can exploit this flaw to execute arbitrary code over a network by interacting with the client.

Affected products:

Remote Desktop Client

Source: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-69485

Related in this roundup: CVE-2026-68828, CVE-2026-77896, CVE-2026-78463, CVE-2026-80074, CVE-2026-80077, CVE-2026-83998, CVE-2026-69317, CVE-2026-69358.

CVE-2026-69461

CVE-2026-69461 is a stack-based buffer overflow vulnerability in the Windows NTFS driver that allows a remote, unauthorized attacker to achieve remote code execution (RCE) by sending specially crafted network packets to a target system.

Affected products:

Windows NTFS

Source: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-69461

Related in this roundup: CVE-2026-72935.

CVE-2026-69472

CVE-2026-69472 is a local privilege escalation vulnerability in the Windows Human Interface device stack caused by a use-after-free flaw. An authorized attacker can exploit this memory corruption to execute arbitrary code with elevated permissions.

Affected products:

Windows

Source: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-69472

Related in this roundup: CVE-2026-81963, CVE-2026-85880, CVE-2026-69496, CVE-2026-69586, CVE-2026-69768, CVE-2026-73025, CVE-2026-56172, CVE-2026-68832, CVE-2026-68834, CVE-2026-68838, CVE-2026-68841, CVE-2026-68875, CVE-2026-68877, CVE-2026-68880, CVE-2026-69265, CVE-2026-69270, CVE-2026-69274, CVE-2026-69275, CVE-2026-69280, CVE-2026-69283, CVE-2026-69284, CVE-2026-69289, CVE-2026-69296, CVE-2026-69300, CVE-2026-69301, CVE-2026-69307, CVE-2026-69312, CVE-2026-69314, CVE-2026-69332, CVE-2026-69333, CVE-2026-69335, CVE-2026-68833, CVE-2026-68851, CVE-2026-69366, CVE-2026-69337, CVE-2026-69347, CVE-2026-69379, CVE-2026-69390, CVE-2026-69401, CVE-2026-69413, CVE-2026-69420, CVE-2026-69429, CVE-2026-69448, CVE-2026-69455, CVE-2026-69532, CVE-2026-69479, CVE-2026-69531, CVE-2026-69517, CVE-2026-69505, CVE-2026-69504, CVE-2026-69527, CVE-2026-69549, CVE-2026-69588, CVE-2026-69609, CVE-2026-69648, CVE-2026-69689, CVE-2026-69790, CVE-2026-69638, CVE-2026-69859, CVE-2026-69717, CVE-2026-69711, CVE-2026-69875, CVE-2026-69889, CVE-2026-69757, CVE-2026-69741, CVE-2026-69762, CVE-2026-69744, CVE-2026-69832, CVE-2026-69691, CVE-2026-69808, CVE-2026-69775, CVE-2026-69822, CVE-2026-69770, CVE-2026-69676, CVE-2026-70289, CVE-2026-70563, CVE-2026-71329, CVE-2026-71332, CVE-2026-71350, CVE-2026-71348, CVE-2026-71345, CVE-2026-69469, CVE-2026-69501, CVE-2026-69548, CVE-2026-69846, CVE-2026-70283, CVE-2026-72981, CVE-2026-77491, CVE-2026-77492, CVE-2026-77503, CVE-2026-80093, CVE-2026-72949, CVE-2026-70019, CVE-2026-72940, CVE-2026-69573, CVE-2026-70290, CVE-2026-83991, CVE-2026-83999, CVE-2026-69321, CVE-2026-69316, CVE-2026-69340, CVE-2026-69348, CVE-2026-69350, CVE-2026-69353, CVE-2026-69357, CVE-2026-69393, CVE-2026-69410, CVE-2026-69421, CVE-2026-69428, CVE-2026-69425, CVE-2026-69427, CVE-2026-69434, CVE-2026-69456, CVE-2026-69459, CVE-2026-69478, CVE-2026-69561, CVE-2026-69512, CVE-2026-69498, CVE-2026-69571, CVE-2026-69535, CVE-2026-69538, CVE-2026-69591, CVE-2026-69566, CVE-2026-69567, CVE-2026-69584, CVE-2026-69617, CVE-2026-69630, CVE-2026-69610, CVE-2026-69881, CVE-2026-69680, CVE-2026-69619, CVE-2026-69685, CVE-2026-69643, CVE-2026-69687, CVE-2026-69791, CVE-2026-69707, CVE-2026-69652, CVE-2026-69834, CVE-2026-69709, CVE-2026-69844, CVE-2026-69814, CVE-2026-69731, CVE-2026-69706, CVE-2026-69779, CVE-2026-69895, CVE-2026-69792, CVE-2026-69853, CVE-2026-69761, CVE-2026-69785, CVE-2026-69818, CVE-2026-69786, CVE-2026-69874, CVE-2026-70565, CVE-2026-70574, CVE-2026-70569, CVE-2026-70575, CVE-2026-71349, CVE-2026-72927, CVE-2026-72952, CVE-2026-72942, CVE-2026-72966, CVE-2026-72967, CVE-2026-69426, CVE-2026-69564, CVE-2026-72985, CVE-2026-73019, CVE-2026-78451, CVE-2026-78452, CVE-2026-83940, CVE-2026-69598, CVE-2026-83995, CVE-2026-83501, CVE-2026-83498.

CVE-2026-69468

A heap-based buffer overflow vulnerability in the Windows Volume Manager Extension Driver allows an authorized local attacker to achieve privilege escalation by exploiting the vulnerable driver component.

Affected products:

Windows Volume Manager Extension Driver

Source: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-69468

Related in this roundup: CVE-2026-69291, CVE-2026-69334, CVE-2026-69582, CVE-2026-77904.

CVE-2026-69470

A use-after-free vulnerability in the Windows Connected User Experiences and Telemetry component allows a locally authenticated attacker to escalate their privileges to a higher level of authority on the target system.

Affected products:

Connected User Experiences and Telemetry

Source: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-69470

Related in this roundup: CVE-2026-69625.

CVE-2026-69473

CVE-2026-69473 is a use-after-free vulnerability within the Windows Kernel that allows a locally authenticated attacker to achieve privilege escalation.

Affected products:

Windows Kernel

Source: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-69473

Related in this roundup: CVE-2026-68846, CVE-2026-68884, CVE-2026-85360, CVE-2026-69406, CVE-2026-69723, CVE-2026-83942, CVE-2026-69466, CVE-2026-69578, CVE-2026-69669.

CVE-2026-69479

A heap-based buffer overflow vulnerability exists in the Windows NTFS implementation, which can be exploited by an unauthorized local attacker to execute arbitrary code with elevated privileges.

Affected products:

Windows

Source: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-69479

Related in this roundup: CVE-2026-81963, CVE-2026-85880, CVE-2026-69496, CVE-2026-69586, CVE-2026-69768, CVE-2026-73025, CVE-2026-56172, CVE-2026-68832, CVE-2026-68834, CVE-2026-68838, CVE-2026-68841, CVE-2026-68875, CVE-2026-68877, CVE-2026-68880, CVE-2026-69265, CVE-2026-69270, CVE-2026-69274, CVE-2026-69275, CVE-2026-69280, CVE-2026-69283, CVE-2026-69284, CVE-2026-69289, CVE-2026-69296, CVE-2026-69300, CVE-2026-69301, CVE-2026-69307, CVE-2026-69312, CVE-2026-69314, CVE-2026-69332, CVE-2026-69333, CVE-2026-69335, CVE-2026-68833, CVE-2026-68851, CVE-2026-69366, CVE-2026-69337, CVE-2026-69347, CVE-2026-69379, CVE-2026-69390, CVE-2026-69401, CVE-2026-69413, CVE-2026-69420, CVE-2026-69429, CVE-2026-69448, CVE-2026-69455, CVE-2026-69532, CVE-2026-69472, CVE-2026-69531, CVE-2026-69517, CVE-2026-69505, CVE-2026-69504, CVE-2026-69527, CVE-2026-69549, CVE-2026-69588, CVE-2026-69609, CVE-2026-69648, CVE-2026-69689, CVE-2026-69790, CVE-2026-69638, CVE-2026-69859, CVE-2026-69717, CVE-2026-69711, CVE-2026-69875, CVE-2026-69889, CVE-2026-69757, CVE-2026-69741, CVE-2026-69762, CVE-2026-69744, CVE-2026-69832, CVE-2026-69691, CVE-2026-69808, CVE-2026-69775, CVE-2026-69822, CVE-2026-69770, CVE-2026-69676, CVE-2026-70289, CVE-2026-70563, CVE-2026-71329, CVE-2026-71332, CVE-2026-71350, CVE-2026-71348, CVE-2026-71345, CVE-2026-69469, CVE-2026-69501, CVE-2026-69548, CVE-2026-69846, CVE-2026-70283, CVE-2026-72981, CVE-2026-77491, CVE-2026-77492, CVE-2026-77503, CVE-2026-80093, CVE-2026-72949, CVE-2026-70019, CVE-2026-72940, CVE-2026-69573, CVE-2026-70290, CVE-2026-83991, CVE-2026-83999, CVE-2026-69321, CVE-2026-69316, CVE-2026-69340, CVE-2026-69348, CVE-2026-69350, CVE-2026-69353, CVE-2026-69357, CVE-2026-69393, CVE-2026-69410, CVE-2026-69421, CVE-2026-69428, CVE-2026-69425, CVE-2026-69427, CVE-2026-69434, CVE-2026-69456, CVE-2026-69459, CVE-2026-69478, CVE-2026-69561, CVE-2026-69512, CVE-2026-69498, CVE-2026-69571, CVE-2026-69535, CVE-2026-69538, CVE-2026-69591, CVE-2026-69566, CVE-2026-69567, CVE-2026-69584, CVE-2026-69617, CVE-2026-69630, CVE-2026-69610, CVE-2026-69881, CVE-2026-69680, CVE-2026-69619, CVE-2026-69685, CVE-2026-69643, CVE-2026-69687, CVE-2026-69791, CVE-2026-69707, CVE-2026-69652, CVE-2026-69834, CVE-2026-69709, CVE-2026-69844, CVE-2026-69814, CVE-2026-69731, CVE-2026-69706, CVE-2026-69779, CVE-2026-69895, CVE-2026-69792, CVE-2026-69853, CVE-2026-69761, CVE-2026-69785, CVE-2026-69818, CVE-2026-69786, CVE-2026-69874, CVE-2026-70565, CVE-2026-70574, CVE-2026-70569, CVE-2026-70575, CVE-2026-71349, CVE-2026-72927, CVE-2026-72952, CVE-2026-72942, CVE-2026-72966, CVE-2026-72967, CVE-2026-69426, CVE-2026-69564, CVE-2026-72985, CVE-2026-73019, CVE-2026-78451, CVE-2026-78452, CVE-2026-83940, CVE-2026-69598, CVE-2026-83995, CVE-2026-83501, CVE-2026-83498.

CVE-2026-69481

CVE-2026-69481 is a heap-based buffer overflow vulnerability within Windows Enterprise App Management. An authenticated attacker can exploit this flaw over a network to achieve privilege escalation on a targeted Windows system.

Affected products:

Windows Enterprise App Management

Source: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-69481

Related in this roundup: CVE-2026-69907.

CVE-2026-69494

CVE-2026-69494 describes an out-of-bounds read vulnerability in the Windows Event Logging Service that enables unauthorized remote code execution over a network. This flaw represents a critical security risk as it allows an attacker to gain execution capabilities on affected systems without prior authentication.

Affected products:

Windows Event Logging Service

Source: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-69494

Related in this roundup: CVE-2026-69493, CVE-2026-69495.

CVE-2026-69495

CVE-2026-69495 is a heap-based buffer overflow vulnerability within the Windows Event Logging Service. An unauthorized remote attacker can leverage this flaw to achieve remote code execution (RCE) on affected Windows systems via network exploitation.

Affected products:

Windows Event Logging Service

Source: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-69495

Related in this roundup: CVE-2026-69493, CVE-2026-69494.

CVE-2026-69531

A vulnerability in Microsoft Windows Speech enables a local, authorized attacker to exploit a confused deputy scenario, leading to unauthorized tampering within the application.

Affected products:

Windows

Source: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-69531

Related in this roundup: CVE-2026-81963, CVE-2026-85880, CVE-2026-69496, CVE-2026-69586, CVE-2026-69768, CVE-2026-73025, CVE-2026-56172, CVE-2026-68832, CVE-2026-68834, CVE-2026-68838, CVE-2026-68841, CVE-2026-68875, CVE-2026-68877, CVE-2026-68880, CVE-2026-69265, CVE-2026-69270, CVE-2026-69274, CVE-2026-69275, CVE-2026-69280, CVE-2026-69283, CVE-2026-69284, CVE-2026-69289, CVE-2026-69296, CVE-2026-69300, CVE-2026-69301, CVE-2026-69307, CVE-2026-69312, CVE-2026-69314, CVE-2026-69332, CVE-2026-69333, CVE-2026-69335, CVE-2026-68833, CVE-2026-68851, CVE-2026-69366, CVE-2026-69337, CVE-2026-69347, CVE-2026-69379, CVE-2026-69390, CVE-2026-69401, CVE-2026-69413, CVE-2026-69420, CVE-2026-69429, CVE-2026-69448, CVE-2026-69455, CVE-2026-69532, CVE-2026-69472, CVE-2026-69479, CVE-2026-69517, CVE-2026-69505, CVE-2026-69504, CVE-2026-69527, CVE-2026-69549, CVE-2026-69588, CVE-2026-69609, CVE-2026-69648, CVE-2026-69689, CVE-2026-69790, CVE-2026-69638, CVE-2026-69859, CVE-2026-69717, CVE-2026-69711, CVE-2026-69875, CVE-2026-69889, CVE-2026-69757, CVE-2026-69741, CVE-2026-69762, CVE-2026-69744, CVE-2026-69832, CVE-2026-69691, CVE-2026-69808, CVE-2026-69775, CVE-2026-69822, CVE-2026-69770, CVE-2026-69676, CVE-2026-70289, CVE-2026-70563, CVE-2026-71329, CVE-2026-71332, CVE-2026-71350, CVE-2026-71348, CVE-2026-71345, CVE-2026-69469, CVE-2026-69501, CVE-2026-69548, CVE-2026-69846, CVE-2026-70283, CVE-2026-72981, CVE-2026-77491, CVE-2026-77492, CVE-2026-77503, CVE-2026-80093, CVE-2026-72949, CVE-2026-70019, CVE-2026-72940, CVE-2026-69573, CVE-2026-70290, CVE-2026-83991, CVE-2026-83999, CVE-2026-69321, CVE-2026-69316, CVE-2026-69340, CVE-2026-69348, CVE-2026-69350, CVE-2026-69353, CVE-2026-69357, CVE-2026-69393, CVE-2026-69410, CVE-2026-69421, CVE-2026-69428, CVE-2026-69425, CVE-2026-69427, CVE-2026-69434, CVE-2026-69456, CVE-2026-69459, CVE-2026-69478, CVE-2026-69561, CVE-2026-69512, CVE-2026-69498, CVE-2026-69571, CVE-2026-69535, CVE-2026-69538, CVE-2026-69591, CVE-2026-69566, CVE-2026-69567, CVE-2026-69584, CVE-2026-69617, CVE-2026-69630, CVE-2026-69610, CVE-2026-69881, CVE-2026-69680, CVE-2026-69619, CVE-2026-69685, CVE-2026-69643, CVE-2026-69687, CVE-2026-69791, CVE-2026-69707, CVE-2026-69652, CVE-2026-69834, CVE-2026-69709, CVE-2026-69844, CVE-2026-69814, CVE-2026-69731, CVE-2026-69706, CVE-2026-69779, CVE-2026-69895, CVE-2026-69792, CVE-2026-69853, CVE-2026-69761, CVE-2026-69785, CVE-2026-69818, CVE-2026-69786, CVE-2026-69874, CVE-2026-70565, CVE-2026-70574, CVE-2026-70569, CVE-2026-70575, CVE-2026-71349, CVE-2026-72927, CVE-2026-72952, CVE-2026-72942, CVE-2026-72966, CVE-2026-72967, CVE-2026-69426, CVE-2026-69564, CVE-2026-72985, CVE-2026-73019, CVE-2026-78451, CVE-2026-78452, CVE-2026-83940, CVE-2026-69598, CVE-2026-83995, CVE-2026-83501, CVE-2026-83498.

CVE-2026-69517

CVE-2026-69517 describes a use-after-free vulnerability within the Windows Wireless Networking component. An authorized local attacker can exploit this flaw to execute code or operations with elevated privileges on the affected Windows system.

Affected products:

Windows

Source: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-69517

Related in this roundup: CVE-2026-81963, CVE-2026-85880, CVE-2026-69496, CVE-2026-69586, CVE-2026-69768, CVE-2026-73025, CVE-2026-56172, CVE-2026-68832, CVE-2026-68834, CVE-2026-68838, CVE-2026-68841, CVE-2026-68875, CVE-2026-68877, CVE-2026-68880, CVE-2026-69265, CVE-2026-69270, CVE-2026-69274, CVE-2026-69275, CVE-2026-69280, CVE-2026-69283, CVE-2026-69284, CVE-2026-69289, CVE-2026-69296, CVE-2026-69300, CVE-2026-69301, CVE-2026-69307, CVE-2026-69312, CVE-2026-69314, CVE-2026-69332, CVE-2026-69333, CVE-2026-69335, CVE-2026-68833, CVE-2026-68851, CVE-2026-69366, CVE-2026-69337, CVE-2026-69347, CVE-2026-69379, CVE-2026-69390, CVE-2026-69401, CVE-2026-69413, CVE-2026-69420, CVE-2026-69429, CVE-2026-69448, CVE-2026-69455, CVE-2026-69532, CVE-2026-69472, CVE-2026-69479, CVE-2026-69531, CVE-2026-69505, CVE-2026-69504, CVE-2026-69527, CVE-2026-69549, CVE-2026-69588, CVE-2026-69609, CVE-2026-69648, CVE-2026-69689, CVE-2026-69790, CVE-2026-69638, CVE-2026-69859, CVE-2026-69717, CVE-2026-69711, CVE-2026-69875, CVE-2026-69889, CVE-2026-69757, CVE-2026-69741, CVE-2026-69762, CVE-2026-69744, CVE-2026-69832, CVE-2026-69691, CVE-2026-69808, CVE-2026-69775, CVE-2026-69822, CVE-2026-69770, CVE-2026-69676, CVE-2026-70289, CVE-2026-70563, CVE-2026-71329, CVE-2026-71332, CVE-2026-71350, CVE-2026-71348, CVE-2026-71345, CVE-2026-69469, CVE-2026-69501, CVE-2026-69548, CVE-2026-69846, CVE-2026-70283, CVE-2026-72981, CVE-2026-77491, CVE-2026-77492, CVE-2026-77503, CVE-2026-80093, CVE-2026-72949, CVE-2026-70019, CVE-2026-72940, CVE-2026-69573, CVE-2026-70290, CVE-2026-83991, CVE-2026-83999, CVE-2026-69321, CVE-2026-69316, CVE-2026-69340, CVE-2026-69348, CVE-2026-69350, CVE-2026-69353, CVE-2026-69357, CVE-2026-69393, CVE-2026-69410, CVE-2026-69421, CVE-2026-69428, CVE-2026-69425, CVE-2026-69427, CVE-2026-69434, CVE-2026-69456, CVE-2026-69459, CVE-2026-69478, CVE-2026-69561, CVE-2026-69512, CVE-2026-69498, CVE-2026-69571, CVE-2026-69535, CVE-2026-69538, CVE-2026-69591, CVE-2026-69566, CVE-2026-69567, CVE-2026-69584, CVE-2026-69617, CVE-2026-69630, CVE-2026-69610, CVE-2026-69881, CVE-2026-69680, CVE-2026-69619, CVE-2026-69685, CVE-2026-69643, CVE-2026-69687, CVE-2026-69791, CVE-2026-69707, CVE-2026-69652, CVE-2026-69834, CVE-2026-69709, CVE-2026-69844, CVE-2026-69814, CVE-2026-69731, CVE-2026-69706, CVE-2026-69779, CVE-2026-69895, CVE-2026-69792, CVE-2026-69853, CVE-2026-69761, CVE-2026-69785, CVE-2026-69818, CVE-2026-69786, CVE-2026-69874, CVE-2026-70565, CVE-2026-70574, CVE-2026-70569, CVE-2026-70575, CVE-2026-71349, CVE-2026-72927, CVE-2026-72952, CVE-2026-72942, CVE-2026-72966, CVE-2026-72967, CVE-2026-69426, CVE-2026-69564, CVE-2026-72985, CVE-2026-73019, CVE-2026-78451, CVE-2026-78452, CVE-2026-83940, CVE-2026-69598, CVE-2026-83995, CVE-2026-83501, CVE-2026-83498.

CVE-2026-69500

CVE-2026-69500 is a use-after-free vulnerability within the Windows Image Acquisition service that allows an authorized local attacker to gain elevated privileges on the target system.

Affected products:

Windows Image Acquisition

Source: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-69500

Related in this roundup: CVE-2026-69341, CVE-2026-69483, CVE-2026-69613.

CVE-2026-69505

CVE-2026-69505 is an out-of-bounds read vulnerability in the Windows NTFS driver that permits an authenticated attacker to perform a privilege escalation attack over a network connection.

Affected products:

Windows

Source: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-69505

Related in this roundup: CVE-2026-81963, CVE-2026-85880, CVE-2026-69496, CVE-2026-69586, CVE-2026-69768, CVE-2026-73025, CVE-2026-56172, CVE-2026-68832, CVE-2026-68834, CVE-2026-68838, CVE-2026-68841, CVE-2026-68875, CVE-2026-68877, CVE-2026-68880, CVE-2026-69265, CVE-2026-69270, CVE-2026-69274, CVE-2026-69275, CVE-2026-69280, CVE-2026-69283, CVE-2026-69284, CVE-2026-69289, CVE-2026-69296, CVE-2026-69300, CVE-2026-69301, CVE-2026-69307, CVE-2026-69312, CVE-2026-69314, CVE-2026-69332, CVE-2026-69333, CVE-2026-69335, CVE-2026-68833, CVE-2026-68851, CVE-2026-69366, CVE-2026-69337, CVE-2026-69347, CVE-2026-69379, CVE-2026-69390, CVE-2026-69401, CVE-2026-69413, CVE-2026-69420, CVE-2026-69429, CVE-2026-69448, CVE-2026-69455, CVE-2026-69532, CVE-2026-69472, CVE-2026-69479, CVE-2026-69531, CVE-2026-69517, CVE-2026-69504, CVE-2026-69527, CVE-2026-69549, CVE-2026-69588, CVE-2026-69609, CVE-2026-69648, CVE-2026-69689, CVE-2026-69790, CVE-2026-69638, CVE-2026-69859, CVE-2026-69717, CVE-2026-69711, CVE-2026-69875, CVE-2026-69889, CVE-2026-69757, CVE-2026-69741, CVE-2026-69762, CVE-2026-69744, CVE-2026-69832, CVE-2026-69691, CVE-2026-69808, CVE-2026-69775, CVE-2026-69822, CVE-2026-69770, CVE-2026-69676, CVE-2026-70289, CVE-2026-70563, CVE-2026-71329, CVE-2026-71332, CVE-2026-71350, CVE-2026-71348, CVE-2026-71345, CVE-2026-69469, CVE-2026-69501, CVE-2026-69548, CVE-2026-69846, CVE-2026-70283, CVE-2026-72981, CVE-2026-77491, CVE-2026-77492, CVE-2026-77503, CVE-2026-80093, CVE-2026-72949, CVE-2026-70019, CVE-2026-72940, CVE-2026-69573, CVE-2026-70290, CVE-2026-83991, CVE-2026-83999, CVE-2026-69321, CVE-2026-69316, CVE-2026-69340, CVE-2026-69348, CVE-2026-69350, CVE-2026-69353, CVE-2026-69357, CVE-2026-69393, CVE-2026-69410, CVE-2026-69421, CVE-2026-69428, CVE-2026-69425, CVE-2026-69427, CVE-2026-69434, CVE-2026-69456, CVE-2026-69459, CVE-2026-69478, CVE-2026-69561, CVE-2026-69512, CVE-2026-69498, CVE-2026-69571, CVE-2026-69535, CVE-2026-69538, CVE-2026-69591, CVE-2026-69566, CVE-2026-69567, CVE-2026-69584, CVE-2026-69617, CVE-2026-69630, CVE-2026-69610, CVE-2026-69881, CVE-2026-69680, CVE-2026-69619, CVE-2026-69685, CVE-2026-69643, CVE-2026-69687, CVE-2026-69791, CVE-2026-69707, CVE-2026-69652, CVE-2026-69834, CVE-2026-69709, CVE-2026-69844, CVE-2026-69814, CVE-2026-69731, CVE-2026-69706, CVE-2026-69779, CVE-2026-69895, CVE-2026-69792, CVE-2026-69853, CVE-2026-69761, CVE-2026-69785, CVE-2026-69818, CVE-2026-69786, CVE-2026-69874, CVE-2026-70565, CVE-2026-70574, CVE-2026-70569, CVE-2026-70575, CVE-2026-71349, CVE-2026-72927, CVE-2026-72952, CVE-2026-72942, CVE-2026-72966, CVE-2026-72967, CVE-2026-69426, CVE-2026-69564, CVE-2026-72985, CVE-2026-73019, CVE-2026-78451, CVE-2026-78452, CVE-2026-83940, CVE-2026-69598, CVE-2026-83995, CVE-2026-83501, CVE-2026-83498.

CVE-2026-69504

CVE-2026-69504 is an out-of-bounds read vulnerability in the Windows NTFS file system. A locally authorized attacker could exploit this flaw to gain unauthorized access to sensitive information by triggering the vulnerability during memory read operations.

Affected products:

Windows

Source: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-69504

Related in this roundup: CVE-2026-81963, CVE-2026-85880, CVE-2026-69496, CVE-2026-69586, CVE-2026-69768, CVE-2026-73025, CVE-2026-56172, CVE-2026-68832, CVE-2026-68834, CVE-2026-68838, CVE-2026-68841, CVE-2026-68875, CVE-2026-68877, CVE-2026-68880, CVE-2026-69265, CVE-2026-69270, CVE-2026-69274, CVE-2026-69275, CVE-2026-69280, CVE-2026-69283, CVE-2026-69284, CVE-2026-69289, CVE-2026-69296, CVE-2026-69300, CVE-2026-69301, CVE-2026-69307, CVE-2026-69312, CVE-2026-69314, CVE-2026-69332, CVE-2026-69333, CVE-2026-69335, CVE-2026-68833, CVE-2026-68851, CVE-2026-69366, CVE-2026-69337, CVE-2026-69347, CVE-2026-69379, CVE-2026-69390, CVE-2026-69401, CVE-2026-69413, CVE-2026-69420, CVE-2026-69429, CVE-2026-69448, CVE-2026-69455, CVE-2026-69532, CVE-2026-69472, CVE-2026-69479, CVE-2026-69531, CVE-2026-69517, CVE-2026-69505, CVE-2026-69527, CVE-2026-69549, CVE-2026-69588, CVE-2026-69609, CVE-2026-69648, CVE-2026-69689, CVE-2026-69790, CVE-2026-69638, CVE-2026-69859, CVE-2026-69717, CVE-2026-69711, CVE-2026-69875, CVE-2026-69889, CVE-2026-69757, CVE-2026-69741, CVE-2026-69762, CVE-2026-69744, CVE-2026-69832, CVE-2026-69691, CVE-2026-69808, CVE-2026-69775, CVE-2026-69822, CVE-2026-69770, CVE-2026-69676, CVE-2026-70289, CVE-2026-70563, CVE-2026-71329, CVE-2026-71332, CVE-2026-71350, CVE-2026-71348, CVE-2026-71345, CVE-2026-69469, CVE-2026-69501, CVE-2026-69548, CVE-2026-69846, CVE-2026-70283, CVE-2026-72981, CVE-2026-77491, CVE-2026-77492, CVE-2026-77503, CVE-2026-80093, CVE-2026-72949, CVE-2026-70019, CVE-2026-72940, CVE-2026-69573, CVE-2026-70290, CVE-2026-83991, CVE-2026-83999, CVE-2026-69321, CVE-2026-69316, CVE-2026-69340, CVE-2026-69348, CVE-2026-69350, CVE-2026-69353, CVE-2026-69357, CVE-2026-69393, CVE-2026-69410, CVE-2026-69421, CVE-2026-69428, CVE-2026-69425, CVE-2026-69427, CVE-2026-69434, CVE-2026-69456, CVE-2026-69459, CVE-2026-69478, CVE-2026-69561, CVE-2026-69512, CVE-2026-69498, CVE-2026-69571, CVE-2026-69535, CVE-2026-69538, CVE-2026-69591, CVE-2026-69566, CVE-2026-69567, CVE-2026-69584, CVE-2026-69617, CVE-2026-69630, CVE-2026-69610, CVE-2026-69881, CVE-2026-69680, CVE-2026-69619, CVE-2026-69685, CVE-2026-69643, CVE-2026-69687, CVE-2026-69791, CVE-2026-69707, CVE-2026-69652, CVE-2026-69834, CVE-2026-69709, CVE-2026-69844, CVE-2026-69814, CVE-2026-69731, CVE-2026-69706, CVE-2026-69779, CVE-2026-69895, CVE-2026-69792, CVE-2026-69853, CVE-2026-69761, CVE-2026-69785, CVE-2026-69818, CVE-2026-69786, CVE-2026-69874, CVE-2026-70565, CVE-2026-70574, CVE-2026-70569, CVE-2026-70575, CVE-2026-71349, CVE-2026-72927, CVE-2026-72952, CVE-2026-72942, CVE-2026-72966, CVE-2026-72967, CVE-2026-69426, CVE-2026-69564, CVE-2026-72985, CVE-2026-73019, CVE-2026-78451, CVE-2026-78452, CVE-2026-83940, CVE-2026-69598, CVE-2026-83995, CVE-2026-83501, CVE-2026-83498.

CVE-2026-69507

A vulnerability exists in the Microsoft Windows Search Component that allows an authorized attacker to exploit an information disclosure flaw. By inserting sensitive information into externally-accessible files or directories, the attacker can leverage the component to leak this data over the network.

Affected products:

Windows Search Component

Source: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-69507

Related in this roundup: CVE-2026-68896, CVE-2026-69305, CVE-2026-69322, CVE-2026-69554, CVE-2026-69585, CVE-2026-69608, CVE-2026-69453, CVE-2026-69600, CVE-2026-69911, CVE-2026-70145.

CVE-2026-69551

A use-after-free vulnerability in the Windows DNS Server component allows a remote, authorized attacker to execute arbitrary code. The vulnerability occurs due to improper memory management, enabling code execution over the network without requiring local access.

Affected products:

Windows DNS Server

Source: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-69551

Related in this roundup: CVE-2026-77505, CVE-2026-78523, CVE-2026-69989, CVE-2026-69827, CVE-2026-69813, CVE-2026-69858, CVE-2026-72928.

CVE-2026-69514

CVE-2026-69514 describes a heap-based buffer overflow vulnerability in Windows Remote Desktop Services. An authenticated attacker can exploit this flaw to achieve remote code execution over a network connection by sending specially crafted packets to the affected service.

Affected products:

Remote Desktop Services

Source: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-69514

Related in this roundup: CVE-2026-69525, CVE-2026-69287, CVE-2026-69539, CVE-2026-69599, CVE-2026-69536, CVE-2026-69616.

CVE-2026-69516

A use-after-free vulnerability in the Microsoft Connected Devices Platform Service (Cdpsvc) allows a locally authenticated attacker to exploit the service to gain elevated privileges on the target Windows system.

Affected products:

Connected Devices Platform Service

Source: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-69516

CVE-2026-69621

CVE-2026-69621 is a heap-based buffer overflow vulnerability in the Windows Fax Service that allows an authenticated local attacker to escalate their privileges. Successful exploitation requires the attacker to have existing low-privileged access to the system.

Affected products:

Windows Fax Service

Source: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-69621

Related in this roundup: CVE-2026-72944, CVE-2026-69509.

CVE-2026-69527

The Windows USB Mass Storage Class Driver contains an out-of-bounds read vulnerability that allows an authorized local attacker to perform information disclosure. This vulnerability stems from improper memory handling within the driver, potentially enabling the leakage of sensitive data residing in memory.

Affected products:

Windows

Source: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-69527

Related in this roundup: CVE-2026-81963, CVE-2026-85880, CVE-2026-69496, CVE-2026-69586, CVE-2026-69768, CVE-2026-73025, CVE-2026-56172, CVE-2026-68832, CVE-2026-68834, CVE-2026-68838, CVE-2026-68841, CVE-2026-68875, CVE-2026-68877, CVE-2026-68880, CVE-2026-69265, CVE-2026-69270, CVE-2026-69274, CVE-2026-69275, CVE-2026-69280, CVE-2026-69283, CVE-2026-69284, CVE-2026-69289, CVE-2026-69296, CVE-2026-69300, CVE-2026-69301, CVE-2026-69307, CVE-2026-69312, CVE-2026-69314, CVE-2026-69332, CVE-2026-69333, CVE-2026-69335, CVE-2026-68833, CVE-2026-68851, CVE-2026-69366, CVE-2026-69337, CVE-2026-69347, CVE-2026-69379, CVE-2026-69390, CVE-2026-69401, CVE-2026-69413, CVE-2026-69420, CVE-2026-69429, CVE-2026-69448, CVE-2026-69455, CVE-2026-69532, CVE-2026-69472, CVE-2026-69479, CVE-2026-69531, CVE-2026-69517, CVE-2026-69505, CVE-2026-69504, CVE-2026-69549, CVE-2026-69588, CVE-2026-69609, CVE-2026-69648, CVE-2026-69689, CVE-2026-69790, CVE-2026-69638, CVE-2026-69859, CVE-2026-69717, CVE-2026-69711, CVE-2026-69875, CVE-2026-69889, CVE-2026-69757, CVE-2026-69741, CVE-2026-69762, CVE-2026-69744, CVE-2026-69832, CVE-2026-69691, CVE-2026-69808, CVE-2026-69775, CVE-2026-69822, CVE-2026-69770, CVE-2026-69676, CVE-2026-70289, CVE-2026-70563, CVE-2026-71329, CVE-2026-71332, CVE-2026-71350, CVE-2026-71348, CVE-2026-71345, CVE-2026-69469, CVE-2026-69501, CVE-2026-69548, CVE-2026-69846, CVE-2026-70283, CVE-2026-72981, CVE-2026-77491, CVE-2026-77492, CVE-2026-77503, CVE-2026-80093, CVE-2026-72949, CVE-2026-70019, CVE-2026-72940, CVE-2026-69573, CVE-2026-70290, CVE-2026-83991, CVE-2026-83999, CVE-2026-69321, CVE-2026-69316, CVE-2026-69340, CVE-2026-69348, CVE-2026-69350, CVE-2026-69353, CVE-2026-69357, CVE-2026-69393, CVE-2026-69410, CVE-2026-69421, CVE-2026-69428, CVE-2026-69425, CVE-2026-69427, CVE-2026-69434, CVE-2026-69456, CVE-2026-69459, CVE-2026-69478, CVE-2026-69561, CVE-2026-69512, CVE-2026-69498, CVE-2026-69571, CVE-2026-69535, CVE-2026-69538, CVE-2026-69591, CVE-2026-69566, CVE-2026-69567, CVE-2026-69584, CVE-2026-69617, CVE-2026-69630, CVE-2026-69610, CVE-2026-69881, CVE-2026-69680, CVE-2026-69619, CVE-2026-69685, CVE-2026-69643, CVE-2026-69687, CVE-2026-69791, CVE-2026-69707, CVE-2026-69652, CVE-2026-69834, CVE-2026-69709, CVE-2026-69844, CVE-2026-69814, CVE-2026-69731, CVE-2026-69706, CVE-2026-69779, CVE-2026-69895, CVE-2026-69792, CVE-2026-69853, CVE-2026-69761, CVE-2026-69785, CVE-2026-69818, CVE-2026-69786, CVE-2026-69874, CVE-2026-70565, CVE-2026-70574, CVE-2026-70569, CVE-2026-70575, CVE-2026-71349, CVE-2026-72927, CVE-2026-72952, CVE-2026-72942, CVE-2026-72966, CVE-2026-72967, CVE-2026-69426, CVE-2026-69564, CVE-2026-72985, CVE-2026-73019, CVE-2026-78451, CVE-2026-78452, CVE-2026-83940, CVE-2026-69598, CVE-2026-83995, CVE-2026-83501, CVE-2026-83498.

CVE-2026-69539

CVE-2026-69539 describes a use-after-free vulnerability in Microsoft Remote Desktop Services that allows an authorized attacker to execute arbitrary code remotely. Detection engineers should monitor RDP traffic for anomalous behavior or unexpected process execution spawned from the Remote Desktop Services process (termsrv.exe).

Affected products:

Remote Desktop Services

Source: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-69539

Related in this roundup: CVE-2026-69525, CVE-2026-69287, CVE-2026-69514, CVE-2026-69599, CVE-2026-69536, CVE-2026-69616.

CVE-2026-69582

A buffer over-read vulnerability exists in the Windows Volume Manager Extension Driver that allows a locally authenticated attacker to escalate their privileges to a higher level of authority on the host system.

Affected products:

Windows Volume Manager Extension Driver

Source: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-69582

Related in this roundup: CVE-2026-69291, CVE-2026-69334, CVE-2026-69468, CVE-2026-77904.

CVE-2026-69524

A remote code execution vulnerability exists in Microsoft Active Directory Domain Services due to a use-after-free condition. An unauthenticated attacker can exploit this flaw by sending specially crafted network requests to the target, potentially leading to arbitrary code execution within the context of the service.

Affected products:

Active Directory Domain Services

Source: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-69524

Related in this roundup: CVE-2026-62813, CVE-2026-69359, CVE-2026-62762, CVE-2026-69546, CVE-2026-69809.

CVE-2026-69528

CVE-2026-69528 describes an elevation of privilege vulnerability in the Windows Shell caused by a missing authentication check for a critical function. An attacker who has already achieved local access can leverage this vulnerability to gain higher privileges on the affected Windows system.

Affected products:

Windows Shell

Source: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-69528

Related in this roundup: CVE-2026-69829, CVE-2026-69383, CVE-2026-69606, CVE-2026-69392.

CVE-2026-69534

CVE-2026-69534 is a local privilege escalation vulnerability in the Windows Program Compatibility Assistant Service resulting from improper neutralization of special elements in a command, allowing an authenticated attacker to execute arbitrary commands with higher privileges.

Affected products:

Windows Program Compatibility Assistant Service

Source: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-69534

Related in this roundup: CVE-2026-68845, CVE-2026-68876, CVE-2026-69563, CVE-2026-68874, CVE-2026-68873.

CVE-2026-69574

A use-after-free vulnerability in the Windows Device Association Service allows a locally authenticated attacker to elevate their privileges to a higher level of authority on the target system.

Affected products:

Windows Device Association Service

Source: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-69574

Related in this roundup: CVE-2026-77500, CVE-2026-69488, CVE-2026-69581, CVE-2026-69714, CVE-2026-69866.

CVE-2026-69540

A use-after-free vulnerability exists in the Windows Audio Service that permits a locally authenticated attacker to escalate their privileges. Successful exploitation allows the attacker to execute code or perform operations with higher permissions than their account was originally granted.

Affected products:

Windows Audio Service

Source: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-69540

Related in this roundup: CVE-2026-69311, CVE-2026-70562, CVE-2026-69394, CVE-2026-69604, CVE-2026-69447, CVE-2026-69801, CVE-2026-69692.

CVE-2026-69549

An out-of-bounds read vulnerability exists in the Virtual Hard Disk (VHD) Miniport Driver that allows an authorized local attacker to elevate their privileges on the host system.

Affected products:

Windows

Source: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-69549

Related in this roundup: CVE-2026-81963, CVE-2026-85880, CVE-2026-69496, CVE-2026-69586, CVE-2026-69768, CVE-2026-73025, CVE-2026-56172, CVE-2026-68832, CVE-2026-68834, CVE-2026-68838, CVE-2026-68841, CVE-2026-68875, CVE-2026-68877, CVE-2026-68880, CVE-2026-69265, CVE-2026-69270, CVE-2026-69274, CVE-2026-69275, CVE-2026-69280, CVE-2026-69283, CVE-2026-69284, CVE-2026-69289, CVE-2026-69296, CVE-2026-69300, CVE-2026-69301, CVE-2026-69307, CVE-2026-69312, CVE-2026-69314, CVE-2026-69332, CVE-2026-69333, CVE-2026-69335, CVE-2026-68833, CVE-2026-68851, CVE-2026-69366, CVE-2026-69337, CVE-2026-69347, CVE-2026-69379, CVE-2026-69390, CVE-2026-69401, CVE-2026-69413, CVE-2026-69420, CVE-2026-69429, CVE-2026-69448, CVE-2026-69455, CVE-2026-69532, CVE-2026-69472, CVE-2026-69479, CVE-2026-69531, CVE-2026-69517, CVE-2026-69505, CVE-2026-69504, CVE-2026-69527, CVE-2026-69588, CVE-2026-69609, CVE-2026-69648, CVE-2026-69689, CVE-2026-69790, CVE-2026-69638, CVE-2026-69859, CVE-2026-69717, CVE-2026-69711, CVE-2026-69875, CVE-2026-69889, CVE-2026-69757, CVE-2026-69741, CVE-2026-69762, CVE-2026-69744, CVE-2026-69832, CVE-2026-69691, CVE-2026-69808, CVE-2026-69775, CVE-2026-69822, CVE-2026-69770, CVE-2026-69676, CVE-2026-70289, CVE-2026-70563, CVE-2026-71329, CVE-2026-71332, CVE-2026-71350, CVE-2026-71348, CVE-2026-71345, CVE-2026-69469, CVE-2026-69501, CVE-2026-69548, CVE-2026-69846, CVE-2026-70283, CVE-2026-72981, CVE-2026-77491, CVE-2026-77492, CVE-2026-77503, CVE-2026-80093, CVE-2026-72949, CVE-2026-70019, CVE-2026-72940, CVE-2026-69573, CVE-2026-70290, CVE-2026-83991, CVE-2026-83999, CVE-2026-69321, CVE-2026-69316, CVE-2026-69340, CVE-2026-69348, CVE-2026-69350, CVE-2026-69353, CVE-2026-69357, CVE-2026-69393, CVE-2026-69410, CVE-2026-69421, CVE-2026-69428, CVE-2026-69425, CVE-2026-69427, CVE-2026-69434, CVE-2026-69456, CVE-2026-69459, CVE-2026-69478, CVE-2026-69561, CVE-2026-69512, CVE-2026-69498, CVE-2026-69571, CVE-2026-69535, CVE-2026-69538, CVE-2026-69591, CVE-2026-69566, CVE-2026-69567, CVE-2026-69584, CVE-2026-69617, CVE-2026-69630, CVE-2026-69610, CVE-2026-69881, CVE-2026-69680, CVE-2026-69619, CVE-2026-69685, CVE-2026-69643, CVE-2026-69687, CVE-2026-69791, CVE-2026-69707, CVE-2026-69652, CVE-2026-69834, CVE-2026-69709, CVE-2026-69844, CVE-2026-69814, CVE-2026-69731, CVE-2026-69706, CVE-2026-69779, CVE-2026-69895, CVE-2026-69792, CVE-2026-69853, CVE-2026-69761, CVE-2026-69785, CVE-2026-69818, CVE-2026-69786, CVE-2026-69874, CVE-2026-70565, CVE-2026-70574, CVE-2026-70569, CVE-2026-70575, CVE-2026-71349, CVE-2026-72927, CVE-2026-72952, CVE-2026-72942, CVE-2026-72966, CVE-2026-72967, CVE-2026-69426, CVE-2026-69564, CVE-2026-72985, CVE-2026-73019, CVE-2026-78451, CVE-2026-78452, CVE-2026-83940, CVE-2026-69598, CVE-2026-83995, CVE-2026-83501, CVE-2026-83498.

CVE-2026-69541

A heap-based buffer overflow vulnerability exists in the Virtual Hard Disk (VHD) Miniport Driver, enabling an authorized local attacker to achieve privilege escalation by exploiting the vulnerable driver component.

Affected products:

Virtual Hard Disk (VHD) Miniport Driver

Source: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-69541

Related in this roundup: CVE-2026-69681, CVE-2026-81355, CVE-2026-69384, CVE-2026-69611.

CVE-2026-69563

CVE-2026-69563 describes a heap-based buffer overflow vulnerability within the Windows Program Compatibility Assistant Service. This flaw enables a locally authenticated attacker to escalate their privileges on an affected system.

Affected products:

Windows Program Compatibility Assistant Service

Source: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-69563

Related in this roundup: CVE-2026-68845, CVE-2026-68876, CVE-2026-69534, CVE-2026-68874, CVE-2026-68873.

CVE-2026-69553

CVE-2026-69553 is a privilege escalation vulnerability in Windows Hyper-V caused by missing authorization checks. An attacker with existing access can leverage this flaw to elevate their privileges over the network.

Affected products:

Hyper-V

Source: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-69553

Related in this roundup: CVE-2026-69910, CVE-2026-69603, CVE-2026-80083, CVE-2026-72961.

CVE-2026-69552

CVE-2026-69552 is an information disclosure vulnerability in the Windows Print Spooler component. The vulnerability allows an authenticated attacker to gain access to sensitive information via generated error messages, which can be triggered over a network.

Affected products:

Windows Print Spooler

Source: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-69552

Related in this roundup: CVE-2026-68835, CVE-2026-68848, CVE-2026-69309, CVE-2026-69838, CVE-2026-70564, CVE-2026-85877, CVE-2026-69344, CVE-2026-69346, CVE-2026-69569, CVE-2026-69921.

CVE-2026-69554

The Microsoft Windows Search Component contains a vulnerability involving missing authentication for a critical function, which allows an authorized local attacker to perform tampering operations on the system.

Affected products:

Windows Search Component

Source: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-69554

Related in this roundup: CVE-2026-68896, CVE-2026-69305, CVE-2026-69322, CVE-2026-69507, CVE-2026-69585, CVE-2026-69608, CVE-2026-69453, CVE-2026-69600, CVE-2026-69911, CVE-2026-70145.

CVE-2026-69572

CVE-2026-69572 describes an out-of-bounds read vulnerability in the Windows SMB Client that allows an authorized attacker to perform unauthorized information disclosure over a network.

Affected products:

Windows SMB Client

Source: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-69572

Related in this roundup: CVE-2026-69544, CVE-2026-69618, CVE-2026-72936.

CVE-2026-69585

The Microsoft Windows Search Component is vulnerable to a local privilege escalation due to an incorrect type conversion or cast. An authorized attacker can exploit this vulnerability to gain elevated privileges on the target Windows system.

Affected products:

Windows Search Component

Source: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-69585

Related in this roundup: CVE-2026-68896, CVE-2026-69305, CVE-2026-69322, CVE-2026-69507, CVE-2026-69554, CVE-2026-69608, CVE-2026-69453, CVE-2026-69600, CVE-2026-69911, CVE-2026-70145.

CVE-2026-69608

CVE-2026-69608 describes an integer overflow or wraparound vulnerability within the Microsoft Windows Search Component. This flaw allows an authorized local attacker to achieve privilege escalation by exploiting memory handling issues during search operations.

Affected products:

Windows Search Component

Source: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-69608

Related in this roundup: CVE-2026-68896, CVE-2026-69305, CVE-2026-69322, CVE-2026-69507, CVE-2026-69554, CVE-2026-69585, CVE-2026-69453, CVE-2026-69600, CVE-2026-69911, CVE-2026-70145.

CVE-2026-69588

A denial of service vulnerability exists in the Windows TCP/IP stack due to a failure to properly release memory after its effective lifetime. An unauthorized remote attacker can exploit this flaw by sending specifically crafted network traffic, leading to a system-wide denial of service.

Affected products:

Windows

Source: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-69588

Related in this roundup: CVE-2026-81963, CVE-2026-85880, CVE-2026-69496, CVE-2026-69586, CVE-2026-69768, CVE-2026-73025, CVE-2026-56172, CVE-2026-68832, CVE-2026-68834, CVE-2026-68838, CVE-2026-68841, CVE-2026-68875, CVE-2026-68877, CVE-2026-68880, CVE-2026-69265, CVE-2026-69270, CVE-2026-69274, CVE-2026-69275, CVE-2026-69280, CVE-2026-69283, CVE-2026-69284, CVE-2026-69289, CVE-2026-69296, CVE-2026-69300, CVE-2026-69301, CVE-2026-69307, CVE-2026-69312, CVE-2026-69314, CVE-2026-69332, CVE-2026-69333, CVE-2026-69335, CVE-2026-68833, CVE-2026-68851, CVE-2026-69366, CVE-2026-69337, CVE-2026-69347, CVE-2026-69379, CVE-2026-69390, CVE-2026-69401, CVE-2026-69413, CVE-2026-69420, CVE-2026-69429, CVE-2026-69448, CVE-2026-69455, CVE-2026-69532, CVE-2026-69472, CVE-2026-69479, CVE-2026-69531, CVE-2026-69517, CVE-2026-69505, CVE-2026-69504, CVE-2026-69527, CVE-2026-69549, CVE-2026-69609, CVE-2026-69648, CVE-2026-69689, CVE-2026-69790, CVE-2026-69638, CVE-2026-69859, CVE-2026-69717, CVE-2026-69711, CVE-2026-69875, CVE-2026-69889, CVE-2026-69757, CVE-2026-69741, CVE-2026-69762, CVE-2026-69744, CVE-2026-69832, CVE-2026-69691, CVE-2026-69808, CVE-2026-69775, CVE-2026-69822, CVE-2026-69770, CVE-2026-69676, CVE-2026-70289, CVE-2026-70563, CVE-2026-71329, CVE-2026-71332, CVE-2026-71350, CVE-2026-71348, CVE-2026-71345, CVE-2026-69469, CVE-2026-69501, CVE-2026-69548, CVE-2026-69846, CVE-2026-70283, CVE-2026-72981, CVE-2026-77491, CVE-2026-77492, CVE-2026-77503, CVE-2026-80093, CVE-2026-72949, CVE-2026-70019, CVE-2026-72940, CVE-2026-69573, CVE-2026-70290, CVE-2026-83991, CVE-2026-83999, CVE-2026-69321, CVE-2026-69316, CVE-2026-69340, CVE-2026-69348, CVE-2026-69350, CVE-2026-69353, CVE-2026-69357, CVE-2026-69393, CVE-2026-69410, CVE-2026-69421, CVE-2026-69428, CVE-2026-69425, CVE-2026-69427, CVE-2026-69434, CVE-2026-69456, CVE-2026-69459, CVE-2026-69478, CVE-2026-69561, CVE-2026-69512, CVE-2026-69498, CVE-2026-69571, CVE-2026-69535, CVE-2026-69538, CVE-2026-69591, CVE-2026-69566, CVE-2026-69567, CVE-2026-69584, CVE-2026-69617, CVE-2026-69630, CVE-2026-69610, CVE-2026-69881, CVE-2026-69680, CVE-2026-69619, CVE-2026-69685, CVE-2026-69643, CVE-2026-69687, CVE-2026-69791, CVE-2026-69707, CVE-2026-69652, CVE-2026-69834, CVE-2026-69709, CVE-2026-69844, CVE-2026-69814, CVE-2026-69731, CVE-2026-69706, CVE-2026-69779, CVE-2026-69895, CVE-2026-69792, CVE-2026-69853, CVE-2026-69761, CVE-2026-69785, CVE-2026-69818, CVE-2026-69786, CVE-2026-69874, CVE-2026-70565, CVE-2026-70574, CVE-2026-70569, CVE-2026-70575, CVE-2026-71349, CVE-2026-72927, CVE-2026-72952, CVE-2026-72942, CVE-2026-72966, CVE-2026-72967, CVE-2026-69426, CVE-2026-69564, CVE-2026-72985, CVE-2026-73019, CVE-2026-78451, CVE-2026-78452, CVE-2026-83940, CVE-2026-69598, CVE-2026-83995, CVE-2026-83501, CVE-2026-83498.

CVE-2026-69587

A null pointer dereference vulnerability exists in the Windows Internet Key Exchange (IKE) Extension, which can be exploited by an unauthorized attacker over a network to cause a denial of service condition.

Affected products:

Windows Internet Key Exchange (IKE) Extension

Source: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-69587

CVE-2026-69609

CVE-2026-69609 is an out-of-bounds read vulnerability in the Windows Win32k component that allows a locally authorized attacker to perform information disclosure. Detection engineers should monitor for suspicious local system calls or processes attempting to interact with Win32k APIs in an unauthorized manner.

Affected products:

Windows

Source: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-69609

Related in this roundup: CVE-2026-81963, CVE-2026-85880, CVE-2026-69496, CVE-2026-69586, CVE-2026-69768, CVE-2026-73025, CVE-2026-56172, CVE-2026-68832, CVE-2026-68834, CVE-2026-68838, CVE-2026-68841, CVE-2026-68875, CVE-2026-68877, CVE-2026-68880, CVE-2026-69265, CVE-2026-69270, CVE-2026-69274, CVE-2026-69275, CVE-2026-69280, CVE-2026-69283, CVE-2026-69284, CVE-2026-69289, CVE-2026-69296, CVE-2026-69300, CVE-2026-69301, CVE-2026-69307, CVE-2026-69312, CVE-2026-69314, CVE-2026-69332, CVE-2026-69333, CVE-2026-69335, CVE-2026-68833, CVE-2026-68851, CVE-2026-69366, CVE-2026-69337, CVE-2026-69347, CVE-2026-69379, CVE-2026-69390, CVE-2026-69401, CVE-2026-69413, CVE-2026-69420, CVE-2026-69429, CVE-2026-69448, CVE-2026-69455, CVE-2026-69532, CVE-2026-69472, CVE-2026-69479, CVE-2026-69531, CVE-2026-69517, CVE-2026-69505, CVE-2026-69504, CVE-2026-69527, CVE-2026-69549, CVE-2026-69588, CVE-2026-69648, CVE-2026-69689, CVE-2026-69790, CVE-2026-69638, CVE-2026-69859, CVE-2026-69717, CVE-2026-69711, CVE-2026-69875, CVE-2026-69889, CVE-2026-69757, CVE-2026-69741, CVE-2026-69762, CVE-2026-69744, CVE-2026-69832, CVE-2026-69691, CVE-2026-69808, CVE-2026-69775, CVE-2026-69822, CVE-2026-69770, CVE-2026-69676, CVE-2026-70289, CVE-2026-70563, CVE-2026-71329, CVE-2026-71332, CVE-2026-71350, CVE-2026-71348, CVE-2026-71345, CVE-2026-69469, CVE-2026-69501, CVE-2026-69548, CVE-2026-69846, CVE-2026-70283, CVE-2026-72981, CVE-2026-77491, CVE-2026-77492, CVE-2026-77503, CVE-2026-80093, CVE-2026-72949, CVE-2026-70019, CVE-2026-72940, CVE-2026-69573, CVE-2026-70290, CVE-2026-83991, CVE-2026-83999, CVE-2026-69321, CVE-2026-69316, CVE-2026-69340, CVE-2026-69348, CVE-2026-69350, CVE-2026-69353, CVE-2026-69357, CVE-2026-69393, CVE-2026-69410, CVE-2026-69421, CVE-2026-69428, CVE-2026-69425, CVE-2026-69427, CVE-2026-69434, CVE-2026-69456, CVE-2026-69459, CVE-2026-69478, CVE-2026-69561, CVE-2026-69512, CVE-2026-69498, CVE-2026-69571, CVE-2026-69535, CVE-2026-69538, CVE-2026-69591, CVE-2026-69566, CVE-2026-69567, CVE-2026-69584, CVE-2026-69617, CVE-2026-69630, CVE-2026-69610, CVE-2026-69881, CVE-2026-69680, CVE-2026-69619, CVE-2026-69685, CVE-2026-69643, CVE-2026-69687, CVE-2026-69791, CVE-2026-69707, CVE-2026-69652, CVE-2026-69834, CVE-2026-69709, CVE-2026-69844, CVE-2026-69814, CVE-2026-69731, CVE-2026-69706, CVE-2026-69779, CVE-2026-69895, CVE-2026-69792, CVE-2026-69853, CVE-2026-69761, CVE-2026-69785, CVE-2026-69818, CVE-2026-69786, CVE-2026-69874, CVE-2026-70565, CVE-2026-70574, CVE-2026-70569, CVE-2026-70575, CVE-2026-71349, CVE-2026-72927, CVE-2026-72952, CVE-2026-72942, CVE-2026-72966, CVE-2026-72967, CVE-2026-69426, CVE-2026-69564, CVE-2026-72985, CVE-2026-73019, CVE-2026-78451, CVE-2026-78452, CVE-2026-83940, CVE-2026-69598, CVE-2026-83995, CVE-2026-83501, CVE-2026-83498.

CVE-2026-69594

A heap-based buffer overflow vulnerability exists in the Microsoft Local Security Authority Server (lsasrv) which allows an authenticated local attacker to escalate privileges. Successful exploitation requires the attacker to have existing local access to the target system to trigger the vulnerability.

Affected products:

Local Security Authority Server

Source: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-69594

Related in this roundup: CVE-2026-69277, CVE-2026-69365.

CVE-2026-69605

CVE-2026-69605 is a use-after-free vulnerability within the Microsoft Install Service on Windows that allows an authenticated local attacker to achieve privilege escalation by exploiting the memory management flaw.

Affected products:

Install Service

Source: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-69605

CVE-2026-69645

A use-after-free vulnerability in the Windows Message Queuing component allows a locally authenticated attacker to elevate their privileges to a higher level of access on the system.

Affected products:

Windows Message Queuing

Source: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-69645

Related in this roundup: CVE-2026-69579, CVE-2026-68887, CVE-2026-83997.

CVE-2026-69648

CVE-2026-69648 is a privilege escalation vulnerability in the Windows Notification component caused by a use-after-free flaw. An authorized attacker can exploit this vulnerability to elevate privileges on the local system.

Affected products:

Windows

Source: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-69648

Related in this roundup: CVE-2026-81963, CVE-2026-85880, CVE-2026-69496, CVE-2026-69586, CVE-2026-69768, CVE-2026-73025, CVE-2026-56172, CVE-2026-68832, CVE-2026-68834, CVE-2026-68838, CVE-2026-68841, CVE-2026-68875, CVE-2026-68877, CVE-2026-68880, CVE-2026-69265, CVE-2026-69270, CVE-2026-69274, CVE-2026-69275, CVE-2026-69280, CVE-2026-69283, CVE-2026-69284, CVE-2026-69289, CVE-2026-69296, CVE-2026-69300, CVE-2026-69301, CVE-2026-69307, CVE-2026-69312, CVE-2026-69314, CVE-2026-69332, CVE-2026-69333, CVE-2026-69335, CVE-2026-68833, CVE-2026-68851, CVE-2026-69366, CVE-2026-69337, CVE-2026-69347, CVE-2026-69379, CVE-2026-69390, CVE-2026-69401, CVE-2026-69413, CVE-2026-69420, CVE-2026-69429, CVE-2026-69448, CVE-2026-69455, CVE-2026-69532, CVE-2026-69472, CVE-2026-69479, CVE-2026-69531, CVE-2026-69517, CVE-2026-69505, CVE-2026-69504, CVE-2026-69527, CVE-2026-69549, CVE-2026-69588, CVE-2026-69609, CVE-2026-69689, CVE-2026-69790, CVE-2026-69638, CVE-2026-69859, CVE-2026-69717, CVE-2026-69711, CVE-2026-69875, CVE-2026-69889, CVE-2026-69757, CVE-2026-69741, CVE-2026-69762, CVE-2026-69744, CVE-2026-69832, CVE-2026-69691, CVE-2026-69808, CVE-2026-69775, CVE-2026-69822, CVE-2026-69770, CVE-2026-69676, CVE-2026-70289, CVE-2026-70563, CVE-2026-71329, CVE-2026-71332, CVE-2026-71350, CVE-2026-71348, CVE-2026-71345, CVE-2026-69469, CVE-2026-69501, CVE-2026-69548, CVE-2026-69846, CVE-2026-70283, CVE-2026-72981, CVE-2026-77491, CVE-2026-77492, CVE-2026-77503, CVE-2026-80093, CVE-2026-72949, CVE-2026-70019, CVE-2026-72940, CVE-2026-69573, CVE-2026-70290, CVE-2026-83991, CVE-2026-83999, CVE-2026-69321, CVE-2026-69316, CVE-2026-69340, CVE-2026-69348, CVE-2026-69350, CVE-2026-69353, CVE-2026-69357, CVE-2026-69393, CVE-2026-69410, CVE-2026-69421, CVE-2026-69428, CVE-2026-69425, CVE-2026-69427, CVE-2026-69434, CVE-2026-69456, CVE-2026-69459, CVE-2026-69478, CVE-2026-69561, CVE-2026-69512, CVE-2026-69498, CVE-2026-69571, CVE-2026-69535, CVE-2026-69538, CVE-2026-69591, CVE-2026-69566, CVE-2026-69567, CVE-2026-69584, CVE-2026-69617, CVE-2026-69630, CVE-2026-69610, CVE-2026-69881, CVE-2026-69680, CVE-2026-69619, CVE-2026-69685, CVE-2026-69643, CVE-2026-69687, CVE-2026-69791, CVE-2026-69707, CVE-2026-69652, CVE-2026-69834, CVE-2026-69709, CVE-2026-69844, CVE-2026-69814, CVE-2026-69731, CVE-2026-69706, CVE-2026-69779, CVE-2026-69895, CVE-2026-69792, CVE-2026-69853, CVE-2026-69761, CVE-2026-69785, CVE-2026-69818, CVE-2026-69786, CVE-2026-69874, CVE-2026-70565, CVE-2026-70574, CVE-2026-70569, CVE-2026-70575, CVE-2026-71349, CVE-2026-72927, CVE-2026-72952, CVE-2026-72942, CVE-2026-72966, CVE-2026-72967, CVE-2026-69426, CVE-2026-69564, CVE-2026-72985, CVE-2026-73019, CVE-2026-78451, CVE-2026-78452, CVE-2026-83940, CVE-2026-69598, CVE-2026-83995, CVE-2026-83501, CVE-2026-83498.

CVE-2026-69684

CVE-2026-69684 is an information disclosure vulnerability in Windows Error Reporting where the system generates error messages that inadvertently include sensitive data. An authorized local attacker can exploit this flaw to view this sensitive information.

Affected products:

Windows Error Reporting

Source: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-69684

Related in this roundup: CVE-2026-68894, CVE-2026-69362, CVE-2026-69436, CVE-2026-69513, CVE-2026-69450, CVE-2026-69896, CVE-2026-83996, CVE-2026-69433, CVE-2026-69462, CVE-2026-69482, CVE-2026-69612.

CVE-2026-69623

A heap-based buffer overflow vulnerability exists in the Windows HTTP Print Provider, which allows an authorized attacker to achieve remote code execution over a network. Exploitation of this vulnerability requires the attacker to be authorized to interact with the printing service.

Affected products:

Windows HTTP Print Provider

Source: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-69623

Related in this roundup: CVE-2026-69769.

CVE-2026-69689

CVE-2026-69689 is an out-of-bounds read vulnerability in the Windows Win32k component that allows an authenticated attacker to perform privilege escalation over the network.

Affected products:

Windows

Source: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-69689

Related in this roundup: CVE-2026-81963, CVE-2026-85880, CVE-2026-69496, CVE-2026-69586, CVE-2026-69768, CVE-2026-73025, CVE-2026-56172, CVE-2026-68832, CVE-2026-68834, CVE-2026-68838, CVE-2026-68841, CVE-2026-68875, CVE-2026-68877, CVE-2026-68880, CVE-2026-69265, CVE-2026-69270, CVE-2026-69274, CVE-2026-69275, CVE-2026-69280, CVE-2026-69283, CVE-2026-69284, CVE-2026-69289, CVE-2026-69296, CVE-2026-69300, CVE-2026-69301, CVE-2026-69307, CVE-2026-69312, CVE-2026-69314, CVE-2026-69332, CVE-2026-69333, CVE-2026-69335, CVE-2026-68833, CVE-2026-68851, CVE-2026-69366, CVE-2026-69337, CVE-2026-69347, CVE-2026-69379, CVE-2026-69390, CVE-2026-69401, CVE-2026-69413, CVE-2026-69420, CVE-2026-69429, CVE-2026-69448, CVE-2026-69455, CVE-2026-69532, CVE-2026-69472, CVE-2026-69479, CVE-2026-69531, CVE-2026-69517, CVE-2026-69505, CVE-2026-69504, CVE-2026-69527, CVE-2026-69549, CVE-2026-69588, CVE-2026-69609, CVE-2026-69648, CVE-2026-69790, CVE-2026-69638, CVE-2026-69859, CVE-2026-69717, CVE-2026-69711, CVE-2026-69875, CVE-2026-69889, CVE-2026-69757, CVE-2026-69741, CVE-2026-69762, CVE-2026-69744, CVE-2026-69832, CVE-2026-69691, CVE-2026-69808, CVE-2026-69775, CVE-2026-69822, CVE-2026-69770, CVE-2026-69676, CVE-2026-70289, CVE-2026-70563, CVE-2026-71329, CVE-2026-71332, CVE-2026-71350, CVE-2026-71348, CVE-2026-71345, CVE-2026-69469, CVE-2026-69501, CVE-2026-69548, CVE-2026-69846, CVE-2026-70283, CVE-2026-72981, CVE-2026-77491, CVE-2026-77492, CVE-2026-77503, CVE-2026-80093, CVE-2026-72949, CVE-2026-70019, CVE-2026-72940, CVE-2026-69573, CVE-2026-70290, CVE-2026-83991, CVE-2026-83999, CVE-2026-69321, CVE-2026-69316, CVE-2026-69340, CVE-2026-69348, CVE-2026-69350, CVE-2026-69353, CVE-2026-69357, CVE-2026-69393, CVE-2026-69410, CVE-2026-69421, CVE-2026-69428, CVE-2026-69425, CVE-2026-69427, CVE-2026-69434, CVE-2026-69456, CVE-2026-69459, CVE-2026-69478, CVE-2026-69561, CVE-2026-69512, CVE-2026-69498, CVE-2026-69571, CVE-2026-69535, CVE-2026-69538, CVE-2026-69591, CVE-2026-69566, CVE-2026-69567, CVE-2026-69584, CVE-2026-69617, CVE-2026-69630, CVE-2026-69610, CVE-2026-69881, CVE-2026-69680, CVE-2026-69619, CVE-2026-69685, CVE-2026-69643, CVE-2026-69687, CVE-2026-69791, CVE-2026-69707, CVE-2026-69652, CVE-2026-69834, CVE-2026-69709, CVE-2026-69844, CVE-2026-69814, CVE-2026-69731, CVE-2026-69706, CVE-2026-69779, CVE-2026-69895, CVE-2026-69792, CVE-2026-69853, CVE-2026-69761, CVE-2026-69785, CVE-2026-69818, CVE-2026-69786, CVE-2026-69874, CVE-2026-70565, CVE-2026-70574, CVE-2026-70569, CVE-2026-70575, CVE-2026-71349, CVE-2026-72927, CVE-2026-72952, CVE-2026-72942, CVE-2026-72966, CVE-2026-72967, CVE-2026-69426, CVE-2026-69564, CVE-2026-72985, CVE-2026-73019, CVE-2026-78451, CVE-2026-78452, CVE-2026-83940, CVE-2026-69598, CVE-2026-83995, CVE-2026-83501, CVE-2026-83498.

CVE-2026-69627

CVE-2026-69627 is an out-of-bounds read vulnerability in the Windows Remote Desktop Licensing Service. An authorized, locally authenticated attacker could exploit this vulnerability to disclose sensitive information from the service's memory space.

Affected products:

Windows Remote Desktop Licensing Service

Source: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-69627

Related in this roundup: CVE-2026-68893.

CVE-2026-69628

CVE-2026-69628 is a heap-based buffer overflow vulnerability within the Windows iSCSI component that allows an authenticated attacker to achieve remote code execution over a network. Detection should focus on monitoring anomalous iSCSI traffic patterns and unexpected child processes spawning from system services associated with storage protocols.

Affected products:

Windows iSCSI

Source: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-69628

Related in this roundup: CVE-2026-68898.

CVE-2026-69790

CVE-2026-69790 is a local elevation of privilege vulnerability in the Windows Credential Providers component caused by a heap-based buffer overflow. An authenticated attacker can exploit this flaw to gain higher privileges on the target system.

Affected products:

Windows

Source: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-69790

Related in this roundup: CVE-2026-81963, CVE-2026-85880, CVE-2026-69496, CVE-2026-69586, CVE-2026-69768, CVE-2026-73025, CVE-2026-56172, CVE-2026-68832, CVE-2026-68834, CVE-2026-68838, CVE-2026-68841, CVE-2026-68875, CVE-2026-68877, CVE-2026-68880, CVE-2026-69265, CVE-2026-69270, CVE-2026-69274, CVE-2026-69275, CVE-2026-69280, CVE-2026-69283, CVE-2026-69284, CVE-2026-69289, CVE-2026-69296, CVE-2026-69300, CVE-2026-69301, CVE-2026-69307, CVE-2026-69312, CVE-2026-69314, CVE-2026-69332, CVE-2026-69333, CVE-2026-69335, CVE-2026-68833, CVE-2026-68851, CVE-2026-69366, CVE-2026-69337, CVE-2026-69347, CVE-2026-69379, CVE-2026-69390, CVE-2026-69401, CVE-2026-69413, CVE-2026-69420, CVE-2026-69429, CVE-2026-69448, CVE-2026-69455, CVE-2026-69532, CVE-2026-69472, CVE-2026-69479, CVE-2026-69531, CVE-2026-69517, CVE-2026-69505, CVE-2026-69504, CVE-2026-69527, CVE-2026-69549, CVE-2026-69588, CVE-2026-69609, CVE-2026-69648, CVE-2026-69689, CVE-2026-69638, CVE-2026-69859, CVE-2026-69717, CVE-2026-69711, CVE-2026-69875, CVE-2026-69889, CVE-2026-69757, CVE-2026-69741, CVE-2026-69762, CVE-2026-69744, CVE-2026-69832, CVE-2026-69691, CVE-2026-69808, CVE-2026-69775, CVE-2026-69822, CVE-2026-69770, CVE-2026-69676, CVE-2026-70289, CVE-2026-70563, CVE-2026-71329, CVE-2026-71332, CVE-2026-71350, CVE-2026-71348, CVE-2026-71345, CVE-2026-69469, CVE-2026-69501, CVE-2026-69548, CVE-2026-69846, CVE-2026-70283, CVE-2026-72981, CVE-2026-77491, CVE-2026-77492, CVE-2026-77503, CVE-2026-80093, CVE-2026-72949, CVE-2026-70019, CVE-2026-72940, CVE-2026-69573, CVE-2026-70290, CVE-2026-83991, CVE-2026-83999, CVE-2026-69321, CVE-2026-69316, CVE-2026-69340, CVE-2026-69348, CVE-2026-69350, CVE-2026-69353, CVE-2026-69357, CVE-2026-69393, CVE-2026-69410, CVE-2026-69421, CVE-2026-69428, CVE-2026-69425, CVE-2026-69427, CVE-2026-69434, CVE-2026-69456, CVE-2026-69459, CVE-2026-69478, CVE-2026-69561, CVE-2026-69512, CVE-2026-69498, CVE-2026-69571, CVE-2026-69535, CVE-2026-69538, CVE-2026-69591, CVE-2026-69566, CVE-2026-69567, CVE-2026-69584, CVE-2026-69617, CVE-2026-69630, CVE-2026-69610, CVE-2026-69881, CVE-2026-69680, CVE-2026-69619, CVE-2026-69685, CVE-2026-69643, CVE-2026-69687, CVE-2026-69791, CVE-2026-69707, CVE-2026-69652, CVE-2026-69834, CVE-2026-69709, CVE-2026-69844, CVE-2026-69814, CVE-2026-69731, CVE-2026-69706, CVE-2026-69779, CVE-2026-69895, CVE-2026-69792, CVE-2026-69853, CVE-2026-69761, CVE-2026-69785, CVE-2026-69818, CVE-2026-69786, CVE-2026-69874, CVE-2026-70565, CVE-2026-70574, CVE-2026-70569, CVE-2026-70575, CVE-2026-71349, CVE-2026-72927, CVE-2026-72952, CVE-2026-72942, CVE-2026-72966, CVE-2026-72967, CVE-2026-69426, CVE-2026-69564, CVE-2026-72985, CVE-2026-73019, CVE-2026-78451, CVE-2026-78452, CVE-2026-83940, CVE-2026-69598, CVE-2026-83995, CVE-2026-83501, CVE-2026-83498.

CVE-2026-69631

CVE-2026-69631 describes an integer overflow or wraparound vulnerability within the Windows DNS component that can be leveraged by an unauthenticated attacker over the network to trigger a denial-of-service condition.

Affected products:

Windows DNS

Source: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-69631

Related in this roundup: CVE-2026-69730, CVE-2026-69310, CVE-2026-70091, CVE-2026-72948, CVE-2026-69369, CVE-2026-69672, CVE-2026-72987.

CVE-2026-69638

CVE-2026-69638 is a heap-based buffer overflow vulnerability in the Windows NTFS file system component that allows a local, unauthorized attacker to execute arbitrary code with elevated privileges. Detection strategies should focus on monitoring for abnormal system service behavior or crashes involving ntfs.sys.

Affected products:

Windows

Source: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-69638

Related in this roundup: CVE-2026-81963, CVE-2026-85880, CVE-2026-69496, CVE-2026-69586, CVE-2026-69768, CVE-2026-73025, CVE-2026-56172, CVE-2026-68832, CVE-2026-68834, CVE-2026-68838, CVE-2026-68841, CVE-2026-68875, CVE-2026-68877, CVE-2026-68880, CVE-2026-69265, CVE-2026-69270, CVE-2026-69274, CVE-2026-69275, CVE-2026-69280, CVE-2026-69283, CVE-2026-69284, CVE-2026-69289, CVE-2026-69296, CVE-2026-69300, CVE-2026-69301, CVE-2026-69307, CVE-2026-69312, CVE-2026-69314, CVE-2026-69332, CVE-2026-69333, CVE-2026-69335, CVE-2026-68833, CVE-2026-68851, CVE-2026-69366, CVE-2026-69337, CVE-2026-69347, CVE-2026-69379, CVE-2026-69390, CVE-2026-69401, CVE-2026-69413, CVE-2026-69420, CVE-2026-69429, CVE-2026-69448, CVE-2026-69455, CVE-2026-69532, CVE-2026-69472, CVE-2026-69479, CVE-2026-69531, CVE-2026-69517, CVE-2026-69505, CVE-2026-69504, CVE-2026-69527, CVE-2026-69549, CVE-2026-69588, CVE-2026-69609, CVE-2026-69648, CVE-2026-69689, CVE-2026-69790, CVE-2026-69859, CVE-2026-69717, CVE-2026-69711, CVE-2026-69875, CVE-2026-69889, CVE-2026-69757, CVE-2026-69741, CVE-2026-69762, CVE-2026-69744, CVE-2026-69832, CVE-2026-69691, CVE-2026-69808, CVE-2026-69775, CVE-2026-69822, CVE-2026-69770, CVE-2026-69676, CVE-2026-70289, CVE-2026-70563, CVE-2026-71329, CVE-2026-71332, CVE-2026-71350, CVE-2026-71348, CVE-2026-71345, CVE-2026-69469, CVE-2026-69501, CVE-2026-69548, CVE-2026-69846, CVE-2026-70283, CVE-2026-72981, CVE-2026-77491, CVE-2026-77492, CVE-2026-77503, CVE-2026-80093, CVE-2026-72949, CVE-2026-70019, CVE-2026-72940, CVE-2026-69573, CVE-2026-70290, CVE-2026-83991, CVE-2026-83999, CVE-2026-69321, CVE-2026-69316, CVE-2026-69340, CVE-2026-69348, CVE-2026-69350, CVE-2026-69353, CVE-2026-69357, CVE-2026-69393, CVE-2026-69410, CVE-2026-69421, CVE-2026-69428, CVE-2026-69425, CVE-2026-69427, CVE-2026-69434, CVE-2026-69456, CVE-2026-69459, CVE-2026-69478, CVE-2026-69561, CVE-2026-69512, CVE-2026-69498, CVE-2026-69571, CVE-2026-69535, CVE-2026-69538, CVE-2026-69591, CVE-2026-69566, CVE-2026-69567, CVE-2026-69584, CVE-2026-69617, CVE-2026-69630, CVE-2026-69610, CVE-2026-69881, CVE-2026-69680, CVE-2026-69619, CVE-2026-69685, CVE-2026-69643, CVE-2026-69687, CVE-2026-69791, CVE-2026-69707, CVE-2026-69652, CVE-2026-69834, CVE-2026-69709, CVE-2026-69844, CVE-2026-69814, CVE-2026-69731, CVE-2026-69706, CVE-2026-69779, CVE-2026-69895, CVE-2026-69792, CVE-2026-69853, CVE-2026-69761, CVE-2026-69785, CVE-2026-69818, CVE-2026-69786, CVE-2026-69874, CVE-2026-70565, CVE-2026-70574, CVE-2026-70569, CVE-2026-70575, CVE-2026-71349, CVE-2026-72927, CVE-2026-72952, CVE-2026-72942, CVE-2026-72966, CVE-2026-72967, CVE-2026-69426, CVE-2026-69564, CVE-2026-72985, CVE-2026-73019, CVE-2026-78451, CVE-2026-78452, CVE-2026-83940, CVE-2026-69598, CVE-2026-83995, CVE-2026-83501, CVE-2026-83498.

CVE-2026-69859

A time-of-check time-of-use (TOCTOU) race condition vulnerability exists within the Windows USB Audio Class driver (usbaudio.sys), which may allow an authenticated local attacker to gain elevated privileges on the target system.

Affected products:

Windows

Source: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-69859

Related in this roundup: CVE-2026-81963, CVE-2026-85880, CVE-2026-69496, CVE-2026-69586, CVE-2026-69768, CVE-2026-73025, CVE-2026-56172, CVE-2026-68832, CVE-2026-68834, CVE-2026-68838, CVE-2026-68841, CVE-2026-68875, CVE-2026-68877, CVE-2026-68880, CVE-2026-69265, CVE-2026-69270, CVE-2026-69274, CVE-2026-69275, CVE-2026-69280, CVE-2026-69283, CVE-2026-69284, CVE-2026-69289, CVE-2026-69296, CVE-2026-69300, CVE-2026-69301, CVE-2026-69307, CVE-2026-69312, CVE-2026-69314, CVE-2026-69332, CVE-2026-69333, CVE-2026-69335, CVE-2026-68833, CVE-2026-68851, CVE-2026-69366, CVE-2026-69337, CVE-2026-69347, CVE-2026-69379, CVE-2026-69390, CVE-2026-69401, CVE-2026-69413, CVE-2026-69420, CVE-2026-69429, CVE-2026-69448, CVE-2026-69455, CVE-2026-69532, CVE-2026-69472, CVE-2026-69479, CVE-2026-69531, CVE-2026-69517, CVE-2026-69505, CVE-2026-69504, CVE-2026-69527, CVE-2026-69549, CVE-2026-69588, CVE-2026-69609, CVE-2026-69648, CVE-2026-69689, CVE-2026-69790, CVE-2026-69638, CVE-2026-69717, CVE-2026-69711, CVE-2026-69875, CVE-2026-69889, CVE-2026-69757, CVE-2026-69741, CVE-2026-69762, CVE-2026-69744, CVE-2026-69832, CVE-2026-69691, CVE-2026-69808, CVE-2026-69775, CVE-2026-69822, CVE-2026-69770, CVE-2026-69676, CVE-2026-70289, CVE-2026-70563, CVE-2026-71329, CVE-2026-71332, CVE-2026-71350, CVE-2026-71348, CVE-2026-71345, CVE-2026-69469, CVE-2026-69501, CVE-2026-69548, CVE-2026-69846, CVE-2026-70283, CVE-2026-72981, CVE-2026-77491, CVE-2026-77492, CVE-2026-77503, CVE-2026-80093, CVE-2026-72949, CVE-2026-70019, CVE-2026-72940, CVE-2026-69573, CVE-2026-70290, CVE-2026-83991, CVE-2026-83999, CVE-2026-69321, CVE-2026-69316, CVE-2026-69340, CVE-2026-69348, CVE-2026-69350, CVE-2026-69353, CVE-2026-69357, CVE-2026-69393, CVE-2026-69410, CVE-2026-69421, CVE-2026-69428, CVE-2026-69425, CVE-2026-69427, CVE-2026-69434, CVE-2026-69456, CVE-2026-69459, CVE-2026-69478, CVE-2026-69561, CVE-2026-69512, CVE-2026-69498, CVE-2026-69571, CVE-2026-69535, CVE-2026-69538, CVE-2026-69591, CVE-2026-69566, CVE-2026-69567, CVE-2026-69584, CVE-2026-69617, CVE-2026-69630, CVE-2026-69610, CVE-2026-69881, CVE-2026-69680, CVE-2026-69619, CVE-2026-69685, CVE-2026-69643, CVE-2026-69687, CVE-2026-69791, CVE-2026-69707, CVE-2026-69652, CVE-2026-69834, CVE-2026-69709, CVE-2026-69844, CVE-2026-69814, CVE-2026-69731, CVE-2026-69706, CVE-2026-69779, CVE-2026-69895, CVE-2026-69792, CVE-2026-69853, CVE-2026-69761, CVE-2026-69785, CVE-2026-69818, CVE-2026-69786, CVE-2026-69874, CVE-2026-70565, CVE-2026-70574, CVE-2026-70569, CVE-2026-70575, CVE-2026-71349, CVE-2026-72927, CVE-2026-72952, CVE-2026-72942, CVE-2026-72966, CVE-2026-72967, CVE-2026-69426, CVE-2026-69564, CVE-2026-72985, CVE-2026-73019, CVE-2026-78451, CVE-2026-78452, CVE-2026-83940, CVE-2026-69598, CVE-2026-83995, CVE-2026-83501, CVE-2026-83498.

CVE-2026-69693

A use-after-free vulnerability in the Windows Device Association Broker service allows a locally authenticated attacker to elevate their privileges to a higher integrity level. This vulnerability requires the attacker to already have access to the system to exploit the flaw, typically targeting the service's memory management to achieve privilege escalation.

Affected products:

Windows Device Association Broker service

Source: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-69693

CVE-2026-69729

CVE-2026-69729 is a heap-based buffer overflow vulnerability within Windows Credential Providers that enables an authorized attacker to achieve remote code execution over a network. Detection should focus on monitoring abnormal process execution behavior initiated by system-level credential handling services.

Affected products:

Windows Credential Providers

Source: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-69729

CVE-2026-69717

CVE-2026-69717 is a privilege escalation vulnerability in Windows Group Policy caused by an untrusted pointer dereference. An attacker with authorized access can exploit this flaw to elevate their privileges over the network.

Affected products:

Windows

Source: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-69717

Related in this roundup: CVE-2026-81963, CVE-2026-85880, CVE-2026-69496, CVE-2026-69586, CVE-2026-69768, CVE-2026-73025, CVE-2026-56172, CVE-2026-68832, CVE-2026-68834, CVE-2026-68838, CVE-2026-68841, CVE-2026-68875, CVE-2026-68877, CVE-2026-68880, CVE-2026-69265, CVE-2026-69270, CVE-2026-69274, CVE-2026-69275, CVE-2026-69280, CVE-2026-69283, CVE-2026-69284, CVE-2026-69289, CVE-2026-69296, CVE-2026-69300, CVE-2026-69301, CVE-2026-69307, CVE-2026-69312, CVE-2026-69314, CVE-2026-69332, CVE-2026-69333, CVE-2026-69335, CVE-2026-68833, CVE-2026-68851, CVE-2026-69366, CVE-2026-69337, CVE-2026-69347, CVE-2026-69379, CVE-2026-69390, CVE-2026-69401, CVE-2026-69413, CVE-2026-69420, CVE-2026-69429, CVE-2026-69448, CVE-2026-69455, CVE-2026-69532, CVE-2026-69472, CVE-2026-69479, CVE-2026-69531, CVE-2026-69517, CVE-2026-69505, CVE-2026-69504, CVE-2026-69527, CVE-2026-69549, CVE-2026-69588, CVE-2026-69609, CVE-2026-69648, CVE-2026-69689, CVE-2026-69790, CVE-2026-69638, CVE-2026-69859, CVE-2026-69711, CVE-2026-69875, CVE-2026-69889, CVE-2026-69757, CVE-2026-69741, CVE-2026-69762, CVE-2026-69744, CVE-2026-69832, CVE-2026-69691, CVE-2026-69808, CVE-2026-69775, CVE-2026-69822, CVE-2026-69770, CVE-2026-69676, CVE-2026-70289, CVE-2026-70563, CVE-2026-71329, CVE-2026-71332, CVE-2026-71350, CVE-2026-71348, CVE-2026-71345, CVE-2026-69469, CVE-2026-69501, CVE-2026-69548, CVE-2026-69846, CVE-2026-70283, CVE-2026-72981, CVE-2026-77491, CVE-2026-77492, CVE-2026-77503, CVE-2026-80093, CVE-2026-72949, CVE-2026-70019, CVE-2026-72940, CVE-2026-69573, CVE-2026-70290, CVE-2026-83991, CVE-2026-83999, CVE-2026-69321, CVE-2026-69316, CVE-2026-69340, CVE-2026-69348, CVE-2026-69350, CVE-2026-69353, CVE-2026-69357, CVE-2026-69393, CVE-2026-69410, CVE-2026-69421, CVE-2026-69428, CVE-2026-69425, CVE-2026-69427, CVE-2026-69434, CVE-2026-69456, CVE-2026-69459, CVE-2026-69478, CVE-2026-69561, CVE-2026-69512, CVE-2026-69498, CVE-2026-69571, CVE-2026-69535, CVE-2026-69538, CVE-2026-69591, CVE-2026-69566, CVE-2026-69567, CVE-2026-69584, CVE-2026-69617, CVE-2026-69630, CVE-2026-69610, CVE-2026-69881, CVE-2026-69680, CVE-2026-69619, CVE-2026-69685, CVE-2026-69643, CVE-2026-69687, CVE-2026-69791, CVE-2026-69707, CVE-2026-69652, CVE-2026-69834, CVE-2026-69709, CVE-2026-69844, CVE-2026-69814, CVE-2026-69731, CVE-2026-69706, CVE-2026-69779, CVE-2026-69895, CVE-2026-69792, CVE-2026-69853, CVE-2026-69761, CVE-2026-69785, CVE-2026-69818, CVE-2026-69786, CVE-2026-69874, CVE-2026-70565, CVE-2026-70574, CVE-2026-70569, CVE-2026-70575, CVE-2026-71349, CVE-2026-72927, CVE-2026-72952, CVE-2026-72942, CVE-2026-72966, CVE-2026-72967, CVE-2026-69426, CVE-2026-69564, CVE-2026-72985, CVE-2026-73019, CVE-2026-78451, CVE-2026-78452, CVE-2026-83940, CVE-2026-69598, CVE-2026-83995, CVE-2026-83501, CVE-2026-83498.

CVE-2026-69711

A use-after-free vulnerability exists in the Windows Device Association Service that allows a local, authenticated attacker to escalate their privileges to a higher integrity level.

Affected products:

Windows

Source: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-69711

Related in this roundup: CVE-2026-81963, CVE-2026-85880, CVE-2026-69496, CVE-2026-69586, CVE-2026-69768, CVE-2026-73025, CVE-2026-56172, CVE-2026-68832, CVE-2026-68834, CVE-2026-68838, CVE-2026-68841, CVE-2026-68875, CVE-2026-68877, CVE-2026-68880, CVE-2026-69265, CVE-2026-69270, CVE-2026-69274, CVE-2026-69275, CVE-2026-69280, CVE-2026-69283, CVE-2026-69284, CVE-2026-69289, CVE-2026-69296, CVE-2026-69300, CVE-2026-69301, CVE-2026-69307, CVE-2026-69312, CVE-2026-69314, CVE-2026-69332, CVE-2026-69333, CVE-2026-69335, CVE-2026-68833, CVE-2026-68851, CVE-2026-69366, CVE-2026-69337, CVE-2026-69347, CVE-2026-69379, CVE-2026-69390, CVE-2026-69401, CVE-2026-69413, CVE-2026-69420, CVE-2026-69429, CVE-2026-69448, CVE-2026-69455, CVE-2026-69532, CVE-2026-69472, CVE-2026-69479, CVE-2026-69531, CVE-2026-69517, CVE-2026-69505, CVE-2026-69504, CVE-2026-69527, CVE-2026-69549, CVE-2026-69588, CVE-2026-69609, CVE-2026-69648, CVE-2026-69689, CVE-2026-69790, CVE-2026-69638, CVE-2026-69859, CVE-2026-69717, CVE-2026-69875, CVE-2026-69889, CVE-2026-69757, CVE-2026-69741, CVE-2026-69762, CVE-2026-69744, CVE-2026-69832, CVE-2026-69691, CVE-2026-69808, CVE-2026-69775, CVE-2026-69822, CVE-2026-69770, CVE-2026-69676, CVE-2026-70289, CVE-2026-70563, CVE-2026-71329, CVE-2026-71332, CVE-2026-71350, CVE-2026-71348, CVE-2026-71345, CVE-2026-69469, CVE-2026-69501, CVE-2026-69548, CVE-2026-69846, CVE-2026-70283, CVE-2026-72981, CVE-2026-77491, CVE-2026-77492, CVE-2026-77503, CVE-2026-80093, CVE-2026-72949, CVE-2026-70019, CVE-2026-72940, CVE-2026-69573, CVE-2026-70290, CVE-2026-83991, CVE-2026-83999, CVE-2026-69321, CVE-2026-69316, CVE-2026-69340, CVE-2026-69348, CVE-2026-69350, CVE-2026-69353, CVE-2026-69357, CVE-2026-69393, CVE-2026-69410, CVE-2026-69421, CVE-2026-69428, CVE-2026-69425, CVE-2026-69427, CVE-2026-69434, CVE-2026-69456, CVE-2026-69459, CVE-2026-69478, CVE-2026-69561, CVE-2026-69512, CVE-2026-69498, CVE-2026-69571, CVE-2026-69535, CVE-2026-69538, CVE-2026-69591, CVE-2026-69566, CVE-2026-69567, CVE-2026-69584, CVE-2026-69617, CVE-2026-69630, CVE-2026-69610, CVE-2026-69881, CVE-2026-69680, CVE-2026-69619, CVE-2026-69685, CVE-2026-69643, CVE-2026-69687, CVE-2026-69791, CVE-2026-69707, CVE-2026-69652, CVE-2026-69834, CVE-2026-69709, CVE-2026-69844, CVE-2026-69814, CVE-2026-69731, CVE-2026-69706, CVE-2026-69779, CVE-2026-69895, CVE-2026-69792, CVE-2026-69853, CVE-2026-69761, CVE-2026-69785, CVE-2026-69818, CVE-2026-69786, CVE-2026-69874, CVE-2026-70565, CVE-2026-70574, CVE-2026-70569, CVE-2026-70575, CVE-2026-71349, CVE-2026-72927, CVE-2026-72952, CVE-2026-72942, CVE-2026-72966, CVE-2026-72967, CVE-2026-69426, CVE-2026-69564, CVE-2026-72985, CVE-2026-73019, CVE-2026-78451, CVE-2026-78452, CVE-2026-83940, CVE-2026-69598, CVE-2026-83995, CVE-2026-83501, CVE-2026-83498.

CVE-2026-69694

A vulnerability in the Windows IP Address Management (IPAM) service allows an authorized local attacker to achieve privilege escalation via the deserialization of untrusted data.

Affected products:

IP Address Management (IPAM) Service

Source: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-69694

CVE-2026-69875

CVE-2026-69875 is a heap-based buffer overflow vulnerability within the Windows NTFS driver that permits an authenticated attacker to perform a privilege escalation attack over the network.

Affected products:

Windows

Source: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-69875

Related in this roundup: CVE-2026-81963, CVE-2026-85880, CVE-2026-69496, CVE-2026-69586, CVE-2026-69768, CVE-2026-73025, CVE-2026-56172, CVE-2026-68832, CVE-2026-68834, CVE-2026-68838, CVE-2026-68841, CVE-2026-68875, CVE-2026-68877, CVE-2026-68880, CVE-2026-69265, CVE-2026-69270, CVE-2026-69274, CVE-2026-69275, CVE-2026-69280, CVE-2026-69283, CVE-2026-69284, CVE-2026-69289, CVE-2026-69296, CVE-2026-69300, CVE-2026-69301, CVE-2026-69307, CVE-2026-69312, CVE-2026-69314, CVE-2026-69332, CVE-2026-69333, CVE-2026-69335, CVE-2026-68833, CVE-2026-68851, CVE-2026-69366, CVE-2026-69337, CVE-2026-69347, CVE-2026-69379, CVE-2026-69390, CVE-2026-69401, CVE-2026-69413, CVE-2026-69420, CVE-2026-69429, CVE-2026-69448, CVE-2026-69455, CVE-2026-69532, CVE-2026-69472, CVE-2026-69479, CVE-2026-69531, CVE-2026-69517, CVE-2026-69505, CVE-2026-69504, CVE-2026-69527, CVE-2026-69549, CVE-2026-69588, CVE-2026-69609, CVE-2026-69648, CVE-2026-69689, CVE-2026-69790, CVE-2026-69638, CVE-2026-69859, CVE-2026-69717, CVE-2026-69711, CVE-2026-69889, CVE-2026-69757, CVE-2026-69741, CVE-2026-69762, CVE-2026-69744, CVE-2026-69832, CVE-2026-69691, CVE-2026-69808, CVE-2026-69775, CVE-2026-69822, CVE-2026-69770, CVE-2026-69676, CVE-2026-70289, CVE-2026-70563, CVE-2026-71329, CVE-2026-71332, CVE-2026-71350, CVE-2026-71348, CVE-2026-71345, CVE-2026-69469, CVE-2026-69501, CVE-2026-69548, CVE-2026-69846, CVE-2026-70283, CVE-2026-72981, CVE-2026-77491, CVE-2026-77492, CVE-2026-77503, CVE-2026-80093, CVE-2026-72949, CVE-2026-70019, CVE-2026-72940, CVE-2026-69573, CVE-2026-70290, CVE-2026-83991, CVE-2026-83999, CVE-2026-69321, CVE-2026-69316, CVE-2026-69340, CVE-2026-69348, CVE-2026-69350, CVE-2026-69353, CVE-2026-69357, CVE-2026-69393, CVE-2026-69410, CVE-2026-69421, CVE-2026-69428, CVE-2026-69425, CVE-2026-69427, CVE-2026-69434, CVE-2026-69456, CVE-2026-69459, CVE-2026-69478, CVE-2026-69561, CVE-2026-69512, CVE-2026-69498, CVE-2026-69571, CVE-2026-69535, CVE-2026-69538, CVE-2026-69591, CVE-2026-69566, CVE-2026-69567, CVE-2026-69584, CVE-2026-69617, CVE-2026-69630, CVE-2026-69610, CVE-2026-69881, CVE-2026-69680, CVE-2026-69619, CVE-2026-69685, CVE-2026-69643, CVE-2026-69687, CVE-2026-69791, CVE-2026-69707, CVE-2026-69652, CVE-2026-69834, CVE-2026-69709, CVE-2026-69844, CVE-2026-69814, CVE-2026-69731, CVE-2026-69706, CVE-2026-69779, CVE-2026-69895, CVE-2026-69792, CVE-2026-69853, CVE-2026-69761, CVE-2026-69785, CVE-2026-69818, CVE-2026-69786, CVE-2026-69874, CVE-2026-70565, CVE-2026-70574, CVE-2026-70569, CVE-2026-70575, CVE-2026-71349, CVE-2026-72927, CVE-2026-72952, CVE-2026-72942, CVE-2026-72966, CVE-2026-72967, CVE-2026-69426, CVE-2026-69564, CVE-2026-72985, CVE-2026-73019, CVE-2026-78451, CVE-2026-78452, CVE-2026-83940, CVE-2026-69598, CVE-2026-83995, CVE-2026-83501, CVE-2026-83498.

CVE-2026-69723

CVE-2026-69723 is an information disclosure vulnerability in the Windows Kernel that allows an authorized attacker to expose sensitive system data over a network. This flaw represents a security risk where internal kernel-level information is leaked to an unauthorized control sphere.

Affected products:

Windows Kernel

Source: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-69723

Related in this roundup: CVE-2026-68846, CVE-2026-68884, CVE-2026-85360, CVE-2026-69406, CVE-2026-69473, CVE-2026-83942, CVE-2026-69466, CVE-2026-69578, CVE-2026-69669.

CVE-2026-69889

A use-after-free vulnerability in the Windows Bluetooth Service allows an attacker with local, authorized access to elevate their privileges on an affected system.

Affected products:

Windows

Source: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-69889

Related in this roundup: CVE-2026-81963, CVE-2026-85880, CVE-2026-69496, CVE-2026-69586, CVE-2026-69768, CVE-2026-73025, CVE-2026-56172, CVE-2026-68832, CVE-2026-68834, CVE-2026-68838, CVE-2026-68841, CVE-2026-68875, CVE-2026-68877, CVE-2026-68880, CVE-2026-69265, CVE-2026-69270, CVE-2026-69274, CVE-2026-69275, CVE-2026-69280, CVE-2026-69283, CVE-2026-69284, CVE-2026-69289, CVE-2026-69296, CVE-2026-69300, CVE-2026-69301, CVE-2026-69307, CVE-2026-69312, CVE-2026-69314, CVE-2026-69332, CVE-2026-69333, CVE-2026-69335, CVE-2026-68833, CVE-2026-68851, CVE-2026-69366, CVE-2026-69337, CVE-2026-69347, CVE-2026-69379, CVE-2026-69390, CVE-2026-69401, CVE-2026-69413, CVE-2026-69420, CVE-2026-69429, CVE-2026-69448, CVE-2026-69455, CVE-2026-69532, CVE-2026-69472, CVE-2026-69479, CVE-2026-69531, CVE-2026-69517, CVE-2026-69505, CVE-2026-69504, CVE-2026-69527, CVE-2026-69549, CVE-2026-69588, CVE-2026-69609, CVE-2026-69648, CVE-2026-69689, CVE-2026-69790, CVE-2026-69638, CVE-2026-69859, CVE-2026-69717, CVE-2026-69711, CVE-2026-69875, CVE-2026-69757, CVE-2026-69741, CVE-2026-69762, CVE-2026-69744, CVE-2026-69832, CVE-2026-69691, CVE-2026-69808, CVE-2026-69775, CVE-2026-69822, CVE-2026-69770, CVE-2026-69676, CVE-2026-70289, CVE-2026-70563, CVE-2026-71329, CVE-2026-71332, CVE-2026-71350, CVE-2026-71348, CVE-2026-71345, CVE-2026-69469, CVE-2026-69501, CVE-2026-69548, CVE-2026-69846, CVE-2026-70283, CVE-2026-72981, CVE-2026-77491, CVE-2026-77492, CVE-2026-77503, CVE-2026-80093, CVE-2026-72949, CVE-2026-70019, CVE-2026-72940, CVE-2026-69573, CVE-2026-70290, CVE-2026-83991, CVE-2026-83999, CVE-2026-69321, CVE-2026-69316, CVE-2026-69340, CVE-2026-69348, CVE-2026-69350, CVE-2026-69353, CVE-2026-69357, CVE-2026-69393, CVE-2026-69410, CVE-2026-69421, CVE-2026-69428, CVE-2026-69425, CVE-2026-69427, CVE-2026-69434, CVE-2026-69456, CVE-2026-69459, CVE-2026-69478, CVE-2026-69561, CVE-2026-69512, CVE-2026-69498, CVE-2026-69571, CVE-2026-69535, CVE-2026-69538, CVE-2026-69591, CVE-2026-69566, CVE-2026-69567, CVE-2026-69584, CVE-2026-69617, CVE-2026-69630, CVE-2026-69610, CVE-2026-69881, CVE-2026-69680, CVE-2026-69619, CVE-2026-69685, CVE-2026-69643, CVE-2026-69687, CVE-2026-69791, CVE-2026-69707, CVE-2026-69652, CVE-2026-69834, CVE-2026-69709, CVE-2026-69844, CVE-2026-69814, CVE-2026-69731, CVE-2026-69706, CVE-2026-69779, CVE-2026-69895, CVE-2026-69792, CVE-2026-69853, CVE-2026-69761, CVE-2026-69785, CVE-2026-69818, CVE-2026-69786, CVE-2026-69874, CVE-2026-70565, CVE-2026-70574, CVE-2026-70569, CVE-2026-70575, CVE-2026-71349, CVE-2026-72927, CVE-2026-72952, CVE-2026-72942, CVE-2026-72966, CVE-2026-72967, CVE-2026-69426, CVE-2026-69564, CVE-2026-72985, CVE-2026-73019, CVE-2026-78451, CVE-2026-78452, CVE-2026-83940, CVE-2026-69598, CVE-2026-83995, CVE-2026-83501, CVE-2026-83498.

CVE-2026-69757

A use-after-free vulnerability in the Windows TCP/IP stack allows a local authorized attacker to escalate privileges via specially crafted network traffic.

Affected products:

Windows

Source: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-69757

Related in this roundup: CVE-2026-81963, CVE-2026-85880, CVE-2026-69496, CVE-2026-69586, CVE-2026-69768, CVE-2026-73025, CVE-2026-56172, CVE-2026-68832, CVE-2026-68834, CVE-2026-68838, CVE-2026-68841, CVE-2026-68875, CVE-2026-68877, CVE-2026-68880, CVE-2026-69265, CVE-2026-69270, CVE-2026-69274, CVE-2026-69275, CVE-2026-69280, CVE-2026-69283, CVE-2026-69284, CVE-2026-69289, CVE-2026-69296, CVE-2026-69300, CVE-2026-69301, CVE-2026-69307, CVE-2026-69312, CVE-2026-69314, CVE-2026-69332, CVE-2026-69333, CVE-2026-69335, CVE-2026-68833, CVE-2026-68851, CVE-2026-69366, CVE-2026-69337, CVE-2026-69347, CVE-2026-69379, CVE-2026-69390, CVE-2026-69401, CVE-2026-69413, CVE-2026-69420, CVE-2026-69429, CVE-2026-69448, CVE-2026-69455, CVE-2026-69532, CVE-2026-69472, CVE-2026-69479, CVE-2026-69531, CVE-2026-69517, CVE-2026-69505, CVE-2026-69504, CVE-2026-69527, CVE-2026-69549, CVE-2026-69588, CVE-2026-69609, CVE-2026-69648, CVE-2026-69689, CVE-2026-69790, CVE-2026-69638, CVE-2026-69859, CVE-2026-69717, CVE-2026-69711, CVE-2026-69875, CVE-2026-69889, CVE-2026-69741, CVE-2026-69762, CVE-2026-69744, CVE-2026-69832, CVE-2026-69691, CVE-2026-69808, CVE-2026-69775, CVE-2026-69822, CVE-2026-69770, CVE-2026-69676, CVE-2026-70289, CVE-2026-70563, CVE-2026-71329, CVE-2026-71332, CVE-2026-71350, CVE-2026-71348, CVE-2026-71345, CVE-2026-69469, CVE-2026-69501, CVE-2026-69548, CVE-2026-69846, CVE-2026-70283, CVE-2026-72981, CVE-2026-77491, CVE-2026-77492, CVE-2026-77503, CVE-2026-80093, CVE-2026-72949, CVE-2026-70019, CVE-2026-72940, CVE-2026-69573, CVE-2026-70290, CVE-2026-83991, CVE-2026-83999, CVE-2026-69321, CVE-2026-69316, CVE-2026-69340, CVE-2026-69348, CVE-2026-69350, CVE-2026-69353, CVE-2026-69357, CVE-2026-69393, CVE-2026-69410, CVE-2026-69421, CVE-2026-69428, CVE-2026-69425, CVE-2026-69427, CVE-2026-69434, CVE-2026-69456, CVE-2026-69459, CVE-2026-69478, CVE-2026-69561, CVE-2026-69512, CVE-2026-69498, CVE-2026-69571, CVE-2026-69535, CVE-2026-69538, CVE-2026-69591, CVE-2026-69566, CVE-2026-69567, CVE-2026-69584, CVE-2026-69617, CVE-2026-69630, CVE-2026-69610, CVE-2026-69881, CVE-2026-69680, CVE-2026-69619, CVE-2026-69685, CVE-2026-69643, CVE-2026-69687, CVE-2026-69791, CVE-2026-69707, CVE-2026-69652, CVE-2026-69834, CVE-2026-69709, CVE-2026-69844, CVE-2026-69814, CVE-2026-69731, CVE-2026-69706, CVE-2026-69779, CVE-2026-69895, CVE-2026-69792, CVE-2026-69853, CVE-2026-69761, CVE-2026-69785, CVE-2026-69818, CVE-2026-69786, CVE-2026-69874, CVE-2026-70565, CVE-2026-70574, CVE-2026-70569, CVE-2026-70575, CVE-2026-71349, CVE-2026-72927, CVE-2026-72952, CVE-2026-72942, CVE-2026-72966, CVE-2026-72967, CVE-2026-69426, CVE-2026-69564, CVE-2026-72985, CVE-2026-73019, CVE-2026-78451, CVE-2026-78452, CVE-2026-83940, CVE-2026-69598, CVE-2026-83995, CVE-2026-83501, CVE-2026-83498.

CVE-2026-69681

The Virtual Hard Disk (VHD) Miniport Driver contains a heap-based buffer overflow vulnerability that allows an authorized attacker to achieve privilege escalation over a network.

Affected products:

Virtual Hard Disk (VHD) Miniport Driver

Source: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-69681

Related in this roundup: CVE-2026-69541, CVE-2026-81355, CVE-2026-69384, CVE-2026-69611.

CVE-2026-69896

A use-after-free vulnerability in the Windows Error Reporting component allows an authenticated local attacker to escalate their privileges to a higher integrity level on affected Windows systems.

Affected products:

Windows Error Reporting

Source: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-69896

Related in this roundup: CVE-2026-68894, CVE-2026-69362, CVE-2026-69436, CVE-2026-69513, CVE-2026-69450, CVE-2026-69684, CVE-2026-83996, CVE-2026-69433, CVE-2026-69462, CVE-2026-69482, CVE-2026-69612.

CVE-2026-69735

A use-after-free vulnerability in the Windows Broadcast DVR User Service allows an authenticated attacker to gain elevated privileges on the local system by exploiting improper memory management.

Affected products:

Windows Broadcast DVR User Service

Source: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-69735

CVE-2026-69741

An out-of-bounds read vulnerability exists in the Windows Spaceport.sys driver, which can be exploited by a locally authorized attacker to perform information disclosure. The flaw stems from improper memory handling, potentially allowing sensitive data to be read from unauthorized locations.

Affected products:

Windows

Source: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-69741

Related in this roundup: CVE-2026-81963, CVE-2026-85880, CVE-2026-69496, CVE-2026-69586, CVE-2026-69768, CVE-2026-73025, CVE-2026-56172, CVE-2026-68832, CVE-2026-68834, CVE-2026-68838, CVE-2026-68841, CVE-2026-68875, CVE-2026-68877, CVE-2026-68880, CVE-2026-69265, CVE-2026-69270, CVE-2026-69274, CVE-2026-69275, CVE-2026-69280, CVE-2026-69283, CVE-2026-69284, CVE-2026-69289, CVE-2026-69296, CVE-2026-69300, CVE-2026-69301, CVE-2026-69307, CVE-2026-69312, CVE-2026-69314, CVE-2026-69332, CVE-2026-69333, CVE-2026-69335, CVE-2026-68833, CVE-2026-68851, CVE-2026-69366, CVE-2026-69337, CVE-2026-69347, CVE-2026-69379, CVE-2026-69390, CVE-2026-69401, CVE-2026-69413, CVE-2026-69420, CVE-2026-69429, CVE-2026-69448, CVE-2026-69455, CVE-2026-69532, CVE-2026-69472, CVE-2026-69479, CVE-2026-69531, CVE-2026-69517, CVE-2026-69505, CVE-2026-69504, CVE-2026-69527, CVE-2026-69549, CVE-2026-69588, CVE-2026-69609, CVE-2026-69648, CVE-2026-69689, CVE-2026-69790, CVE-2026-69638, CVE-2026-69859, CVE-2026-69717, CVE-2026-69711, CVE-2026-69875, CVE-2026-69889, CVE-2026-69757, CVE-2026-69762, CVE-2026-69744, CVE-2026-69832, CVE-2026-69691, CVE-2026-69808, CVE-2026-69775, CVE-2026-69822, CVE-2026-69770, CVE-2026-69676, CVE-2026-70289, CVE-2026-70563, CVE-2026-71329, CVE-2026-71332, CVE-2026-71350, CVE-2026-71348, CVE-2026-71345, CVE-2026-69469, CVE-2026-69501, CVE-2026-69548, CVE-2026-69846, CVE-2026-70283, CVE-2026-72981, CVE-2026-77491, CVE-2026-77492, CVE-2026-77503, CVE-2026-80093, CVE-2026-72949, CVE-2026-70019, CVE-2026-72940, CVE-2026-69573, CVE-2026-70290, CVE-2026-83991, CVE-2026-83999, CVE-2026-69321, CVE-2026-69316, CVE-2026-69340, CVE-2026-69348, CVE-2026-69350, CVE-2026-69353, CVE-2026-69357, CVE-2026-69393, CVE-2026-69410, CVE-2026-69421, CVE-2026-69428, CVE-2026-69425, CVE-2026-69427, CVE-2026-69434, CVE-2026-69456, CVE-2026-69459, CVE-2026-69478, CVE-2026-69561, CVE-2026-69512, CVE-2026-69498, CVE-2026-69571, CVE-2026-69535, CVE-2026-69538, CVE-2026-69591, CVE-2026-69566, CVE-2026-69567, CVE-2026-69584, CVE-2026-69617, CVE-2026-69630, CVE-2026-69610, CVE-2026-69881, CVE-2026-69680, CVE-2026-69619, CVE-2026-69685, CVE-2026-69643, CVE-2026-69687, CVE-2026-69791, CVE-2026-69707, CVE-2026-69652, CVE-2026-69834, CVE-2026-69709, CVE-2026-69844, CVE-2026-69814, CVE-2026-69731, CVE-2026-69706, CVE-2026-69779, CVE-2026-69895, CVE-2026-69792, CVE-2026-69853, CVE-2026-69761, CVE-2026-69785, CVE-2026-69818, CVE-2026-69786, CVE-2026-69874, CVE-2026-70565, CVE-2026-70574, CVE-2026-70569, CVE-2026-70575, CVE-2026-71349, CVE-2026-72927, CVE-2026-72952, CVE-2026-72942, CVE-2026-72966, CVE-2026-72967, CVE-2026-69426, CVE-2026-69564, CVE-2026-72985, CVE-2026-73019, CVE-2026-78451, CVE-2026-78452, CVE-2026-83940, CVE-2026-69598, CVE-2026-83995, CVE-2026-83501, CVE-2026-83498.

CVE-2026-69762

A stack-based buffer overflow vulnerability exists in the Windows Win32k component, which can be exploited by an authenticated attacker to perform privilege escalation over a network.

Affected products:

Windows

Source: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-69762

Related in this roundup: CVE-2026-81963, CVE-2026-85880, CVE-2026-69496, CVE-2026-69586, CVE-2026-69768, CVE-2026-73025, CVE-2026-56172, CVE-2026-68832, CVE-2026-68834, CVE-2026-68838, CVE-2026-68841, CVE-2026-68875, CVE-2026-68877, CVE-2026-68880, CVE-2026-69265, CVE-2026-69270, CVE-2026-69274, CVE-2026-69275, CVE-2026-69280, CVE-2026-69283, CVE-2026-69284, CVE-2026-69289, CVE-2026-69296, CVE-2026-69300, CVE-2026-69301, CVE-2026-69307, CVE-2026-69312, CVE-2026-69314, CVE-2026-69332, CVE-2026-69333, CVE-2026-69335, CVE-2026-68833, CVE-2026-68851, CVE-2026-69366, CVE-2026-69337, CVE-2026-69347, CVE-2026-69379, CVE-2026-69390, CVE-2026-69401, CVE-2026-69413, CVE-2026-69420, CVE-2026-69429, CVE-2026-69448, CVE-2026-69455, CVE-2026-69532, CVE-2026-69472, CVE-2026-69479, CVE-2026-69531, CVE-2026-69517, CVE-2026-69505, CVE-2026-69504, CVE-2026-69527, CVE-2026-69549, CVE-2026-69588, CVE-2026-69609, CVE-2026-69648, CVE-2026-69689, CVE-2026-69790, CVE-2026-69638, CVE-2026-69859, CVE-2026-69717, CVE-2026-69711, CVE-2026-69875, CVE-2026-69889, CVE-2026-69757, CVE-2026-69741, CVE-2026-69744, CVE-2026-69832, CVE-2026-69691, CVE-2026-69808, CVE-2026-69775, CVE-2026-69822, CVE-2026-69770, CVE-2026-69676, CVE-2026-70289, CVE-2026-70563, CVE-2026-71329, CVE-2026-71332, CVE-2026-71350, CVE-2026-71348, CVE-2026-71345, CVE-2026-69469, CVE-2026-69501, CVE-2026-69548, CVE-2026-69846, CVE-2026-70283, CVE-2026-72981, CVE-2026-77491, CVE-2026-77492, CVE-2026-77503, CVE-2026-80093, CVE-2026-72949, CVE-2026-70019, CVE-2026-72940, CVE-2026-69573, CVE-2026-70290, CVE-2026-83991, CVE-2026-83999, CVE-2026-69321, CVE-2026-69316, CVE-2026-69340, CVE-2026-69348, CVE-2026-69350, CVE-2026-69353, CVE-2026-69357, CVE-2026-69393, CVE-2026-69410, CVE-2026-69421, CVE-2026-69428, CVE-2026-69425, CVE-2026-69427, CVE-2026-69434, CVE-2026-69456, CVE-2026-69459, CVE-2026-69478, CVE-2026-69561, CVE-2026-69512, CVE-2026-69498, CVE-2026-69571, CVE-2026-69535, CVE-2026-69538, CVE-2026-69591, CVE-2026-69566, CVE-2026-69567, CVE-2026-69584, CVE-2026-69617, CVE-2026-69630, CVE-2026-69610, CVE-2026-69881, CVE-2026-69680, CVE-2026-69619, CVE-2026-69685, CVE-2026-69643, CVE-2026-69687, CVE-2026-69791, CVE-2026-69707, CVE-2026-69652, CVE-2026-69834, CVE-2026-69709, CVE-2026-69844, CVE-2026-69814, CVE-2026-69731, CVE-2026-69706, CVE-2026-69779, CVE-2026-69895, CVE-2026-69792, CVE-2026-69853, CVE-2026-69761, CVE-2026-69785, CVE-2026-69818, CVE-2026-69786, CVE-2026-69874, CVE-2026-70565, CVE-2026-70574, CVE-2026-70569, CVE-2026-70575, CVE-2026-71349, CVE-2026-72927, CVE-2026-72952, CVE-2026-72942, CVE-2026-72966, CVE-2026-72967, CVE-2026-69426, CVE-2026-69564, CVE-2026-72985, CVE-2026-73019, CVE-2026-78451, CVE-2026-78452, CVE-2026-83940, CVE-2026-69598, CVE-2026-83995, CVE-2026-83501, CVE-2026-83498.

CVE-2026-69744

A null pointer dereference vulnerability exists within the Windows Kerberos component, allowing an unauthenticated remote attacker to trigger a denial of service condition by sending specially crafted network traffic.

Affected products:

Windows

Source: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-69744

Related in this roundup: CVE-2026-81963, CVE-2026-85880, CVE-2026-69496, CVE-2026-69586, CVE-2026-69768, CVE-2026-73025, CVE-2026-56172, CVE-2026-68832, CVE-2026-68834, CVE-2026-68838, CVE-2026-68841, CVE-2026-68875, CVE-2026-68877, CVE-2026-68880, CVE-2026-69265, CVE-2026-69270, CVE-2026-69274, CVE-2026-69275, CVE-2026-69280, CVE-2026-69283, CVE-2026-69284, CVE-2026-69289, CVE-2026-69296, CVE-2026-69300, CVE-2026-69301, CVE-2026-69307, CVE-2026-69312, CVE-2026-69314, CVE-2026-69332, CVE-2026-69333, CVE-2026-69335, CVE-2026-68833, CVE-2026-68851, CVE-2026-69366, CVE-2026-69337, CVE-2026-69347, CVE-2026-69379, CVE-2026-69390, CVE-2026-69401, CVE-2026-69413, CVE-2026-69420, CVE-2026-69429, CVE-2026-69448, CVE-2026-69455, CVE-2026-69532, CVE-2026-69472, CVE-2026-69479, CVE-2026-69531, CVE-2026-69517, CVE-2026-69505, CVE-2026-69504, CVE-2026-69527, CVE-2026-69549, CVE-2026-69588, CVE-2026-69609, CVE-2026-69648, CVE-2026-69689, CVE-2026-69790, CVE-2026-69638, CVE-2026-69859, CVE-2026-69717, CVE-2026-69711, CVE-2026-69875, CVE-2026-69889, CVE-2026-69757, CVE-2026-69741, CVE-2026-69762, CVE-2026-69832, CVE-2026-69691, CVE-2026-69808, CVE-2026-69775, CVE-2026-69822, CVE-2026-69770, CVE-2026-69676, CVE-2026-70289, CVE-2026-70563, CVE-2026-71329, CVE-2026-71332, CVE-2026-71350, CVE-2026-71348, CVE-2026-71345, CVE-2026-69469, CVE-2026-69501, CVE-2026-69548, CVE-2026-69846, CVE-2026-70283, CVE-2026-72981, CVE-2026-77491, CVE-2026-77492, CVE-2026-77503, CVE-2026-80093, CVE-2026-72949, CVE-2026-70019, CVE-2026-72940, CVE-2026-69573, CVE-2026-70290, CVE-2026-83991, CVE-2026-83999, CVE-2026-69321, CVE-2026-69316, CVE-2026-69340, CVE-2026-69348, CVE-2026-69350, CVE-2026-69353, CVE-2026-69357, CVE-2026-69393, CVE-2026-69410, CVE-2026-69421, CVE-2026-69428, CVE-2026-69425, CVE-2026-69427, CVE-2026-69434, CVE-2026-69456, CVE-2026-69459, CVE-2026-69478, CVE-2026-69561, CVE-2026-69512, CVE-2026-69498, CVE-2026-69571, CVE-2026-69535, CVE-2026-69538, CVE-2026-69591, CVE-2026-69566, CVE-2026-69567, CVE-2026-69584, CVE-2026-69617, CVE-2026-69630, CVE-2026-69610, CVE-2026-69881, CVE-2026-69680, CVE-2026-69619, CVE-2026-69685, CVE-2026-69643, CVE-2026-69687, CVE-2026-69791, CVE-2026-69707, CVE-2026-69652, CVE-2026-69834, CVE-2026-69709, CVE-2026-69844, CVE-2026-69814, CVE-2026-69731, CVE-2026-69706, CVE-2026-69779, CVE-2026-69895, CVE-2026-69792, CVE-2026-69853, CVE-2026-69761, CVE-2026-69785, CVE-2026-69818, CVE-2026-69786, CVE-2026-69874, CVE-2026-70565, CVE-2026-70574, CVE-2026-70569, CVE-2026-70575, CVE-2026-71349, CVE-2026-72927, CVE-2026-72952, CVE-2026-72942, CVE-2026-72966, CVE-2026-72967, CVE-2026-69426, CVE-2026-69564, CVE-2026-72985, CVE-2026-73019, CVE-2026-78451, CVE-2026-78452, CVE-2026-83940, CVE-2026-69598, CVE-2026-83995, CVE-2026-83501, CVE-2026-83498.

CVE-2026-69862

CVE-2026-69862 is an out-of-bounds read vulnerability in the Windows Wireless Wide Area Network Service that enables an authenticated local attacker to perform information disclosure. Detection engineers should monitor for unusual access patterns or crashes associated with the wwansvc service.

Affected products:

Windows Wireless Wide Area Network Service

Source: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-69862

CVE-2026-69832

CVE-2026-69832 is an information disclosure vulnerability in the Windows Win32k component that allows a local, authorized attacker to gain access to sensitive system information due to improper handling of information in the control sphere.

Affected products:

Windows

Source: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-69832

Related in this roundup: CVE-2026-81963, CVE-2026-85880, CVE-2026-69496, CVE-2026-69586, CVE-2026-69768, CVE-2026-73025, CVE-2026-56172, CVE-2026-68832, CVE-2026-68834, CVE-2026-68838, CVE-2026-68841, CVE-2026-68875, CVE-2026-68877, CVE-2026-68880, CVE-2026-69265, CVE-2026-69270, CVE-2026-69274, CVE-2026-69275, CVE-2026-69280, CVE-2026-69283, CVE-2026-69284, CVE-2026-69289, CVE-2026-69296, CVE-2026-69300, CVE-2026-69301, CVE-2026-69307, CVE-2026-69312, CVE-2026-69314, CVE-2026-69332, CVE-2026-69333, CVE-2026-69335, CVE-2026-68833, CVE-2026-68851, CVE-2026-69366, CVE-2026-69337, CVE-2026-69347, CVE-2026-69379, CVE-2026-69390, CVE-2026-69401, CVE-2026-69413, CVE-2026-69420, CVE-2026-69429, CVE-2026-69448, CVE-2026-69455, CVE-2026-69532, CVE-2026-69472, CVE-2026-69479, CVE-2026-69531, CVE-2026-69517, CVE-2026-69505, CVE-2026-69504, CVE-2026-69527, CVE-2026-69549, CVE-2026-69588, CVE-2026-69609, CVE-2026-69648, CVE-2026-69689, CVE-2026-69790, CVE-2026-69638, CVE-2026-69859, CVE-2026-69717, CVE-2026-69711, CVE-2026-69875, CVE-2026-69889, CVE-2026-69757, CVE-2026-69741, CVE-2026-69762, CVE-2026-69744, CVE-2026-69691, CVE-2026-69808, CVE-2026-69775, CVE-2026-69822, CVE-2026-69770, CVE-2026-69676, CVE-2026-70289, CVE-2026-70563, CVE-2026-71329, CVE-2026-71332, CVE-2026-71350, CVE-2026-71348, CVE-2026-71345, CVE-2026-69469, CVE-2026-69501, CVE-2026-69548, CVE-2026-69846, CVE-2026-70283, CVE-2026-72981, CVE-2026-77491, CVE-2026-77492, CVE-2026-77503, CVE-2026-80093, CVE-2026-72949, CVE-2026-70019, CVE-2026-72940, CVE-2026-69573, CVE-2026-70290, CVE-2026-83991, CVE-2026-83999, CVE-2026-69321, CVE-2026-69316, CVE-2026-69340, CVE-2026-69348, CVE-2026-69350, CVE-2026-69353, CVE-2026-69357, CVE-2026-69393, CVE-2026-69410, CVE-2026-69421, CVE-2026-69428, CVE-2026-69425, CVE-2026-69427, CVE-2026-69434, CVE-2026-69456, CVE-2026-69459, CVE-2026-69478, CVE-2026-69561, CVE-2026-69512, CVE-2026-69498, CVE-2026-69571, CVE-2026-69535, CVE-2026-69538, CVE-2026-69591, CVE-2026-69566, CVE-2026-69567, CVE-2026-69584, CVE-2026-69617, CVE-2026-69630, CVE-2026-69610, CVE-2026-69881, CVE-2026-69680, CVE-2026-69619, CVE-2026-69685, CVE-2026-69643, CVE-2026-69687, CVE-2026-69791, CVE-2026-69707, CVE-2026-69652, CVE-2026-69834, CVE-2026-69709, CVE-2026-69844, CVE-2026-69814, CVE-2026-69731, CVE-2026-69706, CVE-2026-69779, CVE-2026-69895, CVE-2026-69792, CVE-2026-69853, CVE-2026-69761, CVE-2026-69785, CVE-2026-69818, CVE-2026-69786, CVE-2026-69874, CVE-2026-70565, CVE-2026-70574, CVE-2026-70569, CVE-2026-70575, CVE-2026-71349, CVE-2026-72927, CVE-2026-72952, CVE-2026-72942, CVE-2026-72966, CVE-2026-72967, CVE-2026-69426, CVE-2026-69564, CVE-2026-72985, CVE-2026-73019, CVE-2026-78451, CVE-2026-78452, CVE-2026-83940, CVE-2026-69598, CVE-2026-83995, CVE-2026-83501, CVE-2026-83498.

CVE-2026-69691

CVE-2026-69691 describes a heap-based buffer overflow vulnerability within the Windows Spaceport.sys driver. This vulnerability can be exploited by a locally authenticated attacker to achieve privilege escalation on the affected Windows system.

Affected products:

Windows

Source: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-69691

Related in this roundup: CVE-2026-81963, CVE-2026-85880, CVE-2026-69496, CVE-2026-69586, CVE-2026-69768, CVE-2026-73025, CVE-2026-56172, CVE-2026-68832, CVE-2026-68834, CVE-2026-68838, CVE-2026-68841, CVE-2026-68875, CVE-2026-68877, CVE-2026-68880, CVE-2026-69265, CVE-2026-69270, CVE-2026-69274, CVE-2026-69275, CVE-2026-69280, CVE-2026-69283, CVE-2026-69284, CVE-2026-69289, CVE-2026-69296, CVE-2026-69300, CVE-2026-69301, CVE-2026-69307, CVE-2026-69312, CVE-2026-69314, CVE-2026-69332, CVE-2026-69333, CVE-2026-69335, CVE-2026-68833, CVE-2026-68851, CVE-2026-69366, CVE-2026-69337, CVE-2026-69347, CVE-2026-69379, CVE-2026-69390, CVE-2026-69401, CVE-2026-69413, CVE-2026-69420, CVE-2026-69429, CVE-2026-69448, CVE-2026-69455, CVE-2026-69532, CVE-2026-69472, CVE-2026-69479, CVE-2026-69531, CVE-2026-69517, CVE-2026-69505, CVE-2026-69504, CVE-2026-69527, CVE-2026-69549, CVE-2026-69588, CVE-2026-69609, CVE-2026-69648, CVE-2026-69689, CVE-2026-69790, CVE-2026-69638, CVE-2026-69859, CVE-2026-69717, CVE-2026-69711, CVE-2026-69875, CVE-2026-69889, CVE-2026-69757, CVE-2026-69741, CVE-2026-69762, CVE-2026-69744, CVE-2026-69832, CVE-2026-69808, CVE-2026-69775, CVE-2026-69822, CVE-2026-69770, CVE-2026-69676, CVE-2026-70289, CVE-2026-70563, CVE-2026-71329, CVE-2026-71332, CVE-2026-71350, CVE-2026-71348, CVE-2026-71345, CVE-2026-69469, CVE-2026-69501, CVE-2026-69548, CVE-2026-69846, CVE-2026-70283, CVE-2026-72981, CVE-2026-77491, CVE-2026-77492, CVE-2026-77503, CVE-2026-80093, CVE-2026-72949, CVE-2026-70019, CVE-2026-72940, CVE-2026-69573, CVE-2026-70290, CVE-2026-83991, CVE-2026-83999, CVE-2026-69321, CVE-2026-69316, CVE-2026-69340, CVE-2026-69348, CVE-2026-69350, CVE-2026-69353, CVE-2026-69357, CVE-2026-69393, CVE-2026-69410, CVE-2026-69421, CVE-2026-69428, CVE-2026-69425, CVE-2026-69427, CVE-2026-69434, CVE-2026-69456, CVE-2026-69459, CVE-2026-69478, CVE-2026-69561, CVE-2026-69512, CVE-2026-69498, CVE-2026-69571, CVE-2026-69535, CVE-2026-69538, CVE-2026-69591, CVE-2026-69566, CVE-2026-69567, CVE-2026-69584, CVE-2026-69617, CVE-2026-69630, CVE-2026-69610, CVE-2026-69881, CVE-2026-69680, CVE-2026-69619, CVE-2026-69685, CVE-2026-69643, CVE-2026-69687, CVE-2026-69791, CVE-2026-69707, CVE-2026-69652, CVE-2026-69834, CVE-2026-69709, CVE-2026-69844, CVE-2026-69814, CVE-2026-69731, CVE-2026-69706, CVE-2026-69779, CVE-2026-69895, CVE-2026-69792, CVE-2026-69853, CVE-2026-69761, CVE-2026-69785, CVE-2026-69818, CVE-2026-69786, CVE-2026-69874, CVE-2026-70565, CVE-2026-70574, CVE-2026-70569, CVE-2026-70575, CVE-2026-71349, CVE-2026-72927, CVE-2026-72952, CVE-2026-72942, CVE-2026-72966, CVE-2026-72967, CVE-2026-69426, CVE-2026-69564, CVE-2026-72985, CVE-2026-73019, CVE-2026-78451, CVE-2026-78452, CVE-2026-83940, CVE-2026-69598, CVE-2026-83995, CVE-2026-83501, CVE-2026-83498.

CVE-2026-69838

CVE-2026-69838 describes a use-after-free vulnerability within the Windows Print Spooler components. An authorized local attacker can exploit this flaw to achieve elevation of privilege on an affected Windows system.

Affected products:

Windows Print Spooler

Source: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-69838

Related in this roundup: CVE-2026-68835, CVE-2026-68848, CVE-2026-69309, CVE-2026-69552, CVE-2026-70564, CVE-2026-85877, CVE-2026-69344, CVE-2026-69346, CVE-2026-69569, CVE-2026-69921.

CVE-2026-69808

A vulnerability in the Windows Win32k subsystem permits an authorized local attacker to perform an out-of-bounds read, potentially leading to the unauthorized disclosure of sensitive information stored within kernel memory.

Affected products:

Windows

Source: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-69808

Related in this roundup: CVE-2026-81963, CVE-2026-85880, CVE-2026-69496, CVE-2026-69586, CVE-2026-69768, CVE-2026-73025, CVE-2026-56172, CVE-2026-68832, CVE-2026-68834, CVE-2026-68838, CVE-2026-68841, CVE-2026-68875, CVE-2026-68877, CVE-2026-68880, CVE-2026-69265, CVE-2026-69270, CVE-2026-69274, CVE-2026-69275, CVE-2026-69280, CVE-2026-69283, CVE-2026-69284, CVE-2026-69289, CVE-2026-69296, CVE-2026-69300, CVE-2026-69301, CVE-2026-69307, CVE-2026-69312, CVE-2026-69314, CVE-2026-69332, CVE-2026-69333, CVE-2026-69335, CVE-2026-68833, CVE-2026-68851, CVE-2026-69366, CVE-2026-69337, CVE-2026-69347, CVE-2026-69379, CVE-2026-69390, CVE-2026-69401, CVE-2026-69413, CVE-2026-69420, CVE-2026-69429, CVE-2026-69448, CVE-2026-69455, CVE-2026-69532, CVE-2026-69472, CVE-2026-69479, CVE-2026-69531, CVE-2026-69517, CVE-2026-69505, CVE-2026-69504, CVE-2026-69527, CVE-2026-69549, CVE-2026-69588, CVE-2026-69609, CVE-2026-69648, CVE-2026-69689, CVE-2026-69790, CVE-2026-69638, CVE-2026-69859, CVE-2026-69717, CVE-2026-69711, CVE-2026-69875, CVE-2026-69889, CVE-2026-69757, CVE-2026-69741, CVE-2026-69762, CVE-2026-69744, CVE-2026-69832, CVE-2026-69691, CVE-2026-69775, CVE-2026-69822, CVE-2026-69770, CVE-2026-69676, CVE-2026-70289, CVE-2026-70563, CVE-2026-71329, CVE-2026-71332, CVE-2026-71350, CVE-2026-71348, CVE-2026-71345, CVE-2026-69469, CVE-2026-69501, CVE-2026-69548, CVE-2026-69846, CVE-2026-70283, CVE-2026-72981, CVE-2026-77491, CVE-2026-77492, CVE-2026-77503, CVE-2026-80093, CVE-2026-72949, CVE-2026-70019, CVE-2026-72940, CVE-2026-69573, CVE-2026-70290, CVE-2026-83991, CVE-2026-83999, CVE-2026-69321, CVE-2026-69316, CVE-2026-69340, CVE-2026-69348, CVE-2026-69350, CVE-2026-69353, CVE-2026-69357, CVE-2026-69393, CVE-2026-69410, CVE-2026-69421, CVE-2026-69428, CVE-2026-69425, CVE-2026-69427, CVE-2026-69434, CVE-2026-69456, CVE-2026-69459, CVE-2026-69478, CVE-2026-69561, CVE-2026-69512, CVE-2026-69498, CVE-2026-69571, CVE-2026-69535, CVE-2026-69538, CVE-2026-69591, CVE-2026-69566, CVE-2026-69567, CVE-2026-69584, CVE-2026-69617, CVE-2026-69630, CVE-2026-69610, CVE-2026-69881, CVE-2026-69680, CVE-2026-69619, CVE-2026-69685, CVE-2026-69643, CVE-2026-69687, CVE-2026-69791, CVE-2026-69707, CVE-2026-69652, CVE-2026-69834, CVE-2026-69709, CVE-2026-69844, CVE-2026-69814, CVE-2026-69731, CVE-2026-69706, CVE-2026-69779, CVE-2026-69895, CVE-2026-69792, CVE-2026-69853, CVE-2026-69761, CVE-2026-69785, CVE-2026-69818, CVE-2026-69786, CVE-2026-69874, CVE-2026-70565, CVE-2026-70574, CVE-2026-70569, CVE-2026-70575, CVE-2026-71349, CVE-2026-72927, CVE-2026-72952, CVE-2026-72942, CVE-2026-72966, CVE-2026-72967, CVE-2026-69426, CVE-2026-69564, CVE-2026-72985, CVE-2026-73019, CVE-2026-78451, CVE-2026-78452, CVE-2026-83940, CVE-2026-69598, CVE-2026-83995, CVE-2026-83501, CVE-2026-83498.

CVE-2026-69839

CVE-2026-69839 describes a denial of service vulnerability in the Windows iSCSI Target Service caused by an uncaught exception. An authorized attacker can exploit this remotely to crash the service, resulting in a loss of availability for iSCSI storage resources.

Affected products:

Windows iSCSI Target Service

Source: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-69839

CVE-2026-69772

CVE-2026-69772 describes a heap-based buffer overflow vulnerability in the Windows Network File System (NFS) component. An unauthorized remote attacker can leverage this vulnerability to execute arbitrary code on an affected system via network requests.

Affected products:

Windows Network File System

Source: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-69772

Related in this roundup: CVE-2026-69372.

CVE-2026-69775

CVE-2026-69775 is a use-after-free vulnerability in the Windows Desktop Window Manager (DWM) Core Library that allows an authenticated attacker to perform local or network-based privilege escalation.

Affected products:

Windows

Source: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-69775

Related in this roundup: CVE-2026-81963, CVE-2026-85880, CVE-2026-69496, CVE-2026-69586, CVE-2026-69768, CVE-2026-73025, CVE-2026-56172, CVE-2026-68832, CVE-2026-68834, CVE-2026-68838, CVE-2026-68841, CVE-2026-68875, CVE-2026-68877, CVE-2026-68880, CVE-2026-69265, CVE-2026-69270, CVE-2026-69274, CVE-2026-69275, CVE-2026-69280, CVE-2026-69283, CVE-2026-69284, CVE-2026-69289, CVE-2026-69296, CVE-2026-69300, CVE-2026-69301, CVE-2026-69307, CVE-2026-69312, CVE-2026-69314, CVE-2026-69332, CVE-2026-69333, CVE-2026-69335, CVE-2026-68833, CVE-2026-68851, CVE-2026-69366, CVE-2026-69337, CVE-2026-69347, CVE-2026-69379, CVE-2026-69390, CVE-2026-69401, CVE-2026-69413, CVE-2026-69420, CVE-2026-69429, CVE-2026-69448, CVE-2026-69455, CVE-2026-69532, CVE-2026-69472, CVE-2026-69479, CVE-2026-69531, CVE-2026-69517, CVE-2026-69505, CVE-2026-69504, CVE-2026-69527, CVE-2026-69549, CVE-2026-69588, CVE-2026-69609, CVE-2026-69648, CVE-2026-69689, CVE-2026-69790, CVE-2026-69638, CVE-2026-69859, CVE-2026-69717, CVE-2026-69711, CVE-2026-69875, CVE-2026-69889, CVE-2026-69757, CVE-2026-69741, CVE-2026-69762, CVE-2026-69744, CVE-2026-69832, CVE-2026-69691, CVE-2026-69808, CVE-2026-69822, CVE-2026-69770, CVE-2026-69676, CVE-2026-70289, CVE-2026-70563, CVE-2026-71329, CVE-2026-71332, CVE-2026-71350, CVE-2026-71348, CVE-2026-71345, CVE-2026-69469, CVE-2026-69501, CVE-2026-69548, CVE-2026-69846, CVE-2026-70283, CVE-2026-72981, CVE-2026-77491, CVE-2026-77492, CVE-2026-77503, CVE-2026-80093, CVE-2026-72949, CVE-2026-70019, CVE-2026-72940, CVE-2026-69573, CVE-2026-70290, CVE-2026-83991, CVE-2026-83999, CVE-2026-69321, CVE-2026-69316, CVE-2026-69340, CVE-2026-69348, CVE-2026-69350, CVE-2026-69353, CVE-2026-69357, CVE-2026-69393, CVE-2026-69410, CVE-2026-69421, CVE-2026-69428, CVE-2026-69425, CVE-2026-69427, CVE-2026-69434, CVE-2026-69456, CVE-2026-69459, CVE-2026-69478, CVE-2026-69561, CVE-2026-69512, CVE-2026-69498, CVE-2026-69571, CVE-2026-69535, CVE-2026-69538, CVE-2026-69591, CVE-2026-69566, CVE-2026-69567, CVE-2026-69584, CVE-2026-69617, CVE-2026-69630, CVE-2026-69610, CVE-2026-69881, CVE-2026-69680, CVE-2026-69619, CVE-2026-69685, CVE-2026-69643, CVE-2026-69687, CVE-2026-69791, CVE-2026-69707, CVE-2026-69652, CVE-2026-69834, CVE-2026-69709, CVE-2026-69844, CVE-2026-69814, CVE-2026-69731, CVE-2026-69706, CVE-2026-69779, CVE-2026-69895, CVE-2026-69792, CVE-2026-69853, CVE-2026-69761, CVE-2026-69785, CVE-2026-69818, CVE-2026-69786, CVE-2026-69874, CVE-2026-70565, CVE-2026-70574, CVE-2026-70569, CVE-2026-70575, CVE-2026-71349, CVE-2026-72927, CVE-2026-72952, CVE-2026-72942, CVE-2026-72966, CVE-2026-72967, CVE-2026-69426, CVE-2026-69564, CVE-2026-72985, CVE-2026-73019, CVE-2026-78451, CVE-2026-78452, CVE-2026-83940, CVE-2026-69598, CVE-2026-83995, CVE-2026-83501, CVE-2026-83498.

CVE-2026-69758

A heap-based buffer overflow vulnerability in the Windows Universal Disk Format File System Driver (UDFS) allows a locally authenticated attacker to achieve privilege escalation. This vulnerability represents a kernel-level security flaw impacting the Windows storage driver subsystem.

Affected products:

Windows Universal Disk Format File System Driver

Source: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-69758

Related in this roundup: CVE-2026-69592.

CVE-2026-69771

CVE-2026-69771 is a security feature bypass vulnerability in the Windows Container Manager Service. It is caused by improper link resolution before file access, which allows an authorized local attacker to perform unauthorized file operations, potentially leading to security feature bypass.

Affected products:

Windows Container Manager Service

Source: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-69771

CVE-2026-69822

A numeric truncation vulnerability exists in the Windows Kerberos implementation, which can be exploited by an authenticated local attacker to gain elevated privileges.

Affected products:

Windows

Source: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-69822

Related in this roundup: CVE-2026-81963, CVE-2026-85880, CVE-2026-69496, CVE-2026-69586, CVE-2026-69768, CVE-2026-73025, CVE-2026-56172, CVE-2026-68832, CVE-2026-68834, CVE-2026-68838, CVE-2026-68841, CVE-2026-68875, CVE-2026-68877, CVE-2026-68880, CVE-2026-69265, CVE-2026-69270, CVE-2026-69274, CVE-2026-69275, CVE-2026-69280, CVE-2026-69283, CVE-2026-69284, CVE-2026-69289, CVE-2026-69296, CVE-2026-69300, CVE-2026-69301, CVE-2026-69307, CVE-2026-69312, CVE-2026-69314, CVE-2026-69332, CVE-2026-69333, CVE-2026-69335, CVE-2026-68833, CVE-2026-68851, CVE-2026-69366, CVE-2026-69337, CVE-2026-69347, CVE-2026-69379, CVE-2026-69390, CVE-2026-69401, CVE-2026-69413, CVE-2026-69420, CVE-2026-69429, CVE-2026-69448, CVE-2026-69455, CVE-2026-69532, CVE-2026-69472, CVE-2026-69479, CVE-2026-69531, CVE-2026-69517, CVE-2026-69505, CVE-2026-69504, CVE-2026-69527, CVE-2026-69549, CVE-2026-69588, CVE-2026-69609, CVE-2026-69648, CVE-2026-69689, CVE-2026-69790, CVE-2026-69638, CVE-2026-69859, CVE-2026-69717, CVE-2026-69711, CVE-2026-69875, CVE-2026-69889, CVE-2026-69757, CVE-2026-69741, CVE-2026-69762, CVE-2026-69744, CVE-2026-69832, CVE-2026-69691, CVE-2026-69808, CVE-2026-69775, CVE-2026-69770, CVE-2026-69676, CVE-2026-70289, CVE-2026-70563, CVE-2026-71329, CVE-2026-71332, CVE-2026-71350, CVE-2026-71348, CVE-2026-71345, CVE-2026-69469, CVE-2026-69501, CVE-2026-69548, CVE-2026-69846, CVE-2026-70283, CVE-2026-72981, CVE-2026-77491, CVE-2026-77492, CVE-2026-77503, CVE-2026-80093, CVE-2026-72949, CVE-2026-70019, CVE-2026-72940, CVE-2026-69573, CVE-2026-70290, CVE-2026-83991, CVE-2026-83999, CVE-2026-69321, CVE-2026-69316, CVE-2026-69340, CVE-2026-69348, CVE-2026-69350, CVE-2026-69353, CVE-2026-69357, CVE-2026-69393, CVE-2026-69410, CVE-2026-69421, CVE-2026-69428, CVE-2026-69425, CVE-2026-69427, CVE-2026-69434, CVE-2026-69456, CVE-2026-69459, CVE-2026-69478, CVE-2026-69561, CVE-2026-69512, CVE-2026-69498, CVE-2026-69571, CVE-2026-69535, CVE-2026-69538, CVE-2026-69591, CVE-2026-69566, CVE-2026-69567, CVE-2026-69584, CVE-2026-69617, CVE-2026-69630, CVE-2026-69610, CVE-2026-69881, CVE-2026-69680, CVE-2026-69619, CVE-2026-69685, CVE-2026-69643, CVE-2026-69687, CVE-2026-69791, CVE-2026-69707, CVE-2026-69652, CVE-2026-69834, CVE-2026-69709, CVE-2026-69844, CVE-2026-69814, CVE-2026-69731, CVE-2026-69706, CVE-2026-69779, CVE-2026-69895, CVE-2026-69792, CVE-2026-69853, CVE-2026-69761, CVE-2026-69785, CVE-2026-69818, CVE-2026-69786, CVE-2026-69874, CVE-2026-70565, CVE-2026-70574, CVE-2026-70569, CVE-2026-70575, CVE-2026-71349, CVE-2026-72927, CVE-2026-72952, CVE-2026-72942, CVE-2026-72966, CVE-2026-72967, CVE-2026-69426, CVE-2026-69564, CVE-2026-72985, CVE-2026-73019, CVE-2026-78451, CVE-2026-78452, CVE-2026-83940, CVE-2026-69598, CVE-2026-83995, CVE-2026-83501, CVE-2026-83498.

CVE-2026-69732

CVE-2026-69732 is a heap-based buffer overflow vulnerability in the Windows Link Layer Topology Discovery (LLTD) Protocol. An unauthenticated attacker can exploit this via the network to achieve remote code execution on affected Windows systems.

Affected products:

Windows Link Layer Topology Discovery Protocol

Source: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-69732

CVE-2026-69770

CVE-2026-69770 is an information disclosure vulnerability in the Windows Spaceport.sys driver. The flaw is caused by the use of an uninitialized resource, which may allow an authorized local attacker to read sensitive information from memory.

Affected products:

Windows

Source: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-69770

Related in this roundup: CVE-2026-81963, CVE-2026-85880, CVE-2026-69496, CVE-2026-69586, CVE-2026-69768, CVE-2026-73025, CVE-2026-56172, CVE-2026-68832, CVE-2026-68834, CVE-2026-68838, CVE-2026-68841, CVE-2026-68875, CVE-2026-68877, CVE-2026-68880, CVE-2026-69265, CVE-2026-69270, CVE-2026-69274, CVE-2026-69275, CVE-2026-69280, CVE-2026-69283, CVE-2026-69284, CVE-2026-69289, CVE-2026-69296, CVE-2026-69300, CVE-2026-69301, CVE-2026-69307, CVE-2026-69312, CVE-2026-69314, CVE-2026-69332, CVE-2026-69333, CVE-2026-69335, CVE-2026-68833, CVE-2026-68851, CVE-2026-69366, CVE-2026-69337, CVE-2026-69347, CVE-2026-69379, CVE-2026-69390, CVE-2026-69401, CVE-2026-69413, CVE-2026-69420, CVE-2026-69429, CVE-2026-69448, CVE-2026-69455, CVE-2026-69532, CVE-2026-69472, CVE-2026-69479, CVE-2026-69531, CVE-2026-69517, CVE-2026-69505, CVE-2026-69504, CVE-2026-69527, CVE-2026-69549, CVE-2026-69588, CVE-2026-69609, CVE-2026-69648, CVE-2026-69689, CVE-2026-69790, CVE-2026-69638, CVE-2026-69859, CVE-2026-69717, CVE-2026-69711, CVE-2026-69875, CVE-2026-69889, CVE-2026-69757, CVE-2026-69741, CVE-2026-69762, CVE-2026-69744, CVE-2026-69832, CVE-2026-69691, CVE-2026-69808, CVE-2026-69775, CVE-2026-69822, CVE-2026-69676, CVE-2026-70289, CVE-2026-70563, CVE-2026-71329, CVE-2026-71332, CVE-2026-71350, CVE-2026-71348, CVE-2026-71345, CVE-2026-69469, CVE-2026-69501, CVE-2026-69548, CVE-2026-69846, CVE-2026-70283, CVE-2026-72981, CVE-2026-77491, CVE-2026-77492, CVE-2026-77503, CVE-2026-80093, CVE-2026-72949, CVE-2026-70019, CVE-2026-72940, CVE-2026-69573, CVE-2026-70290, CVE-2026-83991, CVE-2026-83999, CVE-2026-69321, CVE-2026-69316, CVE-2026-69340, CVE-2026-69348, CVE-2026-69350, CVE-2026-69353, CVE-2026-69357, CVE-2026-69393, CVE-2026-69410, CVE-2026-69421, CVE-2026-69428, CVE-2026-69425, CVE-2026-69427, CVE-2026-69434, CVE-2026-69456, CVE-2026-69459, CVE-2026-69478, CVE-2026-69561, CVE-2026-69512, CVE-2026-69498, CVE-2026-69571, CVE-2026-69535, CVE-2026-69538, CVE-2026-69591, CVE-2026-69566, CVE-2026-69567, CVE-2026-69584, CVE-2026-69617, CVE-2026-69630, CVE-2026-69610, CVE-2026-69881, CVE-2026-69680, CVE-2026-69619, CVE-2026-69685, CVE-2026-69643, CVE-2026-69687, CVE-2026-69791, CVE-2026-69707, CVE-2026-69652, CVE-2026-69834, CVE-2026-69709, CVE-2026-69844, CVE-2026-69814, CVE-2026-69731, CVE-2026-69706, CVE-2026-69779, CVE-2026-69895, CVE-2026-69792, CVE-2026-69853, CVE-2026-69761, CVE-2026-69785, CVE-2026-69818, CVE-2026-69786, CVE-2026-69874, CVE-2026-70565, CVE-2026-70574, CVE-2026-70569, CVE-2026-70575, CVE-2026-71349, CVE-2026-72927, CVE-2026-72952, CVE-2026-72942, CVE-2026-72966, CVE-2026-72967, CVE-2026-69426, CVE-2026-69564, CVE-2026-72985, CVE-2026-73019, CVE-2026-78451, CVE-2026-78452, CVE-2026-83940, CVE-2026-69598, CVE-2026-83995, CVE-2026-83501, CVE-2026-83498.

CVE-2026-69860

A heap-based buffer overflow vulnerability exists in the Windows Imaging Component that allows a remote, unauthorized attacker to execute arbitrary code on a vulnerable system by sending a specially crafted request over a network.

Affected products:

Windows Imaging Component

Source: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-69860

Related in this roundup: CVE-2026-70296, CVE-2026-77495, CVE-2026-69318, CVE-2026-69499, CVE-2026-73023, CVE-2026-73013, CVE-2026-83992.

CVE-2026-69712

CVE-2026-69712 is a remote code execution vulnerability in the Windows Key Distribution Center service stemming from a use-after-free flaw. An authorized attacker can leverage this vulnerability to execute arbitrary code over the network, potentially leading to system compromise.

Affected products:

Windows Key Distribution Center

Source: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-69712

Related in this roundup: CVE-2026-84001.

CVE-2026-69676

CVE-2026-69676 is a remote code execution vulnerability in Windows Kerberos caused by an authentication bypass via a capture-replay attack. An authorized attacker can leverage this flaw to execute arbitrary code over the network by capturing and replaying authentication traffic.

Affected products:

Windows

Source: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-69676

Related in this roundup: CVE-2026-81963, CVE-2026-85880, CVE-2026-69496, CVE-2026-69586, CVE-2026-69768, CVE-2026-73025, CVE-2026-56172, CVE-2026-68832, CVE-2026-68834, CVE-2026-68838, CVE-2026-68841, CVE-2026-68875, CVE-2026-68877, CVE-2026-68880, CVE-2026-69265, CVE-2026-69270, CVE-2026-69274, CVE-2026-69275, CVE-2026-69280, CVE-2026-69283, CVE-2026-69284, CVE-2026-69289, CVE-2026-69296, CVE-2026-69300, CVE-2026-69301, CVE-2026-69307, CVE-2026-69312, CVE-2026-69314, CVE-2026-69332, CVE-2026-69333, CVE-2026-69335, CVE-2026-68833, CVE-2026-68851, CVE-2026-69366, CVE-2026-69337, CVE-2026-69347, CVE-2026-69379, CVE-2026-69390, CVE-2026-69401, CVE-2026-69413, CVE-2026-69420, CVE-2026-69429, CVE-2026-69448, CVE-2026-69455, CVE-2026-69532, CVE-2026-69472, CVE-2026-69479, CVE-2026-69531, CVE-2026-69517, CVE-2026-69505, CVE-2026-69504, CVE-2026-69527, CVE-2026-69549, CVE-2026-69588, CVE-2026-69609, CVE-2026-69648, CVE-2026-69689, CVE-2026-69790, CVE-2026-69638, CVE-2026-69859, CVE-2026-69717, CVE-2026-69711, CVE-2026-69875, CVE-2026-69889, CVE-2026-69757, CVE-2026-69741, CVE-2026-69762, CVE-2026-69744, CVE-2026-69832, CVE-2026-69691, CVE-2026-69808, CVE-2026-69775, CVE-2026-69822, CVE-2026-69770, CVE-2026-70289, CVE-2026-70563, CVE-2026-71329, CVE-2026-71332, CVE-2026-71350, CVE-2026-71348, CVE-2026-71345, CVE-2026-69469, CVE-2026-69501, CVE-2026-69548, CVE-2026-69846, CVE-2026-70283, CVE-2026-72981, CVE-2026-77491, CVE-2026-77492, CVE-2026-77503, CVE-2026-80093, CVE-2026-72949, CVE-2026-70019, CVE-2026-72940, CVE-2026-69573, CVE-2026-70290, CVE-2026-83991, CVE-2026-83999, CVE-2026-69321, CVE-2026-69316, CVE-2026-69340, CVE-2026-69348, CVE-2026-69350, CVE-2026-69353, CVE-2026-69357, CVE-2026-69393, CVE-2026-69410, CVE-2026-69421, CVE-2026-69428, CVE-2026-69425, CVE-2026-69427, CVE-2026-69434, CVE-2026-69456, CVE-2026-69459, CVE-2026-69478, CVE-2026-69561, CVE-2026-69512, CVE-2026-69498, CVE-2026-69571, CVE-2026-69535, CVE-2026-69538, CVE-2026-69591, CVE-2026-69566, CVE-2026-69567, CVE-2026-69584, CVE-2026-69617, CVE-2026-69630, CVE-2026-69610, CVE-2026-69881, CVE-2026-69680, CVE-2026-69619, CVE-2026-69685, CVE-2026-69643, CVE-2026-69687, CVE-2026-69791, CVE-2026-69707, CVE-2026-69652, CVE-2026-69834, CVE-2026-69709, CVE-2026-69844, CVE-2026-69814, CVE-2026-69731, CVE-2026-69706, CVE-2026-69779, CVE-2026-69895, CVE-2026-69792, CVE-2026-69853, CVE-2026-69761, CVE-2026-69785, CVE-2026-69818, CVE-2026-69786, CVE-2026-69874, CVE-2026-70565, CVE-2026-70574, CVE-2026-70569, CVE-2026-70575, CVE-2026-71349, CVE-2026-72927, CVE-2026-72952, CVE-2026-72942, CVE-2026-72966, CVE-2026-72967, CVE-2026-69426, CVE-2026-69564, CVE-2026-72985, CVE-2026-73019, CVE-2026-78451, CVE-2026-78452, CVE-2026-83940, CVE-2026-69598, CVE-2026-83995, CVE-2026-83501, CVE-2026-83498.

CVE-2026-69740

A use-after-free vulnerability in Windows Hello allows a locally authenticated attacker to elevate their privileges on an affected Windows system.

Affected products:

Windows Hello

Source: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-69740

Related in this roundup: CVE-2026-72980, CVE-2026-69799, CVE-2026-69710, CVE-2026-69725, CVE-2026-69864, CVE-2026-69820, CVE-2026-69784, CVE-2026-81354.

CVE-2026-69890

A use-after-free vulnerability in the Windows Virtual Trusted Platform Module (vTPM) allows an authenticated local attacker to perform a privilege escalation attack. This flaw resides within the Windows kernel virtualization component responsible for managing TPM operations.

Affected products:

Windows Virtual Trusted Platform Module

Source: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-69890

CVE-2026-63523

CVE-2026-63523 describes a cross-site scripting (XSS) vulnerability in Skype for Business that allows a remote attacker to perform spoofing attacks over a network by injecting malicious input into web page generation.

Affected products:

Skype for Business

Source: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-63523

Related in this roundup: CVE-2026-66302, CVE-2026-66304, CVE-2026-66306, CVE-2026-66308, CVE-2026-66305, CVE-2026-69642, CVE-2026-69646, CVE-2026-66303, CVE-2026-66307.

CVE-2026-66305

CVE-2026-66305 describes a spoofing vulnerability in Skype for Business caused by the improper use of client-side authentication. An authorized attacker on the same network can leverage this flaw to perform spoofing attacks against users of the application.

Affected products:

Skype for Business

Source: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-66305

Related in this roundup: CVE-2026-66302, CVE-2026-66304, CVE-2026-66306, CVE-2026-66308, CVE-2026-63523, CVE-2026-69642, CVE-2026-69646, CVE-2026-66303, CVE-2026-66307.

CVE-2026-70334

CVE-2026-70334 is a security feature bypass vulnerability in Visual Studio Code caused by an incomplete list of disallowed inputs, which can be exploited by an unauthorized local attacker.

Affected products:

Visual Studio Code

Source: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-70334

Related in this roundup: CVE-2026-81376, CVE-2026-78461, CVE-2026-81356, CVE-2026-81357, CVE-2026-81377, CVE-2026-81378, CVE-2026-81379, CVE-2026-78462, CVE-2026-81383.

CVE-2026-70289

CVE-2026-70289 is a heap-based buffer overflow vulnerability in the Windows Win32k kernel subsystem that enables a local, authorized attacker to achieve privilege escalation.

Affected products:

Windows

Source: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-70289

Related in this roundup: CVE-2026-81963, CVE-2026-85880, CVE-2026-69496, CVE-2026-69586, CVE-2026-69768, CVE-2026-73025, CVE-2026-56172, CVE-2026-68832, CVE-2026-68834, CVE-2026-68838, CVE-2026-68841, CVE-2026-68875, CVE-2026-68877, CVE-2026-68880, CVE-2026-69265, CVE-2026-69270, CVE-2026-69274, CVE-2026-69275, CVE-2026-69280, CVE-2026-69283, CVE-2026-69284, CVE-2026-69289, CVE-2026-69296, CVE-2026-69300, CVE-2026-69301, CVE-2026-69307, CVE-2026-69312, CVE-2026-69314, CVE-2026-69332, CVE-2026-69333, CVE-2026-69335, CVE-2026-68833, CVE-2026-68851, CVE-2026-69366, CVE-2026-69337, CVE-2026-69347, CVE-2026-69379, CVE-2026-69390, CVE-2026-69401, CVE-2026-69413, CVE-2026-69420, CVE-2026-69429, CVE-2026-69448, CVE-2026-69455, CVE-2026-69532, CVE-2026-69472, CVE-2026-69479, CVE-2026-69531, CVE-2026-69517, CVE-2026-69505, CVE-2026-69504, CVE-2026-69527, CVE-2026-69549, CVE-2026-69588, CVE-2026-69609, CVE-2026-69648, CVE-2026-69689, CVE-2026-69790, CVE-2026-69638, CVE-2026-69859, CVE-2026-69717, CVE-2026-69711, CVE-2026-69875, CVE-2026-69889, CVE-2026-69757, CVE-2026-69741, CVE-2026-69762, CVE-2026-69744, CVE-2026-69832, CVE-2026-69691, CVE-2026-69808, CVE-2026-69775, CVE-2026-69822, CVE-2026-69770, CVE-2026-69676, CVE-2026-70563, CVE-2026-71329, CVE-2026-71332, CVE-2026-71350, CVE-2026-71348, CVE-2026-71345, CVE-2026-69469, CVE-2026-69501, CVE-2026-69548, CVE-2026-69846, CVE-2026-70283, CVE-2026-72981, CVE-2026-77491, CVE-2026-77492, CVE-2026-77503, CVE-2026-80093, CVE-2026-72949, CVE-2026-70019, CVE-2026-72940, CVE-2026-69573, CVE-2026-70290, CVE-2026-83991, CVE-2026-83999, CVE-2026-69321, CVE-2026-69316, CVE-2026-69340, CVE-2026-69348, CVE-2026-69350, CVE-2026-69353, CVE-2026-69357, CVE-2026-69393, CVE-2026-69410, CVE-2026-69421, CVE-2026-69428, CVE-2026-69425, CVE-2026-69427, CVE-2026-69434, CVE-2026-69456, CVE-2026-69459, CVE-2026-69478, CVE-2026-69561, CVE-2026-69512, CVE-2026-69498, CVE-2026-69571, CVE-2026-69535, CVE-2026-69538, CVE-2026-69591, CVE-2026-69566, CVE-2026-69567, CVE-2026-69584, CVE-2026-69617, CVE-2026-69630, CVE-2026-69610, CVE-2026-69881, CVE-2026-69680, CVE-2026-69619, CVE-2026-69685, CVE-2026-69643, CVE-2026-69687, CVE-2026-69791, CVE-2026-69707, CVE-2026-69652, CVE-2026-69834, CVE-2026-69709, CVE-2026-69844, CVE-2026-69814, CVE-2026-69731, CVE-2026-69706, CVE-2026-69779, CVE-2026-69895, CVE-2026-69792, CVE-2026-69853, CVE-2026-69761, CVE-2026-69785, CVE-2026-69818, CVE-2026-69786, CVE-2026-69874, CVE-2026-70565, CVE-2026-70574, CVE-2026-70569, CVE-2026-70575, CVE-2026-71349, CVE-2026-72927, CVE-2026-72952, CVE-2026-72942, CVE-2026-72966, CVE-2026-72967, CVE-2026-69426, CVE-2026-69564, CVE-2026-72985, CVE-2026-73019, CVE-2026-78451, CVE-2026-78452, CVE-2026-83940, CVE-2026-69598, CVE-2026-83995, CVE-2026-83501, CVE-2026-83498.

CVE-2026-70342

CVE-2026-70342 is a use-after-free vulnerability within the Windows Ancillary Function Driver for WinSock (afdsys). An unauthorized remote attacker can exploit this flaw to gain elevated privileges on affected Windows systems.

Affected products:

Windows Ancillary Function Driver for WinSock

Source: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-70342

Related in this roundup: CVE-2026-50349.

CVE-2026-70351

An integer overflow or wraparound vulnerability exists in the Microsoft WebP Image Extension that could allow an unauthorized attacker to achieve remote code execution over a network by leveraging the vulnerability during image processing.

Affected products:

WebP Image Extension

Source: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-70351

CVE-2026-70562

A double free vulnerability exists in the Windows Audio Service, which can be exploited by an authorized local attacker to achieve privilege escalation.

Affected products:

Windows Audio Service

Source: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-70562

Related in this roundup: CVE-2026-69311, CVE-2026-69540, CVE-2026-69394, CVE-2026-69604, CVE-2026-69447, CVE-2026-69801, CVE-2026-69692.

CVE-2026-70563

CVE-2026-70563 describes an improper link resolution vulnerability (link following) within the Windows Shell. An unauthenticated attacker can exploit this flaw to perform spoofing attacks over a network, potentially deceiving users by manipulating how file links are resolved prior to access.

Affected products:

Windows

Source: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-70563

Related in this roundup: CVE-2026-81963, CVE-2026-85880, CVE-2026-69496, CVE-2026-69586, CVE-2026-69768, CVE-2026-73025, CVE-2026-56172, CVE-2026-68832, CVE-2026-68834, CVE-2026-68838, CVE-2026-68841, CVE-2026-68875, CVE-2026-68877, CVE-2026-68880, CVE-2026-69265, CVE-2026-69270, CVE-2026-69274, CVE-2026-69275, CVE-2026-69280, CVE-2026-69283, CVE-2026-69284, CVE-2026-69289, CVE-2026-69296, CVE-2026-69300, CVE-2026-69301, CVE-2026-69307, CVE-2026-69312, CVE-2026-69314, CVE-2026-69332, CVE-2026-69333, CVE-2026-69335, CVE-2026-68833, CVE-2026-68851, CVE-2026-69366, CVE-2026-69337, CVE-2026-69347, CVE-2026-69379, CVE-2026-69390, CVE-2026-69401, CVE-2026-69413, CVE-2026-69420, CVE-2026-69429, CVE-2026-69448, CVE-2026-69455, CVE-2026-69532, CVE-2026-69472, CVE-2026-69479, CVE-2026-69531, CVE-2026-69517, CVE-2026-69505, CVE-2026-69504, CVE-2026-69527, CVE-2026-69549, CVE-2026-69588, CVE-2026-69609, CVE-2026-69648, CVE-2026-69689, CVE-2026-69790, CVE-2026-69638, CVE-2026-69859, CVE-2026-69717, CVE-2026-69711, CVE-2026-69875, CVE-2026-69889, CVE-2026-69757, CVE-2026-69741, CVE-2026-69762, CVE-2026-69744, CVE-2026-69832, CVE-2026-69691, CVE-2026-69808, CVE-2026-69775, CVE-2026-69822, CVE-2026-69770, CVE-2026-69676, CVE-2026-70289, CVE-2026-71329, CVE-2026-71332, CVE-2026-71350, CVE-2026-71348, CVE-2026-71345, CVE-2026-69469, CVE-2026-69501, CVE-2026-69548, CVE-2026-69846, CVE-2026-70283, CVE-2026-72981, CVE-2026-77491, CVE-2026-77492, CVE-2026-77503, CVE-2026-80093, CVE-2026-72949, CVE-2026-70019, CVE-2026-72940, CVE-2026-69573, CVE-2026-70290, CVE-2026-83991, CVE-2026-83999, CVE-2026-69321, CVE-2026-69316, CVE-2026-69340, CVE-2026-69348, CVE-2026-69350, CVE-2026-69353, CVE-2026-69357, CVE-2026-69393, CVE-2026-69410, CVE-2026-69421, CVE-2026-69428, CVE-2026-69425, CVE-2026-69427, CVE-2026-69434, CVE-2026-69456, CVE-2026-69459, CVE-2026-69478, CVE-2026-69561, CVE-2026-69512, CVE-2026-69498, CVE-2026-69571, CVE-2026-69535, CVE-2026-69538, CVE-2026-69591, CVE-2026-69566, CVE-2026-69567, CVE-2026-69584, CVE-2026-69617, CVE-2026-69630, CVE-2026-69610, CVE-2026-69881, CVE-2026-69680, CVE-2026-69619, CVE-2026-69685, CVE-2026-69643, CVE-2026-69687, CVE-2026-69791, CVE-2026-69707, CVE-2026-69652, CVE-2026-69834, CVE-2026-69709, CVE-2026-69844, CVE-2026-69814, CVE-2026-69731, CVE-2026-69706, CVE-2026-69779, CVE-2026-69895, CVE-2026-69792, CVE-2026-69853, CVE-2026-69761, CVE-2026-69785, CVE-2026-69818, CVE-2026-69786, CVE-2026-69874, CVE-2026-70565, CVE-2026-70574, CVE-2026-70569, CVE-2026-70575, CVE-2026-71349, CVE-2026-72927, CVE-2026-72952, CVE-2026-72942, CVE-2026-72966, CVE-2026-72967, CVE-2026-69426, CVE-2026-69564, CVE-2026-72985, CVE-2026-73019, CVE-2026-78451, CVE-2026-78452, CVE-2026-83940, CVE-2026-69598, CVE-2026-83995, CVE-2026-83501, CVE-2026-83498.

CVE-2026-70564

A heap-based buffer overflow vulnerability in the Windows Print Spooler components enables an authenticated local attacker to escalate their privileges. Successful exploitation requires the attacker to have existing access to the system to trigger the vulnerable code path.

Affected products:

Windows Print Spooler

Source: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-70564

Related in this roundup: CVE-2026-68835, CVE-2026-68848, CVE-2026-69309, CVE-2026-69552, CVE-2026-69838, CVE-2026-85877, CVE-2026-69344, CVE-2026-69346, CVE-2026-69569, CVE-2026-69921.

CVE-2026-70582

CVE-2026-70582 is a local privilege escalation vulnerability in Windows Management Instrumentation caused by a race condition during concurrent execution with improper resource synchronization. An authorized attacker can exploit this flaw to elevate their privileges on an affected Windows system.

Affected products:

Windows Management Instrumentation

Source: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-70582

Related in this roundup: CVE-2026-69349, CVE-2026-69451, CVE-2026-77905.

CVE-2026-70584

CVE-2026-70584 is a type confusion vulnerability within the Windows Core Messaging component that enables a locally authenticated attacker to escalate their privileges. Detection should focus on monitoring for unauthorized process token manipulation or suspicious API calls associated with inter-process communication involving Windows Core Messaging.

Affected products:

Windows Core Messaging

Source: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-70584

Related in this roundup: CVE-2026-70583.

CVE-2026-70585

CVE-2026-70585 is a use-after-free vulnerability in the Windows Services for NFS ONCRPC XDR Driver. An authenticated attacker can exploit this flaw to achieve local remote code execution by triggering memory corruption within the driver's handling of XDR data structures.

Affected products:

Windows Services for NFS

Source: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-70585

Related in this roundup: CVE-2026-69595, CVE-2026-78445, CVE-2026-71330, CVE-2026-73024, CVE-2026-83989.

CVE-2026-70586

CVE-2026-70586 describes a heap-based buffer overflow vulnerability in Microsoft Paint that enables a remote attacker to execute arbitrary code. Detection should focus on monitoring anomalous process behaviors and memory corruption patterns initiated by the Paint application.

Affected products:

Paint

Source: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-70586

CVE-2026-70587

CVE-2026-70587 describes an information disclosure vulnerability in the Windows Remote Desktop Protocol (RDP) resulting from improper null termination. This flaw allows an unauthenticated, remote attacker to potentially read sensitive memory contents over the network without requiring user interaction.

Affected products:

Windows Remote Desktop Protocol

Source: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-70587

CVE-2026-71329

CVE-2026-71329 is a heap-based buffer overflow vulnerability within the Windows NTFS file system, which may allow an attacker with physical access to a target system to execute arbitrary code.

Affected products:

Windows

Source: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-71329

Related in this roundup: CVE-2026-81963, CVE-2026-85880, CVE-2026-69496, CVE-2026-69586, CVE-2026-69768, CVE-2026-73025, CVE-2026-56172, CVE-2026-68832, CVE-2026-68834, CVE-2026-68838, CVE-2026-68841, CVE-2026-68875, CVE-2026-68877, CVE-2026-68880, CVE-2026-69265, CVE-2026-69270, CVE-2026-69274, CVE-2026-69275, CVE-2026-69280, CVE-2026-69283, CVE-2026-69284, CVE-2026-69289, CVE-2026-69296, CVE-2026-69300, CVE-2026-69301, CVE-2026-69307, CVE-2026-69312, CVE-2026-69314, CVE-2026-69332, CVE-2026-69333, CVE-2026-69335, CVE-2026-68833, CVE-2026-68851, CVE-2026-69366, CVE-2026-69337, CVE-2026-69347, CVE-2026-69379, CVE-2026-69390, CVE-2026-69401, CVE-2026-69413, CVE-2026-69420, CVE-2026-69429, CVE-2026-69448, CVE-2026-69455, CVE-2026-69532, CVE-2026-69472, CVE-2026-69479, CVE-2026-69531, CVE-2026-69517, CVE-2026-69505, CVE-2026-69504, CVE-2026-69527, CVE-2026-69549, CVE-2026-69588, CVE-2026-69609, CVE-2026-69648, CVE-2026-69689, CVE-2026-69790, CVE-2026-69638, CVE-2026-69859, CVE-2026-69717, CVE-2026-69711, CVE-2026-69875, CVE-2026-69889, CVE-2026-69757, CVE-2026-69741, CVE-2026-69762, CVE-2026-69744, CVE-2026-69832, CVE-2026-69691, CVE-2026-69808, CVE-2026-69775, CVE-2026-69822, CVE-2026-69770, CVE-2026-69676, CVE-2026-70289, CVE-2026-70563, CVE-2026-71332, CVE-2026-71350, CVE-2026-71348, CVE-2026-71345, CVE-2026-69469, CVE-2026-69501, CVE-2026-69548, CVE-2026-69846, CVE-2026-70283, CVE-2026-72981, CVE-2026-77491, CVE-2026-77492, CVE-2026-77503, CVE-2026-80093, CVE-2026-72949, CVE-2026-70019, CVE-2026-72940, CVE-2026-69573, CVE-2026-70290, CVE-2026-83991, CVE-2026-83999, CVE-2026-69321, CVE-2026-69316, CVE-2026-69340, CVE-2026-69348, CVE-2026-69350, CVE-2026-69353, CVE-2026-69357, CVE-2026-69393, CVE-2026-69410, CVE-2026-69421, CVE-2026-69428, CVE-2026-69425, CVE-2026-69427, CVE-2026-69434, CVE-2026-69456, CVE-2026-69459, CVE-2026-69478, CVE-2026-69561, CVE-2026-69512, CVE-2026-69498, CVE-2026-69571, CVE-2026-69535, CVE-2026-69538, CVE-2026-69591, CVE-2026-69566, CVE-2026-69567, CVE-2026-69584, CVE-2026-69617, CVE-2026-69630, CVE-2026-69610, CVE-2026-69881, CVE-2026-69680, CVE-2026-69619, CVE-2026-69685, CVE-2026-69643, CVE-2026-69687, CVE-2026-69791, CVE-2026-69707, CVE-2026-69652, CVE-2026-69834, CVE-2026-69709, CVE-2026-69844, CVE-2026-69814, CVE-2026-69731, CVE-2026-69706, CVE-2026-69779, CVE-2026-69895, CVE-2026-69792, CVE-2026-69853, CVE-2026-69761, CVE-2026-69785, CVE-2026-69818, CVE-2026-69786, CVE-2026-69874, CVE-2026-70565, CVE-2026-70574, CVE-2026-70569, CVE-2026-70575, CVE-2026-71349, CVE-2026-72927, CVE-2026-72952, CVE-2026-72942, CVE-2026-72966, CVE-2026-72967, CVE-2026-69426, CVE-2026-69564, CVE-2026-72985, CVE-2026-73019, CVE-2026-78451, CVE-2026-78452, CVE-2026-83940, CVE-2026-69598, CVE-2026-83995, CVE-2026-83501, CVE-2026-83498.

CVE-2026-71336

CVE-2026-71336 is an integer overflow or wraparound vulnerability in the Windows Work Folder Service. An authorized attacker can leverage this flaw to achieve remote code execution over a network.

Affected products:

Windows Work Folder Service

Source: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-71336

Related in this roundup: CVE-2026-69560.

CVE-2026-71330

CVE-2026-71330 is an information disclosure vulnerability in the Windows Services for NFS ONCRPC XDR Driver. The flaw allows an unauthenticated, remote attacker to gain access to sensitive system information by sending specially crafted network requests to the vulnerable service, potentially exposing memory or internal data.

Affected products:

Windows Services for NFS

Source: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-71330

Related in this roundup: CVE-2026-69595, CVE-2026-78445, CVE-2026-70585, CVE-2026-73024, CVE-2026-83989.

CVE-2026-71333

CVE-2026-71333 is a use-after-free vulnerability within the Windows Remote Access Connection Manager that enables a locally authenticated attacker to perform an elevation of privilege attack.

Affected products:

Windows Remote Access Connection Manager

Source: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-71333

Related in this roundup: CVE-2026-69331, CVE-2026-71342, CVE-2026-71352.

CVE-2026-71337

A stack-based buffer overflow vulnerability in the Windows Storage Management Provider enables an authorized local attacker to elevate their privileges to a higher level of access.

Affected products:

Windows Storage Management Provider

Source: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-71337

Related in this roundup: CVE-2026-69389.

CVE-2026-71332

CVE-2026-71332 is a local elevation of privilege vulnerability in the Windows Secure Socket Tunneling Protocol (SSTP) caused by a use-after-free condition. An authorized attacker can exploit this vulnerability to gain higher privileges on the target system.

Affected products:

Windows

Source: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-71332

Related in this roundup: CVE-2026-81963, CVE-2026-85880, CVE-2026-69496, CVE-2026-69586, CVE-2026-69768, CVE-2026-73025, CVE-2026-56172, CVE-2026-68832, CVE-2026-68834, CVE-2026-68838, CVE-2026-68841, CVE-2026-68875, CVE-2026-68877, CVE-2026-68880, CVE-2026-69265, CVE-2026-69270, CVE-2026-69274, CVE-2026-69275, CVE-2026-69280, CVE-2026-69283, CVE-2026-69284, CVE-2026-69289, CVE-2026-69296, CVE-2026-69300, CVE-2026-69301, CVE-2026-69307, CVE-2026-69312, CVE-2026-69314, CVE-2026-69332, CVE-2026-69333, CVE-2026-69335, CVE-2026-68833, CVE-2026-68851, CVE-2026-69366, CVE-2026-69337, CVE-2026-69347, CVE-2026-69379, CVE-2026-69390, CVE-2026-69401, CVE-2026-69413, CVE-2026-69420, CVE-2026-69429, CVE-2026-69448, CVE-2026-69455, CVE-2026-69532, CVE-2026-69472, CVE-2026-69479, CVE-2026-69531, CVE-2026-69517, CVE-2026-69505, CVE-2026-69504, CVE-2026-69527, CVE-2026-69549, CVE-2026-69588, CVE-2026-69609, CVE-2026-69648, CVE-2026-69689, CVE-2026-69790, CVE-2026-69638, CVE-2026-69859, CVE-2026-69717, CVE-2026-69711, CVE-2026-69875, CVE-2026-69889, CVE-2026-69757, CVE-2026-69741, CVE-2026-69762, CVE-2026-69744, CVE-2026-69832, CVE-2026-69691, CVE-2026-69808, CVE-2026-69775, CVE-2026-69822, CVE-2026-69770, CVE-2026-69676, CVE-2026-70289, CVE-2026-70563, CVE-2026-71329, CVE-2026-71350, CVE-2026-71348, CVE-2026-71345, CVE-2026-69469, CVE-2026-69501, CVE-2026-69548, CVE-2026-69846, CVE-2026-70283, CVE-2026-72981, CVE-2026-77491, CVE-2026-77492, CVE-2026-77503, CVE-2026-80093, CVE-2026-72949, CVE-2026-70019, CVE-2026-72940, CVE-2026-69573, CVE-2026-70290, CVE-2026-83991, CVE-2026-83999, CVE-2026-69321, CVE-2026-69316, CVE-2026-69340, CVE-2026-69348, CVE-2026-69350, CVE-2026-69353, CVE-2026-69357, CVE-2026-69393, CVE-2026-69410, CVE-2026-69421, CVE-2026-69428, CVE-2026-69425, CVE-2026-69427, CVE-2026-69434, CVE-2026-69456, CVE-2026-69459, CVE-2026-69478, CVE-2026-69561, CVE-2026-69512, CVE-2026-69498, CVE-2026-69571, CVE-2026-69535, CVE-2026-69538, CVE-2026-69591, CVE-2026-69566, CVE-2026-69567, CVE-2026-69584, CVE-2026-69617, CVE-2026-69630, CVE-2026-69610, CVE-2026-69881, CVE-2026-69680, CVE-2026-69619, CVE-2026-69685, CVE-2026-69643, CVE-2026-69687, CVE-2026-69791, CVE-2026-69707, CVE-2026-69652, CVE-2026-69834, CVE-2026-69709, CVE-2026-69844, CVE-2026-69814, CVE-2026-69731, CVE-2026-69706, CVE-2026-69779, CVE-2026-69895, CVE-2026-69792, CVE-2026-69853, CVE-2026-69761, CVE-2026-69785, CVE-2026-69818, CVE-2026-69786, CVE-2026-69874, CVE-2026-70565, CVE-2026-70574, CVE-2026-70569, CVE-2026-70575, CVE-2026-71349, CVE-2026-72927, CVE-2026-72952, CVE-2026-72942, CVE-2026-72966, CVE-2026-72967, CVE-2026-69426, CVE-2026-69564, CVE-2026-72985, CVE-2026-73019, CVE-2026-78451, CVE-2026-78452, CVE-2026-83940, CVE-2026-69598, CVE-2026-83995, CVE-2026-83501, CVE-2026-83498.

CVE-2026-71334

CVE-2026-71334 is a heap-based buffer overflow vulnerability within the Windows NFS Portmapper service. An attacker with local authorization can exploit this flaw to execute code with elevated privileges on the target system.

Affected products:

Windows NFS Portmapper

Source: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-71334

CVE-2026-71338

A double free vulnerability exists in the Windows Failover Cluster component that allows an authenticated local attacker to escalate their privileges. This vulnerability requires the attacker to already have access to the system to exploit the flaw.

Affected products:

Windows Failover Cluster

Source: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-71338

Related in this roundup: CVE-2026-73010, CVE-2026-72989, CVE-2026-78444.

CVE-2026-71340

The Windows File History Service contains a use-after-free vulnerability that can be exploited by an authenticated local attacker to escalate their privileges on the host system.

Affected products:

Windows File History Service

Source: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-71340

Related in this roundup: CVE-2026-68837, CVE-2026-72947.

CVE-2026-71339

CVE-2026-71339 is a heap-based buffer overflow vulnerability in the Windows Installer service that enables an authenticated attacker to perform local privilege escalation on affected Windows systems.

Affected products:

Windows Installer

Source: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-71339

Related in this roundup: CVE-2026-62694, CVE-2026-72929, CVE-2026-77894, CVE-2026-69441.

CVE-2026-71350

A heap-based buffer overflow vulnerability exists in the Windows Spaceport.sys driver, allowing an attacker with physical access to the target system to achieve remote code execution through the exploitation of this component.

Affected products:

Windows

Source: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-71350

Related in this roundup: CVE-2026-81963, CVE-2026-85880, CVE-2026-69496, CVE-2026-69586, CVE-2026-69768, CVE-2026-73025, CVE-2026-56172, CVE-2026-68832, CVE-2026-68834, CVE-2026-68838, CVE-2026-68841, CVE-2026-68875, CVE-2026-68877, CVE-2026-68880, CVE-2026-69265, CVE-2026-69270, CVE-2026-69274, CVE-2026-69275, CVE-2026-69280, CVE-2026-69283, CVE-2026-69284, CVE-2026-69289, CVE-2026-69296, CVE-2026-69300, CVE-2026-69301, CVE-2026-69307, CVE-2026-69312, CVE-2026-69314, CVE-2026-69332, CVE-2026-69333, CVE-2026-69335, CVE-2026-68833, CVE-2026-68851, CVE-2026-69366, CVE-2026-69337, CVE-2026-69347, CVE-2026-69379, CVE-2026-69390, CVE-2026-69401, CVE-2026-69413, CVE-2026-69420, CVE-2026-69429, CVE-2026-69448, CVE-2026-69455, CVE-2026-69532, CVE-2026-69472, CVE-2026-69479, CVE-2026-69531, CVE-2026-69517, CVE-2026-69505, CVE-2026-69504, CVE-2026-69527, CVE-2026-69549, CVE-2026-69588, CVE-2026-69609, CVE-2026-69648, CVE-2026-69689, CVE-2026-69790, CVE-2026-69638, CVE-2026-69859, CVE-2026-69717, CVE-2026-69711, CVE-2026-69875, CVE-2026-69889, CVE-2026-69757, CVE-2026-69741, CVE-2026-69762, CVE-2026-69744, CVE-2026-69832, CVE-2026-69691, CVE-2026-69808, CVE-2026-69775, CVE-2026-69822, CVE-2026-69770, CVE-2026-69676, CVE-2026-70289, CVE-2026-70563, CVE-2026-71329, CVE-2026-71332, CVE-2026-71348, CVE-2026-71345, CVE-2026-69469, CVE-2026-69501, CVE-2026-69548, CVE-2026-69846, CVE-2026-70283, CVE-2026-72981, CVE-2026-77491, CVE-2026-77492, CVE-2026-77503, CVE-2026-80093, CVE-2026-72949, CVE-2026-70019, CVE-2026-72940, CVE-2026-69573, CVE-2026-70290, CVE-2026-83991, CVE-2026-83999, CVE-2026-69321, CVE-2026-69316, CVE-2026-69340, CVE-2026-69348, CVE-2026-69350, CVE-2026-69353, CVE-2026-69357, CVE-2026-69393, CVE-2026-69410, CVE-2026-69421, CVE-2026-69428, CVE-2026-69425, CVE-2026-69427, CVE-2026-69434, CVE-2026-69456, CVE-2026-69459, CVE-2026-69478, CVE-2026-69561, CVE-2026-69512, CVE-2026-69498, CVE-2026-69571, CVE-2026-69535, CVE-2026-69538, CVE-2026-69591, CVE-2026-69566, CVE-2026-69567, CVE-2026-69584, CVE-2026-69617, CVE-2026-69630, CVE-2026-69610, CVE-2026-69881, CVE-2026-69680, CVE-2026-69619, CVE-2026-69685, CVE-2026-69643, CVE-2026-69687, CVE-2026-69791, CVE-2026-69707, CVE-2026-69652, CVE-2026-69834, CVE-2026-69709, CVE-2026-69844, CVE-2026-69814, CVE-2026-69731, CVE-2026-69706, CVE-2026-69779, CVE-2026-69895, CVE-2026-69792, CVE-2026-69853, CVE-2026-69761, CVE-2026-69785, CVE-2026-69818, CVE-2026-69786, CVE-2026-69874, CVE-2026-70565, CVE-2026-70574, CVE-2026-70569, CVE-2026-70575, CVE-2026-71349, CVE-2026-72927, CVE-2026-72952, CVE-2026-72942, CVE-2026-72966, CVE-2026-72967, CVE-2026-69426, CVE-2026-69564, CVE-2026-72985, CVE-2026-73019, CVE-2026-78451, CVE-2026-78452, CVE-2026-83940, CVE-2026-69598, CVE-2026-83995, CVE-2026-83501, CVE-2026-83498.

CVE-2026-71348

A heap-based buffer overflow vulnerability exists in the Windows Spaceport.sys driver, allowing an attacker with physical access to perform remote code execution.

Affected products:

Windows

Source: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-71348

Related in this roundup: CVE-2026-81963, CVE-2026-85880, CVE-2026-69496, CVE-2026-69586, CVE-2026-69768, CVE-2026-73025, CVE-2026-56172, CVE-2026-68832, CVE-2026-68834, CVE-2026-68838, CVE-2026-68841, CVE-2026-68875, CVE-2026-68877, CVE-2026-68880, CVE-2026-69265, CVE-2026-69270, CVE-2026-69274, CVE-2026-69275, CVE-2026-69280, CVE-2026-69283, CVE-2026-69284, CVE-2026-69289, CVE-2026-69296, CVE-2026-69300, CVE-2026-69301, CVE-2026-69307, CVE-2026-69312, CVE-2026-69314, CVE-2026-69332, CVE-2026-69333, CVE-2026-69335, CVE-2026-68833, CVE-2026-68851, CVE-2026-69366, CVE-2026-69337, CVE-2026-69347, CVE-2026-69379, CVE-2026-69390, CVE-2026-69401, CVE-2026-69413, CVE-2026-69420, CVE-2026-69429, CVE-2026-69448, CVE-2026-69455, CVE-2026-69532, CVE-2026-69472, CVE-2026-69479, CVE-2026-69531, CVE-2026-69517, CVE-2026-69505, CVE-2026-69504, CVE-2026-69527, CVE-2026-69549, CVE-2026-69588, CVE-2026-69609, CVE-2026-69648, CVE-2026-69689, CVE-2026-69790, CVE-2026-69638, CVE-2026-69859, CVE-2026-69717, CVE-2026-69711, CVE-2026-69875, CVE-2026-69889, CVE-2026-69757, CVE-2026-69741, CVE-2026-69762, CVE-2026-69744, CVE-2026-69832, CVE-2026-69691, CVE-2026-69808, CVE-2026-69775, CVE-2026-69822, CVE-2026-69770, CVE-2026-69676, CVE-2026-70289, CVE-2026-70563, CVE-2026-71329, CVE-2026-71332, CVE-2026-71350, CVE-2026-71345, CVE-2026-69469, CVE-2026-69501, CVE-2026-69548, CVE-2026-69846, CVE-2026-70283, CVE-2026-72981, CVE-2026-77491, CVE-2026-77492, CVE-2026-77503, CVE-2026-80093, CVE-2026-72949, CVE-2026-70019, CVE-2026-72940, CVE-2026-69573, CVE-2026-70290, CVE-2026-83991, CVE-2026-83999, CVE-2026-69321, CVE-2026-69316, CVE-2026-69340, CVE-2026-69348, CVE-2026-69350, CVE-2026-69353, CVE-2026-69357, CVE-2026-69393, CVE-2026-69410, CVE-2026-69421, CVE-2026-69428, CVE-2026-69425, CVE-2026-69427, CVE-2026-69434, CVE-2026-69456, CVE-2026-69459, CVE-2026-69478, CVE-2026-69561, CVE-2026-69512, CVE-2026-69498, CVE-2026-69571, CVE-2026-69535, CVE-2026-69538, CVE-2026-69591, CVE-2026-69566, CVE-2026-69567, CVE-2026-69584, CVE-2026-69617, CVE-2026-69630, CVE-2026-69610, CVE-2026-69881, CVE-2026-69680, CVE-2026-69619, CVE-2026-69685, CVE-2026-69643, CVE-2026-69687, CVE-2026-69791, CVE-2026-69707, CVE-2026-69652, CVE-2026-69834, CVE-2026-69709, CVE-2026-69844, CVE-2026-69814, CVE-2026-69731, CVE-2026-69706, CVE-2026-69779, CVE-2026-69895, CVE-2026-69792, CVE-2026-69853, CVE-2026-69761, CVE-2026-69785, CVE-2026-69818, CVE-2026-69786, CVE-2026-69874, CVE-2026-70565, CVE-2026-70574, CVE-2026-70569, CVE-2026-70575, CVE-2026-71349, CVE-2026-72927, CVE-2026-72952, CVE-2026-72942, CVE-2026-72966, CVE-2026-72967, CVE-2026-69426, CVE-2026-69564, CVE-2026-72985, CVE-2026-73019, CVE-2026-78451, CVE-2026-78452, CVE-2026-83940, CVE-2026-69598, CVE-2026-83995, CVE-2026-83501, CVE-2026-83498.

CVE-2026-72926

A use-after-free vulnerability exists in the Windows Internet Connection Sharing (ICS) service, which can be exploited by an authorized local attacker to achieve privilege escalation.

Affected products:

Internet Connection Sharing

Source: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-72926

Related in this roundup: CVE-2026-72983, CVE-2026-72964.

CVE-2026-71343

A heap-based buffer overflow vulnerability exists in the Windows Remote Access Connection Manager, which can be exploited by an authorized attacker to achieve local remote code execution on the target system.

Affected products:

Remote Access Connection Manager

Source: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-71343

CVE-2026-71341

CVE-2026-71341 is an out-of-bounds read vulnerability in the Windows Partition Management Driver that enables an authorized local attacker to perform unauthorized information disclosure on affected Windows systems.

Affected products:

Windows Partition Management Driver

Source: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-71341

Related in this roundup: CVE-2026-69492, CVE-2026-69480.

CVE-2026-71353

A double free vulnerability exists in the Windows Routing and Remote Access Service (RRAS) that allows an authenticated local attacker to gain elevated privileges. Successful exploitation requires the attacker to execute specially crafted code on the target system.

Affected products:

Windows Routing and Remote Access Service

Source: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-71353

Related in this roundup: CVE-2026-69852.

CVE-2026-71345

CVE-2026-71345 is an out-of-bounds write vulnerability located within the Windows Spaceport.sys driver. This vulnerability can be exploited by an authenticated attacker to achieve remote code execution in the context of the local system, necessitating defense-in-depth measures focused on kernel-mode driver monitoring and privilege escalation detection.

Affected products:

Windows

Source: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-71345

Related in this roundup: CVE-2026-81963, CVE-2026-85880, CVE-2026-69496, CVE-2026-69586, CVE-2026-69768, CVE-2026-73025, CVE-2026-56172, CVE-2026-68832, CVE-2026-68834, CVE-2026-68838, CVE-2026-68841, CVE-2026-68875, CVE-2026-68877, CVE-2026-68880, CVE-2026-69265, CVE-2026-69270, CVE-2026-69274, CVE-2026-69275, CVE-2026-69280, CVE-2026-69283, CVE-2026-69284, CVE-2026-69289, CVE-2026-69296, CVE-2026-69300, CVE-2026-69301, CVE-2026-69307, CVE-2026-69312, CVE-2026-69314, CVE-2026-69332, CVE-2026-69333, CVE-2026-69335, CVE-2026-68833, CVE-2026-68851, CVE-2026-69366, CVE-2026-69337, CVE-2026-69347, CVE-2026-69379, CVE-2026-69390, CVE-2026-69401, CVE-2026-69413, CVE-2026-69420, CVE-2026-69429, CVE-2026-69448, CVE-2026-69455, CVE-2026-69532, CVE-2026-69472, CVE-2026-69479, CVE-2026-69531, CVE-2026-69517, CVE-2026-69505, CVE-2026-69504, CVE-2026-69527, CVE-2026-69549, CVE-2026-69588, CVE-2026-69609, CVE-2026-69648, CVE-2026-69689, CVE-2026-69790, CVE-2026-69638, CVE-2026-69859, CVE-2026-69717, CVE-2026-69711, CVE-2026-69875, CVE-2026-69889, CVE-2026-69757, CVE-2026-69741, CVE-2026-69762, CVE-2026-69744, CVE-2026-69832, CVE-2026-69691, CVE-2026-69808, CVE-2026-69775, CVE-2026-69822, CVE-2026-69770, CVE-2026-69676, CVE-2026-70289, CVE-2026-70563, CVE-2026-71329, CVE-2026-71332, CVE-2026-71350, CVE-2026-71348, CVE-2026-69469, CVE-2026-69501, CVE-2026-69548, CVE-2026-69846, CVE-2026-70283, CVE-2026-72981, CVE-2026-77491, CVE-2026-77492, CVE-2026-77503, CVE-2026-80093, CVE-2026-72949, CVE-2026-70019, CVE-2026-72940, CVE-2026-69573, CVE-2026-70290, CVE-2026-83991, CVE-2026-83999, CVE-2026-69321, CVE-2026-69316, CVE-2026-69340, CVE-2026-69348, CVE-2026-69350, CVE-2026-69353, CVE-2026-69357, CVE-2026-69393, CVE-2026-69410, CVE-2026-69421, CVE-2026-69428, CVE-2026-69425, CVE-2026-69427, CVE-2026-69434, CVE-2026-69456, CVE-2026-69459, CVE-2026-69478, CVE-2026-69561, CVE-2026-69512, CVE-2026-69498, CVE-2026-69571, CVE-2026-69535, CVE-2026-69538, CVE-2026-69591, CVE-2026-69566, CVE-2026-69567, CVE-2026-69584, CVE-2026-69617, CVE-2026-69630, CVE-2026-69610, CVE-2026-69881, CVE-2026-69680, CVE-2026-69619, CVE-2026-69685, CVE-2026-69643, CVE-2026-69687, CVE-2026-69791, CVE-2026-69707, CVE-2026-69652, CVE-2026-69834, CVE-2026-69709, CVE-2026-69844, CVE-2026-69814, CVE-2026-69731, CVE-2026-69706, CVE-2026-69779, CVE-2026-69895, CVE-2026-69792, CVE-2026-69853, CVE-2026-69761, CVE-2026-69785, CVE-2026-69818, CVE-2026-69786, CVE-2026-69874, CVE-2026-70565, CVE-2026-70574, CVE-2026-70569, CVE-2026-70575, CVE-2026-71349, CVE-2026-72927, CVE-2026-72952, CVE-2026-72942, CVE-2026-72966, CVE-2026-72967, CVE-2026-69426, CVE-2026-69564, CVE-2026-72985, CVE-2026-73019, CVE-2026-78451, CVE-2026-78452, CVE-2026-83940, CVE-2026-69598, CVE-2026-83995, CVE-2026-83501, CVE-2026-83498.

CVE-2026-72929

CVE-2026-72929 is a local privilege escalation vulnerability in Windows Installer caused by improper validation of integrity check values. An authenticated attacker can exploit this flaw to execute code or perform operations with elevated privileges on the target system.

Affected products:

Windows Installer

Source: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-72929

Related in this roundup: CVE-2026-62694, CVE-2026-71339, CVE-2026-77894, CVE-2026-69441.

CVE-2026-71351

A double free vulnerability exists in the Windows Routing and Remote Access Service (RRAS) that enables an authenticated attacker to perform local privilege escalation on affected Windows systems.

Affected products:

Routing and Remote Access Service

Source: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-71351

Related in this roundup: CVE-2026-69590, CVE-2026-72939, CVE-2026-72950, CVE-2026-72959, CVE-2026-70570.

CVE-2026-72930

CVE-2026-72930 describes a use-after-free vulnerability within the Windows Secure Socket Tunneling Protocol (SSTP) that permits a locally authorized attacker to execute arbitrary code. The vulnerability involves improper memory management in the SSTP stack, potentially leading to remote code execution or system compromise.

Affected products:

Windows Secure Socket Tunneling Protocol (SSTP)

Source: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-72930

Related in this roundup: CVE-2026-73009, CVE-2026-72931.

CVE-2026-72935

CVE-2026-72935 is an out-of-bounds read vulnerability in the Windows NTFS filesystem driver that allows an authorized local attacker to elevate their privileges. Detection should focus on monitoring for abnormal system calls or crashes related to ntfs.sys that may indicate an attempt to trigger memory read operations outside the intended bounds.

Affected products:

Windows NTFS

Source: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-72935

Related in this roundup: CVE-2026-69461.

CVE-2026-72939

A null pointer dereference vulnerability exists within the Windows Routing and Remote Access Service (RRAS), which can be exploited by an authorized attacker to trigger a denial of service condition over the network.

Affected products:

Routing and Remote Access Service

Source: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-72939

Related in this roundup: CVE-2026-69590, CVE-2026-71351, CVE-2026-72950, CVE-2026-72959, CVE-2026-70570.

CVE-2026-72944

A heap-based buffer overflow vulnerability in the Windows Fax Service allows an authenticated attacker to perform a local privilege escalation. The vulnerability arises from improper memory management within the service, which can be exploited by an authorized user to execute code or manipulate system processes with elevated permissions.

Affected products:

Windows Fax Service

Source: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-72944

Related in this roundup: CVE-2026-69621, CVE-2026-69509.

CVE-2026-72946

CVE-2026-72946 is a heap-based buffer overflow vulnerability in the Microsoft Storage Port Driver that allows an authorized local attacker to achieve privilege escalation.

Affected products:

Storage Port Driver

Source: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-72946

CVE-2026-72943

A use-after-free vulnerability in Windows Deployment Services allows an authorized attacker to achieve remote code execution over a network. Successful exploitation requires the attacker to have sufficient privileges to interact with the service, resulting in arbitrary code execution within the context of the service.

Affected products:

Windows Deployment Services

Source: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-72943

Related in this roundup: CVE-2026-72957, CVE-2026-72954, CVE-2026-69607.

CVE-2026-72945

CVE-2026-72945 is an information disclosure vulnerability in the Windows Task Scheduler caused by the use of an uninitialized resource. An authorized local attacker can exploit this flaw to gain unauthorized access to sensitive information.

Affected products:

Windows Task Scheduler

Source: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-72945

CVE-2026-72948

CVE-2026-72948 describes a path traversal vulnerability in Windows DNS that allows an authorized local attacker to perform privilege escalation on the affected system.

Affected products:

Windows DNS

Source: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-72948

Related in this roundup: CVE-2026-69730, CVE-2026-69310, CVE-2026-70091, CVE-2026-69631, CVE-2026-69369, CVE-2026-69672, CVE-2026-72987.

CVE-2026-72958

CVE-2026-72958 is a privilege escalation vulnerability in Windows Credential Guard caused by a double-free memory corruption issue. An attacker with local access can exploit this flaw to elevate their privileges on the host system.

Affected products:

Windows Credential Guard

Source: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-72958

Related in this roundup: CVE-2026-70578.

CVE-2026-72962

CVE-2026-72962 describes a heap-based buffer overflow vulnerability within the Windows USB Video Driver. An authorized local attacker can exploit this flaw to execute code or elevate privileges on the affected system.

Affected products:

Windows USB Video Driver

Source: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-72962

Related in this roundup: CVE-2026-69319, CVE-2026-69423, CVE-2026-69422.

CVE-2026-72963

A use-after-free vulnerability in the Windows Modern Execution Server allows an authorized local attacker to elevate their privileges. This vulnerability requires the attacker to already have a foothold on the system to execute the exploit code.

Affected products:

Windows Modern Execution Server

Source: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-72963

CVE-2026-69355

CVE-2026-69355 is a remote code execution vulnerability in Microsoft Exchange Server caused by improper validation of file names or paths. An authorized attacker can exploit this flaw over a network to execute arbitrary code, necessitating strict monitoring of Exchange configuration changes and file system access patterns.

Affected products:

Exchange Server

Source: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-69355

Related in this roundup: CVE-2026-69356, CVE-2026-69641, CVE-2026-55007, CVE-2026-69361, CVE-2026-69375, CVE-2026-69378, CVE-2026-69380, CVE-2026-69382.

CVE-2026-69361

CVE-2026-69361 is a server-side request forgery (SSRF) vulnerability in Microsoft Exchange Server that enables an authorized attacker to perform spoofing attacks over a network.

Affected products:

Exchange Server

Source: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-69361

Related in this roundup: CVE-2026-69356, CVE-2026-69641, CVE-2026-55007, CVE-2026-69355, CVE-2026-69375, CVE-2026-69378, CVE-2026-69380, CVE-2026-69382.

CVE-2026-69375

CVE-2026-69375 describes an authorization bypass vulnerability in Microsoft Exchange Server that allows an authenticated attacker to perform unauthorized tampering with data over the network by manipulating a user-controlled key.

Affected products:

Exchange Server

Source: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-69375

Related in this roundup: CVE-2026-69356, CVE-2026-69641, CVE-2026-55007, CVE-2026-69355, CVE-2026-69361, CVE-2026-69378, CVE-2026-69380, CVE-2026-69382.

CVE-2026-69378

Microsoft Exchange Server contains a vulnerability due to uncontrolled recursion that allows an unauthorized, remote attacker to trigger a denial of service condition over the network.

Affected products:

Exchange Server

Source: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-69378

Related in this roundup: CVE-2026-69356, CVE-2026-69641, CVE-2026-55007, CVE-2026-69355, CVE-2026-69361, CVE-2026-69375, CVE-2026-69380, CVE-2026-69382.

CVE-2026-69380

Microsoft Exchange Server contains a vulnerability due to missing authorization checks, allowing an authenticated attacker to perform unauthorized privilege escalation over the network.

Affected products:

Exchange Server

Source: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-69380

Related in this roundup: CVE-2026-69356, CVE-2026-69641, CVE-2026-55007, CVE-2026-69355, CVE-2026-69361, CVE-2026-69375, CVE-2026-69378, CVE-2026-69382.

CVE-2026-69382

CVE-2026-69382 is an information disclosure vulnerability in Microsoft Exchange Server resulting from the use of a broken or risky cryptographic algorithm, which enables unauthorized remote attackers to potentially access sensitive information transmitted over the network.

Affected products:

Exchange Server

Source: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-69382

Related in this roundup: CVE-2026-69356, CVE-2026-69641, CVE-2026-55007, CVE-2026-69355, CVE-2026-69361, CVE-2026-69375, CVE-2026-69378, CVE-2026-69380.

CVE-2026-69383

CVE-2026-69383 is a local elevation of privilege vulnerability in the Windows Shell caused by improper handling of file names or paths, allowing an authorized local attacker to gain elevated permissions on the system.

Affected products:

Windows Shell

Source: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-69383

Related in this roundup: CVE-2026-69829, CVE-2026-69528, CVE-2026-69606, CVE-2026-69392.

CVE-2026-69394

A heap-based buffer overflow vulnerability exists in the Windows Audio Service that allows a locally authenticated attacker to escalate their privileges to a higher level within the operating system.

Affected products:

Windows Audio Service

Source: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-69394

Related in this roundup: CVE-2026-69311, CVE-2026-69540, CVE-2026-70562, CVE-2026-69604, CVE-2026-69447, CVE-2026-69801, CVE-2026-69692.

CVE-2026-69443

CVE-2026-69443 is an information disclosure vulnerability in the Windows Device Health Attestation (DHA) service caused by an out-of-bounds read. An unauthenticated attacker can exploit this flaw to read sensitive data over the network.

Affected products:

Windows Device Health Attestation

Source: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-69443

CVE-2026-69469

An integer overflow or wraparound vulnerability exists in the Windows USB Audio Class driver (usbaudio.sys), which may allow an unauthorized attacker with physical access to a target system to escalate their privileges to a higher integrity level.

Affected products:

Windows

Source: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-69469

Related in this roundup: CVE-2026-81963, CVE-2026-85880, CVE-2026-69496, CVE-2026-69586, CVE-2026-69768, CVE-2026-73025, CVE-2026-56172, CVE-2026-68832, CVE-2026-68834, CVE-2026-68838, CVE-2026-68841, CVE-2026-68875, CVE-2026-68877, CVE-2026-68880, CVE-2026-69265, CVE-2026-69270, CVE-2026-69274, CVE-2026-69275, CVE-2026-69280, CVE-2026-69283, CVE-2026-69284, CVE-2026-69289, CVE-2026-69296, CVE-2026-69300, CVE-2026-69301, CVE-2026-69307, CVE-2026-69312, CVE-2026-69314, CVE-2026-69332, CVE-2026-69333, CVE-2026-69335, CVE-2026-68833, CVE-2026-68851, CVE-2026-69366, CVE-2026-69337, CVE-2026-69347, CVE-2026-69379, CVE-2026-69390, CVE-2026-69401, CVE-2026-69413, CVE-2026-69420, CVE-2026-69429, CVE-2026-69448, CVE-2026-69455, CVE-2026-69532, CVE-2026-69472, CVE-2026-69479, CVE-2026-69531, CVE-2026-69517, CVE-2026-69505, CVE-2026-69504, CVE-2026-69527, CVE-2026-69549, CVE-2026-69588, CVE-2026-69609, CVE-2026-69648, CVE-2026-69689, CVE-2026-69790, CVE-2026-69638, CVE-2026-69859, CVE-2026-69717, CVE-2026-69711, CVE-2026-69875, CVE-2026-69889, CVE-2026-69757, CVE-2026-69741, CVE-2026-69762, CVE-2026-69744, CVE-2026-69832, CVE-2026-69691, CVE-2026-69808, CVE-2026-69775, CVE-2026-69822, CVE-2026-69770, CVE-2026-69676, CVE-2026-70289, CVE-2026-70563, CVE-2026-71329, CVE-2026-71332, CVE-2026-71350, CVE-2026-71348, CVE-2026-71345, CVE-2026-69501, CVE-2026-69548, CVE-2026-69846, CVE-2026-70283, CVE-2026-72981, CVE-2026-77491, CVE-2026-77492, CVE-2026-77503, CVE-2026-80093, CVE-2026-72949, CVE-2026-70019, CVE-2026-72940, CVE-2026-69573, CVE-2026-70290, CVE-2026-83991, CVE-2026-83999, CVE-2026-69321, CVE-2026-69316, CVE-2026-69340, CVE-2026-69348, CVE-2026-69350, CVE-2026-69353, CVE-2026-69357, CVE-2026-69393, CVE-2026-69410, CVE-2026-69421, CVE-2026-69428, CVE-2026-69425, CVE-2026-69427, CVE-2026-69434, CVE-2026-69456, CVE-2026-69459, CVE-2026-69478, CVE-2026-69561, CVE-2026-69512, CVE-2026-69498, CVE-2026-69571, CVE-2026-69535, CVE-2026-69538, CVE-2026-69591, CVE-2026-69566, CVE-2026-69567, CVE-2026-69584, CVE-2026-69617, CVE-2026-69630, CVE-2026-69610, CVE-2026-69881, CVE-2026-69680, CVE-2026-69619, CVE-2026-69685, CVE-2026-69643, CVE-2026-69687, CVE-2026-69791, CVE-2026-69707, CVE-2026-69652, CVE-2026-69834, CVE-2026-69709, CVE-2026-69844, CVE-2026-69814, CVE-2026-69731, CVE-2026-69706, CVE-2026-69779, CVE-2026-69895, CVE-2026-69792, CVE-2026-69853, CVE-2026-69761, CVE-2026-69785, CVE-2026-69818, CVE-2026-69786, CVE-2026-69874, CVE-2026-70565, CVE-2026-70574, CVE-2026-70569, CVE-2026-70575, CVE-2026-71349, CVE-2026-72927, CVE-2026-72952, CVE-2026-72942, CVE-2026-72966, CVE-2026-72967, CVE-2026-69426, CVE-2026-69564, CVE-2026-72985, CVE-2026-73019, CVE-2026-78451, CVE-2026-78452, CVE-2026-83940, CVE-2026-69598, CVE-2026-83995, CVE-2026-83501, CVE-2026-83498.

CVE-2026-69501

An untrusted pointer dereference vulnerability exists within the Windows Secure Kernel Mode, which can be exploited by a local authenticated attacker to achieve privilege escalation.

Affected products:

Windows

Source: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-69501

Related in this roundup: CVE-2026-81963, CVE-2026-85880, CVE-2026-69496, CVE-2026-69586, CVE-2026-69768, CVE-2026-73025, CVE-2026-56172, CVE-2026-68832, CVE-2026-68834, CVE-2026-68838, CVE-2026-68841, CVE-2026-68875, CVE-2026-68877, CVE-2026-68880, CVE-2026-69265, CVE-2026-69270, CVE-2026-69274, CVE-2026-69275, CVE-2026-69280, CVE-2026-69283, CVE-2026-69284, CVE-2026-69289, CVE-2026-69296, CVE-2026-69300, CVE-2026-69301, CVE-2026-69307, CVE-2026-69312, CVE-2026-69314, CVE-2026-69332, CVE-2026-69333, CVE-2026-69335, CVE-2026-68833, CVE-2026-68851, CVE-2026-69366, CVE-2026-69337, CVE-2026-69347, CVE-2026-69379, CVE-2026-69390, CVE-2026-69401, CVE-2026-69413, CVE-2026-69420, CVE-2026-69429, CVE-2026-69448, CVE-2026-69455, CVE-2026-69532, CVE-2026-69472, CVE-2026-69479, CVE-2026-69531, CVE-2026-69517, CVE-2026-69505, CVE-2026-69504, CVE-2026-69527, CVE-2026-69549, CVE-2026-69588, CVE-2026-69609, CVE-2026-69648, CVE-2026-69689, CVE-2026-69790, CVE-2026-69638, CVE-2026-69859, CVE-2026-69717, CVE-2026-69711, CVE-2026-69875, CVE-2026-69889, CVE-2026-69757, CVE-2026-69741, CVE-2026-69762, CVE-2026-69744, CVE-2026-69832, CVE-2026-69691, CVE-2026-69808, CVE-2026-69775, CVE-2026-69822, CVE-2026-69770, CVE-2026-69676, CVE-2026-70289, CVE-2026-70563, CVE-2026-71329, CVE-2026-71332, CVE-2026-71350, CVE-2026-71348, CVE-2026-71345, CVE-2026-69469, CVE-2026-69548, CVE-2026-69846, CVE-2026-70283, CVE-2026-72981, CVE-2026-77491, CVE-2026-77492, CVE-2026-77503, CVE-2026-80093, CVE-2026-72949, CVE-2026-70019, CVE-2026-72940, CVE-2026-69573, CVE-2026-70290, CVE-2026-83991, CVE-2026-83999, CVE-2026-69321, CVE-2026-69316, CVE-2026-69340, CVE-2026-69348, CVE-2026-69350, CVE-2026-69353, CVE-2026-69357, CVE-2026-69393, CVE-2026-69410, CVE-2026-69421, CVE-2026-69428, CVE-2026-69425, CVE-2026-69427, CVE-2026-69434, CVE-2026-69456, CVE-2026-69459, CVE-2026-69478, CVE-2026-69561, CVE-2026-69512, CVE-2026-69498, CVE-2026-69571, CVE-2026-69535, CVE-2026-69538, CVE-2026-69591, CVE-2026-69566, CVE-2026-69567, CVE-2026-69584, CVE-2026-69617, CVE-2026-69630, CVE-2026-69610, CVE-2026-69881, CVE-2026-69680, CVE-2026-69619, CVE-2026-69685, CVE-2026-69643, CVE-2026-69687, CVE-2026-69791, CVE-2026-69707, CVE-2026-69652, CVE-2026-69834, CVE-2026-69709, CVE-2026-69844, CVE-2026-69814, CVE-2026-69731, CVE-2026-69706, CVE-2026-69779, CVE-2026-69895, CVE-2026-69792, CVE-2026-69853, CVE-2026-69761, CVE-2026-69785, CVE-2026-69818, CVE-2026-69786, CVE-2026-69874, CVE-2026-70565, CVE-2026-70574, CVE-2026-70569, CVE-2026-70575, CVE-2026-71349, CVE-2026-72927, CVE-2026-72952, CVE-2026-72942, CVE-2026-72966, CVE-2026-72967, CVE-2026-69426, CVE-2026-69564, CVE-2026-72985, CVE-2026-73019, CVE-2026-78451, CVE-2026-78452, CVE-2026-83940, CVE-2026-69598, CVE-2026-83995, CVE-2026-83501, CVE-2026-83498.

CVE-2026-69518

CVE-2026-69518 is a heap-based buffer overflow vulnerability in Windows Remote Desktop that enables an unauthenticated attacker to achieve remote code execution over a network connection.

Affected products:

Windows Remote Desktop

Source: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-69518

CVE-2026-69544

CVE-2026-69544 describes a heap-based buffer overflow vulnerability in the Windows SMB Client that enables an authenticated attacker to execute arbitrary code with elevated privileges on the local system.

Affected products:

Windows SMB Client

Source: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-69544

Related in this roundup: CVE-2026-69572, CVE-2026-69618, CVE-2026-72936.

CVE-2026-69548

CVE-2026-69548 is a heap-based buffer overflow vulnerability in the Windows RNDIS (Remote Network Driver Interface Specification) component. The vulnerability permits an unauthorized attacker to disclose sensitive information, though successful exploitation requires physical access to the target device.

Affected products:

Windows

Source: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-69548

Related in this roundup: CVE-2026-81963, CVE-2026-85880, CVE-2026-69496, CVE-2026-69586, CVE-2026-69768, CVE-2026-73025, CVE-2026-56172, CVE-2026-68832, CVE-2026-68834, CVE-2026-68838, CVE-2026-68841, CVE-2026-68875, CVE-2026-68877, CVE-2026-68880, CVE-2026-69265, CVE-2026-69270, CVE-2026-69274, CVE-2026-69275, CVE-2026-69280, CVE-2026-69283, CVE-2026-69284, CVE-2026-69289, CVE-2026-69296, CVE-2026-69300, CVE-2026-69301, CVE-2026-69307, CVE-2026-69312, CVE-2026-69314, CVE-2026-69332, CVE-2026-69333, CVE-2026-69335, CVE-2026-68833, CVE-2026-68851, CVE-2026-69366, CVE-2026-69337, CVE-2026-69347, CVE-2026-69379, CVE-2026-69390, CVE-2026-69401, CVE-2026-69413, CVE-2026-69420, CVE-2026-69429, CVE-2026-69448, CVE-2026-69455, CVE-2026-69532, CVE-2026-69472, CVE-2026-69479, CVE-2026-69531, CVE-2026-69517, CVE-2026-69505, CVE-2026-69504, CVE-2026-69527, CVE-2026-69549, CVE-2026-69588, CVE-2026-69609, CVE-2026-69648, CVE-2026-69689, CVE-2026-69790, CVE-2026-69638, CVE-2026-69859, CVE-2026-69717, CVE-2026-69711, CVE-2026-69875, CVE-2026-69889, CVE-2026-69757, CVE-2026-69741, CVE-2026-69762, CVE-2026-69744, CVE-2026-69832, CVE-2026-69691, CVE-2026-69808, CVE-2026-69775, CVE-2026-69822, CVE-2026-69770, CVE-2026-69676, CVE-2026-70289, CVE-2026-70563, CVE-2026-71329, CVE-2026-71332, CVE-2026-71350, CVE-2026-71348, CVE-2026-71345, CVE-2026-69469, CVE-2026-69501, CVE-2026-69846, CVE-2026-70283, CVE-2026-72981, CVE-2026-77491, CVE-2026-77492, CVE-2026-77503, CVE-2026-80093, CVE-2026-72949, CVE-2026-70019, CVE-2026-72940, CVE-2026-69573, CVE-2026-70290, CVE-2026-83991, CVE-2026-83999, CVE-2026-69321, CVE-2026-69316, CVE-2026-69340, CVE-2026-69348, CVE-2026-69350, CVE-2026-69353, CVE-2026-69357, CVE-2026-69393, CVE-2026-69410, CVE-2026-69421, CVE-2026-69428, CVE-2026-69425, CVE-2026-69427, CVE-2026-69434, CVE-2026-69456, CVE-2026-69459, CVE-2026-69478, CVE-2026-69561, CVE-2026-69512, CVE-2026-69498, CVE-2026-69571, CVE-2026-69535, CVE-2026-69538, CVE-2026-69591, CVE-2026-69566, CVE-2026-69567, CVE-2026-69584, CVE-2026-69617, CVE-2026-69630, CVE-2026-69610, CVE-2026-69881, CVE-2026-69680, CVE-2026-69619, CVE-2026-69685, CVE-2026-69643, CVE-2026-69687, CVE-2026-69791, CVE-2026-69707, CVE-2026-69652, CVE-2026-69834, CVE-2026-69709, CVE-2026-69844, CVE-2026-69814, CVE-2026-69731, CVE-2026-69706, CVE-2026-69779, CVE-2026-69895, CVE-2026-69792, CVE-2026-69853, CVE-2026-69761, CVE-2026-69785, CVE-2026-69818, CVE-2026-69786, CVE-2026-69874, CVE-2026-70565, CVE-2026-70574, CVE-2026-70569, CVE-2026-70575, CVE-2026-71349, CVE-2026-72927, CVE-2026-72952, CVE-2026-72942, CVE-2026-72966, CVE-2026-72967, CVE-2026-69426, CVE-2026-69564, CVE-2026-72985, CVE-2026-73019, CVE-2026-78451, CVE-2026-78452, CVE-2026-83940, CVE-2026-69598, CVE-2026-83995, CVE-2026-83501, CVE-2026-83498.

CVE-2026-69556

CVE-2026-69556 is a heap-based buffer overflow vulnerability in Microsoft Office Word that enables an unauthenticated attacker to achieve remote code execution over a network. Detection efforts should focus on monitoring for anomalous process spawning or unexpected memory behavior originating from Winword.exe.

Affected products:

Office Word

Source: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-69556

Related in this roundup: CVE-2026-69671, CVE-2026-69686, CVE-2026-69722, CVE-2026-69734, CVE-2026-69719, CVE-2026-69759, CVE-2026-69764, CVE-2026-78511, CVE-2026-78502, CVE-2026-78504, CVE-2026-78517, CVE-2026-68843, CVE-2026-69360, CVE-2026-72972, CVE-2026-72976, CVE-2026-77901, CVE-2026-77911, CVE-2026-78507, CVE-2026-78506, CVE-2026-78514, CVE-2026-78503, CVE-2026-78521, CVE-2026-78522, CVE-2026-78526, CVE-2026-80080, CVE-2026-83951, CVE-2026-83949.

CVE-2026-69583

The Windows Biometric Service is affected by a heap-based buffer overflow vulnerability that can be exploited by an authorized attacker to achieve local privilege escalation on the host system.

Affected products:

Windows Biometric Service

Source: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-69583

Related in this roundup: CVE-2026-69293, CVE-2026-69298, CVE-2026-69323, CVE-2026-69589, CVE-2026-69580, CVE-2026-69476, CVE-2026-69787, CVE-2026-77489, CVE-2026-83955, CVE-2026-83986, CVE-2026-83969, CVE-2026-83988, CVE-2026-83979, CVE-2026-83974, CVE-2026-83975, CVE-2026-83976, CVE-2026-69727, CVE-2026-69826, CVE-2026-69738, CVE-2026-69773, CVE-2026-70573, CVE-2026-70572, CVE-2026-70581, CVE-2026-72941, CVE-2026-69352, CVE-2026-69489, CVE-2026-69593, CVE-2026-72995, CVE-2026-72988, CVE-2026-72990, CVE-2026-72991, CVE-2026-72992, CVE-2026-72993, CVE-2026-72994, CVE-2026-72996, CVE-2026-72997, CVE-2026-73002, CVE-2026-73020, CVE-2026-73000, CVE-2026-73001, CVE-2026-73021, CVE-2026-73015, CVE-2026-73011, CVE-2026-73008, CVE-2026-73007, CVE-2026-73026, CVE-2026-78447, CVE-2026-78448, CVE-2026-83971, CVE-2026-83954, CVE-2026-83967, CVE-2026-83970, CVE-2026-83972, CVE-2026-83968, CVE-2026-83973, CVE-2026-83981, CVE-2026-83977, CVE-2026-83978, CVE-2026-83982, CVE-2026-83980, CVE-2026-83987, CVE-2026-83983, CVE-2026-83985.

CVE-2026-69589

CVE-2026-69589 describes a heap-based buffer overflow vulnerability in the Windows Biometric Service that enables a locally authenticated attacker to escalate their privileges. Detection should focus on monitoring for unusual process execution patterns or abnormal behavior originating from the Windows Biometric Service host process (winbio.exe).

Affected products:

Windows Biometric Service

Source: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-69589

Related in this roundup: CVE-2026-69293, CVE-2026-69298, CVE-2026-69323, CVE-2026-69583, CVE-2026-69580, CVE-2026-69476, CVE-2026-69787, CVE-2026-77489, CVE-2026-83955, CVE-2026-83986, CVE-2026-83969, CVE-2026-83988, CVE-2026-83979, CVE-2026-83974, CVE-2026-83975, CVE-2026-83976, CVE-2026-69727, CVE-2026-69826, CVE-2026-69738, CVE-2026-69773, CVE-2026-70573, CVE-2026-70572, CVE-2026-70581, CVE-2026-72941, CVE-2026-69352, CVE-2026-69489, CVE-2026-69593, CVE-2026-72995, CVE-2026-72988, CVE-2026-72990, CVE-2026-72991, CVE-2026-72992, CVE-2026-72993, CVE-2026-72994, CVE-2026-72996, CVE-2026-72997, CVE-2026-73002, CVE-2026-73020, CVE-2026-73000, CVE-2026-73001, CVE-2026-73021, CVE-2026-73015, CVE-2026-73011, CVE-2026-73008, CVE-2026-73007, CVE-2026-73026, CVE-2026-78447, CVE-2026-78448, CVE-2026-83971, CVE-2026-83954, CVE-2026-83967, CVE-2026-83970, CVE-2026-83972, CVE-2026-83968, CVE-2026-83973, CVE-2026-83981, CVE-2026-83977, CVE-2026-83978, CVE-2026-83982, CVE-2026-83980, CVE-2026-83987, CVE-2026-83983, CVE-2026-83985.

CVE-2026-69580

A heap-based buffer overflow vulnerability in the Windows Biometric Service allows a locally authenticated attacker to escalate privileges. Successful exploitation requires an attacker to already have local access to the system.

Affected products:

Windows Biometric Service

Source: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-69580

Related in this roundup: CVE-2026-69293, CVE-2026-69298, CVE-2026-69323, CVE-2026-69583, CVE-2026-69589, CVE-2026-69476, CVE-2026-69787, CVE-2026-77489, CVE-2026-83955, CVE-2026-83986, CVE-2026-83969, CVE-2026-83988, CVE-2026-83979, CVE-2026-83974, CVE-2026-83975, CVE-2026-83976, CVE-2026-69727, CVE-2026-69826, CVE-2026-69738, CVE-2026-69773, CVE-2026-70573, CVE-2026-70572, CVE-2026-70581, CVE-2026-72941, CVE-2026-69352, CVE-2026-69489, CVE-2026-69593, CVE-2026-72995, CVE-2026-72988, CVE-2026-72990, CVE-2026-72991, CVE-2026-72992, CVE-2026-72993, CVE-2026-72994, CVE-2026-72996, CVE-2026-72997, CVE-2026-73002, CVE-2026-73020, CVE-2026-73000, CVE-2026-73001, CVE-2026-73021, CVE-2026-73015, CVE-2026-73011, CVE-2026-73008, CVE-2026-73007, CVE-2026-73026, CVE-2026-78447, CVE-2026-78448, CVE-2026-83971, CVE-2026-83954, CVE-2026-83967, CVE-2026-83970, CVE-2026-83972, CVE-2026-83968, CVE-2026-83973, CVE-2026-83981, CVE-2026-83977, CVE-2026-83978, CVE-2026-83982, CVE-2026-83980, CVE-2026-83987, CVE-2026-83983, CVE-2026-83985.

CVE-2026-69576

A use-after-free vulnerability exists in the Graphic Fonts component of Windows, allowing a locally authenticated attacker to escalate their privileges. Successful exploitation requires an attacker to execute malicious code on the target system to trigger the memory corruption.

Affected products:

Graphic Fonts

Source: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-69576

Related in this roundup: CVE-2026-73018.

CVE-2026-69604

A heap-based buffer overflow vulnerability exists in the Windows Audio Service that allows a locally authenticated attacker to escalate their privileges to a higher level of authority on the target system.

Affected products:

Windows Audio Service

Source: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-69604

Related in this roundup: CVE-2026-69311, CVE-2026-69540, CVE-2026-70562, CVE-2026-69394, CVE-2026-69447, CVE-2026-69801, CVE-2026-69692.

CVE-2026-69603

CVE-2026-69603 is a heap-based buffer overflow vulnerability in Windows Hyper-V that allows an authorized attacker to achieve remote code execution on the underlying host system.

Affected products:

Hyper-V

Source: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-69603

Related in this roundup: CVE-2026-69910, CVE-2026-69553, CVE-2026-80083, CVE-2026-72961.

CVE-2026-69642

CVE-2026-69642 describes a cross-site scripting (XSS) vulnerability in Microsoft Skype for Business. An attacker can exploit this flaw to perform spoofing attacks over a network by injecting malicious input into web page generation processes, potentially leading to the compromise of user interactions within the application.

Affected products:

Skype for Business

Source: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-69642

Related in this roundup: CVE-2026-66302, CVE-2026-66304, CVE-2026-66306, CVE-2026-66308, CVE-2026-63523, CVE-2026-66305, CVE-2026-69646, CVE-2026-66303, CVE-2026-66307.

CVE-2026-69646

CVE-2026-69646 describes a spoofing vulnerability in Skype for Business caused by improper verification of cryptographic signatures. An attacker located on an adjacent network can exploit this flaw to perform spoofing attacks against users of the application.

Affected products:

Skype for Business

Source: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-69646

Related in this roundup: CVE-2026-66302, CVE-2026-66304, CVE-2026-66306, CVE-2026-66308, CVE-2026-63523, CVE-2026-66305, CVE-2026-69642, CVE-2026-66303, CVE-2026-66307.

CVE-2026-69649

CVE-2026-69649 is a heap-based buffer overflow vulnerability in the Microsoft Raw Image Extension for Windows. An unauthenticated attacker can exploit this remotely to achieve arbitrary code execution by convincing a user to process a specially crafted raw image file.

Affected products:

Raw Image Extension

Source: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-69649

CVE-2026-69671

CVE-2026-69671 describes a heap-based buffer overflow vulnerability in Microsoft Office Word that enables a remote attacker to achieve code execution over a network. Detection engineers should monitor for anomalous process spawning patterns originating from Word documents and inspect heap memory allocation behaviors during document parsing.

Affected products:

Office Word

Source: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-69671

Related in this roundup: CVE-2026-69556, CVE-2026-69686, CVE-2026-69722, CVE-2026-69734, CVE-2026-69719, CVE-2026-69759, CVE-2026-69764, CVE-2026-78511, CVE-2026-78502, CVE-2026-78504, CVE-2026-78517, CVE-2026-68843, CVE-2026-69360, CVE-2026-72972, CVE-2026-72976, CVE-2026-77901, CVE-2026-77911, CVE-2026-78507, CVE-2026-78506, CVE-2026-78514, CVE-2026-78503, CVE-2026-78521, CVE-2026-78522, CVE-2026-78526, CVE-2026-80080, CVE-2026-83951, CVE-2026-83949.

CVE-2026-69678

CVE-2026-69678 is a use-after-free vulnerability in Microsoft Office PowerPoint that enables a remote attacker to execute arbitrary code via a specially crafted document, leading to remote code execution.

Affected products:

Office PowerPoint

Source: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-69678

Related in this roundup: CVE-2026-72956, CVE-2026-72977.

CVE-2026-69686

CVE-2026-69686 is a stack-based buffer overflow vulnerability in Microsoft Office Word that enables a remote attacker to execute arbitrary code. The vulnerability can be exploited by an unauthorized user over a network, potentially allowing full system compromise.

Affected products:

Office Word

Source: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-69686

Related in this roundup: CVE-2026-69556, CVE-2026-69671, CVE-2026-69722, CVE-2026-69734, CVE-2026-69719, CVE-2026-69759, CVE-2026-69764, CVE-2026-78511, CVE-2026-78502, CVE-2026-78504, CVE-2026-78517, CVE-2026-68843, CVE-2026-69360, CVE-2026-72972, CVE-2026-72976, CVE-2026-77901, CVE-2026-77911, CVE-2026-78507, CVE-2026-78506, CVE-2026-78514, CVE-2026-78503, CVE-2026-78521, CVE-2026-78522, CVE-2026-78526, CVE-2026-80080, CVE-2026-83951, CVE-2026-83949.

CVE-2026-69722

CVE-2026-69722 describes a stack-based buffer overflow vulnerability in Microsoft Office Word that enables a remote attacker to achieve code execution via specially crafted documents or network interactions.

Affected products:

Office Word

Source: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-69722

Related in this roundup: CVE-2026-69556, CVE-2026-69671, CVE-2026-69686, CVE-2026-69734, CVE-2026-69719, CVE-2026-69759, CVE-2026-69764, CVE-2026-78511, CVE-2026-78502, CVE-2026-78504, CVE-2026-78517, CVE-2026-68843, CVE-2026-69360, CVE-2026-72972, CVE-2026-72976, CVE-2026-77901, CVE-2026-77911, CVE-2026-78507, CVE-2026-78506, CVE-2026-78514, CVE-2026-78503, CVE-2026-78521, CVE-2026-78522, CVE-2026-78526, CVE-2026-80080, CVE-2026-83951, CVE-2026-83949.

CVE-2026-69716

CVE-2026-69716 is an elevation of privilege vulnerability in Microsoft Office SharePoint caused by improper neutralization of special elements used in SQL commands. An authorized attacker can exploit this SQL injection flaw to gain elevated privileges within the SharePoint environment over a network.

Affected products:

SharePoint

Source: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-69716

Related in this roundup: CVE-2026-69268, CVE-2026-69273, CVE-2026-69282, CVE-2026-69724, CVE-2026-69690, CVE-2026-69683, CVE-2026-69804, CVE-2026-69402, CVE-2026-69409, CVE-2026-69417, CVE-2026-69464, CVE-2026-69636, CVE-2026-69904.

CVE-2026-69734

CVE-2026-69734 is an information disclosure vulnerability in Microsoft Office Word caused by an integer overflow or wraparound. This vulnerability allows an unauthorized remote attacker to gain access to sensitive information via network-based vectors.

Affected products:

Office Word

Source: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-69734

Related in this roundup: CVE-2026-69556, CVE-2026-69671, CVE-2026-69686, CVE-2026-69722, CVE-2026-69719, CVE-2026-69759, CVE-2026-69764, CVE-2026-78511, CVE-2026-78502, CVE-2026-78504, CVE-2026-78517, CVE-2026-68843, CVE-2026-69360, CVE-2026-72972, CVE-2026-72976, CVE-2026-77901, CVE-2026-77911, CVE-2026-78507, CVE-2026-78506, CVE-2026-78514, CVE-2026-78503, CVE-2026-78521, CVE-2026-78522, CVE-2026-78526, CVE-2026-80080, CVE-2026-83951, CVE-2026-83949.

CVE-2026-69742

CVE-2026-69742 is a remote code execution vulnerability in Microsoft Office Publisher caused by an integer overflow or wraparound condition, allowing an unauthorized attacker to execute arbitrary code over a network.

Affected products:

Office Publisher

Source: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-69742

Related in this roundup: CVE-2026-81385.

CVE-2026-69724

CVE-2026-69724 is a remote code execution vulnerability in Microsoft SharePoint caused by missing authorization checks. An attacker with authorized access to the service can exploit this vulnerability to execute arbitrary code over the network.

Affected products:

SharePoint

Source: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-69724

Related in this roundup: CVE-2026-69268, CVE-2026-69273, CVE-2026-69282, CVE-2026-69716, CVE-2026-69690, CVE-2026-69683, CVE-2026-69804, CVE-2026-69402, CVE-2026-69409, CVE-2026-69417, CVE-2026-69464, CVE-2026-69636, CVE-2026-69904.

CVE-2026-69719

CVE-2026-69719 is an information disclosure vulnerability in Microsoft Office Word caused by a buffer over-read flaw. This vulnerability allows an unauthorized attacker to potentially access sensitive information over a network.

Affected products:

Office Word

Source: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-69719

Related in this roundup: CVE-2026-69556, CVE-2026-69671, CVE-2026-69686, CVE-2026-69722, CVE-2026-69734, CVE-2026-69759, CVE-2026-69764, CVE-2026-78511, CVE-2026-78502, CVE-2026-78504, CVE-2026-78517, CVE-2026-68843, CVE-2026-69360, CVE-2026-72972, CVE-2026-72976, CVE-2026-77901, CVE-2026-77911, CVE-2026-78507, CVE-2026-78506, CVE-2026-78514, CVE-2026-78503, CVE-2026-78521, CVE-2026-78522, CVE-2026-78526, CVE-2026-80080, CVE-2026-83951, CVE-2026-83949.

CVE-2026-69690

CVE-2026-69690 describes a cross-site scripting (XSS) vulnerability in Microsoft Office SharePoint caused by improper neutralization of input during web page generation. An authenticated attacker can exploit this flaw to perform spoofing attacks over a network.

Affected products:

SharePoint

Source: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-69690

Related in this roundup: CVE-2026-69268, CVE-2026-69273, CVE-2026-69282, CVE-2026-69716, CVE-2026-69724, CVE-2026-69683, CVE-2026-69804, CVE-2026-69402, CVE-2026-69409, CVE-2026-69417, CVE-2026-69464, CVE-2026-69636, CVE-2026-69904.

CVE-2026-69739

CVE-2026-69739 is an information disclosure vulnerability in Microsoft Office caused by an out-of-bounds read flaw. A remote, unauthorized attacker can exploit this vulnerability to read sensitive data over a network, potentially leading to unauthorized information access.

Affected products:

Office

Source: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-69739

Related in this roundup: CVE-2026-69285, CVE-2026-77504, CVE-2026-77898, CVE-2026-78439, CVE-2026-78505, CVE-2026-64918, CVE-2026-69442, CVE-2026-69626, CVE-2026-69632, CVE-2026-72938, CVE-2026-72973, CVE-2026-78512, CVE-2026-80079, CVE-2026-78524, CVE-2026-80078, CVE-2026-80076, CVE-2026-80087, CVE-2026-80085, CVE-2026-80088, CVE-2026-80091, CVE-2026-80089, CVE-2026-80090, CVE-2026-80082.

CVE-2026-69683

CVE-2026-69683 is a server-side request forgery (SSRF) vulnerability in Microsoft SharePoint that permits an authenticated attacker to perform unauthorized actions to disclose sensitive information over the network.

Affected products:

SharePoint

Source: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-69683

Related in this roundup: CVE-2026-69268, CVE-2026-69273, CVE-2026-69282, CVE-2026-69716, CVE-2026-69724, CVE-2026-69690, CVE-2026-69804, CVE-2026-69402, CVE-2026-69409, CVE-2026-69417, CVE-2026-69464, CVE-2026-69636, CVE-2026-69904.

CVE-2026-69529

A heap-based buffer overflow vulnerability in Microsoft Office Access enables an unauthenticated remote attacker to execute arbitrary code. The vulnerability is triggered over a network, potentially allowing complete system compromise.

Affected products:

Office Access

Source: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-69529

Related in this roundup: CVE-2026-69778, CVE-2026-69614, CVE-2026-69477.

CVE-2026-69759

CVE-2026-69759 is a stack-based buffer overflow vulnerability in Microsoft Office Word that enables a remote, unauthorized attacker to execute arbitrary code via the network.

Affected products:

Office Word

Source: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-69759

Related in this roundup: CVE-2026-69556, CVE-2026-69671, CVE-2026-69686, CVE-2026-69722, CVE-2026-69734, CVE-2026-69719, CVE-2026-69764, CVE-2026-78511, CVE-2026-78502, CVE-2026-78504, CVE-2026-78517, CVE-2026-68843, CVE-2026-69360, CVE-2026-72972, CVE-2026-72976, CVE-2026-77901, CVE-2026-77911, CVE-2026-78507, CVE-2026-78506, CVE-2026-78514, CVE-2026-78503, CVE-2026-78521, CVE-2026-78522, CVE-2026-78526, CVE-2026-80080, CVE-2026-83951, CVE-2026-83949.

CVE-2026-69764

A heap-based buffer overflow vulnerability in Microsoft Office Word enables a remote, unauthorized attacker to achieve remote code execution (RCE) by tricking a user into opening a malicious document.

Affected products:

Office Word

Source: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-69764

Related in this roundup: CVE-2026-69556, CVE-2026-69671, CVE-2026-69686, CVE-2026-69722, CVE-2026-69734, CVE-2026-69719, CVE-2026-69759, CVE-2026-78511, CVE-2026-78502, CVE-2026-78504, CVE-2026-78517, CVE-2026-68843, CVE-2026-69360, CVE-2026-72972, CVE-2026-72976, CVE-2026-77901, CVE-2026-77911, CVE-2026-78507, CVE-2026-78506, CVE-2026-78514, CVE-2026-78503, CVE-2026-78521, CVE-2026-78522, CVE-2026-78526, CVE-2026-80080, CVE-2026-83951, CVE-2026-83949.

CVE-2026-69778

CVE-2026-69778 is a heap-based buffer overflow vulnerability in Microsoft Office Access that permits an unauthorized remote attacker to achieve remote code execution via network-based exploitation.

Affected products:

Office Access

Source: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-69778

Related in this roundup: CVE-2026-69529, CVE-2026-69614, CVE-2026-69477.

CVE-2026-69767

CVE-2026-69767 is a use-after-free vulnerability in Microsoft Office PowerPoint that can be exploited by an unauthorized attacker to achieve remote code execution over a network. Detection engineers should monitor for abnormal process behavior initiated by PowerPoint and unexpected memory access patterns indicative of use-after-free exploitation.

Affected products:

PowerPoint

Source: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-69767

Related in this roundup: CVE-2026-69797, CVE-2026-78513, CVE-2026-72975, CVE-2026-80086, CVE-2026-80081.

CVE-2026-69797

CVE-2026-69797 is a remote code execution vulnerability in Microsoft PowerPoint caused by a use-after-free flaw. An unauthenticated attacker can exploit this via network-based vectors to execute arbitrary code on the host system, typically by enticing a user to open a specially crafted malicious PowerPoint file.

Affected products:

PowerPoint

Source: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-69797

Related in this roundup: CVE-2026-69767, CVE-2026-78513, CVE-2026-72975, CVE-2026-80086, CVE-2026-80081.

CVE-2026-69804

CVE-2026-69804 is a time-of-check time-of-use (TOCTOU) race condition vulnerability in Microsoft SharePoint that enables an authenticated attacker to achieve remote code execution over a network.

Affected products:

SharePoint

Source: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-69804

Related in this roundup: CVE-2026-69268, CVE-2026-69273, CVE-2026-69282, CVE-2026-69716, CVE-2026-69724, CVE-2026-69690, CVE-2026-69683, CVE-2026-69402, CVE-2026-69409, CVE-2026-69417, CVE-2026-69464, CVE-2026-69636, CVE-2026-69904.

CVE-2026-69846

An integer overflow or wraparound vulnerability exists in Windows Secure Kernel Mode that allows an authorized local attacker to perform an elevation of privilege attack.

Affected products:

Windows

Source: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-69846

Related in this roundup: CVE-2026-81963, CVE-2026-85880, CVE-2026-69496, CVE-2026-69586, CVE-2026-69768, CVE-2026-73025, CVE-2026-56172, CVE-2026-68832, CVE-2026-68834, CVE-2026-68838, CVE-2026-68841, CVE-2026-68875, CVE-2026-68877, CVE-2026-68880, CVE-2026-69265, CVE-2026-69270, CVE-2026-69274, CVE-2026-69275, CVE-2026-69280, CVE-2026-69283, CVE-2026-69284, CVE-2026-69289, CVE-2026-69296, CVE-2026-69300, CVE-2026-69301, CVE-2026-69307, CVE-2026-69312, CVE-2026-69314, CVE-2026-69332, CVE-2026-69333, CVE-2026-69335, CVE-2026-68833, CVE-2026-68851, CVE-2026-69366, CVE-2026-69337, CVE-2026-69347, CVE-2026-69379, CVE-2026-69390, CVE-2026-69401, CVE-2026-69413, CVE-2026-69420, CVE-2026-69429, CVE-2026-69448, CVE-2026-69455, CVE-2026-69532, CVE-2026-69472, CVE-2026-69479, CVE-2026-69531, CVE-2026-69517, CVE-2026-69505, CVE-2026-69504, CVE-2026-69527, CVE-2026-69549, CVE-2026-69588, CVE-2026-69609, CVE-2026-69648, CVE-2026-69689, CVE-2026-69790, CVE-2026-69638, CVE-2026-69859, CVE-2026-69717, CVE-2026-69711, CVE-2026-69875, CVE-2026-69889, CVE-2026-69757, CVE-2026-69741, CVE-2026-69762, CVE-2026-69744, CVE-2026-69832, CVE-2026-69691, CVE-2026-69808, CVE-2026-69775, CVE-2026-69822, CVE-2026-69770, CVE-2026-69676, CVE-2026-70289, CVE-2026-70563, CVE-2026-71329, CVE-2026-71332, CVE-2026-71350, CVE-2026-71348, CVE-2026-71345, CVE-2026-69469, CVE-2026-69501, CVE-2026-69548, CVE-2026-70283, CVE-2026-72981, CVE-2026-77491, CVE-2026-77492, CVE-2026-77503, CVE-2026-80093, CVE-2026-72949, CVE-2026-70019, CVE-2026-72940, CVE-2026-69573, CVE-2026-70290, CVE-2026-83991, CVE-2026-83999, CVE-2026-69321, CVE-2026-69316, CVE-2026-69340, CVE-2026-69348, CVE-2026-69350, CVE-2026-69353, CVE-2026-69357, CVE-2026-69393, CVE-2026-69410, CVE-2026-69421, CVE-2026-69428, CVE-2026-69425, CVE-2026-69427, CVE-2026-69434, CVE-2026-69456, CVE-2026-69459, CVE-2026-69478, CVE-2026-69561, CVE-2026-69512, CVE-2026-69498, CVE-2026-69571, CVE-2026-69535, CVE-2026-69538, CVE-2026-69591, CVE-2026-69566, CVE-2026-69567, CVE-2026-69584, CVE-2026-69617, CVE-2026-69630, CVE-2026-69610, CVE-2026-69881, CVE-2026-69680, CVE-2026-69619, CVE-2026-69685, CVE-2026-69643, CVE-2026-69687, CVE-2026-69791, CVE-2026-69707, CVE-2026-69652, CVE-2026-69834, CVE-2026-69709, CVE-2026-69844, CVE-2026-69814, CVE-2026-69731, CVE-2026-69706, CVE-2026-69779, CVE-2026-69895, CVE-2026-69792, CVE-2026-69853, CVE-2026-69761, CVE-2026-69785, CVE-2026-69818, CVE-2026-69786, CVE-2026-69874, CVE-2026-70565, CVE-2026-70574, CVE-2026-70569, CVE-2026-70575, CVE-2026-71349, CVE-2026-72927, CVE-2026-72952, CVE-2026-72942, CVE-2026-72966, CVE-2026-72967, CVE-2026-69426, CVE-2026-69564, CVE-2026-72985, CVE-2026-73019, CVE-2026-78451, CVE-2026-78452, CVE-2026-83940, CVE-2026-69598, CVE-2026-83995, CVE-2026-83501, CVE-2026-83498.

CVE-2026-69929

CVE-2026-69929 is an out-of-bounds read vulnerability in the Windows DHCP Server component. This flaw permits an unauthorized, remote attacker to perform an information disclosure attack by exploiting the server's handling of network requests.

Affected products:

Windows DHCP Server

Source: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-69929

Related in this roundup: CVE-2026-69845, CVE-2026-72979, CVE-2026-69266, CVE-2026-69412, CVE-2026-69415, CVE-2026-69930, CVE-2026-70124, CVE-2026-77494, CVE-2026-77498, CVE-2026-77499, CVE-2026-77501, CVE-2026-77502, CVE-2026-77887, CVE-2026-77888, CVE-2026-77886, CVE-2026-77890, CVE-2026-77889, CVE-2026-77891, CVE-2026-77893, CVE-2026-77895, CVE-2026-70065, CVE-2026-69297, CVE-2026-69342, CVE-2026-69405, CVE-2026-69416, CVE-2026-69497, CVE-2026-69547, CVE-2026-69620, CVE-2026-69637, CVE-2026-69803, CVE-2026-69679, CVE-2026-69878, CVE-2026-69847, CVE-2026-69876, CVE-2026-69510.

CVE-2026-69930

CVE-2026-69930 is an out-of-bounds read vulnerability in the Windows DHCP Server service. An unauthenticated attacker can exploit this flaw by sending specifically crafted network requests to a vulnerable DHCP server, potentially leading to the disclosure of sensitive information residing in memory.

Affected products:

Windows DHCP Server

Source: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-69930

Related in this roundup: CVE-2026-69845, CVE-2026-72979, CVE-2026-69266, CVE-2026-69412, CVE-2026-69415, CVE-2026-69929, CVE-2026-70124, CVE-2026-77494, CVE-2026-77498, CVE-2026-77499, CVE-2026-77501, CVE-2026-77502, CVE-2026-77887, CVE-2026-77888, CVE-2026-77886, CVE-2026-77890, CVE-2026-77889, CVE-2026-77891, CVE-2026-77893, CVE-2026-77895, CVE-2026-70065, CVE-2026-69297, CVE-2026-69342, CVE-2026-69405, CVE-2026-69416, CVE-2026-69497, CVE-2026-69547, CVE-2026-69620, CVE-2026-69637, CVE-2026-69803, CVE-2026-69679, CVE-2026-69878, CVE-2026-69847, CVE-2026-69876, CVE-2026-69510.

CVE-2026-70124

CVE-2026-70124 is an out-of-bounds read vulnerability in the Windows DHCP Server component that allows an unauthorized network-based attacker to disclose sensitive information, potentially facilitating further exploitation.

Affected products:

Windows DHCP Server

Source: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-70124

Related in this roundup: CVE-2026-69845, CVE-2026-72979, CVE-2026-69266, CVE-2026-69412, CVE-2026-69415, CVE-2026-69929, CVE-2026-69930, CVE-2026-77494, CVE-2026-77498, CVE-2026-77499, CVE-2026-77501, CVE-2026-77502, CVE-2026-77887, CVE-2026-77888, CVE-2026-77886, CVE-2026-77890, CVE-2026-77889, CVE-2026-77891, CVE-2026-77893, CVE-2026-77895, CVE-2026-70065, CVE-2026-69297, CVE-2026-69342, CVE-2026-69405, CVE-2026-69416, CVE-2026-69497, CVE-2026-69547, CVE-2026-69620, CVE-2026-69637, CVE-2026-69803, CVE-2026-69679, CVE-2026-69878, CVE-2026-69847, CVE-2026-69876, CVE-2026-69510.

CVE-2026-70283

CVE-2026-70283 describes an elevation of privilege vulnerability residing in the Windows Win32k component. The issue stems from incorrect authorization, which may allow a locally authenticated attacker to gain higher levels of privilege on the affected system.

Affected products:

Windows

Source: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-70283

Related in this roundup: CVE-2026-81963, CVE-2026-85880, CVE-2026-69496, CVE-2026-69586, CVE-2026-69768, CVE-2026-73025, CVE-2026-56172, CVE-2026-68832, CVE-2026-68834, CVE-2026-68838, CVE-2026-68841, CVE-2026-68875, CVE-2026-68877, CVE-2026-68880, CVE-2026-69265, CVE-2026-69270, CVE-2026-69274, CVE-2026-69275, CVE-2026-69280, CVE-2026-69283, CVE-2026-69284, CVE-2026-69289, CVE-2026-69296, CVE-2026-69300, CVE-2026-69301, CVE-2026-69307, CVE-2026-69312, CVE-2026-69314, CVE-2026-69332, CVE-2026-69333, CVE-2026-69335, CVE-2026-68833, CVE-2026-68851, CVE-2026-69366, CVE-2026-69337, CVE-2026-69347, CVE-2026-69379, CVE-2026-69390, CVE-2026-69401, CVE-2026-69413, CVE-2026-69420, CVE-2026-69429, CVE-2026-69448, CVE-2026-69455, CVE-2026-69532, CVE-2026-69472, CVE-2026-69479, CVE-2026-69531, CVE-2026-69517, CVE-2026-69505, CVE-2026-69504, CVE-2026-69527, CVE-2026-69549, CVE-2026-69588, CVE-2026-69609, CVE-2026-69648, CVE-2026-69689, CVE-2026-69790, CVE-2026-69638, CVE-2026-69859, CVE-2026-69717, CVE-2026-69711, CVE-2026-69875, CVE-2026-69889, CVE-2026-69757, CVE-2026-69741, CVE-2026-69762, CVE-2026-69744, CVE-2026-69832, CVE-2026-69691, CVE-2026-69808, CVE-2026-69775, CVE-2026-69822, CVE-2026-69770, CVE-2026-69676, CVE-2026-70289, CVE-2026-70563, CVE-2026-71329, CVE-2026-71332, CVE-2026-71350, CVE-2026-71348, CVE-2026-71345, CVE-2026-69469, CVE-2026-69501, CVE-2026-69548, CVE-2026-69846, CVE-2026-72981, CVE-2026-77491, CVE-2026-77492, CVE-2026-77503, CVE-2026-80093, CVE-2026-72949, CVE-2026-70019, CVE-2026-72940, CVE-2026-69573, CVE-2026-70290, CVE-2026-83991, CVE-2026-83999, CVE-2026-69321, CVE-2026-69316, CVE-2026-69340, CVE-2026-69348, CVE-2026-69350, CVE-2026-69353, CVE-2026-69357, CVE-2026-69393, CVE-2026-69410, CVE-2026-69421, CVE-2026-69428, CVE-2026-69425, CVE-2026-69427, CVE-2026-69434, CVE-2026-69456, CVE-2026-69459, CVE-2026-69478, CVE-2026-69561, CVE-2026-69512, CVE-2026-69498, CVE-2026-69571, CVE-2026-69535, CVE-2026-69538, CVE-2026-69591, CVE-2026-69566, CVE-2026-69567, CVE-2026-69584, CVE-2026-69617, CVE-2026-69630, CVE-2026-69610, CVE-2026-69881, CVE-2026-69680, CVE-2026-69619, CVE-2026-69685, CVE-2026-69643, CVE-2026-69687, CVE-2026-69791, CVE-2026-69707, CVE-2026-69652, CVE-2026-69834, CVE-2026-69709, CVE-2026-69844, CVE-2026-69814, CVE-2026-69731, CVE-2026-69706, CVE-2026-69779, CVE-2026-69895, CVE-2026-69792, CVE-2026-69853, CVE-2026-69761, CVE-2026-69785, CVE-2026-69818, CVE-2026-69786, CVE-2026-69874, CVE-2026-70565, CVE-2026-70574, CVE-2026-70569, CVE-2026-70575, CVE-2026-71349, CVE-2026-72927, CVE-2026-72952, CVE-2026-72942, CVE-2026-72966, CVE-2026-72967, CVE-2026-69426, CVE-2026-69564, CVE-2026-72985, CVE-2026-73019, CVE-2026-78451, CVE-2026-78452, CVE-2026-83940, CVE-2026-69598, CVE-2026-83995, CVE-2026-83501, CVE-2026-83498.

CVE-2026-72978

A denial of service vulnerability exists in Microsoft Active Directory Federation Services due to improper resource allocation and a lack of request throttling. An unauthenticated remote attacker can exploit this flaw by sending specially crafted requests to the service, causing it to consume excessive resources and become unresponsive, thereby impacting the availability of authentication services.

Affected products:

Active Directory Federation Services

Source: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-72978

CVE-2026-77495

A heap-based buffer overflow vulnerability in the Windows Imaging Component allows an unauthorized remote attacker to execute arbitrary code. The vulnerability exists due to improper memory handling during image processing, enabling potential remote code execution over a network.

Affected products:

Windows Imaging Component

Source: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-77495

Related in this roundup: CVE-2026-70296, CVE-2026-69860, CVE-2026-69318, CVE-2026-69499, CVE-2026-73023, CVE-2026-73013, CVE-2026-83992.

CVE-2026-72980

CVE-2026-72980 describes an uncontrolled search path element vulnerability in Windows Hello that allows an authenticated local attacker to bypass security features. This flaw potentially enables unauthorized access to systems protected by Windows Hello biometric or PIN-based authentication.

Affected products:

Windows Hello

Source: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-72980

Related in this roundup: CVE-2026-69740, CVE-2026-69799, CVE-2026-69710, CVE-2026-69725, CVE-2026-69864, CVE-2026-69820, CVE-2026-69784, CVE-2026-81354.

CVE-2026-72981

CVE-2026-72981 is a remote code execution vulnerability residing in the IP Helper component of Windows, caused by a use-after-free memory management error. An unauthenticated attacker can exploit this flaw by sending specifically crafted network traffic to a vulnerable host to achieve arbitrary code execution.

Affected products:

Windows

Source: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-72981

Related in this roundup: CVE-2026-81963, CVE-2026-85880, CVE-2026-69496, CVE-2026-69586, CVE-2026-69768, CVE-2026-73025, CVE-2026-56172, CVE-2026-68832, CVE-2026-68834, CVE-2026-68838, CVE-2026-68841, CVE-2026-68875, CVE-2026-68877, CVE-2026-68880, CVE-2026-69265, CVE-2026-69270, CVE-2026-69274, CVE-2026-69275, CVE-2026-69280, CVE-2026-69283, CVE-2026-69284, CVE-2026-69289, CVE-2026-69296, CVE-2026-69300, CVE-2026-69301, CVE-2026-69307, CVE-2026-69312, CVE-2026-69314, CVE-2026-69332, CVE-2026-69333, CVE-2026-69335, CVE-2026-68833, CVE-2026-68851, CVE-2026-69366, CVE-2026-69337, CVE-2026-69347, CVE-2026-69379, CVE-2026-69390, CVE-2026-69401, CVE-2026-69413, CVE-2026-69420, CVE-2026-69429, CVE-2026-69448, CVE-2026-69455, CVE-2026-69532, CVE-2026-69472, CVE-2026-69479, CVE-2026-69531, CVE-2026-69517, CVE-2026-69505, CVE-2026-69504, CVE-2026-69527, CVE-2026-69549, CVE-2026-69588, CVE-2026-69609, CVE-2026-69648, CVE-2026-69689, CVE-2026-69790, CVE-2026-69638, CVE-2026-69859, CVE-2026-69717, CVE-2026-69711, CVE-2026-69875, CVE-2026-69889, CVE-2026-69757, CVE-2026-69741, CVE-2026-69762, CVE-2026-69744, CVE-2026-69832, CVE-2026-69691, CVE-2026-69808, CVE-2026-69775, CVE-2026-69822, CVE-2026-69770, CVE-2026-69676, CVE-2026-70289, CVE-2026-70563, CVE-2026-71329, CVE-2026-71332, CVE-2026-71350, CVE-2026-71348, CVE-2026-71345, CVE-2026-69469, CVE-2026-69501, CVE-2026-69548, CVE-2026-69846, CVE-2026-70283, CVE-2026-77491, CVE-2026-77492, CVE-2026-77503, CVE-2026-80093, CVE-2026-72949, CVE-2026-70019, CVE-2026-72940, CVE-2026-69573, CVE-2026-70290, CVE-2026-83991, CVE-2026-83999, CVE-2026-69321, CVE-2026-69316, CVE-2026-69340, CVE-2026-69348, CVE-2026-69350, CVE-2026-69353, CVE-2026-69357, CVE-2026-69393, CVE-2026-69410, CVE-2026-69421, CVE-2026-69428, CVE-2026-69425, CVE-2026-69427, CVE-2026-69434, CVE-2026-69456, CVE-2026-69459, CVE-2026-69478, CVE-2026-69561, CVE-2026-69512, CVE-2026-69498, CVE-2026-69571, CVE-2026-69535, CVE-2026-69538, CVE-2026-69591, CVE-2026-69566, CVE-2026-69567, CVE-2026-69584, CVE-2026-69617, CVE-2026-69630, CVE-2026-69610, CVE-2026-69881, CVE-2026-69680, CVE-2026-69619, CVE-2026-69685, CVE-2026-69643, CVE-2026-69687, CVE-2026-69791, CVE-2026-69707, CVE-2026-69652, CVE-2026-69834, CVE-2026-69709, CVE-2026-69844, CVE-2026-69814, CVE-2026-69731, CVE-2026-69706, CVE-2026-69779, CVE-2026-69895, CVE-2026-69792, CVE-2026-69853, CVE-2026-69761, CVE-2026-69785, CVE-2026-69818, CVE-2026-69786, CVE-2026-69874, CVE-2026-70565, CVE-2026-70574, CVE-2026-70569, CVE-2026-70575, CVE-2026-71349, CVE-2026-72927, CVE-2026-72952, CVE-2026-72942, CVE-2026-72966, CVE-2026-72967, CVE-2026-69426, CVE-2026-69564, CVE-2026-72985, CVE-2026-73019, CVE-2026-78451, CVE-2026-78452, CVE-2026-83940, CVE-2026-69598, CVE-2026-83995, CVE-2026-83501, CVE-2026-83498.

CVE-2026-69476

A heap-based buffer overflow vulnerability exists in the Windows Biometric Service that allows an authorized local attacker to elevate their privileges on the affected system.

Affected products:

Windows Biometric Service

Source: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-69476

Related in this roundup: CVE-2026-69293, CVE-2026-69298, CVE-2026-69323, CVE-2026-69583, CVE-2026-69589, CVE-2026-69580, CVE-2026-69787, CVE-2026-77489, CVE-2026-83955, CVE-2026-83986, CVE-2026-83969, CVE-2026-83988, CVE-2026-83979, CVE-2026-83974, CVE-2026-83975, CVE-2026-83976, CVE-2026-69727, CVE-2026-69826, CVE-2026-69738, CVE-2026-69773, CVE-2026-70573, CVE-2026-70572, CVE-2026-70581, CVE-2026-72941, CVE-2026-69352, CVE-2026-69489, CVE-2026-69593, CVE-2026-72995, CVE-2026-72988, CVE-2026-72990, CVE-2026-72991, CVE-2026-72992, CVE-2026-72993, CVE-2026-72994, CVE-2026-72996, CVE-2026-72997, CVE-2026-73002, CVE-2026-73020, CVE-2026-73000, CVE-2026-73001, CVE-2026-73021, CVE-2026-73015, CVE-2026-73011, CVE-2026-73008, CVE-2026-73007, CVE-2026-73026, CVE-2026-78447, CVE-2026-78448, CVE-2026-83971, CVE-2026-83954, CVE-2026-83967, CVE-2026-83970, CVE-2026-83972, CVE-2026-83968, CVE-2026-83973, CVE-2026-83981, CVE-2026-83977, CVE-2026-83978, CVE-2026-83982, CVE-2026-83980, CVE-2026-83987, CVE-2026-83983, CVE-2026-83985.

CVE-2026-69787

CVE-2026-69787 is a heap-based buffer overflow vulnerability in the Windows Biometric Service that allows an authorized local attacker to achieve privilege escalation.

Affected products:

Windows Biometric Service

Source: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-69787

Related in this roundup: CVE-2026-69293, CVE-2026-69298, CVE-2026-69323, CVE-2026-69583, CVE-2026-69589, CVE-2026-69580, CVE-2026-69476, CVE-2026-77489, CVE-2026-83955, CVE-2026-83986, CVE-2026-83969, CVE-2026-83988, CVE-2026-83979, CVE-2026-83974, CVE-2026-83975, CVE-2026-83976, CVE-2026-69727, CVE-2026-69826, CVE-2026-69738, CVE-2026-69773, CVE-2026-70573, CVE-2026-70572, CVE-2026-70581, CVE-2026-72941, CVE-2026-69352, CVE-2026-69489, CVE-2026-69593, CVE-2026-72995, CVE-2026-72988, CVE-2026-72990, CVE-2026-72991, CVE-2026-72992, CVE-2026-72993, CVE-2026-72994, CVE-2026-72996, CVE-2026-72997, CVE-2026-73002, CVE-2026-73020, CVE-2026-73000, CVE-2026-73001, CVE-2026-73021, CVE-2026-73015, CVE-2026-73011, CVE-2026-73008, CVE-2026-73007, CVE-2026-73026, CVE-2026-78447, CVE-2026-78448, CVE-2026-83971, CVE-2026-83954, CVE-2026-83967, CVE-2026-83970, CVE-2026-83972, CVE-2026-83968, CVE-2026-83973, CVE-2026-83981, CVE-2026-83977, CVE-2026-83978, CVE-2026-83982, CVE-2026-83980, CVE-2026-83987, CVE-2026-83983, CVE-2026-83985.

CVE-2026-77489

A null pointer dereference vulnerability in the Windows Biometric Service enables a locally authenticated attacker to elevate their privileges on the host system.

Affected products:

Windows Biometric Service

Source: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-77489

Related in this roundup: CVE-2026-69293, CVE-2026-69298, CVE-2026-69323, CVE-2026-69583, CVE-2026-69589, CVE-2026-69580, CVE-2026-69476, CVE-2026-69787, CVE-2026-83955, CVE-2026-83986, CVE-2026-83969, CVE-2026-83988, CVE-2026-83979, CVE-2026-83974, CVE-2026-83975, CVE-2026-83976, CVE-2026-69727, CVE-2026-69826, CVE-2026-69738, CVE-2026-69773, CVE-2026-70573, CVE-2026-70572, CVE-2026-70581, CVE-2026-72941, CVE-2026-69352, CVE-2026-69489, CVE-2026-69593, CVE-2026-72995, CVE-2026-72988, CVE-2026-72990, CVE-2026-72991, CVE-2026-72992, CVE-2026-72993, CVE-2026-72994, CVE-2026-72996, CVE-2026-72997, CVE-2026-73002, CVE-2026-73020, CVE-2026-73000, CVE-2026-73001, CVE-2026-73021, CVE-2026-73015, CVE-2026-73011, CVE-2026-73008, CVE-2026-73007, CVE-2026-73026, CVE-2026-78447, CVE-2026-78448, CVE-2026-83971, CVE-2026-83954, CVE-2026-83967, CVE-2026-83970, CVE-2026-83972, CVE-2026-83968, CVE-2026-83973, CVE-2026-83981, CVE-2026-83977, CVE-2026-83978, CVE-2026-83982, CVE-2026-83980, CVE-2026-83987, CVE-2026-83983, CVE-2026-83985.

CVE-2026-77491

CVE-2026-77491 describes an out-of-bounds read vulnerability within the Windows Graphics Device Interface (GDI) component. Successful exploitation allows a local, unauthorized attacker to access sensitive information from memory.

Affected products:

Windows

Source: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-77491

Related in this roundup: CVE-2026-81963, CVE-2026-85880, CVE-2026-69496, CVE-2026-69586, CVE-2026-69768, CVE-2026-73025, CVE-2026-56172, CVE-2026-68832, CVE-2026-68834, CVE-2026-68838, CVE-2026-68841, CVE-2026-68875, CVE-2026-68877, CVE-2026-68880, CVE-2026-69265, CVE-2026-69270, CVE-2026-69274, CVE-2026-69275, CVE-2026-69280, CVE-2026-69283, CVE-2026-69284, CVE-2026-69289, CVE-2026-69296, CVE-2026-69300, CVE-2026-69301, CVE-2026-69307, CVE-2026-69312, CVE-2026-69314, CVE-2026-69332, CVE-2026-69333, CVE-2026-69335, CVE-2026-68833, CVE-2026-68851, CVE-2026-69366, CVE-2026-69337, CVE-2026-69347, CVE-2026-69379, CVE-2026-69390, CVE-2026-69401, CVE-2026-69413, CVE-2026-69420, CVE-2026-69429, CVE-2026-69448, CVE-2026-69455, CVE-2026-69532, CVE-2026-69472, CVE-2026-69479, CVE-2026-69531, CVE-2026-69517, CVE-2026-69505, CVE-2026-69504, CVE-2026-69527, CVE-2026-69549, CVE-2026-69588, CVE-2026-69609, CVE-2026-69648, CVE-2026-69689, CVE-2026-69790, CVE-2026-69638, CVE-2026-69859, CVE-2026-69717, CVE-2026-69711, CVE-2026-69875, CVE-2026-69889, CVE-2026-69757, CVE-2026-69741, CVE-2026-69762, CVE-2026-69744, CVE-2026-69832, CVE-2026-69691, CVE-2026-69808, CVE-2026-69775, CVE-2026-69822, CVE-2026-69770, CVE-2026-69676, CVE-2026-70289, CVE-2026-70563, CVE-2026-71329, CVE-2026-71332, CVE-2026-71350, CVE-2026-71348, CVE-2026-71345, CVE-2026-69469, CVE-2026-69501, CVE-2026-69548, CVE-2026-69846, CVE-2026-70283, CVE-2026-72981, CVE-2026-77492, CVE-2026-77503, CVE-2026-80093, CVE-2026-72949, CVE-2026-70019, CVE-2026-72940, CVE-2026-69573, CVE-2026-70290, CVE-2026-83991, CVE-2026-83999, CVE-2026-69321, CVE-2026-69316, CVE-2026-69340, CVE-2026-69348, CVE-2026-69350, CVE-2026-69353, CVE-2026-69357, CVE-2026-69393, CVE-2026-69410, CVE-2026-69421, CVE-2026-69428, CVE-2026-69425, CVE-2026-69427, CVE-2026-69434, CVE-2026-69456, CVE-2026-69459, CVE-2026-69478, CVE-2026-69561, CVE-2026-69512, CVE-2026-69498, CVE-2026-69571, CVE-2026-69535, CVE-2026-69538, CVE-2026-69591, CVE-2026-69566, CVE-2026-69567, CVE-2026-69584, CVE-2026-69617, CVE-2026-69630, CVE-2026-69610, CVE-2026-69881, CVE-2026-69680, CVE-2026-69619, CVE-2026-69685, CVE-2026-69643, CVE-2026-69687, CVE-2026-69791, CVE-2026-69707, CVE-2026-69652, CVE-2026-69834, CVE-2026-69709, CVE-2026-69844, CVE-2026-69814, CVE-2026-69731, CVE-2026-69706, CVE-2026-69779, CVE-2026-69895, CVE-2026-69792, CVE-2026-69853, CVE-2026-69761, CVE-2026-69785, CVE-2026-69818, CVE-2026-69786, CVE-2026-69874, CVE-2026-70565, CVE-2026-70574, CVE-2026-70569, CVE-2026-70575, CVE-2026-71349, CVE-2026-72927, CVE-2026-72952, CVE-2026-72942, CVE-2026-72966, CVE-2026-72967, CVE-2026-69426, CVE-2026-69564, CVE-2026-72985, CVE-2026-73019, CVE-2026-78451, CVE-2026-78452, CVE-2026-83940, CVE-2026-69598, CVE-2026-83995, CVE-2026-83501, CVE-2026-83498.

CVE-2026-77492

CVE-2026-77492 describes an out-of-bounds read vulnerability in the Windows Storage Port Driver. An authenticated attacker can exploit this flaw to perform unauthorized information disclosure on a local system.

Affected products:

Windows

Source: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-77492

Related in this roundup: CVE-2026-81963, CVE-2026-85880, CVE-2026-69496, CVE-2026-69586, CVE-2026-69768, CVE-2026-73025, CVE-2026-56172, CVE-2026-68832, CVE-2026-68834, CVE-2026-68838, CVE-2026-68841, CVE-2026-68875, CVE-2026-68877, CVE-2026-68880, CVE-2026-69265, CVE-2026-69270, CVE-2026-69274, CVE-2026-69275, CVE-2026-69280, CVE-2026-69283, CVE-2026-69284, CVE-2026-69289, CVE-2026-69296, CVE-2026-69300, CVE-2026-69301, CVE-2026-69307, CVE-2026-69312, CVE-2026-69314, CVE-2026-69332, CVE-2026-69333, CVE-2026-69335, CVE-2026-68833, CVE-2026-68851, CVE-2026-69366, CVE-2026-69337, CVE-2026-69347, CVE-2026-69379, CVE-2026-69390, CVE-2026-69401, CVE-2026-69413, CVE-2026-69420, CVE-2026-69429, CVE-2026-69448, CVE-2026-69455, CVE-2026-69532, CVE-2026-69472, CVE-2026-69479, CVE-2026-69531, CVE-2026-69517, CVE-2026-69505, CVE-2026-69504, CVE-2026-69527, CVE-2026-69549, CVE-2026-69588, CVE-2026-69609, CVE-2026-69648, CVE-2026-69689, CVE-2026-69790, CVE-2026-69638, CVE-2026-69859, CVE-2026-69717, CVE-2026-69711, CVE-2026-69875, CVE-2026-69889, CVE-2026-69757, CVE-2026-69741, CVE-2026-69762, CVE-2026-69744, CVE-2026-69832, CVE-2026-69691, CVE-2026-69808, CVE-2026-69775, CVE-2026-69822, CVE-2026-69770, CVE-2026-69676, CVE-2026-70289, CVE-2026-70563, CVE-2026-71329, CVE-2026-71332, CVE-2026-71350, CVE-2026-71348, CVE-2026-71345, CVE-2026-69469, CVE-2026-69501, CVE-2026-69548, CVE-2026-69846, CVE-2026-70283, CVE-2026-72981, CVE-2026-77491, CVE-2026-77503, CVE-2026-80093, CVE-2026-72949, CVE-2026-70019, CVE-2026-72940, CVE-2026-69573, CVE-2026-70290, CVE-2026-83991, CVE-2026-83999, CVE-2026-69321, CVE-2026-69316, CVE-2026-69340, CVE-2026-69348, CVE-2026-69350, CVE-2026-69353, CVE-2026-69357, CVE-2026-69393, CVE-2026-69410, CVE-2026-69421, CVE-2026-69428, CVE-2026-69425, CVE-2026-69427, CVE-2026-69434, CVE-2026-69456, CVE-2026-69459, CVE-2026-69478, CVE-2026-69561, CVE-2026-69512, CVE-2026-69498, CVE-2026-69571, CVE-2026-69535, CVE-2026-69538, CVE-2026-69591, CVE-2026-69566, CVE-2026-69567, CVE-2026-69584, CVE-2026-69617, CVE-2026-69630, CVE-2026-69610, CVE-2026-69881, CVE-2026-69680, CVE-2026-69619, CVE-2026-69685, CVE-2026-69643, CVE-2026-69687, CVE-2026-69791, CVE-2026-69707, CVE-2026-69652, CVE-2026-69834, CVE-2026-69709, CVE-2026-69844, CVE-2026-69814, CVE-2026-69731, CVE-2026-69706, CVE-2026-69779, CVE-2026-69895, CVE-2026-69792, CVE-2026-69853, CVE-2026-69761, CVE-2026-69785, CVE-2026-69818, CVE-2026-69786, CVE-2026-69874, CVE-2026-70565, CVE-2026-70574, CVE-2026-70569, CVE-2026-70575, CVE-2026-71349, CVE-2026-72927, CVE-2026-72952, CVE-2026-72942, CVE-2026-72966, CVE-2026-72967, CVE-2026-69426, CVE-2026-69564, CVE-2026-72985, CVE-2026-73019, CVE-2026-78451, CVE-2026-78452, CVE-2026-83940, CVE-2026-69598, CVE-2026-83995, CVE-2026-83501, CVE-2026-83498.

CVE-2026-77494

A type confusion vulnerability in the Windows DHCP Server component allows a remote, unauthorized attacker to trigger a denial of service condition over the network by sending specially crafted requests.

Affected products:

Windows DHCP Server

Source: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-77494

Related in this roundup: CVE-2026-69845, CVE-2026-72979, CVE-2026-69266, CVE-2026-69412, CVE-2026-69415, CVE-2026-69929, CVE-2026-69930, CVE-2026-70124, CVE-2026-77498, CVE-2026-77499, CVE-2026-77501, CVE-2026-77502, CVE-2026-77887, CVE-2026-77888, CVE-2026-77886, CVE-2026-77890, CVE-2026-77889, CVE-2026-77891, CVE-2026-77893, CVE-2026-77895, CVE-2026-70065, CVE-2026-69297, CVE-2026-69342, CVE-2026-69405, CVE-2026-69416, CVE-2026-69497, CVE-2026-69547, CVE-2026-69620, CVE-2026-69637, CVE-2026-69803, CVE-2026-69679, CVE-2026-69878, CVE-2026-69847, CVE-2026-69876, CVE-2026-69510.

CVE-2026-77498

An out-of-bounds read vulnerability exists in the Windows DHCP Server service, allowing a remote, unauthorized attacker to trigger a denial of service condition on affected systems via specifically crafted network packets.

Affected products:

Windows DHCP Server

Source: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-77498

Related in this roundup: CVE-2026-69845, CVE-2026-72979, CVE-2026-69266, CVE-2026-69412, CVE-2026-69415, CVE-2026-69929, CVE-2026-69930, CVE-2026-70124, CVE-2026-77494, CVE-2026-77499, CVE-2026-77501, CVE-2026-77502, CVE-2026-77887, CVE-2026-77888, CVE-2026-77886, CVE-2026-77890, CVE-2026-77889, CVE-2026-77891, CVE-2026-77893, CVE-2026-77895, CVE-2026-70065, CVE-2026-69297, CVE-2026-69342, CVE-2026-69405, CVE-2026-69416, CVE-2026-69497, CVE-2026-69547, CVE-2026-69620, CVE-2026-69637, CVE-2026-69803, CVE-2026-69679, CVE-2026-69878, CVE-2026-69847, CVE-2026-69876, CVE-2026-69510.

CVE-2026-77500

A vulnerability in the Windows Device Association Service, specifically a release of an invalid pointer or reference, allows an authenticated local attacker to escalate their privileges. This vulnerability is classified as a use-after-free or memory management flaw leading to privilege escalation.

Affected products:

Windows Device Association Service

Source: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-77500

Related in this roundup: CVE-2026-69574, CVE-2026-69488, CVE-2026-69581, CVE-2026-69714, CVE-2026-69866.

CVE-2026-77499

CVE-2026-77499 is a type confusion vulnerability in the Windows DHCP Server component that allows an unauthenticated, remote attacker to trigger a denial-of-service (DoS) condition. The vulnerability arises due to improper handling of resource types within the DHCP service, which can be exploited over the network to disrupt service availability.

Affected products:

Windows DHCP Server

Source: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-77499

Related in this roundup: CVE-2026-69845, CVE-2026-72979, CVE-2026-69266, CVE-2026-69412, CVE-2026-69415, CVE-2026-69929, CVE-2026-69930, CVE-2026-70124, CVE-2026-77494, CVE-2026-77498, CVE-2026-77501, CVE-2026-77502, CVE-2026-77887, CVE-2026-77888, CVE-2026-77886, CVE-2026-77890, CVE-2026-77889, CVE-2026-77891, CVE-2026-77893, CVE-2026-77895, CVE-2026-70065, CVE-2026-69297, CVE-2026-69342, CVE-2026-69405, CVE-2026-69416, CVE-2026-69497, CVE-2026-69547, CVE-2026-69620, CVE-2026-69637, CVE-2026-69803, CVE-2026-69679, CVE-2026-69878, CVE-2026-69847, CVE-2026-69876, CVE-2026-69510.

CVE-2026-77501

A vulnerability in the Windows DHCP Server allows an unauthenticated remote attacker to cause a denial of service condition through a crafted request that triggers an out-of-bounds read error.

Affected products:

Windows DHCP Server

Source: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-77501

Related in this roundup: CVE-2026-69845, CVE-2026-72979, CVE-2026-69266, CVE-2026-69412, CVE-2026-69415, CVE-2026-69929, CVE-2026-69930, CVE-2026-70124, CVE-2026-77494, CVE-2026-77498, CVE-2026-77499, CVE-2026-77502, CVE-2026-77887, CVE-2026-77888, CVE-2026-77886, CVE-2026-77890, CVE-2026-77889, CVE-2026-77891, CVE-2026-77893, CVE-2026-77895, CVE-2026-70065, CVE-2026-69297, CVE-2026-69342, CVE-2026-69405, CVE-2026-69416, CVE-2026-69497, CVE-2026-69547, CVE-2026-69620, CVE-2026-69637, CVE-2026-69803, CVE-2026-69679, CVE-2026-69878, CVE-2026-69847, CVE-2026-69876, CVE-2026-69510.

CVE-2026-77502

A vulnerability exists in the Windows DHCP Server component where an out-of-bounds read allows an unauthorized attacker to trigger a denial-of-service condition via a specially crafted network request.

Affected products:

Windows DHCP Server

Source: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-77502

Related in this roundup: CVE-2026-69845, CVE-2026-72979, CVE-2026-69266, CVE-2026-69412, CVE-2026-69415, CVE-2026-69929, CVE-2026-69930, CVE-2026-70124, CVE-2026-77494, CVE-2026-77498, CVE-2026-77499, CVE-2026-77501, CVE-2026-77887, CVE-2026-77888, CVE-2026-77886, CVE-2026-77890, CVE-2026-77889, CVE-2026-77891, CVE-2026-77893, CVE-2026-77895, CVE-2026-70065, CVE-2026-69297, CVE-2026-69342, CVE-2026-69405, CVE-2026-69416, CVE-2026-69497, CVE-2026-69547, CVE-2026-69620, CVE-2026-69637, CVE-2026-69803, CVE-2026-69679, CVE-2026-69878, CVE-2026-69847, CVE-2026-69876, CVE-2026-69510.

CVE-2026-77503

CVE-2026-77503 is a local privilege escalation vulnerability in the Windows NTFS file system caused by an out-of-bounds read, which could allow a local attacker to elevate their privileges.

Affected products:

Windows

Source: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-77503

Related in this roundup: CVE-2026-81963, CVE-2026-85880, CVE-2026-69496, CVE-2026-69586, CVE-2026-69768, CVE-2026-73025, CVE-2026-56172, CVE-2026-68832, CVE-2026-68834, CVE-2026-68838, CVE-2026-68841, CVE-2026-68875, CVE-2026-68877, CVE-2026-68880, CVE-2026-69265, CVE-2026-69270, CVE-2026-69274, CVE-2026-69275, CVE-2026-69280, CVE-2026-69283, CVE-2026-69284, CVE-2026-69289, CVE-2026-69296, CVE-2026-69300, CVE-2026-69301, CVE-2026-69307, CVE-2026-69312, CVE-2026-69314, CVE-2026-69332, CVE-2026-69333, CVE-2026-69335, CVE-2026-68833, CVE-2026-68851, CVE-2026-69366, CVE-2026-69337, CVE-2026-69347, CVE-2026-69379, CVE-2026-69390, CVE-2026-69401, CVE-2026-69413, CVE-2026-69420, CVE-2026-69429, CVE-2026-69448, CVE-2026-69455, CVE-2026-69532, CVE-2026-69472, CVE-2026-69479, CVE-2026-69531, CVE-2026-69517, CVE-2026-69505, CVE-2026-69504, CVE-2026-69527, CVE-2026-69549, CVE-2026-69588, CVE-2026-69609, CVE-2026-69648, CVE-2026-69689, CVE-2026-69790, CVE-2026-69638, CVE-2026-69859, CVE-2026-69717, CVE-2026-69711, CVE-2026-69875, CVE-2026-69889, CVE-2026-69757, CVE-2026-69741, CVE-2026-69762, CVE-2026-69744, CVE-2026-69832, CVE-2026-69691, CVE-2026-69808, CVE-2026-69775, CVE-2026-69822, CVE-2026-69770, CVE-2026-69676, CVE-2026-70289, CVE-2026-70563, CVE-2026-71329, CVE-2026-71332, CVE-2026-71350, CVE-2026-71348, CVE-2026-71345, CVE-2026-69469, CVE-2026-69501, CVE-2026-69548, CVE-2026-69846, CVE-2026-70283, CVE-2026-72981, CVE-2026-77491, CVE-2026-77492, CVE-2026-80093, CVE-2026-72949, CVE-2026-70019, CVE-2026-72940, CVE-2026-69573, CVE-2026-70290, CVE-2026-83991, CVE-2026-83999, CVE-2026-69321, CVE-2026-69316, CVE-2026-69340, CVE-2026-69348, CVE-2026-69350, CVE-2026-69353, CVE-2026-69357, CVE-2026-69393, CVE-2026-69410, CVE-2026-69421, CVE-2026-69428, CVE-2026-69425, CVE-2026-69427, CVE-2026-69434, CVE-2026-69456, CVE-2026-69459, CVE-2026-69478, CVE-2026-69561, CVE-2026-69512, CVE-2026-69498, CVE-2026-69571, CVE-2026-69535, CVE-2026-69538, CVE-2026-69591, CVE-2026-69566, CVE-2026-69567, CVE-2026-69584, CVE-2026-69617, CVE-2026-69630, CVE-2026-69610, CVE-2026-69881, CVE-2026-69680, CVE-2026-69619, CVE-2026-69685, CVE-2026-69643, CVE-2026-69687, CVE-2026-69791, CVE-2026-69707, CVE-2026-69652, CVE-2026-69834, CVE-2026-69709, CVE-2026-69844, CVE-2026-69814, CVE-2026-69731, CVE-2026-69706, CVE-2026-69779, CVE-2026-69895, CVE-2026-69792, CVE-2026-69853, CVE-2026-69761, CVE-2026-69785, CVE-2026-69818, CVE-2026-69786, CVE-2026-69874, CVE-2026-70565, CVE-2026-70574, CVE-2026-70569, CVE-2026-70575, CVE-2026-71349, CVE-2026-72927, CVE-2026-72952, CVE-2026-72942, CVE-2026-72966, CVE-2026-72967, CVE-2026-69426, CVE-2026-69564, CVE-2026-72985, CVE-2026-73019, CVE-2026-78451, CVE-2026-78452, CVE-2026-83940, CVE-2026-69598, CVE-2026-83995, CVE-2026-83501, CVE-2026-83498.

CVE-2026-77887

CVE-2026-77887 is a vulnerability in the Windows DHCP Server component, where an out-of-bounds read allows an authorized attacker to achieve remote code execution. Detection efforts should focus on monitoring anomalous DHCP service traffic and unexpected process spawns originating from the DHCP server service.

Affected products:

Windows DHCP Server

Source: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-77887

Related in this roundup: CVE-2026-69845, CVE-2026-72979, CVE-2026-69266, CVE-2026-69412, CVE-2026-69415, CVE-2026-69929, CVE-2026-69930, CVE-2026-70124, CVE-2026-77494, CVE-2026-77498, CVE-2026-77499, CVE-2026-77501, CVE-2026-77502, CVE-2026-77888, CVE-2026-77886, CVE-2026-77890, CVE-2026-77889, CVE-2026-77891, CVE-2026-77893, CVE-2026-77895, CVE-2026-70065, CVE-2026-69297, CVE-2026-69342, CVE-2026-69405, CVE-2026-69416, CVE-2026-69497, CVE-2026-69547, CVE-2026-69620, CVE-2026-69637, CVE-2026-69803, CVE-2026-69679, CVE-2026-69878, CVE-2026-69847, CVE-2026-69876, CVE-2026-69510.

CVE-2026-77504

CVE-2026-77504 is a remote code execution vulnerability in Microsoft Office Word caused by a double-free memory management error, allowing an attacker to execute arbitrary code via network-based exploitation.

Affected products:

Office

Source: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-77504

Related in this roundup: CVE-2026-69285, CVE-2026-69739, CVE-2026-77898, CVE-2026-78439, CVE-2026-78505, CVE-2026-64918, CVE-2026-69442, CVE-2026-69626, CVE-2026-69632, CVE-2026-72938, CVE-2026-72973, CVE-2026-78512, CVE-2026-80079, CVE-2026-78524, CVE-2026-80078, CVE-2026-80076, CVE-2026-80087, CVE-2026-80085, CVE-2026-80088, CVE-2026-80091, CVE-2026-80089, CVE-2026-80090, CVE-2026-80082.

CVE-2026-77505

CVE-2026-77505 is a use-after-free vulnerability in the Microsoft Windows DNS Server that allows a remote, unauthorized attacker to achieve remote code execution (RCE) by sending malicious network packets to the service.

Affected products:

Windows DNS Server

Source: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-77505

Related in this roundup: CVE-2026-69551, CVE-2026-78523, CVE-2026-69989, CVE-2026-69827, CVE-2026-69813, CVE-2026-69858, CVE-2026-72928.

CVE-2026-77888

CVE-2026-77888 describes a type confusion vulnerability in the Windows DHCP Server that can be exploited by an unauthorized remote attacker to trigger a denial-of-service condition via a specially crafted network request.

Affected products:

Windows DHCP Server

Source: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-77888

Related in this roundup: CVE-2026-69845, CVE-2026-72979, CVE-2026-69266, CVE-2026-69412, CVE-2026-69415, CVE-2026-69929, CVE-2026-69930, CVE-2026-70124, CVE-2026-77494, CVE-2026-77498, CVE-2026-77499, CVE-2026-77501, CVE-2026-77502, CVE-2026-77887, CVE-2026-77886, CVE-2026-77890, CVE-2026-77889, CVE-2026-77891, CVE-2026-77893, CVE-2026-77895, CVE-2026-70065, CVE-2026-69297, CVE-2026-69342, CVE-2026-69405, CVE-2026-69416, CVE-2026-69497, CVE-2026-69547, CVE-2026-69620, CVE-2026-69637, CVE-2026-69803, CVE-2026-69679, CVE-2026-69878, CVE-2026-69847, CVE-2026-69876, CVE-2026-69510.

CVE-2026-77886

CVE-2026-77886 describes an out-of-bounds read vulnerability in the Windows DHCP Server component. An unauthenticated remote attacker can leverage this flaw to trigger a denial of service condition by sending specifically crafted network traffic to a vulnerable DHCP server.

Affected products:

Windows DHCP Server

Source: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-77886

Related in this roundup: CVE-2026-69845, CVE-2026-72979, CVE-2026-69266, CVE-2026-69412, CVE-2026-69415, CVE-2026-69929, CVE-2026-69930, CVE-2026-70124, CVE-2026-77494, CVE-2026-77498, CVE-2026-77499, CVE-2026-77501, CVE-2026-77502, CVE-2026-77887, CVE-2026-77888, CVE-2026-77890, CVE-2026-77889, CVE-2026-77891, CVE-2026-77893, CVE-2026-77895, CVE-2026-70065, CVE-2026-69297, CVE-2026-69342, CVE-2026-69405, CVE-2026-69416, CVE-2026-69497, CVE-2026-69547, CVE-2026-69620, CVE-2026-69637, CVE-2026-69803, CVE-2026-69679, CVE-2026-69878, CVE-2026-69847, CVE-2026-69876, CVE-2026-69510.

CVE-2026-77890

CVE-2026-77890 is a type confusion vulnerability in the Windows DHCP Server component that allows an unauthenticated, remote attacker to trigger a denial of service condition on affected servers by sending specially crafted packets over the network.

Affected products:

Windows DHCP Server

Source: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-77890

Related in this roundup: CVE-2026-69845, CVE-2026-72979, CVE-2026-69266, CVE-2026-69412, CVE-2026-69415, CVE-2026-69929, CVE-2026-69930, CVE-2026-70124, CVE-2026-77494, CVE-2026-77498, CVE-2026-77499, CVE-2026-77501, CVE-2026-77502, CVE-2026-77887, CVE-2026-77888, CVE-2026-77886, CVE-2026-77889, CVE-2026-77891, CVE-2026-77893, CVE-2026-77895, CVE-2026-70065, CVE-2026-69297, CVE-2026-69342, CVE-2026-69405, CVE-2026-69416, CVE-2026-69497, CVE-2026-69547, CVE-2026-69620, CVE-2026-69637, CVE-2026-69803, CVE-2026-69679, CVE-2026-69878, CVE-2026-69847, CVE-2026-69876, CVE-2026-69510.

CVE-2026-77889

A type confusion vulnerability exists in the Windows DHCP Server service, which can be exploited by an unauthorized network-based attacker to trigger a denial of service condition. The vulnerability arises from improper resource access handling within the service's request processing logic.

Affected products:

Windows DHCP Server

Source: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-77889

Related in this roundup: CVE-2026-69845, CVE-2026-72979, CVE-2026-69266, CVE-2026-69412, CVE-2026-69415, CVE-2026-69929, CVE-2026-69930, CVE-2026-70124, CVE-2026-77494, CVE-2026-77498, CVE-2026-77499, CVE-2026-77501, CVE-2026-77502, CVE-2026-77887, CVE-2026-77888, CVE-2026-77886, CVE-2026-77890, CVE-2026-77891, CVE-2026-77893, CVE-2026-77895, CVE-2026-70065, CVE-2026-69297, CVE-2026-69342, CVE-2026-69405, CVE-2026-69416, CVE-2026-69497, CVE-2026-69547, CVE-2026-69620, CVE-2026-69637, CVE-2026-69803, CVE-2026-69679, CVE-2026-69878, CVE-2026-69847, CVE-2026-69876, CVE-2026-69510.

CVE-2026-77891

A vulnerability in the Windows DHCP Server component allows an authenticated attacker to trigger an out-of-bounds read, potentially leading to remote code execution on the target server.

Affected products:

Windows DHCP Server

Source: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-77891

Related in this roundup: CVE-2026-69845, CVE-2026-72979, CVE-2026-69266, CVE-2026-69412, CVE-2026-69415, CVE-2026-69929, CVE-2026-69930, CVE-2026-70124, CVE-2026-77494, CVE-2026-77498, CVE-2026-77499, CVE-2026-77501, CVE-2026-77502, CVE-2026-77887, CVE-2026-77888, CVE-2026-77886, CVE-2026-77890, CVE-2026-77889, CVE-2026-77893, CVE-2026-77895, CVE-2026-70065, CVE-2026-69297, CVE-2026-69342, CVE-2026-69405, CVE-2026-69416, CVE-2026-69497, CVE-2026-69547, CVE-2026-69620, CVE-2026-69637, CVE-2026-69803, CVE-2026-69679, CVE-2026-69878, CVE-2026-69847, CVE-2026-69876, CVE-2026-69510.

CVE-2026-77892

CVE-2026-77892 is a privilege escalation vulnerability in the Windows Boot Manager that allows an unauthorized attacker to gain elevated privileges through physical access to the target machine.

Affected products:

Windows Boot Manager

Source: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-77892

CVE-2026-77893

CVE-2026-77893 is a vulnerability in the Windows DHCP Server component that allows an unauthenticated remote attacker to trigger a denial of service condition. The vulnerability arises from an out-of-bounds read, enabling the attacker to crash the service via specially crafted network traffic.

Affected products:

Windows DHCP Server

Source: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-77893

Related in this roundup: CVE-2026-69845, CVE-2026-72979, CVE-2026-69266, CVE-2026-69412, CVE-2026-69415, CVE-2026-69929, CVE-2026-69930, CVE-2026-70124, CVE-2026-77494, CVE-2026-77498, CVE-2026-77499, CVE-2026-77501, CVE-2026-77502, CVE-2026-77887, CVE-2026-77888, CVE-2026-77886, CVE-2026-77890, CVE-2026-77889, CVE-2026-77891, CVE-2026-77895, CVE-2026-70065, CVE-2026-69297, CVE-2026-69342, CVE-2026-69405, CVE-2026-69416, CVE-2026-69497, CVE-2026-69547, CVE-2026-69620, CVE-2026-69637, CVE-2026-69803, CVE-2026-69679, CVE-2026-69878, CVE-2026-69847, CVE-2026-69876, CVE-2026-69510.

CVE-2026-77894

A race condition vulnerability exists in the Windows Installer service that enables an authenticated local attacker to gain elevated privileges on the system through improper synchronization of shared resources.

Affected products:

Windows Installer

Source: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-77894

Related in this roundup: CVE-2026-62694, CVE-2026-71339, CVE-2026-72929, CVE-2026-69441.

CVE-2026-77895

An out-of-bounds read vulnerability exists within the Windows DHCP Server service, which can be exploited by an unauthorized network attacker to cause a denial-of-service condition.

Affected products:

Windows DHCP Server

Source: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-77895

Related in this roundup: CVE-2026-69845, CVE-2026-72979, CVE-2026-69266, CVE-2026-69412, CVE-2026-69415, CVE-2026-69929, CVE-2026-69930, CVE-2026-70124, CVE-2026-77494, CVE-2026-77498, CVE-2026-77499, CVE-2026-77501, CVE-2026-77502, CVE-2026-77887, CVE-2026-77888, CVE-2026-77886, CVE-2026-77890, CVE-2026-77889, CVE-2026-77891, CVE-2026-77893, CVE-2026-70065, CVE-2026-69297, CVE-2026-69342, CVE-2026-69405, CVE-2026-69416, CVE-2026-69497, CVE-2026-69547, CVE-2026-69620, CVE-2026-69637, CVE-2026-69803, CVE-2026-69679, CVE-2026-69878, CVE-2026-69847, CVE-2026-69876, CVE-2026-69510.

CVE-2026-77896

CVE-2026-77896 identifies an integer overflow or wraparound vulnerability within the Windows Remote Desktop Client. This vulnerability can be exploited by an unauthorized remote attacker to cause a denial-of-service condition on the affected system.

Affected products:

Remote Desktop Client

Source: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-77896

Related in this roundup: CVE-2026-68828, CVE-2026-69485, CVE-2026-78463, CVE-2026-80074, CVE-2026-80077, CVE-2026-83998, CVE-2026-69317, CVE-2026-69358.

CVE-2026-77898

CVE-2026-77898 is a heap-based buffer overflow vulnerability in Microsoft Office that enables an unauthenticated attacker to achieve remote code execution over a network. Detection efforts should focus on anomalous Office application behavior or process spawning patterns resulting from malformed file handling.

Affected products:

Office

Source: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-77898

Related in this roundup: CVE-2026-69285, CVE-2026-69739, CVE-2026-77504, CVE-2026-78439, CVE-2026-78505, CVE-2026-64918, CVE-2026-69442, CVE-2026-69626, CVE-2026-69632, CVE-2026-72938, CVE-2026-72973, CVE-2026-78512, CVE-2026-80079, CVE-2026-78524, CVE-2026-80078, CVE-2026-80076, CVE-2026-80087, CVE-2026-80085, CVE-2026-80088, CVE-2026-80091, CVE-2026-80089, CVE-2026-80090, CVE-2026-80082.

CVE-2026-77899

A use-after-free vulnerability in the Windows Security Center component allows a locally authenticated attacker to gain elevated privileges on the system.

Affected products:

Windows Security Center

Source: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-77899

CVE-2026-77904

CVE-2026-77904 is a heap-based buffer overflow vulnerability in the Windows Volume Manager Extension Driver. An authorized local attacker can exploit this flaw to achieve privilege escalation on the affected Windows system.

Affected products:

Windows Volume Manager Extension Driver

Source: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-77904

Related in this roundup: CVE-2026-69291, CVE-2026-69334, CVE-2026-69468, CVE-2026-69582.

CVE-2026-77907

CVE-2026-77907 is a heap-based buffer overflow vulnerability in Microsoft Visual Studio that can be exploited by an unauthorized remote attacker to achieve remote code execution over a network.

Affected products:

Visual Studio

Source: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-77907

Related in this roundup: CVE-2026-69522, CVE-2026-71328, CVE-2026-77906.

CVE-2026-77908

CVE-2026-77908 is a code injection vulnerability in Microsoft Dynamics 365 (On-Premises) that allows an authenticated attacker to execute arbitrary code over the network. The vulnerability arises from improper control of code generation, potentially leading to remote code execution.

Affected products:

Dynamics 365

Source: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-77908

Related in this roundup: CVE-2026-65772.

CVE-2026-77909

CVE-2026-77909 describes an information disclosure vulnerability in Microsoft Azure CycleCloud caused by insufficiently protected credentials. An authorized attacker can exploit this flaw to gain unauthorized access to sensitive information over the network.

Affected products:

Azure CycleCloud

Source: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-77909

CVE-2026-78439

A stack-based buffer overflow vulnerability in the Microsoft Office Graphics Component allows an unauthorized remote attacker to execute arbitrary code. The vulnerability exists within the graphics rendering process, which could be triggered over a network.

Affected products:

Office

Source: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-78439

Related in this roundup: CVE-2026-69285, CVE-2026-69739, CVE-2026-77504, CVE-2026-77898, CVE-2026-78505, CVE-2026-64918, CVE-2026-69442, CVE-2026-69626, CVE-2026-69632, CVE-2026-72938, CVE-2026-72973, CVE-2026-78512, CVE-2026-80079, CVE-2026-78524, CVE-2026-80078, CVE-2026-80076, CVE-2026-80087, CVE-2026-80085, CVE-2026-80088, CVE-2026-80091, CVE-2026-80089, CVE-2026-80090, CVE-2026-80082.

CVE-2026-78461

CVE-2026-78461 is a path traversal vulnerability in Visual Studio Code that allows an unauthenticated remote attacker to bypass security features by improperly restricting pathnames to protected directories. Detection efforts should focus on identifying unauthorized access attempts or unusual file system interactions associated with the Visual Studio Code process.

Affected products:

Visual Studio Code

Source: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-78461

Related in this roundup: CVE-2026-81376, CVE-2026-70334, CVE-2026-81356, CVE-2026-81357, CVE-2026-81377, CVE-2026-81378, CVE-2026-81379, CVE-2026-78462, CVE-2026-81383.

CVE-2026-78463

CVE-2026-78463 is a code injection vulnerability in the Microsoft Remote Desktop Client that allows an unauthenticated, remote attacker to execute arbitrary code. The vulnerability stems from improper control of code generation during the RDP session process.

Affected products:

Remote Desktop Client

Source: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-78463

Related in this roundup: CVE-2026-68828, CVE-2026-69485, CVE-2026-77896, CVE-2026-80074, CVE-2026-80077, CVE-2026-83998, CVE-2026-69317, CVE-2026-69358.

CVE-2026-67383

CVE-2026-67383 is an information disclosure vulnerability in Microsoft SQL Server where error messages generated by the server may contain sensitive information. An authorized attacker can exploit this flaw to gain unauthorized access to sensitive data transmitted over the network.

Affected products:

SQL Server

Source: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-67383

Related in this roundup: CVE-2026-65669, CVE-2026-47297, CVE-2026-66814, CVE-2026-66818, CVE-2026-66819, CVE-2026-66820, CVE-2026-67368, CVE-2026-67370, CVE-2026-67373, CVE-2026-67376, CVE-2026-67378, CVE-2026-67379, CVE-2026-67380, CVE-2026-67381, CVE-2026-67384, CVE-2026-67385, CVE-2026-67388, CVE-2026-67631, CVE-2026-67636, CVE-2026-67638, CVE-2026-67639, CVE-2026-67642, CVE-2026-67643, CVE-2026-68775, CVE-2026-68786, CVE-2026-68787, CVE-2026-77482, CVE-2026-67629, CVE-2026-67630, CVE-2026-67633, CVE-2026-68781, CVE-2026-68784, CVE-2026-68785, CVE-2026-67389, CVE-2026-73029, CVE-2026-66816, CVE-2026-67386, CVE-2026-67390, CVE-2026-67393, CVE-2026-67641, CVE-2026-67648, CVE-2026-68776, CVE-2026-68777, CVE-2026-68778, CVE-2026-68779, CVE-2026-68780, CVE-2026-73028, CVE-2026-77480, CVE-2026-77483, CVE-2026-77484, CVE-2026-77487, CVE-2026-77485, CVE-2026-77486, CVE-2026-77488, CVE-2026-69562, CVE-2026-78456, CVE-2026-67369, CVE-2026-67624, CVE-2026-67645, CVE-2026-77481.

CVE-2026-78511

CVE-2026-78511 is a heap-based buffer overflow vulnerability in Microsoft Office Word that enables a remote, unauthorized attacker to achieve remote code execution on the target system by exploiting memory corruption during document processing.

Affected products:

Office Word

Source: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-78511

Related in this roundup: CVE-2026-69556, CVE-2026-69671, CVE-2026-69686, CVE-2026-69722, CVE-2026-69734, CVE-2026-69719, CVE-2026-69759, CVE-2026-69764, CVE-2026-78502, CVE-2026-78504, CVE-2026-78517, CVE-2026-68843, CVE-2026-69360, CVE-2026-72972, CVE-2026-72976, CVE-2026-77901, CVE-2026-77911, CVE-2026-78507, CVE-2026-78506, CVE-2026-78514, CVE-2026-78503, CVE-2026-78521, CVE-2026-78522, CVE-2026-78526, CVE-2026-80080, CVE-2026-83951, CVE-2026-83949.

CVE-2026-78502

CVE-2026-78502 is an information disclosure vulnerability in Microsoft Office Word resulting from an out-of-bounds read. An attacker can exploit this flaw to read sensitive data over a network without authorization.

Affected products:

Office Word

Source: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-78502

Related in this roundup: CVE-2026-69556, CVE-2026-69671, CVE-2026-69686, CVE-2026-69722, CVE-2026-69734, CVE-2026-69719, CVE-2026-69759, CVE-2026-69764, CVE-2026-78511, CVE-2026-78504, CVE-2026-78517, CVE-2026-68843, CVE-2026-69360, CVE-2026-72972, CVE-2026-72976, CVE-2026-77901, CVE-2026-77911, CVE-2026-78507, CVE-2026-78506, CVE-2026-78514, CVE-2026-78503, CVE-2026-78521, CVE-2026-78522, CVE-2026-78526, CVE-2026-80080, CVE-2026-83951, CVE-2026-83949.

CVE-2026-78515

CVE-2026-78515 describes an out-of-bounds read vulnerability in Microsoft Excel that enables a remote attacker to disclose sensitive information from the host system or application memory over a network.

Affected products:

Excel

Source: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-78515

Related in this roundup: CVE-2026-81398, CVE-2026-81386, CVE-2026-81947, CVE-2026-81387, CVE-2026-81954, CVE-2026-81390, CVE-2026-81399, CVE-2026-81391, CVE-2026-81401, CVE-2026-81958, CVE-2026-81396, CVE-2026-81392, CVE-2026-81397, CVE-2026-81956, CVE-2026-81393, CVE-2026-81400, CVE-2026-81389, CVE-2026-81394, CVE-2026-81960, CVE-2026-81395, CVE-2026-81957, CVE-2026-81388, CVE-2026-81951, CVE-2026-81959, CVE-2026-81953, CVE-2026-81949, CVE-2026-81950, CVE-2026-81948, CVE-2026-85875.

CVE-2026-78505

CVE-2026-78505 describes a heap-based buffer overflow vulnerability in Microsoft Office that enables an unauthorized attacker to achieve remote code execution over a network. Detection efforts should focus on anomalous memory allocation patterns or suspicious child processes spawned by Microsoft Office applications.

Affected products:

Office

Source: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-78505

Related in this roundup: CVE-2026-69285, CVE-2026-69739, CVE-2026-77504, CVE-2026-77898, CVE-2026-78439, CVE-2026-64918, CVE-2026-69442, CVE-2026-69626, CVE-2026-69632, CVE-2026-72938, CVE-2026-72973, CVE-2026-78512, CVE-2026-80079, CVE-2026-78524, CVE-2026-80078, CVE-2026-80076, CVE-2026-80087, CVE-2026-80085, CVE-2026-80088, CVE-2026-80091, CVE-2026-80089, CVE-2026-80090, CVE-2026-80082.

CVE-2026-78510

CVE-2026-78510 describes a heap-based buffer overflow vulnerability in Microsoft Word that enables a remote attacker to achieve code execution. The vulnerability is triggered over a network, potentially through malicious document delivery.

Affected products:

Word

Source: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-78510

Related in this roundup: CVE-2026-81952.

CVE-2026-78508

CVE-2026-78508 is an out-of-bounds read vulnerability in the Windows CD-ROM driver. An attacker with physical access to a target machine can exploit this flaw to perform unauthorized information disclosure.

Affected products:

Windows CD-ROM Driver

Source: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-78508

Related in this roundup: CVE-2026-78454.

CVE-2026-78513

CVE-2026-78513 describes an out-of-bounds read vulnerability in Microsoft Office PowerPoint that enables an unauthorized attacker to perform local information disclosure. The vulnerability is triggered by memory access errors within the application, allowing data leakage from the process memory space.

Affected products:

PowerPoint

Source: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-78513

Related in this roundup: CVE-2026-69767, CVE-2026-69797, CVE-2026-72975, CVE-2026-80086, CVE-2026-80081.

CVE-2026-78504

CVE-2026-78504 describes a stack-based buffer overflow vulnerability in Microsoft Office Word that enables an unauthorized attacker to perform remote code execution over a network. Detection efforts should focus on anomalous process execution or child processes spawning from Winword.exe following the handling of untrusted document files.

Affected products:

Office Word

Source: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-78504

Related in this roundup: CVE-2026-69556, CVE-2026-69671, CVE-2026-69686, CVE-2026-69722, CVE-2026-69734, CVE-2026-69719, CVE-2026-69759, CVE-2026-69764, CVE-2026-78511, CVE-2026-78502, CVE-2026-78517, CVE-2026-68843, CVE-2026-69360, CVE-2026-72972, CVE-2026-72976, CVE-2026-77901, CVE-2026-77911, CVE-2026-78507, CVE-2026-78506, CVE-2026-78514, CVE-2026-78503, CVE-2026-78521, CVE-2026-78522, CVE-2026-78526, CVE-2026-80080, CVE-2026-83951, CVE-2026-83949.

CVE-2026-78517

CVE-2026-78517 is a heap-based buffer overflow vulnerability in Microsoft Office Word that enables a remote, unauthorized attacker to execute arbitrary code on a targeted system via network-based exploitation.

Affected products:

Office Word

Source: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-78517

Related in this roundup: CVE-2026-69556, CVE-2026-69671, CVE-2026-69686, CVE-2026-69722, CVE-2026-69734, CVE-2026-69719, CVE-2026-69759, CVE-2026-69764, CVE-2026-78511, CVE-2026-78502, CVE-2026-78504, CVE-2026-68843, CVE-2026-69360, CVE-2026-72972, CVE-2026-72976, CVE-2026-77901, CVE-2026-77911, CVE-2026-78507, CVE-2026-78506, CVE-2026-78514, CVE-2026-78503, CVE-2026-78521, CVE-2026-78522, CVE-2026-78526, CVE-2026-80080, CVE-2026-83951, CVE-2026-83949.

CVE-2026-78509

CVE-2026-78509 is a heap-based buffer overflow vulnerability in Microsoft Outlook that allows an unauthenticated remote attacker to achieve remote code execution. The vulnerability is triggered via network-based exploitation of the email client.

Affected products:

Outlook

Source: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-78509

CVE-2026-67389

CVE-2026-67389 is an information disclosure vulnerability resulting from an out-of-bounds read in Microsoft SQL Server. An authorized attacker can leverage this flaw to access sensitive information over the network.

Affected products:

SQL Server

Source: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-67389

Related in this roundup: CVE-2026-65669, CVE-2026-47297, CVE-2026-66814, CVE-2026-66818, CVE-2026-66819, CVE-2026-66820, CVE-2026-67368, CVE-2026-67370, CVE-2026-67373, CVE-2026-67376, CVE-2026-67378, CVE-2026-67379, CVE-2026-67380, CVE-2026-67381, CVE-2026-67384, CVE-2026-67385, CVE-2026-67388, CVE-2026-67631, CVE-2026-67636, CVE-2026-67638, CVE-2026-67639, CVE-2026-67642, CVE-2026-67643, CVE-2026-68775, CVE-2026-68786, CVE-2026-68787, CVE-2026-77482, CVE-2026-67629, CVE-2026-67630, CVE-2026-67633, CVE-2026-68781, CVE-2026-68784, CVE-2026-68785, CVE-2026-67383, CVE-2026-73029, CVE-2026-66816, CVE-2026-67386, CVE-2026-67390, CVE-2026-67393, CVE-2026-67641, CVE-2026-67648, CVE-2026-68776, CVE-2026-68777, CVE-2026-68778, CVE-2026-68779, CVE-2026-68780, CVE-2026-73028, CVE-2026-77480, CVE-2026-77483, CVE-2026-77484, CVE-2026-77487, CVE-2026-77485, CVE-2026-77486, CVE-2026-77488, CVE-2026-69562, CVE-2026-78456, CVE-2026-67369, CVE-2026-67624, CVE-2026-67645, CVE-2026-77481.

CVE-2026-78518

CVE-2026-78518 is a remote code execution vulnerability in Microsoft Office Excel caused by an out-of-bounds read flaw. Successful exploitation allows an unauthorized attacker to execute arbitrary code on the victim's system, typically requiring user interaction to open a malicious file.

Affected products:

Office Excel

Source: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-78518

Related in this roundup: CVE-2026-72974.

CVE-2026-73029

CVE-2026-73029 describes a buffer over-read vulnerability within Microsoft SQL Server that enables an authorized attacker to perform unauthorized information disclosure over the network.

Affected products:

SQL Server

Source: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-73029

Related in this roundup: CVE-2026-65669, CVE-2026-47297, CVE-2026-66814, CVE-2026-66818, CVE-2026-66819, CVE-2026-66820, CVE-2026-67368, CVE-2026-67370, CVE-2026-67373, CVE-2026-67376, CVE-2026-67378, CVE-2026-67379, CVE-2026-67380, CVE-2026-67381, CVE-2026-67384, CVE-2026-67385, CVE-2026-67388, CVE-2026-67631, CVE-2026-67636, CVE-2026-67638, CVE-2026-67639, CVE-2026-67642, CVE-2026-67643, CVE-2026-68775, CVE-2026-68786, CVE-2026-68787, CVE-2026-77482, CVE-2026-67629, CVE-2026-67630, CVE-2026-67633, CVE-2026-68781, CVE-2026-68784, CVE-2026-68785, CVE-2026-67383, CVE-2026-67389, CVE-2026-66816, CVE-2026-67386, CVE-2026-67390, CVE-2026-67393, CVE-2026-67641, CVE-2026-67648, CVE-2026-68776, CVE-2026-68777, CVE-2026-68778, CVE-2026-68779, CVE-2026-68780, CVE-2026-73028, CVE-2026-77480, CVE-2026-77483, CVE-2026-77484, CVE-2026-77487, CVE-2026-77485, CVE-2026-77486, CVE-2026-77488, CVE-2026-69562, CVE-2026-78456, CVE-2026-67369, CVE-2026-67624, CVE-2026-67645, CVE-2026-77481.

CVE-2026-78523

A use-after-free vulnerability in the Microsoft Windows DNS Server component allows an unauthenticated remote attacker to trigger a denial-of-service condition over the network.

Affected products:

Windows DNS Server

Source: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-78523

Related in this roundup: CVE-2026-69551, CVE-2026-77505, CVE-2026-69989, CVE-2026-69827, CVE-2026-69813, CVE-2026-69858, CVE-2026-72928.

CVE-2026-80074

CVE-2026-80074 is a heap-based buffer overflow vulnerability in the Microsoft Remote Desktop Client, which can be exploited by an unauthorized remote attacker to execute arbitrary code over the network.

Affected products:

Remote Desktop Client

Source: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-80074

Related in this roundup: CVE-2026-68828, CVE-2026-69485, CVE-2026-77896, CVE-2026-78463, CVE-2026-80077, CVE-2026-83998, CVE-2026-69317, CVE-2026-69358.

CVE-2026-80077

CVE-2026-80077 describes a heap-based buffer overflow vulnerability in the Microsoft Remote Desktop Client, which can be exploited by an unauthenticated attacker over a network to achieve remote code execution on the target system.

Affected products:

Remote Desktop Client

Source: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-80077

Related in this roundup: CVE-2026-68828, CVE-2026-69485, CVE-2026-77896, CVE-2026-78463, CVE-2026-80074, CVE-2026-83998, CVE-2026-69317, CVE-2026-69358.

CVE-2026-80075

CVE-2026-80075 is a heap-based buffer overflow vulnerability within Windows Work Folders that enables a locally authenticated attacker to escalate their privileges. Detection efforts should focus on monitoring for abnormal process execution or unexpected system modifications originating from the Work Folders service process.

Affected products:

Windows Work Folders

Source: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-80075

CVE-2026-80083

CVE-2026-80083 is a remote code execution vulnerability in Windows Hyper-V caused by an untrusted pointer dereference. An authorized attacker can exploit this vulnerability to execute arbitrary code locally on the host system.

Affected products:

Hyper-V

Source: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-80083

Related in this roundup: CVE-2026-69910, CVE-2026-69553, CVE-2026-69603, CVE-2026-72961.

CVE-2026-80093

A use-after-free vulnerability in the Windows Cloud Files Mini Filter Driver allows an authenticated attacker to perform local privilege escalation. The vulnerability is triggered due to improper memory management within the driver, potentially allowing an attacker to execute arbitrary code with elevated permissions.

Affected products:

Windows

Source: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-80093

Related in this roundup: CVE-2026-81963, CVE-2026-85880, CVE-2026-69496, CVE-2026-69586, CVE-2026-69768, CVE-2026-73025, CVE-2026-56172, CVE-2026-68832, CVE-2026-68834, CVE-2026-68838, CVE-2026-68841, CVE-2026-68875, CVE-2026-68877, CVE-2026-68880, CVE-2026-69265, CVE-2026-69270, CVE-2026-69274, CVE-2026-69275, CVE-2026-69280, CVE-2026-69283, CVE-2026-69284, CVE-2026-69289, CVE-2026-69296, CVE-2026-69300, CVE-2026-69301, CVE-2026-69307, CVE-2026-69312, CVE-2026-69314, CVE-2026-69332, CVE-2026-69333, CVE-2026-69335, CVE-2026-68833, CVE-2026-68851, CVE-2026-69366, CVE-2026-69337, CVE-2026-69347, CVE-2026-69379, CVE-2026-69390, CVE-2026-69401, CVE-2026-69413, CVE-2026-69420, CVE-2026-69429, CVE-2026-69448, CVE-2026-69455, CVE-2026-69532, CVE-2026-69472, CVE-2026-69479, CVE-2026-69531, CVE-2026-69517, CVE-2026-69505, CVE-2026-69504, CVE-2026-69527, CVE-2026-69549, CVE-2026-69588, CVE-2026-69609, CVE-2026-69648, CVE-2026-69689, CVE-2026-69790, CVE-2026-69638, CVE-2026-69859, CVE-2026-69717, CVE-2026-69711, CVE-2026-69875, CVE-2026-69889, CVE-2026-69757, CVE-2026-69741, CVE-2026-69762, CVE-2026-69744, CVE-2026-69832, CVE-2026-69691, CVE-2026-69808, CVE-2026-69775, CVE-2026-69822, CVE-2026-69770, CVE-2026-69676, CVE-2026-70289, CVE-2026-70563, CVE-2026-71329, CVE-2026-71332, CVE-2026-71350, CVE-2026-71348, CVE-2026-71345, CVE-2026-69469, CVE-2026-69501, CVE-2026-69548, CVE-2026-69846, CVE-2026-70283, CVE-2026-72981, CVE-2026-77491, CVE-2026-77492, CVE-2026-77503, CVE-2026-72949, CVE-2026-70019, CVE-2026-72940, CVE-2026-69573, CVE-2026-70290, CVE-2026-83991, CVE-2026-83999, CVE-2026-69321, CVE-2026-69316, CVE-2026-69340, CVE-2026-69348, CVE-2026-69350, CVE-2026-69353, CVE-2026-69357, CVE-2026-69393, CVE-2026-69410, CVE-2026-69421, CVE-2026-69428, CVE-2026-69425, CVE-2026-69427, CVE-2026-69434, CVE-2026-69456, CVE-2026-69459, CVE-2026-69478, CVE-2026-69561, CVE-2026-69512, CVE-2026-69498, CVE-2026-69571, CVE-2026-69535, CVE-2026-69538, CVE-2026-69591, CVE-2026-69566, CVE-2026-69567, CVE-2026-69584, CVE-2026-69617, CVE-2026-69630, CVE-2026-69610, CVE-2026-69881, CVE-2026-69680, CVE-2026-69619, CVE-2026-69685, CVE-2026-69643, CVE-2026-69687, CVE-2026-69791, CVE-2026-69707, CVE-2026-69652, CVE-2026-69834, CVE-2026-69709, CVE-2026-69844, CVE-2026-69814, CVE-2026-69731, CVE-2026-69706, CVE-2026-69779, CVE-2026-69895, CVE-2026-69792, CVE-2026-69853, CVE-2026-69761, CVE-2026-69785, CVE-2026-69818, CVE-2026-69786, CVE-2026-69874, CVE-2026-70565, CVE-2026-70574, CVE-2026-70569, CVE-2026-70575, CVE-2026-71349, CVE-2026-72927, CVE-2026-72952, CVE-2026-72942, CVE-2026-72966, CVE-2026-72967, CVE-2026-69426, CVE-2026-69564, CVE-2026-72985, CVE-2026-73019, CVE-2026-78451, CVE-2026-78452, CVE-2026-83940, CVE-2026-69598, CVE-2026-83995, CVE-2026-83501, CVE-2026-83498.

CVE-2026-81349

CVE-2026-81349 describes a privilege escalation vulnerability in Azure HDInsight caused by improper neutralization of special elements used in an OS command within Ambari. This vulnerability allows an authorized attacker to elevate privileges over a network via command injection.

Affected products:

Azure HDInsight

Source: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-81349

CVE-2026-81355

The Virtual Hard Disk (VHD) Miniport Driver in Microsoft Windows contains a heap-based buffer overflow vulnerability that allows an authorized local attacker to achieve remote code execution by exploiting memory corruption within the driver.

Affected products:

Virtual Hard Disk (VHD) Miniport Driver

Source: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-81355

Related in this roundup: CVE-2026-69541, CVE-2026-69681, CVE-2026-69384, CVE-2026-69611.

CVE-2026-81356

CVE-2026-81356 identifies a security feature bypass vulnerability in Visual Studio Code stemming from inconsistent HTTP request/response handling. An unauthorized attacker can leverage this request smuggling behavior to circumvent security controls over the network.

Affected products:

Visual Studio Code

Source: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-81356

Related in this roundup: CVE-2026-81376, CVE-2026-70334, CVE-2026-78461, CVE-2026-81357, CVE-2026-81377, CVE-2026-81378, CVE-2026-81379, CVE-2026-78462, CVE-2026-81383.

CVE-2026-81357

CVE-2026-81357 describes a server-side request forgery (SSRF) vulnerability in Visual Studio Code that allows an unauthorized attacker to bypass security features via network access. Detection engineering efforts should focus on monitoring anomalous outbound network requests originating from Visual Studio Code processes.

Affected products:

Visual Studio Code

Source: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-81357

Related in this roundup: CVE-2026-81376, CVE-2026-70334, CVE-2026-78461, CVE-2026-81356, CVE-2026-81377, CVE-2026-81378, CVE-2026-81379, CVE-2026-78462, CVE-2026-81383.

CVE-2026-81377

Visual Studio Code contains a path traversal vulnerability that allows an unauthorized attacker to perform unauthorized file tampering over a network.

Affected products:

Visual Studio Code

Source: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-81377

Related in this roundup: CVE-2026-81376, CVE-2026-70334, CVE-2026-78461, CVE-2026-81356, CVE-2026-81357, CVE-2026-81378, CVE-2026-81379, CVE-2026-78462, CVE-2026-81383.

CVE-2026-81378

CVE-2026-81378 is a security feature bypass vulnerability in Visual Studio Code caused by an interpretation conflict, which may allow an unauthenticated attacker to bypass security controls over a network connection.

Affected products:

Visual Studio Code

Source: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-81378

Related in this roundup: CVE-2026-81376, CVE-2026-70334, CVE-2026-78461, CVE-2026-81356, CVE-2026-81357, CVE-2026-81377, CVE-2026-81379, CVE-2026-78462, CVE-2026-81383.

CVE-2026-81379

CVE-2026-81379 is a security feature bypass vulnerability in Visual Studio Code caused by an improper 'fail-open' mechanism. An unauthenticated attacker can exploit this flaw over a network to bypass security controls implemented within the application.

Affected products:

Visual Studio Code

Source: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-81379

Related in this roundup: CVE-2026-81376, CVE-2026-70334, CVE-2026-78461, CVE-2026-81356, CVE-2026-81357, CVE-2026-81377, CVE-2026-81378, CVE-2026-78462, CVE-2026-81383.

CVE-2026-81380

CVE-2026-81380 involves an improper neutralization of special elements used in a command within GitHub Copilot and Visual Studio Code. This vulnerability allows an unauthorized remote attacker to perform command injection, leading to the unauthorized disclosure of information over the network.

Affected products:

GitHub Copilot
Visual Studio Code

Source: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-81380

Related in this roundup: CVE-2026-81381.

CVE-2026-81381

CVE-2026-81381 identifies an information disclosure vulnerability within GitHub Copilot and Visual Studio Code caused by insufficiently protected credentials. An unauthorized attacker can exploit this flaw to access sensitive information over a network, potentially leading to unauthorized data exposure.

Affected products:

GitHub Copilot
Visual Studio Code

Source: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-81381

Related in this roundup: CVE-2026-81380.

CVE-2026-70065

CVE-2026-70065 describes a denial of service vulnerability in the Windows DHCP Server service caused by improper memory management where memory is not released after its effective lifetime. An unauthorized remote attacker can exploit this flaw to cause the service to become unresponsive.

Affected products:

Windows DHCP Server

Source: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-70065

Related in this roundup: CVE-2026-69845, CVE-2026-72979, CVE-2026-69266, CVE-2026-69412, CVE-2026-69415, CVE-2026-69929, CVE-2026-69930, CVE-2026-70124, CVE-2026-77494, CVE-2026-77498, CVE-2026-77499, CVE-2026-77501, CVE-2026-77502, CVE-2026-77887, CVE-2026-77888, CVE-2026-77886, CVE-2026-77890, CVE-2026-77889, CVE-2026-77891, CVE-2026-77893, CVE-2026-77895, CVE-2026-69297, CVE-2026-69342, CVE-2026-69405, CVE-2026-69416, CVE-2026-69497, CVE-2026-69547, CVE-2026-69620, CVE-2026-69637, CVE-2026-69803, CVE-2026-69679, CVE-2026-69878, CVE-2026-69847, CVE-2026-69876, CVE-2026-69510.

CVE-2026-83942

CVE-2026-83942 is a privilege escalation vulnerability in the Windows Kernel caused by improper authorization checks. An attacker who has already obtained local access can exploit this flaw to execute code with elevated system privileges.

Affected products:

Windows Kernel

Source: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-83942

Related in this roundup: CVE-2026-68846, CVE-2026-68884, CVE-2026-85360, CVE-2026-69406, CVE-2026-69473, CVE-2026-69723, CVE-2026-69466, CVE-2026-69578, CVE-2026-69669.

CVE-2026-83952

CVE-2026-83952 is a heap-based buffer overflow vulnerability in the Windows Resilient File System (ReFS) that enables a local, authorized attacker to escalate privileges. Detection should focus on monitoring for unexpected processes or system calls interacting with the file system driver that could trigger heap corruption.

Affected products:

Resilient File System

Source: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-83952

CVE-2026-69989

CVE-2026-69989 is a remote code execution vulnerability in the Windows DNS Server component caused by a use-after-free condition. An unauthenticated attacker can exploit this flaw by sending specifically crafted network requests, potentially leading to arbitrary code execution on the target server.

Affected products:

Windows DNS Server

Source: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-69989

Related in this roundup: CVE-2026-69551, CVE-2026-77505, CVE-2026-78523, CVE-2026-69827, CVE-2026-69813, CVE-2026-69858, CVE-2026-72928.

CVE-2026-69827

CVE-2026-69827 is a race condition vulnerability in the Windows DNS Server component that allows an unauthenticated remote attacker to execute arbitrary code. The vulnerability stems from improper synchronization when accessing shared resources, which can be exploited by an attacker over the network to compromise the affected server.

Affected products:

Windows DNS Server

Source: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-69827

Related in this roundup: CVE-2026-69551, CVE-2026-77505, CVE-2026-78523, CVE-2026-69989, CVE-2026-69813, CVE-2026-69858, CVE-2026-72928.

CVE-2026-72947

The Windows File History Service is susceptible to a local privilege escalation vulnerability due to an integer underflow condition. An authorized attacker could exploit this flaw to gain elevated privileges on a vulnerable system.

Affected products:

Windows File History Service

Source: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-72947

Related in this roundup: CVE-2026-68837, CVE-2026-71340.

CVE-2026-72949

A null pointer dereference vulnerability exists within the Windows SMB Server Network Transport Driver (srvnet.sys), which can be exploited by an unauthorized remote attacker to trigger a denial of service condition on the target system.

Affected products:

Windows

Source: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-72949

Related in this roundup: CVE-2026-81963, CVE-2026-85880, CVE-2026-69496, CVE-2026-69586, CVE-2026-69768, CVE-2026-73025, CVE-2026-56172, CVE-2026-68832, CVE-2026-68834, CVE-2026-68838, CVE-2026-68841, CVE-2026-68875, CVE-2026-68877, CVE-2026-68880, CVE-2026-69265, CVE-2026-69270, CVE-2026-69274, CVE-2026-69275, CVE-2026-69280, CVE-2026-69283, CVE-2026-69284, CVE-2026-69289, CVE-2026-69296, CVE-2026-69300, CVE-2026-69301, CVE-2026-69307, CVE-2026-69312, CVE-2026-69314, CVE-2026-69332, CVE-2026-69333, CVE-2026-69335, CVE-2026-68833, CVE-2026-68851, CVE-2026-69366, CVE-2026-69337, CVE-2026-69347, CVE-2026-69379, CVE-2026-69390, CVE-2026-69401, CVE-2026-69413, CVE-2026-69420, CVE-2026-69429, CVE-2026-69448, CVE-2026-69455, CVE-2026-69532, CVE-2026-69472, CVE-2026-69479, CVE-2026-69531, CVE-2026-69517, CVE-2026-69505, CVE-2026-69504, CVE-2026-69527, CVE-2026-69549, CVE-2026-69588, CVE-2026-69609, CVE-2026-69648, CVE-2026-69689, CVE-2026-69790, CVE-2026-69638, CVE-2026-69859, CVE-2026-69717, CVE-2026-69711, CVE-2026-69875, CVE-2026-69889, CVE-2026-69757, CVE-2026-69741, CVE-2026-69762, CVE-2026-69744, CVE-2026-69832, CVE-2026-69691, CVE-2026-69808, CVE-2026-69775, CVE-2026-69822, CVE-2026-69770, CVE-2026-69676, CVE-2026-70289, CVE-2026-70563, CVE-2026-71329, CVE-2026-71332, CVE-2026-71350, CVE-2026-71348, CVE-2026-71345, CVE-2026-69469, CVE-2026-69501, CVE-2026-69548, CVE-2026-69846, CVE-2026-70283, CVE-2026-72981, CVE-2026-77491, CVE-2026-77492, CVE-2026-77503, CVE-2026-80093, CVE-2026-70019, CVE-2026-72940, CVE-2026-69573, CVE-2026-70290, CVE-2026-83991, CVE-2026-83999, CVE-2026-69321, CVE-2026-69316, CVE-2026-69340, CVE-2026-69348, CVE-2026-69350, CVE-2026-69353, CVE-2026-69357, CVE-2026-69393, CVE-2026-69410, CVE-2026-69421, CVE-2026-69428, CVE-2026-69425, CVE-2026-69427, CVE-2026-69434, CVE-2026-69456, CVE-2026-69459, CVE-2026-69478, CVE-2026-69561, CVE-2026-69512, CVE-2026-69498, CVE-2026-69571, CVE-2026-69535, CVE-2026-69538, CVE-2026-69591, CVE-2026-69566, CVE-2026-69567, CVE-2026-69584, CVE-2026-69617, CVE-2026-69630, CVE-2026-69610, CVE-2026-69881, CVE-2026-69680, CVE-2026-69619, CVE-2026-69685, CVE-2026-69643, CVE-2026-69687, CVE-2026-69791, CVE-2026-69707, CVE-2026-69652, CVE-2026-69834, CVE-2026-69709, CVE-2026-69844, CVE-2026-69814, CVE-2026-69731, CVE-2026-69706, CVE-2026-69779, CVE-2026-69895, CVE-2026-69792, CVE-2026-69853, CVE-2026-69761, CVE-2026-69785, CVE-2026-69818, CVE-2026-69786, CVE-2026-69874, CVE-2026-70565, CVE-2026-70574, CVE-2026-70569, CVE-2026-70575, CVE-2026-71349, CVE-2026-72927, CVE-2026-72952, CVE-2026-72942, CVE-2026-72966, CVE-2026-72967, CVE-2026-69426, CVE-2026-69564, CVE-2026-72985, CVE-2026-73019, CVE-2026-78451, CVE-2026-78452, CVE-2026-83940, CVE-2026-69598, CVE-2026-83995, CVE-2026-83501, CVE-2026-83498.

CVE-2026-70019

CVE-2026-70019 is an information disclosure vulnerability in the Windows Compressed Folder feature. It allows an unauthorized attacker to leverage hard links to gain unauthorized access to sensitive information over a network.

Affected products:

Windows

Source: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-70019

Related in this roundup: CVE-2026-81963, CVE-2026-85880, CVE-2026-69496, CVE-2026-69586, CVE-2026-69768, CVE-2026-73025, CVE-2026-56172, CVE-2026-68832, CVE-2026-68834, CVE-2026-68838, CVE-2026-68841, CVE-2026-68875, CVE-2026-68877, CVE-2026-68880, CVE-2026-69265, CVE-2026-69270, CVE-2026-69274, CVE-2026-69275, CVE-2026-69280, CVE-2026-69283, CVE-2026-69284, CVE-2026-69289, CVE-2026-69296, CVE-2026-69300, CVE-2026-69301, CVE-2026-69307, CVE-2026-69312, CVE-2026-69314, CVE-2026-69332, CVE-2026-69333, CVE-2026-69335, CVE-2026-68833, CVE-2026-68851, CVE-2026-69366, CVE-2026-69337, CVE-2026-69347, CVE-2026-69379, CVE-2026-69390, CVE-2026-69401, CVE-2026-69413, CVE-2026-69420, CVE-2026-69429, CVE-2026-69448, CVE-2026-69455, CVE-2026-69532, CVE-2026-69472, CVE-2026-69479, CVE-2026-69531, CVE-2026-69517, CVE-2026-69505, CVE-2026-69504, CVE-2026-69527, CVE-2026-69549, CVE-2026-69588, CVE-2026-69609, CVE-2026-69648, CVE-2026-69689, CVE-2026-69790, CVE-2026-69638, CVE-2026-69859, CVE-2026-69717, CVE-2026-69711, CVE-2026-69875, CVE-2026-69889, CVE-2026-69757, CVE-2026-69741, CVE-2026-69762, CVE-2026-69744, CVE-2026-69832, CVE-2026-69691, CVE-2026-69808, CVE-2026-69775, CVE-2026-69822, CVE-2026-69770, CVE-2026-69676, CVE-2026-70289, CVE-2026-70563, CVE-2026-71329, CVE-2026-71332, CVE-2026-71350, CVE-2026-71348, CVE-2026-71345, CVE-2026-69469, CVE-2026-69501, CVE-2026-69548, CVE-2026-69846, CVE-2026-70283, CVE-2026-72981, CVE-2026-77491, CVE-2026-77492, CVE-2026-77503, CVE-2026-80093, CVE-2026-72949, CVE-2026-72940, CVE-2026-69573, CVE-2026-70290, CVE-2026-83991, CVE-2026-83999, CVE-2026-69321, CVE-2026-69316, CVE-2026-69340, CVE-2026-69348, CVE-2026-69350, CVE-2026-69353, CVE-2026-69357, CVE-2026-69393, CVE-2026-69410, CVE-2026-69421, CVE-2026-69428, CVE-2026-69425, CVE-2026-69427, CVE-2026-69434, CVE-2026-69456, CVE-2026-69459, CVE-2026-69478, CVE-2026-69561, CVE-2026-69512, CVE-2026-69498, CVE-2026-69571, CVE-2026-69535, CVE-2026-69538, CVE-2026-69591, CVE-2026-69566, CVE-2026-69567, CVE-2026-69584, CVE-2026-69617, CVE-2026-69630, CVE-2026-69610, CVE-2026-69881, CVE-2026-69680, CVE-2026-69619, CVE-2026-69685, CVE-2026-69643, CVE-2026-69687, CVE-2026-69791, CVE-2026-69707, CVE-2026-69652, CVE-2026-69834, CVE-2026-69709, CVE-2026-69844, CVE-2026-69814, CVE-2026-69731, CVE-2026-69706, CVE-2026-69779, CVE-2026-69895, CVE-2026-69792, CVE-2026-69853, CVE-2026-69761, CVE-2026-69785, CVE-2026-69818, CVE-2026-69786, CVE-2026-69874, CVE-2026-70565, CVE-2026-70574, CVE-2026-70569, CVE-2026-70575, CVE-2026-71349, CVE-2026-72927, CVE-2026-72952, CVE-2026-72942, CVE-2026-72966, CVE-2026-72967, CVE-2026-69426, CVE-2026-69564, CVE-2026-72985, CVE-2026-73019, CVE-2026-78451, CVE-2026-78452, CVE-2026-83940, CVE-2026-69598, CVE-2026-83995, CVE-2026-83501, CVE-2026-83498.

CVE-2026-72940

CVE-2026-72940 is a heap-based buffer overflow vulnerability in the Windows Schannel component. An unauthenticated attacker can exploit this flaw to achieve remote code execution over a network, necessitating urgent patching to prevent unauthorized code execution.

Affected products:

Windows

Source: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-72940

Related in this roundup: CVE-2026-81963, CVE-2026-85880, CVE-2026-69496, CVE-2026-69586, CVE-2026-69768, CVE-2026-73025, CVE-2026-56172, CVE-2026-68832, CVE-2026-68834, CVE-2026-68838, CVE-2026-68841, CVE-2026-68875, CVE-2026-68877, CVE-2026-68880, CVE-2026-69265, CVE-2026-69270, CVE-2026-69274, CVE-2026-69275, CVE-2026-69280, CVE-2026-69283, CVE-2026-69284, CVE-2026-69289, CVE-2026-69296, CVE-2026-69300, CVE-2026-69301, CVE-2026-69307, CVE-2026-69312, CVE-2026-69314, CVE-2026-69332, CVE-2026-69333, CVE-2026-69335, CVE-2026-68833, CVE-2026-68851, CVE-2026-69366, CVE-2026-69337, CVE-2026-69347, CVE-2026-69379, CVE-2026-69390, CVE-2026-69401, CVE-2026-69413, CVE-2026-69420, CVE-2026-69429, CVE-2026-69448, CVE-2026-69455, CVE-2026-69532, CVE-2026-69472, CVE-2026-69479, CVE-2026-69531, CVE-2026-69517, CVE-2026-69505, CVE-2026-69504, CVE-2026-69527, CVE-2026-69549, CVE-2026-69588, CVE-2026-69609, CVE-2026-69648, CVE-2026-69689, CVE-2026-69790, CVE-2026-69638, CVE-2026-69859, CVE-2026-69717, CVE-2026-69711, CVE-2026-69875, CVE-2026-69889, CVE-2026-69757, CVE-2026-69741, CVE-2026-69762, CVE-2026-69744, CVE-2026-69832, CVE-2026-69691, CVE-2026-69808, CVE-2026-69775, CVE-2026-69822, CVE-2026-69770, CVE-2026-69676, CVE-2026-70289, CVE-2026-70563, CVE-2026-71329, CVE-2026-71332, CVE-2026-71350, CVE-2026-71348, CVE-2026-71345, CVE-2026-69469, CVE-2026-69501, CVE-2026-69548, CVE-2026-69846, CVE-2026-70283, CVE-2026-72981, CVE-2026-77491, CVE-2026-77492, CVE-2026-77503, CVE-2026-80093, CVE-2026-72949, CVE-2026-70019, CVE-2026-69573, CVE-2026-70290, CVE-2026-83991, CVE-2026-83999, CVE-2026-69321, CVE-2026-69316, CVE-2026-69340, CVE-2026-69348, CVE-2026-69350, CVE-2026-69353, CVE-2026-69357, CVE-2026-69393, CVE-2026-69410, CVE-2026-69421, CVE-2026-69428, CVE-2026-69425, CVE-2026-69427, CVE-2026-69434, CVE-2026-69456, CVE-2026-69459, CVE-2026-69478, CVE-2026-69561, CVE-2026-69512, CVE-2026-69498, CVE-2026-69571, CVE-2026-69535, CVE-2026-69538, CVE-2026-69591, CVE-2026-69566, CVE-2026-69567, CVE-2026-69584, CVE-2026-69617, CVE-2026-69630, CVE-2026-69610, CVE-2026-69881, CVE-2026-69680, CVE-2026-69619, CVE-2026-69685, CVE-2026-69643, CVE-2026-69687, CVE-2026-69791, CVE-2026-69707, CVE-2026-69652, CVE-2026-69834, CVE-2026-69709, CVE-2026-69844, CVE-2026-69814, CVE-2026-69731, CVE-2026-69706, CVE-2026-69779, CVE-2026-69895, CVE-2026-69792, CVE-2026-69853, CVE-2026-69761, CVE-2026-69785, CVE-2026-69818, CVE-2026-69786, CVE-2026-69874, CVE-2026-70565, CVE-2026-70574, CVE-2026-70569, CVE-2026-70575, CVE-2026-71349, CVE-2026-72927, CVE-2026-72952, CVE-2026-72942, CVE-2026-72966, CVE-2026-72967, CVE-2026-69426, CVE-2026-69564, CVE-2026-72985, CVE-2026-73019, CVE-2026-78451, CVE-2026-78452, CVE-2026-83940, CVE-2026-69598, CVE-2026-83995, CVE-2026-83501, CVE-2026-83498.

CVE-2026-69573

The Windows Universal Disk Format File System Driver (UDFS) contains a use-after-free vulnerability that can be exploited by a local, authorized attacker to achieve privilege escalation.

Affected products:

Windows

Source: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-69573

Related in this roundup: CVE-2026-81963, CVE-2026-85880, CVE-2026-69496, CVE-2026-69586, CVE-2026-69768, CVE-2026-73025, CVE-2026-56172, CVE-2026-68832, CVE-2026-68834, CVE-2026-68838, CVE-2026-68841, CVE-2026-68875, CVE-2026-68877, CVE-2026-68880, CVE-2026-69265, CVE-2026-69270, CVE-2026-69274, CVE-2026-69275, CVE-2026-69280, CVE-2026-69283, CVE-2026-69284, CVE-2026-69289, CVE-2026-69296, CVE-2026-69300, CVE-2026-69301, CVE-2026-69307, CVE-2026-69312, CVE-2026-69314, CVE-2026-69332, CVE-2026-69333, CVE-2026-69335, CVE-2026-68833, CVE-2026-68851, CVE-2026-69366, CVE-2026-69337, CVE-2026-69347, CVE-2026-69379, CVE-2026-69390, CVE-2026-69401, CVE-2026-69413, CVE-2026-69420, CVE-2026-69429, CVE-2026-69448, CVE-2026-69455, CVE-2026-69532, CVE-2026-69472, CVE-2026-69479, CVE-2026-69531, CVE-2026-69517, CVE-2026-69505, CVE-2026-69504, CVE-2026-69527, CVE-2026-69549, CVE-2026-69588, CVE-2026-69609, CVE-2026-69648, CVE-2026-69689, CVE-2026-69790, CVE-2026-69638, CVE-2026-69859, CVE-2026-69717, CVE-2026-69711, CVE-2026-69875, CVE-2026-69889, CVE-2026-69757, CVE-2026-69741, CVE-2026-69762, CVE-2026-69744, CVE-2026-69832, CVE-2026-69691, CVE-2026-69808, CVE-2026-69775, CVE-2026-69822, CVE-2026-69770, CVE-2026-69676, CVE-2026-70289, CVE-2026-70563, CVE-2026-71329, CVE-2026-71332, CVE-2026-71350, CVE-2026-71348, CVE-2026-71345, CVE-2026-69469, CVE-2026-69501, CVE-2026-69548, CVE-2026-69846, CVE-2026-70283, CVE-2026-72981, CVE-2026-77491, CVE-2026-77492, CVE-2026-77503, CVE-2026-80093, CVE-2026-72949, CVE-2026-70019, CVE-2026-72940, CVE-2026-70290, CVE-2026-83991, CVE-2026-83999, CVE-2026-69321, CVE-2026-69316, CVE-2026-69340, CVE-2026-69348, CVE-2026-69350, CVE-2026-69353, CVE-2026-69357, CVE-2026-69393, CVE-2026-69410, CVE-2026-69421, CVE-2026-69428, CVE-2026-69425, CVE-2026-69427, CVE-2026-69434, CVE-2026-69456, CVE-2026-69459, CVE-2026-69478, CVE-2026-69561, CVE-2026-69512, CVE-2026-69498, CVE-2026-69571, CVE-2026-69535, CVE-2026-69538, CVE-2026-69591, CVE-2026-69566, CVE-2026-69567, CVE-2026-69584, CVE-2026-69617, CVE-2026-69630, CVE-2026-69610, CVE-2026-69881, CVE-2026-69680, CVE-2026-69619, CVE-2026-69685, CVE-2026-69643, CVE-2026-69687, CVE-2026-69791, CVE-2026-69707, CVE-2026-69652, CVE-2026-69834, CVE-2026-69709, CVE-2026-69844, CVE-2026-69814, CVE-2026-69731, CVE-2026-69706, CVE-2026-69779, CVE-2026-69895, CVE-2026-69792, CVE-2026-69853, CVE-2026-69761, CVE-2026-69785, CVE-2026-69818, CVE-2026-69786, CVE-2026-69874, CVE-2026-70565, CVE-2026-70574, CVE-2026-70569, CVE-2026-70575, CVE-2026-71349, CVE-2026-72927, CVE-2026-72952, CVE-2026-72942, CVE-2026-72966, CVE-2026-72967, CVE-2026-69426, CVE-2026-69564, CVE-2026-72985, CVE-2026-73019, CVE-2026-78451, CVE-2026-78452, CVE-2026-83940, CVE-2026-69598, CVE-2026-83995, CVE-2026-83501, CVE-2026-83498.

CVE-2026-72937

CVE-2026-72937 describes an out-of-bounds read vulnerability in the Windows Storage Port Driver that allows an authorized local attacker to perform unauthorized information disclosure.

Affected products:

Windows Storage Port Driver

Source: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-72937

Related in this roundup: CVE-2026-69381.

CVE-2026-69492

A heap-based buffer overflow vulnerability in the Windows Partition Management Driver allows an authenticated attacker to perform local privilege escalation by exploiting the driver's memory handling during partition management operations.

Affected products:

Windows Partition Management Driver

Source: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-69492

Related in this roundup: CVE-2026-71341, CVE-2026-69480.

CVE-2026-83955

CVE-2026-83955 describes a heap-based buffer overflow vulnerability in the Windows Biometric Service that can be exploited by an authorized local attacker to achieve privilege escalation.

Affected products:

Windows Biometric Service

Source: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-83955

Related in this roundup: CVE-2026-69293, CVE-2026-69298, CVE-2026-69323, CVE-2026-69583, CVE-2026-69589, CVE-2026-69580, CVE-2026-69476, CVE-2026-69787, CVE-2026-77489, CVE-2026-83986, CVE-2026-83969, CVE-2026-83988, CVE-2026-83979, CVE-2026-83974, CVE-2026-83975, CVE-2026-83976, CVE-2026-69727, CVE-2026-69826, CVE-2026-69738, CVE-2026-69773, CVE-2026-70573, CVE-2026-70572, CVE-2026-70581, CVE-2026-72941, CVE-2026-69352, CVE-2026-69489, CVE-2026-69593, CVE-2026-72995, CVE-2026-72988, CVE-2026-72990, CVE-2026-72991, CVE-2026-72992, CVE-2026-72993, CVE-2026-72994, CVE-2026-72996, CVE-2026-72997, CVE-2026-73002, CVE-2026-73020, CVE-2026-73000, CVE-2026-73001, CVE-2026-73021, CVE-2026-73015, CVE-2026-73011, CVE-2026-73008, CVE-2026-73007, CVE-2026-73026, CVE-2026-78447, CVE-2026-78448, CVE-2026-83971, CVE-2026-83954, CVE-2026-83967, CVE-2026-83970, CVE-2026-83972, CVE-2026-83968, CVE-2026-83973, CVE-2026-83981, CVE-2026-83977, CVE-2026-83978, CVE-2026-83982, CVE-2026-83980, CVE-2026-83987, CVE-2026-83983, CVE-2026-83985.

CVE-2026-83986

A heap-based buffer overflow vulnerability in the Windows Biometric Service enables a locally authenticated attacker to escalate their privileges to a higher level of authority on the host system.

Affected products:

Windows Biometric Service

Source: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-83986

Related in this roundup: CVE-2026-69293, CVE-2026-69298, CVE-2026-69323, CVE-2026-69583, CVE-2026-69589, CVE-2026-69580, CVE-2026-69476, CVE-2026-69787, CVE-2026-77489, CVE-2026-83955, CVE-2026-83969, CVE-2026-83988, CVE-2026-83979, CVE-2026-83974, CVE-2026-83975, CVE-2026-83976, CVE-2026-69727, CVE-2026-69826, CVE-2026-69738, CVE-2026-69773, CVE-2026-70573, CVE-2026-70572, CVE-2026-70581, CVE-2026-72941, CVE-2026-69352, CVE-2026-69489, CVE-2026-69593, CVE-2026-72995, CVE-2026-72988, CVE-2026-72990, CVE-2026-72991, CVE-2026-72992, CVE-2026-72993, CVE-2026-72994, CVE-2026-72996, CVE-2026-72997, CVE-2026-73002, CVE-2026-73020, CVE-2026-73000, CVE-2026-73001, CVE-2026-73021, CVE-2026-73015, CVE-2026-73011, CVE-2026-73008, CVE-2026-73007, CVE-2026-73026, CVE-2026-78447, CVE-2026-78448, CVE-2026-83971, CVE-2026-83954, CVE-2026-83967, CVE-2026-83970, CVE-2026-83972, CVE-2026-83968, CVE-2026-83973, CVE-2026-83981, CVE-2026-83977, CVE-2026-83978, CVE-2026-83982, CVE-2026-83980, CVE-2026-83987, CVE-2026-83983, CVE-2026-83985.

CVE-2026-83969

CVE-2026-83969 is a heap-based buffer overflow vulnerability in the Windows Biometric Service that enables a locally authenticated attacker to escalate their privileges. Detection should focus on monitoring for unauthorized or anomalous interactions with the Windows Biometric Service process.

Affected products:

Windows Biometric Service

Source: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-83969

Related in this roundup: CVE-2026-69293, CVE-2026-69298, CVE-2026-69323, CVE-2026-69583, CVE-2026-69589, CVE-2026-69580, CVE-2026-69476, CVE-2026-69787, CVE-2026-77489, CVE-2026-83955, CVE-2026-83986, CVE-2026-83988, CVE-2026-83979, CVE-2026-83974, CVE-2026-83975, CVE-2026-83976, CVE-2026-69727, CVE-2026-69826, CVE-2026-69738, CVE-2026-69773, CVE-2026-70573, CVE-2026-70572, CVE-2026-70581, CVE-2026-72941, CVE-2026-69352, CVE-2026-69489, CVE-2026-69593, CVE-2026-72995, CVE-2026-72988, CVE-2026-72990, CVE-2026-72991, CVE-2026-72992, CVE-2026-72993, CVE-2026-72994, CVE-2026-72996, CVE-2026-72997, CVE-2026-73002, CVE-2026-73020, CVE-2026-73000, CVE-2026-73001, CVE-2026-73021, CVE-2026-73015, CVE-2026-73011, CVE-2026-73008, CVE-2026-73007, CVE-2026-73026, CVE-2026-78447, CVE-2026-78448, CVE-2026-83971, CVE-2026-83954, CVE-2026-83967, CVE-2026-83970, CVE-2026-83972, CVE-2026-83968, CVE-2026-83973, CVE-2026-83981, CVE-2026-83977, CVE-2026-83978, CVE-2026-83982, CVE-2026-83980, CVE-2026-83987, CVE-2026-83983, CVE-2026-83985.

CVE-2026-83988

A heap-based buffer overflow vulnerability in the Windows Biometric Service allows a locally authenticated attacker to elevate their privileges on an affected system.

Affected products:

Windows Biometric Service

Source: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-83988

Related in this roundup: CVE-2026-69293, CVE-2026-69298, CVE-2026-69323, CVE-2026-69583, CVE-2026-69589, CVE-2026-69580, CVE-2026-69476, CVE-2026-69787, CVE-2026-77489, CVE-2026-83955, CVE-2026-83986, CVE-2026-83969, CVE-2026-83979, CVE-2026-83974, CVE-2026-83975, CVE-2026-83976, CVE-2026-69727, CVE-2026-69826, CVE-2026-69738, CVE-2026-69773, CVE-2026-70573, CVE-2026-70572, CVE-2026-70581, CVE-2026-72941, CVE-2026-69352, CVE-2026-69489, CVE-2026-69593, CVE-2026-72995, CVE-2026-72988, CVE-2026-72990, CVE-2026-72991, CVE-2026-72992, CVE-2026-72993, CVE-2026-72994, CVE-2026-72996, CVE-2026-72997, CVE-2026-73002, CVE-2026-73020, CVE-2026-73000, CVE-2026-73001, CVE-2026-73021, CVE-2026-73015, CVE-2026-73011, CVE-2026-73008, CVE-2026-73007, CVE-2026-73026, CVE-2026-78447, CVE-2026-78448, CVE-2026-83971, CVE-2026-83954, CVE-2026-83967, CVE-2026-83970, CVE-2026-83972, CVE-2026-83968, CVE-2026-83973, CVE-2026-83981, CVE-2026-83977, CVE-2026-83978, CVE-2026-83982, CVE-2026-83980, CVE-2026-83987, CVE-2026-83983, CVE-2026-83985.

CVE-2026-83979

A use-after-free vulnerability in the Windows Biometric Service allows a locally authenticated attacker to elevate their privileges on the affected system.

Affected products:

Windows Biometric Service

Source: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-83979

Related in this roundup: CVE-2026-69293, CVE-2026-69298, CVE-2026-69323, CVE-2026-69583, CVE-2026-69589, CVE-2026-69580, CVE-2026-69476, CVE-2026-69787, CVE-2026-77489, CVE-2026-83955, CVE-2026-83986, CVE-2026-83969, CVE-2026-83988, CVE-2026-83974, CVE-2026-83975, CVE-2026-83976, CVE-2026-69727, CVE-2026-69826, CVE-2026-69738, CVE-2026-69773, CVE-2026-70573, CVE-2026-70572, CVE-2026-70581, CVE-2026-72941, CVE-2026-69352, CVE-2026-69489, CVE-2026-69593, CVE-2026-72995, CVE-2026-72988, CVE-2026-72990, CVE-2026-72991, CVE-2026-72992, CVE-2026-72993, CVE-2026-72994, CVE-2026-72996, CVE-2026-72997, CVE-2026-73002, CVE-2026-73020, CVE-2026-73000, CVE-2026-73001, CVE-2026-73021, CVE-2026-73015, CVE-2026-73011, CVE-2026-73008, CVE-2026-73007, CVE-2026-73026, CVE-2026-78447, CVE-2026-78448, CVE-2026-83971, CVE-2026-83954, CVE-2026-83967, CVE-2026-83970, CVE-2026-83972, CVE-2026-83968, CVE-2026-83973, CVE-2026-83981, CVE-2026-83977, CVE-2026-83978, CVE-2026-83982, CVE-2026-83980, CVE-2026-83987, CVE-2026-83983, CVE-2026-83985.

CVE-2026-83974

A heap-based buffer overflow vulnerability exists in the Windows Biometric Service that allows an already authorized local attacker to elevate their privileges to a higher level of authority on the system.

Affected products:

Windows Biometric Service

Source: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-83974

Related in this roundup: CVE-2026-69293, CVE-2026-69298, CVE-2026-69323, CVE-2026-69583, CVE-2026-69589, CVE-2026-69580, CVE-2026-69476, CVE-2026-69787, CVE-2026-77489, CVE-2026-83955, CVE-2026-83986, CVE-2026-83969, CVE-2026-83988, CVE-2026-83979, CVE-2026-83975, CVE-2026-83976, CVE-2026-69727, CVE-2026-69826, CVE-2026-69738, CVE-2026-69773, CVE-2026-70573, CVE-2026-70572, CVE-2026-70581, CVE-2026-72941, CVE-2026-69352, CVE-2026-69489, CVE-2026-69593, CVE-2026-72995, CVE-2026-72988, CVE-2026-72990, CVE-2026-72991, CVE-2026-72992, CVE-2026-72993, CVE-2026-72994, CVE-2026-72996, CVE-2026-72997, CVE-2026-73002, CVE-2026-73020, CVE-2026-73000, CVE-2026-73001, CVE-2026-73021, CVE-2026-73015, CVE-2026-73011, CVE-2026-73008, CVE-2026-73007, CVE-2026-73026, CVE-2026-78447, CVE-2026-78448, CVE-2026-83971, CVE-2026-83954, CVE-2026-83967, CVE-2026-83970, CVE-2026-83972, CVE-2026-83968, CVE-2026-83973, CVE-2026-83981, CVE-2026-83977, CVE-2026-83978, CVE-2026-83982, CVE-2026-83980, CVE-2026-83987, CVE-2026-83983, CVE-2026-83985.

CVE-2026-83975

A heap-based buffer overflow vulnerability in the Windows Biometric Service enables a locally authenticated attacker to escalate their privileges to a higher level of access.

Affected products:

Windows Biometric Service

Source: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-83975

Related in this roundup: CVE-2026-69293, CVE-2026-69298, CVE-2026-69323, CVE-2026-69583, CVE-2026-69589, CVE-2026-69580, CVE-2026-69476, CVE-2026-69787, CVE-2026-77489, CVE-2026-83955, CVE-2026-83986, CVE-2026-83969, CVE-2026-83988, CVE-2026-83979, CVE-2026-83974, CVE-2026-83976, CVE-2026-69727, CVE-2026-69826, CVE-2026-69738, CVE-2026-69773, CVE-2026-70573, CVE-2026-70572, CVE-2026-70581, CVE-2026-72941, CVE-2026-69352, CVE-2026-69489, CVE-2026-69593, CVE-2026-72995, CVE-2026-72988, CVE-2026-72990, CVE-2026-72991, CVE-2026-72992, CVE-2026-72993, CVE-2026-72994, CVE-2026-72996, CVE-2026-72997, CVE-2026-73002, CVE-2026-73020, CVE-2026-73000, CVE-2026-73001, CVE-2026-73021, CVE-2026-73015, CVE-2026-73011, CVE-2026-73008, CVE-2026-73007, CVE-2026-73026, CVE-2026-78447, CVE-2026-78448, CVE-2026-83971, CVE-2026-83954, CVE-2026-83967, CVE-2026-83970, CVE-2026-83972, CVE-2026-83968, CVE-2026-83973, CVE-2026-83981, CVE-2026-83977, CVE-2026-83978, CVE-2026-83982, CVE-2026-83980, CVE-2026-83987, CVE-2026-83983, CVE-2026-83985.

CVE-2026-83976

A heap-based buffer overflow vulnerability in the Windows Biometric Service enables an authorized local attacker to elevate their privileges to a higher level of access.

Affected products:

Windows Biometric Service

Source: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-83976

Related in this roundup: CVE-2026-69293, CVE-2026-69298, CVE-2026-69323, CVE-2026-69583, CVE-2026-69589, CVE-2026-69580, CVE-2026-69476, CVE-2026-69787, CVE-2026-77489, CVE-2026-83955, CVE-2026-83986, CVE-2026-83969, CVE-2026-83988, CVE-2026-83979, CVE-2026-83974, CVE-2026-83975, CVE-2026-69727, CVE-2026-69826, CVE-2026-69738, CVE-2026-69773, CVE-2026-70573, CVE-2026-70572, CVE-2026-70581, CVE-2026-72941, CVE-2026-69352, CVE-2026-69489, CVE-2026-69593, CVE-2026-72995, CVE-2026-72988, CVE-2026-72990, CVE-2026-72991, CVE-2026-72992, CVE-2026-72993, CVE-2026-72994, CVE-2026-72996, CVE-2026-72997, CVE-2026-73002, CVE-2026-73020, CVE-2026-73000, CVE-2026-73001, CVE-2026-73021, CVE-2026-73015, CVE-2026-73011, CVE-2026-73008, CVE-2026-73007, CVE-2026-73026, CVE-2026-78447, CVE-2026-78448, CVE-2026-83971, CVE-2026-83954, CVE-2026-83967, CVE-2026-83970, CVE-2026-83972, CVE-2026-83968, CVE-2026-83973, CVE-2026-83981, CVE-2026-83977, CVE-2026-83978, CVE-2026-83982, CVE-2026-83980, CVE-2026-83987, CVE-2026-83983, CVE-2026-83985.

CVE-2026-70290

CVE-2026-70290 is an information disclosure vulnerability in the Windows Win32 Kernel Subsystem caused by the use of uninitialized resources. An authenticated attacker can exploit this locally to read sensitive data from kernel memory.

Affected products:

Windows

Source: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-70290

Related in this roundup: CVE-2026-81963, CVE-2026-85880, CVE-2026-69496, CVE-2026-69586, CVE-2026-69768, CVE-2026-73025, CVE-2026-56172, CVE-2026-68832, CVE-2026-68834, CVE-2026-68838, CVE-2026-68841, CVE-2026-68875, CVE-2026-68877, CVE-2026-68880, CVE-2026-69265, CVE-2026-69270, CVE-2026-69274, CVE-2026-69275, CVE-2026-69280, CVE-2026-69283, CVE-2026-69284, CVE-2026-69289, CVE-2026-69296, CVE-2026-69300, CVE-2026-69301, CVE-2026-69307, CVE-2026-69312, CVE-2026-69314, CVE-2026-69332, CVE-2026-69333, CVE-2026-69335, CVE-2026-68833, CVE-2026-68851, CVE-2026-69366, CVE-2026-69337, CVE-2026-69347, CVE-2026-69379, CVE-2026-69390, CVE-2026-69401, CVE-2026-69413, CVE-2026-69420, CVE-2026-69429, CVE-2026-69448, CVE-2026-69455, CVE-2026-69532, CVE-2026-69472, CVE-2026-69479, CVE-2026-69531, CVE-2026-69517, CVE-2026-69505, CVE-2026-69504, CVE-2026-69527, CVE-2026-69549, CVE-2026-69588, CVE-2026-69609, CVE-2026-69648, CVE-2026-69689, CVE-2026-69790, CVE-2026-69638, CVE-2026-69859, CVE-2026-69717, CVE-2026-69711, CVE-2026-69875, CVE-2026-69889, CVE-2026-69757, CVE-2026-69741, CVE-2026-69762, CVE-2026-69744, CVE-2026-69832, CVE-2026-69691, CVE-2026-69808, CVE-2026-69775, CVE-2026-69822, CVE-2026-69770, CVE-2026-69676, CVE-2026-70289, CVE-2026-70563, CVE-2026-71329, CVE-2026-71332, CVE-2026-71350, CVE-2026-71348, CVE-2026-71345, CVE-2026-69469, CVE-2026-69501, CVE-2026-69548, CVE-2026-69846, CVE-2026-70283, CVE-2026-72981, CVE-2026-77491, CVE-2026-77492, CVE-2026-77503, CVE-2026-80093, CVE-2026-72949, CVE-2026-70019, CVE-2026-72940, CVE-2026-69573, CVE-2026-83991, CVE-2026-83999, CVE-2026-69321, CVE-2026-69316, CVE-2026-69340, CVE-2026-69348, CVE-2026-69350, CVE-2026-69353, CVE-2026-69357, CVE-2026-69393, CVE-2026-69410, CVE-2026-69421, CVE-2026-69428, CVE-2026-69425, CVE-2026-69427, CVE-2026-69434, CVE-2026-69456, CVE-2026-69459, CVE-2026-69478, CVE-2026-69561, CVE-2026-69512, CVE-2026-69498, CVE-2026-69571, CVE-2026-69535, CVE-2026-69538, CVE-2026-69591, CVE-2026-69566, CVE-2026-69567, CVE-2026-69584, CVE-2026-69617, CVE-2026-69630, CVE-2026-69610, CVE-2026-69881, CVE-2026-69680, CVE-2026-69619, CVE-2026-69685, CVE-2026-69643, CVE-2026-69687, CVE-2026-69791, CVE-2026-69707, CVE-2026-69652, CVE-2026-69834, CVE-2026-69709, CVE-2026-69844, CVE-2026-69814, CVE-2026-69731, CVE-2026-69706, CVE-2026-69779, CVE-2026-69895, CVE-2026-69792, CVE-2026-69853, CVE-2026-69761, CVE-2026-69785, CVE-2026-69818, CVE-2026-69786, CVE-2026-69874, CVE-2026-70565, CVE-2026-70574, CVE-2026-70569, CVE-2026-70575, CVE-2026-71349, CVE-2026-72927, CVE-2026-72952, CVE-2026-72942, CVE-2026-72966, CVE-2026-72967, CVE-2026-69426, CVE-2026-69564, CVE-2026-72985, CVE-2026-73019, CVE-2026-78451, CVE-2026-78452, CVE-2026-83940, CVE-2026-69598, CVE-2026-83995, CVE-2026-83501, CVE-2026-83498.

CVE-2026-83991

CVE-2026-83991 is a vulnerability in the Windows Cloud Files Mini Filter Driver caused by missing authentication for a critical function. An attacker with local access can exploit this flaw to perform unauthorized tampering with file system operations.

Affected products:

Windows

Source: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-83991

Related in this roundup: CVE-2026-81963, CVE-2026-85880, CVE-2026-69496, CVE-2026-69586, CVE-2026-69768, CVE-2026-73025, CVE-2026-56172, CVE-2026-68832, CVE-2026-68834, CVE-2026-68838, CVE-2026-68841, CVE-2026-68875, CVE-2026-68877, CVE-2026-68880, CVE-2026-69265, CVE-2026-69270, CVE-2026-69274, CVE-2026-69275, CVE-2026-69280, CVE-2026-69283, CVE-2026-69284, CVE-2026-69289, CVE-2026-69296, CVE-2026-69300, CVE-2026-69301, CVE-2026-69307, CVE-2026-69312, CVE-2026-69314, CVE-2026-69332, CVE-2026-69333, CVE-2026-69335, CVE-2026-68833, CVE-2026-68851, CVE-2026-69366, CVE-2026-69337, CVE-2026-69347, CVE-2026-69379, CVE-2026-69390, CVE-2026-69401, CVE-2026-69413, CVE-2026-69420, CVE-2026-69429, CVE-2026-69448, CVE-2026-69455, CVE-2026-69532, CVE-2026-69472, CVE-2026-69479, CVE-2026-69531, CVE-2026-69517, CVE-2026-69505, CVE-2026-69504, CVE-2026-69527, CVE-2026-69549, CVE-2026-69588, CVE-2026-69609, CVE-2026-69648, CVE-2026-69689, CVE-2026-69790, CVE-2026-69638, CVE-2026-69859, CVE-2026-69717, CVE-2026-69711, CVE-2026-69875, CVE-2026-69889, CVE-2026-69757, CVE-2026-69741, CVE-2026-69762, CVE-2026-69744, CVE-2026-69832, CVE-2026-69691, CVE-2026-69808, CVE-2026-69775, CVE-2026-69822, CVE-2026-69770, CVE-2026-69676, CVE-2026-70289, CVE-2026-70563, CVE-2026-71329, CVE-2026-71332, CVE-2026-71350, CVE-2026-71348, CVE-2026-71345, CVE-2026-69469, CVE-2026-69501, CVE-2026-69548, CVE-2026-69846, CVE-2026-70283, CVE-2026-72981, CVE-2026-77491, CVE-2026-77492, CVE-2026-77503, CVE-2026-80093, CVE-2026-72949, CVE-2026-70019, CVE-2026-72940, CVE-2026-69573, CVE-2026-70290, CVE-2026-83999, CVE-2026-69321, CVE-2026-69316, CVE-2026-69340, CVE-2026-69348, CVE-2026-69350, CVE-2026-69353, CVE-2026-69357, CVE-2026-69393, CVE-2026-69410, CVE-2026-69421, CVE-2026-69428, CVE-2026-69425, CVE-2026-69427, CVE-2026-69434, CVE-2026-69456, CVE-2026-69459, CVE-2026-69478, CVE-2026-69561, CVE-2026-69512, CVE-2026-69498, CVE-2026-69571, CVE-2026-69535, CVE-2026-69538, CVE-2026-69591, CVE-2026-69566, CVE-2026-69567, CVE-2026-69584, CVE-2026-69617, CVE-2026-69630, CVE-2026-69610, CVE-2026-69881, CVE-2026-69680, CVE-2026-69619, CVE-2026-69685, CVE-2026-69643, CVE-2026-69687, CVE-2026-69791, CVE-2026-69707, CVE-2026-69652, CVE-2026-69834, CVE-2026-69709, CVE-2026-69844, CVE-2026-69814, CVE-2026-69731, CVE-2026-69706, CVE-2026-69779, CVE-2026-69895, CVE-2026-69792, CVE-2026-69853, CVE-2026-69761, CVE-2026-69785, CVE-2026-69818, CVE-2026-69786, CVE-2026-69874, CVE-2026-70565, CVE-2026-70574, CVE-2026-70569, CVE-2026-70575, CVE-2026-71349, CVE-2026-72927, CVE-2026-72952, CVE-2026-72942, CVE-2026-72966, CVE-2026-72967, CVE-2026-69426, CVE-2026-69564, CVE-2026-72985, CVE-2026-73019, CVE-2026-78451, CVE-2026-78452, CVE-2026-83940, CVE-2026-69598, CVE-2026-83995, CVE-2026-83501, CVE-2026-83498.

CVE-2026-83996

A heap-based buffer overflow vulnerability in Windows Error Reporting allows an authenticated local attacker to escalate privileges to higher integrity levels.

Affected products:

Windows Error Reporting

Source: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-83996

Related in this roundup: CVE-2026-68894, CVE-2026-69362, CVE-2026-69436, CVE-2026-69513, CVE-2026-69450, CVE-2026-69684, CVE-2026-69896, CVE-2026-69433, CVE-2026-69462, CVE-2026-69482, CVE-2026-69612.

CVE-2026-83998

CVE-2026-83998 is a heap-based buffer overflow vulnerability in the Microsoft Remote Desktop Client, allowing an unauthenticated remote attacker to achieve arbitrary code execution over the network.

Affected products:

Remote Desktop Client

Source: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-83998

Related in this roundup: CVE-2026-68828, CVE-2026-69485, CVE-2026-77896, CVE-2026-78463, CVE-2026-80074, CVE-2026-80077, CVE-2026-69317, CVE-2026-69358.

CVE-2026-83999

The Windows Resilient File System (ReFS) Deduplication Service contains a vulnerability due to improper link resolution before file access. An authorized local attacker can exploit this flaw to perform unauthorized file operations that lead to elevation of privileges on the host system.

Affected products:

Windows

Source: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-83999

Related in this roundup: CVE-2026-81963, CVE-2026-85880, CVE-2026-69496, CVE-2026-69586, CVE-2026-69768, CVE-2026-73025, CVE-2026-56172, CVE-2026-68832, CVE-2026-68834, CVE-2026-68838, CVE-2026-68841, CVE-2026-68875, CVE-2026-68877, CVE-2026-68880, CVE-2026-69265, CVE-2026-69270, CVE-2026-69274, CVE-2026-69275, CVE-2026-69280, CVE-2026-69283, CVE-2026-69284, CVE-2026-69289, CVE-2026-69296, CVE-2026-69300, CVE-2026-69301, CVE-2026-69307, CVE-2026-69312, CVE-2026-69314, CVE-2026-69332, CVE-2026-69333, CVE-2026-69335, CVE-2026-68833, CVE-2026-68851, CVE-2026-69366, CVE-2026-69337, CVE-2026-69347, CVE-2026-69379, CVE-2026-69390, CVE-2026-69401, CVE-2026-69413, CVE-2026-69420, CVE-2026-69429, CVE-2026-69448, CVE-2026-69455, CVE-2026-69532, CVE-2026-69472, CVE-2026-69479, CVE-2026-69531, CVE-2026-69517, CVE-2026-69505, CVE-2026-69504, CVE-2026-69527, CVE-2026-69549, CVE-2026-69588, CVE-2026-69609, CVE-2026-69648, CVE-2026-69689, CVE-2026-69790, CVE-2026-69638, CVE-2026-69859, CVE-2026-69717, CVE-2026-69711, CVE-2026-69875, CVE-2026-69889, CVE-2026-69757, CVE-2026-69741, CVE-2026-69762, CVE-2026-69744, CVE-2026-69832, CVE-2026-69691, CVE-2026-69808, CVE-2026-69775, CVE-2026-69822, CVE-2026-69770, CVE-2026-69676, CVE-2026-70289, CVE-2026-70563, CVE-2026-71329, CVE-2026-71332, CVE-2026-71350, CVE-2026-71348, CVE-2026-71345, CVE-2026-69469, CVE-2026-69501, CVE-2026-69548, CVE-2026-69846, CVE-2026-70283, CVE-2026-72981, CVE-2026-77491, CVE-2026-77492, CVE-2026-77503, CVE-2026-80093, CVE-2026-72949, CVE-2026-70019, CVE-2026-72940, CVE-2026-69573, CVE-2026-70290, CVE-2026-83991, CVE-2026-69321, CVE-2026-69316, CVE-2026-69340, CVE-2026-69348, CVE-2026-69350, CVE-2026-69353, CVE-2026-69357, CVE-2026-69393, CVE-2026-69410, CVE-2026-69421, CVE-2026-69428, CVE-2026-69425, CVE-2026-69427, CVE-2026-69434, CVE-2026-69456, CVE-2026-69459, CVE-2026-69478, CVE-2026-69561, CVE-2026-69512, CVE-2026-69498, CVE-2026-69571, CVE-2026-69535, CVE-2026-69538, CVE-2026-69591, CVE-2026-69566, CVE-2026-69567, CVE-2026-69584, CVE-2026-69617, CVE-2026-69630, CVE-2026-69610, CVE-2026-69881, CVE-2026-69680, CVE-2026-69619, CVE-2026-69685, CVE-2026-69643, CVE-2026-69687, CVE-2026-69791, CVE-2026-69707, CVE-2026-69652, CVE-2026-69834, CVE-2026-69709, CVE-2026-69844, CVE-2026-69814, CVE-2026-69731, CVE-2026-69706, CVE-2026-69779, CVE-2026-69895, CVE-2026-69792, CVE-2026-69853, CVE-2026-69761, CVE-2026-69785, CVE-2026-69818, CVE-2026-69786, CVE-2026-69874, CVE-2026-70565, CVE-2026-70574, CVE-2026-70569, CVE-2026-70575, CVE-2026-71349, CVE-2026-72927, CVE-2026-72952, CVE-2026-72942, CVE-2026-72966, CVE-2026-72967, CVE-2026-69426, CVE-2026-69564, CVE-2026-72985, CVE-2026-73019, CVE-2026-78451, CVE-2026-78452, CVE-2026-83940, CVE-2026-69598, CVE-2026-83995, CVE-2026-83501, CVE-2026-83498.

CVE-2026-84001

A vulnerability in the Windows Key Distribution Center allows an unauthorized remote attacker to trigger an out-of-bounds read, resulting in a denial-of-service condition affecting the authentication service.

Affected products:

Windows Key Distribution Center

Source: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-84001

Related in this roundup: CVE-2026-69712.

CVE-2026-85877

CVE-2026-85877 describes a heap-based buffer overflow vulnerability in the Windows Print Spooler component that enables an unauthenticated attacker to achieve remote code execution over a network connection.

Affected products:

Windows Print Spooler

Source: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-85877

Related in this roundup: CVE-2026-68835, CVE-2026-68848, CVE-2026-69309, CVE-2026-69552, CVE-2026-69838, CVE-2026-70564, CVE-2026-69344, CVE-2026-69346, CVE-2026-69569, CVE-2026-69921.

CVE-2026-62762

CVE-2026-62762 describes a vulnerability in Microsoft Active Directory Domain Services that allows an unauthenticated or authenticated attacker to trigger a denial of service condition. Successful exploitation results in the disruption of directory services, impacting authentication and authorization processes across the domain.

Affected products:

Active Directory Domain Services

Source: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-62762

Related in this roundup: CVE-2026-62813, CVE-2026-69359, CVE-2026-69524, CVE-2026-69546, CVE-2026-69809.

CVE-2026-66816

CVE-2026-66816 is a security feature bypass vulnerability in Microsoft SQL Server caused by insufficient logging. An authorized attacker can exploit this over the network to circumvent established security mechanisms.

Affected products:

SQL Server

Source: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-66816

Related in this roundup: CVE-2026-65669, CVE-2026-47297, CVE-2026-66814, CVE-2026-66818, CVE-2026-66819, CVE-2026-66820, CVE-2026-67368, CVE-2026-67370, CVE-2026-67373, CVE-2026-67376, CVE-2026-67378, CVE-2026-67379, CVE-2026-67380, CVE-2026-67381, CVE-2026-67384, CVE-2026-67385, CVE-2026-67388, CVE-2026-67631, CVE-2026-67636, CVE-2026-67638, CVE-2026-67639, CVE-2026-67642, CVE-2026-67643, CVE-2026-68775, CVE-2026-68786, CVE-2026-68787, CVE-2026-77482, CVE-2026-67629, CVE-2026-67630, CVE-2026-67633, CVE-2026-68781, CVE-2026-68784, CVE-2026-68785, CVE-2026-67383, CVE-2026-67389, CVE-2026-73029, CVE-2026-67386, CVE-2026-67390, CVE-2026-67393, CVE-2026-67641, CVE-2026-67648, CVE-2026-68776, CVE-2026-68777, CVE-2026-68778, CVE-2026-68779, CVE-2026-68780, CVE-2026-73028, CVE-2026-77480, CVE-2026-77483, CVE-2026-77484, CVE-2026-77487, CVE-2026-77485, CVE-2026-77486, CVE-2026-77488, CVE-2026-69562, CVE-2026-78456, CVE-2026-67369, CVE-2026-67624, CVE-2026-67645, CVE-2026-77481.

CVE-2026-67386

CVE-2026-67386 is an information disclosure vulnerability in Microsoft SQL Server caused by the use of an uninitialized resource. An authorized attacker can exploit this flaw to read sensitive data over a network without requiring elevated privileges.

Affected products:

SQL Server

Source: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-67386

Related in this roundup: CVE-2026-65669, CVE-2026-47297, CVE-2026-66814, CVE-2026-66818, CVE-2026-66819, CVE-2026-66820, CVE-2026-67368, CVE-2026-67370, CVE-2026-67373, CVE-2026-67376, CVE-2026-67378, CVE-2026-67379, CVE-2026-67380, CVE-2026-67381, CVE-2026-67384, CVE-2026-67385, CVE-2026-67388, CVE-2026-67631, CVE-2026-67636, CVE-2026-67638, CVE-2026-67639, CVE-2026-67642, CVE-2026-67643, CVE-2026-68775, CVE-2026-68786, CVE-2026-68787, CVE-2026-77482, CVE-2026-67629, CVE-2026-67630, CVE-2026-67633, CVE-2026-68781, CVE-2026-68784, CVE-2026-68785, CVE-2026-67383, CVE-2026-67389, CVE-2026-73029, CVE-2026-66816, CVE-2026-67390, CVE-2026-67393, CVE-2026-67641, CVE-2026-67648, CVE-2026-68776, CVE-2026-68777, CVE-2026-68778, CVE-2026-68779, CVE-2026-68780, CVE-2026-73028, CVE-2026-77480, CVE-2026-77483, CVE-2026-77484, CVE-2026-77487, CVE-2026-77485, CVE-2026-77486, CVE-2026-77488, CVE-2026-69562, CVE-2026-78456, CVE-2026-67369, CVE-2026-67624, CVE-2026-67645, CVE-2026-77481.

CVE-2026-67390

CVE-2026-67390 is an information disclosure vulnerability in Microsoft SQL Server caused by a buffer over-read. An authorized attacker can leverage this flaw to access sensitive information over a network connection.

Affected products:

SQL Server

Source: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-67390

Related in this roundup: CVE-2026-65669, CVE-2026-47297, CVE-2026-66814, CVE-2026-66818, CVE-2026-66819, CVE-2026-66820, CVE-2026-67368, CVE-2026-67370, CVE-2026-67373, CVE-2026-67376, CVE-2026-67378, CVE-2026-67379, CVE-2026-67380, CVE-2026-67381, CVE-2026-67384, CVE-2026-67385, CVE-2026-67388, CVE-2026-67631, CVE-2026-67636, CVE-2026-67638, CVE-2026-67639, CVE-2026-67642, CVE-2026-67643, CVE-2026-68775, CVE-2026-68786, CVE-2026-68787, CVE-2026-77482, CVE-2026-67629, CVE-2026-67630, CVE-2026-67633, CVE-2026-68781, CVE-2026-68784, CVE-2026-68785, CVE-2026-67383, CVE-2026-67389, CVE-2026-73029, CVE-2026-66816, CVE-2026-67386, CVE-2026-67393, CVE-2026-67641, CVE-2026-67648, CVE-2026-68776, CVE-2026-68777, CVE-2026-68778, CVE-2026-68779, CVE-2026-68780, CVE-2026-73028, CVE-2026-77480, CVE-2026-77483, CVE-2026-77484, CVE-2026-77487, CVE-2026-77485, CVE-2026-77486, CVE-2026-77488, CVE-2026-69562, CVE-2026-78456, CVE-2026-67369, CVE-2026-67624, CVE-2026-67645, CVE-2026-77481.

CVE-2026-67393

CVE-2026-67393 is an information disclosure vulnerability in Microsoft SQL Server stemming from a buffer over-read. An authorized attacker can exploit this flaw over a network to gain unauthorized access to sensitive information.

Affected products:

SQL Server

Source: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-67393

Related in this roundup: CVE-2026-65669, CVE-2026-47297, CVE-2026-66814, CVE-2026-66818, CVE-2026-66819, CVE-2026-66820, CVE-2026-67368, CVE-2026-67370, CVE-2026-67373, CVE-2026-67376, CVE-2026-67378, CVE-2026-67379, CVE-2026-67380, CVE-2026-67381, CVE-2026-67384, CVE-2026-67385, CVE-2026-67388, CVE-2026-67631, CVE-2026-67636, CVE-2026-67638, CVE-2026-67639, CVE-2026-67642, CVE-2026-67643, CVE-2026-68775, CVE-2026-68786, CVE-2026-68787, CVE-2026-77482, CVE-2026-67629, CVE-2026-67630, CVE-2026-67633, CVE-2026-68781, CVE-2026-68784, CVE-2026-68785, CVE-2026-67383, CVE-2026-67389, CVE-2026-73029, CVE-2026-66816, CVE-2026-67386, CVE-2026-67390, CVE-2026-67641, CVE-2026-67648, CVE-2026-68776, CVE-2026-68777, CVE-2026-68778, CVE-2026-68779, CVE-2026-68780, CVE-2026-73028, CVE-2026-77480, CVE-2026-77483, CVE-2026-77484, CVE-2026-77487, CVE-2026-77485, CVE-2026-77486, CVE-2026-77488, CVE-2026-69562, CVE-2026-78456, CVE-2026-67369, CVE-2026-67624, CVE-2026-67645, CVE-2026-77481.

CVE-2026-67641

CVE-2026-67641 is a denial of service vulnerability in Microsoft SQL Server caused by an integer overflow or wraparound condition. An authorized attacker can exploit this flaw over a network to cause the service to become unresponsive or crash.

Affected products:

SQL Server

Source: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-67641

Related in this roundup: CVE-2026-65669, CVE-2026-47297, CVE-2026-66814, CVE-2026-66818, CVE-2026-66819, CVE-2026-66820, CVE-2026-67368, CVE-2026-67370, CVE-2026-67373, CVE-2026-67376, CVE-2026-67378, CVE-2026-67379, CVE-2026-67380, CVE-2026-67381, CVE-2026-67384, CVE-2026-67385, CVE-2026-67388, CVE-2026-67631, CVE-2026-67636, CVE-2026-67638, CVE-2026-67639, CVE-2026-67642, CVE-2026-67643, CVE-2026-68775, CVE-2026-68786, CVE-2026-68787, CVE-2026-77482, CVE-2026-67629, CVE-2026-67630, CVE-2026-67633, CVE-2026-68781, CVE-2026-68784, CVE-2026-68785, CVE-2026-67383, CVE-2026-67389, CVE-2026-73029, CVE-2026-66816, CVE-2026-67386, CVE-2026-67390, CVE-2026-67393, CVE-2026-67648, CVE-2026-68776, CVE-2026-68777, CVE-2026-68778, CVE-2026-68779, CVE-2026-68780, CVE-2026-73028, CVE-2026-77480, CVE-2026-77483, CVE-2026-77484, CVE-2026-77487, CVE-2026-77485, CVE-2026-77486, CVE-2026-77488, CVE-2026-69562, CVE-2026-78456, CVE-2026-67369, CVE-2026-67624, CVE-2026-67645, CVE-2026-77481.

CVE-2026-67648

CVE-2026-67648 describes an information disclosure vulnerability in Microsoft SQL Server stemming from the use of an uninitialized resource. An authorized attacker on the network can leverage this flaw to access sensitive information that should otherwise be protected, potentially leading to unauthorized data exposure.

Affected products:

SQL Server

Source: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-67648

Related in this roundup: CVE-2026-65669, CVE-2026-47297, CVE-2026-66814, CVE-2026-66818, CVE-2026-66819, CVE-2026-66820, CVE-2026-67368, CVE-2026-67370, CVE-2026-67373, CVE-2026-67376, CVE-2026-67378, CVE-2026-67379, CVE-2026-67380, CVE-2026-67381, CVE-2026-67384, CVE-2026-67385, CVE-2026-67388, CVE-2026-67631, CVE-2026-67636, CVE-2026-67638, CVE-2026-67639, CVE-2026-67642, CVE-2026-67643, CVE-2026-68775, CVE-2026-68786, CVE-2026-68787, CVE-2026-77482, CVE-2026-67629, CVE-2026-67630, CVE-2026-67633, CVE-2026-68781, CVE-2026-68784, CVE-2026-68785, CVE-2026-67383, CVE-2026-67389, CVE-2026-73029, CVE-2026-66816, CVE-2026-67386, CVE-2026-67390, CVE-2026-67393, CVE-2026-67641, CVE-2026-68776, CVE-2026-68777, CVE-2026-68778, CVE-2026-68779, CVE-2026-68780, CVE-2026-73028, CVE-2026-77480, CVE-2026-77483, CVE-2026-77484, CVE-2026-77487, CVE-2026-77485, CVE-2026-77486, CVE-2026-77488, CVE-2026-69562, CVE-2026-78456, CVE-2026-67369, CVE-2026-67624, CVE-2026-67645, CVE-2026-77481.

CVE-2026-68776

CVE-2026-68776 describes an information disclosure vulnerability in Microsoft SQL Server stemming from the use of an uninitialized resource. An authorized attacker can exploit this flaw to read sensitive data over a network, although the vulnerability requires prior authentication to the database environment.

Affected products:

SQL Server

Source: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-68776

Related in this roundup: CVE-2026-65669, CVE-2026-47297, CVE-2026-66814, CVE-2026-66818, CVE-2026-66819, CVE-2026-66820, CVE-2026-67368, CVE-2026-67370, CVE-2026-67373, CVE-2026-67376, CVE-2026-67378, CVE-2026-67379, CVE-2026-67380, CVE-2026-67381, CVE-2026-67384, CVE-2026-67385, CVE-2026-67388, CVE-2026-67631, CVE-2026-67636, CVE-2026-67638, CVE-2026-67639, CVE-2026-67642, CVE-2026-67643, CVE-2026-68775, CVE-2026-68786, CVE-2026-68787, CVE-2026-77482, CVE-2026-67629, CVE-2026-67630, CVE-2026-67633, CVE-2026-68781, CVE-2026-68784, CVE-2026-68785, CVE-2026-67383, CVE-2026-67389, CVE-2026-73029, CVE-2026-66816, CVE-2026-67386, CVE-2026-67390, CVE-2026-67393, CVE-2026-67641, CVE-2026-67648, CVE-2026-68777, CVE-2026-68778, CVE-2026-68779, CVE-2026-68780, CVE-2026-73028, CVE-2026-77480, CVE-2026-77483, CVE-2026-77484, CVE-2026-77487, CVE-2026-77485, CVE-2026-77486, CVE-2026-77488, CVE-2026-69562, CVE-2026-78456, CVE-2026-67369, CVE-2026-67624, CVE-2026-67645, CVE-2026-77481.

CVE-2026-68777

CVE-2026-68777 is an out-of-bounds read vulnerability in Microsoft SQL Server that allows an authenticated attacker to disclose sensitive information over the network.

Affected products:

SQL Server

Source: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-68777

Related in this roundup: CVE-2026-65669, CVE-2026-47297, CVE-2026-66814, CVE-2026-66818, CVE-2026-66819, CVE-2026-66820, CVE-2026-67368, CVE-2026-67370, CVE-2026-67373, CVE-2026-67376, CVE-2026-67378, CVE-2026-67379, CVE-2026-67380, CVE-2026-67381, CVE-2026-67384, CVE-2026-67385, CVE-2026-67388, CVE-2026-67631, CVE-2026-67636, CVE-2026-67638, CVE-2026-67639, CVE-2026-67642, CVE-2026-67643, CVE-2026-68775, CVE-2026-68786, CVE-2026-68787, CVE-2026-77482, CVE-2026-67629, CVE-2026-67630, CVE-2026-67633, CVE-2026-68781, CVE-2026-68784, CVE-2026-68785, CVE-2026-67383, CVE-2026-67389, CVE-2026-73029, CVE-2026-66816, CVE-2026-67386, CVE-2026-67390, CVE-2026-67393, CVE-2026-67641, CVE-2026-67648, CVE-2026-68776, CVE-2026-68778, CVE-2026-68779, CVE-2026-68780, CVE-2026-73028, CVE-2026-77480, CVE-2026-77483, CVE-2026-77484, CVE-2026-77487, CVE-2026-77485, CVE-2026-77486, CVE-2026-77488, CVE-2026-69562, CVE-2026-78456, CVE-2026-67369, CVE-2026-67624, CVE-2026-67645, CVE-2026-77481.

CVE-2026-68778

CVE-2026-68778 describes an out-of-bounds read vulnerability in Microsoft SQL Server. An authorized attacker can exploit this flaw to disclose sensitive information over a network.

Affected products:

SQL Server

Source: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-68778

Related in this roundup: CVE-2026-65669, CVE-2026-47297, CVE-2026-66814, CVE-2026-66818, CVE-2026-66819, CVE-2026-66820, CVE-2026-67368, CVE-2026-67370, CVE-2026-67373, CVE-2026-67376, CVE-2026-67378, CVE-2026-67379, CVE-2026-67380, CVE-2026-67381, CVE-2026-67384, CVE-2026-67385, CVE-2026-67388, CVE-2026-67631, CVE-2026-67636, CVE-2026-67638, CVE-2026-67639, CVE-2026-67642, CVE-2026-67643, CVE-2026-68775, CVE-2026-68786, CVE-2026-68787, CVE-2026-77482, CVE-2026-67629, CVE-2026-67630, CVE-2026-67633, CVE-2026-68781, CVE-2026-68784, CVE-2026-68785, CVE-2026-67383, CVE-2026-67389, CVE-2026-73029, CVE-2026-66816, CVE-2026-67386, CVE-2026-67390, CVE-2026-67393, CVE-2026-67641, CVE-2026-67648, CVE-2026-68776, CVE-2026-68777, CVE-2026-68779, CVE-2026-68780, CVE-2026-73028, CVE-2026-77480, CVE-2026-77483, CVE-2026-77484, CVE-2026-77487, CVE-2026-77485, CVE-2026-77486, CVE-2026-77488, CVE-2026-69562, CVE-2026-78456, CVE-2026-67369, CVE-2026-67624, CVE-2026-67645, CVE-2026-77481.

CVE-2026-68779

CVE-2026-68779 describes an out-of-bounds read vulnerability in Microsoft SQL Server that allows an authenticated attacker to disclose sensitive information over the network. Detection engineering efforts should focus on anomalous read patterns or unexpected data access requests within SQL Server traffic.

Affected products:

SQL Server

Source: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-68779

Related in this roundup: CVE-2026-65669, CVE-2026-47297, CVE-2026-66814, CVE-2026-66818, CVE-2026-66819, CVE-2026-66820, CVE-2026-67368, CVE-2026-67370, CVE-2026-67373, CVE-2026-67376, CVE-2026-67378, CVE-2026-67379, CVE-2026-67380, CVE-2026-67381, CVE-2026-67384, CVE-2026-67385, CVE-2026-67388, CVE-2026-67631, CVE-2026-67636, CVE-2026-67638, CVE-2026-67639, CVE-2026-67642, CVE-2026-67643, CVE-2026-68775, CVE-2026-68786, CVE-2026-68787, CVE-2026-77482, CVE-2026-67629, CVE-2026-67630, CVE-2026-67633, CVE-2026-68781, CVE-2026-68784, CVE-2026-68785, CVE-2026-67383, CVE-2026-67389, CVE-2026-73029, CVE-2026-66816, CVE-2026-67386, CVE-2026-67390, CVE-2026-67393, CVE-2026-67641, CVE-2026-67648, CVE-2026-68776, CVE-2026-68777, CVE-2026-68778, CVE-2026-68780, CVE-2026-73028, CVE-2026-77480, CVE-2026-77483, CVE-2026-77484, CVE-2026-77487, CVE-2026-77485, CVE-2026-77486, CVE-2026-77488, CVE-2026-69562, CVE-2026-78456, CVE-2026-67369, CVE-2026-67624, CVE-2026-67645, CVE-2026-77481.

CVE-2026-68780

CVE-2026-68780 is an out-of-bounds read vulnerability in Microsoft SQL Server that allows an authenticated attacker to perform unauthorized information disclosure over the network.

Affected products:

SQL Server

Source: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-68780

Related in this roundup: CVE-2026-65669, CVE-2026-47297, CVE-2026-66814, CVE-2026-66818, CVE-2026-66819, CVE-2026-66820, CVE-2026-67368, CVE-2026-67370, CVE-2026-67373, CVE-2026-67376, CVE-2026-67378, CVE-2026-67379, CVE-2026-67380, CVE-2026-67381, CVE-2026-67384, CVE-2026-67385, CVE-2026-67388, CVE-2026-67631, CVE-2026-67636, CVE-2026-67638, CVE-2026-67639, CVE-2026-67642, CVE-2026-67643, CVE-2026-68775, CVE-2026-68786, CVE-2026-68787, CVE-2026-77482, CVE-2026-67629, CVE-2026-67630, CVE-2026-67633, CVE-2026-68781, CVE-2026-68784, CVE-2026-68785, CVE-2026-67383, CVE-2026-67389, CVE-2026-73029, CVE-2026-66816, CVE-2026-67386, CVE-2026-67390, CVE-2026-67393, CVE-2026-67641, CVE-2026-67648, CVE-2026-68776, CVE-2026-68777, CVE-2026-68778, CVE-2026-68779, CVE-2026-73028, CVE-2026-77480, CVE-2026-77483, CVE-2026-77484, CVE-2026-77487, CVE-2026-77485, CVE-2026-77486, CVE-2026-77488, CVE-2026-69562, CVE-2026-78456, CVE-2026-67369, CVE-2026-67624, CVE-2026-67645, CVE-2026-77481.

CVE-2026-68831

CVE-2026-68831 is an information disclosure vulnerability in the Windows Defender Firewall Service. The vulnerability arises from improper handling of files or directories, which can be exploited by an authorized local attacker to gain unauthorized access to sensitive information.

Affected products:

Windows Defender Firewall Service

Source: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-68831

Related in this roundup: CVE-2026-70568.

CVE-2026-68843

CVE-2026-68843 is a use-after-free vulnerability in Microsoft Office Word that allows an authorized attacker to achieve local information disclosure. The vulnerability involves improper memory management which may be leveraged to read sensitive data from the application process memory.

Affected products:

Office Word

Source: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-68843

Related in this roundup: CVE-2026-69556, CVE-2026-69671, CVE-2026-69686, CVE-2026-69722, CVE-2026-69734, CVE-2026-69719, CVE-2026-69759, CVE-2026-69764, CVE-2026-78511, CVE-2026-78502, CVE-2026-78504, CVE-2026-78517, CVE-2026-69360, CVE-2026-72972, CVE-2026-72976, CVE-2026-77901, CVE-2026-77911, CVE-2026-78507, CVE-2026-78506, CVE-2026-78514, CVE-2026-78503, CVE-2026-78521, CVE-2026-78522, CVE-2026-78526, CVE-2026-80080, CVE-2026-83951, CVE-2026-83949.

CVE-2026-68842

CVE-2026-68842 is an information disclosure vulnerability in the Windows MIDI Service Module. An authorized local attacker can exploit this flaw to gain unauthorized access to sensitive system information, potentially facilitating further exploitation steps.

Affected products:

Windows MIDI Service Module

Source: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-68842

Related in this roundup: CVE-2026-69339, CVE-2026-69440, CVE-2026-69508, CVE-2026-69720, CVE-2026-78464.

CVE-2026-68874

An out-of-bounds read vulnerability exists in the Windows Program Compatibility Assistant Service that allows an authorized attacker to gain unauthorized access to information over the network.

Affected products:

Windows Program Compatibility Assistant Service

Source: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-68874

Related in this roundup: CVE-2026-68845, CVE-2026-68876, CVE-2026-69534, CVE-2026-69563, CVE-2026-68873.

CVE-2026-68852

CVE-2026-68852 is an information disclosure vulnerability in the Microsoft Account service stemming from the use of an uninitialized resource. An authorized attacker could potentially exploit this flaw to access sensitive information locally.

Affected products:

Microsoft Account

Source: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-68852

CVE-2026-68873

CVE-2026-68873 identifies an information disclosure vulnerability in the Windows Program Compatibility Assistant Service. The flaw allows an attacker with authorized local access to trigger the insertion of sensitive information into log files, potentially facilitating the exposure of system or user data.

Affected products:

Windows Program Compatibility Assistant Service

Source: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-68873

Related in this roundup: CVE-2026-68845, CVE-2026-68876, CVE-2026-69534, CVE-2026-69563, CVE-2026-68874.

CVE-2026-68898

A vulnerability in the Windows iSCSI implementation allows an unauthenticated remote attacker to trigger an out-of-bounds read condition, resulting in a denial of service (DoS) state on the affected system.

Affected products:

Windows iSCSI

Source: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-68898

Related in this roundup: CVE-2026-69628.

CVE-2026-68886

A use-after-free vulnerability exists in the Windows Network Connection Broker service that allows an authorized local attacker to perform an information disclosure attack.

Affected products:

Windows Network Connection Broker

Source: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-68886

CVE-2026-68891

CVE-2026-68891 is an information disclosure vulnerability residing in Microsoft Standard XPS. The vulnerability is caused by an out-of-bounds read, which permits a locally authenticated attacker to access sensitive information by exploiting the way the component processes XPS files.

Affected products:

Standard XPS

Source: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-68891

Related in this roundup: CVE-2026-69824, CVE-2026-68885, CVE-2026-68888, CVE-2026-68889, CVE-2026-68890, CVE-2026-68892, CVE-2026-68897, CVE-2026-69269, CVE-2026-69271, CVE-2026-69272, CVE-2026-69313, CVE-2026-69336, CVE-2026-68881, CVE-2026-69345, CVE-2026-69367, CVE-2026-69308, CVE-2026-69376.

CVE-2026-69288

CVE-2026-69288 is an information disclosure vulnerability in the Windows GDI+ component. The vulnerability is caused by the use of an uninitialized resource, which could allow a locally authenticated attacker to read sensitive information. Remediation involves applying security updates provided by Microsoft for the affected GDI+ component.

Affected products:

Windows GDI+

Source: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-69288

CVE-2026-68895

A numeric truncation error in the Internet Storage Name Service (iSNS) on Windows allows an authorized attacker to exploit the service to perform local information disclosure. The vulnerability involves improper handling of numeric data, leading to memory-related information leakage.

Affected products:

Internet Storage Name Service

Source: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-68895

CVE-2026-69286

An information disclosure vulnerability exists in the Windows USB Audio Class driver (usbaudio.sys) due to an out-of-bounds read. An authorized local attacker can exploit this vulnerability to disclose sensitive information from the system.

Affected products:

Windows USB Audio Class Driver

Source: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-69286

CVE-2026-69297

CVE-2026-69297 is an information disclosure vulnerability in the Windows DHCP Server component. The vulnerability arises due to the storage of passwords in a recoverable format, which can be exploited by an authorized attacker to access sensitive information over a network.

Affected products:

Windows DHCP Server

Source: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-69297

Related in this roundup: CVE-2026-69845, CVE-2026-72979, CVE-2026-69266, CVE-2026-69412, CVE-2026-69415, CVE-2026-69929, CVE-2026-69930, CVE-2026-70124, CVE-2026-77494, CVE-2026-77498, CVE-2026-77499, CVE-2026-77501, CVE-2026-77502, CVE-2026-77887, CVE-2026-77888, CVE-2026-77886, CVE-2026-77890, CVE-2026-77889, CVE-2026-77891, CVE-2026-77893, CVE-2026-77895, CVE-2026-70065, CVE-2026-69342, CVE-2026-69405, CVE-2026-69416, CVE-2026-69497, CVE-2026-69547, CVE-2026-69620, CVE-2026-69637, CVE-2026-69803, CVE-2026-69679, CVE-2026-69878, CVE-2026-69847, CVE-2026-69876, CVE-2026-69510.

CVE-2026-69294

Microsoft COM for Windows contains an information disclosure vulnerability where the generation of error messages can reveal sensitive information. An authorized local attacker can exploit this flaw to gain unauthorized access to protected data by triggering specific error conditions.

Affected products:

Source: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-69294

Related in this roundup: CVE-2026-69299.

CVE-2026-69321

CVE-2026-69321 describes a local tampering vulnerability in the Windows Power Dependency Coordinator due to missing authentication for critical functions. An authorized local attacker can exploit this flaw to manipulate system dependencies, potentially escalating privileges or causing unintended system behavior.

Affected products:

Windows

Source: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-69321

Related in this roundup: CVE-2026-81963, CVE-2026-85880, CVE-2026-69496, CVE-2026-69586, CVE-2026-69768, CVE-2026-73025, CVE-2026-56172, CVE-2026-68832, CVE-2026-68834, CVE-2026-68838, CVE-2026-68841, CVE-2026-68875, CVE-2026-68877, CVE-2026-68880, CVE-2026-69265, CVE-2026-69270, CVE-2026-69274, CVE-2026-69275, CVE-2026-69280, CVE-2026-69283, CVE-2026-69284, CVE-2026-69289, CVE-2026-69296, CVE-2026-69300, CVE-2026-69301, CVE-2026-69307, CVE-2026-69312, CVE-2026-69314, CVE-2026-69332, CVE-2026-69333, CVE-2026-69335, CVE-2026-68833, CVE-2026-68851, CVE-2026-69366, CVE-2026-69337, CVE-2026-69347, CVE-2026-69379, CVE-2026-69390, CVE-2026-69401, CVE-2026-69413, CVE-2026-69420, CVE-2026-69429, CVE-2026-69448, CVE-2026-69455, CVE-2026-69532, CVE-2026-69472, CVE-2026-69479, CVE-2026-69531, CVE-2026-69517, CVE-2026-69505, CVE-2026-69504, CVE-2026-69527, CVE-2026-69549, CVE-2026-69588, CVE-2026-69609, CVE-2026-69648, CVE-2026-69689, CVE-2026-69790, CVE-2026-69638, CVE-2026-69859, CVE-2026-69717, CVE-2026-69711, CVE-2026-69875, CVE-2026-69889, CVE-2026-69757, CVE-2026-69741, CVE-2026-69762, CVE-2026-69744, CVE-2026-69832, CVE-2026-69691, CVE-2026-69808, CVE-2026-69775, CVE-2026-69822, CVE-2026-69770, CVE-2026-69676, CVE-2026-70289, CVE-2026-70563, CVE-2026-71329, CVE-2026-71332, CVE-2026-71350, CVE-2026-71348, CVE-2026-71345, CVE-2026-69469, CVE-2026-69501, CVE-2026-69548, CVE-2026-69846, CVE-2026-70283, CVE-2026-72981, CVE-2026-77491, CVE-2026-77492, CVE-2026-77503, CVE-2026-80093, CVE-2026-72949, CVE-2026-70019, CVE-2026-72940, CVE-2026-69573, CVE-2026-70290, CVE-2026-83991, CVE-2026-83999, CVE-2026-69316, CVE-2026-69340, CVE-2026-69348, CVE-2026-69350, CVE-2026-69353, CVE-2026-69357, CVE-2026-69393, CVE-2026-69410, CVE-2026-69421, CVE-2026-69428, CVE-2026-69425, CVE-2026-69427, CVE-2026-69434, CVE-2026-69456, CVE-2026-69459, CVE-2026-69478, CVE-2026-69561, CVE-2026-69512, CVE-2026-69498, CVE-2026-69571, CVE-2026-69535, CVE-2026-69538, CVE-2026-69591, CVE-2026-69566, CVE-2026-69567, CVE-2026-69584, CVE-2026-69617, CVE-2026-69630, CVE-2026-69610, CVE-2026-69881, CVE-2026-69680, CVE-2026-69619, CVE-2026-69685, CVE-2026-69643, CVE-2026-69687, CVE-2026-69791, CVE-2026-69707, CVE-2026-69652, CVE-2026-69834, CVE-2026-69709, CVE-2026-69844, CVE-2026-69814, CVE-2026-69731, CVE-2026-69706, CVE-2026-69779, CVE-2026-69895, CVE-2026-69792, CVE-2026-69853, CVE-2026-69761, CVE-2026-69785, CVE-2026-69818, CVE-2026-69786, CVE-2026-69874, CVE-2026-70565, CVE-2026-70574, CVE-2026-70569, CVE-2026-70575, CVE-2026-71349, CVE-2026-72927, CVE-2026-72952, CVE-2026-72942, CVE-2026-72966, CVE-2026-72967, CVE-2026-69426, CVE-2026-69564, CVE-2026-72985, CVE-2026-73019, CVE-2026-78451, CVE-2026-78452, CVE-2026-83940, CVE-2026-69598, CVE-2026-83995, CVE-2026-83501, CVE-2026-83498.

CVE-2026-69303

The Microsoft Push Message Routing Service is vulnerable to an out-of-bounds read, which can be exploited by an authorized attacker to achieve local information disclosure. This vulnerability requires local access to the target system to execute the necessary commands to trigger the out-of-bounds memory read.

Affected products:

Push Message Routing Service

Source: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-69303

CVE-2026-69315

CVE-2026-69315 is an information disclosure vulnerability in the Windows License Manager that allows an authorized local attacker to access sensitive system information, potentially facilitating further exploitation.

Affected products:

Windows License Manager

Source: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-69315

Related in this roundup: CVE-2026-69281.

CVE-2026-69308

An out-of-bounds read vulnerability exists in Microsoft Standard XPS that allows an authorized local attacker to disclose sensitive information. This vulnerability could be leveraged to bypass security controls or gain unauthorized access to data stored or processed by the affected component.

Affected products:

Standard XPS

Source: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-69308

Related in this roundup: CVE-2026-69824, CVE-2026-68885, CVE-2026-68888, CVE-2026-68889, CVE-2026-68890, CVE-2026-68892, CVE-2026-68897, CVE-2026-69269, CVE-2026-69271, CVE-2026-69272, CVE-2026-69313, CVE-2026-69336, CVE-2026-68881, CVE-2026-69345, CVE-2026-69367, CVE-2026-68891, CVE-2026-69376.

CVE-2026-69318

CVE-2026-69318 is an out-of-bounds read vulnerability in the Windows Imaging Component that enables an authenticated attacker to perform local information disclosure. The flaw stems from improper memory handling within the imaging library, which could be exploited by a local user to access sensitive data.

Affected products:

Windows Imaging Component

Source: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-69318

Related in this roundup: CVE-2026-70296, CVE-2026-69860, CVE-2026-77495, CVE-2026-69499, CVE-2026-73023, CVE-2026-73013, CVE-2026-83992.

CVE-2026-69317

CVE-2026-69317 is an out-of-bounds read vulnerability in the Microsoft Windows Remote Desktop Client. An authorized attacker can exploit this flaw to perform unauthorized information disclosure over a network, potentially leaking sensitive data from the client's memory.

Affected products:

Remote Desktop Client

Source: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-69317

Related in this roundup: CVE-2026-68828, CVE-2026-69485, CVE-2026-77896, CVE-2026-78463, CVE-2026-80074, CVE-2026-80077, CVE-2026-83998, CVE-2026-69358.

CVE-2026-69316

CVE-2026-69316 describes a buffer over-read vulnerability within the Windows Overlay Filter. This vulnerability allows an authorized local attacker to perform an information disclosure attack, potentially gaining unauthorized access to sensitive memory contents.

Affected products:

Windows

Source: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-69316

Related in this roundup: CVE-2026-81963, CVE-2026-85880, CVE-2026-69496, CVE-2026-69586, CVE-2026-69768, CVE-2026-73025, CVE-2026-56172, CVE-2026-68832, CVE-2026-68834, CVE-2026-68838, CVE-2026-68841, CVE-2026-68875, CVE-2026-68877, CVE-2026-68880, CVE-2026-69265, CVE-2026-69270, CVE-2026-69274, CVE-2026-69275, CVE-2026-69280, CVE-2026-69283, CVE-2026-69284, CVE-2026-69289, CVE-2026-69296, CVE-2026-69300, CVE-2026-69301, CVE-2026-69307, CVE-2026-69312, CVE-2026-69314, CVE-2026-69332, CVE-2026-69333, CVE-2026-69335, CVE-2026-68833, CVE-2026-68851, CVE-2026-69366, CVE-2026-69337, CVE-2026-69347, CVE-2026-69379, CVE-2026-69390, CVE-2026-69401, CVE-2026-69413, CVE-2026-69420, CVE-2026-69429, CVE-2026-69448, CVE-2026-69455, CVE-2026-69532, CVE-2026-69472, CVE-2026-69479, CVE-2026-69531, CVE-2026-69517, CVE-2026-69505, CVE-2026-69504, CVE-2026-69527, CVE-2026-69549, CVE-2026-69588, CVE-2026-69609, CVE-2026-69648, CVE-2026-69689, CVE-2026-69790, CVE-2026-69638, CVE-2026-69859, CVE-2026-69717, CVE-2026-69711, CVE-2026-69875, CVE-2026-69889, CVE-2026-69757, CVE-2026-69741, CVE-2026-69762, CVE-2026-69744, CVE-2026-69832, CVE-2026-69691, CVE-2026-69808, CVE-2026-69775, CVE-2026-69822, CVE-2026-69770, CVE-2026-69676, CVE-2026-70289, CVE-2026-70563, CVE-2026-71329, CVE-2026-71332, CVE-2026-71350, CVE-2026-71348, CVE-2026-71345, CVE-2026-69469, CVE-2026-69501, CVE-2026-69548, CVE-2026-69846, CVE-2026-70283, CVE-2026-72981, CVE-2026-77491, CVE-2026-77492, CVE-2026-77503, CVE-2026-80093, CVE-2026-72949, CVE-2026-70019, CVE-2026-72940, CVE-2026-69573, CVE-2026-70290, CVE-2026-83991, CVE-2026-83999, CVE-2026-69321, CVE-2026-69340, CVE-2026-69348, CVE-2026-69350, CVE-2026-69353, CVE-2026-69357, CVE-2026-69393, CVE-2026-69410, CVE-2026-69421, CVE-2026-69428, CVE-2026-69425, CVE-2026-69427, CVE-2026-69434, CVE-2026-69456, CVE-2026-69459, CVE-2026-69478, CVE-2026-69561, CVE-2026-69512, CVE-2026-69498, CVE-2026-69571, CVE-2026-69535, CVE-2026-69538, CVE-2026-69591, CVE-2026-69566, CVE-2026-69567, CVE-2026-69584, CVE-2026-69617, CVE-2026-69630, CVE-2026-69610, CVE-2026-69881, CVE-2026-69680, CVE-2026-69619, CVE-2026-69685, CVE-2026-69643, CVE-2026-69687, CVE-2026-69791, CVE-2026-69707, CVE-2026-69652, CVE-2026-69834, CVE-2026-69709, CVE-2026-69844, CVE-2026-69814, CVE-2026-69731, CVE-2026-69706, CVE-2026-69779, CVE-2026-69895, CVE-2026-69792, CVE-2026-69853, CVE-2026-69761, CVE-2026-69785, CVE-2026-69818, CVE-2026-69786, CVE-2026-69874, CVE-2026-70565, CVE-2026-70574, CVE-2026-70569, CVE-2026-70575, CVE-2026-71349, CVE-2026-72927, CVE-2026-72952, CVE-2026-72942, CVE-2026-72966, CVE-2026-72967, CVE-2026-69426, CVE-2026-69564, CVE-2026-72985, CVE-2026-73019, CVE-2026-78451, CVE-2026-78452, CVE-2026-83940, CVE-2026-69598, CVE-2026-83995, CVE-2026-83501, CVE-2026-83498.

CVE-2026-69351

CVE-2026-69351 is an information disclosure vulnerability in the Windows Universal Plug and Play (UPnP) Device Host component. The vulnerability allows an attacker with authorized local access to exploit the service to expose private personal information. Detection efforts should focus on anomalous local service interaction patterns and unauthorized access attempts targeting the UPnP Device Host process.

Affected products:

Windows Universal Plug and Play (UPnP) Device Host

Source: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-69351

Related in this roundup: CVE-2026-68830.

CVE-2026-69340

CVE-2026-69340 is a heap-based buffer overflow vulnerability in the Windows NTFS file system, allowing an authenticated attacker to perform a privilege escalation attack over the network.

Affected products:

Windows

Source: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-69340

Related in this roundup: CVE-2026-81963, CVE-2026-85880, CVE-2026-69496, CVE-2026-69586, CVE-2026-69768, CVE-2026-73025, CVE-2026-56172, CVE-2026-68832, CVE-2026-68834, CVE-2026-68838, CVE-2026-68841, CVE-2026-68875, CVE-2026-68877, CVE-2026-68880, CVE-2026-69265, CVE-2026-69270, CVE-2026-69274, CVE-2026-69275, CVE-2026-69280, CVE-2026-69283, CVE-2026-69284, CVE-2026-69289, CVE-2026-69296, CVE-2026-69300, CVE-2026-69301, CVE-2026-69307, CVE-2026-69312, CVE-2026-69314, CVE-2026-69332, CVE-2026-69333, CVE-2026-69335, CVE-2026-68833, CVE-2026-68851, CVE-2026-69366, CVE-2026-69337, CVE-2026-69347, CVE-2026-69379, CVE-2026-69390, CVE-2026-69401, CVE-2026-69413, CVE-2026-69420, CVE-2026-69429, CVE-2026-69448, CVE-2026-69455, CVE-2026-69532, CVE-2026-69472, CVE-2026-69479, CVE-2026-69531, CVE-2026-69517, CVE-2026-69505, CVE-2026-69504, CVE-2026-69527, CVE-2026-69549, CVE-2026-69588, CVE-2026-69609, CVE-2026-69648, CVE-2026-69689, CVE-2026-69790, CVE-2026-69638, CVE-2026-69859, CVE-2026-69717, CVE-2026-69711, CVE-2026-69875, CVE-2026-69889, CVE-2026-69757, CVE-2026-69741, CVE-2026-69762, CVE-2026-69744, CVE-2026-69832, CVE-2026-69691, CVE-2026-69808, CVE-2026-69775, CVE-2026-69822, CVE-2026-69770, CVE-2026-69676, CVE-2026-70289, CVE-2026-70563, CVE-2026-71329, CVE-2026-71332, CVE-2026-71350, CVE-2026-71348, CVE-2026-71345, CVE-2026-69469, CVE-2026-69501, CVE-2026-69548, CVE-2026-69846, CVE-2026-70283, CVE-2026-72981, CVE-2026-77491, CVE-2026-77492, CVE-2026-77503, CVE-2026-80093, CVE-2026-72949, CVE-2026-70019, CVE-2026-72940, CVE-2026-69573, CVE-2026-70290, CVE-2026-83991, CVE-2026-83999, CVE-2026-69321, CVE-2026-69316, CVE-2026-69348, CVE-2026-69350, CVE-2026-69353, CVE-2026-69357, CVE-2026-69393, CVE-2026-69410, CVE-2026-69421, CVE-2026-69428, CVE-2026-69425, CVE-2026-69427, CVE-2026-69434, CVE-2026-69456, CVE-2026-69459, CVE-2026-69478, CVE-2026-69561, CVE-2026-69512, CVE-2026-69498, CVE-2026-69571, CVE-2026-69535, CVE-2026-69538, CVE-2026-69591, CVE-2026-69566, CVE-2026-69567, CVE-2026-69584, CVE-2026-69617, CVE-2026-69630, CVE-2026-69610, CVE-2026-69881, CVE-2026-69680, CVE-2026-69619, CVE-2026-69685, CVE-2026-69643, CVE-2026-69687, CVE-2026-69791, CVE-2026-69707, CVE-2026-69652, CVE-2026-69834, CVE-2026-69709, CVE-2026-69844, CVE-2026-69814, CVE-2026-69731, CVE-2026-69706, CVE-2026-69779, CVE-2026-69895, CVE-2026-69792, CVE-2026-69853, CVE-2026-69761, CVE-2026-69785, CVE-2026-69818, CVE-2026-69786, CVE-2026-69874, CVE-2026-70565, CVE-2026-70574, CVE-2026-70569, CVE-2026-70575, CVE-2026-71349, CVE-2026-72927, CVE-2026-72952, CVE-2026-72942, CVE-2026-72966, CVE-2026-72967, CVE-2026-69426, CVE-2026-69564, CVE-2026-72985, CVE-2026-73019, CVE-2026-78451, CVE-2026-78452, CVE-2026-83940, CVE-2026-69598, CVE-2026-83995, CVE-2026-83501, CVE-2026-83498.

CVE-2026-69342

CVE-2026-69342 describes an out-of-bounds read vulnerability in the Windows DHCP Server service. An unauthorized remote attacker can exploit this flaw by sending specifically crafted network traffic to the DHCP server, resulting in a denial-of-service condition.

Affected products:

Windows DHCP Server

Source: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-69342

Related in this roundup: CVE-2026-69845, CVE-2026-72979, CVE-2026-69266, CVE-2026-69412, CVE-2026-69415, CVE-2026-69929, CVE-2026-69930, CVE-2026-70124, CVE-2026-77494, CVE-2026-77498, CVE-2026-77499, CVE-2026-77501, CVE-2026-77502, CVE-2026-77887, CVE-2026-77888, CVE-2026-77886, CVE-2026-77890, CVE-2026-77889, CVE-2026-77891, CVE-2026-77893, CVE-2026-77895, CVE-2026-70065, CVE-2026-69297, CVE-2026-69405, CVE-2026-69416, CVE-2026-69497, CVE-2026-69547, CVE-2026-69620, CVE-2026-69637, CVE-2026-69803, CVE-2026-69679, CVE-2026-69878, CVE-2026-69847, CVE-2026-69876, CVE-2026-69510.

CVE-2026-69343

CVE-2026-69343 is an information disclosure vulnerability in the Windows Overlay Filter caused by an out-of-bounds read. An authorized local attacker can exploit this flaw to read sensitive data, potentially leading to unauthorized information access.

Affected products:

Windows Overlay Filter

Source: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-69343

Related in this roundup: CVE-2026-69368, CVE-2026-69371, CVE-2026-69373, CVE-2026-69474.

CVE-2026-69344

CVE-2026-69344 is an out-of-bounds read vulnerability in the Windows Print Spooler components. An authorized local attacker can exploit this flaw to disclose sensitive information from memory.

Affected products:

Windows Print Spooler

Source: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-69344

Related in this roundup: CVE-2026-68835, CVE-2026-68848, CVE-2026-69309, CVE-2026-69552, CVE-2026-69838, CVE-2026-70564, CVE-2026-85877, CVE-2026-69346, CVE-2026-69569, CVE-2026-69921.

CVE-2026-69346

CVE-2026-69346 is a heap-based buffer overflow vulnerability in Windows Print Spooler Components that allows an authenticated attacker to perform a privilege escalation attack over a network.

Affected products:

Windows Print Spooler

Source: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-69346

Related in this roundup: CVE-2026-68835, CVE-2026-68848, CVE-2026-69309, CVE-2026-69552, CVE-2026-69838, CVE-2026-70564, CVE-2026-85877, CVE-2026-69344, CVE-2026-69569, CVE-2026-69921.

CVE-2026-69348

CVE-2026-69348 describes a heap-based buffer overflow vulnerability in the Windows Win32k subsystem that can be exploited by an authorized local attacker to achieve privilege escalation on the affected host.

Affected products:

Windows

Source: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-69348

Related in this roundup: CVE-2026-81963, CVE-2026-85880, CVE-2026-69496, CVE-2026-69586, CVE-2026-69768, CVE-2026-73025, CVE-2026-56172, CVE-2026-68832, CVE-2026-68834, CVE-2026-68838, CVE-2026-68841, CVE-2026-68875, CVE-2026-68877, CVE-2026-68880, CVE-2026-69265, CVE-2026-69270, CVE-2026-69274, CVE-2026-69275, CVE-2026-69280, CVE-2026-69283, CVE-2026-69284, CVE-2026-69289, CVE-2026-69296, CVE-2026-69300, CVE-2026-69301, CVE-2026-69307, CVE-2026-69312, CVE-2026-69314, CVE-2026-69332, CVE-2026-69333, CVE-2026-69335, CVE-2026-68833, CVE-2026-68851, CVE-2026-69366, CVE-2026-69337, CVE-2026-69347, CVE-2026-69379, CVE-2026-69390, CVE-2026-69401, CVE-2026-69413, CVE-2026-69420, CVE-2026-69429, CVE-2026-69448, CVE-2026-69455, CVE-2026-69532, CVE-2026-69472, CVE-2026-69479, CVE-2026-69531, CVE-2026-69517, CVE-2026-69505, CVE-2026-69504, CVE-2026-69527, CVE-2026-69549, CVE-2026-69588, CVE-2026-69609, CVE-2026-69648, CVE-2026-69689, CVE-2026-69790, CVE-2026-69638, CVE-2026-69859, CVE-2026-69717, CVE-2026-69711, CVE-2026-69875, CVE-2026-69889, CVE-2026-69757, CVE-2026-69741, CVE-2026-69762, CVE-2026-69744, CVE-2026-69832, CVE-2026-69691, CVE-2026-69808, CVE-2026-69775, CVE-2026-69822, CVE-2026-69770, CVE-2026-69676, CVE-2026-70289, CVE-2026-70563, CVE-2026-71329, CVE-2026-71332, CVE-2026-71350, CVE-2026-71348, CVE-2026-71345, CVE-2026-69469, CVE-2026-69501, CVE-2026-69548, CVE-2026-69846, CVE-2026-70283, CVE-2026-72981, CVE-2026-77491, CVE-2026-77492, CVE-2026-77503, CVE-2026-80093, CVE-2026-72949, CVE-2026-70019, CVE-2026-72940, CVE-2026-69573, CVE-2026-70290, CVE-2026-83991, CVE-2026-83999, CVE-2026-69321, CVE-2026-69316, CVE-2026-69340, CVE-2026-69350, CVE-2026-69353, CVE-2026-69357, CVE-2026-69393, CVE-2026-69410, CVE-2026-69421, CVE-2026-69428, CVE-2026-69425, CVE-2026-69427, CVE-2026-69434, CVE-2026-69456, CVE-2026-69459, CVE-2026-69478, CVE-2026-69561, CVE-2026-69512, CVE-2026-69498, CVE-2026-69571, CVE-2026-69535, CVE-2026-69538, CVE-2026-69591, CVE-2026-69566, CVE-2026-69567, CVE-2026-69584, CVE-2026-69617, CVE-2026-69630, CVE-2026-69610, CVE-2026-69881, CVE-2026-69680, CVE-2026-69619, CVE-2026-69685, CVE-2026-69643, CVE-2026-69687, CVE-2026-69791, CVE-2026-69707, CVE-2026-69652, CVE-2026-69834, CVE-2026-69709, CVE-2026-69844, CVE-2026-69814, CVE-2026-69731, CVE-2026-69706, CVE-2026-69779, CVE-2026-69895, CVE-2026-69792, CVE-2026-69853, CVE-2026-69761, CVE-2026-69785, CVE-2026-69818, CVE-2026-69786, CVE-2026-69874, CVE-2026-70565, CVE-2026-70574, CVE-2026-70569, CVE-2026-70575, CVE-2026-71349, CVE-2026-72927, CVE-2026-72952, CVE-2026-72942, CVE-2026-72966, CVE-2026-72967, CVE-2026-69426, CVE-2026-69564, CVE-2026-72985, CVE-2026-73019, CVE-2026-78451, CVE-2026-78452, CVE-2026-83940, CVE-2026-69598, CVE-2026-83995, CVE-2026-83501, CVE-2026-83498.

CVE-2026-69350

CVE-2026-69350 is a privilege escalation vulnerability in the Windows Overlay Filter caused by a heap-based buffer overflow. An authorized local attacker can exploit this flaw to elevate their privileges on the system.

Affected products:

Windows

Source: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-69350

Related in this roundup: CVE-2026-81963, CVE-2026-85880, CVE-2026-69496, CVE-2026-69586, CVE-2026-69768, CVE-2026-73025, CVE-2026-56172, CVE-2026-68832, CVE-2026-68834, CVE-2026-68838, CVE-2026-68841, CVE-2026-68875, CVE-2026-68877, CVE-2026-68880, CVE-2026-69265, CVE-2026-69270, CVE-2026-69274, CVE-2026-69275, CVE-2026-69280, CVE-2026-69283, CVE-2026-69284, CVE-2026-69289, CVE-2026-69296, CVE-2026-69300, CVE-2026-69301, CVE-2026-69307, CVE-2026-69312, CVE-2026-69314, CVE-2026-69332, CVE-2026-69333, CVE-2026-69335, CVE-2026-68833, CVE-2026-68851, CVE-2026-69366, CVE-2026-69337, CVE-2026-69347, CVE-2026-69379, CVE-2026-69390, CVE-2026-69401, CVE-2026-69413, CVE-2026-69420, CVE-2026-69429, CVE-2026-69448, CVE-2026-69455, CVE-2026-69532, CVE-2026-69472, CVE-2026-69479, CVE-2026-69531, CVE-2026-69517, CVE-2026-69505, CVE-2026-69504, CVE-2026-69527, CVE-2026-69549, CVE-2026-69588, CVE-2026-69609, CVE-2026-69648, CVE-2026-69689, CVE-2026-69790, CVE-2026-69638, CVE-2026-69859, CVE-2026-69717, CVE-2026-69711, CVE-2026-69875, CVE-2026-69889, CVE-2026-69757, CVE-2026-69741, CVE-2026-69762, CVE-2026-69744, CVE-2026-69832, CVE-2026-69691, CVE-2026-69808, CVE-2026-69775, CVE-2026-69822, CVE-2026-69770, CVE-2026-69676, CVE-2026-70289, CVE-2026-70563, CVE-2026-71329, CVE-2026-71332, CVE-2026-71350, CVE-2026-71348, CVE-2026-71345, CVE-2026-69469, CVE-2026-69501, CVE-2026-69548, CVE-2026-69846, CVE-2026-70283, CVE-2026-72981, CVE-2026-77491, CVE-2026-77492, CVE-2026-77503, CVE-2026-80093, CVE-2026-72949, CVE-2026-70019, CVE-2026-72940, CVE-2026-69573, CVE-2026-70290, CVE-2026-83991, CVE-2026-83999, CVE-2026-69321, CVE-2026-69316, CVE-2026-69340, CVE-2026-69348, CVE-2026-69353, CVE-2026-69357, CVE-2026-69393, CVE-2026-69410, CVE-2026-69421, CVE-2026-69428, CVE-2026-69425, CVE-2026-69427, CVE-2026-69434, CVE-2026-69456, CVE-2026-69459, CVE-2026-69478, CVE-2026-69561, CVE-2026-69512, CVE-2026-69498, CVE-2026-69571, CVE-2026-69535, CVE-2026-69538, CVE-2026-69591, CVE-2026-69566, CVE-2026-69567, CVE-2026-69584, CVE-2026-69617, CVE-2026-69630, CVE-2026-69610, CVE-2026-69881, CVE-2026-69680, CVE-2026-69619, CVE-2026-69685, CVE-2026-69643, CVE-2026-69687, CVE-2026-69791, CVE-2026-69707, CVE-2026-69652, CVE-2026-69834, CVE-2026-69709, CVE-2026-69844, CVE-2026-69814, CVE-2026-69731, CVE-2026-69706, CVE-2026-69779, CVE-2026-69895, CVE-2026-69792, CVE-2026-69853, CVE-2026-69761, CVE-2026-69785, CVE-2026-69818, CVE-2026-69786, CVE-2026-69874, CVE-2026-70565, CVE-2026-70574, CVE-2026-70569, CVE-2026-70575, CVE-2026-71349, CVE-2026-72927, CVE-2026-72952, CVE-2026-72942, CVE-2026-72966, CVE-2026-72967, CVE-2026-69426, CVE-2026-69564, CVE-2026-72985, CVE-2026-73019, CVE-2026-78451, CVE-2026-78452, CVE-2026-83940, CVE-2026-69598, CVE-2026-83995, CVE-2026-83501, CVE-2026-83498.

CVE-2026-69353

CVE-2026-69353 is an out-of-bounds read vulnerability in the Windows Text Shaping component, which enables an authorized local attacker to potentially disclose sensitive information from the system memory.

Affected products:

Windows

Source: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-69353

Related in this roundup: CVE-2026-81963, CVE-2026-85880, CVE-2026-69496, CVE-2026-69586, CVE-2026-69768, CVE-2026-73025, CVE-2026-56172, CVE-2026-68832, CVE-2026-68834, CVE-2026-68838, CVE-2026-68841, CVE-2026-68875, CVE-2026-68877, CVE-2026-68880, CVE-2026-69265, CVE-2026-69270, CVE-2026-69274, CVE-2026-69275, CVE-2026-69280, CVE-2026-69283, CVE-2026-69284, CVE-2026-69289, CVE-2026-69296, CVE-2026-69300, CVE-2026-69301, CVE-2026-69307, CVE-2026-69312, CVE-2026-69314, CVE-2026-69332, CVE-2026-69333, CVE-2026-69335, CVE-2026-68833, CVE-2026-68851, CVE-2026-69366, CVE-2026-69337, CVE-2026-69347, CVE-2026-69379, CVE-2026-69390, CVE-2026-69401, CVE-2026-69413, CVE-2026-69420, CVE-2026-69429, CVE-2026-69448, CVE-2026-69455, CVE-2026-69532, CVE-2026-69472, CVE-2026-69479, CVE-2026-69531, CVE-2026-69517, CVE-2026-69505, CVE-2026-69504, CVE-2026-69527, CVE-2026-69549, CVE-2026-69588, CVE-2026-69609, CVE-2026-69648, CVE-2026-69689, CVE-2026-69790, CVE-2026-69638, CVE-2026-69859, CVE-2026-69717, CVE-2026-69711, CVE-2026-69875, CVE-2026-69889, CVE-2026-69757, CVE-2026-69741, CVE-2026-69762, CVE-2026-69744, CVE-2026-69832, CVE-2026-69691, CVE-2026-69808, CVE-2026-69775, CVE-2026-69822, CVE-2026-69770, CVE-2026-69676, CVE-2026-70289, CVE-2026-70563, CVE-2026-71329, CVE-2026-71332, CVE-2026-71350, CVE-2026-71348, CVE-2026-71345, CVE-2026-69469, CVE-2026-69501, CVE-2026-69548, CVE-2026-69846, CVE-2026-70283, CVE-2026-72981, CVE-2026-77491, CVE-2026-77492, CVE-2026-77503, CVE-2026-80093, CVE-2026-72949, CVE-2026-70019, CVE-2026-72940, CVE-2026-69573, CVE-2026-70290, CVE-2026-83991, CVE-2026-83999, CVE-2026-69321, CVE-2026-69316, CVE-2026-69340, CVE-2026-69348, CVE-2026-69350, CVE-2026-69357, CVE-2026-69393, CVE-2026-69410, CVE-2026-69421, CVE-2026-69428, CVE-2026-69425, CVE-2026-69427, CVE-2026-69434, CVE-2026-69456, CVE-2026-69459, CVE-2026-69478, CVE-2026-69561, CVE-2026-69512, CVE-2026-69498, CVE-2026-69571, CVE-2026-69535, CVE-2026-69538, CVE-2026-69591, CVE-2026-69566, CVE-2026-69567, CVE-2026-69584, CVE-2026-69617, CVE-2026-69630, CVE-2026-69610, CVE-2026-69881, CVE-2026-69680, CVE-2026-69619, CVE-2026-69685, CVE-2026-69643, CVE-2026-69687, CVE-2026-69791, CVE-2026-69707, CVE-2026-69652, CVE-2026-69834, CVE-2026-69709, CVE-2026-69844, CVE-2026-69814, CVE-2026-69731, CVE-2026-69706, CVE-2026-69779, CVE-2026-69895, CVE-2026-69792, CVE-2026-69853, CVE-2026-69761, CVE-2026-69785, CVE-2026-69818, CVE-2026-69786, CVE-2026-69874, CVE-2026-70565, CVE-2026-70574, CVE-2026-70569, CVE-2026-70575, CVE-2026-71349, CVE-2026-72927, CVE-2026-72952, CVE-2026-72942, CVE-2026-72966, CVE-2026-72967, CVE-2026-69426, CVE-2026-69564, CVE-2026-72985, CVE-2026-73019, CVE-2026-78451, CVE-2026-78452, CVE-2026-83940, CVE-2026-69598, CVE-2026-83995, CVE-2026-83501, CVE-2026-83498.

CVE-2026-69358

CVE-2026-69358 describes a remote code execution vulnerability in the Microsoft Remote Desktop Client caused by the use of an uninitialized resource. An authorized attacker can exploit this flaw to execute arbitrary code over the network.

Affected products:

Remote Desktop Client

Source: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-69358

Related in this roundup: CVE-2026-68828, CVE-2026-69485, CVE-2026-77896, CVE-2026-78463, CVE-2026-80074, CVE-2026-80077, CVE-2026-83998, CVE-2026-69317.

CVE-2026-69357

CVE-2026-69357 is a use-after-free vulnerability within the Windows Network Driver Interface Specification (NDIS). An authenticated attacker can exploit this flaw to execute code with elevated privileges, potentially leading to a full system compromise. Detection efforts should focus on monitoring for unusual activity originating from network stack operations or anomalous kernel-mode memory access patterns.

Affected products:

Windows

Source: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-69357

Related in this roundup: CVE-2026-81963, CVE-2026-85880, CVE-2026-69496, CVE-2026-69586, CVE-2026-69768, CVE-2026-73025, CVE-2026-56172, CVE-2026-68832, CVE-2026-68834, CVE-2026-68838, CVE-2026-68841, CVE-2026-68875, CVE-2026-68877, CVE-2026-68880, CVE-2026-69265, CVE-2026-69270, CVE-2026-69274, CVE-2026-69275, CVE-2026-69280, CVE-2026-69283, CVE-2026-69284, CVE-2026-69289, CVE-2026-69296, CVE-2026-69300, CVE-2026-69301, CVE-2026-69307, CVE-2026-69312, CVE-2026-69314, CVE-2026-69332, CVE-2026-69333, CVE-2026-69335, CVE-2026-68833, CVE-2026-68851, CVE-2026-69366, CVE-2026-69337, CVE-2026-69347, CVE-2026-69379, CVE-2026-69390, CVE-2026-69401, CVE-2026-69413, CVE-2026-69420, CVE-2026-69429, CVE-2026-69448, CVE-2026-69455, CVE-2026-69532, CVE-2026-69472, CVE-2026-69479, CVE-2026-69531, CVE-2026-69517, CVE-2026-69505, CVE-2026-69504, CVE-2026-69527, CVE-2026-69549, CVE-2026-69588, CVE-2026-69609, CVE-2026-69648, CVE-2026-69689, CVE-2026-69790, CVE-2026-69638, CVE-2026-69859, CVE-2026-69717, CVE-2026-69711, CVE-2026-69875, CVE-2026-69889, CVE-2026-69757, CVE-2026-69741, CVE-2026-69762, CVE-2026-69744, CVE-2026-69832, CVE-2026-69691, CVE-2026-69808, CVE-2026-69775, CVE-2026-69822, CVE-2026-69770, CVE-2026-69676, CVE-2026-70289, CVE-2026-70563, CVE-2026-71329, CVE-2026-71332, CVE-2026-71350, CVE-2026-71348, CVE-2026-71345, CVE-2026-69469, CVE-2026-69501, CVE-2026-69548, CVE-2026-69846, CVE-2026-70283, CVE-2026-72981, CVE-2026-77491, CVE-2026-77492, CVE-2026-77503, CVE-2026-80093, CVE-2026-72949, CVE-2026-70019, CVE-2026-72940, CVE-2026-69573, CVE-2026-70290, CVE-2026-83991, CVE-2026-83999, CVE-2026-69321, CVE-2026-69316, CVE-2026-69340, CVE-2026-69348, CVE-2026-69350, CVE-2026-69353, CVE-2026-69393, CVE-2026-69410, CVE-2026-69421, CVE-2026-69428, CVE-2026-69425, CVE-2026-69427, CVE-2026-69434, CVE-2026-69456, CVE-2026-69459, CVE-2026-69478, CVE-2026-69561, CVE-2026-69512, CVE-2026-69498, CVE-2026-69571, CVE-2026-69535, CVE-2026-69538, CVE-2026-69591, CVE-2026-69566, CVE-2026-69567, CVE-2026-69584, CVE-2026-69617, CVE-2026-69630, CVE-2026-69610, CVE-2026-69881, CVE-2026-69680, CVE-2026-69619, CVE-2026-69685, CVE-2026-69643, CVE-2026-69687, CVE-2026-69791, CVE-2026-69707, CVE-2026-69652, CVE-2026-69834, CVE-2026-69709, CVE-2026-69844, CVE-2026-69814, CVE-2026-69731, CVE-2026-69706, CVE-2026-69779, CVE-2026-69895, CVE-2026-69792, CVE-2026-69853, CVE-2026-69761, CVE-2026-69785, CVE-2026-69818, CVE-2026-69786, CVE-2026-69874, CVE-2026-70565, CVE-2026-70574, CVE-2026-70569, CVE-2026-70575, CVE-2026-71349, CVE-2026-72927, CVE-2026-72952, CVE-2026-72942, CVE-2026-72966, CVE-2026-72967, CVE-2026-69426, CVE-2026-69564, CVE-2026-72985, CVE-2026-73019, CVE-2026-78451, CVE-2026-78452, CVE-2026-83940, CVE-2026-69598, CVE-2026-83995, CVE-2026-83501, CVE-2026-83498.

CVE-2026-69376

An out-of-bounds read vulnerability exists in Microsoft Standard XPS, which may allow an authorized, locally authenticated attacker to disclose sensitive information due to improper memory handling.

Affected products:

Standard XPS

Source: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-69376

Related in this roundup: CVE-2026-69824, CVE-2026-68885, CVE-2026-68888, CVE-2026-68889, CVE-2026-68890, CVE-2026-68892, CVE-2026-68897, CVE-2026-69269, CVE-2026-69271, CVE-2026-69272, CVE-2026-69313, CVE-2026-69336, CVE-2026-68881, CVE-2026-69345, CVE-2026-69367, CVE-2026-68891, CVE-2026-69308.

CVE-2026-69384

A denial of service vulnerability exists in the Virtual Hard Disk (VHD) Miniport Driver on Windows systems. Exploitation of this vulnerability may allow an attacker to cause the system to stop responding, typically resulting in a crash.

Affected products:

Virtual Hard Disk (VHD) Miniport Driver

Source: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-69384

Related in this roundup: CVE-2026-69541, CVE-2026-69681, CVE-2026-81355, CVE-2026-69611.

CVE-2026-69372

CVE-2026-69372 describes an out-of-bounds read vulnerability in the Windows Network File System component that allows an authorized attacker to trigger a denial-of-service condition via a network-based attack vector.

Affected products:

Windows Network File System

Source: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-69372

Related in this roundup: CVE-2026-69772.

CVE-2026-69360

CVE-2026-69360 is a heap-based buffer overflow vulnerability in Microsoft Office Word that enables a remote, unauthorized attacker to execute arbitrary code. Detection engineers should monitor for abnormal child processes spawned by Winword.exe and anomalous heap memory allocation patterns associated with Word document processing.

Affected products:

Office Word

Source: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-69360

Related in this roundup: CVE-2026-69556, CVE-2026-69671, CVE-2026-69686, CVE-2026-69722, CVE-2026-69734, CVE-2026-69719, CVE-2026-69759, CVE-2026-69764, CVE-2026-78511, CVE-2026-78502, CVE-2026-78504, CVE-2026-78517, CVE-2026-68843, CVE-2026-72972, CVE-2026-72976, CVE-2026-77901, CVE-2026-77911, CVE-2026-78507, CVE-2026-78506, CVE-2026-78514, CVE-2026-78503, CVE-2026-78521, CVE-2026-78522, CVE-2026-78526, CVE-2026-80080, CVE-2026-83951, CVE-2026-83949.

CVE-2026-69365

A vulnerability in the Microsoft Local Security Authority Server (lsasrv) allows an authorized attacker to perform an out-of-bounds read, leading to elevation of privileges over a network. This flaw requires the attacker to be authenticated to the network environment to trigger the exploitation of the LSA process.

Affected products:

Local Security Authority Server

Source: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-69365

Related in this roundup: CVE-2026-69277, CVE-2026-69594.

CVE-2026-69364

CVE-2026-69364 is a race condition vulnerability in the Windows Print Spooler Components that permits an authenticated attacker to perform a privilege escalation attack over the network due to improper synchronization during concurrent execution.

Affected products:

Windows Print Spooler Components

Source: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-69364

CVE-2026-69369

CVE-2026-69369 describes an out-of-bounds read vulnerability in the Windows DNS service that allows an authorized local attacker to perform information disclosure.

Affected products:

Windows DNS

Source: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-69369

Related in this roundup: CVE-2026-69730, CVE-2026-69310, CVE-2026-70091, CVE-2026-69631, CVE-2026-72948, CVE-2026-69672, CVE-2026-72987.

CVE-2026-69403

CVE-2026-69403 is an information disclosure vulnerability in the Windows SMB Server caused by missing authorization checks. An attacker with local access can exploit this flaw to view sensitive information on the host system.

Affected products:

Windows SMB Server

Source: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-69403

Related in this roundup: CVE-2026-69374.

CVE-2026-69373

CVE-2026-69373 is an elevation of privilege vulnerability in the Windows Overlay Filter caused by an integer overflow or wraparound. An authorized local attacker can exploit this flaw to gain elevated privileges on the affected system.

Affected products:

Windows Overlay Filter

Source: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-69373

Related in this roundup: CVE-2026-69368, CVE-2026-69371, CVE-2026-69343, CVE-2026-69474.

CVE-2026-69374

CVE-2026-69374 is a denial-of-service vulnerability in the Windows SMB Server caused by a lack of resource allocation limits or throttling. An authorized network attacker can exploit this condition to crash the service or exhaust resources, resulting in a denial-of-service condition.

Affected products:

Windows SMB Server

Source: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-69374

Related in this roundup: CVE-2026-69403.

CVE-2026-69385

CVE-2026-69385 is a race condition vulnerability in the Windows TCP/IP stack that enables a local, authenticated attacker to achieve privilege escalation via improper synchronization of shared resources.

Affected products:

Windows TCP/IP

Source: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-69385

Related in this roundup: CVE-2026-69404, CVE-2026-69793.

CVE-2026-69386

A heap-based buffer overflow vulnerability in Microsoft Windows Media Foundation allows a remote, unauthorized attacker to execute arbitrary code on affected Windows systems, classified as a remote code execution (RCE) vulnerability.

Affected products:

Windows Media Foundation

Source: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-69386

Related in this roundup: CVE-2026-69408, CVE-2026-62744, CVE-2026-62706, CVE-2026-69511, CVE-2026-69601.

CVE-2026-69388

CVE-2026-69388 describes a use-after-free vulnerability within the Windows Bluetooth Service, allowing a local, authorized attacker to achieve privilege escalation.

Affected products:

Windows Bluetooth Service

Source: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-69388

Related in this roundup: CVE-2026-69398.

CVE-2026-69393

An out-of-bounds read vulnerability in the Windows Spaceport.sys driver allows an authorized attacker to gain unauthorized access to sensitive information over the network.

Affected products:

Windows

Source: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-69393

Related in this roundup: CVE-2026-81963, CVE-2026-85880, CVE-2026-69496, CVE-2026-69586, CVE-2026-69768, CVE-2026-73025, CVE-2026-56172, CVE-2026-68832, CVE-2026-68834, CVE-2026-68838, CVE-2026-68841, CVE-2026-68875, CVE-2026-68877, CVE-2026-68880, CVE-2026-69265, CVE-2026-69270, CVE-2026-69274, CVE-2026-69275, CVE-2026-69280, CVE-2026-69283, CVE-2026-69284, CVE-2026-69289, CVE-2026-69296, CVE-2026-69300, CVE-2026-69301, CVE-2026-69307, CVE-2026-69312, CVE-2026-69314, CVE-2026-69332, CVE-2026-69333, CVE-2026-69335, CVE-2026-68833, CVE-2026-68851, CVE-2026-69366, CVE-2026-69337, CVE-2026-69347, CVE-2026-69379, CVE-2026-69390, CVE-2026-69401, CVE-2026-69413, CVE-2026-69420, CVE-2026-69429, CVE-2026-69448, CVE-2026-69455, CVE-2026-69532, CVE-2026-69472, CVE-2026-69479, CVE-2026-69531, CVE-2026-69517, CVE-2026-69505, CVE-2026-69504, CVE-2026-69527, CVE-2026-69549, CVE-2026-69588, CVE-2026-69609, CVE-2026-69648, CVE-2026-69689, CVE-2026-69790, CVE-2026-69638, CVE-2026-69859, CVE-2026-69717, CVE-2026-69711, CVE-2026-69875, CVE-2026-69889, CVE-2026-69757, CVE-2026-69741, CVE-2026-69762, CVE-2026-69744, CVE-2026-69832, CVE-2026-69691, CVE-2026-69808, CVE-2026-69775, CVE-2026-69822, CVE-2026-69770, CVE-2026-69676, CVE-2026-70289, CVE-2026-70563, CVE-2026-71329, CVE-2026-71332, CVE-2026-71350, CVE-2026-71348, CVE-2026-71345, CVE-2026-69469, CVE-2026-69501, CVE-2026-69548, CVE-2026-69846, CVE-2026-70283, CVE-2026-72981, CVE-2026-77491, CVE-2026-77492, CVE-2026-77503, CVE-2026-80093, CVE-2026-72949, CVE-2026-70019, CVE-2026-72940, CVE-2026-69573, CVE-2026-70290, CVE-2026-83991, CVE-2026-83999, CVE-2026-69321, CVE-2026-69316, CVE-2026-69340, CVE-2026-69348, CVE-2026-69350, CVE-2026-69353, CVE-2026-69357, CVE-2026-69410, CVE-2026-69421, CVE-2026-69428, CVE-2026-69425, CVE-2026-69427, CVE-2026-69434, CVE-2026-69456, CVE-2026-69459, CVE-2026-69478, CVE-2026-69561, CVE-2026-69512, CVE-2026-69498, CVE-2026-69571, CVE-2026-69535, CVE-2026-69538, CVE-2026-69591, CVE-2026-69566, CVE-2026-69567, CVE-2026-69584, CVE-2026-69617, CVE-2026-69630, CVE-2026-69610, CVE-2026-69881, CVE-2026-69680, CVE-2026-69619, CVE-2026-69685, CVE-2026-69643, CVE-2026-69687, CVE-2026-69791, CVE-2026-69707, CVE-2026-69652, CVE-2026-69834, CVE-2026-69709, CVE-2026-69844, CVE-2026-69814, CVE-2026-69731, CVE-2026-69706, CVE-2026-69779, CVE-2026-69895, CVE-2026-69792, CVE-2026-69853, CVE-2026-69761, CVE-2026-69785, CVE-2026-69818, CVE-2026-69786, CVE-2026-69874, CVE-2026-70565, CVE-2026-70574, CVE-2026-70569, CVE-2026-70575, CVE-2026-71349, CVE-2026-72927, CVE-2026-72952, CVE-2026-72942, CVE-2026-72966, CVE-2026-72967, CVE-2026-69426, CVE-2026-69564, CVE-2026-72985, CVE-2026-73019, CVE-2026-78451, CVE-2026-78452, CVE-2026-83940, CVE-2026-69598, CVE-2026-83995, CVE-2026-83501, CVE-2026-83498.

CVE-2026-69396

CVE-2026-69396 is a use-after-free vulnerability within the Windows Network Driver Interface Specification (NDIS) that allows an authenticated attacker to execute code or gain elevated privileges on the target system via network exploitation.

Affected products:

Windows NDIS

Source: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-69396

CVE-2026-69410

CVE-2026-69410 is a use-after-free vulnerability in the Windows Win32k component that allows an authorized local attacker to achieve privilege escalation by exploiting kernel-mode memory management flaws.

Affected products:

Windows

Source: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-69410

Related in this roundup: CVE-2026-81963, CVE-2026-85880, CVE-2026-69496, CVE-2026-69586, CVE-2026-69768, CVE-2026-73025, CVE-2026-56172, CVE-2026-68832, CVE-2026-68834, CVE-2026-68838, CVE-2026-68841, CVE-2026-68875, CVE-2026-68877, CVE-2026-68880, CVE-2026-69265, CVE-2026-69270, CVE-2026-69274, CVE-2026-69275, CVE-2026-69280, CVE-2026-69283, CVE-2026-69284, CVE-2026-69289, CVE-2026-69296, CVE-2026-69300, CVE-2026-69301, CVE-2026-69307, CVE-2026-69312, CVE-2026-69314, CVE-2026-69332, CVE-2026-69333, CVE-2026-69335, CVE-2026-68833, CVE-2026-68851, CVE-2026-69366, CVE-2026-69337, CVE-2026-69347, CVE-2026-69379, CVE-2026-69390, CVE-2026-69401, CVE-2026-69413, CVE-2026-69420, CVE-2026-69429, CVE-2026-69448, CVE-2026-69455, CVE-2026-69532, CVE-2026-69472, CVE-2026-69479, CVE-2026-69531, CVE-2026-69517, CVE-2026-69505, CVE-2026-69504, CVE-2026-69527, CVE-2026-69549, CVE-2026-69588, CVE-2026-69609, CVE-2026-69648, CVE-2026-69689, CVE-2026-69790, CVE-2026-69638, CVE-2026-69859, CVE-2026-69717, CVE-2026-69711, CVE-2026-69875, CVE-2026-69889, CVE-2026-69757, CVE-2026-69741, CVE-2026-69762, CVE-2026-69744, CVE-2026-69832, CVE-2026-69691, CVE-2026-69808, CVE-2026-69775, CVE-2026-69822, CVE-2026-69770, CVE-2026-69676, CVE-2026-70289, CVE-2026-70563, CVE-2026-71329, CVE-2026-71332, CVE-2026-71350, CVE-2026-71348, CVE-2026-71345, CVE-2026-69469, CVE-2026-69501, CVE-2026-69548, CVE-2026-69846, CVE-2026-70283, CVE-2026-72981, CVE-2026-77491, CVE-2026-77492, CVE-2026-77503, CVE-2026-80093, CVE-2026-72949, CVE-2026-70019, CVE-2026-72940, CVE-2026-69573, CVE-2026-70290, CVE-2026-83991, CVE-2026-83999, CVE-2026-69321, CVE-2026-69316, CVE-2026-69340, CVE-2026-69348, CVE-2026-69350, CVE-2026-69353, CVE-2026-69357, CVE-2026-69393, CVE-2026-69421, CVE-2026-69428, CVE-2026-69425, CVE-2026-69427, CVE-2026-69434, CVE-2026-69456, CVE-2026-69459, CVE-2026-69478, CVE-2026-69561, CVE-2026-69512, CVE-2026-69498, CVE-2026-69571, CVE-2026-69535, CVE-2026-69538, CVE-2026-69591, CVE-2026-69566, CVE-2026-69567, CVE-2026-69584, CVE-2026-69617, CVE-2026-69630, CVE-2026-69610, CVE-2026-69881, CVE-2026-69680, CVE-2026-69619, CVE-2026-69685, CVE-2026-69643, CVE-2026-69687, CVE-2026-69791, CVE-2026-69707, CVE-2026-69652, CVE-2026-69834, CVE-2026-69709, CVE-2026-69844, CVE-2026-69814, CVE-2026-69731, CVE-2026-69706, CVE-2026-69779, CVE-2026-69895, CVE-2026-69792, CVE-2026-69853, CVE-2026-69761, CVE-2026-69785, CVE-2026-69818, CVE-2026-69786, CVE-2026-69874, CVE-2026-70565, CVE-2026-70574, CVE-2026-70569, CVE-2026-70575, CVE-2026-71349, CVE-2026-72927, CVE-2026-72952, CVE-2026-72942, CVE-2026-72966, CVE-2026-72967, CVE-2026-69426, CVE-2026-69564, CVE-2026-72985, CVE-2026-73019, CVE-2026-78451, CVE-2026-78452, CVE-2026-83940, CVE-2026-69598, CVE-2026-83995, CVE-2026-83501, CVE-2026-83498.

CVE-2026-69398

A race condition vulnerability exists in the Windows Bluetooth Service, enabling a local, authorized attacker to achieve privilege escalation via improper synchronization of shared resources.

Affected products:

Windows Bluetooth Service

Source: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-69398

Related in this roundup: CVE-2026-69388.

CVE-2026-69421

CVE-2026-69421 describes an integer underflow vulnerability in the Windows kernel-mode driver, which can be exploited by an authenticated local attacker to achieve privilege escalation.

Affected products:

Windows

Source: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-69421

Related in this roundup: CVE-2026-81963, CVE-2026-85880, CVE-2026-69496, CVE-2026-69586, CVE-2026-69768, CVE-2026-73025, CVE-2026-56172, CVE-2026-68832, CVE-2026-68834, CVE-2026-68838, CVE-2026-68841, CVE-2026-68875, CVE-2026-68877, CVE-2026-68880, CVE-2026-69265, CVE-2026-69270, CVE-2026-69274, CVE-2026-69275, CVE-2026-69280, CVE-2026-69283, CVE-2026-69284, CVE-2026-69289, CVE-2026-69296, CVE-2026-69300, CVE-2026-69301, CVE-2026-69307, CVE-2026-69312, CVE-2026-69314, CVE-2026-69332, CVE-2026-69333, CVE-2026-69335, CVE-2026-68833, CVE-2026-68851, CVE-2026-69366, CVE-2026-69337, CVE-2026-69347, CVE-2026-69379, CVE-2026-69390, CVE-2026-69401, CVE-2026-69413, CVE-2026-69420, CVE-2026-69429, CVE-2026-69448, CVE-2026-69455, CVE-2026-69532, CVE-2026-69472, CVE-2026-69479, CVE-2026-69531, CVE-2026-69517, CVE-2026-69505, CVE-2026-69504, CVE-2026-69527, CVE-2026-69549, CVE-2026-69588, CVE-2026-69609, CVE-2026-69648, CVE-2026-69689, CVE-2026-69790, CVE-2026-69638, CVE-2026-69859, CVE-2026-69717, CVE-2026-69711, CVE-2026-69875, CVE-2026-69889, CVE-2026-69757, CVE-2026-69741, CVE-2026-69762, CVE-2026-69744, CVE-2026-69832, CVE-2026-69691, CVE-2026-69808, CVE-2026-69775, CVE-2026-69822, CVE-2026-69770, CVE-2026-69676, CVE-2026-70289, CVE-2026-70563, CVE-2026-71329, CVE-2026-71332, CVE-2026-71350, CVE-2026-71348, CVE-2026-71345, CVE-2026-69469, CVE-2026-69501, CVE-2026-69548, CVE-2026-69846, CVE-2026-70283, CVE-2026-72981, CVE-2026-77491, CVE-2026-77492, CVE-2026-77503, CVE-2026-80093, CVE-2026-72949, CVE-2026-70019, CVE-2026-72940, CVE-2026-69573, CVE-2026-70290, CVE-2026-83991, CVE-2026-83999, CVE-2026-69321, CVE-2026-69316, CVE-2026-69340, CVE-2026-69348, CVE-2026-69350, CVE-2026-69353, CVE-2026-69357, CVE-2026-69393, CVE-2026-69410, CVE-2026-69428, CVE-2026-69425, CVE-2026-69427, CVE-2026-69434, CVE-2026-69456, CVE-2026-69459, CVE-2026-69478, CVE-2026-69561, CVE-2026-69512, CVE-2026-69498, CVE-2026-69571, CVE-2026-69535, CVE-2026-69538, CVE-2026-69591, CVE-2026-69566, CVE-2026-69567, CVE-2026-69584, CVE-2026-69617, CVE-2026-69630, CVE-2026-69610, CVE-2026-69881, CVE-2026-69680, CVE-2026-69619, CVE-2026-69685, CVE-2026-69643, CVE-2026-69687, CVE-2026-69791, CVE-2026-69707, CVE-2026-69652, CVE-2026-69834, CVE-2026-69709, CVE-2026-69844, CVE-2026-69814, CVE-2026-69731, CVE-2026-69706, CVE-2026-69779, CVE-2026-69895, CVE-2026-69792, CVE-2026-69853, CVE-2026-69761, CVE-2026-69785, CVE-2026-69818, CVE-2026-69786, CVE-2026-69874, CVE-2026-70565, CVE-2026-70574, CVE-2026-70569, CVE-2026-70575, CVE-2026-71349, CVE-2026-72927, CVE-2026-72952, CVE-2026-72942, CVE-2026-72966, CVE-2026-72967, CVE-2026-69426, CVE-2026-69564, CVE-2026-72985, CVE-2026-73019, CVE-2026-78451, CVE-2026-78452, CVE-2026-83940, CVE-2026-69598, CVE-2026-83995, CVE-2026-83501, CVE-2026-83498.

CVE-2026-69405

CVE-2026-69405 describes a memory leak vulnerability in the Windows DHCP Server service. An authorized attacker on an adjacent network can trigger a denial of service condition by exploiting a missing release of memory after the effective lifetime of a lease, leading to resource exhaustion.

Affected products:

Windows DHCP Server

Source: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-69405

Related in this roundup: CVE-2026-69845, CVE-2026-72979, CVE-2026-69266, CVE-2026-69412, CVE-2026-69415, CVE-2026-69929, CVE-2026-69930, CVE-2026-70124, CVE-2026-77494, CVE-2026-77498, CVE-2026-77499, CVE-2026-77501, CVE-2026-77502, CVE-2026-77887, CVE-2026-77888, CVE-2026-77886, CVE-2026-77890, CVE-2026-77889, CVE-2026-77891, CVE-2026-77893, CVE-2026-77895, CVE-2026-70065, CVE-2026-69297, CVE-2026-69342, CVE-2026-69416, CVE-2026-69497, CVE-2026-69547, CVE-2026-69620, CVE-2026-69637, CVE-2026-69803, CVE-2026-69679, CVE-2026-69878, CVE-2026-69847, CVE-2026-69876, CVE-2026-69510.

CVE-2026-69407

CVE-2026-69407 describes an integer overflow or wraparound vulnerability within the Windows Volume Manager Driver that enables a locally authenticated attacker to escalate their privileges to a higher level of authority on the system.

Affected products:

Windows Volume Manager Driver

Source: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-69407

CVE-2026-69416

A buffer over-read vulnerability exists in the Windows DHCP Server, enabling an authorized attacker on an adjacent network to trigger a denial of service (DoS) condition by sending specially crafted requests.

Affected products:

Windows DHCP Server

Source: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-69416

Related in this roundup: CVE-2026-69845, CVE-2026-72979, CVE-2026-69266, CVE-2026-69412, CVE-2026-69415, CVE-2026-69929, CVE-2026-69930, CVE-2026-70124, CVE-2026-77494, CVE-2026-77498, CVE-2026-77499, CVE-2026-77501, CVE-2026-77502, CVE-2026-77887, CVE-2026-77888, CVE-2026-77886, CVE-2026-77890, CVE-2026-77889, CVE-2026-77891, CVE-2026-77893, CVE-2026-77895, CVE-2026-70065, CVE-2026-69297, CVE-2026-69342, CVE-2026-69405, CVE-2026-69497, CVE-2026-69547, CVE-2026-69620, CVE-2026-69637, CVE-2026-69803, CVE-2026-69679, CVE-2026-69878, CVE-2026-69847, CVE-2026-69876, CVE-2026-69510.

CVE-2026-69424

CVE-2026-69424 is a heap-based buffer overflow vulnerability in the Windows Distributed File System (DFS) component. An authorized local attacker can exploit this flaw to achieve elevation of privilege on an affected Windows system.

Affected products:

Windows Distributed File System

Source: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-69424

Related in this roundup: CVE-2026-78446.

CVE-2026-69428

CVE-2026-69428 is a denial-of-service vulnerability in the Windows Lightweight Directory Access Protocol (LDAP) implementation. The vulnerability stems from an out-of-bounds read, which can be triggered by an unauthorized attacker over the network to crash the LDAP service.

Affected products:

Windows

Source: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-69428

Related in this roundup: CVE-2026-81963, CVE-2026-85880, CVE-2026-69496, CVE-2026-69586, CVE-2026-69768, CVE-2026-73025, CVE-2026-56172, CVE-2026-68832, CVE-2026-68834, CVE-2026-68838, CVE-2026-68841, CVE-2026-68875, CVE-2026-68877, CVE-2026-68880, CVE-2026-69265, CVE-2026-69270, CVE-2026-69274, CVE-2026-69275, CVE-2026-69280, CVE-2026-69283, CVE-2026-69284, CVE-2026-69289, CVE-2026-69296, CVE-2026-69300, CVE-2026-69301, CVE-2026-69307, CVE-2026-69312, CVE-2026-69314, CVE-2026-69332, CVE-2026-69333, CVE-2026-69335, CVE-2026-68833, CVE-2026-68851, CVE-2026-69366, CVE-2026-69337, CVE-2026-69347, CVE-2026-69379, CVE-2026-69390, CVE-2026-69401, CVE-2026-69413, CVE-2026-69420, CVE-2026-69429, CVE-2026-69448, CVE-2026-69455, CVE-2026-69532, CVE-2026-69472, CVE-2026-69479, CVE-2026-69531, CVE-2026-69517, CVE-2026-69505, CVE-2026-69504, CVE-2026-69527, CVE-2026-69549, CVE-2026-69588, CVE-2026-69609, CVE-2026-69648, CVE-2026-69689, CVE-2026-69790, CVE-2026-69638, CVE-2026-69859, CVE-2026-69717, CVE-2026-69711, CVE-2026-69875, CVE-2026-69889, CVE-2026-69757, CVE-2026-69741, CVE-2026-69762, CVE-2026-69744, CVE-2026-69832, CVE-2026-69691, CVE-2026-69808, CVE-2026-69775, CVE-2026-69822, CVE-2026-69770, CVE-2026-69676, CVE-2026-70289, CVE-2026-70563, CVE-2026-71329, CVE-2026-71332, CVE-2026-71350, CVE-2026-71348, CVE-2026-71345, CVE-2026-69469, CVE-2026-69501, CVE-2026-69548, CVE-2026-69846, CVE-2026-70283, CVE-2026-72981, CVE-2026-77491, CVE-2026-77492, CVE-2026-77503, CVE-2026-80093, CVE-2026-72949, CVE-2026-70019, CVE-2026-72940, CVE-2026-69573, CVE-2026-70290, CVE-2026-83991, CVE-2026-83999, CVE-2026-69321, CVE-2026-69316, CVE-2026-69340, CVE-2026-69348, CVE-2026-69350, CVE-2026-69353, CVE-2026-69357, CVE-2026-69393, CVE-2026-69410, CVE-2026-69421, CVE-2026-69425, CVE-2026-69427, CVE-2026-69434, CVE-2026-69456, CVE-2026-69459, CVE-2026-69478, CVE-2026-69561, CVE-2026-69512, CVE-2026-69498, CVE-2026-69571, CVE-2026-69535, CVE-2026-69538, CVE-2026-69591, CVE-2026-69566, CVE-2026-69567, CVE-2026-69584, CVE-2026-69617, CVE-2026-69630, CVE-2026-69610, CVE-2026-69881, CVE-2026-69680, CVE-2026-69619, CVE-2026-69685, CVE-2026-69643, CVE-2026-69687, CVE-2026-69791, CVE-2026-69707, CVE-2026-69652, CVE-2026-69834, CVE-2026-69709, CVE-2026-69844, CVE-2026-69814, CVE-2026-69731, CVE-2026-69706, CVE-2026-69779, CVE-2026-69895, CVE-2026-69792, CVE-2026-69853, CVE-2026-69761, CVE-2026-69785, CVE-2026-69818, CVE-2026-69786, CVE-2026-69874, CVE-2026-70565, CVE-2026-70574, CVE-2026-70569, CVE-2026-70575, CVE-2026-71349, CVE-2026-72927, CVE-2026-72952, CVE-2026-72942, CVE-2026-72966, CVE-2026-72967, CVE-2026-69426, CVE-2026-69564, CVE-2026-72985, CVE-2026-73019, CVE-2026-78451, CVE-2026-78452, CVE-2026-83940, CVE-2026-69598, CVE-2026-83995, CVE-2026-83501, CVE-2026-83498.

CVE-2026-69422

A use-after-free vulnerability exists in the Windows USB Video Driver, which can be exploited by an authorized local attacker to achieve privilege escalation.

Affected products:

Windows USB Video Driver

Source: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-69422

Related in this roundup: CVE-2026-69319, CVE-2026-69423, CVE-2026-72962.

CVE-2026-69438

CVE-2026-69438 is a remote code execution vulnerability in Microsoft JScript caused by incorrect conversion between numeric types. This flaw allows an unauthorized attacker to execute arbitrary code over a network by leveraging the vulnerability during the data processing stage within the JScript engine.

Affected products:

JScript

Source: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-69438

Related in this roundup: CVE-2026-69325.

CVE-2026-69425

CVE-2026-69425 describes a vulnerability in the Windows NTFS filesystem caused by improper link resolution during file access. An authorized local attacker can exploit this flaw to perform unauthorized file tampering, potentially leading to privilege escalation.

Affected products:

Windows

Source: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-69425

Related in this roundup: CVE-2026-81963, CVE-2026-85880, CVE-2026-69496, CVE-2026-69586, CVE-2026-69768, CVE-2026-73025, CVE-2026-56172, CVE-2026-68832, CVE-2026-68834, CVE-2026-68838, CVE-2026-68841, CVE-2026-68875, CVE-2026-68877, CVE-2026-68880, CVE-2026-69265, CVE-2026-69270, CVE-2026-69274, CVE-2026-69275, CVE-2026-69280, CVE-2026-69283, CVE-2026-69284, CVE-2026-69289, CVE-2026-69296, CVE-2026-69300, CVE-2026-69301, CVE-2026-69307, CVE-2026-69312, CVE-2026-69314, CVE-2026-69332, CVE-2026-69333, CVE-2026-69335, CVE-2026-68833, CVE-2026-68851, CVE-2026-69366, CVE-2026-69337, CVE-2026-69347, CVE-2026-69379, CVE-2026-69390, CVE-2026-69401, CVE-2026-69413, CVE-2026-69420, CVE-2026-69429, CVE-2026-69448, CVE-2026-69455, CVE-2026-69532, CVE-2026-69472, CVE-2026-69479, CVE-2026-69531, CVE-2026-69517, CVE-2026-69505, CVE-2026-69504, CVE-2026-69527, CVE-2026-69549, CVE-2026-69588, CVE-2026-69609, CVE-2026-69648, CVE-2026-69689, CVE-2026-69790, CVE-2026-69638, CVE-2026-69859, CVE-2026-69717, CVE-2026-69711, CVE-2026-69875, CVE-2026-69889, CVE-2026-69757, CVE-2026-69741, CVE-2026-69762, CVE-2026-69744, CVE-2026-69832, CVE-2026-69691, CVE-2026-69808, CVE-2026-69775, CVE-2026-69822, CVE-2026-69770, CVE-2026-69676, CVE-2026-70289, CVE-2026-70563, CVE-2026-71329, CVE-2026-71332, CVE-2026-71350, CVE-2026-71348, CVE-2026-71345, CVE-2026-69469, CVE-2026-69501, CVE-2026-69548, CVE-2026-69846, CVE-2026-70283, CVE-2026-72981, CVE-2026-77491, CVE-2026-77492, CVE-2026-77503, CVE-2026-80093, CVE-2026-72949, CVE-2026-70019, CVE-2026-72940, CVE-2026-69573, CVE-2026-70290, CVE-2026-83991, CVE-2026-83999, CVE-2026-69321, CVE-2026-69316, CVE-2026-69340, CVE-2026-69348, CVE-2026-69350, CVE-2026-69353, CVE-2026-69357, CVE-2026-69393, CVE-2026-69410, CVE-2026-69421, CVE-2026-69428, CVE-2026-69427, CVE-2026-69434, CVE-2026-69456, CVE-2026-69459, CVE-2026-69478, CVE-2026-69561, CVE-2026-69512, CVE-2026-69498, CVE-2026-69571, CVE-2026-69535, CVE-2026-69538, CVE-2026-69591, CVE-2026-69566, CVE-2026-69567, CVE-2026-69584, CVE-2026-69617, CVE-2026-69630, CVE-2026-69610, CVE-2026-69881, CVE-2026-69680, CVE-2026-69619, CVE-2026-69685, CVE-2026-69643, CVE-2026-69687, CVE-2026-69791, CVE-2026-69707, CVE-2026-69652, CVE-2026-69834, CVE-2026-69709, CVE-2026-69844, CVE-2026-69814, CVE-2026-69731, CVE-2026-69706, CVE-2026-69779, CVE-2026-69895, CVE-2026-69792, CVE-2026-69853, CVE-2026-69761, CVE-2026-69785, CVE-2026-69818, CVE-2026-69786, CVE-2026-69874, CVE-2026-70565, CVE-2026-70574, CVE-2026-70569, CVE-2026-70575, CVE-2026-71349, CVE-2026-72927, CVE-2026-72952, CVE-2026-72942, CVE-2026-72966, CVE-2026-72967, CVE-2026-69426, CVE-2026-69564, CVE-2026-72985, CVE-2026-73019, CVE-2026-78451, CVE-2026-78452, CVE-2026-83940, CVE-2026-69598, CVE-2026-83995, CVE-2026-83501, CVE-2026-83498.

CVE-2026-69427

An out-of-bounds read vulnerability exists in the Microsoft VOLSNAP.SYS driver, which can be exploited by an authenticated attacker to perform an elevation of privilege attack over a network.

Affected products:

Windows

Source: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-69427

Related in this roundup: CVE-2026-81963, CVE-2026-85880, CVE-2026-69496, CVE-2026-69586, CVE-2026-69768, CVE-2026-73025, CVE-2026-56172, CVE-2026-68832, CVE-2026-68834, CVE-2026-68838, CVE-2026-68841, CVE-2026-68875, CVE-2026-68877, CVE-2026-68880, CVE-2026-69265, CVE-2026-69270, CVE-2026-69274, CVE-2026-69275, CVE-2026-69280, CVE-2026-69283, CVE-2026-69284, CVE-2026-69289, CVE-2026-69296, CVE-2026-69300, CVE-2026-69301, CVE-2026-69307, CVE-2026-69312, CVE-2026-69314, CVE-2026-69332, CVE-2026-69333, CVE-2026-69335, CVE-2026-68833, CVE-2026-68851, CVE-2026-69366, CVE-2026-69337, CVE-2026-69347, CVE-2026-69379, CVE-2026-69390, CVE-2026-69401, CVE-2026-69413, CVE-2026-69420, CVE-2026-69429, CVE-2026-69448, CVE-2026-69455, CVE-2026-69532, CVE-2026-69472, CVE-2026-69479, CVE-2026-69531, CVE-2026-69517, CVE-2026-69505, CVE-2026-69504, CVE-2026-69527, CVE-2026-69549, CVE-2026-69588, CVE-2026-69609, CVE-2026-69648, CVE-2026-69689, CVE-2026-69790, CVE-2026-69638, CVE-2026-69859, CVE-2026-69717, CVE-2026-69711, CVE-2026-69875, CVE-2026-69889, CVE-2026-69757, CVE-2026-69741, CVE-2026-69762, CVE-2026-69744, CVE-2026-69832, CVE-2026-69691, CVE-2026-69808, CVE-2026-69775, CVE-2026-69822, CVE-2026-69770, CVE-2026-69676, CVE-2026-70289, CVE-2026-70563, CVE-2026-71329, CVE-2026-71332, CVE-2026-71350, CVE-2026-71348, CVE-2026-71345, CVE-2026-69469, CVE-2026-69501, CVE-2026-69548, CVE-2026-69846, CVE-2026-70283, CVE-2026-72981, CVE-2026-77491, CVE-2026-77492, CVE-2026-77503, CVE-2026-80093, CVE-2026-72949, CVE-2026-70019, CVE-2026-72940, CVE-2026-69573, CVE-2026-70290, CVE-2026-83991, CVE-2026-83999, CVE-2026-69321, CVE-2026-69316, CVE-2026-69340, CVE-2026-69348, CVE-2026-69350, CVE-2026-69353, CVE-2026-69357, CVE-2026-69393, CVE-2026-69410, CVE-2026-69421, CVE-2026-69428, CVE-2026-69425, CVE-2026-69434, CVE-2026-69456, CVE-2026-69459, CVE-2026-69478, CVE-2026-69561, CVE-2026-69512, CVE-2026-69498, CVE-2026-69571, CVE-2026-69535, CVE-2026-69538, CVE-2026-69591, CVE-2026-69566, CVE-2026-69567, CVE-2026-69584, CVE-2026-69617, CVE-2026-69630, CVE-2026-69610, CVE-2026-69881, CVE-2026-69680, CVE-2026-69619, CVE-2026-69685, CVE-2026-69643, CVE-2026-69687, CVE-2026-69791, CVE-2026-69707, CVE-2026-69652, CVE-2026-69834, CVE-2026-69709, CVE-2026-69844, CVE-2026-69814, CVE-2026-69731, CVE-2026-69706, CVE-2026-69779, CVE-2026-69895, CVE-2026-69792, CVE-2026-69853, CVE-2026-69761, CVE-2026-69785, CVE-2026-69818, CVE-2026-69786, CVE-2026-69874, CVE-2026-70565, CVE-2026-70574, CVE-2026-70569, CVE-2026-70575, CVE-2026-71349, CVE-2026-72927, CVE-2026-72952, CVE-2026-72942, CVE-2026-72966, CVE-2026-72967, CVE-2026-69426, CVE-2026-69564, CVE-2026-72985, CVE-2026-73019, CVE-2026-78451, CVE-2026-78452, CVE-2026-83940, CVE-2026-69598, CVE-2026-83995, CVE-2026-83501, CVE-2026-83498.

CVE-2026-69475

A vulnerability exists in Windows Remote Desktop Services due to an untrusted pointer dereference, which allows an authorized local attacker to achieve privilege escalation on the affected system.

Affected products:

Windows Remote Desktop Services

Source: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-69475

Related in this roundup: CVE-2026-80096.

CVE-2026-69430

A use-after-free vulnerability in the Windows Embedded Mode Service allows an authenticated attacker to perform local privilege escalation by exploiting improper memory management.

Affected products:

Windows Embedded Mode Service

Source: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-69430

CVE-2026-69449

CVE-2026-69449 describes a heap-based buffer overflow vulnerability in Windows BitLocker that enables an authorized attacker to execute arbitrary code locally. Detection should focus on monitoring for abnormal process execution or memory access violations within the BitLocker service context.

Affected products:

Windows BitLocker

Source: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-69449

CVE-2026-69447

A heap-based buffer overflow vulnerability exists in the Windows Audio Service, which can be exploited by an authorized local attacker to achieve privilege escalation.

Affected products:

Windows Audio Service

Source: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-69447

Related in this roundup: CVE-2026-69311, CVE-2026-69540, CVE-2026-70562, CVE-2026-69394, CVE-2026-69604, CVE-2026-69801, CVE-2026-69692.

CVE-2026-69433

CVE-2026-69433 is a heap-based buffer overflow vulnerability in the Windows Error Reporting component. A locally authenticated attacker can exploit this flaw to execute code with elevated privileges on the affected Windows system.

Affected products:

Windows Error Reporting

Source: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-69433

Related in this roundup: CVE-2026-68894, CVE-2026-69362, CVE-2026-69436, CVE-2026-69513, CVE-2026-69450, CVE-2026-69684, CVE-2026-69896, CVE-2026-83996, CVE-2026-69462, CVE-2026-69482, CVE-2026-69612.

CVE-2026-69434

CVE-2026-69434 is a heap-based buffer overflow vulnerability in the Windows URL Moniker component. A remote, unauthorized attacker can exploit this flaw to achieve remote code execution over a network.

Affected products:

Windows

Source: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-69434

Related in this roundup: CVE-2026-81963, CVE-2026-85880, CVE-2026-69496, CVE-2026-69586, CVE-2026-69768, CVE-2026-73025, CVE-2026-56172, CVE-2026-68832, CVE-2026-68834, CVE-2026-68838, CVE-2026-68841, CVE-2026-68875, CVE-2026-68877, CVE-2026-68880, CVE-2026-69265, CVE-2026-69270, CVE-2026-69274, CVE-2026-69275, CVE-2026-69280, CVE-2026-69283, CVE-2026-69284, CVE-2026-69289, CVE-2026-69296, CVE-2026-69300, CVE-2026-69301, CVE-2026-69307, CVE-2026-69312, CVE-2026-69314, CVE-2026-69332, CVE-2026-69333, CVE-2026-69335, CVE-2026-68833, CVE-2026-68851, CVE-2026-69366, CVE-2026-69337, CVE-2026-69347, CVE-2026-69379, CVE-2026-69390, CVE-2026-69401, CVE-2026-69413, CVE-2026-69420, CVE-2026-69429, CVE-2026-69448, CVE-2026-69455, CVE-2026-69532, CVE-2026-69472, CVE-2026-69479, CVE-2026-69531, CVE-2026-69517, CVE-2026-69505, CVE-2026-69504, CVE-2026-69527, CVE-2026-69549, CVE-2026-69588, CVE-2026-69609, CVE-2026-69648, CVE-2026-69689, CVE-2026-69790, CVE-2026-69638, CVE-2026-69859, CVE-2026-69717, CVE-2026-69711, CVE-2026-69875, CVE-2026-69889, CVE-2026-69757, CVE-2026-69741, CVE-2026-69762, CVE-2026-69744, CVE-2026-69832, CVE-2026-69691, CVE-2026-69808, CVE-2026-69775, CVE-2026-69822, CVE-2026-69770, CVE-2026-69676, CVE-2026-70289, CVE-2026-70563, CVE-2026-71329, CVE-2026-71332, CVE-2026-71350, CVE-2026-71348, CVE-2026-71345, CVE-2026-69469, CVE-2026-69501, CVE-2026-69548, CVE-2026-69846, CVE-2026-70283, CVE-2026-72981, CVE-2026-77491, CVE-2026-77492, CVE-2026-77503, CVE-2026-80093, CVE-2026-72949, CVE-2026-70019, CVE-2026-72940, CVE-2026-69573, CVE-2026-70290, CVE-2026-83991, CVE-2026-83999, CVE-2026-69321, CVE-2026-69316, CVE-2026-69340, CVE-2026-69348, CVE-2026-69350, CVE-2026-69353, CVE-2026-69357, CVE-2026-69393, CVE-2026-69410, CVE-2026-69421, CVE-2026-69428, CVE-2026-69425, CVE-2026-69427, CVE-2026-69456, CVE-2026-69459, CVE-2026-69478, CVE-2026-69561, CVE-2026-69512, CVE-2026-69498, CVE-2026-69571, CVE-2026-69535, CVE-2026-69538, CVE-2026-69591, CVE-2026-69566, CVE-2026-69567, CVE-2026-69584, CVE-2026-69617, CVE-2026-69630, CVE-2026-69610, CVE-2026-69881, CVE-2026-69680, CVE-2026-69619, CVE-2026-69685, CVE-2026-69643, CVE-2026-69687, CVE-2026-69791, CVE-2026-69707, CVE-2026-69652, CVE-2026-69834, CVE-2026-69709, CVE-2026-69844, CVE-2026-69814, CVE-2026-69731, CVE-2026-69706, CVE-2026-69779, CVE-2026-69895, CVE-2026-69792, CVE-2026-69853, CVE-2026-69761, CVE-2026-69785, CVE-2026-69818, CVE-2026-69786, CVE-2026-69874, CVE-2026-70565, CVE-2026-70574, CVE-2026-70569, CVE-2026-70575, CVE-2026-71349, CVE-2026-72927, CVE-2026-72952, CVE-2026-72942, CVE-2026-72966, CVE-2026-72967, CVE-2026-69426, CVE-2026-69564, CVE-2026-72985, CVE-2026-73019, CVE-2026-78451, CVE-2026-78452, CVE-2026-83940, CVE-2026-69598, CVE-2026-83995, CVE-2026-83501, CVE-2026-83498.

CVE-2026-69440

The Windows MIDI Service Module is vulnerable to a time-of-check time-of-use (TOCTOU) race condition that enables a locally authenticated attacker to escalate their privileges to a higher level on the system.

Affected products:

Windows MIDI Service Module

Source: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-69440

Related in this roundup: CVE-2026-69339, CVE-2026-68842, CVE-2026-69508, CVE-2026-69720, CVE-2026-78464.

CVE-2026-69444

CVE-2026-69444 is a heap-based buffer overflow vulnerability within the Microsoft Windows Speech component. An authorized local attacker can exploit this flaw to execute code with elevated privileges on the target system.

Affected products:

Windows Speech

Source: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-69444

CVE-2026-69466

CVE-2026-69466 describes a time-of-check time-of-use (TOCTOU) race condition vulnerability within the Windows Kernel. This flaw enables an authenticated attacker to perform a local privilege escalation, potentially granting them higher-level system access.

Affected products:

Windows Kernel

Source: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-69466

Related in this roundup: CVE-2026-68846, CVE-2026-68884, CVE-2026-85360, CVE-2026-69406, CVE-2026-69473, CVE-2026-69723, CVE-2026-83942, CVE-2026-69578, CVE-2026-69669.

CVE-2026-69445

CVE-2026-69445 is a path traversal vulnerability in the Windows Compressed Folder utility that enables an authenticated local attacker to escalate their privileges. The vulnerability stems from an improper limitation of pathnames to restricted directories, allowing for unauthorized file system manipulation.

Affected products:

Windows Compressed Folder

Source: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-69445

CVE-2026-69462

CVE-2026-69462 is a heap-based buffer overflow vulnerability in the Windows Error Reporting component that enables an authenticated attacker to perform privilege escalation over a network.

Affected products:

Windows Error Reporting

Source: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-69462

CVE-2026-69453

A missing authorization vulnerability exists within the Microsoft Windows Search Component that enables an locally authenticated attacker to perform unauthorized tampering. This vulnerability is classified as a privilege escalation issue, allowing an attacker to manipulate system data or settings beyond their intended authorization level.

Affected products:

Windows Search Component

Source: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-69453

Related in this roundup: CVE-2026-68896, CVE-2026-69305, CVE-2026-69322, CVE-2026-69507, CVE-2026-69554, CVE-2026-69585, CVE-2026-69608, CVE-2026-69600, CVE-2026-69911, CVE-2026-70145.

CVE-2026-69456

A heap-based buffer overflow vulnerability in Microsoft Windows Speech allows an authenticated local attacker to execute arbitrary code with elevated privileges on the target system.

Affected products:

Windows

Source: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-69456

Related in this roundup: CVE-2026-81963, CVE-2026-85880, CVE-2026-69496, CVE-2026-69586, CVE-2026-69768, CVE-2026-73025, CVE-2026-56172, CVE-2026-68832, CVE-2026-68834, CVE-2026-68838, CVE-2026-68841, CVE-2026-68875, CVE-2026-68877, CVE-2026-68880, CVE-2026-69265, CVE-2026-69270, CVE-2026-69274, CVE-2026-69275, CVE-2026-69280, CVE-2026-69283, CVE-2026-69284, CVE-2026-69289, CVE-2026-69296, CVE-2026-69300, CVE-2026-69301, CVE-2026-69307, CVE-2026-69312, CVE-2026-69314, CVE-2026-69332, CVE-2026-69333, CVE-2026-69335, CVE-2026-68833, CVE-2026-68851, CVE-2026-69366, CVE-2026-69337, CVE-2026-69347, CVE-2026-69379, CVE-2026-69390, CVE-2026-69401, CVE-2026-69413, CVE-2026-69420, CVE-2026-69429, CVE-2026-69448, CVE-2026-69455, CVE-2026-69532, CVE-2026-69472, CVE-2026-69479, CVE-2026-69531, CVE-2026-69517, CVE-2026-69505, CVE-2026-69504, CVE-2026-69527, CVE-2026-69549, CVE-2026-69588, CVE-2026-69609, CVE-2026-69648, CVE-2026-69689, CVE-2026-69790, CVE-2026-69638, CVE-2026-69859, CVE-2026-69717, CVE-2026-69711, CVE-2026-69875, CVE-2026-69889, CVE-2026-69757, CVE-2026-69741, CVE-2026-69762, CVE-2026-69744, CVE-2026-69832, CVE-2026-69691, CVE-2026-69808, CVE-2026-69775, CVE-2026-69822, CVE-2026-69770, CVE-2026-69676, CVE-2026-70289, CVE-2026-70563, CVE-2026-71329, CVE-2026-71332, CVE-2026-71350, CVE-2026-71348, CVE-2026-71345, CVE-2026-69469, CVE-2026-69501, CVE-2026-69548, CVE-2026-69846, CVE-2026-70283, CVE-2026-72981, CVE-2026-77491, CVE-2026-77492, CVE-2026-77503, CVE-2026-80093, CVE-2026-72949, CVE-2026-70019, CVE-2026-72940, CVE-2026-69573, CVE-2026-70290, CVE-2026-83991, CVE-2026-83999, CVE-2026-69321, CVE-2026-69316, CVE-2026-69340, CVE-2026-69348, CVE-2026-69350, CVE-2026-69353, CVE-2026-69357, CVE-2026-69393, CVE-2026-69410, CVE-2026-69421, CVE-2026-69428, CVE-2026-69425, CVE-2026-69427, CVE-2026-69434, CVE-2026-69459, CVE-2026-69478, CVE-2026-69561, CVE-2026-69512, CVE-2026-69498, CVE-2026-69571, CVE-2026-69535, CVE-2026-69538, CVE-2026-69591, CVE-2026-69566, CVE-2026-69567, CVE-2026-69584, CVE-2026-69617, CVE-2026-69630, CVE-2026-69610, CVE-2026-69881, CVE-2026-69680, CVE-2026-69619, CVE-2026-69685, CVE-2026-69643, CVE-2026-69687, CVE-2026-69791, CVE-2026-69707, CVE-2026-69652, CVE-2026-69834, CVE-2026-69709, CVE-2026-69844, CVE-2026-69814, CVE-2026-69731, CVE-2026-69706, CVE-2026-69779, CVE-2026-69895, CVE-2026-69792, CVE-2026-69853, CVE-2026-69761, CVE-2026-69785, CVE-2026-69818, CVE-2026-69786, CVE-2026-69874, CVE-2026-70565, CVE-2026-70574, CVE-2026-70569, CVE-2026-70575, CVE-2026-71349, CVE-2026-72927, CVE-2026-72952, CVE-2026-72942, CVE-2026-72966, CVE-2026-72967, CVE-2026-69426, CVE-2026-69564, CVE-2026-72985, CVE-2026-73019, CVE-2026-78451, CVE-2026-78452, CVE-2026-83940, CVE-2026-69598, CVE-2026-83995, CVE-2026-83501, CVE-2026-83498.

CVE-2026-69459

CVE-2026-69459 is a heap-based buffer overflow vulnerability in the Windows Power Dependency Coordinator that allows a locally authenticated attacker to elevate their privileges to a higher integrity level on the affected system.

Affected products:

Windows

Source: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-69459

Related in this roundup: CVE-2026-81963, CVE-2026-85880, CVE-2026-69496, CVE-2026-69586, CVE-2026-69768, CVE-2026-73025, CVE-2026-56172, CVE-2026-68832, CVE-2026-68834, CVE-2026-68838, CVE-2026-68841, CVE-2026-68875, CVE-2026-68877, CVE-2026-68880, CVE-2026-69265, CVE-2026-69270, CVE-2026-69274, CVE-2026-69275, CVE-2026-69280, CVE-2026-69283, CVE-2026-69284, CVE-2026-69289, CVE-2026-69296, CVE-2026-69300, CVE-2026-69301, CVE-2026-69307, CVE-2026-69312, CVE-2026-69314, CVE-2026-69332, CVE-2026-69333, CVE-2026-69335, CVE-2026-68833, CVE-2026-68851, CVE-2026-69366, CVE-2026-69337, CVE-2026-69347, CVE-2026-69379, CVE-2026-69390, CVE-2026-69401, CVE-2026-69413, CVE-2026-69420, CVE-2026-69429, CVE-2026-69448, CVE-2026-69455, CVE-2026-69532, CVE-2026-69472, CVE-2026-69479, CVE-2026-69531, CVE-2026-69517, CVE-2026-69505, CVE-2026-69504, CVE-2026-69527, CVE-2026-69549, CVE-2026-69588, CVE-2026-69609, CVE-2026-69648, CVE-2026-69689, CVE-2026-69790, CVE-2026-69638, CVE-2026-69859, CVE-2026-69717, CVE-2026-69711, CVE-2026-69875, CVE-2026-69889, CVE-2026-69757, CVE-2026-69741, CVE-2026-69762, CVE-2026-69744, CVE-2026-69832, CVE-2026-69691, CVE-2026-69808, CVE-2026-69775, CVE-2026-69822, CVE-2026-69770, CVE-2026-69676, CVE-2026-70289, CVE-2026-70563, CVE-2026-71329, CVE-2026-71332, CVE-2026-71350, CVE-2026-71348, CVE-2026-71345, CVE-2026-69469, CVE-2026-69501, CVE-2026-69548, CVE-2026-69846, CVE-2026-70283, CVE-2026-72981, CVE-2026-77491, CVE-2026-77492, CVE-2026-77503, CVE-2026-80093, CVE-2026-72949, CVE-2026-70019, CVE-2026-72940, CVE-2026-69573, CVE-2026-70290, CVE-2026-83991, CVE-2026-83999, CVE-2026-69321, CVE-2026-69316, CVE-2026-69340, CVE-2026-69348, CVE-2026-69350, CVE-2026-69353, CVE-2026-69357, CVE-2026-69393, CVE-2026-69410, CVE-2026-69421, CVE-2026-69428, CVE-2026-69425, CVE-2026-69427, CVE-2026-69434, CVE-2026-69456, CVE-2026-69478, CVE-2026-69561, CVE-2026-69512, CVE-2026-69498, CVE-2026-69571, CVE-2026-69535, CVE-2026-69538, CVE-2026-69591, CVE-2026-69566, CVE-2026-69567, CVE-2026-69584, CVE-2026-69617, CVE-2026-69630, CVE-2026-69610, CVE-2026-69881, CVE-2026-69680, CVE-2026-69619, CVE-2026-69685, CVE-2026-69643, CVE-2026-69687, CVE-2026-69791, CVE-2026-69707, CVE-2026-69652, CVE-2026-69834, CVE-2026-69709, CVE-2026-69844, CVE-2026-69814, CVE-2026-69731, CVE-2026-69706, CVE-2026-69779, CVE-2026-69895, CVE-2026-69792, CVE-2026-69853, CVE-2026-69761, CVE-2026-69785, CVE-2026-69818, CVE-2026-69786, CVE-2026-69874, CVE-2026-70565, CVE-2026-70574, CVE-2026-70569, CVE-2026-70575, CVE-2026-71349, CVE-2026-72927, CVE-2026-72952, CVE-2026-72942, CVE-2026-72966, CVE-2026-72967, CVE-2026-69426, CVE-2026-69564, CVE-2026-72985, CVE-2026-73019, CVE-2026-78451, CVE-2026-78452, CVE-2026-83940, CVE-2026-69598, CVE-2026-83995, CVE-2026-83501, CVE-2026-83498.

CVE-2026-69460

A use-after-free vulnerability in the Windows Modern Device Management (MDM) component allows an authenticated attacker to perform a privilege escalation attack over a network.

Affected products:

Windows Modern Device Management

Source: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-69460

Related in this roundup: CVE-2026-69377, CVE-2026-69674, CVE-2026-70577, CVE-2026-73003, CVE-2026-73022.

CVE-2026-69467

CVE-2026-69467 is a local privilege escalation vulnerability resulting from a stack-based buffer overflow in the Microsoft Graphics Component. An authorized attacker can exploit this flaw to execute code with elevated permissions on the target system.

Affected products:

Graphics Component

Source: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-69467

Related in this roundup: CVE-2026-77493, CVE-2026-73006, CVE-2026-73016, CVE-2026-83990, CVE-2026-84000.

CVE-2026-69474

CVE-2026-69474 is an information disclosure vulnerability in the Windows Overlay Filter caused by a use-after-free defect. An authorized attacker can exploit this flaw to read sensitive data over a network connection.

Affected products:

Windows Overlay Filter

Source: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-69474

Related in this roundup: CVE-2026-69368, CVE-2026-69371, CVE-2026-69343, CVE-2026-69373.

CVE-2026-69482

CVE-2026-69482 is a vulnerability in Windows Error Reporting where a temporary file is created in a directory with insecure permissions. This flaw allows an authenticated local attacker to perform file tampering, potentially leading to privilege escalation or other system compromises.

Affected products:

Windows Error Reporting

Source: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-69482

CVE-2026-69478

A heap-based buffer overflow vulnerability exists in the Windows Device Association Service that can be exploited by an authenticated attacker to achieve local privilege escalation on the affected system.

Affected products:

Windows

Source: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-69478

Related in this roundup: CVE-2026-81963, CVE-2026-85880, CVE-2026-69496, CVE-2026-69586, CVE-2026-69768, CVE-2026-73025, CVE-2026-56172, CVE-2026-68832, CVE-2026-68834, CVE-2026-68838, CVE-2026-68841, CVE-2026-68875, CVE-2026-68877, CVE-2026-68880, CVE-2026-69265, CVE-2026-69270, CVE-2026-69274, CVE-2026-69275, CVE-2026-69280, CVE-2026-69283, CVE-2026-69284, CVE-2026-69289, CVE-2026-69296, CVE-2026-69300, CVE-2026-69301, CVE-2026-69307, CVE-2026-69312, CVE-2026-69314, CVE-2026-69332, CVE-2026-69333, CVE-2026-69335, CVE-2026-68833, CVE-2026-68851, CVE-2026-69366, CVE-2026-69337, CVE-2026-69347, CVE-2026-69379, CVE-2026-69390, CVE-2026-69401, CVE-2026-69413, CVE-2026-69420, CVE-2026-69429, CVE-2026-69448, CVE-2026-69455, CVE-2026-69532, CVE-2026-69472, CVE-2026-69479, CVE-2026-69531, CVE-2026-69517, CVE-2026-69505, CVE-2026-69504, CVE-2026-69527, CVE-2026-69549, CVE-2026-69588, CVE-2026-69609, CVE-2026-69648, CVE-2026-69689, CVE-2026-69790, CVE-2026-69638, CVE-2026-69859, CVE-2026-69717, CVE-2026-69711, CVE-2026-69875, CVE-2026-69889, CVE-2026-69757, CVE-2026-69741, CVE-2026-69762, CVE-2026-69744, CVE-2026-69832, CVE-2026-69691, CVE-2026-69808, CVE-2026-69775, CVE-2026-69822, CVE-2026-69770, CVE-2026-69676, CVE-2026-70289, CVE-2026-70563, CVE-2026-71329, CVE-2026-71332, CVE-2026-71350, CVE-2026-71348, CVE-2026-71345, CVE-2026-69469, CVE-2026-69501, CVE-2026-69548, CVE-2026-69846, CVE-2026-70283, CVE-2026-72981, CVE-2026-77491, CVE-2026-77492, CVE-2026-77503, CVE-2026-80093, CVE-2026-72949, CVE-2026-70019, CVE-2026-72940, CVE-2026-69573, CVE-2026-70290, CVE-2026-83991, CVE-2026-83999, CVE-2026-69321, CVE-2026-69316, CVE-2026-69340, CVE-2026-69348, CVE-2026-69350, CVE-2026-69353, CVE-2026-69357, CVE-2026-69393, CVE-2026-69410, CVE-2026-69421, CVE-2026-69428, CVE-2026-69425, CVE-2026-69427, CVE-2026-69434, CVE-2026-69456, CVE-2026-69459, CVE-2026-69561, CVE-2026-69512, CVE-2026-69498, CVE-2026-69571, CVE-2026-69535, CVE-2026-69538, CVE-2026-69591, CVE-2026-69566, CVE-2026-69567, CVE-2026-69584, CVE-2026-69617, CVE-2026-69630, CVE-2026-69610, CVE-2026-69881, CVE-2026-69680, CVE-2026-69619, CVE-2026-69685, CVE-2026-69643, CVE-2026-69687, CVE-2026-69791, CVE-2026-69707, CVE-2026-69652, CVE-2026-69834, CVE-2026-69709, CVE-2026-69844, CVE-2026-69814, CVE-2026-69731, CVE-2026-69706, CVE-2026-69779, CVE-2026-69895, CVE-2026-69792, CVE-2026-69853, CVE-2026-69761, CVE-2026-69785, CVE-2026-69818, CVE-2026-69786, CVE-2026-69874, CVE-2026-70565, CVE-2026-70574, CVE-2026-70569, CVE-2026-70575, CVE-2026-71349, CVE-2026-72927, CVE-2026-72952, CVE-2026-72942, CVE-2026-72966, CVE-2026-72967, CVE-2026-69426, CVE-2026-69564, CVE-2026-72985, CVE-2026-73019, CVE-2026-78451, CVE-2026-78452, CVE-2026-83940, CVE-2026-69598, CVE-2026-83995, CVE-2026-83501, CVE-2026-83498.

CVE-2026-69561

CVE-2026-69561 is a privilege escalation vulnerability in the Windows CD-ROM driver caused by an out-of-bounds read. An authenticated, local attacker can leverage this flaw to elevate their privileges on an affected system.

Affected products:

Windows

Source: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-69561

Related in this roundup: CVE-2026-81963, CVE-2026-85880, CVE-2026-69496, CVE-2026-69586, CVE-2026-69768, CVE-2026-73025, CVE-2026-56172, CVE-2026-68832, CVE-2026-68834, CVE-2026-68838, CVE-2026-68841, CVE-2026-68875, CVE-2026-68877, CVE-2026-68880, CVE-2026-69265, CVE-2026-69270, CVE-2026-69274, CVE-2026-69275, CVE-2026-69280, CVE-2026-69283, CVE-2026-69284, CVE-2026-69289, CVE-2026-69296, CVE-2026-69300, CVE-2026-69301, CVE-2026-69307, CVE-2026-69312, CVE-2026-69314, CVE-2026-69332, CVE-2026-69333, CVE-2026-69335, CVE-2026-68833, CVE-2026-68851, CVE-2026-69366, CVE-2026-69337, CVE-2026-69347, CVE-2026-69379, CVE-2026-69390, CVE-2026-69401, CVE-2026-69413, CVE-2026-69420, CVE-2026-69429, CVE-2026-69448, CVE-2026-69455, CVE-2026-69532, CVE-2026-69472, CVE-2026-69479, CVE-2026-69531, CVE-2026-69517, CVE-2026-69505, CVE-2026-69504, CVE-2026-69527, CVE-2026-69549, CVE-2026-69588, CVE-2026-69609, CVE-2026-69648, CVE-2026-69689, CVE-2026-69790, CVE-2026-69638, CVE-2026-69859, CVE-2026-69717, CVE-2026-69711, CVE-2026-69875, CVE-2026-69889, CVE-2026-69757, CVE-2026-69741, CVE-2026-69762, CVE-2026-69744, CVE-2026-69832, CVE-2026-69691, CVE-2026-69808, CVE-2026-69775, CVE-2026-69822, CVE-2026-69770, CVE-2026-69676, CVE-2026-70289, CVE-2026-70563, CVE-2026-71329, CVE-2026-71332, CVE-2026-71350, CVE-2026-71348, CVE-2026-71345, CVE-2026-69469, CVE-2026-69501, CVE-2026-69548, CVE-2026-69846, CVE-2026-70283, CVE-2026-72981, CVE-2026-77491, CVE-2026-77492, CVE-2026-77503, CVE-2026-80093, CVE-2026-72949, CVE-2026-70019, CVE-2026-72940, CVE-2026-69573, CVE-2026-70290, CVE-2026-83991, CVE-2026-83999, CVE-2026-69321, CVE-2026-69316, CVE-2026-69340, CVE-2026-69348, CVE-2026-69350, CVE-2026-69353, CVE-2026-69357, CVE-2026-69393, CVE-2026-69410, CVE-2026-69421, CVE-2026-69428, CVE-2026-69425, CVE-2026-69427, CVE-2026-69434, CVE-2026-69456, CVE-2026-69459, CVE-2026-69478, CVE-2026-69512, CVE-2026-69498, CVE-2026-69571, CVE-2026-69535, CVE-2026-69538, CVE-2026-69591, CVE-2026-69566, CVE-2026-69567, CVE-2026-69584, CVE-2026-69617, CVE-2026-69630, CVE-2026-69610, CVE-2026-69881, CVE-2026-69680, CVE-2026-69619, CVE-2026-69685, CVE-2026-69643, CVE-2026-69687, CVE-2026-69791, CVE-2026-69707, CVE-2026-69652, CVE-2026-69834, CVE-2026-69709, CVE-2026-69844, CVE-2026-69814, CVE-2026-69731, CVE-2026-69706, CVE-2026-69779, CVE-2026-69895, CVE-2026-69792, CVE-2026-69853, CVE-2026-69761, CVE-2026-69785, CVE-2026-69818, CVE-2026-69786, CVE-2026-69874, CVE-2026-70565, CVE-2026-70574, CVE-2026-70569, CVE-2026-70575, CVE-2026-71349, CVE-2026-72927, CVE-2026-72952, CVE-2026-72942, CVE-2026-72966, CVE-2026-72967, CVE-2026-69426, CVE-2026-69564, CVE-2026-72985, CVE-2026-73019, CVE-2026-78451, CVE-2026-78452, CVE-2026-83940, CVE-2026-69598, CVE-2026-83995, CVE-2026-83501, CVE-2026-83498.

CVE-2026-69480

The Windows Partition Management Driver is susceptible to a heap-based buffer overflow vulnerability that can be exploited by an authorized local attacker to achieve privilege escalation on the affected system.

Affected products:

Windows Partition Management Driver

Source: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-69480

Related in this roundup: CVE-2026-71341, CVE-2026-69492.

CVE-2026-69483

An out-of-bounds read vulnerability exists in the Windows Image Acquisition component, which could allow a locally authenticated attacker to read sensitive memory contents, potentially leading to unauthorized information disclosure.

Affected products:

Windows Image Acquisition

Source: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-69483

Related in this roundup: CVE-2026-69341, CVE-2026-69500, CVE-2026-69613.

CVE-2026-69578

CVE-2026-69578 is a local privilege escalation vulnerability in the Windows Kernel caused by a numeric truncation error. An authorized attacker can exploit this flaw to elevate their privileges on an affected Windows system.

Affected products:

Windows Kernel

Source: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-69578

Related in this roundup: CVE-2026-68846, CVE-2026-68884, CVE-2026-85360, CVE-2026-69406, CVE-2026-69473, CVE-2026-69723, CVE-2026-83942, CVE-2026-69466, CVE-2026-69669.

CVE-2026-69488

A use-after-free vulnerability exists in the Windows Device Association Service that can be exploited by an authenticated attacker to achieve local privilege escalation. This vulnerability resides within the service process, allowing an attacker to potentially gain higher privileges on the target system.

Affected products:

Windows Device Association Service

Source: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-69488

Related in this roundup: CVE-2026-69574, CVE-2026-77500, CVE-2026-69581, CVE-2026-69714, CVE-2026-69866.

CVE-2026-69511

CVE-2026-69511 describes a heap-based buffer overflow vulnerability in Microsoft Windows Media Foundation that enables a remote, unauthorized attacker to achieve remote code execution (RCE) on affected Windows systems over a network.

Affected products:

Windows Media Foundation

Source: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-69511

Related in this roundup: CVE-2026-69408, CVE-2026-62744, CVE-2026-62706, CVE-2026-69386, CVE-2026-69601.

CVE-2026-69497

A denial of service vulnerability exists in the Windows DHCP Server component due to a failure to release memory after its effective lifetime, which can be exploited by an authorized attacker to crash the service over a network.

Affected products:

Windows DHCP Server

Source: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-69497

Related in this roundup: CVE-2026-69845, CVE-2026-72979, CVE-2026-69266, CVE-2026-69412, CVE-2026-69415, CVE-2026-69929, CVE-2026-69930, CVE-2026-70124, CVE-2026-77494, CVE-2026-77498, CVE-2026-77499, CVE-2026-77501, CVE-2026-77502, CVE-2026-77887, CVE-2026-77888, CVE-2026-77886, CVE-2026-77890, CVE-2026-77889, CVE-2026-77891, CVE-2026-77893, CVE-2026-77895, CVE-2026-70065, CVE-2026-69297, CVE-2026-69342, CVE-2026-69405, CVE-2026-69416, CVE-2026-69547, CVE-2026-69620, CVE-2026-69637, CVE-2026-69803, CVE-2026-69679, CVE-2026-69878, CVE-2026-69847, CVE-2026-69876, CVE-2026-69510.

CVE-2026-69512

CVE-2026-69512 is a heap-based buffer overflow vulnerability in the Windows kernel-mode driver Spaceport.sys. An authenticated attacker can exploit this flaw to achieve privilege escalation over a network connection by triggering the memory corruption within the driver.

Affected products:

Windows

Source: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-69512

Related in this roundup: CVE-2026-81963, CVE-2026-85880, CVE-2026-69496, CVE-2026-69586, CVE-2026-69768, CVE-2026-73025, CVE-2026-56172, CVE-2026-68832, CVE-2026-68834, CVE-2026-68838, CVE-2026-68841, CVE-2026-68875, CVE-2026-68877, CVE-2026-68880, CVE-2026-69265, CVE-2026-69270, CVE-2026-69274, CVE-2026-69275, CVE-2026-69280, CVE-2026-69283, CVE-2026-69284, CVE-2026-69289, CVE-2026-69296, CVE-2026-69300, CVE-2026-69301, CVE-2026-69307, CVE-2026-69312, CVE-2026-69314, CVE-2026-69332, CVE-2026-69333, CVE-2026-69335, CVE-2026-68833, CVE-2026-68851, CVE-2026-69366, CVE-2026-69337, CVE-2026-69347, CVE-2026-69379, CVE-2026-69390, CVE-2026-69401, CVE-2026-69413, CVE-2026-69420, CVE-2026-69429, CVE-2026-69448, CVE-2026-69455, CVE-2026-69532, CVE-2026-69472, CVE-2026-69479, CVE-2026-69531, CVE-2026-69517, CVE-2026-69505, CVE-2026-69504, CVE-2026-69527, CVE-2026-69549, CVE-2026-69588, CVE-2026-69609, CVE-2026-69648, CVE-2026-69689, CVE-2026-69790, CVE-2026-69638, CVE-2026-69859, CVE-2026-69717, CVE-2026-69711, CVE-2026-69875, CVE-2026-69889, CVE-2026-69757, CVE-2026-69741, CVE-2026-69762, CVE-2026-69744, CVE-2026-69832, CVE-2026-69691, CVE-2026-69808, CVE-2026-69775, CVE-2026-69822, CVE-2026-69770, CVE-2026-69676, CVE-2026-70289, CVE-2026-70563, CVE-2026-71329, CVE-2026-71332, CVE-2026-71350, CVE-2026-71348, CVE-2026-71345, CVE-2026-69469, CVE-2026-69501, CVE-2026-69548, CVE-2026-69846, CVE-2026-70283, CVE-2026-72981, CVE-2026-77491, CVE-2026-77492, CVE-2026-77503, CVE-2026-80093, CVE-2026-72949, CVE-2026-70019, CVE-2026-72940, CVE-2026-69573, CVE-2026-70290, CVE-2026-83991, CVE-2026-83999, CVE-2026-69321, CVE-2026-69316, CVE-2026-69340, CVE-2026-69348, CVE-2026-69350, CVE-2026-69353, CVE-2026-69357, CVE-2026-69393, CVE-2026-69410, CVE-2026-69421, CVE-2026-69428, CVE-2026-69425, CVE-2026-69427, CVE-2026-69434, CVE-2026-69456, CVE-2026-69459, CVE-2026-69478, CVE-2026-69561, CVE-2026-69498, CVE-2026-69571, CVE-2026-69535, CVE-2026-69538, CVE-2026-69591, CVE-2026-69566, CVE-2026-69567, CVE-2026-69584, CVE-2026-69617, CVE-2026-69630, CVE-2026-69610, CVE-2026-69881, CVE-2026-69680, CVE-2026-69619, CVE-2026-69685, CVE-2026-69643, CVE-2026-69687, CVE-2026-69791, CVE-2026-69707, CVE-2026-69652, CVE-2026-69834, CVE-2026-69709, CVE-2026-69844, CVE-2026-69814, CVE-2026-69731, CVE-2026-69706, CVE-2026-69779, CVE-2026-69895, CVE-2026-69792, CVE-2026-69853, CVE-2026-69761, CVE-2026-69785, CVE-2026-69818, CVE-2026-69786, CVE-2026-69874, CVE-2026-70565, CVE-2026-70574, CVE-2026-70569, CVE-2026-70575, CVE-2026-71349, CVE-2026-72927, CVE-2026-72952, CVE-2026-72942, CVE-2026-72966, CVE-2026-72967, CVE-2026-69426, CVE-2026-69564, CVE-2026-72985, CVE-2026-73019, CVE-2026-78451, CVE-2026-78452, CVE-2026-83940, CVE-2026-69598, CVE-2026-83995, CVE-2026-83501, CVE-2026-83498.

CVE-2026-69498

CVE-2026-69498 describes a use-after-free vulnerability within the Windows Win32k subsystem. An authenticated local attacker can exploit this flaw to execute code or perform operations with elevated system privileges.

Affected products:

Windows

Source: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-69498

Related in this roundup: CVE-2026-81963, CVE-2026-85880, CVE-2026-69496, CVE-2026-69586, CVE-2026-69768, CVE-2026-73025, CVE-2026-56172, CVE-2026-68832, CVE-2026-68834, CVE-2026-68838, CVE-2026-68841, CVE-2026-68875, CVE-2026-68877, CVE-2026-68880, CVE-2026-69265, CVE-2026-69270, CVE-2026-69274, CVE-2026-69275, CVE-2026-69280, CVE-2026-69283, CVE-2026-69284, CVE-2026-69289, CVE-2026-69296, CVE-2026-69300, CVE-2026-69301, CVE-2026-69307, CVE-2026-69312, CVE-2026-69314, CVE-2026-69332, CVE-2026-69333, CVE-2026-69335, CVE-2026-68833, CVE-2026-68851, CVE-2026-69366, CVE-2026-69337, CVE-2026-69347, CVE-2026-69379, CVE-2026-69390, CVE-2026-69401, CVE-2026-69413, CVE-2026-69420, CVE-2026-69429, CVE-2026-69448, CVE-2026-69455, CVE-2026-69532, CVE-2026-69472, CVE-2026-69479, CVE-2026-69531, CVE-2026-69517, CVE-2026-69505, CVE-2026-69504, CVE-2026-69527, CVE-2026-69549, CVE-2026-69588, CVE-2026-69609, CVE-2026-69648, CVE-2026-69689, CVE-2026-69790, CVE-2026-69638, CVE-2026-69859, CVE-2026-69717, CVE-2026-69711, CVE-2026-69875, CVE-2026-69889, CVE-2026-69757, CVE-2026-69741, CVE-2026-69762, CVE-2026-69744, CVE-2026-69832, CVE-2026-69691, CVE-2026-69808, CVE-2026-69775, CVE-2026-69822, CVE-2026-69770, CVE-2026-69676, CVE-2026-70289, CVE-2026-70563, CVE-2026-71329, CVE-2026-71332, CVE-2026-71350, CVE-2026-71348, CVE-2026-71345, CVE-2026-69469, CVE-2026-69501, CVE-2026-69548, CVE-2026-69846, CVE-2026-70283, CVE-2026-72981, CVE-2026-77491, CVE-2026-77492, CVE-2026-77503, CVE-2026-80093, CVE-2026-72949, CVE-2026-70019, CVE-2026-72940, CVE-2026-69573, CVE-2026-70290, CVE-2026-83991, CVE-2026-83999, CVE-2026-69321, CVE-2026-69316, CVE-2026-69340, CVE-2026-69348, CVE-2026-69350, CVE-2026-69353, CVE-2026-69357, CVE-2026-69393, CVE-2026-69410, CVE-2026-69421, CVE-2026-69428, CVE-2026-69425, CVE-2026-69427, CVE-2026-69434, CVE-2026-69456, CVE-2026-69459, CVE-2026-69478, CVE-2026-69561, CVE-2026-69512, CVE-2026-69571, CVE-2026-69535, CVE-2026-69538, CVE-2026-69591, CVE-2026-69566, CVE-2026-69567, CVE-2026-69584, CVE-2026-69617, CVE-2026-69630, CVE-2026-69610, CVE-2026-69881, CVE-2026-69680, CVE-2026-69619, CVE-2026-69685, CVE-2026-69643, CVE-2026-69687, CVE-2026-69791, CVE-2026-69707, CVE-2026-69652, CVE-2026-69834, CVE-2026-69709, CVE-2026-69844, CVE-2026-69814, CVE-2026-69731, CVE-2026-69706, CVE-2026-69779, CVE-2026-69895, CVE-2026-69792, CVE-2026-69853, CVE-2026-69761, CVE-2026-69785, CVE-2026-69818, CVE-2026-69786, CVE-2026-69874, CVE-2026-70565, CVE-2026-70574, CVE-2026-70569, CVE-2026-70575, CVE-2026-71349, CVE-2026-72927, CVE-2026-72952, CVE-2026-72942, CVE-2026-72966, CVE-2026-72967, CVE-2026-69426, CVE-2026-69564, CVE-2026-72985, CVE-2026-73019, CVE-2026-78451, CVE-2026-78452, CVE-2026-83940, CVE-2026-69598, CVE-2026-83995, CVE-2026-83501, CVE-2026-83498.

CVE-2026-69503

A stack-based buffer overflow vulnerability exists within the Windows USB Driver, enabling an authorized attacker to achieve privilege escalation via network-based exploitation.

Affected products:

Windows USB Driver

Source: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-69503

Related in this roundup: CVE-2026-68840, CVE-2026-69295, CVE-2026-69457, CVE-2026-72953.

CVE-2026-69508

The Windows MIDI Service Module is vulnerable to a stack-based buffer overflow that allows a locally authenticated attacker to escalate privileges. This is a privilege escalation vulnerability rooted in improper memory handling within the module.

Affected products:

Windows MIDI Service Module

Source: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-69508

Related in this roundup: CVE-2026-69339, CVE-2026-68842, CVE-2026-69440, CVE-2026-69720, CVE-2026-78464.

CVE-2026-69509

The Windows Fax Service is vulnerable to a heap-based buffer overflow that can be exploited by an authorized local attacker to achieve privilege escalation.

Affected products:

Windows Fax Service

Source: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-69509

Related in this roundup: CVE-2026-69621, CVE-2026-72944.

CVE-2026-69599

CVE-2026-69599 is a use-after-free vulnerability within Microsoft Windows Remote Desktop Services. An authenticated attacker can exploit this flaw to achieve remote code execution over a network connection by triggering the memory corruption vulnerability.

Affected products:

Remote Desktop Services

Source: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-69599

Related in this roundup: CVE-2026-69525, CVE-2026-69287, CVE-2026-69514, CVE-2026-69539, CVE-2026-69536, CVE-2026-69616.

CVE-2026-69547

CVE-2026-69547 is a heap-based buffer overflow vulnerability within the Windows DHCP Server component. An attacker with authorized network access can exploit this flaw to achieve remote code execution, necessitating robust monitoring of DHCP service traffic and ensuring that server systems are patched against memory corruption exploits.

Affected products:

Windows DHCP Server

Source: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-69547

Related in this roundup: CVE-2026-69845, CVE-2026-72979, CVE-2026-69266, CVE-2026-69412, CVE-2026-69415, CVE-2026-69929, CVE-2026-69930, CVE-2026-70124, CVE-2026-77494, CVE-2026-77498, CVE-2026-77499, CVE-2026-77501, CVE-2026-77502, CVE-2026-77887, CVE-2026-77888, CVE-2026-77886, CVE-2026-77890, CVE-2026-77889, CVE-2026-77891, CVE-2026-77893, CVE-2026-77895, CVE-2026-70065, CVE-2026-69297, CVE-2026-69342, CVE-2026-69405, CVE-2026-69416, CVE-2026-69497, CVE-2026-69620, CVE-2026-69637, CVE-2026-69803, CVE-2026-69679, CVE-2026-69878, CVE-2026-69847, CVE-2026-69876, CVE-2026-69510.

CVE-2026-69536

CVE-2026-69536 is a remote code execution vulnerability in Windows Remote Desktop Services caused by a use-after-free flaw. The vulnerability allows an authenticated attacker to execute arbitrary code over the network, potentially leading to full system compromise.

Affected products:

Remote Desktop Services

Source: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-69536

Related in this roundup: CVE-2026-69525, CVE-2026-69287, CVE-2026-69514, CVE-2026-69539, CVE-2026-69599, CVE-2026-69616.

CVE-2026-69546

A use-after-free vulnerability in Microsoft Active Directory Domain Services (AD DS) allows an unauthenticated remote attacker to achieve remote code execution. The vulnerability exists within the network-facing components of the service, posing a significant risk to domain controllers and the broader Windows identity infrastructure.

Affected products:

Active Directory Domain Services

Source: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-69546

Related in this roundup: CVE-2026-62813, CVE-2026-69359, CVE-2026-69524, CVE-2026-62762, CVE-2026-69809.

CVE-2026-69571

A heap-based buffer overflow vulnerability in the Windows USB Audio Class driver (usbaudio.sys) allows an authenticated attacker to elevate privileges on an affected Windows system.

Affected products:

Windows

Source: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-69571

Related in this roundup: CVE-2026-81963, CVE-2026-85880, CVE-2026-69496, CVE-2026-69586, CVE-2026-69768, CVE-2026-73025, CVE-2026-56172, CVE-2026-68832, CVE-2026-68834, CVE-2026-68838, CVE-2026-68841, CVE-2026-68875, CVE-2026-68877, CVE-2026-68880, CVE-2026-69265, CVE-2026-69270, CVE-2026-69274, CVE-2026-69275, CVE-2026-69280, CVE-2026-69283, CVE-2026-69284, CVE-2026-69289, CVE-2026-69296, CVE-2026-69300, CVE-2026-69301, CVE-2026-69307, CVE-2026-69312, CVE-2026-69314, CVE-2026-69332, CVE-2026-69333, CVE-2026-69335, CVE-2026-68833, CVE-2026-68851, CVE-2026-69366, CVE-2026-69337, CVE-2026-69347, CVE-2026-69379, CVE-2026-69390, CVE-2026-69401, CVE-2026-69413, CVE-2026-69420, CVE-2026-69429, CVE-2026-69448, CVE-2026-69455, CVE-2026-69532, CVE-2026-69472, CVE-2026-69479, CVE-2026-69531, CVE-2026-69517, CVE-2026-69505, CVE-2026-69504, CVE-2026-69527, CVE-2026-69549, CVE-2026-69588, CVE-2026-69609, CVE-2026-69648, CVE-2026-69689, CVE-2026-69790, CVE-2026-69638, CVE-2026-69859, CVE-2026-69717, CVE-2026-69711, CVE-2026-69875, CVE-2026-69889, CVE-2026-69757, CVE-2026-69741, CVE-2026-69762, CVE-2026-69744, CVE-2026-69832, CVE-2026-69691, CVE-2026-69808, CVE-2026-69775, CVE-2026-69822, CVE-2026-69770, CVE-2026-69676, CVE-2026-70289, CVE-2026-70563, CVE-2026-71329, CVE-2026-71332, CVE-2026-71350, CVE-2026-71348, CVE-2026-71345, CVE-2026-69469, CVE-2026-69501, CVE-2026-69548, CVE-2026-69846, CVE-2026-70283, CVE-2026-72981, CVE-2026-77491, CVE-2026-77492, CVE-2026-77503, CVE-2026-80093, CVE-2026-72949, CVE-2026-70019, CVE-2026-72940, CVE-2026-69573, CVE-2026-70290, CVE-2026-83991, CVE-2026-83999, CVE-2026-69321, CVE-2026-69316, CVE-2026-69340, CVE-2026-69348, CVE-2026-69350, CVE-2026-69353, CVE-2026-69357, CVE-2026-69393, CVE-2026-69410, CVE-2026-69421, CVE-2026-69428, CVE-2026-69425, CVE-2026-69427, CVE-2026-69434, CVE-2026-69456, CVE-2026-69459, CVE-2026-69478, CVE-2026-69561, CVE-2026-69512, CVE-2026-69498, CVE-2026-69535, CVE-2026-69538, CVE-2026-69591, CVE-2026-69566, CVE-2026-69567, CVE-2026-69584, CVE-2026-69617, CVE-2026-69630, CVE-2026-69610, CVE-2026-69881, CVE-2026-69680, CVE-2026-69619, CVE-2026-69685, CVE-2026-69643, CVE-2026-69687, CVE-2026-69791, CVE-2026-69707, CVE-2026-69652, CVE-2026-69834, CVE-2026-69709, CVE-2026-69844, CVE-2026-69814, CVE-2026-69731, CVE-2026-69706, CVE-2026-69779, CVE-2026-69895, CVE-2026-69792, CVE-2026-69853, CVE-2026-69761, CVE-2026-69785, CVE-2026-69818, CVE-2026-69786, CVE-2026-69874, CVE-2026-70565, CVE-2026-70574, CVE-2026-70569, CVE-2026-70575, CVE-2026-71349, CVE-2026-72927, CVE-2026-72952, CVE-2026-72942, CVE-2026-72966, CVE-2026-72967, CVE-2026-69426, CVE-2026-69564, CVE-2026-72985, CVE-2026-73019, CVE-2026-78451, CVE-2026-78452, CVE-2026-83940, CVE-2026-69598, CVE-2026-83995, CVE-2026-83501, CVE-2026-83498.

CVE-2026-69535

A numeric truncation error in the Windows Spaceport.sys driver allows a locally authenticated attacker to elevate their privileges to a higher integrity level. The vulnerability involves improper handling of numeric data within the driver, facilitating exploitation via local access.

Affected products:

Windows

Source: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-69535

Related in this roundup: CVE-2026-81963, CVE-2026-85880, CVE-2026-69496, CVE-2026-69586, CVE-2026-69768, CVE-2026-73025, CVE-2026-56172, CVE-2026-68832, CVE-2026-68834, CVE-2026-68838, CVE-2026-68841, CVE-2026-68875, CVE-2026-68877, CVE-2026-68880, CVE-2026-69265, CVE-2026-69270, CVE-2026-69274, CVE-2026-69275, CVE-2026-69280, CVE-2026-69283, CVE-2026-69284, CVE-2026-69289, CVE-2026-69296, CVE-2026-69300, CVE-2026-69301, CVE-2026-69307, CVE-2026-69312, CVE-2026-69314, CVE-2026-69332, CVE-2026-69333, CVE-2026-69335, CVE-2026-68833, CVE-2026-68851, CVE-2026-69366, CVE-2026-69337, CVE-2026-69347, CVE-2026-69379, CVE-2026-69390, CVE-2026-69401, CVE-2026-69413, CVE-2026-69420, CVE-2026-69429, CVE-2026-69448, CVE-2026-69455, CVE-2026-69532, CVE-2026-69472, CVE-2026-69479, CVE-2026-69531, CVE-2026-69517, CVE-2026-69505, CVE-2026-69504, CVE-2026-69527, CVE-2026-69549, CVE-2026-69588, CVE-2026-69609, CVE-2026-69648, CVE-2026-69689, CVE-2026-69790, CVE-2026-69638, CVE-2026-69859, CVE-2026-69717, CVE-2026-69711, CVE-2026-69875, CVE-2026-69889, CVE-2026-69757, CVE-2026-69741, CVE-2026-69762, CVE-2026-69744, CVE-2026-69832, CVE-2026-69691, CVE-2026-69808, CVE-2026-69775, CVE-2026-69822, CVE-2026-69770, CVE-2026-69676, CVE-2026-70289, CVE-2026-70563, CVE-2026-71329, CVE-2026-71332, CVE-2026-71350, CVE-2026-71348, CVE-2026-71345, CVE-2026-69469, CVE-2026-69501, CVE-2026-69548, CVE-2026-69846, CVE-2026-70283, CVE-2026-72981, CVE-2026-77491, CVE-2026-77492, CVE-2026-77503, CVE-2026-80093, CVE-2026-72949, CVE-2026-70019, CVE-2026-72940, CVE-2026-69573, CVE-2026-70290, CVE-2026-83991, CVE-2026-83999, CVE-2026-69321, CVE-2026-69316, CVE-2026-69340, CVE-2026-69348, CVE-2026-69350, CVE-2026-69353, CVE-2026-69357, CVE-2026-69393, CVE-2026-69410, CVE-2026-69421, CVE-2026-69428, CVE-2026-69425, CVE-2026-69427, CVE-2026-69434, CVE-2026-69456, CVE-2026-69459, CVE-2026-69478, CVE-2026-69561, CVE-2026-69512, CVE-2026-69498, CVE-2026-69571, CVE-2026-69538, CVE-2026-69591, CVE-2026-69566, CVE-2026-69567, CVE-2026-69584, CVE-2026-69617, CVE-2026-69630, CVE-2026-69610, CVE-2026-69881, CVE-2026-69680, CVE-2026-69619, CVE-2026-69685, CVE-2026-69643, CVE-2026-69687, CVE-2026-69791, CVE-2026-69707, CVE-2026-69652, CVE-2026-69834, CVE-2026-69709, CVE-2026-69844, CVE-2026-69814, CVE-2026-69731, CVE-2026-69706, CVE-2026-69779, CVE-2026-69895, CVE-2026-69792, CVE-2026-69853, CVE-2026-69761, CVE-2026-69785, CVE-2026-69818, CVE-2026-69786, CVE-2026-69874, CVE-2026-70565, CVE-2026-70574, CVE-2026-70569, CVE-2026-70575, CVE-2026-71349, CVE-2026-72927, CVE-2026-72952, CVE-2026-72942, CVE-2026-72966, CVE-2026-72967, CVE-2026-69426, CVE-2026-69564, CVE-2026-72985, CVE-2026-73019, CVE-2026-78451, CVE-2026-78452, CVE-2026-83940, CVE-2026-69598, CVE-2026-83995, CVE-2026-83501, CVE-2026-83498.

CVE-2026-69538

An out-of-bounds read vulnerability exists in the Windows Spaceport.sys driver, which can be leveraged by an authorized attacker to achieve local remote code execution. The vulnerability is classified as an out-of-bounds read issue, which can lead to memory corruption and subsequent code execution.

Affected products:

Windows

Source: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-69538

Related in this roundup: CVE-2026-81963, CVE-2026-85880, CVE-2026-69496, CVE-2026-69586, CVE-2026-69768, CVE-2026-73025, CVE-2026-56172, CVE-2026-68832, CVE-2026-68834, CVE-2026-68838, CVE-2026-68841, CVE-2026-68875, CVE-2026-68877, CVE-2026-68880, CVE-2026-69265, CVE-2026-69270, CVE-2026-69274, CVE-2026-69275, CVE-2026-69280, CVE-2026-69283, CVE-2026-69284, CVE-2026-69289, CVE-2026-69296, CVE-2026-69300, CVE-2026-69301, CVE-2026-69307, CVE-2026-69312, CVE-2026-69314, CVE-2026-69332, CVE-2026-69333, CVE-2026-69335, CVE-2026-68833, CVE-2026-68851, CVE-2026-69366, CVE-2026-69337, CVE-2026-69347, CVE-2026-69379, CVE-2026-69390, CVE-2026-69401, CVE-2026-69413, CVE-2026-69420, CVE-2026-69429, CVE-2026-69448, CVE-2026-69455, CVE-2026-69532, CVE-2026-69472, CVE-2026-69479, CVE-2026-69531, CVE-2026-69517, CVE-2026-69505, CVE-2026-69504, CVE-2026-69527, CVE-2026-69549, CVE-2026-69588, CVE-2026-69609, CVE-2026-69648, CVE-2026-69689, CVE-2026-69790, CVE-2026-69638, CVE-2026-69859, CVE-2026-69717, CVE-2026-69711, CVE-2026-69875, CVE-2026-69889, CVE-2026-69757, CVE-2026-69741, CVE-2026-69762, CVE-2026-69744, CVE-2026-69832, CVE-2026-69691, CVE-2026-69808, CVE-2026-69775, CVE-2026-69822, CVE-2026-69770, CVE-2026-69676, CVE-2026-70289, CVE-2026-70563, CVE-2026-71329, CVE-2026-71332, CVE-2026-71350, CVE-2026-71348, CVE-2026-71345, CVE-2026-69469, CVE-2026-69501, CVE-2026-69548, CVE-2026-69846, CVE-2026-70283, CVE-2026-72981, CVE-2026-77491, CVE-2026-77492, CVE-2026-77503, CVE-2026-80093, CVE-2026-72949, CVE-2026-70019, CVE-2026-72940, CVE-2026-69573, CVE-2026-70290, CVE-2026-83991, CVE-2026-83999, CVE-2026-69321, CVE-2026-69316, CVE-2026-69340, CVE-2026-69348, CVE-2026-69350, CVE-2026-69353, CVE-2026-69357, CVE-2026-69393, CVE-2026-69410, CVE-2026-69421, CVE-2026-69428, CVE-2026-69425, CVE-2026-69427, CVE-2026-69434, CVE-2026-69456, CVE-2026-69459, CVE-2026-69478, CVE-2026-69561, CVE-2026-69512, CVE-2026-69498, CVE-2026-69571, CVE-2026-69535, CVE-2026-69591, CVE-2026-69566, CVE-2026-69567, CVE-2026-69584, CVE-2026-69617, CVE-2026-69630, CVE-2026-69610, CVE-2026-69881, CVE-2026-69680, CVE-2026-69619, CVE-2026-69685, CVE-2026-69643, CVE-2026-69687, CVE-2026-69791, CVE-2026-69707, CVE-2026-69652, CVE-2026-69834, CVE-2026-69709, CVE-2026-69844, CVE-2026-69814, CVE-2026-69731, CVE-2026-69706, CVE-2026-69779, CVE-2026-69895, CVE-2026-69792, CVE-2026-69853, CVE-2026-69761, CVE-2026-69785, CVE-2026-69818, CVE-2026-69786, CVE-2026-69874, CVE-2026-70565, CVE-2026-70574, CVE-2026-70569, CVE-2026-70575, CVE-2026-71349, CVE-2026-72927, CVE-2026-72952, CVE-2026-72942, CVE-2026-72966, CVE-2026-72967, CVE-2026-69426, CVE-2026-69564, CVE-2026-72985, CVE-2026-73019, CVE-2026-78451, CVE-2026-78452, CVE-2026-83940, CVE-2026-69598, CVE-2026-83995, CVE-2026-83501, CVE-2026-83498.

CVE-2026-69542

CVE-2026-69542 is a local privilege escalation vulnerability in the Windows Camera Frame Server Monitor component. The vulnerability is caused by a heap-based buffer overflow, which allows an attacker who already has local access to the system to escalate their privileges.

Affected products:

Windows Camera Frame Server Monitor

Source: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-69542

CVE-2026-69591

CVE-2026-69591 is an out-of-bounds read vulnerability in the Windows NTFS file system that enables an authenticated attacker to perform information disclosure over a network connection.

Affected products:

Windows

Source: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-69591

Related in this roundup: CVE-2026-81963, CVE-2026-85880, CVE-2026-69496, CVE-2026-69586, CVE-2026-69768, CVE-2026-73025, CVE-2026-56172, CVE-2026-68832, CVE-2026-68834, CVE-2026-68838, CVE-2026-68841, CVE-2026-68875, CVE-2026-68877, CVE-2026-68880, CVE-2026-69265, CVE-2026-69270, CVE-2026-69274, CVE-2026-69275, CVE-2026-69280, CVE-2026-69283, CVE-2026-69284, CVE-2026-69289, CVE-2026-69296, CVE-2026-69300, CVE-2026-69301, CVE-2026-69307, CVE-2026-69312, CVE-2026-69314, CVE-2026-69332, CVE-2026-69333, CVE-2026-69335, CVE-2026-68833, CVE-2026-68851, CVE-2026-69366, CVE-2026-69337, CVE-2026-69347, CVE-2026-69379, CVE-2026-69390, CVE-2026-69401, CVE-2026-69413, CVE-2026-69420, CVE-2026-69429, CVE-2026-69448, CVE-2026-69455, CVE-2026-69532, CVE-2026-69472, CVE-2026-69479, CVE-2026-69531, CVE-2026-69517, CVE-2026-69505, CVE-2026-69504, CVE-2026-69527, CVE-2026-69549, CVE-2026-69588, CVE-2026-69609, CVE-2026-69648, CVE-2026-69689, CVE-2026-69790, CVE-2026-69638, CVE-2026-69859, CVE-2026-69717, CVE-2026-69711, CVE-2026-69875, CVE-2026-69889, CVE-2026-69757, CVE-2026-69741, CVE-2026-69762, CVE-2026-69744, CVE-2026-69832, CVE-2026-69691, CVE-2026-69808, CVE-2026-69775, CVE-2026-69822, CVE-2026-69770, CVE-2026-69676, CVE-2026-70289, CVE-2026-70563, CVE-2026-71329, CVE-2026-71332, CVE-2026-71350, CVE-2026-71348, CVE-2026-71345, CVE-2026-69469, CVE-2026-69501, CVE-2026-69548, CVE-2026-69846, CVE-2026-70283, CVE-2026-72981, CVE-2026-77491, CVE-2026-77492, CVE-2026-77503, CVE-2026-80093, CVE-2026-72949, CVE-2026-70019, CVE-2026-72940, CVE-2026-69573, CVE-2026-70290, CVE-2026-83991, CVE-2026-83999, CVE-2026-69321, CVE-2026-69316, CVE-2026-69340, CVE-2026-69348, CVE-2026-69350, CVE-2026-69353, CVE-2026-69357, CVE-2026-69393, CVE-2026-69410, CVE-2026-69421, CVE-2026-69428, CVE-2026-69425, CVE-2026-69427, CVE-2026-69434, CVE-2026-69456, CVE-2026-69459, CVE-2026-69478, CVE-2026-69561, CVE-2026-69512, CVE-2026-69498, CVE-2026-69571, CVE-2026-69535, CVE-2026-69538, CVE-2026-69566, CVE-2026-69567, CVE-2026-69584, CVE-2026-69617, CVE-2026-69630, CVE-2026-69610, CVE-2026-69881, CVE-2026-69680, CVE-2026-69619, CVE-2026-69685, CVE-2026-69643, CVE-2026-69687, CVE-2026-69791, CVE-2026-69707, CVE-2026-69652, CVE-2026-69834, CVE-2026-69709, CVE-2026-69844, CVE-2026-69814, CVE-2026-69731, CVE-2026-69706, CVE-2026-69779, CVE-2026-69895, CVE-2026-69792, CVE-2026-69853, CVE-2026-69761, CVE-2026-69785, CVE-2026-69818, CVE-2026-69786, CVE-2026-69874, CVE-2026-70565, CVE-2026-70574, CVE-2026-70569, CVE-2026-70575, CVE-2026-71349, CVE-2026-72927, CVE-2026-72952, CVE-2026-72942, CVE-2026-72966, CVE-2026-72967, CVE-2026-69426, CVE-2026-69564, CVE-2026-72985, CVE-2026-73019, CVE-2026-78451, CVE-2026-78452, CVE-2026-83940, CVE-2026-69598, CVE-2026-83995, CVE-2026-83501, CVE-2026-83498.

CVE-2026-69569

A vulnerability in the Windows Print Spooler components allows a network-adjacent, authorized attacker to trigger an untrusted pointer dereference, resulting in a denial-of-service (DoS) condition on the affected service.

Affected products:

Windows Print Spooler

Source: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-69569

Related in this roundup: CVE-2026-68835, CVE-2026-68848, CVE-2026-69309, CVE-2026-69552, CVE-2026-69838, CVE-2026-70564, CVE-2026-85877, CVE-2026-69344, CVE-2026-69346, CVE-2026-69921.

CVE-2026-69581

A use-after-free vulnerability in the Windows Device Association Service can be exploited by an authorized local attacker to gain elevated privileges on the affected Windows system.

Affected products:

Windows Device Association Service

Source: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-69581

Related in this roundup: CVE-2026-69574, CVE-2026-77500, CVE-2026-69488, CVE-2026-69714, CVE-2026-69866.

CVE-2026-69612

CVE-2026-69612 describes an absolute path traversal vulnerability within the Windows Error Reporting component, enabling a locally authenticated attacker to achieve privilege escalation.

Affected products:

Windows Error Reporting

Source: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-69612

CVE-2026-69566

CVE-2026-69566 is a heap-based buffer overflow vulnerability in the Windows NTFS filesystem component. The vulnerability allows an unauthorized attacker with physical access to the target system to achieve remote code execution.

Affected products:

Windows

Source: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-69566

Related in this roundup: CVE-2026-81963, CVE-2026-85880, CVE-2026-69496, CVE-2026-69586, CVE-2026-69768, CVE-2026-73025, CVE-2026-56172, CVE-2026-68832, CVE-2026-68834, CVE-2026-68838, CVE-2026-68841, CVE-2026-68875, CVE-2026-68877, CVE-2026-68880, CVE-2026-69265, CVE-2026-69270, CVE-2026-69274, CVE-2026-69275, CVE-2026-69280, CVE-2026-69283, CVE-2026-69284, CVE-2026-69289, CVE-2026-69296, CVE-2026-69300, CVE-2026-69301, CVE-2026-69307, CVE-2026-69312, CVE-2026-69314, CVE-2026-69332, CVE-2026-69333, CVE-2026-69335, CVE-2026-68833, CVE-2026-68851, CVE-2026-69366, CVE-2026-69337, CVE-2026-69347, CVE-2026-69379, CVE-2026-69390, CVE-2026-69401, CVE-2026-69413, CVE-2026-69420, CVE-2026-69429, CVE-2026-69448, CVE-2026-69455, CVE-2026-69532, CVE-2026-69472, CVE-2026-69479, CVE-2026-69531, CVE-2026-69517, CVE-2026-69505, CVE-2026-69504, CVE-2026-69527, CVE-2026-69549, CVE-2026-69588, CVE-2026-69609, CVE-2026-69648, CVE-2026-69689, CVE-2026-69790, CVE-2026-69638, CVE-2026-69859, CVE-2026-69717, CVE-2026-69711, CVE-2026-69875, CVE-2026-69889, CVE-2026-69757, CVE-2026-69741, CVE-2026-69762, CVE-2026-69744, CVE-2026-69832, CVE-2026-69691, CVE-2026-69808, CVE-2026-69775, CVE-2026-69822, CVE-2026-69770, CVE-2026-69676, CVE-2026-70289, CVE-2026-70563, CVE-2026-71329, CVE-2026-71332, CVE-2026-71350, CVE-2026-71348, CVE-2026-71345, CVE-2026-69469, CVE-2026-69501, CVE-2026-69548, CVE-2026-69846, CVE-2026-70283, CVE-2026-72981, CVE-2026-77491, CVE-2026-77492, CVE-2026-77503, CVE-2026-80093, CVE-2026-72949, CVE-2026-70019, CVE-2026-72940, CVE-2026-69573, CVE-2026-70290, CVE-2026-83991, CVE-2026-83999, CVE-2026-69321, CVE-2026-69316, CVE-2026-69340, CVE-2026-69348, CVE-2026-69350, CVE-2026-69353, CVE-2026-69357, CVE-2026-69393, CVE-2026-69410, CVE-2026-69421, CVE-2026-69428, CVE-2026-69425, CVE-2026-69427, CVE-2026-69434, CVE-2026-69456, CVE-2026-69459, CVE-2026-69478, CVE-2026-69561, CVE-2026-69512, CVE-2026-69498, CVE-2026-69571, CVE-2026-69535, CVE-2026-69538, CVE-2026-69591, CVE-2026-69567, CVE-2026-69584, CVE-2026-69617, CVE-2026-69630, CVE-2026-69610, CVE-2026-69881, CVE-2026-69680, CVE-2026-69619, CVE-2026-69685, CVE-2026-69643, CVE-2026-69687, CVE-2026-69791, CVE-2026-69707, CVE-2026-69652, CVE-2026-69834, CVE-2026-69709, CVE-2026-69844, CVE-2026-69814, CVE-2026-69731, CVE-2026-69706, CVE-2026-69779, CVE-2026-69895, CVE-2026-69792, CVE-2026-69853, CVE-2026-69761, CVE-2026-69785, CVE-2026-69818, CVE-2026-69786, CVE-2026-69874, CVE-2026-70565, CVE-2026-70574, CVE-2026-70569, CVE-2026-70575, CVE-2026-71349, CVE-2026-72927, CVE-2026-72952, CVE-2026-72942, CVE-2026-72966, CVE-2026-72967, CVE-2026-69426, CVE-2026-69564, CVE-2026-72985, CVE-2026-73019, CVE-2026-78451, CVE-2026-78452, CVE-2026-83940, CVE-2026-69598, CVE-2026-83995, CVE-2026-83501, CVE-2026-83498.

CVE-2026-69567

CVE-2026-69567 is a use-after-free vulnerability in the Windows NTFS file system that enables an attacker with local, authorized access to perform a privilege escalation attack.

Affected products:

Windows

Source: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-69567

Related in this roundup: CVE-2026-81963, CVE-2026-85880, CVE-2026-69496, CVE-2026-69586, CVE-2026-69768, CVE-2026-73025, CVE-2026-56172, CVE-2026-68832, CVE-2026-68834, CVE-2026-68838, CVE-2026-68841, CVE-2026-68875, CVE-2026-68877, CVE-2026-68880, CVE-2026-69265, CVE-2026-69270, CVE-2026-69274, CVE-2026-69275, CVE-2026-69280, CVE-2026-69283, CVE-2026-69284, CVE-2026-69289, CVE-2026-69296, CVE-2026-69300, CVE-2026-69301, CVE-2026-69307, CVE-2026-69312, CVE-2026-69314, CVE-2026-69332, CVE-2026-69333, CVE-2026-69335, CVE-2026-68833, CVE-2026-68851, CVE-2026-69366, CVE-2026-69337, CVE-2026-69347, CVE-2026-69379, CVE-2026-69390, CVE-2026-69401, CVE-2026-69413, CVE-2026-69420, CVE-2026-69429, CVE-2026-69448, CVE-2026-69455, CVE-2026-69532, CVE-2026-69472, CVE-2026-69479, CVE-2026-69531, CVE-2026-69517, CVE-2026-69505, CVE-2026-69504, CVE-2026-69527, CVE-2026-69549, CVE-2026-69588, CVE-2026-69609, CVE-2026-69648, CVE-2026-69689, CVE-2026-69790, CVE-2026-69638, CVE-2026-69859, CVE-2026-69717, CVE-2026-69711, CVE-2026-69875, CVE-2026-69889, CVE-2026-69757, CVE-2026-69741, CVE-2026-69762, CVE-2026-69744, CVE-2026-69832, CVE-2026-69691, CVE-2026-69808, CVE-2026-69775, CVE-2026-69822, CVE-2026-69770, CVE-2026-69676, CVE-2026-70289, CVE-2026-70563, CVE-2026-71329, CVE-2026-71332, CVE-2026-71350, CVE-2026-71348, CVE-2026-71345, CVE-2026-69469, CVE-2026-69501, CVE-2026-69548, CVE-2026-69846, CVE-2026-70283, CVE-2026-72981, CVE-2026-77491, CVE-2026-77492, CVE-2026-77503, CVE-2026-80093, CVE-2026-72949, CVE-2026-70019, CVE-2026-72940, CVE-2026-69573, CVE-2026-70290, CVE-2026-83991, CVE-2026-83999, CVE-2026-69321, CVE-2026-69316, CVE-2026-69340, CVE-2026-69348, CVE-2026-69350, CVE-2026-69353, CVE-2026-69357, CVE-2026-69393, CVE-2026-69410, CVE-2026-69421, CVE-2026-69428, CVE-2026-69425, CVE-2026-69427, CVE-2026-69434, CVE-2026-69456, CVE-2026-69459, CVE-2026-69478, CVE-2026-69561, CVE-2026-69512, CVE-2026-69498, CVE-2026-69571, CVE-2026-69535, CVE-2026-69538, CVE-2026-69591, CVE-2026-69566, CVE-2026-69584, CVE-2026-69617, CVE-2026-69630, CVE-2026-69610, CVE-2026-69881, CVE-2026-69680, CVE-2026-69619, CVE-2026-69685, CVE-2026-69643, CVE-2026-69687, CVE-2026-69791, CVE-2026-69707, CVE-2026-69652, CVE-2026-69834, CVE-2026-69709, CVE-2026-69844, CVE-2026-69814, CVE-2026-69731, CVE-2026-69706, CVE-2026-69779, CVE-2026-69895, CVE-2026-69792, CVE-2026-69853, CVE-2026-69761, CVE-2026-69785, CVE-2026-69818, CVE-2026-69786, CVE-2026-69874, CVE-2026-70565, CVE-2026-70574, CVE-2026-70569, CVE-2026-70575, CVE-2026-71349, CVE-2026-72927, CVE-2026-72952, CVE-2026-72942, CVE-2026-72966, CVE-2026-72967, CVE-2026-69426, CVE-2026-69564, CVE-2026-72985, CVE-2026-73019, CVE-2026-78451, CVE-2026-78452, CVE-2026-83940, CVE-2026-69598, CVE-2026-83995, CVE-2026-83501, CVE-2026-83498.

CVE-2026-69592

The Windows Universal Disk Format File System Driver (UDFS) contains a heap-based buffer overflow vulnerability that enables a local, authenticated attacker to escalate their privileges on the host system.

Affected products:

Windows Universal Disk Format File System Driver

Source: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-69592

Related in this roundup: CVE-2026-69758.

CVE-2026-69584

The Windows USB Video Driver contains an integer overflow or wraparound vulnerability that can be exploited by an authorized local attacker to achieve privilege escalation on the host system.

Affected products:

Windows

Source: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-69584

Related in this roundup: CVE-2026-81963, CVE-2026-85880, CVE-2026-69496, CVE-2026-69586, CVE-2026-69768, CVE-2026-73025, CVE-2026-56172, CVE-2026-68832, CVE-2026-68834, CVE-2026-68838, CVE-2026-68841, CVE-2026-68875, CVE-2026-68877, CVE-2026-68880, CVE-2026-69265, CVE-2026-69270, CVE-2026-69274, CVE-2026-69275, CVE-2026-69280, CVE-2026-69283, CVE-2026-69284, CVE-2026-69289, CVE-2026-69296, CVE-2026-69300, CVE-2026-69301, CVE-2026-69307, CVE-2026-69312, CVE-2026-69314, CVE-2026-69332, CVE-2026-69333, CVE-2026-69335, CVE-2026-68833, CVE-2026-68851, CVE-2026-69366, CVE-2026-69337, CVE-2026-69347, CVE-2026-69379, CVE-2026-69390, CVE-2026-69401, CVE-2026-69413, CVE-2026-69420, CVE-2026-69429, CVE-2026-69448, CVE-2026-69455, CVE-2026-69532, CVE-2026-69472, CVE-2026-69479, CVE-2026-69531, CVE-2026-69517, CVE-2026-69505, CVE-2026-69504, CVE-2026-69527, CVE-2026-69549, CVE-2026-69588, CVE-2026-69609, CVE-2026-69648, CVE-2026-69689, CVE-2026-69790, CVE-2026-69638, CVE-2026-69859, CVE-2026-69717, CVE-2026-69711, CVE-2026-69875, CVE-2026-69889, CVE-2026-69757, CVE-2026-69741, CVE-2026-69762, CVE-2026-69744, CVE-2026-69832, CVE-2026-69691, CVE-2026-69808, CVE-2026-69775, CVE-2026-69822, CVE-2026-69770, CVE-2026-69676, CVE-2026-70289, CVE-2026-70563, CVE-2026-71329, CVE-2026-71332, CVE-2026-71350, CVE-2026-71348, CVE-2026-71345, CVE-2026-69469, CVE-2026-69501, CVE-2026-69548, CVE-2026-69846, CVE-2026-70283, CVE-2026-72981, CVE-2026-77491, CVE-2026-77492, CVE-2026-77503, CVE-2026-80093, CVE-2026-72949, CVE-2026-70019, CVE-2026-72940, CVE-2026-69573, CVE-2026-70290, CVE-2026-83991, CVE-2026-83999, CVE-2026-69321, CVE-2026-69316, CVE-2026-69340, CVE-2026-69348, CVE-2026-69350, CVE-2026-69353, CVE-2026-69357, CVE-2026-69393, CVE-2026-69410, CVE-2026-69421, CVE-2026-69428, CVE-2026-69425, CVE-2026-69427, CVE-2026-69434, CVE-2026-69456, CVE-2026-69459, CVE-2026-69478, CVE-2026-69561, CVE-2026-69512, CVE-2026-69498, CVE-2026-69571, CVE-2026-69535, CVE-2026-69538, CVE-2026-69591, CVE-2026-69566, CVE-2026-69567, CVE-2026-69617, CVE-2026-69630, CVE-2026-69610, CVE-2026-69881, CVE-2026-69680, CVE-2026-69619, CVE-2026-69685, CVE-2026-69643, CVE-2026-69687, CVE-2026-69791, CVE-2026-69707, CVE-2026-69652, CVE-2026-69834, CVE-2026-69709, CVE-2026-69844, CVE-2026-69814, CVE-2026-69731, CVE-2026-69706, CVE-2026-69779, CVE-2026-69895, CVE-2026-69792, CVE-2026-69853, CVE-2026-69761, CVE-2026-69785, CVE-2026-69818, CVE-2026-69786, CVE-2026-69874, CVE-2026-70565, CVE-2026-70574, CVE-2026-70569, CVE-2026-70575, CVE-2026-71349, CVE-2026-72927, CVE-2026-72952, CVE-2026-72942, CVE-2026-72966, CVE-2026-72967, CVE-2026-69426, CVE-2026-69564, CVE-2026-72985, CVE-2026-73019, CVE-2026-78451, CVE-2026-78452, CVE-2026-83940, CVE-2026-69598, CVE-2026-83995, CVE-2026-83501, CVE-2026-83498.

CVE-2026-69600

CVE-2026-69600 is a use-after-free vulnerability within the Microsoft Windows Search Component that enables an authorized local attacker to achieve privilege escalation on the affected system.

Affected products:

Windows Search Component

Source: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-69600

Related in this roundup: CVE-2026-68896, CVE-2026-69305, CVE-2026-69322, CVE-2026-69507, CVE-2026-69554, CVE-2026-69585, CVE-2026-69608, CVE-2026-69453, CVE-2026-69911, CVE-2026-70145.

CVE-2026-69606

CVE-2026-69606 describes a use-after-free vulnerability in the Windows Shell that permits an authorized, locally authenticated attacker to escalate their privileges. Detection and mitigation should focus on ensuring all relevant security updates for the Windows Shell component are applied.

Affected products:

Windows Shell

Source: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-69606

Related in this roundup: CVE-2026-69829, CVE-2026-69528, CVE-2026-69383, CVE-2026-69392.

CVE-2026-69625

CVE-2026-69625 is a heap-based buffer overflow vulnerability in the Windows Connected User Experiences and Telemetry component. An authorized attacker can leverage this flaw to perform privilege escalation over a network.

Affected products:

Connected User Experiences and Telemetry

Source: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-69625

Related in this roundup: CVE-2026-69470.

CVE-2026-69618

CVE-2026-69618 is an out-of-bounds read vulnerability in the Windows SMB Client that allows an authorized local attacker to perform unauthorized information disclosure. This vulnerability occurs due to improper memory access during SMB protocol processing, potentially exposing sensitive data stored within the system memory.

Affected products:

Windows SMB Client

Source: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-69618

Related in this roundup: CVE-2026-69572, CVE-2026-69544, CVE-2026-72936.

CVE-2026-69624

A vulnerability exists in Active Directory Certificate Services (AD CS) due to improper validation of disallowed inputs. An authenticated attacker with sufficient permissions can exploit this flaw to perform unauthorized tampering with certificate services over the network, potentially leading to privilege escalation or persistence within the domain environment.

Affected products:

Active Directory Certificate Services

Source: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-69624

Related in this roundup: CVE-2026-62810, CVE-2026-69821, CVE-2026-69395.

CVE-2026-69597

A use-after-free vulnerability exists in the Windows HTTP.sys kernel driver, allowing an authenticated attacker to perform privilege escalation over the network.

Affected products:

Windows HTTP.sys

Source: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-69597

CVE-2026-69602

CVE-2026-69602 describes a use-after-free vulnerability in the Windows PrintWorkflowUserSvc service that can be exploited by an authorized attacker to achieve privilege escalation over a network.

Affected products:

Windows PrintWorkflowUserSvc

Source: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-69602

CVE-2026-69611

CVE-2026-69611 is a local privilege escalation vulnerability in the Windows Virtual Hard Disk (VHD) Miniport Driver caused by a use-after-free defect. An attacker with existing access to the system can exploit this flaw to execute code with elevated privileges.

Affected products:

Virtual Hard Disk (VHD) Miniport Driver

Source: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-69611

Related in this roundup: CVE-2026-69541, CVE-2026-69681, CVE-2026-81355, CVE-2026-69384.

CVE-2026-69617

CVE-2026-69617 is an out-of-bounds read vulnerability in the Windows Resilient File System (ReFS) that enables an authorized local attacker to elevate their privileges to a higher integrity level on the affected Windows system.

Affected products:

Windows

Source: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-69617

Related in this roundup: CVE-2026-81963, CVE-2026-85880, CVE-2026-69496, CVE-2026-69586, CVE-2026-69768, CVE-2026-73025, CVE-2026-56172, CVE-2026-68832, CVE-2026-68834, CVE-2026-68838, CVE-2026-68841, CVE-2026-68875, CVE-2026-68877, CVE-2026-68880, CVE-2026-69265, CVE-2026-69270, CVE-2026-69274, CVE-2026-69275, CVE-2026-69280, CVE-2026-69283, CVE-2026-69284, CVE-2026-69289, CVE-2026-69296, CVE-2026-69300, CVE-2026-69301, CVE-2026-69307, CVE-2026-69312, CVE-2026-69314, CVE-2026-69332, CVE-2026-69333, CVE-2026-69335, CVE-2026-68833, CVE-2026-68851, CVE-2026-69366, CVE-2026-69337, CVE-2026-69347, CVE-2026-69379, CVE-2026-69390, CVE-2026-69401, CVE-2026-69413, CVE-2026-69420, CVE-2026-69429, CVE-2026-69448, CVE-2026-69455, CVE-2026-69532, CVE-2026-69472, CVE-2026-69479, CVE-2026-69531, CVE-2026-69517, CVE-2026-69505, CVE-2026-69504, CVE-2026-69527, CVE-2026-69549, CVE-2026-69588, CVE-2026-69609, CVE-2026-69648, CVE-2026-69689, CVE-2026-69790, CVE-2026-69638, CVE-2026-69859, CVE-2026-69717, CVE-2026-69711, CVE-2026-69875, CVE-2026-69889, CVE-2026-69757, CVE-2026-69741, CVE-2026-69762, CVE-2026-69744, CVE-2026-69832, CVE-2026-69691, CVE-2026-69808, CVE-2026-69775, CVE-2026-69822, CVE-2026-69770, CVE-2026-69676, CVE-2026-70289, CVE-2026-70563, CVE-2026-71329, CVE-2026-71332, CVE-2026-71350, CVE-2026-71348, CVE-2026-71345, CVE-2026-69469, CVE-2026-69501, CVE-2026-69548, CVE-2026-69846, CVE-2026-70283, CVE-2026-72981, CVE-2026-77491, CVE-2026-77492, CVE-2026-77503, CVE-2026-80093, CVE-2026-72949, CVE-2026-70019, CVE-2026-72940, CVE-2026-69573, CVE-2026-70290, CVE-2026-83991, CVE-2026-83999, CVE-2026-69321, CVE-2026-69316, CVE-2026-69340, CVE-2026-69348, CVE-2026-69350, CVE-2026-69353, CVE-2026-69357, CVE-2026-69393, CVE-2026-69410, CVE-2026-69421, CVE-2026-69428, CVE-2026-69425, CVE-2026-69427, CVE-2026-69434, CVE-2026-69456, CVE-2026-69459, CVE-2026-69478, CVE-2026-69561, CVE-2026-69512, CVE-2026-69498, CVE-2026-69571, CVE-2026-69535, CVE-2026-69538, CVE-2026-69591, CVE-2026-69566, CVE-2026-69567, CVE-2026-69584, CVE-2026-69630, CVE-2026-69610, CVE-2026-69881, CVE-2026-69680, CVE-2026-69619, CVE-2026-69685, CVE-2026-69643, CVE-2026-69687, CVE-2026-69791, CVE-2026-69707, CVE-2026-69652, CVE-2026-69834, CVE-2026-69709, CVE-2026-69844, CVE-2026-69814, CVE-2026-69731, CVE-2026-69706, CVE-2026-69779, CVE-2026-69895, CVE-2026-69792, CVE-2026-69853, CVE-2026-69761, CVE-2026-69785, CVE-2026-69818, CVE-2026-69786, CVE-2026-69874, CVE-2026-70565, CVE-2026-70574, CVE-2026-70569, CVE-2026-70575, CVE-2026-71349, CVE-2026-72927, CVE-2026-72952, CVE-2026-72942, CVE-2026-72966, CVE-2026-72967, CVE-2026-69426, CVE-2026-69564, CVE-2026-72985, CVE-2026-73019, CVE-2026-78451, CVE-2026-78452, CVE-2026-83940, CVE-2026-69598, CVE-2026-83995, CVE-2026-83501, CVE-2026-83498.

CVE-2026-69616

CVE-2026-69616 is an out-of-bounds read vulnerability in Windows Remote Desktop Services that permits an authorized, locally authenticated attacker to disclose sensitive information from the system. Detection engineers should monitor for abnormal memory access patterns or unauthorized attempts to query system memory via RDP-related services.

Affected products:

Remote Desktop Services

Source: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-69616

Related in this roundup: CVE-2026-69525, CVE-2026-69287, CVE-2026-69514, CVE-2026-69539, CVE-2026-69599, CVE-2026-69536.

CVE-2026-69630

CVE-2026-69630 is an out-of-bounds read vulnerability in the Windows Win32K kernel-mode driver that can be exploited by an authenticated attacker to achieve local privilege escalation on the affected system.

Affected products:

Windows

Source: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-69630

Related in this roundup: CVE-2026-81963, CVE-2026-85880, CVE-2026-69496, CVE-2026-69586, CVE-2026-69768, CVE-2026-73025, CVE-2026-56172, CVE-2026-68832, CVE-2026-68834, CVE-2026-68838, CVE-2026-68841, CVE-2026-68875, CVE-2026-68877, CVE-2026-68880, CVE-2026-69265, CVE-2026-69270, CVE-2026-69274, CVE-2026-69275, CVE-2026-69280, CVE-2026-69283, CVE-2026-69284, CVE-2026-69289, CVE-2026-69296, CVE-2026-69300, CVE-2026-69301, CVE-2026-69307, CVE-2026-69312, CVE-2026-69314, CVE-2026-69332, CVE-2026-69333, CVE-2026-69335, CVE-2026-68833, CVE-2026-68851, CVE-2026-69366, CVE-2026-69337, CVE-2026-69347, CVE-2026-69379, CVE-2026-69390, CVE-2026-69401, CVE-2026-69413, CVE-2026-69420, CVE-2026-69429, CVE-2026-69448, CVE-2026-69455, CVE-2026-69532, CVE-2026-69472, CVE-2026-69479, CVE-2026-69531, CVE-2026-69517, CVE-2026-69505, CVE-2026-69504, CVE-2026-69527, CVE-2026-69549, CVE-2026-69588, CVE-2026-69609, CVE-2026-69648, CVE-2026-69689, CVE-2026-69790, CVE-2026-69638, CVE-2026-69859, CVE-2026-69717, CVE-2026-69711, CVE-2026-69875, CVE-2026-69889, CVE-2026-69757, CVE-2026-69741, CVE-2026-69762, CVE-2026-69744, CVE-2026-69832, CVE-2026-69691, CVE-2026-69808, CVE-2026-69775, CVE-2026-69822, CVE-2026-69770, CVE-2026-69676, CVE-2026-70289, CVE-2026-70563, CVE-2026-71329, CVE-2026-71332, CVE-2026-71350, CVE-2026-71348, CVE-2026-71345, CVE-2026-69469, CVE-2026-69501, CVE-2026-69548, CVE-2026-69846, CVE-2026-70283, CVE-2026-72981, CVE-2026-77491, CVE-2026-77492, CVE-2026-77503, CVE-2026-80093, CVE-2026-72949, CVE-2026-70019, CVE-2026-72940, CVE-2026-69573, CVE-2026-70290, CVE-2026-83991, CVE-2026-83999, CVE-2026-69321, CVE-2026-69316, CVE-2026-69340, CVE-2026-69348, CVE-2026-69350, CVE-2026-69353, CVE-2026-69357, CVE-2026-69393, CVE-2026-69410, CVE-2026-69421, CVE-2026-69428, CVE-2026-69425, CVE-2026-69427, CVE-2026-69434, CVE-2026-69456, CVE-2026-69459, CVE-2026-69478, CVE-2026-69561, CVE-2026-69512, CVE-2026-69498, CVE-2026-69571, CVE-2026-69535, CVE-2026-69538, CVE-2026-69591, CVE-2026-69566, CVE-2026-69567, CVE-2026-69584, CVE-2026-69617, CVE-2026-69610, CVE-2026-69881, CVE-2026-69680, CVE-2026-69619, CVE-2026-69685, CVE-2026-69643, CVE-2026-69687, CVE-2026-69791, CVE-2026-69707, CVE-2026-69652, CVE-2026-69834, CVE-2026-69709, CVE-2026-69844, CVE-2026-69814, CVE-2026-69731, CVE-2026-69706, CVE-2026-69779, CVE-2026-69895, CVE-2026-69792, CVE-2026-69853, CVE-2026-69761, CVE-2026-69785, CVE-2026-69818, CVE-2026-69786, CVE-2026-69874, CVE-2026-70565, CVE-2026-70574, CVE-2026-70569, CVE-2026-70575, CVE-2026-71349, CVE-2026-72927, CVE-2026-72952, CVE-2026-72942, CVE-2026-72966, CVE-2026-72967, CVE-2026-69426, CVE-2026-69564, CVE-2026-72985, CVE-2026-73019, CVE-2026-78451, CVE-2026-78452, CVE-2026-83940, CVE-2026-69598, CVE-2026-83995, CVE-2026-83501, CVE-2026-83498.

CVE-2026-69610

CVE-2026-69610 is a buffer over-read vulnerability in the Windows Win32k subsystem that permits a local, authorized attacker to escalate their privileges to a higher integrity level.

Affected products:

Windows

Source: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-69610

Related in this roundup: CVE-2026-81963, CVE-2026-85880, CVE-2026-69496, CVE-2026-69586, CVE-2026-69768, CVE-2026-73025, CVE-2026-56172, CVE-2026-68832, CVE-2026-68834, CVE-2026-68838, CVE-2026-68841, CVE-2026-68875, CVE-2026-68877, CVE-2026-68880, CVE-2026-69265, CVE-2026-69270, CVE-2026-69274, CVE-2026-69275, CVE-2026-69280, CVE-2026-69283, CVE-2026-69284, CVE-2026-69289, CVE-2026-69296, CVE-2026-69300, CVE-2026-69301, CVE-2026-69307, CVE-2026-69312, CVE-2026-69314, CVE-2026-69332, CVE-2026-69333, CVE-2026-69335, CVE-2026-68833, CVE-2026-68851, CVE-2026-69366, CVE-2026-69337, CVE-2026-69347, CVE-2026-69379, CVE-2026-69390, CVE-2026-69401, CVE-2026-69413, CVE-2026-69420, CVE-2026-69429, CVE-2026-69448, CVE-2026-69455, CVE-2026-69532, CVE-2026-69472, CVE-2026-69479, CVE-2026-69531, CVE-2026-69517, CVE-2026-69505, CVE-2026-69504, CVE-2026-69527, CVE-2026-69549, CVE-2026-69588, CVE-2026-69609, CVE-2026-69648, CVE-2026-69689, CVE-2026-69790, CVE-2026-69638, CVE-2026-69859, CVE-2026-69717, CVE-2026-69711, CVE-2026-69875, CVE-2026-69889, CVE-2026-69757, CVE-2026-69741, CVE-2026-69762, CVE-2026-69744, CVE-2026-69832, CVE-2026-69691, CVE-2026-69808, CVE-2026-69775, CVE-2026-69822, CVE-2026-69770, CVE-2026-69676, CVE-2026-70289, CVE-2026-70563, CVE-2026-71329, CVE-2026-71332, CVE-2026-71350, CVE-2026-71348, CVE-2026-71345, CVE-2026-69469, CVE-2026-69501, CVE-2026-69548, CVE-2026-69846, CVE-2026-70283, CVE-2026-72981, CVE-2026-77491, CVE-2026-77492, CVE-2026-77503, CVE-2026-80093, CVE-2026-72949, CVE-2026-70019, CVE-2026-72940, CVE-2026-69573, CVE-2026-70290, CVE-2026-83991, CVE-2026-83999, CVE-2026-69321, CVE-2026-69316, CVE-2026-69340, CVE-2026-69348, CVE-2026-69350, CVE-2026-69353, CVE-2026-69357, CVE-2026-69393, CVE-2026-69410, CVE-2026-69421, CVE-2026-69428, CVE-2026-69425, CVE-2026-69427, CVE-2026-69434, CVE-2026-69456, CVE-2026-69459, CVE-2026-69478, CVE-2026-69561, CVE-2026-69512, CVE-2026-69498, CVE-2026-69571, CVE-2026-69535, CVE-2026-69538, CVE-2026-69591, CVE-2026-69566, CVE-2026-69567, CVE-2026-69584, CVE-2026-69617, CVE-2026-69630, CVE-2026-69881, CVE-2026-69680, CVE-2026-69619, CVE-2026-69685, CVE-2026-69643, CVE-2026-69687, CVE-2026-69791, CVE-2026-69707, CVE-2026-69652, CVE-2026-69834, CVE-2026-69709, CVE-2026-69844, CVE-2026-69814, CVE-2026-69731, CVE-2026-69706, CVE-2026-69779, CVE-2026-69895, CVE-2026-69792, CVE-2026-69853, CVE-2026-69761, CVE-2026-69785, CVE-2026-69818, CVE-2026-69786, CVE-2026-69874, CVE-2026-70565, CVE-2026-70574, CVE-2026-70569, CVE-2026-70575, CVE-2026-71349, CVE-2026-72927, CVE-2026-72952, CVE-2026-72942, CVE-2026-72966, CVE-2026-72967, CVE-2026-69426, CVE-2026-69564, CVE-2026-72985, CVE-2026-73019, CVE-2026-78451, CVE-2026-78452, CVE-2026-83940, CVE-2026-69598, CVE-2026-83995, CVE-2026-83501, CVE-2026-83498.

CVE-2026-69613

A use-after-free vulnerability in the Windows Image Acquisition service allows a local, authenticated attacker to escalate their privileges to a higher level within the system.

Affected products:

Windows Image Acquisition

Source: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-69613

Related in this roundup: CVE-2026-69341, CVE-2026-69500, CVE-2026-69483.

CVE-2026-69669

CVE-2026-69669 is a remote code execution vulnerability residing in the Windows Kernel. It is caused by a heap-based buffer overflow, which can be exploited by an unauthorized network attacker to execute arbitrary code with kernel privileges.

Affected products:

Windows Kernel

Source: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-69669

Related in this roundup: CVE-2026-68846, CVE-2026-68884, CVE-2026-85360, CVE-2026-69406, CVE-2026-69473, CVE-2026-69723, CVE-2026-83942, CVE-2026-69466, CVE-2026-69578.

CVE-2026-69881

CVE-2026-69881 is a denial of service vulnerability affecting the Windows Internet Key Exchange (IKE) extension, allowing an unauthenticated remote attacker to trigger a system crash by sending specifically crafted packets to the target system.

Affected products:

Windows

Source: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-69881

Related in this roundup: CVE-2026-81963, CVE-2026-85880, CVE-2026-69496, CVE-2026-69586, CVE-2026-69768, CVE-2026-73025, CVE-2026-56172, CVE-2026-68832, CVE-2026-68834, CVE-2026-68838, CVE-2026-68841, CVE-2026-68875, CVE-2026-68877, CVE-2026-68880, CVE-2026-69265, CVE-2026-69270, CVE-2026-69274, CVE-2026-69275, CVE-2026-69280, CVE-2026-69283, CVE-2026-69284, CVE-2026-69289, CVE-2026-69296, CVE-2026-69300, CVE-2026-69301, CVE-2026-69307, CVE-2026-69312, CVE-2026-69314, CVE-2026-69332, CVE-2026-69333, CVE-2026-69335, CVE-2026-68833, CVE-2026-68851, CVE-2026-69366, CVE-2026-69337, CVE-2026-69347, CVE-2026-69379, CVE-2026-69390, CVE-2026-69401, CVE-2026-69413, CVE-2026-69420, CVE-2026-69429, CVE-2026-69448, CVE-2026-69455, CVE-2026-69532, CVE-2026-69472, CVE-2026-69479, CVE-2026-69531, CVE-2026-69517, CVE-2026-69505, CVE-2026-69504, CVE-2026-69527, CVE-2026-69549, CVE-2026-69588, CVE-2026-69609, CVE-2026-69648, CVE-2026-69689, CVE-2026-69790, CVE-2026-69638, CVE-2026-69859, CVE-2026-69717, CVE-2026-69711, CVE-2026-69875, CVE-2026-69889, CVE-2026-69757, CVE-2026-69741, CVE-2026-69762, CVE-2026-69744, CVE-2026-69832, CVE-2026-69691, CVE-2026-69808, CVE-2026-69775, CVE-2026-69822, CVE-2026-69770, CVE-2026-69676, CVE-2026-70289, CVE-2026-70563, CVE-2026-71329, CVE-2026-71332, CVE-2026-71350, CVE-2026-71348, CVE-2026-71345, CVE-2026-69469, CVE-2026-69501, CVE-2026-69548, CVE-2026-69846, CVE-2026-70283, CVE-2026-72981, CVE-2026-77491, CVE-2026-77492, CVE-2026-77503, CVE-2026-80093, CVE-2026-72949, CVE-2026-70019, CVE-2026-72940, CVE-2026-69573, CVE-2026-70290, CVE-2026-83991, CVE-2026-83999, CVE-2026-69321, CVE-2026-69316, CVE-2026-69340, CVE-2026-69348, CVE-2026-69350, CVE-2026-69353, CVE-2026-69357, CVE-2026-69393, CVE-2026-69410, CVE-2026-69421, CVE-2026-69428, CVE-2026-69425, CVE-2026-69427, CVE-2026-69434, CVE-2026-69456, CVE-2026-69459, CVE-2026-69478, CVE-2026-69561, CVE-2026-69512, CVE-2026-69498, CVE-2026-69571, CVE-2026-69535, CVE-2026-69538, CVE-2026-69591, CVE-2026-69566, CVE-2026-69567, CVE-2026-69584, CVE-2026-69617, CVE-2026-69630, CVE-2026-69610, CVE-2026-69680, CVE-2026-69619, CVE-2026-69685, CVE-2026-69643, CVE-2026-69687, CVE-2026-69791, CVE-2026-69707, CVE-2026-69652, CVE-2026-69834, CVE-2026-69709, CVE-2026-69844, CVE-2026-69814, CVE-2026-69731, CVE-2026-69706, CVE-2026-69779, CVE-2026-69895, CVE-2026-69792, CVE-2026-69853, CVE-2026-69761, CVE-2026-69785, CVE-2026-69818, CVE-2026-69786, CVE-2026-69874, CVE-2026-70565, CVE-2026-70574, CVE-2026-70569, CVE-2026-70575, CVE-2026-71349, CVE-2026-72927, CVE-2026-72952, CVE-2026-72942, CVE-2026-72966, CVE-2026-72967, CVE-2026-69426, CVE-2026-69564, CVE-2026-72985, CVE-2026-73019, CVE-2026-78451, CVE-2026-78452, CVE-2026-83940, CVE-2026-69598, CVE-2026-83995, CVE-2026-83501, CVE-2026-83498.

CVE-2026-69680

CVE-2026-69680 is a vulnerability in the Windows DNS component caused by an origin validation error. This flaw allows an unauthorized network-based attacker to perform DNS spoofing, potentially redirecting traffic to malicious servers by tampering with DNS responses.

Affected products:

Windows

Source: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-69680

Related in this roundup: CVE-2026-81963, CVE-2026-85880, CVE-2026-69496, CVE-2026-69586, CVE-2026-69768, CVE-2026-73025, CVE-2026-56172, CVE-2026-68832, CVE-2026-68834, CVE-2026-68838, CVE-2026-68841, CVE-2026-68875, CVE-2026-68877, CVE-2026-68880, CVE-2026-69265, CVE-2026-69270, CVE-2026-69274, CVE-2026-69275, CVE-2026-69280, CVE-2026-69283, CVE-2026-69284, CVE-2026-69289, CVE-2026-69296, CVE-2026-69300, CVE-2026-69301, CVE-2026-69307, CVE-2026-69312, CVE-2026-69314, CVE-2026-69332, CVE-2026-69333, CVE-2026-69335, CVE-2026-68833, CVE-2026-68851, CVE-2026-69366, CVE-2026-69337, CVE-2026-69347, CVE-2026-69379, CVE-2026-69390, CVE-2026-69401, CVE-2026-69413, CVE-2026-69420, CVE-2026-69429, CVE-2026-69448, CVE-2026-69455, CVE-2026-69532, CVE-2026-69472, CVE-2026-69479, CVE-2026-69531, CVE-2026-69517, CVE-2026-69505, CVE-2026-69504, CVE-2026-69527, CVE-2026-69549, CVE-2026-69588, CVE-2026-69609, CVE-2026-69648, CVE-2026-69689, CVE-2026-69790, CVE-2026-69638, CVE-2026-69859, CVE-2026-69717, CVE-2026-69711, CVE-2026-69875, CVE-2026-69889, CVE-2026-69757, CVE-2026-69741, CVE-2026-69762, CVE-2026-69744, CVE-2026-69832, CVE-2026-69691, CVE-2026-69808, CVE-2026-69775, CVE-2026-69822, CVE-2026-69770, CVE-2026-69676, CVE-2026-70289, CVE-2026-70563, CVE-2026-71329, CVE-2026-71332, CVE-2026-71350, CVE-2026-71348, CVE-2026-71345, CVE-2026-69469, CVE-2026-69501, CVE-2026-69548, CVE-2026-69846, CVE-2026-70283, CVE-2026-72981, CVE-2026-77491, CVE-2026-77492, CVE-2026-77503, CVE-2026-80093, CVE-2026-72949, CVE-2026-70019, CVE-2026-72940, CVE-2026-69573, CVE-2026-70290, CVE-2026-83991, CVE-2026-83999, CVE-2026-69321, CVE-2026-69316, CVE-2026-69340, CVE-2026-69348, CVE-2026-69350, CVE-2026-69353, CVE-2026-69357, CVE-2026-69393, CVE-2026-69410, CVE-2026-69421, CVE-2026-69428, CVE-2026-69425, CVE-2026-69427, CVE-2026-69434, CVE-2026-69456, CVE-2026-69459, CVE-2026-69478, CVE-2026-69561, CVE-2026-69512, CVE-2026-69498, CVE-2026-69571, CVE-2026-69535, CVE-2026-69538, CVE-2026-69591, CVE-2026-69566, CVE-2026-69567, CVE-2026-69584, CVE-2026-69617, CVE-2026-69630, CVE-2026-69610, CVE-2026-69881, CVE-2026-69619, CVE-2026-69685, CVE-2026-69643, CVE-2026-69687, CVE-2026-69791, CVE-2026-69707, CVE-2026-69652, CVE-2026-69834, CVE-2026-69709, CVE-2026-69844, CVE-2026-69814, CVE-2026-69731, CVE-2026-69706, CVE-2026-69779, CVE-2026-69895, CVE-2026-69792, CVE-2026-69853, CVE-2026-69761, CVE-2026-69785, CVE-2026-69818, CVE-2026-69786, CVE-2026-69874, CVE-2026-70565, CVE-2026-70574, CVE-2026-70569, CVE-2026-70575, CVE-2026-71349, CVE-2026-72927, CVE-2026-72952, CVE-2026-72942, CVE-2026-72966, CVE-2026-72967, CVE-2026-69426, CVE-2026-69564, CVE-2026-72985, CVE-2026-73019, CVE-2026-78451, CVE-2026-78452, CVE-2026-83940, CVE-2026-69598, CVE-2026-83995, CVE-2026-83501, CVE-2026-83498.

CVE-2026-69817

The Windows Bluetooth Port Driver contains a use-after-free vulnerability that can be exploited by an authorized local attacker to achieve privilege escalation.

Affected products:

Windows Bluetooth Port Driver

Source: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-69817

Related in this roundup: CVE-2026-68849.

CVE-2026-69619

CVE-2026-69619 describes an out-of-bounds read vulnerability in the Windows exFAT file system driver. An authorized network attacker could leverage this flaw to achieve privilege escalation on an affected Windows system.

Affected products:

Windows

Source: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-69619

Related in this roundup: CVE-2026-81963, CVE-2026-85880, CVE-2026-69496, CVE-2026-69586, CVE-2026-69768, CVE-2026-73025, CVE-2026-56172, CVE-2026-68832, CVE-2026-68834, CVE-2026-68838, CVE-2026-68841, CVE-2026-68875, CVE-2026-68877, CVE-2026-68880, CVE-2026-69265, CVE-2026-69270, CVE-2026-69274, CVE-2026-69275, CVE-2026-69280, CVE-2026-69283, CVE-2026-69284, CVE-2026-69289, CVE-2026-69296, CVE-2026-69300, CVE-2026-69301, CVE-2026-69307, CVE-2026-69312, CVE-2026-69314, CVE-2026-69332, CVE-2026-69333, CVE-2026-69335, CVE-2026-68833, CVE-2026-68851, CVE-2026-69366, CVE-2026-69337, CVE-2026-69347, CVE-2026-69379, CVE-2026-69390, CVE-2026-69401, CVE-2026-69413, CVE-2026-69420, CVE-2026-69429, CVE-2026-69448, CVE-2026-69455, CVE-2026-69532, CVE-2026-69472, CVE-2026-69479, CVE-2026-69531, CVE-2026-69517, CVE-2026-69505, CVE-2026-69504, CVE-2026-69527, CVE-2026-69549, CVE-2026-69588, CVE-2026-69609, CVE-2026-69648, CVE-2026-69689, CVE-2026-69790, CVE-2026-69638, CVE-2026-69859, CVE-2026-69717, CVE-2026-69711, CVE-2026-69875, CVE-2026-69889, CVE-2026-69757, CVE-2026-69741, CVE-2026-69762, CVE-2026-69744, CVE-2026-69832, CVE-2026-69691, CVE-2026-69808, CVE-2026-69775, CVE-2026-69822, CVE-2026-69770, CVE-2026-69676, CVE-2026-70289, CVE-2026-70563, CVE-2026-71329, CVE-2026-71332, CVE-2026-71350, CVE-2026-71348, CVE-2026-71345, CVE-2026-69469, CVE-2026-69501, CVE-2026-69548, CVE-2026-69846, CVE-2026-70283, CVE-2026-72981, CVE-2026-77491, CVE-2026-77492, CVE-2026-77503, CVE-2026-80093, CVE-2026-72949, CVE-2026-70019, CVE-2026-72940, CVE-2026-69573, CVE-2026-70290, CVE-2026-83991, CVE-2026-83999, CVE-2026-69321, CVE-2026-69316, CVE-2026-69340, CVE-2026-69348, CVE-2026-69350, CVE-2026-69353, CVE-2026-69357, CVE-2026-69393, CVE-2026-69410, CVE-2026-69421, CVE-2026-69428, CVE-2026-69425, CVE-2026-69427, CVE-2026-69434, CVE-2026-69456, CVE-2026-69459, CVE-2026-69478, CVE-2026-69561, CVE-2026-69512, CVE-2026-69498, CVE-2026-69571, CVE-2026-69535, CVE-2026-69538, CVE-2026-69591, CVE-2026-69566, CVE-2026-69567, CVE-2026-69584, CVE-2026-69617, CVE-2026-69630, CVE-2026-69610, CVE-2026-69881, CVE-2026-69680, CVE-2026-69685, CVE-2026-69643, CVE-2026-69687, CVE-2026-69791, CVE-2026-69707, CVE-2026-69652, CVE-2026-69834, CVE-2026-69709, CVE-2026-69844, CVE-2026-69814, CVE-2026-69731, CVE-2026-69706, CVE-2026-69779, CVE-2026-69895, CVE-2026-69792, CVE-2026-69853, CVE-2026-69761, CVE-2026-69785, CVE-2026-69818, CVE-2026-69786, CVE-2026-69874, CVE-2026-70565, CVE-2026-70574, CVE-2026-70569, CVE-2026-70575, CVE-2026-71349, CVE-2026-72927, CVE-2026-72952, CVE-2026-72942, CVE-2026-72966, CVE-2026-72967, CVE-2026-69426, CVE-2026-69564, CVE-2026-72985, CVE-2026-73019, CVE-2026-78451, CVE-2026-78452, CVE-2026-83940, CVE-2026-69598, CVE-2026-83995, CVE-2026-83501, CVE-2026-83498.

CVE-2026-69620

CVE-2026-69620 is a stack-based buffer overflow vulnerability in the Windows DHCP Server service. An unauthorized remote attacker can leverage this vulnerability to execute arbitrary code on the affected Windows Server host by sending specially crafted packets to the DHCP service.

Affected products:

Windows DHCP Server

Source: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-69620

Related in this roundup: CVE-2026-69845, CVE-2026-72979, CVE-2026-69266, CVE-2026-69412, CVE-2026-69415, CVE-2026-69929, CVE-2026-69930, CVE-2026-70124, CVE-2026-77494, CVE-2026-77498, CVE-2026-77499, CVE-2026-77501, CVE-2026-77502, CVE-2026-77887, CVE-2026-77888, CVE-2026-77886, CVE-2026-77890, CVE-2026-77889, CVE-2026-77891, CVE-2026-77893, CVE-2026-77895, CVE-2026-70065, CVE-2026-69297, CVE-2026-69342, CVE-2026-69405, CVE-2026-69416, CVE-2026-69497, CVE-2026-69547, CVE-2026-69637, CVE-2026-69803, CVE-2026-69679, CVE-2026-69878, CVE-2026-69847, CVE-2026-69876, CVE-2026-69510.

CVE-2026-69720

A heap-based buffer overflow vulnerability in the Windows MIDI Service Module allows an authorized local attacker to achieve privilege escalation by exploiting improper memory handling within the service.

Affected products:

Windows MIDI Service Module

Source: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-69720

Related in this roundup: CVE-2026-69339, CVE-2026-68842, CVE-2026-69440, CVE-2026-69508, CVE-2026-78464.

CVE-2026-69821

CVE-2026-69821 is an elevation of privilege vulnerability in Active Directory Certificate Services (AD CS) caused by improper encoding or escaping of output. An attacker with existing local access can exploit this flaw to gain higher privileges within the system.

Affected products:

Active Directory Certificate Services

Source: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-69821

Related in this roundup: CVE-2026-62810, CVE-2026-69624, CVE-2026-69395.

CVE-2026-69637

CVE-2026-69637 is an out-of-bounds read vulnerability in the Windows DHCP Server component that can be exploited by an authorized attacker on an adjacent network to trigger a denial of service condition.

Affected products:

Windows DHCP Server

Source: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-69637

Related in this roundup: CVE-2026-69845, CVE-2026-72979, CVE-2026-69266, CVE-2026-69412, CVE-2026-69415, CVE-2026-69929, CVE-2026-69930, CVE-2026-70124, CVE-2026-77494, CVE-2026-77498, CVE-2026-77499, CVE-2026-77501, CVE-2026-77502, CVE-2026-77887, CVE-2026-77888, CVE-2026-77886, CVE-2026-77890, CVE-2026-77889, CVE-2026-77891, CVE-2026-77893, CVE-2026-77895, CVE-2026-70065, CVE-2026-69297, CVE-2026-69342, CVE-2026-69405, CVE-2026-69416, CVE-2026-69497, CVE-2026-69547, CVE-2026-69620, CVE-2026-69803, CVE-2026-69679, CVE-2026-69878, CVE-2026-69847, CVE-2026-69876, CVE-2026-69510.

CVE-2026-69682

A use-after-free vulnerability in the Windows Host Guardian Service allows an authenticated, local attacker to escalate privileges. Successful exploitation requires the attacker to have already gained initial access to the target system.

Affected products:

Host Guardian Service

Source: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-69682

CVE-2026-69685

A heap-based buffer overflow vulnerability exists in the Windows Kerberos implementation that allows an authenticated local attacker to elevate their privileges to system level. Exploitation requires the attacker to already have local access to the system.

Affected products:

Windows

Source: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-69685

Related in this roundup: CVE-2026-81963, CVE-2026-85880, CVE-2026-69496, CVE-2026-69586, CVE-2026-69768, CVE-2026-73025, CVE-2026-56172, CVE-2026-68832, CVE-2026-68834, CVE-2026-68838, CVE-2026-68841, CVE-2026-68875, CVE-2026-68877, CVE-2026-68880, CVE-2026-69265, CVE-2026-69270, CVE-2026-69274, CVE-2026-69275, CVE-2026-69280, CVE-2026-69283, CVE-2026-69284, CVE-2026-69289, CVE-2026-69296, CVE-2026-69300, CVE-2026-69301, CVE-2026-69307, CVE-2026-69312, CVE-2026-69314, CVE-2026-69332, CVE-2026-69333, CVE-2026-69335, CVE-2026-68833, CVE-2026-68851, CVE-2026-69366, CVE-2026-69337, CVE-2026-69347, CVE-2026-69379, CVE-2026-69390, CVE-2026-69401, CVE-2026-69413, CVE-2026-69420, CVE-2026-69429, CVE-2026-69448, CVE-2026-69455, CVE-2026-69532, CVE-2026-69472, CVE-2026-69479, CVE-2026-69531, CVE-2026-69517, CVE-2026-69505, CVE-2026-69504, CVE-2026-69527, CVE-2026-69549, CVE-2026-69588, CVE-2026-69609, CVE-2026-69648, CVE-2026-69689, CVE-2026-69790, CVE-2026-69638, CVE-2026-69859, CVE-2026-69717, CVE-2026-69711, CVE-2026-69875, CVE-2026-69889, CVE-2026-69757, CVE-2026-69741, CVE-2026-69762, CVE-2026-69744, CVE-2026-69832, CVE-2026-69691, CVE-2026-69808, CVE-2026-69775, CVE-2026-69822, CVE-2026-69770, CVE-2026-69676, CVE-2026-70289, CVE-2026-70563, CVE-2026-71329, CVE-2026-71332, CVE-2026-71350, CVE-2026-71348, CVE-2026-71345, CVE-2026-69469, CVE-2026-69501, CVE-2026-69548, CVE-2026-69846, CVE-2026-70283, CVE-2026-72981, CVE-2026-77491, CVE-2026-77492, CVE-2026-77503, CVE-2026-80093, CVE-2026-72949, CVE-2026-70019, CVE-2026-72940, CVE-2026-69573, CVE-2026-70290, CVE-2026-83991, CVE-2026-83999, CVE-2026-69321, CVE-2026-69316, CVE-2026-69340, CVE-2026-69348, CVE-2026-69350, CVE-2026-69353, CVE-2026-69357, CVE-2026-69393, CVE-2026-69410, CVE-2026-69421, CVE-2026-69428, CVE-2026-69425, CVE-2026-69427, CVE-2026-69434, CVE-2026-69456, CVE-2026-69459, CVE-2026-69478, CVE-2026-69561, CVE-2026-69512, CVE-2026-69498, CVE-2026-69571, CVE-2026-69535, CVE-2026-69538, CVE-2026-69591, CVE-2026-69566, CVE-2026-69567, CVE-2026-69584, CVE-2026-69617, CVE-2026-69630, CVE-2026-69610, CVE-2026-69881, CVE-2026-69680, CVE-2026-69619, CVE-2026-69643, CVE-2026-69687, CVE-2026-69791, CVE-2026-69707, CVE-2026-69652, CVE-2026-69834, CVE-2026-69709, CVE-2026-69844, CVE-2026-69814, CVE-2026-69731, CVE-2026-69706, CVE-2026-69779, CVE-2026-69895, CVE-2026-69792, CVE-2026-69853, CVE-2026-69761, CVE-2026-69785, CVE-2026-69818, CVE-2026-69786, CVE-2026-69874, CVE-2026-70565, CVE-2026-70574, CVE-2026-70569, CVE-2026-70575, CVE-2026-71349, CVE-2026-72927, CVE-2026-72952, CVE-2026-72942, CVE-2026-72966, CVE-2026-72967, CVE-2026-69426, CVE-2026-69564, CVE-2026-72985, CVE-2026-73019, CVE-2026-78451, CVE-2026-78452, CVE-2026-83940, CVE-2026-69598, CVE-2026-83995, CVE-2026-83501, CVE-2026-83498.

CVE-2026-69803

CVE-2026-69803 describes an out-of-bounds read vulnerability in the Windows DHCP Server service that permits an unauthenticated attacker to disclose sensitive information from the server's memory via network requests.

Affected products:

Windows DHCP Server

Source: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-69803

Related in this roundup: CVE-2026-69845, CVE-2026-72979, CVE-2026-69266, CVE-2026-69412, CVE-2026-69415, CVE-2026-69929, CVE-2026-69930, CVE-2026-70124, CVE-2026-77494, CVE-2026-77498, CVE-2026-77499, CVE-2026-77501, CVE-2026-77502, CVE-2026-77887, CVE-2026-77888, CVE-2026-77886, CVE-2026-77890, CVE-2026-77889, CVE-2026-77891, CVE-2026-77893, CVE-2026-77895, CVE-2026-70065, CVE-2026-69297, CVE-2026-69342, CVE-2026-69405, CVE-2026-69416, CVE-2026-69497, CVE-2026-69547, CVE-2026-69620, CVE-2026-69637, CVE-2026-69679, CVE-2026-69878, CVE-2026-69847, CVE-2026-69876, CVE-2026-69510.

CVE-2026-69643

A heap-based buffer overflow vulnerability exists in the Windows Spaceport.sys driver, which can be exploited by an authenticated attacker to perform privilege escalation over a network.

Affected products:

Windows

Source: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-69643

Related in this roundup: CVE-2026-81963, CVE-2026-85880, CVE-2026-69496, CVE-2026-69586, CVE-2026-69768, CVE-2026-73025, CVE-2026-56172, CVE-2026-68832, CVE-2026-68834, CVE-2026-68838, CVE-2026-68841, CVE-2026-68875, CVE-2026-68877, CVE-2026-68880, CVE-2026-69265, CVE-2026-69270, CVE-2026-69274, CVE-2026-69275, CVE-2026-69280, CVE-2026-69283, CVE-2026-69284, CVE-2026-69289, CVE-2026-69296, CVE-2026-69300, CVE-2026-69301, CVE-2026-69307, CVE-2026-69312, CVE-2026-69314, CVE-2026-69332, CVE-2026-69333, CVE-2026-69335, CVE-2026-68833, CVE-2026-68851, CVE-2026-69366, CVE-2026-69337, CVE-2026-69347, CVE-2026-69379, CVE-2026-69390, CVE-2026-69401, CVE-2026-69413, CVE-2026-69420, CVE-2026-69429, CVE-2026-69448, CVE-2026-69455, CVE-2026-69532, CVE-2026-69472, CVE-2026-69479, CVE-2026-69531, CVE-2026-69517, CVE-2026-69505, CVE-2026-69504, CVE-2026-69527, CVE-2026-69549, CVE-2026-69588, CVE-2026-69609, CVE-2026-69648, CVE-2026-69689, CVE-2026-69790, CVE-2026-69638, CVE-2026-69859, CVE-2026-69717, CVE-2026-69711, CVE-2026-69875, CVE-2026-69889, CVE-2026-69757, CVE-2026-69741, CVE-2026-69762, CVE-2026-69744, CVE-2026-69832, CVE-2026-69691, CVE-2026-69808, CVE-2026-69775, CVE-2026-69822, CVE-2026-69770, CVE-2026-69676, CVE-2026-70289, CVE-2026-70563, CVE-2026-71329, CVE-2026-71332, CVE-2026-71350, CVE-2026-71348, CVE-2026-71345, CVE-2026-69469, CVE-2026-69501, CVE-2026-69548, CVE-2026-69846, CVE-2026-70283, CVE-2026-72981, CVE-2026-77491, CVE-2026-77492, CVE-2026-77503, CVE-2026-80093, CVE-2026-72949, CVE-2026-70019, CVE-2026-72940, CVE-2026-69573, CVE-2026-70290, CVE-2026-83991, CVE-2026-83999, CVE-2026-69321, CVE-2026-69316, CVE-2026-69340, CVE-2026-69348, CVE-2026-69350, CVE-2026-69353, CVE-2026-69357, CVE-2026-69393, CVE-2026-69410, CVE-2026-69421, CVE-2026-69428, CVE-2026-69425, CVE-2026-69427, CVE-2026-69434, CVE-2026-69456, CVE-2026-69459, CVE-2026-69478, CVE-2026-69561, CVE-2026-69512, CVE-2026-69498, CVE-2026-69571, CVE-2026-69535, CVE-2026-69538, CVE-2026-69591, CVE-2026-69566, CVE-2026-69567, CVE-2026-69584, CVE-2026-69617, CVE-2026-69630, CVE-2026-69610, CVE-2026-69881, CVE-2026-69680, CVE-2026-69619, CVE-2026-69685, CVE-2026-69687, CVE-2026-69791, CVE-2026-69707, CVE-2026-69652, CVE-2026-69834, CVE-2026-69709, CVE-2026-69844, CVE-2026-69814, CVE-2026-69731, CVE-2026-69706, CVE-2026-69779, CVE-2026-69895, CVE-2026-69792, CVE-2026-69853, CVE-2026-69761, CVE-2026-69785, CVE-2026-69818, CVE-2026-69786, CVE-2026-69874, CVE-2026-70565, CVE-2026-70574, CVE-2026-70569, CVE-2026-70575, CVE-2026-71349, CVE-2026-72927, CVE-2026-72952, CVE-2026-72942, CVE-2026-72966, CVE-2026-72967, CVE-2026-69426, CVE-2026-69564, CVE-2026-72985, CVE-2026-73019, CVE-2026-78451, CVE-2026-78452, CVE-2026-83940, CVE-2026-69598, CVE-2026-83995, CVE-2026-83501, CVE-2026-83498.

CVE-2026-69687

An integer underflow vulnerability exists in the Windows USB Audio Class driver (usbaudio.sys) that enables a local, authorized attacker to achieve privilege escalation via memory corruption.

Affected products:

Windows

Source: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-69687

Related in this roundup: CVE-2026-81963, CVE-2026-85880, CVE-2026-69496, CVE-2026-69586, CVE-2026-69768, CVE-2026-73025, CVE-2026-56172, CVE-2026-68832, CVE-2026-68834, CVE-2026-68838, CVE-2026-68841, CVE-2026-68875, CVE-2026-68877, CVE-2026-68880, CVE-2026-69265, CVE-2026-69270, CVE-2026-69274, CVE-2026-69275, CVE-2026-69280, CVE-2026-69283, CVE-2026-69284, CVE-2026-69289, CVE-2026-69296, CVE-2026-69300, CVE-2026-69301, CVE-2026-69307, CVE-2026-69312, CVE-2026-69314, CVE-2026-69332, CVE-2026-69333, CVE-2026-69335, CVE-2026-68833, CVE-2026-68851, CVE-2026-69366, CVE-2026-69337, CVE-2026-69347, CVE-2026-69379, CVE-2026-69390, CVE-2026-69401, CVE-2026-69413, CVE-2026-69420, CVE-2026-69429, CVE-2026-69448, CVE-2026-69455, CVE-2026-69532, CVE-2026-69472, CVE-2026-69479, CVE-2026-69531, CVE-2026-69517, CVE-2026-69505, CVE-2026-69504, CVE-2026-69527, CVE-2026-69549, CVE-2026-69588, CVE-2026-69609, CVE-2026-69648, CVE-2026-69689, CVE-2026-69790, CVE-2026-69638, CVE-2026-69859, CVE-2026-69717, CVE-2026-69711, CVE-2026-69875, CVE-2026-69889, CVE-2026-69757, CVE-2026-69741, CVE-2026-69762, CVE-2026-69744, CVE-2026-69832, CVE-2026-69691, CVE-2026-69808, CVE-2026-69775, CVE-2026-69822, CVE-2026-69770, CVE-2026-69676, CVE-2026-70289, CVE-2026-70563, CVE-2026-71329, CVE-2026-71332, CVE-2026-71350, CVE-2026-71348, CVE-2026-71345, CVE-2026-69469, CVE-2026-69501, CVE-2026-69548, CVE-2026-69846, CVE-2026-70283, CVE-2026-72981, CVE-2026-77491, CVE-2026-77492, CVE-2026-77503, CVE-2026-80093, CVE-2026-72949, CVE-2026-70019, CVE-2026-72940, CVE-2026-69573, CVE-2026-70290, CVE-2026-83991, CVE-2026-83999, CVE-2026-69321, CVE-2026-69316, CVE-2026-69340, CVE-2026-69348, CVE-2026-69350, CVE-2026-69353, CVE-2026-69357, CVE-2026-69393, CVE-2026-69410, CVE-2026-69421, CVE-2026-69428, CVE-2026-69425, CVE-2026-69427, CVE-2026-69434, CVE-2026-69456, CVE-2026-69459, CVE-2026-69478, CVE-2026-69561, CVE-2026-69512, CVE-2026-69498, CVE-2026-69571, CVE-2026-69535, CVE-2026-69538, CVE-2026-69591, CVE-2026-69566, CVE-2026-69567, CVE-2026-69584, CVE-2026-69617, CVE-2026-69630, CVE-2026-69610, CVE-2026-69881, CVE-2026-69680, CVE-2026-69619, CVE-2026-69685, CVE-2026-69643, CVE-2026-69791, CVE-2026-69707, CVE-2026-69652, CVE-2026-69834, CVE-2026-69709, CVE-2026-69844, CVE-2026-69814, CVE-2026-69731, CVE-2026-69706, CVE-2026-69779, CVE-2026-69895, CVE-2026-69792, CVE-2026-69853, CVE-2026-69761, CVE-2026-69785, CVE-2026-69818, CVE-2026-69786, CVE-2026-69874, CVE-2026-70565, CVE-2026-70574, CVE-2026-70569, CVE-2026-70575, CVE-2026-71349, CVE-2026-72927, CVE-2026-72952, CVE-2026-72942, CVE-2026-72966, CVE-2026-72967, CVE-2026-69426, CVE-2026-69564, CVE-2026-72985, CVE-2026-73019, CVE-2026-78451, CVE-2026-78452, CVE-2026-83940, CVE-2026-69598, CVE-2026-83995, CVE-2026-83501, CVE-2026-83498.

CVE-2026-69791

A use-after-free vulnerability in the Windows Device Association Service enables a local, authorized attacker to achieve privilege escalation on the affected system.

Affected products:

Windows

Source: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-69791

Related in this roundup: CVE-2026-81963, CVE-2026-85880, CVE-2026-69496, CVE-2026-69586, CVE-2026-69768, CVE-2026-73025, CVE-2026-56172, CVE-2026-68832, CVE-2026-68834, CVE-2026-68838, CVE-2026-68841, CVE-2026-68875, CVE-2026-68877, CVE-2026-68880, CVE-2026-69265, CVE-2026-69270, CVE-2026-69274, CVE-2026-69275, CVE-2026-69280, CVE-2026-69283, CVE-2026-69284, CVE-2026-69289, CVE-2026-69296, CVE-2026-69300, CVE-2026-69301, CVE-2026-69307, CVE-2026-69312, CVE-2026-69314, CVE-2026-69332, CVE-2026-69333, CVE-2026-69335, CVE-2026-68833, CVE-2026-68851, CVE-2026-69366, CVE-2026-69337, CVE-2026-69347, CVE-2026-69379, CVE-2026-69390, CVE-2026-69401, CVE-2026-69413, CVE-2026-69420, CVE-2026-69429, CVE-2026-69448, CVE-2026-69455, CVE-2026-69532, CVE-2026-69472, CVE-2026-69479, CVE-2026-69531, CVE-2026-69517, CVE-2026-69505, CVE-2026-69504, CVE-2026-69527, CVE-2026-69549, CVE-2026-69588, CVE-2026-69609, CVE-2026-69648, CVE-2026-69689, CVE-2026-69790, CVE-2026-69638, CVE-2026-69859, CVE-2026-69717, CVE-2026-69711, CVE-2026-69875, CVE-2026-69889, CVE-2026-69757, CVE-2026-69741, CVE-2026-69762, CVE-2026-69744, CVE-2026-69832, CVE-2026-69691, CVE-2026-69808, CVE-2026-69775, CVE-2026-69822, CVE-2026-69770, CVE-2026-69676, CVE-2026-70289, CVE-2026-70563, CVE-2026-71329, CVE-2026-71332, CVE-2026-71350, CVE-2026-71348, CVE-2026-71345, CVE-2026-69469, CVE-2026-69501, CVE-2026-69548, CVE-2026-69846, CVE-2026-70283, CVE-2026-72981, CVE-2026-77491, CVE-2026-77492, CVE-2026-77503, CVE-2026-80093, CVE-2026-72949, CVE-2026-70019, CVE-2026-72940, CVE-2026-69573, CVE-2026-70290, CVE-2026-83991, CVE-2026-83999, CVE-2026-69321, CVE-2026-69316, CVE-2026-69340, CVE-2026-69348, CVE-2026-69350, CVE-2026-69353, CVE-2026-69357, CVE-2026-69393, CVE-2026-69410, CVE-2026-69421, CVE-2026-69428, CVE-2026-69425, CVE-2026-69427, CVE-2026-69434, CVE-2026-69456, CVE-2026-69459, CVE-2026-69478, CVE-2026-69561, CVE-2026-69512, CVE-2026-69498, CVE-2026-69571, CVE-2026-69535, CVE-2026-69538, CVE-2026-69591, CVE-2026-69566, CVE-2026-69567, CVE-2026-69584, CVE-2026-69617, CVE-2026-69630, CVE-2026-69610, CVE-2026-69881, CVE-2026-69680, CVE-2026-69619, CVE-2026-69685, CVE-2026-69643, CVE-2026-69687, CVE-2026-69707, CVE-2026-69652, CVE-2026-69834, CVE-2026-69709, CVE-2026-69844, CVE-2026-69814, CVE-2026-69731, CVE-2026-69706, CVE-2026-69779, CVE-2026-69895, CVE-2026-69792, CVE-2026-69853, CVE-2026-69761, CVE-2026-69785, CVE-2026-69818, CVE-2026-69786, CVE-2026-69874, CVE-2026-70565, CVE-2026-70574, CVE-2026-70569, CVE-2026-70575, CVE-2026-71349, CVE-2026-72927, CVE-2026-72952, CVE-2026-72942, CVE-2026-72966, CVE-2026-72967, CVE-2026-69426, CVE-2026-69564, CVE-2026-72985, CVE-2026-73019, CVE-2026-78451, CVE-2026-78452, CVE-2026-83940, CVE-2026-69598, CVE-2026-83995, CVE-2026-83501, CVE-2026-83498.

CVE-2026-69707

An integer overflow or wraparound vulnerability exists in the Windows USB Audio Class driver (usbaudio.sys) which can be exploited by an authenticated local attacker to achieve privilege escalation.

Affected products:

Windows

Source: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-69707

Related in this roundup: CVE-2026-81963, CVE-2026-85880, CVE-2026-69496, CVE-2026-69586, CVE-2026-69768, CVE-2026-73025, CVE-2026-56172, CVE-2026-68832, CVE-2026-68834, CVE-2026-68838, CVE-2026-68841, CVE-2026-68875, CVE-2026-68877, CVE-2026-68880, CVE-2026-69265, CVE-2026-69270, CVE-2026-69274, CVE-2026-69275, CVE-2026-69280, CVE-2026-69283, CVE-2026-69284, CVE-2026-69289, CVE-2026-69296, CVE-2026-69300, CVE-2026-69301, CVE-2026-69307, CVE-2026-69312, CVE-2026-69314, CVE-2026-69332, CVE-2026-69333, CVE-2026-69335, CVE-2026-68833, CVE-2026-68851, CVE-2026-69366, CVE-2026-69337, CVE-2026-69347, CVE-2026-69379, CVE-2026-69390, CVE-2026-69401, CVE-2026-69413, CVE-2026-69420, CVE-2026-69429, CVE-2026-69448, CVE-2026-69455, CVE-2026-69532, CVE-2026-69472, CVE-2026-69479, CVE-2026-69531, CVE-2026-69517, CVE-2026-69505, CVE-2026-69504, CVE-2026-69527, CVE-2026-69549, CVE-2026-69588, CVE-2026-69609, CVE-2026-69648, CVE-2026-69689, CVE-2026-69790, CVE-2026-69638, CVE-2026-69859, CVE-2026-69717, CVE-2026-69711, CVE-2026-69875, CVE-2026-69889, CVE-2026-69757, CVE-2026-69741, CVE-2026-69762, CVE-2026-69744, CVE-2026-69832, CVE-2026-69691, CVE-2026-69808, CVE-2026-69775, CVE-2026-69822, CVE-2026-69770, CVE-2026-69676, CVE-2026-70289, CVE-2026-70563, CVE-2026-71329, CVE-2026-71332, CVE-2026-71350, CVE-2026-71348, CVE-2026-71345, CVE-2026-69469, CVE-2026-69501, CVE-2026-69548, CVE-2026-69846, CVE-2026-70283, CVE-2026-72981, CVE-2026-77491, CVE-2026-77492, CVE-2026-77503, CVE-2026-80093, CVE-2026-72949, CVE-2026-70019, CVE-2026-72940, CVE-2026-69573, CVE-2026-70290, CVE-2026-83991, CVE-2026-83999, CVE-2026-69321, CVE-2026-69316, CVE-2026-69340, CVE-2026-69348, CVE-2026-69350, CVE-2026-69353, CVE-2026-69357, CVE-2026-69393, CVE-2026-69410, CVE-2026-69421, CVE-2026-69428, CVE-2026-69425, CVE-2026-69427, CVE-2026-69434, CVE-2026-69456, CVE-2026-69459, CVE-2026-69478, CVE-2026-69561, CVE-2026-69512, CVE-2026-69498, CVE-2026-69571, CVE-2026-69535, CVE-2026-69538, CVE-2026-69591, CVE-2026-69566, CVE-2026-69567, CVE-2026-69584, CVE-2026-69617, CVE-2026-69630, CVE-2026-69610, CVE-2026-69881, CVE-2026-69680, CVE-2026-69619, CVE-2026-69685, CVE-2026-69643, CVE-2026-69687, CVE-2026-69791, CVE-2026-69652, CVE-2026-69834, CVE-2026-69709, CVE-2026-69844, CVE-2026-69814, CVE-2026-69731, CVE-2026-69706, CVE-2026-69779, CVE-2026-69895, CVE-2026-69792, CVE-2026-69853, CVE-2026-69761, CVE-2026-69785, CVE-2026-69818, CVE-2026-69786, CVE-2026-69874, CVE-2026-70565, CVE-2026-70574, CVE-2026-70569, CVE-2026-70575, CVE-2026-71349, CVE-2026-72927, CVE-2026-72952, CVE-2026-72942, CVE-2026-72966, CVE-2026-72967, CVE-2026-69426, CVE-2026-69564, CVE-2026-72985, CVE-2026-73019, CVE-2026-78451, CVE-2026-78452, CVE-2026-83940, CVE-2026-69598, CVE-2026-83995, CVE-2026-83501, CVE-2026-83498.

CVE-2026-69652

A use-after-free vulnerability exists in the Windows Win32k component that allows a locally authenticated attacker to escalate their privileges to a higher integrity level.

Affected products:

Windows

Source: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-69652

Related in this roundup: CVE-2026-81963, CVE-2026-85880, CVE-2026-69496, CVE-2026-69586, CVE-2026-69768, CVE-2026-73025, CVE-2026-56172, CVE-2026-68832, CVE-2026-68834, CVE-2026-68838, CVE-2026-68841, CVE-2026-68875, CVE-2026-68877, CVE-2026-68880, CVE-2026-69265, CVE-2026-69270, CVE-2026-69274, CVE-2026-69275, CVE-2026-69280, CVE-2026-69283, CVE-2026-69284, CVE-2026-69289, CVE-2026-69296, CVE-2026-69300, CVE-2026-69301, CVE-2026-69307, CVE-2026-69312, CVE-2026-69314, CVE-2026-69332, CVE-2026-69333, CVE-2026-69335, CVE-2026-68833, CVE-2026-68851, CVE-2026-69366, CVE-2026-69337, CVE-2026-69347, CVE-2026-69379, CVE-2026-69390, CVE-2026-69401, CVE-2026-69413, CVE-2026-69420, CVE-2026-69429, CVE-2026-69448, CVE-2026-69455, CVE-2026-69532, CVE-2026-69472, CVE-2026-69479, CVE-2026-69531, CVE-2026-69517, CVE-2026-69505, CVE-2026-69504, CVE-2026-69527, CVE-2026-69549, CVE-2026-69588, CVE-2026-69609, CVE-2026-69648, CVE-2026-69689, CVE-2026-69790, CVE-2026-69638, CVE-2026-69859, CVE-2026-69717, CVE-2026-69711, CVE-2026-69875, CVE-2026-69889, CVE-2026-69757, CVE-2026-69741, CVE-2026-69762, CVE-2026-69744, CVE-2026-69832, CVE-2026-69691, CVE-2026-69808, CVE-2026-69775, CVE-2026-69822, CVE-2026-69770, CVE-2026-69676, CVE-2026-70289, CVE-2026-70563, CVE-2026-71329, CVE-2026-71332, CVE-2026-71350, CVE-2026-71348, CVE-2026-71345, CVE-2026-69469, CVE-2026-69501, CVE-2026-69548, CVE-2026-69846, CVE-2026-70283, CVE-2026-72981, CVE-2026-77491, CVE-2026-77492, CVE-2026-77503, CVE-2026-80093, CVE-2026-72949, CVE-2026-70019, CVE-2026-72940, CVE-2026-69573, CVE-2026-70290, CVE-2026-83991, CVE-2026-83999, CVE-2026-69321, CVE-2026-69316, CVE-2026-69340, CVE-2026-69348, CVE-2026-69350, CVE-2026-69353, CVE-2026-69357, CVE-2026-69393, CVE-2026-69410, CVE-2026-69421, CVE-2026-69428, CVE-2026-69425, CVE-2026-69427, CVE-2026-69434, CVE-2026-69456, CVE-2026-69459, CVE-2026-69478, CVE-2026-69561, CVE-2026-69512, CVE-2026-69498, CVE-2026-69571, CVE-2026-69535, CVE-2026-69538, CVE-2026-69591, CVE-2026-69566, CVE-2026-69567, CVE-2026-69584, CVE-2026-69617, CVE-2026-69630, CVE-2026-69610, CVE-2026-69881, CVE-2026-69680, CVE-2026-69619, CVE-2026-69685, CVE-2026-69643, CVE-2026-69687, CVE-2026-69791, CVE-2026-69707, CVE-2026-69834, CVE-2026-69709, CVE-2026-69844, CVE-2026-69814, CVE-2026-69731, CVE-2026-69706, CVE-2026-69779, CVE-2026-69895, CVE-2026-69792, CVE-2026-69853, CVE-2026-69761, CVE-2026-69785, CVE-2026-69818, CVE-2026-69786, CVE-2026-69874, CVE-2026-70565, CVE-2026-70574, CVE-2026-70569, CVE-2026-70575, CVE-2026-71349, CVE-2026-72927, CVE-2026-72952, CVE-2026-72942, CVE-2026-72966, CVE-2026-72967, CVE-2026-69426, CVE-2026-69564, CVE-2026-72985, CVE-2026-73019, CVE-2026-78451, CVE-2026-78452, CVE-2026-83940, CVE-2026-69598, CVE-2026-83995, CVE-2026-83501, CVE-2026-83498.

CVE-2026-69834

CVE-2026-69834 describes a use-after-free vulnerability within the Windows Advanced Local Procedure Call (ALPC) mechanism that can be exploited by an authorized user to achieve local privilege escalation.

Affected products:

Windows

Source: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-69834

Related in this roundup: CVE-2026-81963, CVE-2026-85880, CVE-2026-69496, CVE-2026-69586, CVE-2026-69768, CVE-2026-73025, CVE-2026-56172, CVE-2026-68832, CVE-2026-68834, CVE-2026-68838, CVE-2026-68841, CVE-2026-68875, CVE-2026-68877, CVE-2026-68880, CVE-2026-69265, CVE-2026-69270, CVE-2026-69274, CVE-2026-69275, CVE-2026-69280, CVE-2026-69283, CVE-2026-69284, CVE-2026-69289, CVE-2026-69296, CVE-2026-69300, CVE-2026-69301, CVE-2026-69307, CVE-2026-69312, CVE-2026-69314, CVE-2026-69332, CVE-2026-69333, CVE-2026-69335, CVE-2026-68833, CVE-2026-68851, CVE-2026-69366, CVE-2026-69337, CVE-2026-69347, CVE-2026-69379, CVE-2026-69390, CVE-2026-69401, CVE-2026-69413, CVE-2026-69420, CVE-2026-69429, CVE-2026-69448, CVE-2026-69455, CVE-2026-69532, CVE-2026-69472, CVE-2026-69479, CVE-2026-69531, CVE-2026-69517, CVE-2026-69505, CVE-2026-69504, CVE-2026-69527, CVE-2026-69549, CVE-2026-69588, CVE-2026-69609, CVE-2026-69648, CVE-2026-69689, CVE-2026-69790, CVE-2026-69638, CVE-2026-69859, CVE-2026-69717, CVE-2026-69711, CVE-2026-69875, CVE-2026-69889, CVE-2026-69757, CVE-2026-69741, CVE-2026-69762, CVE-2026-69744, CVE-2026-69832, CVE-2026-69691, CVE-2026-69808, CVE-2026-69775, CVE-2026-69822, CVE-2026-69770, CVE-2026-69676, CVE-2026-70289, CVE-2026-70563, CVE-2026-71329, CVE-2026-71332, CVE-2026-71350, CVE-2026-71348, CVE-2026-71345, CVE-2026-69469, CVE-2026-69501, CVE-2026-69548, CVE-2026-69846, CVE-2026-70283, CVE-2026-72981, CVE-2026-77491, CVE-2026-77492, CVE-2026-77503, CVE-2026-80093, CVE-2026-72949, CVE-2026-70019, CVE-2026-72940, CVE-2026-69573, CVE-2026-70290, CVE-2026-83991, CVE-2026-83999, CVE-2026-69321, CVE-2026-69316, CVE-2026-69340, CVE-2026-69348, CVE-2026-69350, CVE-2026-69353, CVE-2026-69357, CVE-2026-69393, CVE-2026-69410, CVE-2026-69421, CVE-2026-69428, CVE-2026-69425, CVE-2026-69427, CVE-2026-69434, CVE-2026-69456, CVE-2026-69459, CVE-2026-69478, CVE-2026-69561, CVE-2026-69512, CVE-2026-69498, CVE-2026-69571, CVE-2026-69535, CVE-2026-69538, CVE-2026-69591, CVE-2026-69566, CVE-2026-69567, CVE-2026-69584, CVE-2026-69617, CVE-2026-69630, CVE-2026-69610, CVE-2026-69881, CVE-2026-69680, CVE-2026-69619, CVE-2026-69685, CVE-2026-69643, CVE-2026-69687, CVE-2026-69791, CVE-2026-69707, CVE-2026-69652, CVE-2026-69709, CVE-2026-69844, CVE-2026-69814, CVE-2026-69731, CVE-2026-69706, CVE-2026-69779, CVE-2026-69895, CVE-2026-69792, CVE-2026-69853, CVE-2026-69761, CVE-2026-69785, CVE-2026-69818, CVE-2026-69786, CVE-2026-69874, CVE-2026-70565, CVE-2026-70574, CVE-2026-70569, CVE-2026-70575, CVE-2026-71349, CVE-2026-72927, CVE-2026-72952, CVE-2026-72942, CVE-2026-72966, CVE-2026-72967, CVE-2026-69426, CVE-2026-69564, CVE-2026-72985, CVE-2026-73019, CVE-2026-78451, CVE-2026-78452, CVE-2026-83940, CVE-2026-69598, CVE-2026-83995, CVE-2026-83501, CVE-2026-83498.

CVE-2026-69654

CVE-2026-69654 is a privilege escalation vulnerability in Windows Accounts Control caused by a use-after-free flaw. An authorized local attacker can exploit this vulnerability to elevate their privileges on the affected system.

Affected products:

Windows Accounts Control

Source: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-69654

Related in this roundup: CVE-2026-69816.

CVE-2026-69816

CVE-2026-69816 is a use-after-free vulnerability within Windows Accounts Control that enables an authorized local attacker to perform an elevation of privilege attack. This vulnerability requires the attacker to already have a foothold on the system to execute the exploit.

Affected products:

Windows Accounts Control

Source: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-69816

Related in this roundup: CVE-2026-69654.

CVE-2026-69714

A stack-based buffer overflow vulnerability in the Windows Device Association Service allows a locally authorized attacker to escalate privileges to a higher integrity level over a network, potentially leading to full system compromise.

Affected products:

Windows Device Association Service

Source: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-69714

Related in this roundup: CVE-2026-69574, CVE-2026-77500, CVE-2026-69488, CVE-2026-69581, CVE-2026-69866.

CVE-2026-69709

CVE-2026-69709 describes a heap-based buffer overflow vulnerability within the Windows New Technology File System (NTFS) driver. A local, authorized attacker can exploit this flaw to execute arbitrary code with elevated privileges on the affected system.

Affected products:

Windows

Source: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-69709

Related in this roundup: CVE-2026-81963, CVE-2026-85880, CVE-2026-69496, CVE-2026-69586, CVE-2026-69768, CVE-2026-73025, CVE-2026-56172, CVE-2026-68832, CVE-2026-68834, CVE-2026-68838, CVE-2026-68841, CVE-2026-68875, CVE-2026-68877, CVE-2026-68880, CVE-2026-69265, CVE-2026-69270, CVE-2026-69274, CVE-2026-69275, CVE-2026-69280, CVE-2026-69283, CVE-2026-69284, CVE-2026-69289, CVE-2026-69296, CVE-2026-69300, CVE-2026-69301, CVE-2026-69307, CVE-2026-69312, CVE-2026-69314, CVE-2026-69332, CVE-2026-69333, CVE-2026-69335, CVE-2026-68833, CVE-2026-68851, CVE-2026-69366, CVE-2026-69337, CVE-2026-69347, CVE-2026-69379, CVE-2026-69390, CVE-2026-69401, CVE-2026-69413, CVE-2026-69420, CVE-2026-69429, CVE-2026-69448, CVE-2026-69455, CVE-2026-69532, CVE-2026-69472, CVE-2026-69479, CVE-2026-69531, CVE-2026-69517, CVE-2026-69505, CVE-2026-69504, CVE-2026-69527, CVE-2026-69549, CVE-2026-69588, CVE-2026-69609, CVE-2026-69648, CVE-2026-69689, CVE-2026-69790, CVE-2026-69638, CVE-2026-69859, CVE-2026-69717, CVE-2026-69711, CVE-2026-69875, CVE-2026-69889, CVE-2026-69757, CVE-2026-69741, CVE-2026-69762, CVE-2026-69744, CVE-2026-69832, CVE-2026-69691, CVE-2026-69808, CVE-2026-69775, CVE-2026-69822, CVE-2026-69770, CVE-2026-69676, CVE-2026-70289, CVE-2026-70563, CVE-2026-71329, CVE-2026-71332, CVE-2026-71350, CVE-2026-71348, CVE-2026-71345, CVE-2026-69469, CVE-2026-69501, CVE-2026-69548, CVE-2026-69846, CVE-2026-70283, CVE-2026-72981, CVE-2026-77491, CVE-2026-77492, CVE-2026-77503, CVE-2026-80093, CVE-2026-72949, CVE-2026-70019, CVE-2026-72940, CVE-2026-69573, CVE-2026-70290, CVE-2026-83991, CVE-2026-83999, CVE-2026-69321, CVE-2026-69316, CVE-2026-69340, CVE-2026-69348, CVE-2026-69350, CVE-2026-69353, CVE-2026-69357, CVE-2026-69393, CVE-2026-69410, CVE-2026-69421, CVE-2026-69428, CVE-2026-69425, CVE-2026-69427, CVE-2026-69434, CVE-2026-69456, CVE-2026-69459, CVE-2026-69478, CVE-2026-69561, CVE-2026-69512, CVE-2026-69498, CVE-2026-69571, CVE-2026-69535, CVE-2026-69538, CVE-2026-69591, CVE-2026-69566, CVE-2026-69567, CVE-2026-69584, CVE-2026-69617, CVE-2026-69630, CVE-2026-69610, CVE-2026-69881, CVE-2026-69680, CVE-2026-69619, CVE-2026-69685, CVE-2026-69643, CVE-2026-69687, CVE-2026-69791, CVE-2026-69707, CVE-2026-69652, CVE-2026-69834, CVE-2026-69844, CVE-2026-69814, CVE-2026-69731, CVE-2026-69706, CVE-2026-69779, CVE-2026-69895, CVE-2026-69792, CVE-2026-69853, CVE-2026-69761, CVE-2026-69785, CVE-2026-69818, CVE-2026-69786, CVE-2026-69874, CVE-2026-70565, CVE-2026-70574, CVE-2026-70569, CVE-2026-70575, CVE-2026-71349, CVE-2026-72927, CVE-2026-72952, CVE-2026-72942, CVE-2026-72966, CVE-2026-72967, CVE-2026-69426, CVE-2026-69564, CVE-2026-72985, CVE-2026-73019, CVE-2026-78451, CVE-2026-78452, CVE-2026-83940, CVE-2026-69598, CVE-2026-83995, CVE-2026-83501, CVE-2026-83498.

CVE-2026-69844

CVE-2026-69844 is an out-of-bounds read vulnerability in the Windows Win32k subsystem. An authenticated, local attacker can exploit this flaw to execute code or access data with higher privileges, leading to local privilege escalation on the affected Windows system.

Affected products:

Windows

Source: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-69844

Related in this roundup: CVE-2026-81963, CVE-2026-85880, CVE-2026-69496, CVE-2026-69586, CVE-2026-69768, CVE-2026-73025, CVE-2026-56172, CVE-2026-68832, CVE-2026-68834, CVE-2026-68838, CVE-2026-68841, CVE-2026-68875, CVE-2026-68877, CVE-2026-68880, CVE-2026-69265, CVE-2026-69270, CVE-2026-69274, CVE-2026-69275, CVE-2026-69280, CVE-2026-69283, CVE-2026-69284, CVE-2026-69289, CVE-2026-69296, CVE-2026-69300, CVE-2026-69301, CVE-2026-69307, CVE-2026-69312, CVE-2026-69314, CVE-2026-69332, CVE-2026-69333, CVE-2026-69335, CVE-2026-68833, CVE-2026-68851, CVE-2026-69366, CVE-2026-69337, CVE-2026-69347, CVE-2026-69379, CVE-2026-69390, CVE-2026-69401, CVE-2026-69413, CVE-2026-69420, CVE-2026-69429, CVE-2026-69448, CVE-2026-69455, CVE-2026-69532, CVE-2026-69472, CVE-2026-69479, CVE-2026-69531, CVE-2026-69517, CVE-2026-69505, CVE-2026-69504, CVE-2026-69527, CVE-2026-69549, CVE-2026-69588, CVE-2026-69609, CVE-2026-69648, CVE-2026-69689, CVE-2026-69790, CVE-2026-69638, CVE-2026-69859, CVE-2026-69717, CVE-2026-69711, CVE-2026-69875, CVE-2026-69889, CVE-2026-69757, CVE-2026-69741, CVE-2026-69762, CVE-2026-69744, CVE-2026-69832, CVE-2026-69691, CVE-2026-69808, CVE-2026-69775, CVE-2026-69822, CVE-2026-69770, CVE-2026-69676, CVE-2026-70289, CVE-2026-70563, CVE-2026-71329, CVE-2026-71332, CVE-2026-71350, CVE-2026-71348, CVE-2026-71345, CVE-2026-69469, CVE-2026-69501, CVE-2026-69548, CVE-2026-69846, CVE-2026-70283, CVE-2026-72981, CVE-2026-77491, CVE-2026-77492, CVE-2026-77503, CVE-2026-80093, CVE-2026-72949, CVE-2026-70019, CVE-2026-72940, CVE-2026-69573, CVE-2026-70290, CVE-2026-83991, CVE-2026-83999, CVE-2026-69321, CVE-2026-69316, CVE-2026-69340, CVE-2026-69348, CVE-2026-69350, CVE-2026-69353, CVE-2026-69357, CVE-2026-69393, CVE-2026-69410, CVE-2026-69421, CVE-2026-69428, CVE-2026-69425, CVE-2026-69427, CVE-2026-69434, CVE-2026-69456, CVE-2026-69459, CVE-2026-69478, CVE-2026-69561, CVE-2026-69512, CVE-2026-69498, CVE-2026-69571, CVE-2026-69535, CVE-2026-69538, CVE-2026-69591, CVE-2026-69566, CVE-2026-69567, CVE-2026-69584, CVE-2026-69617, CVE-2026-69630, CVE-2026-69610, CVE-2026-69881, CVE-2026-69680, CVE-2026-69619, CVE-2026-69685, CVE-2026-69643, CVE-2026-69687, CVE-2026-69791, CVE-2026-69707, CVE-2026-69652, CVE-2026-69834, CVE-2026-69709, CVE-2026-69814, CVE-2026-69731, CVE-2026-69706, CVE-2026-69779, CVE-2026-69895, CVE-2026-69792, CVE-2026-69853, CVE-2026-69761, CVE-2026-69785, CVE-2026-69818, CVE-2026-69786, CVE-2026-69874, CVE-2026-70565, CVE-2026-70574, CVE-2026-70569, CVE-2026-70575, CVE-2026-71349, CVE-2026-72927, CVE-2026-72952, CVE-2026-72942, CVE-2026-72966, CVE-2026-72967, CVE-2026-69426, CVE-2026-69564, CVE-2026-72985, CVE-2026-73019, CVE-2026-78451, CVE-2026-78452, CVE-2026-83940, CVE-2026-69598, CVE-2026-83995, CVE-2026-83501, CVE-2026-83498.

CVE-2026-69679

CVE-2026-69679 describes an out-of-bounds read vulnerability in the Windows DHCP Server component. An authorized attacker on an adjacent network can leverage this flaw to trigger a denial-of-service (DoS) condition, impacting network service availability.

Affected products:

Windows DHCP Server

Source: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-69679

Related in this roundup: CVE-2026-69845, CVE-2026-72979, CVE-2026-69266, CVE-2026-69412, CVE-2026-69415, CVE-2026-69929, CVE-2026-69930, CVE-2026-70124, CVE-2026-77494, CVE-2026-77498, CVE-2026-77499, CVE-2026-77501, CVE-2026-77502, CVE-2026-77887, CVE-2026-77888, CVE-2026-77886, CVE-2026-77890, CVE-2026-77889, CVE-2026-77891, CVE-2026-77893, CVE-2026-77895, CVE-2026-70065, CVE-2026-69297, CVE-2026-69342, CVE-2026-69405, CVE-2026-69416, CVE-2026-69497, CVE-2026-69547, CVE-2026-69620, CVE-2026-69637, CVE-2026-69803, CVE-2026-69878, CVE-2026-69847, CVE-2026-69876, CVE-2026-69510.

CVE-2026-69866

A use-after-free vulnerability exists in the Windows Device Association Service that enables a locally authenticated attacker to escalate their privileges. This vulnerability requires the attacker to have existing low-privileged access to the system to exploit.

Affected products:

Windows Device Association Service

Source: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-69866

Related in this roundup: CVE-2026-69574, CVE-2026-77500, CVE-2026-69488, CVE-2026-69581, CVE-2026-69714.

CVE-2026-69674

CVE-2026-69674 is a security feature bypass vulnerability in Windows Modern Device Management (MDM) caused by missing authentication for a critical function. An attacker with local access can exploit this flaw to bypass security controls implemented within the MDM framework.

Affected products:

Windows Modern Device Management (MDM)

Source: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-69674

Related in this roundup: CVE-2026-69377, CVE-2026-69460, CVE-2026-70577, CVE-2026-73003, CVE-2026-73022.

CVE-2026-69688

CVE-2026-69688 is a heap-based buffer overflow vulnerability within the Windows Encrypting File System (EFS). An authorized attacker can exploit this vulnerability over a network to achieve elevation of privileges on the affected system.

Affected products:

Windows Encrypting File System

Source: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-69688

Related in this roundup: CVE-2026-69841, CVE-2026-69794.

CVE-2026-69841

A heap-based buffer overflow vulnerability in the Windows Encrypting File System (EFS) allows an authorized local attacker to elevate their privileges to a higher level. This vulnerability is restricted to local exploitation and requires the attacker to already have a foothold on the system.

Affected products:

Windows Encrypting File System

Source: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-69841

Related in this roundup: CVE-2026-69688, CVE-2026-69794.

CVE-2026-69727

A heap-based buffer overflow vulnerability exists in the Windows Biometric Service that allows an authorized attacker to achieve privilege escalation over a network.

Affected products:

Windows Biometric Service

Source: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-69727

Related in this roundup: CVE-2026-69293, CVE-2026-69298, CVE-2026-69323, CVE-2026-69583, CVE-2026-69589, CVE-2026-69580, CVE-2026-69476, CVE-2026-69787, CVE-2026-77489, CVE-2026-83955, CVE-2026-83986, CVE-2026-83969, CVE-2026-83988, CVE-2026-83979, CVE-2026-83974, CVE-2026-83975, CVE-2026-83976, CVE-2026-69826, CVE-2026-69738, CVE-2026-69773, CVE-2026-70573, CVE-2026-70572, CVE-2026-70581, CVE-2026-72941, CVE-2026-69352, CVE-2026-69489, CVE-2026-69593, CVE-2026-72995, CVE-2026-72988, CVE-2026-72990, CVE-2026-72991, CVE-2026-72992, CVE-2026-72993, CVE-2026-72994, CVE-2026-72996, CVE-2026-72997, CVE-2026-73002, CVE-2026-73020, CVE-2026-73000, CVE-2026-73001, CVE-2026-73021, CVE-2026-73015, CVE-2026-73011, CVE-2026-73008, CVE-2026-73007, CVE-2026-73026, CVE-2026-78447, CVE-2026-78448, CVE-2026-83971, CVE-2026-83954, CVE-2026-83967, CVE-2026-83970, CVE-2026-83972, CVE-2026-83968, CVE-2026-83973, CVE-2026-83981, CVE-2026-83977, CVE-2026-83978, CVE-2026-83982, CVE-2026-83980, CVE-2026-83987, CVE-2026-83983, CVE-2026-83985.

CVE-2026-69826

A heap-based buffer overflow vulnerability in the Windows Biometric Service enables an attacker who has already obtained unauthorized access to a system to escalate their privileges remotely over a network. The flaw resides within the processing logic of the service, potentially allowing for arbitrary code execution with elevated system permissions.

Affected products:

Windows Biometric Service

Source: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-69826

Related in this roundup: CVE-2026-69293, CVE-2026-69298, CVE-2026-69323, CVE-2026-69583, CVE-2026-69589, CVE-2026-69580, CVE-2026-69476, CVE-2026-69787, CVE-2026-77489, CVE-2026-83955, CVE-2026-83986, CVE-2026-83969, CVE-2026-83988, CVE-2026-83979, CVE-2026-83974, CVE-2026-83975, CVE-2026-83976, CVE-2026-69727, CVE-2026-69738, CVE-2026-69773, CVE-2026-70573, CVE-2026-70572, CVE-2026-70581, CVE-2026-72941, CVE-2026-69352, CVE-2026-69489, CVE-2026-69593, CVE-2026-72995, CVE-2026-72988, CVE-2026-72990, CVE-2026-72991, CVE-2026-72992, CVE-2026-72993, CVE-2026-72994, CVE-2026-72996, CVE-2026-72997, CVE-2026-73002, CVE-2026-73020, CVE-2026-73000, CVE-2026-73001, CVE-2026-73021, CVE-2026-73015, CVE-2026-73011, CVE-2026-73008, CVE-2026-73007, CVE-2026-73026, CVE-2026-78447, CVE-2026-78448, CVE-2026-83971, CVE-2026-83954, CVE-2026-83967, CVE-2026-83970, CVE-2026-83972, CVE-2026-83968, CVE-2026-83973, CVE-2026-83981, CVE-2026-83977, CVE-2026-83978, CVE-2026-83982, CVE-2026-83980, CVE-2026-83987, CVE-2026-83983, CVE-2026-83985.

CVE-2026-69738

An integer overflow or wraparound vulnerability exists in the Windows Biometric Service that allows an authorized local attacker to elevate their privileges on an affected system.

Affected products:

Windows Biometric Service

Source: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-69738

Related in this roundup: CVE-2026-69293, CVE-2026-69298, CVE-2026-69323, CVE-2026-69583, CVE-2026-69589, CVE-2026-69580, CVE-2026-69476, CVE-2026-69787, CVE-2026-77489, CVE-2026-83955, CVE-2026-83986, CVE-2026-83969, CVE-2026-83988, CVE-2026-83979, CVE-2026-83974, CVE-2026-83975, CVE-2026-83976, CVE-2026-69727, CVE-2026-69826, CVE-2026-69773, CVE-2026-70573, CVE-2026-70572, CVE-2026-70581, CVE-2026-72941, CVE-2026-69352, CVE-2026-69489, CVE-2026-69593, CVE-2026-72995, CVE-2026-72988, CVE-2026-72990, CVE-2026-72991, CVE-2026-72992, CVE-2026-72993, CVE-2026-72994, CVE-2026-72996, CVE-2026-72997, CVE-2026-73002, CVE-2026-73020, CVE-2026-73000, CVE-2026-73001, CVE-2026-73021, CVE-2026-73015, CVE-2026-73011, CVE-2026-73008, CVE-2026-73007, CVE-2026-73026, CVE-2026-78447, CVE-2026-78448, CVE-2026-83971, CVE-2026-83954, CVE-2026-83967, CVE-2026-83970, CVE-2026-83972, CVE-2026-83968, CVE-2026-83973, CVE-2026-83981, CVE-2026-83977, CVE-2026-83978, CVE-2026-83982, CVE-2026-83980, CVE-2026-83987, CVE-2026-83983, CVE-2026-83985.

CVE-2026-69801

CVE-2026-69801 describes a heap-based buffer overflow vulnerability within the Windows Audio Service. An authorized local attacker can exploit this flaw to execute code with elevated privileges, effectively performing a local privilege escalation attack.

Affected products:

Windows Audio Service

Source: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-69801

Related in this roundup: CVE-2026-69311, CVE-2026-69540, CVE-2026-70562, CVE-2026-69394, CVE-2026-69604, CVE-2026-69447, CVE-2026-69692.

CVE-2026-69692

CVE-2026-69692 is a use-after-free vulnerability in the Windows Audio Service that allows a locally authenticated attacker to elevate their privileges to a higher integrity level. Detection engineering should focus on monitoring for abnormal process behavior or unexpected privilege transitions involving audiodg.exe or associated service binaries.

Affected products:

Windows Audio Service

Source: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-69692

Related in this roundup: CVE-2026-69311, CVE-2026-69540, CVE-2026-70562, CVE-2026-69394, CVE-2026-69604, CVE-2026-69447, CVE-2026-69801.

CVE-2026-69814

A use-after-free vulnerability in the Windows Credential Providers component allows an authenticated local attacker to execute arbitrary code with elevated privileges, leading to a full system compromise.

Affected products:

Windows

Source: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-69814

Related in this roundup: CVE-2026-81963, CVE-2026-85880, CVE-2026-69496, CVE-2026-69586, CVE-2026-69768, CVE-2026-73025, CVE-2026-56172, CVE-2026-68832, CVE-2026-68834, CVE-2026-68838, CVE-2026-68841, CVE-2026-68875, CVE-2026-68877, CVE-2026-68880, CVE-2026-69265, CVE-2026-69270, CVE-2026-69274, CVE-2026-69275, CVE-2026-69280, CVE-2026-69283, CVE-2026-69284, CVE-2026-69289, CVE-2026-69296, CVE-2026-69300, CVE-2026-69301, CVE-2026-69307, CVE-2026-69312, CVE-2026-69314, CVE-2026-69332, CVE-2026-69333, CVE-2026-69335, CVE-2026-68833, CVE-2026-68851, CVE-2026-69366, CVE-2026-69337, CVE-2026-69347, CVE-2026-69379, CVE-2026-69390, CVE-2026-69401, CVE-2026-69413, CVE-2026-69420, CVE-2026-69429, CVE-2026-69448, CVE-2026-69455, CVE-2026-69532, CVE-2026-69472, CVE-2026-69479, CVE-2026-69531, CVE-2026-69517, CVE-2026-69505, CVE-2026-69504, CVE-2026-69527, CVE-2026-69549, CVE-2026-69588, CVE-2026-69609, CVE-2026-69648, CVE-2026-69689, CVE-2026-69790, CVE-2026-69638, CVE-2026-69859, CVE-2026-69717, CVE-2026-69711, CVE-2026-69875, CVE-2026-69889, CVE-2026-69757, CVE-2026-69741, CVE-2026-69762, CVE-2026-69744, CVE-2026-69832, CVE-2026-69691, CVE-2026-69808, CVE-2026-69775, CVE-2026-69822, CVE-2026-69770, CVE-2026-69676, CVE-2026-70289, CVE-2026-70563, CVE-2026-71329, CVE-2026-71332, CVE-2026-71350, CVE-2026-71348, CVE-2026-71345, CVE-2026-69469, CVE-2026-69501, CVE-2026-69548, CVE-2026-69846, CVE-2026-70283, CVE-2026-72981, CVE-2026-77491, CVE-2026-77492, CVE-2026-77503, CVE-2026-80093, CVE-2026-72949, CVE-2026-70019, CVE-2026-72940, CVE-2026-69573, CVE-2026-70290, CVE-2026-83991, CVE-2026-83999, CVE-2026-69321, CVE-2026-69316, CVE-2026-69340, CVE-2026-69348, CVE-2026-69350, CVE-2026-69353, CVE-2026-69357, CVE-2026-69393, CVE-2026-69410, CVE-2026-69421, CVE-2026-69428, CVE-2026-69425, CVE-2026-69427, CVE-2026-69434, CVE-2026-69456, CVE-2026-69459, CVE-2026-69478, CVE-2026-69561, CVE-2026-69512, CVE-2026-69498, CVE-2026-69571, CVE-2026-69535, CVE-2026-69538, CVE-2026-69591, CVE-2026-69566, CVE-2026-69567, CVE-2026-69584, CVE-2026-69617, CVE-2026-69630, CVE-2026-69610, CVE-2026-69881, CVE-2026-69680, CVE-2026-69619, CVE-2026-69685, CVE-2026-69643, CVE-2026-69687, CVE-2026-69791, CVE-2026-69707, CVE-2026-69652, CVE-2026-69834, CVE-2026-69709, CVE-2026-69844, CVE-2026-69731, CVE-2026-69706, CVE-2026-69779, CVE-2026-69895, CVE-2026-69792, CVE-2026-69853, CVE-2026-69761, CVE-2026-69785, CVE-2026-69818, CVE-2026-69786, CVE-2026-69874, CVE-2026-70565, CVE-2026-70574, CVE-2026-70569, CVE-2026-70575, CVE-2026-71349, CVE-2026-72927, CVE-2026-72952, CVE-2026-72942, CVE-2026-72966, CVE-2026-72967, CVE-2026-69426, CVE-2026-69564, CVE-2026-72985, CVE-2026-73019, CVE-2026-78451, CVE-2026-78452, CVE-2026-83940, CVE-2026-69598, CVE-2026-83995, CVE-2026-83501, CVE-2026-83498.

CVE-2026-69731

CVE-2026-69731 describes a heap-based buffer overflow vulnerability in the HID class driver for Windows. A locally authenticated attacker can exploit this flaw to execute code or manipulate system processes to gain elevated privileges on the affected host.

Affected products:

Windows

Source: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-69731

Related in this roundup: CVE-2026-81963, CVE-2026-85880, CVE-2026-69496, CVE-2026-69586, CVE-2026-69768, CVE-2026-73025, CVE-2026-56172, CVE-2026-68832, CVE-2026-68834, CVE-2026-68838, CVE-2026-68841, CVE-2026-68875, CVE-2026-68877, CVE-2026-68880, CVE-2026-69265, CVE-2026-69270, CVE-2026-69274, CVE-2026-69275, CVE-2026-69280, CVE-2026-69283, CVE-2026-69284, CVE-2026-69289, CVE-2026-69296, CVE-2026-69300, CVE-2026-69301, CVE-2026-69307, CVE-2026-69312, CVE-2026-69314, CVE-2026-69332, CVE-2026-69333, CVE-2026-69335, CVE-2026-68833, CVE-2026-68851, CVE-2026-69366, CVE-2026-69337, CVE-2026-69347, CVE-2026-69379, CVE-2026-69390, CVE-2026-69401, CVE-2026-69413, CVE-2026-69420, CVE-2026-69429, CVE-2026-69448, CVE-2026-69455, CVE-2026-69532, CVE-2026-69472, CVE-2026-69479, CVE-2026-69531, CVE-2026-69517, CVE-2026-69505, CVE-2026-69504, CVE-2026-69527, CVE-2026-69549, CVE-2026-69588, CVE-2026-69609, CVE-2026-69648, CVE-2026-69689, CVE-2026-69790, CVE-2026-69638, CVE-2026-69859, CVE-2026-69717, CVE-2026-69711, CVE-2026-69875, CVE-2026-69889, CVE-2026-69757, CVE-2026-69741, CVE-2026-69762, CVE-2026-69744, CVE-2026-69832, CVE-2026-69691, CVE-2026-69808, CVE-2026-69775, CVE-2026-69822, CVE-2026-69770, CVE-2026-69676, CVE-2026-70289, CVE-2026-70563, CVE-2026-71329, CVE-2026-71332, CVE-2026-71350, CVE-2026-71348, CVE-2026-71345, CVE-2026-69469, CVE-2026-69501, CVE-2026-69548, CVE-2026-69846, CVE-2026-70283, CVE-2026-72981, CVE-2026-77491, CVE-2026-77492, CVE-2026-77503, CVE-2026-80093, CVE-2026-72949, CVE-2026-70019, CVE-2026-72940, CVE-2026-69573, CVE-2026-70290, CVE-2026-83991, CVE-2026-83999, CVE-2026-69321, CVE-2026-69316, CVE-2026-69340, CVE-2026-69348, CVE-2026-69350, CVE-2026-69353, CVE-2026-69357, CVE-2026-69393, CVE-2026-69410, CVE-2026-69421, CVE-2026-69428, CVE-2026-69425, CVE-2026-69427, CVE-2026-69434, CVE-2026-69456, CVE-2026-69459, CVE-2026-69478, CVE-2026-69561, CVE-2026-69512, CVE-2026-69498, CVE-2026-69571, CVE-2026-69535, CVE-2026-69538, CVE-2026-69591, CVE-2026-69566, CVE-2026-69567, CVE-2026-69584, CVE-2026-69617, CVE-2026-69630, CVE-2026-69610, CVE-2026-69881, CVE-2026-69680, CVE-2026-69619, CVE-2026-69685, CVE-2026-69643, CVE-2026-69687, CVE-2026-69791, CVE-2026-69707, CVE-2026-69652, CVE-2026-69834, CVE-2026-69709, CVE-2026-69844, CVE-2026-69814, CVE-2026-69706, CVE-2026-69779, CVE-2026-69895, CVE-2026-69792, CVE-2026-69853, CVE-2026-69761, CVE-2026-69785, CVE-2026-69818, CVE-2026-69786, CVE-2026-69874, CVE-2026-70565, CVE-2026-70574, CVE-2026-70569, CVE-2026-70575, CVE-2026-71349, CVE-2026-72927, CVE-2026-72952, CVE-2026-72942, CVE-2026-72966, CVE-2026-72967, CVE-2026-69426, CVE-2026-69564, CVE-2026-72985, CVE-2026-73019, CVE-2026-78451, CVE-2026-78452, CVE-2026-83940, CVE-2026-69598, CVE-2026-83995, CVE-2026-83501, CVE-2026-83498.

CVE-2026-69773

CVE-2026-69773 describes a heap-based buffer overflow vulnerability in the Windows Biometric Service that can be exploited by an authorized attacker to achieve privilege escalation over a network.

Affected products:

Windows Biometric Service

Source: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-69773

Related in this roundup: CVE-2026-69293, CVE-2026-69298, CVE-2026-69323, CVE-2026-69583, CVE-2026-69589, CVE-2026-69580, CVE-2026-69476, CVE-2026-69787, CVE-2026-77489, CVE-2026-83955, CVE-2026-83986, CVE-2026-83969, CVE-2026-83988, CVE-2026-83979, CVE-2026-83974, CVE-2026-83975, CVE-2026-83976, CVE-2026-69727, CVE-2026-69826, CVE-2026-69738, CVE-2026-70573, CVE-2026-70572, CVE-2026-70581, CVE-2026-72941, CVE-2026-69352, CVE-2026-69489, CVE-2026-69593, CVE-2026-72995, CVE-2026-72988, CVE-2026-72990, CVE-2026-72991, CVE-2026-72992, CVE-2026-72993, CVE-2026-72994, CVE-2026-72996, CVE-2026-72997, CVE-2026-73002, CVE-2026-73020, CVE-2026-73000, CVE-2026-73001, CVE-2026-73021, CVE-2026-73015, CVE-2026-73011, CVE-2026-73008, CVE-2026-73007, CVE-2026-73026, CVE-2026-78447, CVE-2026-78448, CVE-2026-83971, CVE-2026-83954, CVE-2026-83967, CVE-2026-83970, CVE-2026-83972, CVE-2026-83968, CVE-2026-83973, CVE-2026-83981, CVE-2026-83977, CVE-2026-83978, CVE-2026-83982, CVE-2026-83980, CVE-2026-83987, CVE-2026-83983, CVE-2026-83985.

CVE-2026-69794

An information disclosure vulnerability exists in the Windows Encrypting File System (EFS) due to a buffer over-read. An authorized local attacker can exploit this flaw to access sensitive information protected by the EFS component.

Affected products:

Windows Encrypting File System

Source: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-69794

Related in this roundup: CVE-2026-69688, CVE-2026-69841.

CVE-2026-69706

CVE-2026-69706 is a use-after-free vulnerability in the Windows Win32k component that allows an authorized attacker to achieve privilege escalation via network-based exploitation.

Affected products:

Windows

Source: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-69706

Related in this roundup: CVE-2026-81963, CVE-2026-85880, CVE-2026-69496, CVE-2026-69586, CVE-2026-69768, CVE-2026-73025, CVE-2026-56172, CVE-2026-68832, CVE-2026-68834, CVE-2026-68838, CVE-2026-68841, CVE-2026-68875, CVE-2026-68877, CVE-2026-68880, CVE-2026-69265, CVE-2026-69270, CVE-2026-69274, CVE-2026-69275, CVE-2026-69280, CVE-2026-69283, CVE-2026-69284, CVE-2026-69289, CVE-2026-69296, CVE-2026-69300, CVE-2026-69301, CVE-2026-69307, CVE-2026-69312, CVE-2026-69314, CVE-2026-69332, CVE-2026-69333, CVE-2026-69335, CVE-2026-68833, CVE-2026-68851, CVE-2026-69366, CVE-2026-69337, CVE-2026-69347, CVE-2026-69379, CVE-2026-69390, CVE-2026-69401, CVE-2026-69413, CVE-2026-69420, CVE-2026-69429, CVE-2026-69448, CVE-2026-69455, CVE-2026-69532, CVE-2026-69472, CVE-2026-69479, CVE-2026-69531, CVE-2026-69517, CVE-2026-69505, CVE-2026-69504, CVE-2026-69527, CVE-2026-69549, CVE-2026-69588, CVE-2026-69609, CVE-2026-69648, CVE-2026-69689, CVE-2026-69790, CVE-2026-69638, CVE-2026-69859, CVE-2026-69717, CVE-2026-69711, CVE-2026-69875, CVE-2026-69889, CVE-2026-69757, CVE-2026-69741, CVE-2026-69762, CVE-2026-69744, CVE-2026-69832, CVE-2026-69691, CVE-2026-69808, CVE-2026-69775, CVE-2026-69822, CVE-2026-69770, CVE-2026-69676, CVE-2026-70289, CVE-2026-70563, CVE-2026-71329, CVE-2026-71332, CVE-2026-71350, CVE-2026-71348, CVE-2026-71345, CVE-2026-69469, CVE-2026-69501, CVE-2026-69548, CVE-2026-69846, CVE-2026-70283, CVE-2026-72981, CVE-2026-77491, CVE-2026-77492, CVE-2026-77503, CVE-2026-80093, CVE-2026-72949, CVE-2026-70019, CVE-2026-72940, CVE-2026-69573, CVE-2026-70290, CVE-2026-83991, CVE-2026-83999, CVE-2026-69321, CVE-2026-69316, CVE-2026-69340, CVE-2026-69348, CVE-2026-69350, CVE-2026-69353, CVE-2026-69357, CVE-2026-69393, CVE-2026-69410, CVE-2026-69421, CVE-2026-69428, CVE-2026-69425, CVE-2026-69427, CVE-2026-69434, CVE-2026-69456, CVE-2026-69459, CVE-2026-69478, CVE-2026-69561, CVE-2026-69512, CVE-2026-69498, CVE-2026-69571, CVE-2026-69535, CVE-2026-69538, CVE-2026-69591, CVE-2026-69566, CVE-2026-69567, CVE-2026-69584, CVE-2026-69617, CVE-2026-69630, CVE-2026-69610, CVE-2026-69881, CVE-2026-69680, CVE-2026-69619, CVE-2026-69685, CVE-2026-69643, CVE-2026-69687, CVE-2026-69791, CVE-2026-69707, CVE-2026-69652, CVE-2026-69834, CVE-2026-69709, CVE-2026-69844, CVE-2026-69814, CVE-2026-69731, CVE-2026-69779, CVE-2026-69895, CVE-2026-69792, CVE-2026-69853, CVE-2026-69761, CVE-2026-69785, CVE-2026-69818, CVE-2026-69786, CVE-2026-69874, CVE-2026-70565, CVE-2026-70574, CVE-2026-70569, CVE-2026-70575, CVE-2026-71349, CVE-2026-72927, CVE-2026-72952, CVE-2026-72942, CVE-2026-72966, CVE-2026-72967, CVE-2026-69426, CVE-2026-69564, CVE-2026-72985, CVE-2026-73019, CVE-2026-78451, CVE-2026-78452, CVE-2026-83940, CVE-2026-69598, CVE-2026-83995, CVE-2026-83501, CVE-2026-83498.

CVE-2026-69713

CVE-2026-69713 is a security feature bypass vulnerability in Windows Secure Boot, resulting from a dependency on a vulnerable third-party component. An authorized local attacker can exploit this flaw to bypass Secure Boot protections, potentially allowing the execution of unauthorized or malicious boot-time code.

Affected products:

Windows Secure Boot

Source: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-69713

CVE-2026-69793

CVE-2026-69793 is a security feature bypass vulnerability in the Windows TCP/IP stack caused by improper validation of input consistency. An unauthenticated attacker can exploit this flaw over the network to circumvent security controls.

Affected products:

Windows TCP/IP

Source: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-69793

Related in this roundup: CVE-2026-69404, CVE-2026-69385.

CVE-2026-69921

A heap-based buffer overflow vulnerability exists in the Windows Print Spooler components, which can be exploited by a locally authorized attacker to elevate their privileges on the target system.

Affected products:

Windows Print Spooler

Source: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-69921

Related in this roundup: CVE-2026-68835, CVE-2026-68848, CVE-2026-69309, CVE-2026-69552, CVE-2026-69838, CVE-2026-70564, CVE-2026-85877, CVE-2026-69344, CVE-2026-69346, CVE-2026-69569.

CVE-2026-69779

CVE-2026-69779 is a Time-of-Check Time-of-Use (TOCTOU) race condition vulnerability in the Windows Win32k subsystem. Successful exploitation allows a local, authorized attacker to elevate their privileges on the host system.

Affected products:

Windows

Source: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-69779

Related in this roundup: CVE-2026-81963, CVE-2026-85880, CVE-2026-69496, CVE-2026-69586, CVE-2026-69768, CVE-2026-73025, CVE-2026-56172, CVE-2026-68832, CVE-2026-68834, CVE-2026-68838, CVE-2026-68841, CVE-2026-68875, CVE-2026-68877, CVE-2026-68880, CVE-2026-69265, CVE-2026-69270, CVE-2026-69274, CVE-2026-69275, CVE-2026-69280, CVE-2026-69283, CVE-2026-69284, CVE-2026-69289, CVE-2026-69296, CVE-2026-69300, CVE-2026-69301, CVE-2026-69307, CVE-2026-69312, CVE-2026-69314, CVE-2026-69332, CVE-2026-69333, CVE-2026-69335, CVE-2026-68833, CVE-2026-68851, CVE-2026-69366, CVE-2026-69337, CVE-2026-69347, CVE-2026-69379, CVE-2026-69390, CVE-2026-69401, CVE-2026-69413, CVE-2026-69420, CVE-2026-69429, CVE-2026-69448, CVE-2026-69455, CVE-2026-69532, CVE-2026-69472, CVE-2026-69479, CVE-2026-69531, CVE-2026-69517, CVE-2026-69505, CVE-2026-69504, CVE-2026-69527, CVE-2026-69549, CVE-2026-69588, CVE-2026-69609, CVE-2026-69648, CVE-2026-69689, CVE-2026-69790, CVE-2026-69638, CVE-2026-69859, CVE-2026-69717, CVE-2026-69711, CVE-2026-69875, CVE-2026-69889, CVE-2026-69757, CVE-2026-69741, CVE-2026-69762, CVE-2026-69744, CVE-2026-69832, CVE-2026-69691, CVE-2026-69808, CVE-2026-69775, CVE-2026-69822, CVE-2026-69770, CVE-2026-69676, CVE-2026-70289, CVE-2026-70563, CVE-2026-71329, CVE-2026-71332, CVE-2026-71350, CVE-2026-71348, CVE-2026-71345, CVE-2026-69469, CVE-2026-69501, CVE-2026-69548, CVE-2026-69846, CVE-2026-70283, CVE-2026-72981, CVE-2026-77491, CVE-2026-77492, CVE-2026-77503, CVE-2026-80093, CVE-2026-72949, CVE-2026-70019, CVE-2026-72940, CVE-2026-69573, CVE-2026-70290, CVE-2026-83991, CVE-2026-83999, CVE-2026-69321, CVE-2026-69316, CVE-2026-69340, CVE-2026-69348, CVE-2026-69350, CVE-2026-69353, CVE-2026-69357, CVE-2026-69393, CVE-2026-69410, CVE-2026-69421, CVE-2026-69428, CVE-2026-69425, CVE-2026-69427, CVE-2026-69434, CVE-2026-69456, CVE-2026-69459, CVE-2026-69478, CVE-2026-69561, CVE-2026-69512, CVE-2026-69498, CVE-2026-69571, CVE-2026-69535, CVE-2026-69538, CVE-2026-69591, CVE-2026-69566, CVE-2026-69567, CVE-2026-69584, CVE-2026-69617, CVE-2026-69630, CVE-2026-69610, CVE-2026-69881, CVE-2026-69680, CVE-2026-69619, CVE-2026-69685, CVE-2026-69643, CVE-2026-69687, CVE-2026-69791, CVE-2026-69707, CVE-2026-69652, CVE-2026-69834, CVE-2026-69709, CVE-2026-69844, CVE-2026-69814, CVE-2026-69731, CVE-2026-69706, CVE-2026-69895, CVE-2026-69792, CVE-2026-69853, CVE-2026-69761, CVE-2026-69785, CVE-2026-69818, CVE-2026-69786, CVE-2026-69874, CVE-2026-70565, CVE-2026-70574, CVE-2026-70569, CVE-2026-70575, CVE-2026-71349, CVE-2026-72927, CVE-2026-72952, CVE-2026-72942, CVE-2026-72966, CVE-2026-72967, CVE-2026-69426, CVE-2026-69564, CVE-2026-72985, CVE-2026-73019, CVE-2026-78451, CVE-2026-78452, CVE-2026-83940, CVE-2026-69598, CVE-2026-83995, CVE-2026-83501, CVE-2026-83498.

CVE-2026-69895

An out-of-bounds read vulnerability exists in the Windows Spaceport.sys driver, which allows an authorized local attacker to perform an information disclosure attack.

Affected products:

Windows

Source: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-69895

Related in this roundup: CVE-2026-81963, CVE-2026-85880, CVE-2026-69496, CVE-2026-69586, CVE-2026-69768, CVE-2026-73025, CVE-2026-56172, CVE-2026-68832, CVE-2026-68834, CVE-2026-68838, CVE-2026-68841, CVE-2026-68875, CVE-2026-68877, CVE-2026-68880, CVE-2026-69265, CVE-2026-69270, CVE-2026-69274, CVE-2026-69275, CVE-2026-69280, CVE-2026-69283, CVE-2026-69284, CVE-2026-69289, CVE-2026-69296, CVE-2026-69300, CVE-2026-69301, CVE-2026-69307, CVE-2026-69312, CVE-2026-69314, CVE-2026-69332, CVE-2026-69333, CVE-2026-69335, CVE-2026-68833, CVE-2026-68851, CVE-2026-69366, CVE-2026-69337, CVE-2026-69347, CVE-2026-69379, CVE-2026-69390, CVE-2026-69401, CVE-2026-69413, CVE-2026-69420, CVE-2026-69429, CVE-2026-69448, CVE-2026-69455, CVE-2026-69532, CVE-2026-69472, CVE-2026-69479, CVE-2026-69531, CVE-2026-69517, CVE-2026-69505, CVE-2026-69504, CVE-2026-69527, CVE-2026-69549, CVE-2026-69588, CVE-2026-69609, CVE-2026-69648, CVE-2026-69689, CVE-2026-69790, CVE-2026-69638, CVE-2026-69859, CVE-2026-69717, CVE-2026-69711, CVE-2026-69875, CVE-2026-69889, CVE-2026-69757, CVE-2026-69741, CVE-2026-69762, CVE-2026-69744, CVE-2026-69832, CVE-2026-69691, CVE-2026-69808, CVE-2026-69775, CVE-2026-69822, CVE-2026-69770, CVE-2026-69676, CVE-2026-70289, CVE-2026-70563, CVE-2026-71329, CVE-2026-71332, CVE-2026-71350, CVE-2026-71348, CVE-2026-71345, CVE-2026-69469, CVE-2026-69501, CVE-2026-69548, CVE-2026-69846, CVE-2026-70283, CVE-2026-72981, CVE-2026-77491, CVE-2026-77492, CVE-2026-77503, CVE-2026-80093, CVE-2026-72949, CVE-2026-70019, CVE-2026-72940, CVE-2026-69573, CVE-2026-70290, CVE-2026-83991, CVE-2026-83999, CVE-2026-69321, CVE-2026-69316, CVE-2026-69340, CVE-2026-69348, CVE-2026-69350, CVE-2026-69353, CVE-2026-69357, CVE-2026-69393, CVE-2026-69410, CVE-2026-69421, CVE-2026-69428, CVE-2026-69425, CVE-2026-69427, CVE-2026-69434, CVE-2026-69456, CVE-2026-69459, CVE-2026-69478, CVE-2026-69561, CVE-2026-69512, CVE-2026-69498, CVE-2026-69571, CVE-2026-69535, CVE-2026-69538, CVE-2026-69591, CVE-2026-69566, CVE-2026-69567, CVE-2026-69584, CVE-2026-69617, CVE-2026-69630, CVE-2026-69610, CVE-2026-69881, CVE-2026-69680, CVE-2026-69619, CVE-2026-69685, CVE-2026-69643, CVE-2026-69687, CVE-2026-69791, CVE-2026-69707, CVE-2026-69652, CVE-2026-69834, CVE-2026-69709, CVE-2026-69844, CVE-2026-69814, CVE-2026-69731, CVE-2026-69706, CVE-2026-69779, CVE-2026-69792, CVE-2026-69853, CVE-2026-69761, CVE-2026-69785, CVE-2026-69818, CVE-2026-69786, CVE-2026-69874, CVE-2026-70565, CVE-2026-70574, CVE-2026-70569, CVE-2026-70575, CVE-2026-71349, CVE-2026-72927, CVE-2026-72952, CVE-2026-72942, CVE-2026-72966, CVE-2026-72967, CVE-2026-69426, CVE-2026-69564, CVE-2026-72985, CVE-2026-73019, CVE-2026-78451, CVE-2026-78452, CVE-2026-83940, CVE-2026-69598, CVE-2026-83995, CVE-2026-83501, CVE-2026-83498.

CVE-2026-69672

CVE-2026-69672 is an information disclosure vulnerability in the Windows DNS component caused by the use of uninitialized resources. An authenticated attacker can exploit this flaw locally to gain unauthorized access to sensitive information.

Affected products:

Windows DNS

Source: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-69672

Related in this roundup: CVE-2026-69730, CVE-2026-69310, CVE-2026-70091, CVE-2026-69631, CVE-2026-72948, CVE-2026-69369, CVE-2026-72987.

CVE-2026-69809

CVE-2026-69809 is a denial of service vulnerability in Microsoft Active Directory Domain Services caused by a memory leak (missing release of memory) occurring after an object's effective lifetime. An unauthorized attacker can exploit this flaw over the network to crash the service or degrade performance.

Affected products:

Active Directory Domain Services

Source: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-69809

Related in this roundup: CVE-2026-62813, CVE-2026-69359, CVE-2026-69524, CVE-2026-62762, CVE-2026-69546.

CVE-2026-69792

CVE-2026-69792 describes a race condition vulnerability within the Windows Win32K kernel component. An authorized local attacker can exploit this synchronization flaw to bypass security features, potentially leading to unauthorized privilege escalation.

Affected products:

Windows

Source: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-69792

Related in this roundup: CVE-2026-81963, CVE-2026-85880, CVE-2026-69496, CVE-2026-69586, CVE-2026-69768, CVE-2026-73025, CVE-2026-56172, CVE-2026-68832, CVE-2026-68834, CVE-2026-68838, CVE-2026-68841, CVE-2026-68875, CVE-2026-68877, CVE-2026-68880, CVE-2026-69265, CVE-2026-69270, CVE-2026-69274, CVE-2026-69275, CVE-2026-69280, CVE-2026-69283, CVE-2026-69284, CVE-2026-69289, CVE-2026-69296, CVE-2026-69300, CVE-2026-69301, CVE-2026-69307, CVE-2026-69312, CVE-2026-69314, CVE-2026-69332, CVE-2026-69333, CVE-2026-69335, CVE-2026-68833, CVE-2026-68851, CVE-2026-69366, CVE-2026-69337, CVE-2026-69347, CVE-2026-69379, CVE-2026-69390, CVE-2026-69401, CVE-2026-69413, CVE-2026-69420, CVE-2026-69429, CVE-2026-69448, CVE-2026-69455, CVE-2026-69532, CVE-2026-69472, CVE-2026-69479, CVE-2026-69531, CVE-2026-69517, CVE-2026-69505, CVE-2026-69504, CVE-2026-69527, CVE-2026-69549, CVE-2026-69588, CVE-2026-69609, CVE-2026-69648, CVE-2026-69689, CVE-2026-69790, CVE-2026-69638, CVE-2026-69859, CVE-2026-69717, CVE-2026-69711, CVE-2026-69875, CVE-2026-69889, CVE-2026-69757, CVE-2026-69741, CVE-2026-69762, CVE-2026-69744, CVE-2026-69832, CVE-2026-69691, CVE-2026-69808, CVE-2026-69775, CVE-2026-69822, CVE-2026-69770, CVE-2026-69676, CVE-2026-70289, CVE-2026-70563, CVE-2026-71329, CVE-2026-71332, CVE-2026-71350, CVE-2026-71348, CVE-2026-71345, CVE-2026-69469, CVE-2026-69501, CVE-2026-69548, CVE-2026-69846, CVE-2026-70283, CVE-2026-72981, CVE-2026-77491, CVE-2026-77492, CVE-2026-77503, CVE-2026-80093, CVE-2026-72949, CVE-2026-70019, CVE-2026-72940, CVE-2026-69573, CVE-2026-70290, CVE-2026-83991, CVE-2026-83999, CVE-2026-69321, CVE-2026-69316, CVE-2026-69340, CVE-2026-69348, CVE-2026-69350, CVE-2026-69353, CVE-2026-69357, CVE-2026-69393, CVE-2026-69410, CVE-2026-69421, CVE-2026-69428, CVE-2026-69425, CVE-2026-69427, CVE-2026-69434, CVE-2026-69456, CVE-2026-69459, CVE-2026-69478, CVE-2026-69561, CVE-2026-69512, CVE-2026-69498, CVE-2026-69571, CVE-2026-69535, CVE-2026-69538, CVE-2026-69591, CVE-2026-69566, CVE-2026-69567, CVE-2026-69584, CVE-2026-69617, CVE-2026-69630, CVE-2026-69610, CVE-2026-69881, CVE-2026-69680, CVE-2026-69619, CVE-2026-69685, CVE-2026-69643, CVE-2026-69687, CVE-2026-69791, CVE-2026-69707, CVE-2026-69652, CVE-2026-69834, CVE-2026-69709, CVE-2026-69844, CVE-2026-69814, CVE-2026-69731, CVE-2026-69706, CVE-2026-69779, CVE-2026-69895, CVE-2026-69853, CVE-2026-69761, CVE-2026-69785, CVE-2026-69818, CVE-2026-69786, CVE-2026-69874, CVE-2026-70565, CVE-2026-70574, CVE-2026-70569, CVE-2026-70575, CVE-2026-71349, CVE-2026-72927, CVE-2026-72952, CVE-2026-72942, CVE-2026-72966, CVE-2026-72967, CVE-2026-69426, CVE-2026-69564, CVE-2026-72985, CVE-2026-73019, CVE-2026-78451, CVE-2026-78452, CVE-2026-83940, CVE-2026-69598, CVE-2026-83995, CVE-2026-83501, CVE-2026-83498.

CVE-2026-69853

CVE-2026-69853 describes an information disclosure vulnerability in the Windows Win32K component caused by the use of an uninitialized resource. A local, authorized attacker can exploit this flaw to gain unauthorized access to sensitive information residing in memory.

Affected products:

Windows

Source: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-69853

Related in this roundup: CVE-2026-81963, CVE-2026-85880, CVE-2026-69496, CVE-2026-69586, CVE-2026-69768, CVE-2026-73025, CVE-2026-56172, CVE-2026-68832, CVE-2026-68834, CVE-2026-68838, CVE-2026-68841, CVE-2026-68875, CVE-2026-68877, CVE-2026-68880, CVE-2026-69265, CVE-2026-69270, CVE-2026-69274, CVE-2026-69275, CVE-2026-69280, CVE-2026-69283, CVE-2026-69284, CVE-2026-69289, CVE-2026-69296, CVE-2026-69300, CVE-2026-69301, CVE-2026-69307, CVE-2026-69312, CVE-2026-69314, CVE-2026-69332, CVE-2026-69333, CVE-2026-69335, CVE-2026-68833, CVE-2026-68851, CVE-2026-69366, CVE-2026-69337, CVE-2026-69347, CVE-2026-69379, CVE-2026-69390, CVE-2026-69401, CVE-2026-69413, CVE-2026-69420, CVE-2026-69429, CVE-2026-69448, CVE-2026-69455, CVE-2026-69532, CVE-2026-69472, CVE-2026-69479, CVE-2026-69531, CVE-2026-69517, CVE-2026-69505, CVE-2026-69504, CVE-2026-69527, CVE-2026-69549, CVE-2026-69588, CVE-2026-69609, CVE-2026-69648, CVE-2026-69689, CVE-2026-69790, CVE-2026-69638, CVE-2026-69859, CVE-2026-69717, CVE-2026-69711, CVE-2026-69875, CVE-2026-69889, CVE-2026-69757, CVE-2026-69741, CVE-2026-69762, CVE-2026-69744, CVE-2026-69832, CVE-2026-69691, CVE-2026-69808, CVE-2026-69775, CVE-2026-69822, CVE-2026-69770, CVE-2026-69676, CVE-2026-70289, CVE-2026-70563, CVE-2026-71329, CVE-2026-71332, CVE-2026-71350, CVE-2026-71348, CVE-2026-71345, CVE-2026-69469, CVE-2026-69501, CVE-2026-69548, CVE-2026-69846, CVE-2026-70283, CVE-2026-72981, CVE-2026-77491, CVE-2026-77492, CVE-2026-77503, CVE-2026-80093, CVE-2026-72949, CVE-2026-70019, CVE-2026-72940, CVE-2026-69573, CVE-2026-70290, CVE-2026-83991, CVE-2026-83999, CVE-2026-69321, CVE-2026-69316, CVE-2026-69340, CVE-2026-69348, CVE-2026-69350, CVE-2026-69353, CVE-2026-69357, CVE-2026-69393, CVE-2026-69410, CVE-2026-69421, CVE-2026-69428, CVE-2026-69425, CVE-2026-69427, CVE-2026-69434, CVE-2026-69456, CVE-2026-69459, CVE-2026-69478, CVE-2026-69561, CVE-2026-69512, CVE-2026-69498, CVE-2026-69571, CVE-2026-69535, CVE-2026-69538, CVE-2026-69591, CVE-2026-69566, CVE-2026-69567, CVE-2026-69584, CVE-2026-69617, CVE-2026-69630, CVE-2026-69610, CVE-2026-69881, CVE-2026-69680, CVE-2026-69619, CVE-2026-69685, CVE-2026-69643, CVE-2026-69687, CVE-2026-69791, CVE-2026-69707, CVE-2026-69652, CVE-2026-69834, CVE-2026-69709, CVE-2026-69844, CVE-2026-69814, CVE-2026-69731, CVE-2026-69706, CVE-2026-69779, CVE-2026-69895, CVE-2026-69792, CVE-2026-69761, CVE-2026-69785, CVE-2026-69818, CVE-2026-69786, CVE-2026-69874, CVE-2026-70565, CVE-2026-70574, CVE-2026-70569, CVE-2026-70575, CVE-2026-71349, CVE-2026-72927, CVE-2026-72952, CVE-2026-72942, CVE-2026-72966, CVE-2026-72967, CVE-2026-69426, CVE-2026-69564, CVE-2026-72985, CVE-2026-73019, CVE-2026-78451, CVE-2026-78452, CVE-2026-83940, CVE-2026-69598, CVE-2026-83995, CVE-2026-83501, CVE-2026-83498.

CVE-2026-69761

CVE-2026-69761 is a use-after-free vulnerability in the Windows TCP/IP stack that allows an authenticated attacker to elevate their privileges over the network.

Affected products:

Windows

Source: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-69761

Related in this roundup: CVE-2026-81963, CVE-2026-85880, CVE-2026-69496, CVE-2026-69586, CVE-2026-69768, CVE-2026-73025, CVE-2026-56172, CVE-2026-68832, CVE-2026-68834, CVE-2026-68838, CVE-2026-68841, CVE-2026-68875, CVE-2026-68877, CVE-2026-68880, CVE-2026-69265, CVE-2026-69270, CVE-2026-69274, CVE-2026-69275, CVE-2026-69280, CVE-2026-69283, CVE-2026-69284, CVE-2026-69289, CVE-2026-69296, CVE-2026-69300, CVE-2026-69301, CVE-2026-69307, CVE-2026-69312, CVE-2026-69314, CVE-2026-69332, CVE-2026-69333, CVE-2026-69335, CVE-2026-68833, CVE-2026-68851, CVE-2026-69366, CVE-2026-69337, CVE-2026-69347, CVE-2026-69379, CVE-2026-69390, CVE-2026-69401, CVE-2026-69413, CVE-2026-69420, CVE-2026-69429, CVE-2026-69448, CVE-2026-69455, CVE-2026-69532, CVE-2026-69472, CVE-2026-69479, CVE-2026-69531, CVE-2026-69517, CVE-2026-69505, CVE-2026-69504, CVE-2026-69527, CVE-2026-69549, CVE-2026-69588, CVE-2026-69609, CVE-2026-69648, CVE-2026-69689, CVE-2026-69790, CVE-2026-69638, CVE-2026-69859, CVE-2026-69717, CVE-2026-69711, CVE-2026-69875, CVE-2026-69889, CVE-2026-69757, CVE-2026-69741, CVE-2026-69762, CVE-2026-69744, CVE-2026-69832, CVE-2026-69691, CVE-2026-69808, CVE-2026-69775, CVE-2026-69822, CVE-2026-69770, CVE-2026-69676, CVE-2026-70289, CVE-2026-70563, CVE-2026-71329, CVE-2026-71332, CVE-2026-71350, CVE-2026-71348, CVE-2026-71345, CVE-2026-69469, CVE-2026-69501, CVE-2026-69548, CVE-2026-69846, CVE-2026-70283, CVE-2026-72981, CVE-2026-77491, CVE-2026-77492, CVE-2026-77503, CVE-2026-80093, CVE-2026-72949, CVE-2026-70019, CVE-2026-72940, CVE-2026-69573, CVE-2026-70290, CVE-2026-83991, CVE-2026-83999, CVE-2026-69321, CVE-2026-69316, CVE-2026-69340, CVE-2026-69348, CVE-2026-69350, CVE-2026-69353, CVE-2026-69357, CVE-2026-69393, CVE-2026-69410, CVE-2026-69421, CVE-2026-69428, CVE-2026-69425, CVE-2026-69427, CVE-2026-69434, CVE-2026-69456, CVE-2026-69459, CVE-2026-69478, CVE-2026-69561, CVE-2026-69512, CVE-2026-69498, CVE-2026-69571, CVE-2026-69535, CVE-2026-69538, CVE-2026-69591, CVE-2026-69566, CVE-2026-69567, CVE-2026-69584, CVE-2026-69617, CVE-2026-69630, CVE-2026-69610, CVE-2026-69881, CVE-2026-69680, CVE-2026-69619, CVE-2026-69685, CVE-2026-69643, CVE-2026-69687, CVE-2026-69791, CVE-2026-69707, CVE-2026-69652, CVE-2026-69834, CVE-2026-69709, CVE-2026-69844, CVE-2026-69814, CVE-2026-69731, CVE-2026-69706, CVE-2026-69779, CVE-2026-69895, CVE-2026-69792, CVE-2026-69853, CVE-2026-69785, CVE-2026-69818, CVE-2026-69786, CVE-2026-69874, CVE-2026-70565, CVE-2026-70574, CVE-2026-70569, CVE-2026-70575, CVE-2026-71349, CVE-2026-72927, CVE-2026-72952, CVE-2026-72942, CVE-2026-72966, CVE-2026-72967, CVE-2026-69426, CVE-2026-69564, CVE-2026-72985, CVE-2026-73019, CVE-2026-78451, CVE-2026-78452, CVE-2026-83940, CVE-2026-69598, CVE-2026-83995, CVE-2026-83501, CVE-2026-83498.

CVE-2026-69708

CVE-2026-69708 is a use-after-free vulnerability in the Windows Web Platform Storage component that enables a locally authenticated attacker to escalate privileges. Detection engineers should monitor for abnormal process behavior or memory corruption patterns originating from the Windows Web Platform Storage subsystem.

Affected products:

Windows Web Platform Storage

Source: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-69708

CVE-2026-69878

CVE-2026-69878 describes a heap-based buffer overflow vulnerability within the Windows DHCP Server component. An authorized attacker can leverage this flaw to achieve remote code execution, necessitating prompt patching of all affected DHCP server instances.

Affected products:

Windows DHCP Server

Source: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-69878

Related in this roundup: CVE-2026-69845, CVE-2026-72979, CVE-2026-69266, CVE-2026-69412, CVE-2026-69415, CVE-2026-69929, CVE-2026-69930, CVE-2026-70124, CVE-2026-77494, CVE-2026-77498, CVE-2026-77499, CVE-2026-77501, CVE-2026-77502, CVE-2026-77887, CVE-2026-77888, CVE-2026-77886, CVE-2026-77890, CVE-2026-77889, CVE-2026-77891, CVE-2026-77893, CVE-2026-77895, CVE-2026-70065, CVE-2026-69297, CVE-2026-69342, CVE-2026-69405, CVE-2026-69416, CVE-2026-69497, CVE-2026-69547, CVE-2026-69620, CVE-2026-69637, CVE-2026-69803, CVE-2026-69679, CVE-2026-69847, CVE-2026-69876, CVE-2026-69510.

CVE-2026-69785

CVE-2026-69785 is a local privilege escalation vulnerability in Windows Smart Card caused by an untrusted search path flaw. An authorized local attacker can exploit this vulnerability to execute code or elevate privileges by leveraging the insecure path lookup mechanism.

Affected products:

Windows

Source: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-69785

Related in this roundup: CVE-2026-81963, CVE-2026-85880, CVE-2026-69496, CVE-2026-69586, CVE-2026-69768, CVE-2026-73025, CVE-2026-56172, CVE-2026-68832, CVE-2026-68834, CVE-2026-68838, CVE-2026-68841, CVE-2026-68875, CVE-2026-68877, CVE-2026-68880, CVE-2026-69265, CVE-2026-69270, CVE-2026-69274, CVE-2026-69275, CVE-2026-69280, CVE-2026-69283, CVE-2026-69284, CVE-2026-69289, CVE-2026-69296, CVE-2026-69300, CVE-2026-69301, CVE-2026-69307, CVE-2026-69312, CVE-2026-69314, CVE-2026-69332, CVE-2026-69333, CVE-2026-69335, CVE-2026-68833, CVE-2026-68851, CVE-2026-69366, CVE-2026-69337, CVE-2026-69347, CVE-2026-69379, CVE-2026-69390, CVE-2026-69401, CVE-2026-69413, CVE-2026-69420, CVE-2026-69429, CVE-2026-69448, CVE-2026-69455, CVE-2026-69532, CVE-2026-69472, CVE-2026-69479, CVE-2026-69531, CVE-2026-69517, CVE-2026-69505, CVE-2026-69504, CVE-2026-69527, CVE-2026-69549, CVE-2026-69588, CVE-2026-69609, CVE-2026-69648, CVE-2026-69689, CVE-2026-69790, CVE-2026-69638, CVE-2026-69859, CVE-2026-69717, CVE-2026-69711, CVE-2026-69875, CVE-2026-69889, CVE-2026-69757, CVE-2026-69741, CVE-2026-69762, CVE-2026-69744, CVE-2026-69832, CVE-2026-69691, CVE-2026-69808, CVE-2026-69775, CVE-2026-69822, CVE-2026-69770, CVE-2026-69676, CVE-2026-70289, CVE-2026-70563, CVE-2026-71329, CVE-2026-71332, CVE-2026-71350, CVE-2026-71348, CVE-2026-71345, CVE-2026-69469, CVE-2026-69501, CVE-2026-69548, CVE-2026-69846, CVE-2026-70283, CVE-2026-72981, CVE-2026-77491, CVE-2026-77492, CVE-2026-77503, CVE-2026-80093, CVE-2026-72949, CVE-2026-70019, CVE-2026-72940, CVE-2026-69573, CVE-2026-70290, CVE-2026-83991, CVE-2026-83999, CVE-2026-69321, CVE-2026-69316, CVE-2026-69340, CVE-2026-69348, CVE-2026-69350, CVE-2026-69353, CVE-2026-69357, CVE-2026-69393, CVE-2026-69410, CVE-2026-69421, CVE-2026-69428, CVE-2026-69425, CVE-2026-69427, CVE-2026-69434, CVE-2026-69456, CVE-2026-69459, CVE-2026-69478, CVE-2026-69561, CVE-2026-69512, CVE-2026-69498, CVE-2026-69571, CVE-2026-69535, CVE-2026-69538, CVE-2026-69591, CVE-2026-69566, CVE-2026-69567, CVE-2026-69584, CVE-2026-69617, CVE-2026-69630, CVE-2026-69610, CVE-2026-69881, CVE-2026-69680, CVE-2026-69619, CVE-2026-69685, CVE-2026-69643, CVE-2026-69687, CVE-2026-69791, CVE-2026-69707, CVE-2026-69652, CVE-2026-69834, CVE-2026-69709, CVE-2026-69844, CVE-2026-69814, CVE-2026-69731, CVE-2026-69706, CVE-2026-69779, CVE-2026-69895, CVE-2026-69792, CVE-2026-69853, CVE-2026-69761, CVE-2026-69818, CVE-2026-69786, CVE-2026-69874, CVE-2026-70565, CVE-2026-70574, CVE-2026-70569, CVE-2026-70575, CVE-2026-71349, CVE-2026-72927, CVE-2026-72952, CVE-2026-72942, CVE-2026-72966, CVE-2026-72967, CVE-2026-69426, CVE-2026-69564, CVE-2026-72985, CVE-2026-73019, CVE-2026-78451, CVE-2026-78452, CVE-2026-83940, CVE-2026-69598, CVE-2026-83995, CVE-2026-83501, CVE-2026-83498.

CVE-2026-69907

An elevation of privilege vulnerability exists in Windows Enterprise App Management due to the improper handling of permissions or privileges. An authenticated local attacker could exploit this vulnerability to gain higher privileges on the target system.

Affected products:

Windows Enterprise App Management

Source: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-69907

Related in this roundup: CVE-2026-69481.

CVE-2026-69818

CVE-2026-69818 describes a use-after-free vulnerability within the Windows Win32k kernel component. An attacker who has already gained local access can exploit this flaw to execute code with elevated privileges, effectively bypassing standard security restrictions.

Affected products:

Windows

Source: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-69818

Related in this roundup: CVE-2026-81963, CVE-2026-85880, CVE-2026-69496, CVE-2026-69586, CVE-2026-69768, CVE-2026-73025, CVE-2026-56172, CVE-2026-68832, CVE-2026-68834, CVE-2026-68838, CVE-2026-68841, CVE-2026-68875, CVE-2026-68877, CVE-2026-68880, CVE-2026-69265, CVE-2026-69270, CVE-2026-69274, CVE-2026-69275, CVE-2026-69280, CVE-2026-69283, CVE-2026-69284, CVE-2026-69289, CVE-2026-69296, CVE-2026-69300, CVE-2026-69301, CVE-2026-69307, CVE-2026-69312, CVE-2026-69314, CVE-2026-69332, CVE-2026-69333, CVE-2026-69335, CVE-2026-68833, CVE-2026-68851, CVE-2026-69366, CVE-2026-69337, CVE-2026-69347, CVE-2026-69379, CVE-2026-69390, CVE-2026-69401, CVE-2026-69413, CVE-2026-69420, CVE-2026-69429, CVE-2026-69448, CVE-2026-69455, CVE-2026-69532, CVE-2026-69472, CVE-2026-69479, CVE-2026-69531, CVE-2026-69517, CVE-2026-69505, CVE-2026-69504, CVE-2026-69527, CVE-2026-69549, CVE-2026-69588, CVE-2026-69609, CVE-2026-69648, CVE-2026-69689, CVE-2026-69790, CVE-2026-69638, CVE-2026-69859, CVE-2026-69717, CVE-2026-69711, CVE-2026-69875, CVE-2026-69889, CVE-2026-69757, CVE-2026-69741, CVE-2026-69762, CVE-2026-69744, CVE-2026-69832, CVE-2026-69691, CVE-2026-69808, CVE-2026-69775, CVE-2026-69822, CVE-2026-69770, CVE-2026-69676, CVE-2026-70289, CVE-2026-70563, CVE-2026-71329, CVE-2026-71332, CVE-2026-71350, CVE-2026-71348, CVE-2026-71345, CVE-2026-69469, CVE-2026-69501, CVE-2026-69548, CVE-2026-69846, CVE-2026-70283, CVE-2026-72981, CVE-2026-77491, CVE-2026-77492, CVE-2026-77503, CVE-2026-80093, CVE-2026-72949, CVE-2026-70019, CVE-2026-72940, CVE-2026-69573, CVE-2026-70290, CVE-2026-83991, CVE-2026-83999, CVE-2026-69321, CVE-2026-69316, CVE-2026-69340, CVE-2026-69348, CVE-2026-69350, CVE-2026-69353, CVE-2026-69357, CVE-2026-69393, CVE-2026-69410, CVE-2026-69421, CVE-2026-69428, CVE-2026-69425, CVE-2026-69427, CVE-2026-69434, CVE-2026-69456, CVE-2026-69459, CVE-2026-69478, CVE-2026-69561, CVE-2026-69512, CVE-2026-69498, CVE-2026-69571, CVE-2026-69535, CVE-2026-69538, CVE-2026-69591, CVE-2026-69566, CVE-2026-69567, CVE-2026-69584, CVE-2026-69617, CVE-2026-69630, CVE-2026-69610, CVE-2026-69881, CVE-2026-69680, CVE-2026-69619, CVE-2026-69685, CVE-2026-69643, CVE-2026-69687, CVE-2026-69791, CVE-2026-69707, CVE-2026-69652, CVE-2026-69834, CVE-2026-69709, CVE-2026-69844, CVE-2026-69814, CVE-2026-69731, CVE-2026-69706, CVE-2026-69779, CVE-2026-69895, CVE-2026-69792, CVE-2026-69853, CVE-2026-69761, CVE-2026-69785, CVE-2026-69786, CVE-2026-69874, CVE-2026-70565, CVE-2026-70574, CVE-2026-70569, CVE-2026-70575, CVE-2026-71349, CVE-2026-72927, CVE-2026-72952, CVE-2026-72942, CVE-2026-72966, CVE-2026-72967, CVE-2026-69426, CVE-2026-69564, CVE-2026-72985, CVE-2026-73019, CVE-2026-78451, CVE-2026-78452, CVE-2026-83940, CVE-2026-69598, CVE-2026-83995, CVE-2026-83501, CVE-2026-83498.

CVE-2026-69900

An untrusted pointer dereference vulnerability exists within the Windows Kernel Streaming WOW Thunk Service Driver. An authorized local attacker can exploit this flaw to achieve privilege escalation by triggering the dereference condition.

Affected products:

Kernel Streaming WOW Thunk Service Driver

Source: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-69900

CVE-2026-69891

CVE-2026-69891 is a local privilege escalation vulnerability in Windows Media caused by a use-after-free flaw. An authenticated attacker can exploit this vulnerability to gain higher privileges on a target system.

Affected products:

Windows Media

Source: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-69891

CVE-2026-69847

CVE-2026-69847 is a heap-based buffer overflow vulnerability in the Windows DHCP Server component. An authorized attacker on an adjacent network can exploit this flaw to achieve remote code execution on the target server.

Affected products:

Windows DHCP Server

Source: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-69847

Related in this roundup: CVE-2026-69845, CVE-2026-72979, CVE-2026-69266, CVE-2026-69412, CVE-2026-69415, CVE-2026-69929, CVE-2026-69930, CVE-2026-70124, CVE-2026-77494, CVE-2026-77498, CVE-2026-77499, CVE-2026-77501, CVE-2026-77502, CVE-2026-77887, CVE-2026-77888, CVE-2026-77886, CVE-2026-77890, CVE-2026-77889, CVE-2026-77891, CVE-2026-77893, CVE-2026-77895, CVE-2026-70065, CVE-2026-69297, CVE-2026-69342, CVE-2026-69405, CVE-2026-69416, CVE-2026-69497, CVE-2026-69547, CVE-2026-69620, CVE-2026-69637, CVE-2026-69803, CVE-2026-69679, CVE-2026-69878, CVE-2026-69876, CVE-2026-69510.

CVE-2026-69911

A use-after-free vulnerability exists in the Microsoft Windows Search Component that allows an authorized local attacker to achieve privilege escalation by exploiting memory corruption issues within the component.

Affected products:

Windows Search Component

Source: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-69911

Related in this roundup: CVE-2026-68896, CVE-2026-69305, CVE-2026-69322, CVE-2026-69507, CVE-2026-69554, CVE-2026-69585, CVE-2026-69608, CVE-2026-69453, CVE-2026-69600, CVE-2026-70145.

CVE-2026-69760

CVE-2026-69760 is an out-of-bounds read vulnerability in the Windows Kerberos implementation that allows an unauthorized, remote attacker to trigger a denial-of-service condition over the network.

Affected products:

Windows Kerberos

Source: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-69760

CVE-2026-69777

CVE-2026-69777 is a heap-based buffer overflow vulnerability in the Windows DHCP Client that enables an authorized attacker on an adjacent network to achieve privilege escalation.

Affected products:

Windows DHCP Client

Source: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-69777

Related in this roundup: CVE-2026-69781.

CVE-2026-69807

CVE-2026-69807 is a privilege escalation vulnerability in Windows PowerShell resulting from improper path validation (path traversal). An authorized attacker can exploit this flaw over a network to elevate their privileges on an affected system.

Affected products:

PowerShell

Source: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-69807

Related in this roundup: CVE-2026-62801.

CVE-2026-69781

CVE-2026-69781 is a denial of service vulnerability in the Windows DHCP Client caused by improper memory management. An unauthorized attacker on an adjacent network can exploit this flaw to cause a denial of service condition by triggering a memory leak or failure to release resources after their effective lifetime.

Affected products:

Windows DHCP Client

Source: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-69781

Related in this roundup: CVE-2026-69777.

CVE-2026-69876

CVE-2026-69876 describes a use-after-free vulnerability in the Microsoft Windows DHCP Server component. This flaw allows an authorized attacker on an adjacent network to achieve remote code execution, necessitating monitoring for anomalous traffic directed at DHCP services within local network segments.

Affected products:

Windows DHCP Server

Source: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-69876

Related in this roundup: CVE-2026-69845, CVE-2026-72979, CVE-2026-69266, CVE-2026-69412, CVE-2026-69415, CVE-2026-69929, CVE-2026-69930, CVE-2026-70124, CVE-2026-77494, CVE-2026-77498, CVE-2026-77499, CVE-2026-77501, CVE-2026-77502, CVE-2026-77887, CVE-2026-77888, CVE-2026-77886, CVE-2026-77890, CVE-2026-77889, CVE-2026-77891, CVE-2026-77893, CVE-2026-77895, CVE-2026-70065, CVE-2026-69297, CVE-2026-69342, CVE-2026-69405, CVE-2026-69416, CVE-2026-69497, CVE-2026-69547, CVE-2026-69620, CVE-2026-69637, CVE-2026-69803, CVE-2026-69679, CVE-2026-69878, CVE-2026-69847, CVE-2026-69510.

CVE-2026-69852

A remote code execution vulnerability exists in the Windows Routing and Remote Access Service (RRAS) that allows an unauthenticated attacker to gain unauthorized access to a victim's machine by sending specially crafted packets to the affected service.

Affected products:

Windows Routing and Remote Access Service

Source: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-69852

Related in this roundup: CVE-2026-71353.

CVE-2026-69786

A heap-based buffer overflow vulnerability in the Windows Text Shaping component allows a remote, unauthorized attacker to achieve remote code execution via a network-based attack vector.

Affected products:

Windows

Source: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-69786

Related in this roundup: CVE-2026-81963, CVE-2026-85880, CVE-2026-69496, CVE-2026-69586, CVE-2026-69768, CVE-2026-73025, CVE-2026-56172, CVE-2026-68832, CVE-2026-68834, CVE-2026-68838, CVE-2026-68841, CVE-2026-68875, CVE-2026-68877, CVE-2026-68880, CVE-2026-69265, CVE-2026-69270, CVE-2026-69274, CVE-2026-69275, CVE-2026-69280, CVE-2026-69283, CVE-2026-69284, CVE-2026-69289, CVE-2026-69296, CVE-2026-69300, CVE-2026-69301, CVE-2026-69307, CVE-2026-69312, CVE-2026-69314, CVE-2026-69332, CVE-2026-69333, CVE-2026-69335, CVE-2026-68833, CVE-2026-68851, CVE-2026-69366, CVE-2026-69337, CVE-2026-69347, CVE-2026-69379, CVE-2026-69390, CVE-2026-69401, CVE-2026-69413, CVE-2026-69420, CVE-2026-69429, CVE-2026-69448, CVE-2026-69455, CVE-2026-69532, CVE-2026-69472, CVE-2026-69479, CVE-2026-69531, CVE-2026-69517, CVE-2026-69505, CVE-2026-69504, CVE-2026-69527, CVE-2026-69549, CVE-2026-69588, CVE-2026-69609, CVE-2026-69648, CVE-2026-69689, CVE-2026-69790, CVE-2026-69638, CVE-2026-69859, CVE-2026-69717, CVE-2026-69711, CVE-2026-69875, CVE-2026-69889, CVE-2026-69757, CVE-2026-69741, CVE-2026-69762, CVE-2026-69744, CVE-2026-69832, CVE-2026-69691, CVE-2026-69808, CVE-2026-69775, CVE-2026-69822, CVE-2026-69770, CVE-2026-69676, CVE-2026-70289, CVE-2026-70563, CVE-2026-71329, CVE-2026-71332, CVE-2026-71350, CVE-2026-71348, CVE-2026-71345, CVE-2026-69469, CVE-2026-69501, CVE-2026-69548, CVE-2026-69846, CVE-2026-70283, CVE-2026-72981, CVE-2026-77491, CVE-2026-77492, CVE-2026-77503, CVE-2026-80093, CVE-2026-72949, CVE-2026-70019, CVE-2026-72940, CVE-2026-69573, CVE-2026-70290, CVE-2026-83991, CVE-2026-83999, CVE-2026-69321, CVE-2026-69316, CVE-2026-69340, CVE-2026-69348, CVE-2026-69350, CVE-2026-69353, CVE-2026-69357, CVE-2026-69393, CVE-2026-69410, CVE-2026-69421, CVE-2026-69428, CVE-2026-69425, CVE-2026-69427, CVE-2026-69434, CVE-2026-69456, CVE-2026-69459, CVE-2026-69478, CVE-2026-69561, CVE-2026-69512, CVE-2026-69498, CVE-2026-69571, CVE-2026-69535, CVE-2026-69538, CVE-2026-69591, CVE-2026-69566, CVE-2026-69567, CVE-2026-69584, CVE-2026-69617, CVE-2026-69630, CVE-2026-69610, CVE-2026-69881, CVE-2026-69680, CVE-2026-69619, CVE-2026-69685, CVE-2026-69643, CVE-2026-69687, CVE-2026-69791, CVE-2026-69707, CVE-2026-69652, CVE-2026-69834, CVE-2026-69709, CVE-2026-69844, CVE-2026-69814, CVE-2026-69731, CVE-2026-69706, CVE-2026-69779, CVE-2026-69895, CVE-2026-69792, CVE-2026-69853, CVE-2026-69761, CVE-2026-69785, CVE-2026-69818, CVE-2026-69874, CVE-2026-70565, CVE-2026-70574, CVE-2026-70569, CVE-2026-70575, CVE-2026-71349, CVE-2026-72927, CVE-2026-72952, CVE-2026-72942, CVE-2026-72966, CVE-2026-72967, CVE-2026-69426, CVE-2026-69564, CVE-2026-72985, CVE-2026-73019, CVE-2026-78451, CVE-2026-78452, CVE-2026-83940, CVE-2026-69598, CVE-2026-83995, CVE-2026-83501, CVE-2026-83498.

CVE-2026-69799

CVE-2026-69799 is a race condition vulnerability in Windows Hello that allows a locally authenticated attacker to escalate their privileges. The vulnerability stems from improper synchronization of shared resources during concurrent execution.

Affected products:

Windows Hello

Source: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-69799

Related in this roundup: CVE-2026-69740, CVE-2026-72980, CVE-2026-69710, CVE-2026-69725, CVE-2026-69864, CVE-2026-69820, CVE-2026-69784, CVE-2026-81354.

CVE-2026-69813

A use-after-free vulnerability in the Windows DNS Server component allows an unauthenticated remote attacker to achieve remote code execution. The vulnerability is triggered by malicious network traffic processed by the DNS service.

Affected products:

Windows DNS Server

Source: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-69813

Related in this roundup: CVE-2026-69551, CVE-2026-77505, CVE-2026-78523, CVE-2026-69989, CVE-2026-69827, CVE-2026-69858, CVE-2026-72928.

CVE-2026-69710

A race condition vulnerability exists in Windows Hello due to improper synchronization of shared resources. An authenticated, local attacker could exploit this flaw to execute code or perform actions with elevated privileges on the target system.

Affected products:

Windows Hello

Source: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-69710

Related in this roundup: CVE-2026-69740, CVE-2026-72980, CVE-2026-69799, CVE-2026-69725, CVE-2026-69864, CVE-2026-69820, CVE-2026-69784, CVE-2026-81354.

CVE-2026-69858

CVE-2026-69858 is a remote code execution vulnerability in the Windows DNS Server component caused by a use-after-free flaw. An unauthenticated attacker can exploit this vulnerability by sending specially crafted network requests to a vulnerable DNS server, potentially leading to arbitrary code execution with elevated privileges.

Affected products:

Windows DNS Server

Source: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-69858

Related in this roundup: CVE-2026-69551, CVE-2026-77505, CVE-2026-78523, CVE-2026-69989, CVE-2026-69827, CVE-2026-69813, CVE-2026-72928.

CVE-2026-69874

An untrusted pointer dereference vulnerability exists within the Advanced Local Procedure Call (ALPC) mechanism in Windows, which can be exploited by an authenticated local attacker to gain elevated privileges.

Affected products:

Windows

Source: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-69874

Related in this roundup: CVE-2026-81963, CVE-2026-85880, CVE-2026-69496, CVE-2026-69586, CVE-2026-69768, CVE-2026-73025, CVE-2026-56172, CVE-2026-68832, CVE-2026-68834, CVE-2026-68838, CVE-2026-68841, CVE-2026-68875, CVE-2026-68877, CVE-2026-68880, CVE-2026-69265, CVE-2026-69270, CVE-2026-69274, CVE-2026-69275, CVE-2026-69280, CVE-2026-69283, CVE-2026-69284, CVE-2026-69289, CVE-2026-69296, CVE-2026-69300, CVE-2026-69301, CVE-2026-69307, CVE-2026-69312, CVE-2026-69314, CVE-2026-69332, CVE-2026-69333, CVE-2026-69335, CVE-2026-68833, CVE-2026-68851, CVE-2026-69366, CVE-2026-69337, CVE-2026-69347, CVE-2026-69379, CVE-2026-69390, CVE-2026-69401, CVE-2026-69413, CVE-2026-69420, CVE-2026-69429, CVE-2026-69448, CVE-2026-69455, CVE-2026-69532, CVE-2026-69472, CVE-2026-69479, CVE-2026-69531, CVE-2026-69517, CVE-2026-69505, CVE-2026-69504, CVE-2026-69527, CVE-2026-69549, CVE-2026-69588, CVE-2026-69609, CVE-2026-69648, CVE-2026-69689, CVE-2026-69790, CVE-2026-69638, CVE-2026-69859, CVE-2026-69717, CVE-2026-69711, CVE-2026-69875, CVE-2026-69889, CVE-2026-69757, CVE-2026-69741, CVE-2026-69762, CVE-2026-69744, CVE-2026-69832, CVE-2026-69691, CVE-2026-69808, CVE-2026-69775, CVE-2026-69822, CVE-2026-69770, CVE-2026-69676, CVE-2026-70289, CVE-2026-70563, CVE-2026-71329, CVE-2026-71332, CVE-2026-71350, CVE-2026-71348, CVE-2026-71345, CVE-2026-69469, CVE-2026-69501, CVE-2026-69548, CVE-2026-69846, CVE-2026-70283, CVE-2026-72981, CVE-2026-77491, CVE-2026-77492, CVE-2026-77503, CVE-2026-80093, CVE-2026-72949, CVE-2026-70019, CVE-2026-72940, CVE-2026-69573, CVE-2026-70290, CVE-2026-83991, CVE-2026-83999, CVE-2026-69321, CVE-2026-69316, CVE-2026-69340, CVE-2026-69348, CVE-2026-69350, CVE-2026-69353, CVE-2026-69357, CVE-2026-69393, CVE-2026-69410, CVE-2026-69421, CVE-2026-69428, CVE-2026-69425, CVE-2026-69427, CVE-2026-69434, CVE-2026-69456, CVE-2026-69459, CVE-2026-69478, CVE-2026-69561, CVE-2026-69512, CVE-2026-69498, CVE-2026-69571, CVE-2026-69535, CVE-2026-69538, CVE-2026-69591, CVE-2026-69566, CVE-2026-69567, CVE-2026-69584, CVE-2026-69617, CVE-2026-69630, CVE-2026-69610, CVE-2026-69881, CVE-2026-69680, CVE-2026-69619, CVE-2026-69685, CVE-2026-69643, CVE-2026-69687, CVE-2026-69791, CVE-2026-69707, CVE-2026-69652, CVE-2026-69834, CVE-2026-69709, CVE-2026-69844, CVE-2026-69814, CVE-2026-69731, CVE-2026-69706, CVE-2026-69779, CVE-2026-69895, CVE-2026-69792, CVE-2026-69853, CVE-2026-69761, CVE-2026-69785, CVE-2026-69818, CVE-2026-69786, CVE-2026-70565, CVE-2026-70574, CVE-2026-70569, CVE-2026-70575, CVE-2026-71349, CVE-2026-72927, CVE-2026-72952, CVE-2026-72942, CVE-2026-72966, CVE-2026-72967, CVE-2026-69426, CVE-2026-69564, CVE-2026-72985, CVE-2026-73019, CVE-2026-78451, CVE-2026-78452, CVE-2026-83940, CVE-2026-69598, CVE-2026-83995, CVE-2026-83501, CVE-2026-83498.

CVE-2026-69725

CVE-2026-69725 describes a double free vulnerability within Windows Hello that allows an authenticated local attacker to escalate their privileges. Detection efforts should focus on monitoring for unauthorized attempts to interact with biometric authentication processes or suspicious service calls originating from low-privileged local user accounts.

Affected products:

Windows Hello

Source: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-69725

Related in this roundup: CVE-2026-69740, CVE-2026-72980, CVE-2026-69799, CVE-2026-69710, CVE-2026-69864, CVE-2026-69820, CVE-2026-69784, CVE-2026-81354.

CVE-2026-69864

A use-after-free vulnerability in Windows Hello enables a local, authorized attacker to elevate their privileges on an affected Windows system.

Affected products:

Windows Hello

Source: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-69864

Related in this roundup: CVE-2026-69740, CVE-2026-72980, CVE-2026-69799, CVE-2026-69710, CVE-2026-69725, CVE-2026-69820, CVE-2026-69784, CVE-2026-81354.

CVE-2026-69820

CVE-2026-69820 is a heap-based buffer overflow vulnerability within Windows Hello that enables a locally authenticated attacker to escalate their privileges. This vulnerability exists due to improper memory handling, potentially allowing arbitrary code execution or system-level access when triggered.

Affected products:

Windows Hello

Source: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-69820

Related in this roundup: CVE-2026-69740, CVE-2026-72980, CVE-2026-69799, CVE-2026-69710, CVE-2026-69725, CVE-2026-69864, CVE-2026-69784, CVE-2026-81354.

CVE-2026-69784

CVE-2026-69784 is a privilege escalation vulnerability in Windows Hello caused by a use-after-free flaw. An authorized local attacker can exploit this vulnerability to gain elevated privileges on the affected system.

Affected products:

Windows Hello

Source: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-69784

Related in this roundup: CVE-2026-69740, CVE-2026-72980, CVE-2026-69799, CVE-2026-69710, CVE-2026-69725, CVE-2026-69864, CVE-2026-69820, CVE-2026-81354.

CVE-2026-64918

CVE-2026-64918 is a spoofing vulnerability in Microsoft Office caused by insufficiently protected credentials. An attacker can exploit this flaw over a network to perform spoofing attacks, potentially leading to unauthorized manipulation or deception of user trust.

Affected products:

Office

Source: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-64918

Related in this roundup: CVE-2026-69285, CVE-2026-69739, CVE-2026-77504, CVE-2026-77898, CVE-2026-78439, CVE-2026-78505, CVE-2026-69442, CVE-2026-69626, CVE-2026-69632, CVE-2026-72938, CVE-2026-72973, CVE-2026-78512, CVE-2026-80079, CVE-2026-78524, CVE-2026-80078, CVE-2026-80076, CVE-2026-80087, CVE-2026-80085, CVE-2026-80088, CVE-2026-80091, CVE-2026-80089, CVE-2026-80090, CVE-2026-80082.

CVE-2026-70565

CVE-2026-70565 is a privilege escalation vulnerability in the Windows AF_UNIX Socket Provider. The vulnerability stems from a use-after-free condition that allows an authenticated local attacker to gain elevated privileges on the affected system.

Affected products:

Windows

Source: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-70565

Related in this roundup: CVE-2026-81963, CVE-2026-85880, CVE-2026-69496, CVE-2026-69586, CVE-2026-69768, CVE-2026-73025, CVE-2026-56172, CVE-2026-68832, CVE-2026-68834, CVE-2026-68838, CVE-2026-68841, CVE-2026-68875, CVE-2026-68877, CVE-2026-68880, CVE-2026-69265, CVE-2026-69270, CVE-2026-69274, CVE-2026-69275, CVE-2026-69280, CVE-2026-69283, CVE-2026-69284, CVE-2026-69289, CVE-2026-69296, CVE-2026-69300, CVE-2026-69301, CVE-2026-69307, CVE-2026-69312, CVE-2026-69314, CVE-2026-69332, CVE-2026-69333, CVE-2026-69335, CVE-2026-68833, CVE-2026-68851, CVE-2026-69366, CVE-2026-69337, CVE-2026-69347, CVE-2026-69379, CVE-2026-69390, CVE-2026-69401, CVE-2026-69413, CVE-2026-69420, CVE-2026-69429, CVE-2026-69448, CVE-2026-69455, CVE-2026-69532, CVE-2026-69472, CVE-2026-69479, CVE-2026-69531, CVE-2026-69517, CVE-2026-69505, CVE-2026-69504, CVE-2026-69527, CVE-2026-69549, CVE-2026-69588, CVE-2026-69609, CVE-2026-69648, CVE-2026-69689, CVE-2026-69790, CVE-2026-69638, CVE-2026-69859, CVE-2026-69717, CVE-2026-69711, CVE-2026-69875, CVE-2026-69889, CVE-2026-69757, CVE-2026-69741, CVE-2026-69762, CVE-2026-69744, CVE-2026-69832, CVE-2026-69691, CVE-2026-69808, CVE-2026-69775, CVE-2026-69822, CVE-2026-69770, CVE-2026-69676, CVE-2026-70289, CVE-2026-70563, CVE-2026-71329, CVE-2026-71332, CVE-2026-71350, CVE-2026-71348, CVE-2026-71345, CVE-2026-69469, CVE-2026-69501, CVE-2026-69548, CVE-2026-69846, CVE-2026-70283, CVE-2026-72981, CVE-2026-77491, CVE-2026-77492, CVE-2026-77503, CVE-2026-80093, CVE-2026-72949, CVE-2026-70019, CVE-2026-72940, CVE-2026-69573, CVE-2026-70290, CVE-2026-83991, CVE-2026-83999, CVE-2026-69321, CVE-2026-69316, CVE-2026-69340, CVE-2026-69348, CVE-2026-69350, CVE-2026-69353, CVE-2026-69357, CVE-2026-69393, CVE-2026-69410, CVE-2026-69421, CVE-2026-69428, CVE-2026-69425, CVE-2026-69427, CVE-2026-69434, CVE-2026-69456, CVE-2026-69459, CVE-2026-69478, CVE-2026-69561, CVE-2026-69512, CVE-2026-69498, CVE-2026-69571, CVE-2026-69535, CVE-2026-69538, CVE-2026-69591, CVE-2026-69566, CVE-2026-69567, CVE-2026-69584, CVE-2026-69617, CVE-2026-69630, CVE-2026-69610, CVE-2026-69881, CVE-2026-69680, CVE-2026-69619, CVE-2026-69685, CVE-2026-69643, CVE-2026-69687, CVE-2026-69791, CVE-2026-69707, CVE-2026-69652, CVE-2026-69834, CVE-2026-69709, CVE-2026-69844, CVE-2026-69814, CVE-2026-69731, CVE-2026-69706, CVE-2026-69779, CVE-2026-69895, CVE-2026-69792, CVE-2026-69853, CVE-2026-69761, CVE-2026-69785, CVE-2026-69818, CVE-2026-69786, CVE-2026-69874, CVE-2026-70574, CVE-2026-70569, CVE-2026-70575, CVE-2026-71349, CVE-2026-72927, CVE-2026-72952, CVE-2026-72942, CVE-2026-72966, CVE-2026-72967, CVE-2026-69426, CVE-2026-69564, CVE-2026-72985, CVE-2026-73019, CVE-2026-78451, CVE-2026-78452, CVE-2026-83940, CVE-2026-69598, CVE-2026-83995, CVE-2026-83501, CVE-2026-83498.

CVE-2026-70574

The Virtual Hard Disk (VHD) Miniport Driver contains an out-of-bounds read vulnerability that can be exploited by an authorized local attacker to achieve privilege escalation.

Affected products:

Windows

Source: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-70574

Related in this roundup: CVE-2026-81963, CVE-2026-85880, CVE-2026-69496, CVE-2026-69586, CVE-2026-69768, CVE-2026-73025, CVE-2026-56172, CVE-2026-68832, CVE-2026-68834, CVE-2026-68838, CVE-2026-68841, CVE-2026-68875, CVE-2026-68877, CVE-2026-68880, CVE-2026-69265, CVE-2026-69270, CVE-2026-69274, CVE-2026-69275, CVE-2026-69280, CVE-2026-69283, CVE-2026-69284, CVE-2026-69289, CVE-2026-69296, CVE-2026-69300, CVE-2026-69301, CVE-2026-69307, CVE-2026-69312, CVE-2026-69314, CVE-2026-69332, CVE-2026-69333, CVE-2026-69335, CVE-2026-68833, CVE-2026-68851, CVE-2026-69366, CVE-2026-69337, CVE-2026-69347, CVE-2026-69379, CVE-2026-69390, CVE-2026-69401, CVE-2026-69413, CVE-2026-69420, CVE-2026-69429, CVE-2026-69448, CVE-2026-69455, CVE-2026-69532, CVE-2026-69472, CVE-2026-69479, CVE-2026-69531, CVE-2026-69517, CVE-2026-69505, CVE-2026-69504, CVE-2026-69527, CVE-2026-69549, CVE-2026-69588, CVE-2026-69609, CVE-2026-69648, CVE-2026-69689, CVE-2026-69790, CVE-2026-69638, CVE-2026-69859, CVE-2026-69717, CVE-2026-69711, CVE-2026-69875, CVE-2026-69889, CVE-2026-69757, CVE-2026-69741, CVE-2026-69762, CVE-2026-69744, CVE-2026-69832, CVE-2026-69691, CVE-2026-69808, CVE-2026-69775, CVE-2026-69822, CVE-2026-69770, CVE-2026-69676, CVE-2026-70289, CVE-2026-70563, CVE-2026-71329, CVE-2026-71332, CVE-2026-71350, CVE-2026-71348, CVE-2026-71345, CVE-2026-69469, CVE-2026-69501, CVE-2026-69548, CVE-2026-69846, CVE-2026-70283, CVE-2026-72981, CVE-2026-77491, CVE-2026-77492, CVE-2026-77503, CVE-2026-80093, CVE-2026-72949, CVE-2026-70019, CVE-2026-72940, CVE-2026-69573, CVE-2026-70290, CVE-2026-83991, CVE-2026-83999, CVE-2026-69321, CVE-2026-69316, CVE-2026-69340, CVE-2026-69348, CVE-2026-69350, CVE-2026-69353, CVE-2026-69357, CVE-2026-69393, CVE-2026-69410, CVE-2026-69421, CVE-2026-69428, CVE-2026-69425, CVE-2026-69427, CVE-2026-69434, CVE-2026-69456, CVE-2026-69459, CVE-2026-69478, CVE-2026-69561, CVE-2026-69512, CVE-2026-69498, CVE-2026-69571, CVE-2026-69535, CVE-2026-69538, CVE-2026-69591, CVE-2026-69566, CVE-2026-69567, CVE-2026-69584, CVE-2026-69617, CVE-2026-69630, CVE-2026-69610, CVE-2026-69881, CVE-2026-69680, CVE-2026-69619, CVE-2026-69685, CVE-2026-69643, CVE-2026-69687, CVE-2026-69791, CVE-2026-69707, CVE-2026-69652, CVE-2026-69834, CVE-2026-69709, CVE-2026-69844, CVE-2026-69814, CVE-2026-69731, CVE-2026-69706, CVE-2026-69779, CVE-2026-69895, CVE-2026-69792, CVE-2026-69853, CVE-2026-69761, CVE-2026-69785, CVE-2026-69818, CVE-2026-69786, CVE-2026-69874, CVE-2026-70565, CVE-2026-70569, CVE-2026-70575, CVE-2026-71349, CVE-2026-72927, CVE-2026-72952, CVE-2026-72942, CVE-2026-72966, CVE-2026-72967, CVE-2026-69426, CVE-2026-69564, CVE-2026-72985, CVE-2026-73019, CVE-2026-78451, CVE-2026-78452, CVE-2026-83940, CVE-2026-69598, CVE-2026-83995, CVE-2026-83501, CVE-2026-83498.

CVE-2026-70567

The Windows Display Enhancement Service contains a double-free vulnerability that can be exploited by a locally authenticated attacker to achieve privilege escalation on the affected system.

Affected products:

Windows Display Enhancement Service

Source: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-70567

CVE-2026-70568

CVE-2026-70568 is a heap-based buffer overflow vulnerability within the Windows Defender Firewall Service. The vulnerability allows an authenticated attacker to perform a local privilege escalation on the affected Windows system.

Affected products:

Windows Defender Firewall Service

Source: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-70568

Related in this roundup: CVE-2026-68831.

CVE-2026-70569

An out-of-bounds read vulnerability exists in the Windows Spaceport.sys driver, which can be exploited by a local, authorized attacker to achieve privilege escalation on the affected system.

Affected products:

Windows

Source: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-70569

Related in this roundup: CVE-2026-81963, CVE-2026-85880, CVE-2026-69496, CVE-2026-69586, CVE-2026-69768, CVE-2026-73025, CVE-2026-56172, CVE-2026-68832, CVE-2026-68834, CVE-2026-68838, CVE-2026-68841, CVE-2026-68875, CVE-2026-68877, CVE-2026-68880, CVE-2026-69265, CVE-2026-69270, CVE-2026-69274, CVE-2026-69275, CVE-2026-69280, CVE-2026-69283, CVE-2026-69284, CVE-2026-69289, CVE-2026-69296, CVE-2026-69300, CVE-2026-69301, CVE-2026-69307, CVE-2026-69312, CVE-2026-69314, CVE-2026-69332, CVE-2026-69333, CVE-2026-69335, CVE-2026-68833, CVE-2026-68851, CVE-2026-69366, CVE-2026-69337, CVE-2026-69347, CVE-2026-69379, CVE-2026-69390, CVE-2026-69401, CVE-2026-69413, CVE-2026-69420, CVE-2026-69429, CVE-2026-69448, CVE-2026-69455, CVE-2026-69532, CVE-2026-69472, CVE-2026-69479, CVE-2026-69531, CVE-2026-69517, CVE-2026-69505, CVE-2026-69504, CVE-2026-69527, CVE-2026-69549, CVE-2026-69588, CVE-2026-69609, CVE-2026-69648, CVE-2026-69689, CVE-2026-69790, CVE-2026-69638, CVE-2026-69859, CVE-2026-69717, CVE-2026-69711, CVE-2026-69875, CVE-2026-69889, CVE-2026-69757, CVE-2026-69741, CVE-2026-69762, CVE-2026-69744, CVE-2026-69832, CVE-2026-69691, CVE-2026-69808, CVE-2026-69775, CVE-2026-69822, CVE-2026-69770, CVE-2026-69676, CVE-2026-70289, CVE-2026-70563, CVE-2026-71329, CVE-2026-71332, CVE-2026-71350, CVE-2026-71348, CVE-2026-71345, CVE-2026-69469, CVE-2026-69501, CVE-2026-69548, CVE-2026-69846, CVE-2026-70283, CVE-2026-72981, CVE-2026-77491, CVE-2026-77492, CVE-2026-77503, CVE-2026-80093, CVE-2026-72949, CVE-2026-70019, CVE-2026-72940, CVE-2026-69573, CVE-2026-70290, CVE-2026-83991, CVE-2026-83999, CVE-2026-69321, CVE-2026-69316, CVE-2026-69340, CVE-2026-69348, CVE-2026-69350, CVE-2026-69353, CVE-2026-69357, CVE-2026-69393, CVE-2026-69410, CVE-2026-69421, CVE-2026-69428, CVE-2026-69425, CVE-2026-69427, CVE-2026-69434, CVE-2026-69456, CVE-2026-69459, CVE-2026-69478, CVE-2026-69561, CVE-2026-69512, CVE-2026-69498, CVE-2026-69571, CVE-2026-69535, CVE-2026-69538, CVE-2026-69591, CVE-2026-69566, CVE-2026-69567, CVE-2026-69584, CVE-2026-69617, CVE-2026-69630, CVE-2026-69610, CVE-2026-69881, CVE-2026-69680, CVE-2026-69619, CVE-2026-69685, CVE-2026-69643, CVE-2026-69687, CVE-2026-69791, CVE-2026-69707, CVE-2026-69652, CVE-2026-69834, CVE-2026-69709, CVE-2026-69844, CVE-2026-69814, CVE-2026-69731, CVE-2026-69706, CVE-2026-69779, CVE-2026-69895, CVE-2026-69792, CVE-2026-69853, CVE-2026-69761, CVE-2026-69785, CVE-2026-69818, CVE-2026-69786, CVE-2026-69874, CVE-2026-70565, CVE-2026-70574, CVE-2026-70575, CVE-2026-71349, CVE-2026-72927, CVE-2026-72952, CVE-2026-72942, CVE-2026-72966, CVE-2026-72967, CVE-2026-69426, CVE-2026-69564, CVE-2026-72985, CVE-2026-73019, CVE-2026-78451, CVE-2026-78452, CVE-2026-83940, CVE-2026-69598, CVE-2026-83995, CVE-2026-83501, CVE-2026-83498.

CVE-2026-70573

The Windows Biometric Service contains a heap-based buffer overflow vulnerability that allows a locally authenticated attacker to escalate privileges to the level of the service, potentially gaining administrative control over the system.

Affected products:

Windows Biometric Service

Source: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-70573

Related in this roundup: CVE-2026-69293, CVE-2026-69298, CVE-2026-69323, CVE-2026-69583, CVE-2026-69589, CVE-2026-69580, CVE-2026-69476, CVE-2026-69787, CVE-2026-77489, CVE-2026-83955, CVE-2026-83986, CVE-2026-83969, CVE-2026-83988, CVE-2026-83979, CVE-2026-83974, CVE-2026-83975, CVE-2026-83976, CVE-2026-69727, CVE-2026-69826, CVE-2026-69738, CVE-2026-69773, CVE-2026-70572, CVE-2026-70581, CVE-2026-72941, CVE-2026-69352, CVE-2026-69489, CVE-2026-69593, CVE-2026-72995, CVE-2026-72988, CVE-2026-72990, CVE-2026-72991, CVE-2026-72992, CVE-2026-72993, CVE-2026-72994, CVE-2026-72996, CVE-2026-72997, CVE-2026-73002, CVE-2026-73020, CVE-2026-73000, CVE-2026-73001, CVE-2026-73021, CVE-2026-73015, CVE-2026-73011, CVE-2026-73008, CVE-2026-73007, CVE-2026-73026, CVE-2026-78447, CVE-2026-78448, CVE-2026-83971, CVE-2026-83954, CVE-2026-83967, CVE-2026-83970, CVE-2026-83972, CVE-2026-83968, CVE-2026-83973, CVE-2026-83981, CVE-2026-83977, CVE-2026-83978, CVE-2026-83982, CVE-2026-83980, CVE-2026-83987, CVE-2026-83983, CVE-2026-83985.

CVE-2026-70572

CVE-2026-70572 describes an integer overflow or wraparound vulnerability within the Windows Biometric Service. This flaw allows an authenticated local attacker to execute operations with elevated privileges, potentially leading to full system compromise. Detection efforts should focus on monitoring anomalous local service process behavior and unexpected escalation of service account privileges.

Affected products:

Windows Biometric Service

Source: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-70572

Related in this roundup: CVE-2026-69293, CVE-2026-69298, CVE-2026-69323, CVE-2026-69583, CVE-2026-69589, CVE-2026-69580, CVE-2026-69476, CVE-2026-69787, CVE-2026-77489, CVE-2026-83955, CVE-2026-83986, CVE-2026-83969, CVE-2026-83988, CVE-2026-83979, CVE-2026-83974, CVE-2026-83975, CVE-2026-83976, CVE-2026-69727, CVE-2026-69826, CVE-2026-69738, CVE-2026-69773, CVE-2026-70573, CVE-2026-70581, CVE-2026-72941, CVE-2026-69352, CVE-2026-69489, CVE-2026-69593, CVE-2026-72995, CVE-2026-72988, CVE-2026-72990, CVE-2026-72991, CVE-2026-72992, CVE-2026-72993, CVE-2026-72994, CVE-2026-72996, CVE-2026-72997, CVE-2026-73002, CVE-2026-73020, CVE-2026-73000, CVE-2026-73001, CVE-2026-73021, CVE-2026-73015, CVE-2026-73011, CVE-2026-73008, CVE-2026-73007, CVE-2026-73026, CVE-2026-78447, CVE-2026-78448, CVE-2026-83971, CVE-2026-83954, CVE-2026-83967, CVE-2026-83970, CVE-2026-83972, CVE-2026-83968, CVE-2026-83973, CVE-2026-83981, CVE-2026-83977, CVE-2026-83978, CVE-2026-83982, CVE-2026-83980, CVE-2026-83987, CVE-2026-83983, CVE-2026-83985.

CVE-2026-70575

A null pointer dereference vulnerability in the Windows Schannel component allows an authenticated attacker to cause a denial of service condition on affected systems over the network.

Affected products:

Windows

Source: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-70575

Related in this roundup: CVE-2026-81963, CVE-2026-85880, CVE-2026-69496, CVE-2026-69586, CVE-2026-69768, CVE-2026-73025, CVE-2026-56172, CVE-2026-68832, CVE-2026-68834, CVE-2026-68838, CVE-2026-68841, CVE-2026-68875, CVE-2026-68877, CVE-2026-68880, CVE-2026-69265, CVE-2026-69270, CVE-2026-69274, CVE-2026-69275, CVE-2026-69280, CVE-2026-69283, CVE-2026-69284, CVE-2026-69289, CVE-2026-69296, CVE-2026-69300, CVE-2026-69301, CVE-2026-69307, CVE-2026-69312, CVE-2026-69314, CVE-2026-69332, CVE-2026-69333, CVE-2026-69335, CVE-2026-68833, CVE-2026-68851, CVE-2026-69366, CVE-2026-69337, CVE-2026-69347, CVE-2026-69379, CVE-2026-69390, CVE-2026-69401, CVE-2026-69413, CVE-2026-69420, CVE-2026-69429, CVE-2026-69448, CVE-2026-69455, CVE-2026-69532, CVE-2026-69472, CVE-2026-69479, CVE-2026-69531, CVE-2026-69517, CVE-2026-69505, CVE-2026-69504, CVE-2026-69527, CVE-2026-69549, CVE-2026-69588, CVE-2026-69609, CVE-2026-69648, CVE-2026-69689, CVE-2026-69790, CVE-2026-69638, CVE-2026-69859, CVE-2026-69717, CVE-2026-69711, CVE-2026-69875, CVE-2026-69889, CVE-2026-69757, CVE-2026-69741, CVE-2026-69762, CVE-2026-69744, CVE-2026-69832, CVE-2026-69691, CVE-2026-69808, CVE-2026-69775, CVE-2026-69822, CVE-2026-69770, CVE-2026-69676, CVE-2026-70289, CVE-2026-70563, CVE-2026-71329, CVE-2026-71332, CVE-2026-71350, CVE-2026-71348, CVE-2026-71345, CVE-2026-69469, CVE-2026-69501, CVE-2026-69548, CVE-2026-69846, CVE-2026-70283, CVE-2026-72981, CVE-2026-77491, CVE-2026-77492, CVE-2026-77503, CVE-2026-80093, CVE-2026-72949, CVE-2026-70019, CVE-2026-72940, CVE-2026-69573, CVE-2026-70290, CVE-2026-83991, CVE-2026-83999, CVE-2026-69321, CVE-2026-69316, CVE-2026-69340, CVE-2026-69348, CVE-2026-69350, CVE-2026-69353, CVE-2026-69357, CVE-2026-69393, CVE-2026-69410, CVE-2026-69421, CVE-2026-69428, CVE-2026-69425, CVE-2026-69427, CVE-2026-69434, CVE-2026-69456, CVE-2026-69459, CVE-2026-69478, CVE-2026-69561, CVE-2026-69512, CVE-2026-69498, CVE-2026-69571, CVE-2026-69535, CVE-2026-69538, CVE-2026-69591, CVE-2026-69566, CVE-2026-69567, CVE-2026-69584, CVE-2026-69617, CVE-2026-69630, CVE-2026-69610, CVE-2026-69881, CVE-2026-69680, CVE-2026-69619, CVE-2026-69685, CVE-2026-69643, CVE-2026-69687, CVE-2026-69791, CVE-2026-69707, CVE-2026-69652, CVE-2026-69834, CVE-2026-69709, CVE-2026-69844, CVE-2026-69814, CVE-2026-69731, CVE-2026-69706, CVE-2026-69779, CVE-2026-69895, CVE-2026-69792, CVE-2026-69853, CVE-2026-69761, CVE-2026-69785, CVE-2026-69818, CVE-2026-69786, CVE-2026-69874, CVE-2026-70565, CVE-2026-70574, CVE-2026-70569, CVE-2026-71349, CVE-2026-72927, CVE-2026-72952, CVE-2026-72942, CVE-2026-72966, CVE-2026-72967, CVE-2026-69426, CVE-2026-69564, CVE-2026-72985, CVE-2026-73019, CVE-2026-78451, CVE-2026-78452, CVE-2026-83940, CVE-2026-69598, CVE-2026-83995, CVE-2026-83501, CVE-2026-83498.

CVE-2026-70581

CVE-2026-70581 is an elevation of privilege vulnerability in the Windows Biometric Service caused by an integer overflow or wraparound. This vulnerability allows an authorized local attacker to escalate their privileges on the affected system.

Affected products:

Windows Biometric Service

Source: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-70581

Related in this roundup: CVE-2026-69293, CVE-2026-69298, CVE-2026-69323, CVE-2026-69583, CVE-2026-69589, CVE-2026-69580, CVE-2026-69476, CVE-2026-69787, CVE-2026-77489, CVE-2026-83955, CVE-2026-83986, CVE-2026-83969, CVE-2026-83988, CVE-2026-83979, CVE-2026-83974, CVE-2026-83975, CVE-2026-83976, CVE-2026-69727, CVE-2026-69826, CVE-2026-69738, CVE-2026-69773, CVE-2026-70573, CVE-2026-70572, CVE-2026-72941, CVE-2026-69352, CVE-2026-69489, CVE-2026-69593, CVE-2026-72995, CVE-2026-72988, CVE-2026-72990, CVE-2026-72991, CVE-2026-72992, CVE-2026-72993, CVE-2026-72994, CVE-2026-72996, CVE-2026-72997, CVE-2026-73002, CVE-2026-73020, CVE-2026-73000, CVE-2026-73001, CVE-2026-73021, CVE-2026-73015, CVE-2026-73011, CVE-2026-73008, CVE-2026-73007, CVE-2026-73026, CVE-2026-78447, CVE-2026-78448, CVE-2026-83971, CVE-2026-83954, CVE-2026-83967, CVE-2026-83970, CVE-2026-83972, CVE-2026-83968, CVE-2026-83973, CVE-2026-83981, CVE-2026-83977, CVE-2026-83978, CVE-2026-83982, CVE-2026-83980, CVE-2026-83987, CVE-2026-83983, CVE-2026-83985.

CVE-2026-70577

CVE-2026-70577 is a use-after-free vulnerability in Windows Modern Device Management (MDM) that allows a locally authenticated attacker to escalate their privileges. Detection efforts should focus on monitoring for abnormal process execution or unauthorized attempts to interact with MDM services or system-level processes by lower-privileged users.

Affected products:

Windows Modern Device Management

Source: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-70577

Related in this roundup: CVE-2026-69377, CVE-2026-69460, CVE-2026-69674, CVE-2026-73003, CVE-2026-73022.

CVE-2026-70578

A heap-based buffer overflow vulnerability in Windows Credential Guard allows a locally authenticated attacker to escalate privileges. This vulnerability is classified as a buffer overflow, which can be exploited to gain higher-level permissions on an affected Windows system.

Affected products:

Windows Credential Guard

Source: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-70578

Related in this roundup: CVE-2026-72958.

CVE-2026-70579

CVE-2026-70579 describes an out-of-bounds read vulnerability within the Windows Mobile Broadband component. An unauthorized attacker can exploit this flaw to perform unauthorized information disclosure over a network, potentially exposing sensitive data processed by the mobile broadband service.

Affected products:

Windows Mobile Broadband

Source: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-70579

CVE-2026-70583

CVE-2026-70583 is a heap-based buffer overflow vulnerability in Windows Core Messaging that enables a locally authorized attacker to perform privilege escalation on the affected system.

Affected products:

Windows Core Messaging

Source: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-70583

Related in this roundup: CVE-2026-70584.

CVE-2026-71349

CVE-2026-71349 identifies a heap-based buffer overflow vulnerability in the Windows Spaceport.sys driver. This vulnerability permits an unauthorized attacker with physical access to the target system to achieve remote code execution through the exploitation of this kernel-level driver.

Affected products:

Windows

Source: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-71349

Related in this roundup: CVE-2026-81963, CVE-2026-85880, CVE-2026-69496, CVE-2026-69586, CVE-2026-69768, CVE-2026-73025, CVE-2026-56172, CVE-2026-68832, CVE-2026-68834, CVE-2026-68838, CVE-2026-68841, CVE-2026-68875, CVE-2026-68877, CVE-2026-68880, CVE-2026-69265, CVE-2026-69270, CVE-2026-69274, CVE-2026-69275, CVE-2026-69280, CVE-2026-69283, CVE-2026-69284, CVE-2026-69289, CVE-2026-69296, CVE-2026-69300, CVE-2026-69301, CVE-2026-69307, CVE-2026-69312, CVE-2026-69314, CVE-2026-69332, CVE-2026-69333, CVE-2026-69335, CVE-2026-68833, CVE-2026-68851, CVE-2026-69366, CVE-2026-69337, CVE-2026-69347, CVE-2026-69379, CVE-2026-69390, CVE-2026-69401, CVE-2026-69413, CVE-2026-69420, CVE-2026-69429, CVE-2026-69448, CVE-2026-69455, CVE-2026-69532, CVE-2026-69472, CVE-2026-69479, CVE-2026-69531, CVE-2026-69517, CVE-2026-69505, CVE-2026-69504, CVE-2026-69527, CVE-2026-69549, CVE-2026-69588, CVE-2026-69609, CVE-2026-69648, CVE-2026-69689, CVE-2026-69790, CVE-2026-69638, CVE-2026-69859, CVE-2026-69717, CVE-2026-69711, CVE-2026-69875, CVE-2026-69889, CVE-2026-69757, CVE-2026-69741, CVE-2026-69762, CVE-2026-69744, CVE-2026-69832, CVE-2026-69691, CVE-2026-69808, CVE-2026-69775, CVE-2026-69822, CVE-2026-69770, CVE-2026-69676, CVE-2026-70289, CVE-2026-70563, CVE-2026-71329, CVE-2026-71332, CVE-2026-71350, CVE-2026-71348, CVE-2026-71345, CVE-2026-69469, CVE-2026-69501, CVE-2026-69548, CVE-2026-69846, CVE-2026-70283, CVE-2026-72981, CVE-2026-77491, CVE-2026-77492, CVE-2026-77503, CVE-2026-80093, CVE-2026-72949, CVE-2026-70019, CVE-2026-72940, CVE-2026-69573, CVE-2026-70290, CVE-2026-83991, CVE-2026-83999, CVE-2026-69321, CVE-2026-69316, CVE-2026-69340, CVE-2026-69348, CVE-2026-69350, CVE-2026-69353, CVE-2026-69357, CVE-2026-69393, CVE-2026-69410, CVE-2026-69421, CVE-2026-69428, CVE-2026-69425, CVE-2026-69427, CVE-2026-69434, CVE-2026-69456, CVE-2026-69459, CVE-2026-69478, CVE-2026-69561, CVE-2026-69512, CVE-2026-69498, CVE-2026-69571, CVE-2026-69535, CVE-2026-69538, CVE-2026-69591, CVE-2026-69566, CVE-2026-69567, CVE-2026-69584, CVE-2026-69617, CVE-2026-69630, CVE-2026-69610, CVE-2026-69881, CVE-2026-69680, CVE-2026-69619, CVE-2026-69685, CVE-2026-69643, CVE-2026-69687, CVE-2026-69791, CVE-2026-69707, CVE-2026-69652, CVE-2026-69834, CVE-2026-69709, CVE-2026-69844, CVE-2026-69814, CVE-2026-69731, CVE-2026-69706, CVE-2026-69779, CVE-2026-69895, CVE-2026-69792, CVE-2026-69853, CVE-2026-69761, CVE-2026-69785, CVE-2026-69818, CVE-2026-69786, CVE-2026-69874, CVE-2026-70565, CVE-2026-70574, CVE-2026-70569, CVE-2026-70575, CVE-2026-72927, CVE-2026-72952, CVE-2026-72942, CVE-2026-72966, CVE-2026-72967, CVE-2026-69426, CVE-2026-69564, CVE-2026-72985, CVE-2026-73019, CVE-2026-78451, CVE-2026-78452, CVE-2026-83940, CVE-2026-69598, CVE-2026-83995, CVE-2026-83501, CVE-2026-83498.

CVE-2026-71342

A use-after-free vulnerability in the Windows Remote Access Connection Manager allows an authenticated local attacker to execute arbitrary code or gain elevated privileges on the system.

Affected products:

Windows Remote Access Connection Manager

Source: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-71342

Related in this roundup: CVE-2026-69331, CVE-2026-71333, CVE-2026-71352.

CVE-2026-71352

CVE-2026-71352 describes an integer underflow vulnerability in the Windows Remote Access Connection Manager. An authorized attacker can leverage this flaw to trigger an integer wraparound, resulting in remote code execution over a network.

Affected products:

Windows Remote Access Connection Manager

Source: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-71352

Related in this roundup: CVE-2026-69331, CVE-2026-71333, CVE-2026-71342.

CVE-2026-72927

CVE-2026-72927 describes a heap-based buffer overflow vulnerability within the Windows Winsock component that allows an authorized local attacker to achieve privilege escalation.

Affected products:

Windows

Source: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-72927

Related in this roundup: CVE-2026-81963, CVE-2026-85880, CVE-2026-69496, CVE-2026-69586, CVE-2026-69768, CVE-2026-73025, CVE-2026-56172, CVE-2026-68832, CVE-2026-68834, CVE-2026-68838, CVE-2026-68841, CVE-2026-68875, CVE-2026-68877, CVE-2026-68880, CVE-2026-69265, CVE-2026-69270, CVE-2026-69274, CVE-2026-69275, CVE-2026-69280, CVE-2026-69283, CVE-2026-69284, CVE-2026-69289, CVE-2026-69296, CVE-2026-69300, CVE-2026-69301, CVE-2026-69307, CVE-2026-69312, CVE-2026-69314, CVE-2026-69332, CVE-2026-69333, CVE-2026-69335, CVE-2026-68833, CVE-2026-68851, CVE-2026-69366, CVE-2026-69337, CVE-2026-69347, CVE-2026-69379, CVE-2026-69390, CVE-2026-69401, CVE-2026-69413, CVE-2026-69420, CVE-2026-69429, CVE-2026-69448, CVE-2026-69455, CVE-2026-69532, CVE-2026-69472, CVE-2026-69479, CVE-2026-69531, CVE-2026-69517, CVE-2026-69505, CVE-2026-69504, CVE-2026-69527, CVE-2026-69549, CVE-2026-69588, CVE-2026-69609, CVE-2026-69648, CVE-2026-69689, CVE-2026-69790, CVE-2026-69638, CVE-2026-69859, CVE-2026-69717, CVE-2026-69711, CVE-2026-69875, CVE-2026-69889, CVE-2026-69757, CVE-2026-69741, CVE-2026-69762, CVE-2026-69744, CVE-2026-69832, CVE-2026-69691, CVE-2026-69808, CVE-2026-69775, CVE-2026-69822, CVE-2026-69770, CVE-2026-69676, CVE-2026-70289, CVE-2026-70563, CVE-2026-71329, CVE-2026-71332, CVE-2026-71350, CVE-2026-71348, CVE-2026-71345, CVE-2026-69469, CVE-2026-69501, CVE-2026-69548, CVE-2026-69846, CVE-2026-70283, CVE-2026-72981, CVE-2026-77491, CVE-2026-77492, CVE-2026-77503, CVE-2026-80093, CVE-2026-72949, CVE-2026-70019, CVE-2026-72940, CVE-2026-69573, CVE-2026-70290, CVE-2026-83991, CVE-2026-83999, CVE-2026-69321, CVE-2026-69316, CVE-2026-69340, CVE-2026-69348, CVE-2026-69350, CVE-2026-69353, CVE-2026-69357, CVE-2026-69393, CVE-2026-69410, CVE-2026-69421, CVE-2026-69428, CVE-2026-69425, CVE-2026-69427, CVE-2026-69434, CVE-2026-69456, CVE-2026-69459, CVE-2026-69478, CVE-2026-69561, CVE-2026-69512, CVE-2026-69498, CVE-2026-69571, CVE-2026-69535, CVE-2026-69538, CVE-2026-69591, CVE-2026-69566, CVE-2026-69567, CVE-2026-69584, CVE-2026-69617, CVE-2026-69630, CVE-2026-69610, CVE-2026-69881, CVE-2026-69680, CVE-2026-69619, CVE-2026-69685, CVE-2026-69643, CVE-2026-69687, CVE-2026-69791, CVE-2026-69707, CVE-2026-69652, CVE-2026-69834, CVE-2026-69709, CVE-2026-69844, CVE-2026-69814, CVE-2026-69731, CVE-2026-69706, CVE-2026-69779, CVE-2026-69895, CVE-2026-69792, CVE-2026-69853, CVE-2026-69761, CVE-2026-69785, CVE-2026-69818, CVE-2026-69786, CVE-2026-69874, CVE-2026-70565, CVE-2026-70574, CVE-2026-70569, CVE-2026-70575, CVE-2026-71349, CVE-2026-72952, CVE-2026-72942, CVE-2026-72966, CVE-2026-72967, CVE-2026-69426, CVE-2026-69564, CVE-2026-72985, CVE-2026-73019, CVE-2026-78451, CVE-2026-78452, CVE-2026-83940, CVE-2026-69598, CVE-2026-83995, CVE-2026-83501, CVE-2026-83498.

CVE-2026-72928

CVE-2026-72928 is a use-after-free vulnerability in the Microsoft Windows DNS Server component that allows an authorized attacker to achieve remote code execution over the network.

Affected products:

Windows DNS Server

Source: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-72928

Related in this roundup: CVE-2026-69551, CVE-2026-77505, CVE-2026-78523, CVE-2026-69989, CVE-2026-69827, CVE-2026-69813, CVE-2026-69858.

CVE-2026-72931

CVE-2026-72931 is a denial of service vulnerability in the Windows Secure Socket Tunneling Protocol (SSTP) caused by a missing release of resources after their effective lifetime. An authorized local attacker can exploit this flaw to crash the service, resulting in a denial of service condition.

Affected products:

Windows Secure Socket Tunneling Protocol

Source: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-72931

Related in this roundup: CVE-2026-73009, CVE-2026-72930.

CVE-2026-72936

A use-after-free vulnerability exists in the Windows SMB Client that allows an unauthenticated remote attacker to achieve remote code execution by sending a specially crafted packet to the target system over the network.

Affected products:

Windows SMB Client

Source: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-72936

Related in this roundup: CVE-2026-69572, CVE-2026-69544, CVE-2026-69618.

CVE-2026-72933

A heap-based buffer overflow vulnerability in the Microsoft WDAC OLE DB provider for SQL allows a remote, unauthorized attacker to achieve remote code execution. The vulnerability is triggered over a network, presenting a significant risk to systems utilizing this component for SQL connectivity.

Affected products:

WDAC OLE DB provider for SQL

Source: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-72933

CVE-2026-72932

CVE-2026-72932 is a buffer over-read vulnerability within the Windows Message Queuing Queue Manager component. An unauthorized remote attacker can exploit this flaw to perform unauthorized information disclosure over a network, potentially exposing sensitive data residing in memory.

Affected products:

Windows Message Queuing Queue Manager

Source: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-72932

CVE-2026-72952

CVE-2026-72952 is an out-of-bounds read vulnerability in the Windows Spaceport.sys driver. An authorized attacker can exploit this flaw to achieve remote code execution locally on the affected system.

Affected products:

Windows

Source: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-72952

Related in this roundup: CVE-2026-81963, CVE-2026-85880, CVE-2026-69496, CVE-2026-69586, CVE-2026-69768, CVE-2026-73025, CVE-2026-56172, CVE-2026-68832, CVE-2026-68834, CVE-2026-68838, CVE-2026-68841, CVE-2026-68875, CVE-2026-68877, CVE-2026-68880, CVE-2026-69265, CVE-2026-69270, CVE-2026-69274, CVE-2026-69275, CVE-2026-69280, CVE-2026-69283, CVE-2026-69284, CVE-2026-69289, CVE-2026-69296, CVE-2026-69300, CVE-2026-69301, CVE-2026-69307, CVE-2026-69312, CVE-2026-69314, CVE-2026-69332, CVE-2026-69333, CVE-2026-69335, CVE-2026-68833, CVE-2026-68851, CVE-2026-69366, CVE-2026-69337, CVE-2026-69347, CVE-2026-69379, CVE-2026-69390, CVE-2026-69401, CVE-2026-69413, CVE-2026-69420, CVE-2026-69429, CVE-2026-69448, CVE-2026-69455, CVE-2026-69532, CVE-2026-69472, CVE-2026-69479, CVE-2026-69531, CVE-2026-69517, CVE-2026-69505, CVE-2026-69504, CVE-2026-69527, CVE-2026-69549, CVE-2026-69588, CVE-2026-69609, CVE-2026-69648, CVE-2026-69689, CVE-2026-69790, CVE-2026-69638, CVE-2026-69859, CVE-2026-69717, CVE-2026-69711, CVE-2026-69875, CVE-2026-69889, CVE-2026-69757, CVE-2026-69741, CVE-2026-69762, CVE-2026-69744, CVE-2026-69832, CVE-2026-69691, CVE-2026-69808, CVE-2026-69775, CVE-2026-69822, CVE-2026-69770, CVE-2026-69676, CVE-2026-70289, CVE-2026-70563, CVE-2026-71329, CVE-2026-71332, CVE-2026-71350, CVE-2026-71348, CVE-2026-71345, CVE-2026-69469, CVE-2026-69501, CVE-2026-69548, CVE-2026-69846, CVE-2026-70283, CVE-2026-72981, CVE-2026-77491, CVE-2026-77492, CVE-2026-77503, CVE-2026-80093, CVE-2026-72949, CVE-2026-70019, CVE-2026-72940, CVE-2026-69573, CVE-2026-70290, CVE-2026-83991, CVE-2026-83999, CVE-2026-69321, CVE-2026-69316, CVE-2026-69340, CVE-2026-69348, CVE-2026-69350, CVE-2026-69353, CVE-2026-69357, CVE-2026-69393, CVE-2026-69410, CVE-2026-69421, CVE-2026-69428, CVE-2026-69425, CVE-2026-69427, CVE-2026-69434, CVE-2026-69456, CVE-2026-69459, CVE-2026-69478, CVE-2026-69561, CVE-2026-69512, CVE-2026-69498, CVE-2026-69571, CVE-2026-69535, CVE-2026-69538, CVE-2026-69591, CVE-2026-69566, CVE-2026-69567, CVE-2026-69584, CVE-2026-69617, CVE-2026-69630, CVE-2026-69610, CVE-2026-69881, CVE-2026-69680, CVE-2026-69619, CVE-2026-69685, CVE-2026-69643, CVE-2026-69687, CVE-2026-69791, CVE-2026-69707, CVE-2026-69652, CVE-2026-69834, CVE-2026-69709, CVE-2026-69844, CVE-2026-69814, CVE-2026-69731, CVE-2026-69706, CVE-2026-69779, CVE-2026-69895, CVE-2026-69792, CVE-2026-69853, CVE-2026-69761, CVE-2026-69785, CVE-2026-69818, CVE-2026-69786, CVE-2026-69874, CVE-2026-70565, CVE-2026-70574, CVE-2026-70569, CVE-2026-70575, CVE-2026-71349, CVE-2026-72927, CVE-2026-72942, CVE-2026-72966, CVE-2026-72967, CVE-2026-69426, CVE-2026-69564, CVE-2026-72985, CVE-2026-73019, CVE-2026-78451, CVE-2026-78452, CVE-2026-83940, CVE-2026-69598, CVE-2026-83995, CVE-2026-83501, CVE-2026-83498.

CVE-2026-72953

CVE-2026-72953 is a heap-based buffer overflow vulnerability in the Windows USB Driver that enables a local, authorized attacker to escalate privileges on the affected system.

Affected products:

Windows USB Driver

Source: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-72953

Related in this roundup: CVE-2026-68840, CVE-2026-69295, CVE-2026-69457, CVE-2026-69503.

CVE-2026-72941

CVE-2026-72941 is a heap-based buffer overflow vulnerability in the Windows Biometric Service that can be exploited by an authorized local attacker to gain elevated system privileges.

Affected products:

Windows Biometric Service

Source: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-72941

Related in this roundup: CVE-2026-69293, CVE-2026-69298, CVE-2026-69323, CVE-2026-69583, CVE-2026-69589, CVE-2026-69580, CVE-2026-69476, CVE-2026-69787, CVE-2026-77489, CVE-2026-83955, CVE-2026-83986, CVE-2026-83969, CVE-2026-83988, CVE-2026-83979, CVE-2026-83974, CVE-2026-83975, CVE-2026-83976, CVE-2026-69727, CVE-2026-69826, CVE-2026-69738, CVE-2026-69773, CVE-2026-70573, CVE-2026-70572, CVE-2026-70581, CVE-2026-69352, CVE-2026-69489, CVE-2026-69593, CVE-2026-72995, CVE-2026-72988, CVE-2026-72990, CVE-2026-72991, CVE-2026-72992, CVE-2026-72993, CVE-2026-72994, CVE-2026-72996, CVE-2026-72997, CVE-2026-73002, CVE-2026-73020, CVE-2026-73000, CVE-2026-73001, CVE-2026-73021, CVE-2026-73015, CVE-2026-73011, CVE-2026-73008, CVE-2026-73007, CVE-2026-73026, CVE-2026-78447, CVE-2026-78448, CVE-2026-83971, CVE-2026-83954, CVE-2026-83967, CVE-2026-83970, CVE-2026-83972, CVE-2026-83968, CVE-2026-83973, CVE-2026-83981, CVE-2026-83977, CVE-2026-83978, CVE-2026-83982, CVE-2026-83980, CVE-2026-83987, CVE-2026-83983, CVE-2026-83985.

CVE-2026-72942

CVE-2026-72942 is an out-of-bounds read vulnerability in the Windows Spaceport.sys driver. An unauthorized attacker can exploit this flaw to perform information disclosure over a network by reading data outside the intended memory boundaries.

Affected products:

Windows

Source: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-72942

Related in this roundup: CVE-2026-81963, CVE-2026-85880, CVE-2026-69496, CVE-2026-69586, CVE-2026-69768, CVE-2026-73025, CVE-2026-56172, CVE-2026-68832, CVE-2026-68834, CVE-2026-68838, CVE-2026-68841, CVE-2026-68875, CVE-2026-68877, CVE-2026-68880, CVE-2026-69265, CVE-2026-69270, CVE-2026-69274, CVE-2026-69275, CVE-2026-69280, CVE-2026-69283, CVE-2026-69284, CVE-2026-69289, CVE-2026-69296, CVE-2026-69300, CVE-2026-69301, CVE-2026-69307, CVE-2026-69312, CVE-2026-69314, CVE-2026-69332, CVE-2026-69333, CVE-2026-69335, CVE-2026-68833, CVE-2026-68851, CVE-2026-69366, CVE-2026-69337, CVE-2026-69347, CVE-2026-69379, CVE-2026-69390, CVE-2026-69401, CVE-2026-69413, CVE-2026-69420, CVE-2026-69429, CVE-2026-69448, CVE-2026-69455, CVE-2026-69532, CVE-2026-69472, CVE-2026-69479, CVE-2026-69531, CVE-2026-69517, CVE-2026-69505, CVE-2026-69504, CVE-2026-69527, CVE-2026-69549, CVE-2026-69588, CVE-2026-69609, CVE-2026-69648, CVE-2026-69689, CVE-2026-69790, CVE-2026-69638, CVE-2026-69859, CVE-2026-69717, CVE-2026-69711, CVE-2026-69875, CVE-2026-69889, CVE-2026-69757, CVE-2026-69741, CVE-2026-69762, CVE-2026-69744, CVE-2026-69832, CVE-2026-69691, CVE-2026-69808, CVE-2026-69775, CVE-2026-69822, CVE-2026-69770, CVE-2026-69676, CVE-2026-70289, CVE-2026-70563, CVE-2026-71329, CVE-2026-71332, CVE-2026-71350, CVE-2026-71348, CVE-2026-71345, CVE-2026-69469, CVE-2026-69501, CVE-2026-69548, CVE-2026-69846, CVE-2026-70283, CVE-2026-72981, CVE-2026-77491, CVE-2026-77492, CVE-2026-77503, CVE-2026-80093, CVE-2026-72949, CVE-2026-70019, CVE-2026-72940, CVE-2026-69573, CVE-2026-70290, CVE-2026-83991, CVE-2026-83999, CVE-2026-69321, CVE-2026-69316, CVE-2026-69340, CVE-2026-69348, CVE-2026-69350, CVE-2026-69353, CVE-2026-69357, CVE-2026-69393, CVE-2026-69410, CVE-2026-69421, CVE-2026-69428, CVE-2026-69425, CVE-2026-69427, CVE-2026-69434, CVE-2026-69456, CVE-2026-69459, CVE-2026-69478, CVE-2026-69561, CVE-2026-69512, CVE-2026-69498, CVE-2026-69571, CVE-2026-69535, CVE-2026-69538, CVE-2026-69591, CVE-2026-69566, CVE-2026-69567, CVE-2026-69584, CVE-2026-69617, CVE-2026-69630, CVE-2026-69610, CVE-2026-69881, CVE-2026-69680, CVE-2026-69619, CVE-2026-69685, CVE-2026-69643, CVE-2026-69687, CVE-2026-69791, CVE-2026-69707, CVE-2026-69652, CVE-2026-69834, CVE-2026-69709, CVE-2026-69844, CVE-2026-69814, CVE-2026-69731, CVE-2026-69706, CVE-2026-69779, CVE-2026-69895, CVE-2026-69792, CVE-2026-69853, CVE-2026-69761, CVE-2026-69785, CVE-2026-69818, CVE-2026-69786, CVE-2026-69874, CVE-2026-70565, CVE-2026-70574, CVE-2026-70569, CVE-2026-70575, CVE-2026-71349, CVE-2026-72927, CVE-2026-72952, CVE-2026-72966, CVE-2026-72967, CVE-2026-69426, CVE-2026-69564, CVE-2026-72985, CVE-2026-73019, CVE-2026-78451, CVE-2026-78452, CVE-2026-83940, CVE-2026-69598, CVE-2026-83995, CVE-2026-83501, CVE-2026-83498.

CVE-2026-72957

CVE-2026-72957 describes a heap-based buffer overflow vulnerability in Windows Deployment Services that allows an authorized local attacker to achieve remote code execution by exploiting memory corruption within the service.

Affected products:

Windows Deployment Services

Source: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-72957

Related in this roundup: CVE-2026-72943, CVE-2026-72954, CVE-2026-69607.

CVE-2026-72950

A remote code execution vulnerability exists in the Windows Routing and Remote Access Service (RRAS) that can be exploited by an unauthenticated attacker to gain unauthorized access to a victim's machine.

Affected products:

Routing and Remote Access Service

Source: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-72950

Related in this roundup: CVE-2026-69590, CVE-2026-71351, CVE-2026-72939, CVE-2026-72959, CVE-2026-70570.

CVE-2026-72959

CVE-2026-72959 is a critical remote code execution vulnerability located within the Windows Routing and Remote Access Service (RRAS). An unauthenticated attacker can exploit this flaw to execute arbitrary code on the host system, potentially leading to a full system compromise.

Affected products:

Routing and Remote Access Service

Source: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-72959

Related in this roundup: CVE-2026-69590, CVE-2026-71351, CVE-2026-72939, CVE-2026-72950, CVE-2026-70570.

CVE-2026-72954

A use-after-free vulnerability in Windows Deployment Services allows a remote, authenticated attacker to achieve remote code execution over the network. The flaw exists in the handling of memory within the service, which can be exploited to execute arbitrary code with elevated privileges.

Affected products:

Windows Deployment Services

Source: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-72954

Related in this roundup: CVE-2026-72943, CVE-2026-72957, CVE-2026-69607.

CVE-2026-72960

CVE-2026-72960 is a heap-based buffer overflow vulnerability in Windows Media Player that allows a remote, unauthorized attacker to execute arbitrary code on a target system over the network.

Affected products:

Windows Media Player

Source: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-72960

Related in this roundup: CVE-2026-70203.

CVE-2026-72961

A vulnerability in Windows Hyper-V allows a locally authorized attacker to exploit an out-of-bounds read condition, resulting in privilege escalation on the affected system.

Affected products:

Hyper-V

Source: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-72961

Related in this roundup: CVE-2026-69910, CVE-2026-69553, CVE-2026-69603, CVE-2026-80083.

CVE-2026-72964

CVE-2026-72964 is a vulnerability in Windows Internet Connection Sharing (ICS) caused by missing authentication for critical functions. An attacker with local access can exploit this flaw to perform unauthorized tampering with the service's configuration or operation.

Affected products:

Internet Connection Sharing

Source: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-72964

Related in this roundup: CVE-2026-72983, CVE-2026-72926.

CVE-2026-72966

A vulnerability in the Windows Remote Access Connection Manager component allows a locally authenticated attacker to perform unauthorized tampering due to missing authorization checks, potentially leading to privilege escalation.

Affected products:

Windows

Source: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-72966

Related in this roundup: CVE-2026-81963, CVE-2026-85880, CVE-2026-69496, CVE-2026-69586, CVE-2026-69768, CVE-2026-73025, CVE-2026-56172, CVE-2026-68832, CVE-2026-68834, CVE-2026-68838, CVE-2026-68841, CVE-2026-68875, CVE-2026-68877, CVE-2026-68880, CVE-2026-69265, CVE-2026-69270, CVE-2026-69274, CVE-2026-69275, CVE-2026-69280, CVE-2026-69283, CVE-2026-69284, CVE-2026-69289, CVE-2026-69296, CVE-2026-69300, CVE-2026-69301, CVE-2026-69307, CVE-2026-69312, CVE-2026-69314, CVE-2026-69332, CVE-2026-69333, CVE-2026-69335, CVE-2026-68833, CVE-2026-68851, CVE-2026-69366, CVE-2026-69337, CVE-2026-69347, CVE-2026-69379, CVE-2026-69390, CVE-2026-69401, CVE-2026-69413, CVE-2026-69420, CVE-2026-69429, CVE-2026-69448, CVE-2026-69455, CVE-2026-69532, CVE-2026-69472, CVE-2026-69479, CVE-2026-69531, CVE-2026-69517, CVE-2026-69505, CVE-2026-69504, CVE-2026-69527, CVE-2026-69549, CVE-2026-69588, CVE-2026-69609, CVE-2026-69648, CVE-2026-69689, CVE-2026-69790, CVE-2026-69638, CVE-2026-69859, CVE-2026-69717, CVE-2026-69711, CVE-2026-69875, CVE-2026-69889, CVE-2026-69757, CVE-2026-69741, CVE-2026-69762, CVE-2026-69744, CVE-2026-69832, CVE-2026-69691, CVE-2026-69808, CVE-2026-69775, CVE-2026-69822, CVE-2026-69770, CVE-2026-69676, CVE-2026-70289, CVE-2026-70563, CVE-2026-71329, CVE-2026-71332, CVE-2026-71350, CVE-2026-71348, CVE-2026-71345, CVE-2026-69469, CVE-2026-69501, CVE-2026-69548, CVE-2026-69846, CVE-2026-70283, CVE-2026-72981, CVE-2026-77491, CVE-2026-77492, CVE-2026-77503, CVE-2026-80093, CVE-2026-72949, CVE-2026-70019, CVE-2026-72940, CVE-2026-69573, CVE-2026-70290, CVE-2026-83991, CVE-2026-83999, CVE-2026-69321, CVE-2026-69316, CVE-2026-69340, CVE-2026-69348, CVE-2026-69350, CVE-2026-69353, CVE-2026-69357, CVE-2026-69393, CVE-2026-69410, CVE-2026-69421, CVE-2026-69428, CVE-2026-69425, CVE-2026-69427, CVE-2026-69434, CVE-2026-69456, CVE-2026-69459, CVE-2026-69478, CVE-2026-69561, CVE-2026-69512, CVE-2026-69498, CVE-2026-69571, CVE-2026-69535, CVE-2026-69538, CVE-2026-69591, CVE-2026-69566, CVE-2026-69567, CVE-2026-69584, CVE-2026-69617, CVE-2026-69630, CVE-2026-69610, CVE-2026-69881, CVE-2026-69680, CVE-2026-69619, CVE-2026-69685, CVE-2026-69643, CVE-2026-69687, CVE-2026-69791, CVE-2026-69707, CVE-2026-69652, CVE-2026-69834, CVE-2026-69709, CVE-2026-69844, CVE-2026-69814, CVE-2026-69731, CVE-2026-69706, CVE-2026-69779, CVE-2026-69895, CVE-2026-69792, CVE-2026-69853, CVE-2026-69761, CVE-2026-69785, CVE-2026-69818, CVE-2026-69786, CVE-2026-69874, CVE-2026-70565, CVE-2026-70574, CVE-2026-70569, CVE-2026-70575, CVE-2026-71349, CVE-2026-72927, CVE-2026-72952, CVE-2026-72942, CVE-2026-72967, CVE-2026-69426, CVE-2026-69564, CVE-2026-72985, CVE-2026-73019, CVE-2026-78451, CVE-2026-78452, CVE-2026-83940, CVE-2026-69598, CVE-2026-83995, CVE-2026-83501, CVE-2026-83498.

CVE-2026-72967

CVE-2026-72967 describes a heap-based buffer overflow vulnerability in the Windows Network Connection Broker service. An authorized local attacker can exploit this flaw to execute code with elevated privileges on the target Windows system.

Affected products:

Windows

Source: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-72967

Related in this roundup: CVE-2026-81963, CVE-2026-85880, CVE-2026-69496, CVE-2026-69586, CVE-2026-69768, CVE-2026-73025, CVE-2026-56172, CVE-2026-68832, CVE-2026-68834, CVE-2026-68838, CVE-2026-68841, CVE-2026-68875, CVE-2026-68877, CVE-2026-68880, CVE-2026-69265, CVE-2026-69270, CVE-2026-69274, CVE-2026-69275, CVE-2026-69280, CVE-2026-69283, CVE-2026-69284, CVE-2026-69289, CVE-2026-69296, CVE-2026-69300, CVE-2026-69301, CVE-2026-69307, CVE-2026-69312, CVE-2026-69314, CVE-2026-69332, CVE-2026-69333, CVE-2026-69335, CVE-2026-68833, CVE-2026-68851, CVE-2026-69366, CVE-2026-69337, CVE-2026-69347, CVE-2026-69379, CVE-2026-69390, CVE-2026-69401, CVE-2026-69413, CVE-2026-69420, CVE-2026-69429, CVE-2026-69448, CVE-2026-69455, CVE-2026-69532, CVE-2026-69472, CVE-2026-69479, CVE-2026-69531, CVE-2026-69517, CVE-2026-69505, CVE-2026-69504, CVE-2026-69527, CVE-2026-69549, CVE-2026-69588, CVE-2026-69609, CVE-2026-69648, CVE-2026-69689, CVE-2026-69790, CVE-2026-69638, CVE-2026-69859, CVE-2026-69717, CVE-2026-69711, CVE-2026-69875, CVE-2026-69889, CVE-2026-69757, CVE-2026-69741, CVE-2026-69762, CVE-2026-69744, CVE-2026-69832, CVE-2026-69691, CVE-2026-69808, CVE-2026-69775, CVE-2026-69822, CVE-2026-69770, CVE-2026-69676, CVE-2026-70289, CVE-2026-70563, CVE-2026-71329, CVE-2026-71332, CVE-2026-71350, CVE-2026-71348, CVE-2026-71345, CVE-2026-69469, CVE-2026-69501, CVE-2026-69548, CVE-2026-69846, CVE-2026-70283, CVE-2026-72981, CVE-2026-77491, CVE-2026-77492, CVE-2026-77503, CVE-2026-80093, CVE-2026-72949, CVE-2026-70019, CVE-2026-72940, CVE-2026-69573, CVE-2026-70290, CVE-2026-83991, CVE-2026-83999, CVE-2026-69321, CVE-2026-69316, CVE-2026-69340, CVE-2026-69348, CVE-2026-69350, CVE-2026-69353, CVE-2026-69357, CVE-2026-69393, CVE-2026-69410, CVE-2026-69421, CVE-2026-69428, CVE-2026-69425, CVE-2026-69427, CVE-2026-69434, CVE-2026-69456, CVE-2026-69459, CVE-2026-69478, CVE-2026-69561, CVE-2026-69512, CVE-2026-69498, CVE-2026-69571, CVE-2026-69535, CVE-2026-69538, CVE-2026-69591, CVE-2026-69566, CVE-2026-69567, CVE-2026-69584, CVE-2026-69617, CVE-2026-69630, CVE-2026-69610, CVE-2026-69881, CVE-2026-69680, CVE-2026-69619, CVE-2026-69685, CVE-2026-69643, CVE-2026-69687, CVE-2026-69791, CVE-2026-69707, CVE-2026-69652, CVE-2026-69834, CVE-2026-69709, CVE-2026-69844, CVE-2026-69814, CVE-2026-69731, CVE-2026-69706, CVE-2026-69779, CVE-2026-69895, CVE-2026-69792, CVE-2026-69853, CVE-2026-69761, CVE-2026-69785, CVE-2026-69818, CVE-2026-69786, CVE-2026-69874, CVE-2026-70565, CVE-2026-70574, CVE-2026-70569, CVE-2026-70575, CVE-2026-71349, CVE-2026-72927, CVE-2026-72952, CVE-2026-72942, CVE-2026-72966, CVE-2026-69426, CVE-2026-69564, CVE-2026-72985, CVE-2026-73019, CVE-2026-78451, CVE-2026-78452, CVE-2026-83940, CVE-2026-69598, CVE-2026-83995, CVE-2026-83501, CVE-2026-83498.

CVE-2026-69352

CVE-2026-69352 is a heap-based buffer overflow vulnerability in the Windows Biometric Service that enables a locally authenticated attacker to escalate their privileges to a higher level of authority within the operating system.

Affected products:

Windows Biometric Service

Source: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-69352

Related in this roundup: CVE-2026-69293, CVE-2026-69298, CVE-2026-69323, CVE-2026-69583, CVE-2026-69589, CVE-2026-69580, CVE-2026-69476, CVE-2026-69787, CVE-2026-77489, CVE-2026-83955, CVE-2026-83986, CVE-2026-83969, CVE-2026-83988, CVE-2026-83979, CVE-2026-83974, CVE-2026-83975, CVE-2026-83976, CVE-2026-69727, CVE-2026-69826, CVE-2026-69738, CVE-2026-69773, CVE-2026-70573, CVE-2026-70572, CVE-2026-70581, CVE-2026-72941, CVE-2026-69489, CVE-2026-69593, CVE-2026-72995, CVE-2026-72988, CVE-2026-72990, CVE-2026-72991, CVE-2026-72992, CVE-2026-72993, CVE-2026-72994, CVE-2026-72996, CVE-2026-72997, CVE-2026-73002, CVE-2026-73020, CVE-2026-73000, CVE-2026-73001, CVE-2026-73021, CVE-2026-73015, CVE-2026-73011, CVE-2026-73008, CVE-2026-73007, CVE-2026-73026, CVE-2026-78447, CVE-2026-78448, CVE-2026-83971, CVE-2026-83954, CVE-2026-83967, CVE-2026-83970, CVE-2026-83972, CVE-2026-83968, CVE-2026-83973, CVE-2026-83981, CVE-2026-83977, CVE-2026-83978, CVE-2026-83982, CVE-2026-83980, CVE-2026-83987, CVE-2026-83983, CVE-2026-83985.

CVE-2026-69392

CVE-2026-69392 is a local privilege escalation vulnerability in the Windows Shell caused by a use-after-free flaw. An authorized attacker can exploit this condition to execute arbitrary code with elevated privileges on the affected system.

Affected products:

Windows Shell

Source: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-69392

Related in this roundup: CVE-2026-69829, CVE-2026-69528, CVE-2026-69383, CVE-2026-69606.

CVE-2026-69395

CVE-2026-69395 is an information disclosure vulnerability in Active Directory Certificate Services (AD CS) caused by an externally-controlled format string. An authorized attacker can leverage this flaw to disclose sensitive information over the network.

Affected products:

Active Directory Certificate Services

Source: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-69395

Related in this roundup: CVE-2026-62810, CVE-2026-69624, CVE-2026-69821.

CVE-2026-69397

A use-after-free vulnerability in the Microsoft implementation of OpenSSH for Windows allows an unauthenticated remote attacker to achieve code execution via crafted network requests.

Affected products:

OpenSSH for Windows

Source: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-69397

CVE-2026-69402

CVE-2026-69402 is a spoofing vulnerability in Microsoft SharePoint caused by improper neutralization of input during web page generation. An authorized attacker can exploit this cross-site scripting vulnerability over a network to execute unauthorized actions or display deceptive content.

Affected products:

SharePoint

Source: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-69402

Related in this roundup: CVE-2026-69268, CVE-2026-69273, CVE-2026-69282, CVE-2026-69716, CVE-2026-69724, CVE-2026-69690, CVE-2026-69683, CVE-2026-69804, CVE-2026-69409, CVE-2026-69417, CVE-2026-69464, CVE-2026-69636, CVE-2026-69904.

CVE-2026-69409

CVE-2026-69409 is an information disclosure vulnerability in Microsoft SharePoint where an authorized attacker can exploit unnecessary privileges during execution to gain access to sensitive information over a network.

Affected products:

SharePoint

Source: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-69409

Related in this roundup: CVE-2026-69268, CVE-2026-69273, CVE-2026-69282, CVE-2026-69716, CVE-2026-69724, CVE-2026-69690, CVE-2026-69683, CVE-2026-69804, CVE-2026-69402, CVE-2026-69417, CVE-2026-69464, CVE-2026-69636, CVE-2026-69904.

CVE-2026-69417

CVE-2026-69417 describes a cross-site scripting (XSS) vulnerability in Microsoft SharePoint that enables an authorized attacker to perform spoofing attacks over a network by failing to properly neutralize user-supplied input during web page generation.

Affected products:

SharePoint

Source: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-69417

Related in this roundup: CVE-2026-69268, CVE-2026-69273, CVE-2026-69282, CVE-2026-69716, CVE-2026-69724, CVE-2026-69690, CVE-2026-69683, CVE-2026-69804, CVE-2026-69402, CVE-2026-69409, CVE-2026-69464, CVE-2026-69636, CVE-2026-69904.

CVE-2026-69426

A heap-based buffer overflow vulnerability exists in the VOLSNAP.SYS driver within Windows. An authenticated attacker can exploit this vulnerability to achieve remote code execution by sending specially crafted inputs to the driver, potentially leading to local privilege escalation or system compromise.

Affected products:

Windows

Source: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-69426

Related in this roundup: CVE-2026-81963, CVE-2026-85880, CVE-2026-69496, CVE-2026-69586, CVE-2026-69768, CVE-2026-73025, CVE-2026-56172, CVE-2026-68832, CVE-2026-68834, CVE-2026-68838, CVE-2026-68841, CVE-2026-68875, CVE-2026-68877, CVE-2026-68880, CVE-2026-69265, CVE-2026-69270, CVE-2026-69274, CVE-2026-69275, CVE-2026-69280, CVE-2026-69283, CVE-2026-69284, CVE-2026-69289, CVE-2026-69296, CVE-2026-69300, CVE-2026-69301, CVE-2026-69307, CVE-2026-69312, CVE-2026-69314, CVE-2026-69332, CVE-2026-69333, CVE-2026-69335, CVE-2026-68833, CVE-2026-68851, CVE-2026-69366, CVE-2026-69337, CVE-2026-69347, CVE-2026-69379, CVE-2026-69390, CVE-2026-69401, CVE-2026-69413, CVE-2026-69420, CVE-2026-69429, CVE-2026-69448, CVE-2026-69455, CVE-2026-69532, CVE-2026-69472, CVE-2026-69479, CVE-2026-69531, CVE-2026-69517, CVE-2026-69505, CVE-2026-69504, CVE-2026-69527, CVE-2026-69549, CVE-2026-69588, CVE-2026-69609, CVE-2026-69648, CVE-2026-69689, CVE-2026-69790, CVE-2026-69638, CVE-2026-69859, CVE-2026-69717, CVE-2026-69711, CVE-2026-69875, CVE-2026-69889, CVE-2026-69757, CVE-2026-69741, CVE-2026-69762, CVE-2026-69744, CVE-2026-69832, CVE-2026-69691, CVE-2026-69808, CVE-2026-69775, CVE-2026-69822, CVE-2026-69770, CVE-2026-69676, CVE-2026-70289, CVE-2026-70563, CVE-2026-71329, CVE-2026-71332, CVE-2026-71350, CVE-2026-71348, CVE-2026-71345, CVE-2026-69469, CVE-2026-69501, CVE-2026-69548, CVE-2026-69846, CVE-2026-70283, CVE-2026-72981, CVE-2026-77491, CVE-2026-77492, CVE-2026-77503, CVE-2026-80093, CVE-2026-72949, CVE-2026-70019, CVE-2026-72940, CVE-2026-69573, CVE-2026-70290, CVE-2026-83991, CVE-2026-83999, CVE-2026-69321, CVE-2026-69316, CVE-2026-69340, CVE-2026-69348, CVE-2026-69350, CVE-2026-69353, CVE-2026-69357, CVE-2026-69393, CVE-2026-69410, CVE-2026-69421, CVE-2026-69428, CVE-2026-69425, CVE-2026-69427, CVE-2026-69434, CVE-2026-69456, CVE-2026-69459, CVE-2026-69478, CVE-2026-69561, CVE-2026-69512, CVE-2026-69498, CVE-2026-69571, CVE-2026-69535, CVE-2026-69538, CVE-2026-69591, CVE-2026-69566, CVE-2026-69567, CVE-2026-69584, CVE-2026-69617, CVE-2026-69630, CVE-2026-69610, CVE-2026-69881, CVE-2026-69680, CVE-2026-69619, CVE-2026-69685, CVE-2026-69643, CVE-2026-69687, CVE-2026-69791, CVE-2026-69707, CVE-2026-69652, CVE-2026-69834, CVE-2026-69709, CVE-2026-69844, CVE-2026-69814, CVE-2026-69731, CVE-2026-69706, CVE-2026-69779, CVE-2026-69895, CVE-2026-69792, CVE-2026-69853, CVE-2026-69761, CVE-2026-69785, CVE-2026-69818, CVE-2026-69786, CVE-2026-69874, CVE-2026-70565, CVE-2026-70574, CVE-2026-70569, CVE-2026-70575, CVE-2026-71349, CVE-2026-72927, CVE-2026-72952, CVE-2026-72942, CVE-2026-72966, CVE-2026-72967, CVE-2026-69564, CVE-2026-72985, CVE-2026-73019, CVE-2026-78451, CVE-2026-78452, CVE-2026-83940, CVE-2026-69598, CVE-2026-83995, CVE-2026-83501, CVE-2026-83498.

CVE-2026-69489

A heap-based buffer overflow vulnerability exists in the Windows Biometric Service, allowing a locally authenticated attacker to escalate their privileges to those of the service. This vulnerability is classified as a privilege escalation issue within the Windows operating system environment.

Affected products:

Windows Biometric Service

Source: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-69489

Related in this roundup: CVE-2026-69293, CVE-2026-69298, CVE-2026-69323, CVE-2026-69583, CVE-2026-69589, CVE-2026-69580, CVE-2026-69476, CVE-2026-69787, CVE-2026-77489, CVE-2026-83955, CVE-2026-83986, CVE-2026-83969, CVE-2026-83988, CVE-2026-83979, CVE-2026-83974, CVE-2026-83975, CVE-2026-83976, CVE-2026-69727, CVE-2026-69826, CVE-2026-69738, CVE-2026-69773, CVE-2026-70573, CVE-2026-70572, CVE-2026-70581, CVE-2026-72941, CVE-2026-69352, CVE-2026-69593, CVE-2026-72995, CVE-2026-72988, CVE-2026-72990, CVE-2026-72991, CVE-2026-72992, CVE-2026-72993, CVE-2026-72994, CVE-2026-72996, CVE-2026-72997, CVE-2026-73002, CVE-2026-73020, CVE-2026-73000, CVE-2026-73001, CVE-2026-73021, CVE-2026-73015, CVE-2026-73011, CVE-2026-73008, CVE-2026-73007, CVE-2026-73026, CVE-2026-78447, CVE-2026-78448, CVE-2026-83971, CVE-2026-83954, CVE-2026-83967, CVE-2026-83970, CVE-2026-83972, CVE-2026-83968, CVE-2026-83973, CVE-2026-83981, CVE-2026-83977, CVE-2026-83978, CVE-2026-83982, CVE-2026-83980, CVE-2026-83987, CVE-2026-83983, CVE-2026-83985.

CVE-2026-69490

An out-of-bounds read vulnerability exists in the Windows USB Mass Storage Class Driver, which allows an attacker with physical access to a target machine to escalate their privileges.

Affected products:

Windows USB Mass Storage Class Driver

Source: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-69490

Related in this roundup: CVE-2026-68839.

CVE-2026-69499

An integer overflow or wraparound vulnerability exists in the Windows Imaging Component, which can be exploited by an unauthorized remote attacker to achieve remote code execution on affected Windows systems.

Affected products:

Windows Imaging Component

Source: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-69499

Related in this roundup: CVE-2026-70296, CVE-2026-69860, CVE-2026-77495, CVE-2026-69318, CVE-2026-73023, CVE-2026-73013, CVE-2026-83992.

CVE-2026-69510

A stack-based buffer overflow vulnerability in the Windows DHCP Server component allows an unauthenticated, remote attacker to achieve remote code execution by sending specially crafted packets to the server over the network.

Affected products:

Windows DHCP Server

Source: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-69510

Related in this roundup: CVE-2026-69845, CVE-2026-72979, CVE-2026-69266, CVE-2026-69412, CVE-2026-69415, CVE-2026-69929, CVE-2026-69930, CVE-2026-70124, CVE-2026-77494, CVE-2026-77498, CVE-2026-77499, CVE-2026-77501, CVE-2026-77502, CVE-2026-77887, CVE-2026-77888, CVE-2026-77886, CVE-2026-77890, CVE-2026-77889, CVE-2026-77891, CVE-2026-77893, CVE-2026-77895, CVE-2026-70065, CVE-2026-69297, CVE-2026-69342, CVE-2026-69405, CVE-2026-69416, CVE-2026-69497, CVE-2026-69547, CVE-2026-69620, CVE-2026-69637, CVE-2026-69803, CVE-2026-69679, CVE-2026-69878, CVE-2026-69847, CVE-2026-69876.

CVE-2026-69560

A use-after-free vulnerability in the Windows Work Folder Service allows an authenticated attacker to perform local privilege escalation on the affected system.

Affected products:

Windows Work Folder Service

Source: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-69560

Related in this roundup: CVE-2026-71336.

CVE-2026-69564

CVE-2026-69564 describes a heap-based buffer overflow vulnerability in the Windows Online Certificate Status Protocol (OCSP) component. An attacker who has already achieved local access can exploit this vulnerability to perform privilege escalation on the affected system.

Affected products:

Windows

Source: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-69564

Related in this roundup: CVE-2026-81963, CVE-2026-85880, CVE-2026-69496, CVE-2026-69586, CVE-2026-69768, CVE-2026-73025, CVE-2026-56172, CVE-2026-68832, CVE-2026-68834, CVE-2026-68838, CVE-2026-68841, CVE-2026-68875, CVE-2026-68877, CVE-2026-68880, CVE-2026-69265, CVE-2026-69270, CVE-2026-69274, CVE-2026-69275, CVE-2026-69280, CVE-2026-69283, CVE-2026-69284, CVE-2026-69289, CVE-2026-69296, CVE-2026-69300, CVE-2026-69301, CVE-2026-69307, CVE-2026-69312, CVE-2026-69314, CVE-2026-69332, CVE-2026-69333, CVE-2026-69335, CVE-2026-68833, CVE-2026-68851, CVE-2026-69366, CVE-2026-69337, CVE-2026-69347, CVE-2026-69379, CVE-2026-69390, CVE-2026-69401, CVE-2026-69413, CVE-2026-69420, CVE-2026-69429, CVE-2026-69448, CVE-2026-69455, CVE-2026-69532, CVE-2026-69472, CVE-2026-69479, CVE-2026-69531, CVE-2026-69517, CVE-2026-69505, CVE-2026-69504, CVE-2026-69527, CVE-2026-69549, CVE-2026-69588, CVE-2026-69609, CVE-2026-69648, CVE-2026-69689, CVE-2026-69790, CVE-2026-69638, CVE-2026-69859, CVE-2026-69717, CVE-2026-69711, CVE-2026-69875, CVE-2026-69889, CVE-2026-69757, CVE-2026-69741, CVE-2026-69762, CVE-2026-69744, CVE-2026-69832, CVE-2026-69691, CVE-2026-69808, CVE-2026-69775, CVE-2026-69822, CVE-2026-69770, CVE-2026-69676, CVE-2026-70289, CVE-2026-70563, CVE-2026-71329, CVE-2026-71332, CVE-2026-71350, CVE-2026-71348, CVE-2026-71345, CVE-2026-69469, CVE-2026-69501, CVE-2026-69548, CVE-2026-69846, CVE-2026-70283, CVE-2026-72981, CVE-2026-77491, CVE-2026-77492, CVE-2026-77503, CVE-2026-80093, CVE-2026-72949, CVE-2026-70019, CVE-2026-72940, CVE-2026-69573, CVE-2026-70290, CVE-2026-83991, CVE-2026-83999, CVE-2026-69321, CVE-2026-69316, CVE-2026-69340, CVE-2026-69348, CVE-2026-69350, CVE-2026-69353, CVE-2026-69357, CVE-2026-69393, CVE-2026-69410, CVE-2026-69421, CVE-2026-69428, CVE-2026-69425, CVE-2026-69427, CVE-2026-69434, CVE-2026-69456, CVE-2026-69459, CVE-2026-69478, CVE-2026-69561, CVE-2026-69512, CVE-2026-69498, CVE-2026-69571, CVE-2026-69535, CVE-2026-69538, CVE-2026-69591, CVE-2026-69566, CVE-2026-69567, CVE-2026-69584, CVE-2026-69617, CVE-2026-69630, CVE-2026-69610, CVE-2026-69881, CVE-2026-69680, CVE-2026-69619, CVE-2026-69685, CVE-2026-69643, CVE-2026-69687, CVE-2026-69791, CVE-2026-69707, CVE-2026-69652, CVE-2026-69834, CVE-2026-69709, CVE-2026-69844, CVE-2026-69814, CVE-2026-69731, CVE-2026-69706, CVE-2026-69779, CVE-2026-69895, CVE-2026-69792, CVE-2026-69853, CVE-2026-69761, CVE-2026-69785, CVE-2026-69818, CVE-2026-69786, CVE-2026-69874, CVE-2026-70565, CVE-2026-70574, CVE-2026-70569, CVE-2026-70575, CVE-2026-71349, CVE-2026-72927, CVE-2026-72952, CVE-2026-72942, CVE-2026-72966, CVE-2026-72967, CVE-2026-69426, CVE-2026-72985, CVE-2026-73019, CVE-2026-78451, CVE-2026-78452, CVE-2026-83940, CVE-2026-69598, CVE-2026-83995, CVE-2026-83501, CVE-2026-83498.

CVE-2026-69593

CVE-2026-69593 is a local privilege escalation vulnerability in the Windows Biometric Service caused by a heap-based buffer overflow. An attacker with authorized local access can exploit this flaw to execute code with elevated privileges on the affected system.

Affected products:

Windows Biometric Service

Source: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-69593

Related in this roundup: CVE-2026-69293, CVE-2026-69298, CVE-2026-69323, CVE-2026-69583, CVE-2026-69589, CVE-2026-69580, CVE-2026-69476, CVE-2026-69787, CVE-2026-77489, CVE-2026-83955, CVE-2026-83986, CVE-2026-83969, CVE-2026-83988, CVE-2026-83979, CVE-2026-83974, CVE-2026-83975, CVE-2026-83976, CVE-2026-69727, CVE-2026-69826, CVE-2026-69738, CVE-2026-69773, CVE-2026-70573, CVE-2026-70572, CVE-2026-70581, CVE-2026-72941, CVE-2026-69352, CVE-2026-69489, CVE-2026-72995, CVE-2026-72988, CVE-2026-72990, CVE-2026-72991, CVE-2026-72992, CVE-2026-72993, CVE-2026-72994, CVE-2026-72996, CVE-2026-72997, CVE-2026-73002, CVE-2026-73020, CVE-2026-73000, CVE-2026-73001, CVE-2026-73021, CVE-2026-73015, CVE-2026-73011, CVE-2026-73008, CVE-2026-73007, CVE-2026-73026, CVE-2026-78447, CVE-2026-78448, CVE-2026-83971, CVE-2026-83954, CVE-2026-83967, CVE-2026-83970, CVE-2026-83972, CVE-2026-83968, CVE-2026-83973, CVE-2026-83981, CVE-2026-83977, CVE-2026-83978, CVE-2026-83982, CVE-2026-83980, CVE-2026-83987, CVE-2026-83983, CVE-2026-83985.

CVE-2026-69568

An out-of-bounds read vulnerability exists in the Windows Storage Spaces Controller that allows a locally authorized attacker to perform an information disclosure attack.

Affected products:

Windows Storage Spaces Controller

Source: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-69568

Related in this roundup: CVE-2026-68844, CVE-2026-69290, CVE-2026-69575.

CVE-2026-69575

A use-after-free vulnerability in the Windows Storage Spaces Controller allows a locally authenticated attacker to escalate privileges on the affected system.

Affected products:

Windows Storage Spaces Controller

Source: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-69575

Related in this roundup: CVE-2026-68844, CVE-2026-69290, CVE-2026-69568.

CVE-2026-69607

A use-after-free vulnerability in the Windows Deployment Services component enables an unauthenticated attacker to achieve remote code execution via network-based exploitation.

Affected products:

Windows Deployment Services

Source: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-69607

Related in this roundup: CVE-2026-72943, CVE-2026-72957, CVE-2026-72954.

CVE-2026-69601

A heap-based buffer overflow vulnerability exists in Microsoft Windows Media Foundation that allows a remote, unauthorized attacker to achieve remote code execution. The vulnerability is triggered over a network, potentially impacting any Windows system utilizing the vulnerable component.

Affected products:

Windows Media Foundation

Source: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-69601

Related in this roundup: CVE-2026-69408, CVE-2026-62744, CVE-2026-62706, CVE-2026-69386, CVE-2026-69511.

CVE-2026-69442

CVE-2026-69442 describes a heap-based buffer overflow vulnerability in Microsoft Office that enables an unauthorized remote attacker to achieve remote code execution. Detection engineers should prioritize monitoring for anomalous memory access patterns or abnormal process spawning associated with Office application execution.

Affected products:

Office

Source: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-69442

Related in this roundup: CVE-2026-69285, CVE-2026-69739, CVE-2026-77504, CVE-2026-77898, CVE-2026-78439, CVE-2026-78505, CVE-2026-64918, CVE-2026-69626, CVE-2026-69632, CVE-2026-72938, CVE-2026-72973, CVE-2026-78512, CVE-2026-80079, CVE-2026-78524, CVE-2026-80078, CVE-2026-80076, CVE-2026-80087, CVE-2026-80085, CVE-2026-80088, CVE-2026-80091, CVE-2026-80089, CVE-2026-80090, CVE-2026-80082.

CVE-2026-69615

CVE-2026-69615 describes a cross-site scripting (XSS) vulnerability in Microsoft Office SharePoint that allows an authenticated attacker to perform spoofing attacks over the network due to improper input neutralization during web page generation.

Affected products:

Office SharePoint

Source: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-69615

CVE-2026-69464

CVE-2026-69464 is a privilege escalation vulnerability in Microsoft SharePoint where execution with unnecessary privileges allows an authenticated attacker to elevate their access level over the network.

Affected products:

SharePoint

Source: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-69464

Related in this roundup: CVE-2026-69268, CVE-2026-69273, CVE-2026-69282, CVE-2026-69716, CVE-2026-69724, CVE-2026-69690, CVE-2026-69683, CVE-2026-69804, CVE-2026-69402, CVE-2026-69409, CVE-2026-69417, CVE-2026-69636, CVE-2026-69904.

CVE-2026-69614

A stack-based buffer overflow vulnerability exists in Microsoft Office Access, allowing an unauthorized remote attacker to execute arbitrary code. The vulnerability is triggered by sending specially crafted inputs to the target application over a network, potentially leading to remote code execution.

Affected products:

Office Access

Source: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-69614

Related in this roundup: CVE-2026-69529, CVE-2026-69778, CVE-2026-69477.

CVE-2026-69636

CVE-2026-69636 is an information disclosure vulnerability in Microsoft SharePoint caused by improper neutralization of special elements used in SQL commands. An authorized attacker can leverage this SQL injection flaw to access sensitive data over the network.

Affected products:

SharePoint

Source: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-69636

Related in this roundup: CVE-2026-69268, CVE-2026-69273, CVE-2026-69282, CVE-2026-69716, CVE-2026-69724, CVE-2026-69690, CVE-2026-69683, CVE-2026-69804, CVE-2026-69402, CVE-2026-69409, CVE-2026-69417, CVE-2026-69464, CVE-2026-69904.

CVE-2026-69629

CVE-2026-69629 is a heap-based buffer overflow vulnerability in Microsoft Office Outlook that enables an unauthorized remote attacker to achieve code execution over a network. Detection efforts should focus on anomalous process spawning from the Outlook executable and monitoring for memory corruption patterns consistent with heap exploitation.

Affected products:

Office Outlook

Source: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-69629

Related in this roundup: CVE-2026-78519, CVE-2026-80073, CVE-2026-78520, CVE-2026-80084, CVE-2026-78525.

CVE-2026-69477

CVE-2026-69477 is a heap-based buffer overflow vulnerability in Microsoft Office Access that can be exploited by an authorized attacker to achieve local remote code execution.

Affected products:

Office Access

Source: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-69477

Related in this roundup: CVE-2026-69529, CVE-2026-69778, CVE-2026-69614.

CVE-2026-69626

CVE-2026-69626 is an information disclosure vulnerability in Microsoft Office caused by a buffer over-read, which could allow an unauthorized attacker to access sensitive information over a network.

Affected products:

Office

Source: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-69626

Related in this roundup: CVE-2026-69285, CVE-2026-69739, CVE-2026-77504, CVE-2026-77898, CVE-2026-78439, CVE-2026-78505, CVE-2026-64918, CVE-2026-69442, CVE-2026-69632, CVE-2026-72938, CVE-2026-72973, CVE-2026-78512, CVE-2026-80079, CVE-2026-78524, CVE-2026-80078, CVE-2026-80076, CVE-2026-80087, CVE-2026-80085, CVE-2026-80088, CVE-2026-80091, CVE-2026-80089, CVE-2026-80090, CVE-2026-80082.

CVE-2026-69632

CVE-2026-69632 describes a use-after-free vulnerability in Microsoft Office that enables an unauthorized remote attacker to achieve code execution over a network. Detection efforts should focus on monitoring for anomalous process execution patterns originating from Office suite applications.

Affected products:

Office

Source: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-69632

Related in this roundup: CVE-2026-69285, CVE-2026-69739, CVE-2026-77504, CVE-2026-77898, CVE-2026-78439, CVE-2026-78505, CVE-2026-64918, CVE-2026-69442, CVE-2026-69626, CVE-2026-72938, CVE-2026-72973, CVE-2026-78512, CVE-2026-80079, CVE-2026-78524, CVE-2026-80078, CVE-2026-80076, CVE-2026-80087, CVE-2026-80085, CVE-2026-80088, CVE-2026-80091, CVE-2026-80089, CVE-2026-80090, CVE-2026-80082.

CVE-2026-69439

CVE-2026-69439 is a heap-based buffer overflow vulnerability in .NET and Visual Studio that allows a remote, unauthorized attacker to escalate their privileges within the affected environment.

Affected products:

.NET
Visual Studio

Source: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-69439

Related in this roundup: CVE-2026-69805, CVE-2026-58649, CVE-2026-69806.

CVE-2026-69805

CVE-2026-69805 is a privilege escalation vulnerability in .NET caused by improper external control of file names or paths. An attacker can exploit this flaw over a network to elevate their privileges on the host system.

Affected products:

.NET

Source: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-69805

Related in this roundup: CVE-2026-69439, CVE-2026-58649, CVE-2026-69806.

CVE-2026-58649

An origin validation error in .NET allows a remote, unauthorized attacker to perform an information disclosure attack over a network, potentially exposing sensitive data.

Affected products:

.NET

Source: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-58649

Related in this roundup: CVE-2026-69439, CVE-2026-69805, CVE-2026-69806.

CVE-2026-69441

CVE-2026-69441 is a local privilege escalation vulnerability in Windows Installer caused by a race condition during concurrent resource access. An attacker with existing local access can exploit this improper synchronization to execute code or operations with higher privileges than their current session allows.

Affected products:

Windows Installer

Source: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-69441

Related in this roundup: CVE-2026-62694, CVE-2026-71339, CVE-2026-72929, CVE-2026-77894.

CVE-2026-69904

CVE-2026-69904 is a server-side request forgery (SSRF) vulnerability in Microsoft Office SharePoint that allows an authorized attacker to gain unauthorized access to sensitive information over the network.

Affected products:

SharePoint

Source: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-69904

Related in this roundup: CVE-2026-69268, CVE-2026-69273, CVE-2026-69282, CVE-2026-69716, CVE-2026-69724, CVE-2026-69690, CVE-2026-69683, CVE-2026-69804, CVE-2026-69402, CVE-2026-69409, CVE-2026-69417, CVE-2026-69464, CVE-2026-69636.

CVE-2026-69906

CVE-2026-69906 is a heap-based buffer overflow vulnerability within the Windows Secure Kernel Mode component. An attacker with existing local access can exploit this flaw to execute code with elevated privileges, potentially compromising the integrity and security of the entire operating system kernel.

Affected products:

Windows Secure Kernel Mode

Source: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-69906

Related in this roundup: CVE-2026-83939.

CVE-2026-70203

CVE-2026-70203 describes a heap-based buffer overflow vulnerability in Windows Media Player that enables a remote, unauthorized attacker to achieve code execution over a network. Detection efforts should focus on anomalous network traffic directed toward media processing components and monitoring for unexpected subprocess spawning or memory corruption patterns originating from the application.

Affected products:

Windows Media Player

Source: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-70203

Related in this roundup: CVE-2026-72960.

CVE-2026-70570

CVE-2026-70570 is a remote code execution vulnerability in the Windows Routing and Remote Access Service (RRAS). An unauthenticated attacker can exploit this flaw to gain unauthorized access to an affected system by sending specially crafted packets to the RRAS service.

Affected products:

Routing and Remote Access Service

Source: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-70570

Related in this roundup: CVE-2026-69590, CVE-2026-71351, CVE-2026-72939, CVE-2026-72950, CVE-2026-72959.

CVE-2026-72956

CVE-2026-72956 is an information disclosure vulnerability in Microsoft Office PowerPoint resulting from an untrusted pointer dereference. An unauthenticated attacker can exploit this flaw to read sensitive data over a network, potentially bypassing security restrictions.

Affected products:

Office PowerPoint

Source: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-72956

Related in this roundup: CVE-2026-69678, CVE-2026-72977.

CVE-2026-72972

CVE-2026-72972 is a heap-based buffer overflow vulnerability in Microsoft Office Word that allows an unauthenticated, remote attacker to execute arbitrary code on a target system.

Affected products:

Office Word

Source: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-72972

Related in this roundup: CVE-2026-69556, CVE-2026-69671, CVE-2026-69686, CVE-2026-69722, CVE-2026-69734, CVE-2026-69719, CVE-2026-69759, CVE-2026-69764, CVE-2026-78511, CVE-2026-78502, CVE-2026-78504, CVE-2026-78517, CVE-2026-68843, CVE-2026-69360, CVE-2026-72976, CVE-2026-77901, CVE-2026-77911, CVE-2026-78507, CVE-2026-78506, CVE-2026-78514, CVE-2026-78503, CVE-2026-78521, CVE-2026-78522, CVE-2026-78526, CVE-2026-80080, CVE-2026-83951, CVE-2026-83949.

CVE-2026-72938

CVE-2026-72938 is an information disclosure vulnerability in Microsoft Office PowerPoint resulting from a type confusion error. This flaw allows a remote, unauthorized attacker to access sensitive information by exploiting the way the application processes resources.

Affected products:

Office
PowerPoint

Source: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-72938

Related in this roundup: CVE-2026-69285, CVE-2026-69739, CVE-2026-77504, CVE-2026-77898, CVE-2026-78439, CVE-2026-78505, CVE-2026-64918, CVE-2026-69442, CVE-2026-69626, CVE-2026-69632, CVE-2026-72973, CVE-2026-78512, CVE-2026-80079, CVE-2026-78524, CVE-2026-80078, CVE-2026-80076, CVE-2026-80087, CVE-2026-80085, CVE-2026-80088, CVE-2026-80091, CVE-2026-80089, CVE-2026-80090, CVE-2026-80082.

CVE-2026-72973

CVE-2026-72973 is a heap-based buffer overflow vulnerability in Microsoft Office Word that enables a remote, unauthorized attacker to achieve remote code execution via a specially crafted file or network-based vector.

Affected products:

Office

Source: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-72973

Related in this roundup: CVE-2026-69285, CVE-2026-69739, CVE-2026-77504, CVE-2026-77898, CVE-2026-78439, CVE-2026-78505, CVE-2026-64918, CVE-2026-69442, CVE-2026-69626, CVE-2026-69632, CVE-2026-72938, CVE-2026-78512, CVE-2026-80079, CVE-2026-78524, CVE-2026-80078, CVE-2026-80076, CVE-2026-80087, CVE-2026-80085, CVE-2026-80088, CVE-2026-80091, CVE-2026-80089, CVE-2026-80090, CVE-2026-80082.

CVE-2026-72974

CVE-2026-72974 is an information disclosure vulnerability in Microsoft Office Excel caused by a buffer over-read. An unauthenticated attacker can exploit this flaw to read sensitive data over a network, potentially bypassing confidentiality protections.

Affected products:

Office Excel

Source: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-72974

Related in this roundup: CVE-2026-78518.

CVE-2026-72977

CVE-2026-72977 is an out-of-bounds read vulnerability in Microsoft Office PowerPoint that allows an unauthenticated, remote attacker to disclose sensitive information from the application's memory over a network.

Affected products:

Office PowerPoint

Source: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-72977

Related in this roundup: CVE-2026-69678, CVE-2026-72956.

CVE-2026-72975

CVE-2026-72975 is an out-of-bounds read vulnerability in Microsoft PowerPoint that enables a remote attacker to disclose sensitive information from the application's memory space over the network. The vulnerability requires no authentication and is categorized as an information disclosure issue.

Affected products:

PowerPoint

Source: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-72975

Related in this roundup: CVE-2026-69767, CVE-2026-69797, CVE-2026-78513, CVE-2026-80086, CVE-2026-80081.

CVE-2026-72976

CVE-2026-72976 describes an out-of-bounds read vulnerability in Microsoft Office Word that enables an authorized attacker to perform local information disclosure. This vulnerability could be leveraged to gain unauthorized access to sensitive data processed by the application.

Affected products:

Office Word

Source: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-72976

Related in this roundup: CVE-2026-69556, CVE-2026-69671, CVE-2026-69686, CVE-2026-69722, CVE-2026-69734, CVE-2026-69719, CVE-2026-69759, CVE-2026-69764, CVE-2026-78511, CVE-2026-78502, CVE-2026-78504, CVE-2026-78517, CVE-2026-68843, CVE-2026-69360, CVE-2026-72972, CVE-2026-77901, CVE-2026-77911, CVE-2026-78507, CVE-2026-78506, CVE-2026-78514, CVE-2026-78503, CVE-2026-78521, CVE-2026-78522, CVE-2026-78526, CVE-2026-80080, CVE-2026-83951, CVE-2026-83949.

CVE-2026-72985

CVE-2026-72985 is a heap-based buffer overflow vulnerability in the Windows Volume Shadow Copy service. An attacker with physical access to a target system can exploit this flaw to escalate privileges, necessitating monitoring for unusual service interactions or access attempts targeting shadow copy operations.

Affected products:

Windows

Source: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-72985

Related in this roundup: CVE-2026-81963, CVE-2026-85880, CVE-2026-69496, CVE-2026-69586, CVE-2026-69768, CVE-2026-73025, CVE-2026-56172, CVE-2026-68832, CVE-2026-68834, CVE-2026-68838, CVE-2026-68841, CVE-2026-68875, CVE-2026-68877, CVE-2026-68880, CVE-2026-69265, CVE-2026-69270, CVE-2026-69274, CVE-2026-69275, CVE-2026-69280, CVE-2026-69283, CVE-2026-69284, CVE-2026-69289, CVE-2026-69296, CVE-2026-69300, CVE-2026-69301, CVE-2026-69307, CVE-2026-69312, CVE-2026-69314, CVE-2026-69332, CVE-2026-69333, CVE-2026-69335, CVE-2026-68833, CVE-2026-68851, CVE-2026-69366, CVE-2026-69337, CVE-2026-69347, CVE-2026-69379, CVE-2026-69390, CVE-2026-69401, CVE-2026-69413, CVE-2026-69420, CVE-2026-69429, CVE-2026-69448, CVE-2026-69455, CVE-2026-69532, CVE-2026-69472, CVE-2026-69479, CVE-2026-69531, CVE-2026-69517, CVE-2026-69505, CVE-2026-69504, CVE-2026-69527, CVE-2026-69549, CVE-2026-69588, CVE-2026-69609, CVE-2026-69648, CVE-2026-69689, CVE-2026-69790, CVE-2026-69638, CVE-2026-69859, CVE-2026-69717, CVE-2026-69711, CVE-2026-69875, CVE-2026-69889, CVE-2026-69757, CVE-2026-69741, CVE-2026-69762, CVE-2026-69744, CVE-2026-69832, CVE-2026-69691, CVE-2026-69808, CVE-2026-69775, CVE-2026-69822, CVE-2026-69770, CVE-2026-69676, CVE-2026-70289, CVE-2026-70563, CVE-2026-71329, CVE-2026-71332, CVE-2026-71350, CVE-2026-71348, CVE-2026-71345, CVE-2026-69469, CVE-2026-69501, CVE-2026-69548, CVE-2026-69846, CVE-2026-70283, CVE-2026-72981, CVE-2026-77491, CVE-2026-77492, CVE-2026-77503, CVE-2026-80093, CVE-2026-72949, CVE-2026-70019, CVE-2026-72940, CVE-2026-69573, CVE-2026-70290, CVE-2026-83991, CVE-2026-83999, CVE-2026-69321, CVE-2026-69316, CVE-2026-69340, CVE-2026-69348, CVE-2026-69350, CVE-2026-69353, CVE-2026-69357, CVE-2026-69393, CVE-2026-69410, CVE-2026-69421, CVE-2026-69428, CVE-2026-69425, CVE-2026-69427, CVE-2026-69434, CVE-2026-69456, CVE-2026-69459, CVE-2026-69478, CVE-2026-69561, CVE-2026-69512, CVE-2026-69498, CVE-2026-69571, CVE-2026-69535, CVE-2026-69538, CVE-2026-69591, CVE-2026-69566, CVE-2026-69567, CVE-2026-69584, CVE-2026-69617, CVE-2026-69630, CVE-2026-69610, CVE-2026-69881, CVE-2026-69680, CVE-2026-69619, CVE-2026-69685, CVE-2026-69643, CVE-2026-69687, CVE-2026-69791, CVE-2026-69707, CVE-2026-69652, CVE-2026-69834, CVE-2026-69709, CVE-2026-69844, CVE-2026-69814, CVE-2026-69731, CVE-2026-69706, CVE-2026-69779, CVE-2026-69895, CVE-2026-69792, CVE-2026-69853, CVE-2026-69761, CVE-2026-69785, CVE-2026-69818, CVE-2026-69786, CVE-2026-69874, CVE-2026-70565, CVE-2026-70574, CVE-2026-70569, CVE-2026-70575, CVE-2026-71349, CVE-2026-72927, CVE-2026-72952, CVE-2026-72942, CVE-2026-72966, CVE-2026-72967, CVE-2026-69426, CVE-2026-69564, CVE-2026-73019, CVE-2026-78451, CVE-2026-78452, CVE-2026-83940, CVE-2026-69598, CVE-2026-83995, CVE-2026-83501, CVE-2026-83498.

CVE-2026-65812

An information disclosure vulnerability exists in Microsoft Teams for Android where sensitive information is improperly inserted into data sent over the network, allowing an authorized attacker to intercept or access this data.

Affected products:

Teams for Android

Source: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-65812

CVE-2026-69304

CVE-2026-69304 describes a denial-of-service vulnerability in ASP.NET Core caused by improper handling of highly compressed data, which allows an unauthorized remote attacker to trigger data amplification and consume excessive server resources.

Affected products:

ASP.NET Core

Source: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-69304

Related in this roundup: CVE-2026-57099.

CVE-2026-72989

CVE-2026-72989 describes an information disclosure vulnerability within the Windows Failover Cluster component. The flaw stems from the use of an uninitialized resource, which could allow an unauthorized network-based attacker to access sensitive information without requiring authentication or specific user interaction.

Affected products:

Windows Failover Cluster

Source: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-72989

Related in this roundup: CVE-2026-73010, CVE-2026-71338, CVE-2026-78444.

CVE-2026-72987

A use-after-free vulnerability in the Windows DNS service allows an unauthorized remote attacker to achieve remote code execution over a network. The vulnerability exists within the DNS server component, necessitating monitoring for anomalous DNS traffic and applying the relevant security patches from Microsoft.

Affected products:

Windows DNS

Source: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-72987

Related in this roundup: CVE-2026-69730, CVE-2026-69310, CVE-2026-70091, CVE-2026-69631, CVE-2026-72948, CVE-2026-69369, CVE-2026-69672.

CVE-2026-72995

A heap-based buffer overflow vulnerability in the Windows Biometric Service enables a locally authenticated attacker to escalate their privileges. Successful exploitation requires the attacker to have authorized access to the system prior to triggering the vulnerability.

Affected products:

Windows Biometric Service

Source: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-72995

Related in this roundup: CVE-2026-69293, CVE-2026-69298, CVE-2026-69323, CVE-2026-69583, CVE-2026-69589, CVE-2026-69580, CVE-2026-69476, CVE-2026-69787, CVE-2026-77489, CVE-2026-83955, CVE-2026-83986, CVE-2026-83969, CVE-2026-83988, CVE-2026-83979, CVE-2026-83974, CVE-2026-83975, CVE-2026-83976, CVE-2026-69727, CVE-2026-69826, CVE-2026-69738, CVE-2026-69773, CVE-2026-70573, CVE-2026-70572, CVE-2026-70581, CVE-2026-72941, CVE-2026-69352, CVE-2026-69489, CVE-2026-69593, CVE-2026-72988, CVE-2026-72990, CVE-2026-72991, CVE-2026-72992, CVE-2026-72993, CVE-2026-72994, CVE-2026-72996, CVE-2026-72997, CVE-2026-73002, CVE-2026-73020, CVE-2026-73000, CVE-2026-73001, CVE-2026-73021, CVE-2026-73015, CVE-2026-73011, CVE-2026-73008, CVE-2026-73007, CVE-2026-73026, CVE-2026-78447, CVE-2026-78448, CVE-2026-83971, CVE-2026-83954, CVE-2026-83967, CVE-2026-83970, CVE-2026-83972, CVE-2026-83968, CVE-2026-83973, CVE-2026-83981, CVE-2026-83977, CVE-2026-83978, CVE-2026-83982, CVE-2026-83980, CVE-2026-83987, CVE-2026-83983, CVE-2026-83985.

CVE-2026-72988

A heap-based buffer overflow vulnerability in the Windows Biometric Service allows an authenticated local attacker to execute arbitrary code with elevated privileges on affected Windows systems.

Affected products:

Windows Biometric Service

Source: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-72988

Related in this roundup: CVE-2026-69293, CVE-2026-69298, CVE-2026-69323, CVE-2026-69583, CVE-2026-69589, CVE-2026-69580, CVE-2026-69476, CVE-2026-69787, CVE-2026-77489, CVE-2026-83955, CVE-2026-83986, CVE-2026-83969, CVE-2026-83988, CVE-2026-83979, CVE-2026-83974, CVE-2026-83975, CVE-2026-83976, CVE-2026-69727, CVE-2026-69826, CVE-2026-69738, CVE-2026-69773, CVE-2026-70573, CVE-2026-70572, CVE-2026-70581, CVE-2026-72941, CVE-2026-69352, CVE-2026-69489, CVE-2026-69593, CVE-2026-72995, CVE-2026-72990, CVE-2026-72991, CVE-2026-72992, CVE-2026-72993, CVE-2026-72994, CVE-2026-72996, CVE-2026-72997, CVE-2026-73002, CVE-2026-73020, CVE-2026-73000, CVE-2026-73001, CVE-2026-73021, CVE-2026-73015, CVE-2026-73011, CVE-2026-73008, CVE-2026-73007, CVE-2026-73026, CVE-2026-78447, CVE-2026-78448, CVE-2026-83971, CVE-2026-83954, CVE-2026-83967, CVE-2026-83970, CVE-2026-83972, CVE-2026-83968, CVE-2026-83973, CVE-2026-83981, CVE-2026-83977, CVE-2026-83978, CVE-2026-83982, CVE-2026-83980, CVE-2026-83987, CVE-2026-83983, CVE-2026-83985.

CVE-2026-72990

CVE-2026-72990 is a heap-based buffer overflow vulnerability in the Windows Biometric Service that allows an authorized local attacker to escalate their privileges to a higher integrity level.

Affected products:

Windows Biometric Service

Source: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-72990

Related in this roundup: CVE-2026-69293, CVE-2026-69298, CVE-2026-69323, CVE-2026-69583, CVE-2026-69589, CVE-2026-69580, CVE-2026-69476, CVE-2026-69787, CVE-2026-77489, CVE-2026-83955, CVE-2026-83986, CVE-2026-83969, CVE-2026-83988, CVE-2026-83979, CVE-2026-83974, CVE-2026-83975, CVE-2026-83976, CVE-2026-69727, CVE-2026-69826, CVE-2026-69738, CVE-2026-69773, CVE-2026-70573, CVE-2026-70572, CVE-2026-70581, CVE-2026-72941, CVE-2026-69352, CVE-2026-69489, CVE-2026-69593, CVE-2026-72995, CVE-2026-72988, CVE-2026-72991, CVE-2026-72992, CVE-2026-72993, CVE-2026-72994, CVE-2026-72996, CVE-2026-72997, CVE-2026-73002, CVE-2026-73020, CVE-2026-73000, CVE-2026-73001, CVE-2026-73021, CVE-2026-73015, CVE-2026-73011, CVE-2026-73008, CVE-2026-73007, CVE-2026-73026, CVE-2026-78447, CVE-2026-78448, CVE-2026-83971, CVE-2026-83954, CVE-2026-83967, CVE-2026-83970, CVE-2026-83972, CVE-2026-83968, CVE-2026-83973, CVE-2026-83981, CVE-2026-83977, CVE-2026-83978, CVE-2026-83982, CVE-2026-83980, CVE-2026-83987, CVE-2026-83983, CVE-2026-83985.

CVE-2026-72991

A heap-based buffer overflow vulnerability in the Windows Biometric Service enables an attacker who already possesses authorized access to execute code or operations at a higher privilege level on the local machine.

Affected products:

Windows Biometric Service

Source: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-72991

Related in this roundup: CVE-2026-69293, CVE-2026-69298, CVE-2026-69323, CVE-2026-69583, CVE-2026-69589, CVE-2026-69580, CVE-2026-69476, CVE-2026-69787, CVE-2026-77489, CVE-2026-83955, CVE-2026-83986, CVE-2026-83969, CVE-2026-83988, CVE-2026-83979, CVE-2026-83974, CVE-2026-83975, CVE-2026-83976, CVE-2026-69727, CVE-2026-69826, CVE-2026-69738, CVE-2026-69773, CVE-2026-70573, CVE-2026-70572, CVE-2026-70581, CVE-2026-72941, CVE-2026-69352, CVE-2026-69489, CVE-2026-69593, CVE-2026-72995, CVE-2026-72988, CVE-2026-72990, CVE-2026-72992, CVE-2026-72993, CVE-2026-72994, CVE-2026-72996, CVE-2026-72997, CVE-2026-73002, CVE-2026-73020, CVE-2026-73000, CVE-2026-73001, CVE-2026-73021, CVE-2026-73015, CVE-2026-73011, CVE-2026-73008, CVE-2026-73007, CVE-2026-73026, CVE-2026-78447, CVE-2026-78448, CVE-2026-83971, CVE-2026-83954, CVE-2026-83967, CVE-2026-83970, CVE-2026-83972, CVE-2026-83968, CVE-2026-83973, CVE-2026-83981, CVE-2026-83977, CVE-2026-83978, CVE-2026-83982, CVE-2026-83980, CVE-2026-83987, CVE-2026-83983, CVE-2026-83985.

CVE-2026-72992

CVE-2026-72992 describes a heap-based buffer overflow vulnerability in the Windows Biometric Service that can be exploited by a locally authenticated attacker to achieve privilege escalation.

Affected products:

Windows Biometric Service

Source: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-72992

Related in this roundup: CVE-2026-69293, CVE-2026-69298, CVE-2026-69323, CVE-2026-69583, CVE-2026-69589, CVE-2026-69580, CVE-2026-69476, CVE-2026-69787, CVE-2026-77489, CVE-2026-83955, CVE-2026-83986, CVE-2026-83969, CVE-2026-83988, CVE-2026-83979, CVE-2026-83974, CVE-2026-83975, CVE-2026-83976, CVE-2026-69727, CVE-2026-69826, CVE-2026-69738, CVE-2026-69773, CVE-2026-70573, CVE-2026-70572, CVE-2026-70581, CVE-2026-72941, CVE-2026-69352, CVE-2026-69489, CVE-2026-69593, CVE-2026-72995, CVE-2026-72988, CVE-2026-72990, CVE-2026-72991, CVE-2026-72993, CVE-2026-72994, CVE-2026-72996, CVE-2026-72997, CVE-2026-73002, CVE-2026-73020, CVE-2026-73000, CVE-2026-73001, CVE-2026-73021, CVE-2026-73015, CVE-2026-73011, CVE-2026-73008, CVE-2026-73007, CVE-2026-73026, CVE-2026-78447, CVE-2026-78448, CVE-2026-83971, CVE-2026-83954, CVE-2026-83967, CVE-2026-83970, CVE-2026-83972, CVE-2026-83968, CVE-2026-83973, CVE-2026-83981, CVE-2026-83977, CVE-2026-83978, CVE-2026-83982, CVE-2026-83980, CVE-2026-83987, CVE-2026-83983, CVE-2026-83985.

CVE-2026-72993

The Windows Biometric Service contains a heap-based buffer overflow vulnerability that allows a locally authenticated attacker to escalate their privileges. This vulnerability requires the attacker to have existing access to the system to exploit the flaw.

Affected products:

Windows Biometric Service

Source: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-72993

Related in this roundup: CVE-2026-69293, CVE-2026-69298, CVE-2026-69323, CVE-2026-69583, CVE-2026-69589, CVE-2026-69580, CVE-2026-69476, CVE-2026-69787, CVE-2026-77489, CVE-2026-83955, CVE-2026-83986, CVE-2026-83969, CVE-2026-83988, CVE-2026-83979, CVE-2026-83974, CVE-2026-83975, CVE-2026-83976, CVE-2026-69727, CVE-2026-69826, CVE-2026-69738, CVE-2026-69773, CVE-2026-70573, CVE-2026-70572, CVE-2026-70581, CVE-2026-72941, CVE-2026-69352, CVE-2026-69489, CVE-2026-69593, CVE-2026-72995, CVE-2026-72988, CVE-2026-72990, CVE-2026-72991, CVE-2026-72992, CVE-2026-72994, CVE-2026-72996, CVE-2026-72997, CVE-2026-73002, CVE-2026-73020, CVE-2026-73000, CVE-2026-73001, CVE-2026-73021, CVE-2026-73015, CVE-2026-73011, CVE-2026-73008, CVE-2026-73007, CVE-2026-73026, CVE-2026-78447, CVE-2026-78448, CVE-2026-83971, CVE-2026-83954, CVE-2026-83967, CVE-2026-83970, CVE-2026-83972, CVE-2026-83968, CVE-2026-83973, CVE-2026-83981, CVE-2026-83977, CVE-2026-83978, CVE-2026-83982, CVE-2026-83980, CVE-2026-83987, CVE-2026-83983, CVE-2026-83985.

CVE-2026-72994

A heap-based buffer overflow vulnerability exists in the Windows Biometric Service, allowing a locally authenticated attacker to elevate their privileges on the affected system.

Affected products:

Windows Biometric Service

Source: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-72994

Related in this roundup: CVE-2026-69293, CVE-2026-69298, CVE-2026-69323, CVE-2026-69583, CVE-2026-69589, CVE-2026-69580, CVE-2026-69476, CVE-2026-69787, CVE-2026-77489, CVE-2026-83955, CVE-2026-83986, CVE-2026-83969, CVE-2026-83988, CVE-2026-83979, CVE-2026-83974, CVE-2026-83975, CVE-2026-83976, CVE-2026-69727, CVE-2026-69826, CVE-2026-69738, CVE-2026-69773, CVE-2026-70573, CVE-2026-70572, CVE-2026-70581, CVE-2026-72941, CVE-2026-69352, CVE-2026-69489, CVE-2026-69593, CVE-2026-72995, CVE-2026-72988, CVE-2026-72990, CVE-2026-72991, CVE-2026-72992, CVE-2026-72993, CVE-2026-72996, CVE-2026-72997, CVE-2026-73002, CVE-2026-73020, CVE-2026-73000, CVE-2026-73001, CVE-2026-73021, CVE-2026-73015, CVE-2026-73011, CVE-2026-73008, CVE-2026-73007, CVE-2026-73026, CVE-2026-78447, CVE-2026-78448, CVE-2026-83971, CVE-2026-83954, CVE-2026-83967, CVE-2026-83970, CVE-2026-83972, CVE-2026-83968, CVE-2026-83973, CVE-2026-83981, CVE-2026-83977, CVE-2026-83978, CVE-2026-83982, CVE-2026-83980, CVE-2026-83987, CVE-2026-83983, CVE-2026-83985.

CVE-2026-72996

CVE-2026-72996 is a heap-based buffer overflow vulnerability in the Windows Biometric Service that allows an authorized local attacker to achieve privilege escalation by exploiting flaws in the service's memory handling.

Affected products:

Windows Biometric Service

Source: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-72996

Related in this roundup: CVE-2026-69293, CVE-2026-69298, CVE-2026-69323, CVE-2026-69583, CVE-2026-69589, CVE-2026-69580, CVE-2026-69476, CVE-2026-69787, CVE-2026-77489, CVE-2026-83955, CVE-2026-83986, CVE-2026-83969, CVE-2026-83988, CVE-2026-83979, CVE-2026-83974, CVE-2026-83975, CVE-2026-83976, CVE-2026-69727, CVE-2026-69826, CVE-2026-69738, CVE-2026-69773, CVE-2026-70573, CVE-2026-70572, CVE-2026-70581, CVE-2026-72941, CVE-2026-69352, CVE-2026-69489, CVE-2026-69593, CVE-2026-72995, CVE-2026-72988, CVE-2026-72990, CVE-2026-72991, CVE-2026-72992, CVE-2026-72993, CVE-2026-72994, CVE-2026-72997, CVE-2026-73002, CVE-2026-73020, CVE-2026-73000, CVE-2026-73001, CVE-2026-73021, CVE-2026-73015, CVE-2026-73011, CVE-2026-73008, CVE-2026-73007, CVE-2026-73026, CVE-2026-78447, CVE-2026-78448, CVE-2026-83971, CVE-2026-83954, CVE-2026-83967, CVE-2026-83970, CVE-2026-83972, CVE-2026-83968, CVE-2026-83973, CVE-2026-83981, CVE-2026-83977, CVE-2026-83978, CVE-2026-83982, CVE-2026-83980, CVE-2026-83987, CVE-2026-83983, CVE-2026-83985.

CVE-2026-72997

A heap-based buffer overflow vulnerability exists in the Windows Biometric Service that allows an authorized local attacker to achieve privilege escalation.

Affected products:

Windows Biometric Service

Source: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-72997

Related in this roundup: CVE-2026-69293, CVE-2026-69298, CVE-2026-69323, CVE-2026-69583, CVE-2026-69589, CVE-2026-69580, CVE-2026-69476, CVE-2026-69787, CVE-2026-77489, CVE-2026-83955, CVE-2026-83986, CVE-2026-83969, CVE-2026-83988, CVE-2026-83979, CVE-2026-83974, CVE-2026-83975, CVE-2026-83976, CVE-2026-69727, CVE-2026-69826, CVE-2026-69738, CVE-2026-69773, CVE-2026-70573, CVE-2026-70572, CVE-2026-70581, CVE-2026-72941, CVE-2026-69352, CVE-2026-69489, CVE-2026-69593, CVE-2026-72995, CVE-2026-72988, CVE-2026-72990, CVE-2026-72991, CVE-2026-72992, CVE-2026-72993, CVE-2026-72994, CVE-2026-72996, CVE-2026-73002, CVE-2026-73020, CVE-2026-73000, CVE-2026-73001, CVE-2026-73021, CVE-2026-73015, CVE-2026-73011, CVE-2026-73008, CVE-2026-73007, CVE-2026-73026, CVE-2026-78447, CVE-2026-78448, CVE-2026-83971, CVE-2026-83954, CVE-2026-83967, CVE-2026-83970, CVE-2026-83972, CVE-2026-83968, CVE-2026-83973, CVE-2026-83981, CVE-2026-83977, CVE-2026-83978, CVE-2026-83982, CVE-2026-83980, CVE-2026-83987, CVE-2026-83983, CVE-2026-83985.

CVE-2026-73018

CVE-2026-73018 is a heap-based buffer overflow vulnerability in the Windows Graphic Fonts component. An unauthenticated attacker can exploit this flaw to achieve remote code execution over a network by sending specially crafted input to the affected system.

Affected products:

Graphic Fonts

Source: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-73018

Related in this roundup: CVE-2026-69576.

CVE-2026-73019

CVE-2026-73019 is a security feature bypass vulnerability in the Windows URL Moniker component. It is caused by improper resolution of path equivalence, which allows an unauthorized remote attacker to bypass security mechanisms over a network, potentially facilitating further malicious activities such as unauthorized code execution or file system access.

Affected products:

Windows

Source: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-73019

Related in this roundup: CVE-2026-81963, CVE-2026-85880, CVE-2026-69496, CVE-2026-69586, CVE-2026-69768, CVE-2026-73025, CVE-2026-56172, CVE-2026-68832, CVE-2026-68834, CVE-2026-68838, CVE-2026-68841, CVE-2026-68875, CVE-2026-68877, CVE-2026-68880, CVE-2026-69265, CVE-2026-69270, CVE-2026-69274, CVE-2026-69275, CVE-2026-69280, CVE-2026-69283, CVE-2026-69284, CVE-2026-69289, CVE-2026-69296, CVE-2026-69300, CVE-2026-69301, CVE-2026-69307, CVE-2026-69312, CVE-2026-69314, CVE-2026-69332, CVE-2026-69333, CVE-2026-69335, CVE-2026-68833, CVE-2026-68851, CVE-2026-69366, CVE-2026-69337, CVE-2026-69347, CVE-2026-69379, CVE-2026-69390, CVE-2026-69401, CVE-2026-69413, CVE-2026-69420, CVE-2026-69429, CVE-2026-69448, CVE-2026-69455, CVE-2026-69532, CVE-2026-69472, CVE-2026-69479, CVE-2026-69531, CVE-2026-69517, CVE-2026-69505, CVE-2026-69504, CVE-2026-69527, CVE-2026-69549, CVE-2026-69588, CVE-2026-69609, CVE-2026-69648, CVE-2026-69689, CVE-2026-69790, CVE-2026-69638, CVE-2026-69859, CVE-2026-69717, CVE-2026-69711, CVE-2026-69875, CVE-2026-69889, CVE-2026-69757, CVE-2026-69741, CVE-2026-69762, CVE-2026-69744, CVE-2026-69832, CVE-2026-69691, CVE-2026-69808, CVE-2026-69775, CVE-2026-69822, CVE-2026-69770, CVE-2026-69676, CVE-2026-70289, CVE-2026-70563, CVE-2026-71329, CVE-2026-71332, CVE-2026-71350, CVE-2026-71348, CVE-2026-71345, CVE-2026-69469, CVE-2026-69501, CVE-2026-69548, CVE-2026-69846, CVE-2026-70283, CVE-2026-72981, CVE-2026-77491, CVE-2026-77492, CVE-2026-77503, CVE-2026-80093, CVE-2026-72949, CVE-2026-70019, CVE-2026-72940, CVE-2026-69573, CVE-2026-70290, CVE-2026-83991, CVE-2026-83999, CVE-2026-69321, CVE-2026-69316, CVE-2026-69340, CVE-2026-69348, CVE-2026-69350, CVE-2026-69353, CVE-2026-69357, CVE-2026-69393, CVE-2026-69410, CVE-2026-69421, CVE-2026-69428, CVE-2026-69425, CVE-2026-69427, CVE-2026-69434, CVE-2026-69456, CVE-2026-69459, CVE-2026-69478, CVE-2026-69561, CVE-2026-69512, CVE-2026-69498, CVE-2026-69571, CVE-2026-69535, CVE-2026-69538, CVE-2026-69591, CVE-2026-69566, CVE-2026-69567, CVE-2026-69584, CVE-2026-69617, CVE-2026-69630, CVE-2026-69610, CVE-2026-69881, CVE-2026-69680, CVE-2026-69619, CVE-2026-69685, CVE-2026-69643, CVE-2026-69687, CVE-2026-69791, CVE-2026-69707, CVE-2026-69652, CVE-2026-69834, CVE-2026-69709, CVE-2026-69844, CVE-2026-69814, CVE-2026-69731, CVE-2026-69706, CVE-2026-69779, CVE-2026-69895, CVE-2026-69792, CVE-2026-69853, CVE-2026-69761, CVE-2026-69785, CVE-2026-69818, CVE-2026-69786, CVE-2026-69874, CVE-2026-70565, CVE-2026-70574, CVE-2026-70569, CVE-2026-70575, CVE-2026-71349, CVE-2026-72927, CVE-2026-72952, CVE-2026-72942, CVE-2026-72966, CVE-2026-72967, CVE-2026-69426, CVE-2026-69564, CVE-2026-72985, CVE-2026-78451, CVE-2026-78452, CVE-2026-83940, CVE-2026-69598, CVE-2026-83995, CVE-2026-83501, CVE-2026-83498.

CVE-2026-72999

CVE-2026-72999 describes an out-of-bounds read vulnerability within the Windows USB Hub Driver that can be leveraged by an attacker with physical access to a target machine to perform local privilege escalation.

Affected products:

Windows USB Hub Driver

Source: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-72999

CVE-2026-73002

An integer overflow or wraparound vulnerability in the Windows Biometric Service can be exploited by an authorized local attacker to achieve privilege escalation on the host system.

Affected products:

Windows Biometric Service

Source: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-73002

Related in this roundup: CVE-2026-69293, CVE-2026-69298, CVE-2026-69323, CVE-2026-69583, CVE-2026-69589, CVE-2026-69580, CVE-2026-69476, CVE-2026-69787, CVE-2026-77489, CVE-2026-83955, CVE-2026-83986, CVE-2026-83969, CVE-2026-83988, CVE-2026-83979, CVE-2026-83974, CVE-2026-83975, CVE-2026-83976, CVE-2026-69727, CVE-2026-69826, CVE-2026-69738, CVE-2026-69773, CVE-2026-70573, CVE-2026-70572, CVE-2026-70581, CVE-2026-72941, CVE-2026-69352, CVE-2026-69489, CVE-2026-69593, CVE-2026-72995, CVE-2026-72988, CVE-2026-72990, CVE-2026-72991, CVE-2026-72992, CVE-2026-72993, CVE-2026-72994, CVE-2026-72996, CVE-2026-72997, CVE-2026-73020, CVE-2026-73000, CVE-2026-73001, CVE-2026-73021, CVE-2026-73015, CVE-2026-73011, CVE-2026-73008, CVE-2026-73007, CVE-2026-73026, CVE-2026-78447, CVE-2026-78448, CVE-2026-83971, CVE-2026-83954, CVE-2026-83967, CVE-2026-83970, CVE-2026-83972, CVE-2026-83968, CVE-2026-83973, CVE-2026-83981, CVE-2026-83977, CVE-2026-83978, CVE-2026-83982, CVE-2026-83980, CVE-2026-83987, CVE-2026-83983, CVE-2026-83985.

CVE-2026-73020

Affected products:

Windows Biometric Service

Source: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-73020

Related in this roundup: CVE-2026-69293, CVE-2026-69298, CVE-2026-69323, CVE-2026-69583, CVE-2026-69589, CVE-2026-69580, CVE-2026-69476, CVE-2026-69787, CVE-2026-77489, CVE-2026-83955, CVE-2026-83986, CVE-2026-83969, CVE-2026-83988, CVE-2026-83979, CVE-2026-83974, CVE-2026-83975, CVE-2026-83976, CVE-2026-69727, CVE-2026-69826, CVE-2026-69738, CVE-2026-69773, CVE-2026-70573, CVE-2026-70572, CVE-2026-70581, CVE-2026-72941, CVE-2026-69352, CVE-2026-69489, CVE-2026-69593, CVE-2026-72995, CVE-2026-72988, CVE-2026-72990, CVE-2026-72991, CVE-2026-72992, CVE-2026-72993, CVE-2026-72994, CVE-2026-72996, CVE-2026-72997, CVE-2026-73002, CVE-2026-73000, CVE-2026-73001, CVE-2026-73021, CVE-2026-73015, CVE-2026-73011, CVE-2026-73008, CVE-2026-73007, CVE-2026-73026, CVE-2026-78447, CVE-2026-78448, CVE-2026-83971, CVE-2026-83954, CVE-2026-83967, CVE-2026-83970, CVE-2026-83972, CVE-2026-83968, CVE-2026-83973, CVE-2026-83981, CVE-2026-83977, CVE-2026-83978, CVE-2026-83982, CVE-2026-83980, CVE-2026-83987, CVE-2026-83983, CVE-2026-83985.

CVE-2026-73000

CVE-2026-73000 is a heap-based buffer overflow vulnerability within the Windows Biometric Service that enables a locally authenticated attacker to escalate their privileges to a higher integrity level on the affected system.

Affected products:

Windows Biometric Service

Source: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-73000

Related in this roundup: CVE-2026-69293, CVE-2026-69298, CVE-2026-69323, CVE-2026-69583, CVE-2026-69589, CVE-2026-69580, CVE-2026-69476, CVE-2026-69787, CVE-2026-77489, CVE-2026-83955, CVE-2026-83986, CVE-2026-83969, CVE-2026-83988, CVE-2026-83979, CVE-2026-83974, CVE-2026-83975, CVE-2026-83976, CVE-2026-69727, CVE-2026-69826, CVE-2026-69738, CVE-2026-69773, CVE-2026-70573, CVE-2026-70572, CVE-2026-70581, CVE-2026-72941, CVE-2026-69352, CVE-2026-69489, CVE-2026-69593, CVE-2026-72995, CVE-2026-72988, CVE-2026-72990, CVE-2026-72991, CVE-2026-72992, CVE-2026-72993, CVE-2026-72994, CVE-2026-72996, CVE-2026-72997, CVE-2026-73002, CVE-2026-73020, CVE-2026-73001, CVE-2026-73021, CVE-2026-73015, CVE-2026-73011, CVE-2026-73008, CVE-2026-73007, CVE-2026-73026, CVE-2026-78447, CVE-2026-78448, CVE-2026-83971, CVE-2026-83954, CVE-2026-83967, CVE-2026-83970, CVE-2026-83972, CVE-2026-83968, CVE-2026-83973, CVE-2026-83981, CVE-2026-83977, CVE-2026-83978, CVE-2026-83982, CVE-2026-83980, CVE-2026-83987, CVE-2026-83983, CVE-2026-83985.

CVE-2026-73001

A heap-based buffer overflow vulnerability in the Windows Biometric Service enables a locally authenticated attacker to escalate their privileges. This vulnerability is classified as a buffer-overflow and allows for local privilege escalation.

Affected products:

Windows Biometric Service

Source: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-73001

Related in this roundup: CVE-2026-69293, CVE-2026-69298, CVE-2026-69323, CVE-2026-69583, CVE-2026-69589, CVE-2026-69580, CVE-2026-69476, CVE-2026-69787, CVE-2026-77489, CVE-2026-83955, CVE-2026-83986, CVE-2026-83969, CVE-2026-83988, CVE-2026-83979, CVE-2026-83974, CVE-2026-83975, CVE-2026-83976, CVE-2026-69727, CVE-2026-69826, CVE-2026-69738, CVE-2026-69773, CVE-2026-70573, CVE-2026-70572, CVE-2026-70581, CVE-2026-72941, CVE-2026-69352, CVE-2026-69489, CVE-2026-69593, CVE-2026-72995, CVE-2026-72988, CVE-2026-72990, CVE-2026-72991, CVE-2026-72992, CVE-2026-72993, CVE-2026-72994, CVE-2026-72996, CVE-2026-72997, CVE-2026-73002, CVE-2026-73020, CVE-2026-73000, CVE-2026-73021, CVE-2026-73015, CVE-2026-73011, CVE-2026-73008, CVE-2026-73007, CVE-2026-73026, CVE-2026-78447, CVE-2026-78448, CVE-2026-83971, CVE-2026-83954, CVE-2026-83967, CVE-2026-83970, CVE-2026-83972, CVE-2026-83968, CVE-2026-83973, CVE-2026-83981, CVE-2026-83977, CVE-2026-83978, CVE-2026-83982, CVE-2026-83980, CVE-2026-83987, CVE-2026-83983, CVE-2026-83985.

CVE-2026-73021

A heap-based buffer overflow vulnerability exists in the Windows Biometric Service, allowing an authenticated local attacker to escalate their privileges on an affected Windows system.

Affected products:

Windows Biometric Service

Source: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-73021

Related in this roundup: CVE-2026-69293, CVE-2026-69298, CVE-2026-69323, CVE-2026-69583, CVE-2026-69589, CVE-2026-69580, CVE-2026-69476, CVE-2026-69787, CVE-2026-77489, CVE-2026-83955, CVE-2026-83986, CVE-2026-83969, CVE-2026-83988, CVE-2026-83979, CVE-2026-83974, CVE-2026-83975, CVE-2026-83976, CVE-2026-69727, CVE-2026-69826, CVE-2026-69738, CVE-2026-69773, CVE-2026-70573, CVE-2026-70572, CVE-2026-70581, CVE-2026-72941, CVE-2026-69352, CVE-2026-69489, CVE-2026-69593, CVE-2026-72995, CVE-2026-72988, CVE-2026-72990, CVE-2026-72991, CVE-2026-72992, CVE-2026-72993, CVE-2026-72994, CVE-2026-72996, CVE-2026-72997, CVE-2026-73002, CVE-2026-73020, CVE-2026-73000, CVE-2026-73001, CVE-2026-73015, CVE-2026-73011, CVE-2026-73008, CVE-2026-73007, CVE-2026-73026, CVE-2026-78447, CVE-2026-78448, CVE-2026-83971, CVE-2026-83954, CVE-2026-83967, CVE-2026-83970, CVE-2026-83972, CVE-2026-83968, CVE-2026-83973, CVE-2026-83981, CVE-2026-83977, CVE-2026-83978, CVE-2026-83982, CVE-2026-83980, CVE-2026-83987, CVE-2026-83983, CVE-2026-83985.

CVE-2026-73015

CVE-2026-73015 is a heap-based buffer overflow vulnerability in the Windows Biometric Service that enables a locally authenticated attacker to achieve privilege escalation.

Affected products:

Windows Biometric Service

Source: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-73015

Related in this roundup: CVE-2026-69293, CVE-2026-69298, CVE-2026-69323, CVE-2026-69583, CVE-2026-69589, CVE-2026-69580, CVE-2026-69476, CVE-2026-69787, CVE-2026-77489, CVE-2026-83955, CVE-2026-83986, CVE-2026-83969, CVE-2026-83988, CVE-2026-83979, CVE-2026-83974, CVE-2026-83975, CVE-2026-83976, CVE-2026-69727, CVE-2026-69826, CVE-2026-69738, CVE-2026-69773, CVE-2026-70573, CVE-2026-70572, CVE-2026-70581, CVE-2026-72941, CVE-2026-69352, CVE-2026-69489, CVE-2026-69593, CVE-2026-72995, CVE-2026-72988, CVE-2026-72990, CVE-2026-72991, CVE-2026-72992, CVE-2026-72993, CVE-2026-72994, CVE-2026-72996, CVE-2026-72997, CVE-2026-73002, CVE-2026-73020, CVE-2026-73000, CVE-2026-73001, CVE-2026-73021, CVE-2026-73011, CVE-2026-73008, CVE-2026-73007, CVE-2026-73026, CVE-2026-78447, CVE-2026-78448, CVE-2026-83971, CVE-2026-83954, CVE-2026-83967, CVE-2026-83970, CVE-2026-83972, CVE-2026-83968, CVE-2026-83973, CVE-2026-83981, CVE-2026-83977, CVE-2026-83978, CVE-2026-83982, CVE-2026-83980, CVE-2026-83987, CVE-2026-83983, CVE-2026-83985.

CVE-2026-73003

CVE-2026-73003 describes a use-after-free vulnerability within the Windows Modern Device Management (MDM) component. This flaw permits a locally authenticated attacker to escalate their privileges on the host system, potentially gaining administrative control.

Affected products:

Windows Modern Device Management

Source: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-73003

Related in this roundup: CVE-2026-69377, CVE-2026-69460, CVE-2026-69674, CVE-2026-70577, CVE-2026-73022.

CVE-2026-73022

A use-after-free vulnerability exists in Windows Modern Device Management (MDM) that allows an authenticated local attacker to escalate their privileges. Detection efforts should focus on monitoring anomalous system processes or unauthorized calls to MDM-related services that might exploit this memory corruption.

Affected products:

Windows Modern Device Management

Source: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-73022

Related in this roundup: CVE-2026-69377, CVE-2026-69460, CVE-2026-69674, CVE-2026-70577, CVE-2026-73003.

CVE-2026-73011

A heap-based buffer overflow vulnerability in the Windows Biometric Service allows an authorized local attacker to achieve privilege escalation by exploiting the memory corruption flaw.

Affected products:

Windows Biometric Service

Source: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-73011

Related in this roundup: CVE-2026-69293, CVE-2026-69298, CVE-2026-69323, CVE-2026-69583, CVE-2026-69589, CVE-2026-69580, CVE-2026-69476, CVE-2026-69787, CVE-2026-77489, CVE-2026-83955, CVE-2026-83986, CVE-2026-83969, CVE-2026-83988, CVE-2026-83979, CVE-2026-83974, CVE-2026-83975, CVE-2026-83976, CVE-2026-69727, CVE-2026-69826, CVE-2026-69738, CVE-2026-69773, CVE-2026-70573, CVE-2026-70572, CVE-2026-70581, CVE-2026-72941, CVE-2026-69352, CVE-2026-69489, CVE-2026-69593, CVE-2026-72995, CVE-2026-72988, CVE-2026-72990, CVE-2026-72991, CVE-2026-72992, CVE-2026-72993, CVE-2026-72994, CVE-2026-72996, CVE-2026-72997, CVE-2026-73002, CVE-2026-73020, CVE-2026-73000, CVE-2026-73001, CVE-2026-73021, CVE-2026-73015, CVE-2026-73008, CVE-2026-73007, CVE-2026-73026, CVE-2026-78447, CVE-2026-78448, CVE-2026-83971, CVE-2026-83954, CVE-2026-83967, CVE-2026-83970, CVE-2026-83972, CVE-2026-83968, CVE-2026-83973, CVE-2026-83981, CVE-2026-83977, CVE-2026-83978, CVE-2026-83982, CVE-2026-83980, CVE-2026-83987, CVE-2026-83983, CVE-2026-83985.

CVE-2026-73014

CVE-2026-73014 is a privilege escalation vulnerability in the Microsoft Data Sharing Service Client, caused by missing authorization checks. This flaw allows a local, authenticated attacker to execute actions or gain permissions beyond their current security context.

Affected products:

Data Sharing Service Client

Source: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-73014

CVE-2026-73008

CVE-2026-73008 is an information disclosure vulnerability in the Windows Biometric Service. An attacker with local authorization can exploit this flaw to gain unauthorized access to private personal information handled by the service.

Affected products:

Windows Biometric Service

Source: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-73008

Related in this roundup: CVE-2026-69293, CVE-2026-69298, CVE-2026-69323, CVE-2026-69583, CVE-2026-69589, CVE-2026-69580, CVE-2026-69476, CVE-2026-69787, CVE-2026-77489, CVE-2026-83955, CVE-2026-83986, CVE-2026-83969, CVE-2026-83988, CVE-2026-83979, CVE-2026-83974, CVE-2026-83975, CVE-2026-83976, CVE-2026-69727, CVE-2026-69826, CVE-2026-69738, CVE-2026-69773, CVE-2026-70573, CVE-2026-70572, CVE-2026-70581, CVE-2026-72941, CVE-2026-69352, CVE-2026-69489, CVE-2026-69593, CVE-2026-72995, CVE-2026-72988, CVE-2026-72990, CVE-2026-72991, CVE-2026-72992, CVE-2026-72993, CVE-2026-72994, CVE-2026-72996, CVE-2026-72997, CVE-2026-73002, CVE-2026-73020, CVE-2026-73000, CVE-2026-73001, CVE-2026-73021, CVE-2026-73015, CVE-2026-73011, CVE-2026-73007, CVE-2026-73026, CVE-2026-78447, CVE-2026-78448, CVE-2026-83971, CVE-2026-83954, CVE-2026-83967, CVE-2026-83970, CVE-2026-83972, CVE-2026-83968, CVE-2026-83973, CVE-2026-83981, CVE-2026-83977, CVE-2026-83978, CVE-2026-83982, CVE-2026-83980, CVE-2026-83987, CVE-2026-83983, CVE-2026-83985.

CVE-2026-73005

A use-after-free vulnerability in Windows Authentication Methods allows an authenticated local attacker to execute arbitrary code with elevated privileges on the system.

Affected products:

Windows Authentication Methods

Source: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-73005

CVE-2026-73024

A heap-based buffer overflow vulnerability exists in the Windows Services for NFS ONCRPC XDR driver, which can be exploited by an authorized attacker to achieve local privilege escalation on affected Windows systems.

Affected products:

Windows Services for NFS

Source: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-73024

Related in this roundup: CVE-2026-69595, CVE-2026-78445, CVE-2026-70585, CVE-2026-71330, CVE-2026-83989.

CVE-2026-73007

A heap-based buffer overflow vulnerability in the Windows Biometric Service allows a locally authenticated attacker to escalate their privileges. This vulnerability requires the attacker to have existing local access to the system.

Affected products:

Windows Biometric Service

Source: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-73007

Related in this roundup: CVE-2026-69293, CVE-2026-69298, CVE-2026-69323, CVE-2026-69583, CVE-2026-69589, CVE-2026-69580, CVE-2026-69476, CVE-2026-69787, CVE-2026-77489, CVE-2026-83955, CVE-2026-83986, CVE-2026-83969, CVE-2026-83988, CVE-2026-83979, CVE-2026-83974, CVE-2026-83975, CVE-2026-83976, CVE-2026-69727, CVE-2026-69826, CVE-2026-69738, CVE-2026-69773, CVE-2026-70573, CVE-2026-70572, CVE-2026-70581, CVE-2026-72941, CVE-2026-69352, CVE-2026-69489, CVE-2026-69593, CVE-2026-72995, CVE-2026-72988, CVE-2026-72990, CVE-2026-72991, CVE-2026-72992, CVE-2026-72993, CVE-2026-72994, CVE-2026-72996, CVE-2026-72997, CVE-2026-73002, CVE-2026-73020, CVE-2026-73000, CVE-2026-73001, CVE-2026-73021, CVE-2026-73015, CVE-2026-73011, CVE-2026-73008, CVE-2026-73026, CVE-2026-78447, CVE-2026-78448, CVE-2026-83971, CVE-2026-83954, CVE-2026-83967, CVE-2026-83970, CVE-2026-83972, CVE-2026-83968, CVE-2026-83973, CVE-2026-83981, CVE-2026-83977, CVE-2026-83978, CVE-2026-83982, CVE-2026-83980, CVE-2026-83987, CVE-2026-83983, CVE-2026-83985.

CVE-2026-73026

CVE-2026-73026 is a heap-based buffer overflow vulnerability within the Windows Biometric Service that enables a locally authorized attacker to escalate their privileges. Successful exploitation allows the attacker to gain higher-level permissions on the compromised host.

Affected products:

Windows Biometric Service

Source: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-73026

Related in this roundup: CVE-2026-69293, CVE-2026-69298, CVE-2026-69323, CVE-2026-69583, CVE-2026-69589, CVE-2026-69580, CVE-2026-69476, CVE-2026-69787, CVE-2026-77489, CVE-2026-83955, CVE-2026-83986, CVE-2026-83969, CVE-2026-83988, CVE-2026-83979, CVE-2026-83974, CVE-2026-83975, CVE-2026-83976, CVE-2026-69727, CVE-2026-69826, CVE-2026-69738, CVE-2026-69773, CVE-2026-70573, CVE-2026-70572, CVE-2026-70581, CVE-2026-72941, CVE-2026-69352, CVE-2026-69489, CVE-2026-69593, CVE-2026-72995, CVE-2026-72988, CVE-2026-72990, CVE-2026-72991, CVE-2026-72992, CVE-2026-72993, CVE-2026-72994, CVE-2026-72996, CVE-2026-72997, CVE-2026-73002, CVE-2026-73020, CVE-2026-73000, CVE-2026-73001, CVE-2026-73021, CVE-2026-73015, CVE-2026-73011, CVE-2026-73008, CVE-2026-73007, CVE-2026-78447, CVE-2026-78448, CVE-2026-83971, CVE-2026-83954, CVE-2026-83967, CVE-2026-83970, CVE-2026-83972, CVE-2026-83968, CVE-2026-83973, CVE-2026-83981, CVE-2026-83977, CVE-2026-83978, CVE-2026-83982, CVE-2026-83980, CVE-2026-83987, CVE-2026-83983, CVE-2026-83985.

CVE-2026-73004

CVE-2026-73004 is a vulnerability in Windows Autopilot resulting from missing authentication for critical functions. A locally authenticated attacker can exploit this flaw to perform unauthorized tampering with the service, potentially facilitating persistence or privilege escalation on the affected system.

Affected products:

Windows Autopilot

Source: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-73004

CVE-2026-73012

A heap-based buffer overflow vulnerability in Windows Management Services permits an authorized attacker to achieve privilege escalation over a network. Successful exploitation of this flaw requires network access and allows an attacker to gain higher privileges than their original authorization level.

Affected products:

Windows Management Services

Source: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-73012

CVE-2026-73006

CVE-2026-73006 describes a stack-based buffer overflow vulnerability within the Microsoft Graphics Component that facilitates remote code execution. An attacker can exploit this flaw by sending specially crafted network requests to the affected component to trigger memory corruption.

Affected products:

Graphics Component

Source: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-73006

Related in this roundup: CVE-2026-77493, CVE-2026-69467, CVE-2026-73016, CVE-2026-83990, CVE-2026-84000.

CVE-2026-73023

CVE-2026-73023 is a heap-based buffer overflow vulnerability within the Windows Imaging Component. This flaw allows a remote, unauthorized attacker to achieve remote code execution (RCE) by sending specifically crafted requests, necessitating memory-level protections and deep packet inspection for detection.

Affected products:

Windows Imaging Component

Source: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-73023

Related in this roundup: CVE-2026-70296, CVE-2026-69860, CVE-2026-77495, CVE-2026-69318, CVE-2026-69499, CVE-2026-73013, CVE-2026-83992.

CVE-2026-73013

CVE-2026-73013 is a heap-based buffer overflow vulnerability within the Windows Imaging Component that enables an unauthorized attacker to achieve remote code execution over a network. The vulnerability poses a significant risk as it allows for arbitrary code execution without requiring prior authentication.

Affected products:

Windows Imaging Component

Source: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-73013

Related in this roundup: CVE-2026-70296, CVE-2026-69860, CVE-2026-77495, CVE-2026-69318, CVE-2026-69499, CVE-2026-73023, CVE-2026-83992.

CVE-2026-73016

CVE-2026-73016 is a heap-based buffer overflow vulnerability in the Microsoft Graphics Component that enables an unauthorized remote attacker to achieve remote code execution via network-based exploitation.

Affected products:

Graphics Component

Source: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-73016

Related in this roundup: CVE-2026-77493, CVE-2026-69467, CVE-2026-73006, CVE-2026-83990, CVE-2026-84000.

CVE-2026-73017

CVE-2026-73017 describes a heap-based buffer overflow vulnerability within the Windows Graphics Kernel, which could allow an authorized attacker to execute arbitrary code locally.

Affected products:

Windows Graphics Kernel

Source: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-73017

CVE-2026-71328

A heap-based buffer overflow vulnerability exists in .NET and Visual Studio that allows a remote, unauthorized attacker to execute arbitrary code. The vulnerability is triggered over a network and is classified as a remote code execution issue.

Affected products:

Visual Studio
.NET

Source: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-71328

Related in this roundup: CVE-2026-69522, CVE-2026-77907, CVE-2026-77906.

CVE-2026-73028

CVE-2026-73028 describes an elevation of privilege vulnerability in Microsoft SQL Server resulting from improper access control. An attacker who has already achieved authorized access can exploit this flaw to gain higher privileges over the network.

Affected products:

SQL Server

Source: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-73028

Related in this roundup: CVE-2026-65669, CVE-2026-47297, CVE-2026-66814, CVE-2026-66818, CVE-2026-66819, CVE-2026-66820, CVE-2026-67368, CVE-2026-67370, CVE-2026-67373, CVE-2026-67376, CVE-2026-67378, CVE-2026-67379, CVE-2026-67380, CVE-2026-67381, CVE-2026-67384, CVE-2026-67385, CVE-2026-67388, CVE-2026-67631, CVE-2026-67636, CVE-2026-67638, CVE-2026-67639, CVE-2026-67642, CVE-2026-67643, CVE-2026-68775, CVE-2026-68786, CVE-2026-68787, CVE-2026-77482, CVE-2026-67629, CVE-2026-67630, CVE-2026-67633, CVE-2026-68781, CVE-2026-68784, CVE-2026-68785, CVE-2026-67383, CVE-2026-67389, CVE-2026-73029, CVE-2026-66816, CVE-2026-67386, CVE-2026-67390, CVE-2026-67393, CVE-2026-67641, CVE-2026-67648, CVE-2026-68776, CVE-2026-68777, CVE-2026-68778, CVE-2026-68779, CVE-2026-68780, CVE-2026-77480, CVE-2026-77483, CVE-2026-77484, CVE-2026-77487, CVE-2026-77485, CVE-2026-77486, CVE-2026-77488, CVE-2026-69562, CVE-2026-78456, CVE-2026-67369, CVE-2026-67624, CVE-2026-67645, CVE-2026-77481.

CVE-2026-77480

CVE-2026-77480 is a privilege escalation vulnerability in Microsoft SQL Server caused by insufficient granularity of access control. An attacker who has already gained authorized access to the network can exploit this flaw to elevate their privileges within the database environment.

Affected products:

SQL Server

Source: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-77480

Related in this roundup: CVE-2026-65669, CVE-2026-47297, CVE-2026-66814, CVE-2026-66818, CVE-2026-66819, CVE-2026-66820, CVE-2026-67368, CVE-2026-67370, CVE-2026-67373, CVE-2026-67376, CVE-2026-67378, CVE-2026-67379, CVE-2026-67380, CVE-2026-67381, CVE-2026-67384, CVE-2026-67385, CVE-2026-67388, CVE-2026-67631, CVE-2026-67636, CVE-2026-67638, CVE-2026-67639, CVE-2026-67642, CVE-2026-67643, CVE-2026-68775, CVE-2026-68786, CVE-2026-68787, CVE-2026-77482, CVE-2026-67629, CVE-2026-67630, CVE-2026-67633, CVE-2026-68781, CVE-2026-68784, CVE-2026-68785, CVE-2026-67383, CVE-2026-67389, CVE-2026-73029, CVE-2026-66816, CVE-2026-67386, CVE-2026-67390, CVE-2026-67393, CVE-2026-67641, CVE-2026-67648, CVE-2026-68776, CVE-2026-68777, CVE-2026-68778, CVE-2026-68779, CVE-2026-68780, CVE-2026-73028, CVE-2026-77483, CVE-2026-77484, CVE-2026-77487, CVE-2026-77485, CVE-2026-77486, CVE-2026-77488, CVE-2026-69562, CVE-2026-78456, CVE-2026-67369, CVE-2026-67624, CVE-2026-67645, CVE-2026-77481.

CVE-2026-77483

CVE-2026-77483 describes a privilege escalation vulnerability in Microsoft SQL Server caused by weak authentication. An authenticated attacker on the network can leverage this flaw to gain unauthorized elevated privileges, potentially compromising the integrity and confidentiality of the database instance.

Affected products:

SQL Server

Source: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-77483

Related in this roundup: CVE-2026-65669, CVE-2026-47297, CVE-2026-66814, CVE-2026-66818, CVE-2026-66819, CVE-2026-66820, CVE-2026-67368, CVE-2026-67370, CVE-2026-67373, CVE-2026-67376, CVE-2026-67378, CVE-2026-67379, CVE-2026-67380, CVE-2026-67381, CVE-2026-67384, CVE-2026-67385, CVE-2026-67388, CVE-2026-67631, CVE-2026-67636, CVE-2026-67638, CVE-2026-67639, CVE-2026-67642, CVE-2026-67643, CVE-2026-68775, CVE-2026-68786, CVE-2026-68787, CVE-2026-77482, CVE-2026-67629, CVE-2026-67630, CVE-2026-67633, CVE-2026-68781, CVE-2026-68784, CVE-2026-68785, CVE-2026-67383, CVE-2026-67389, CVE-2026-73029, CVE-2026-66816, CVE-2026-67386, CVE-2026-67390, CVE-2026-67393, CVE-2026-67641, CVE-2026-67648, CVE-2026-68776, CVE-2026-68777, CVE-2026-68778, CVE-2026-68779, CVE-2026-68780, CVE-2026-73028, CVE-2026-77480, CVE-2026-77484, CVE-2026-77487, CVE-2026-77485, CVE-2026-77486, CVE-2026-77488, CVE-2026-69562, CVE-2026-78456, CVE-2026-67369, CVE-2026-67624, CVE-2026-67645, CVE-2026-77481.

CVE-2026-77484

CVE-2026-77484 is a remote code execution vulnerability in Microsoft SQL Server caused by improper deserialization of untrusted data. An authorized attacker can exploit this vulnerability over a network to execute arbitrary code on the affected database server.

Affected products:

SQL Server

Source: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-77484

Related in this roundup: CVE-2026-65669, CVE-2026-47297, CVE-2026-66814, CVE-2026-66818, CVE-2026-66819, CVE-2026-66820, CVE-2026-67368, CVE-2026-67370, CVE-2026-67373, CVE-2026-67376, CVE-2026-67378, CVE-2026-67379, CVE-2026-67380, CVE-2026-67381, CVE-2026-67384, CVE-2026-67385, CVE-2026-67388, CVE-2026-67631, CVE-2026-67636, CVE-2026-67638, CVE-2026-67639, CVE-2026-67642, CVE-2026-67643, CVE-2026-68775, CVE-2026-68786, CVE-2026-68787, CVE-2026-77482, CVE-2026-67629, CVE-2026-67630, CVE-2026-67633, CVE-2026-68781, CVE-2026-68784, CVE-2026-68785, CVE-2026-67383, CVE-2026-67389, CVE-2026-73029, CVE-2026-66816, CVE-2026-67386, CVE-2026-67390, CVE-2026-67393, CVE-2026-67641, CVE-2026-67648, CVE-2026-68776, CVE-2026-68777, CVE-2026-68778, CVE-2026-68779, CVE-2026-68780, CVE-2026-73028, CVE-2026-77480, CVE-2026-77483, CVE-2026-77487, CVE-2026-77485, CVE-2026-77486, CVE-2026-77488, CVE-2026-69562, CVE-2026-78456, CVE-2026-67369, CVE-2026-67624, CVE-2026-67645, CVE-2026-77481.

CVE-2026-77487

CVE-2026-77487 describes an elevation of privilege vulnerability in Microsoft SQL Server caused by improper access control. An authorized attacker can exploit this flaw over a network to gain higher privileges than their current authorization level.

Affected products:

SQL Server

Source: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-77487

Related in this roundup: CVE-2026-65669, CVE-2026-47297, CVE-2026-66814, CVE-2026-66818, CVE-2026-66819, CVE-2026-66820, CVE-2026-67368, CVE-2026-67370, CVE-2026-67373, CVE-2026-67376, CVE-2026-67378, CVE-2026-67379, CVE-2026-67380, CVE-2026-67381, CVE-2026-67384, CVE-2026-67385, CVE-2026-67388, CVE-2026-67631, CVE-2026-67636, CVE-2026-67638, CVE-2026-67639, CVE-2026-67642, CVE-2026-67643, CVE-2026-68775, CVE-2026-68786, CVE-2026-68787, CVE-2026-77482, CVE-2026-67629, CVE-2026-67630, CVE-2026-67633, CVE-2026-68781, CVE-2026-68784, CVE-2026-68785, CVE-2026-67383, CVE-2026-67389, CVE-2026-73029, CVE-2026-66816, CVE-2026-67386, CVE-2026-67390, CVE-2026-67393, CVE-2026-67641, CVE-2026-67648, CVE-2026-68776, CVE-2026-68777, CVE-2026-68778, CVE-2026-68779, CVE-2026-68780, CVE-2026-73028, CVE-2026-77480, CVE-2026-77483, CVE-2026-77484, CVE-2026-77485, CVE-2026-77486, CVE-2026-77488, CVE-2026-69562, CVE-2026-78456, CVE-2026-67369, CVE-2026-67624, CVE-2026-67645, CVE-2026-77481.

CVE-2026-77485

CVE-2026-77485 is a local privilege escalation vulnerability in Microsoft SQL Server stemming from a use-after-free flaw. An authenticated attacker can exploit this condition to gain elevated system privileges.

Affected products:

SQL Server

Source: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-77485

Related in this roundup: CVE-2026-65669, CVE-2026-47297, CVE-2026-66814, CVE-2026-66818, CVE-2026-66819, CVE-2026-66820, CVE-2026-67368, CVE-2026-67370, CVE-2026-67373, CVE-2026-67376, CVE-2026-67378, CVE-2026-67379, CVE-2026-67380, CVE-2026-67381, CVE-2026-67384, CVE-2026-67385, CVE-2026-67388, CVE-2026-67631, CVE-2026-67636, CVE-2026-67638, CVE-2026-67639, CVE-2026-67642, CVE-2026-67643, CVE-2026-68775, CVE-2026-68786, CVE-2026-68787, CVE-2026-77482, CVE-2026-67629, CVE-2026-67630, CVE-2026-67633, CVE-2026-68781, CVE-2026-68784, CVE-2026-68785, CVE-2026-67383, CVE-2026-67389, CVE-2026-73029, CVE-2026-66816, CVE-2026-67386, CVE-2026-67390, CVE-2026-67393, CVE-2026-67641, CVE-2026-67648, CVE-2026-68776, CVE-2026-68777, CVE-2026-68778, CVE-2026-68779, CVE-2026-68780, CVE-2026-73028, CVE-2026-77480, CVE-2026-77483, CVE-2026-77484, CVE-2026-77487, CVE-2026-77486, CVE-2026-77488, CVE-2026-69562, CVE-2026-78456, CVE-2026-67369, CVE-2026-67624, CVE-2026-67645, CVE-2026-77481.

CVE-2026-77486

CVE-2026-77486 is a remote code execution vulnerability in Microsoft SQL Server caused by an integer overflow or wraparound flaw. The vulnerability allows an unauthorized network-based attacker to execute arbitrary code on the affected database server.

Affected products:

SQL Server

Source: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-77486

Related in this roundup: CVE-2026-65669, CVE-2026-47297, CVE-2026-66814, CVE-2026-66818, CVE-2026-66819, CVE-2026-66820, CVE-2026-67368, CVE-2026-67370, CVE-2026-67373, CVE-2026-67376, CVE-2026-67378, CVE-2026-67379, CVE-2026-67380, CVE-2026-67381, CVE-2026-67384, CVE-2026-67385, CVE-2026-67388, CVE-2026-67631, CVE-2026-67636, CVE-2026-67638, CVE-2026-67639, CVE-2026-67642, CVE-2026-67643, CVE-2026-68775, CVE-2026-68786, CVE-2026-68787, CVE-2026-77482, CVE-2026-67629, CVE-2026-67630, CVE-2026-67633, CVE-2026-68781, CVE-2026-68784, CVE-2026-68785, CVE-2026-67383, CVE-2026-67389, CVE-2026-73029, CVE-2026-66816, CVE-2026-67386, CVE-2026-67390, CVE-2026-67393, CVE-2026-67641, CVE-2026-67648, CVE-2026-68776, CVE-2026-68777, CVE-2026-68778, CVE-2026-68779, CVE-2026-68780, CVE-2026-73028, CVE-2026-77480, CVE-2026-77483, CVE-2026-77484, CVE-2026-77487, CVE-2026-77485, CVE-2026-77488, CVE-2026-69562, CVE-2026-78456, CVE-2026-67369, CVE-2026-67624, CVE-2026-67645, CVE-2026-77481.

CVE-2026-77488

CVE-2026-77488 is an information disclosure vulnerability in Microsoft SQL Server caused by an integer underflow flaw. The vulnerability allows an authorized attacker to disclose sensitive information locally.

Affected products:

SQL Server

Source: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-77488

Related in this roundup: CVE-2026-65669, CVE-2026-47297, CVE-2026-66814, CVE-2026-66818, CVE-2026-66819, CVE-2026-66820, CVE-2026-67368, CVE-2026-67370, CVE-2026-67373, CVE-2026-67376, CVE-2026-67378, CVE-2026-67379, CVE-2026-67380, CVE-2026-67381, CVE-2026-67384, CVE-2026-67385, CVE-2026-67388, CVE-2026-67631, CVE-2026-67636, CVE-2026-67638, CVE-2026-67639, CVE-2026-67642, CVE-2026-67643, CVE-2026-68775, CVE-2026-68786, CVE-2026-68787, CVE-2026-77482, CVE-2026-67629, CVE-2026-67630, CVE-2026-67633, CVE-2026-68781, CVE-2026-68784, CVE-2026-68785, CVE-2026-67383, CVE-2026-67389, CVE-2026-73029, CVE-2026-66816, CVE-2026-67386, CVE-2026-67390, CVE-2026-67393, CVE-2026-67641, CVE-2026-67648, CVE-2026-68776, CVE-2026-68777, CVE-2026-68778, CVE-2026-68779, CVE-2026-68780, CVE-2026-73028, CVE-2026-77480, CVE-2026-77483, CVE-2026-77484, CVE-2026-77487, CVE-2026-77485, CVE-2026-77486, CVE-2026-69562, CVE-2026-78456, CVE-2026-67369, CVE-2026-67624, CVE-2026-67645, CVE-2026-77481.

CVE-2026-77901

CVE-2026-77901 is a remote code execution vulnerability in Microsoft Office Word caused by a null pointer dereference. An attacker could exploit this flaw to execute arbitrary code over a network, typically requiring user interaction.

Affected products:

Office Word

Source: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-77901

Related in this roundup: CVE-2026-69556, CVE-2026-69671, CVE-2026-69686, CVE-2026-69722, CVE-2026-69734, CVE-2026-69719, CVE-2026-69759, CVE-2026-69764, CVE-2026-78511, CVE-2026-78502, CVE-2026-78504, CVE-2026-78517, CVE-2026-68843, CVE-2026-69360, CVE-2026-72972, CVE-2026-72976, CVE-2026-77911, CVE-2026-78507, CVE-2026-78506, CVE-2026-78514, CVE-2026-78503, CVE-2026-78521, CVE-2026-78522, CVE-2026-78526, CVE-2026-80080, CVE-2026-83951, CVE-2026-83949.

CVE-2026-77905

CVE-2026-77905 is a use-after-free vulnerability within Windows Management Instrumentation (WMI) that enables an authenticated attacker to perform a local privilege escalation on affected Windows systems.

Affected products:

Windows Management Instrumentation

Source: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-77905

Related in this roundup: CVE-2026-69349, CVE-2026-69451, CVE-2026-70582.

CVE-2026-77911

CVE-2026-77911 is an out-of-bounds read vulnerability in Microsoft Office Word that enables an unauthenticated attacker to disclose sensitive information over a network connection.

Affected products:

Office Word

Source: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-77911

Related in this roundup: CVE-2026-69556, CVE-2026-69671, CVE-2026-69686, CVE-2026-69722, CVE-2026-69734, CVE-2026-69719, CVE-2026-69759, CVE-2026-69764, CVE-2026-78511, CVE-2026-78502, CVE-2026-78504, CVE-2026-78517, CVE-2026-68843, CVE-2026-69360, CVE-2026-72972, CVE-2026-72976, CVE-2026-77901, CVE-2026-78507, CVE-2026-78506, CVE-2026-78514, CVE-2026-78503, CVE-2026-78521, CVE-2026-78522, CVE-2026-78526, CVE-2026-80080, CVE-2026-83951, CVE-2026-83949.

CVE-2026-69562

Microsoft SQL Server contains an out-of-bounds read vulnerability that allows a remote, unauthenticated attacker to disclose sensitive information from the server memory over a network connection.

Affected products:

SQL Server

Source: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-69562

Related in this roundup: CVE-2026-65669, CVE-2026-47297, CVE-2026-66814, CVE-2026-66818, CVE-2026-66819, CVE-2026-66820, CVE-2026-67368, CVE-2026-67370, CVE-2026-67373, CVE-2026-67376, CVE-2026-67378, CVE-2026-67379, CVE-2026-67380, CVE-2026-67381, CVE-2026-67384, CVE-2026-67385, CVE-2026-67388, CVE-2026-67631, CVE-2026-67636, CVE-2026-67638, CVE-2026-67639, CVE-2026-67642, CVE-2026-67643, CVE-2026-68775, CVE-2026-68786, CVE-2026-68787, CVE-2026-77482, CVE-2026-67629, CVE-2026-67630, CVE-2026-67633, CVE-2026-68781, CVE-2026-68784, CVE-2026-68785, CVE-2026-67383, CVE-2026-67389, CVE-2026-73029, CVE-2026-66816, CVE-2026-67386, CVE-2026-67390, CVE-2026-67393, CVE-2026-67641, CVE-2026-67648, CVE-2026-68776, CVE-2026-68777, CVE-2026-68778, CVE-2026-68779, CVE-2026-68780, CVE-2026-73028, CVE-2026-77480, CVE-2026-77483, CVE-2026-77484, CVE-2026-77487, CVE-2026-77485, CVE-2026-77486, CVE-2026-77488, CVE-2026-78456, CVE-2026-67369, CVE-2026-67624, CVE-2026-67645, CVE-2026-77481.

CVE-2026-78442

CVE-2026-78442 is a heap-based buffer overflow vulnerability in the Windows OLE DB component. Successful exploitation allows an unauthenticated remote attacker to execute arbitrary code on the target system.

Affected products:

Windows OLE DB

Source: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-78442

Related in this roundup: CVE-2026-78441.

CVE-2026-78441

An out-of-bounds read vulnerability exists in Windows OLE DB that allows a remote, unauthorized attacker to perform information disclosure over a network by leveraging the flaw in the database access component.

Affected products:

Windows OLE DB

Source: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-78441

Related in this roundup: CVE-2026-78442.

CVE-2026-78446

A use-after-free vulnerability exists in the Windows Distributed File System (DFS) that allows a network-authenticated attacker to trigger a denial-of-service condition.

Affected products:

Windows Distributed File System

Source: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-78446

Related in this roundup: CVE-2026-69424.

CVE-2026-78449

The Windows Reliable Multicast Transport Driver (RMCAST) is susceptible to a use-after-free vulnerability that allows an unauthenticated remote attacker to achieve remote code execution via network-based exploitation.

Affected products:

Windows Reliable Multicast Transport Driver (RMCAST)

Source: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-78449

Related in this roundup: CVE-2026-78450, CVE-2026-69530.

CVE-2026-78444

CVE-2026-78444 describes an untrusted pointer dereference vulnerability within the Windows Failover Cluster service. An unauthorized attacker can exploit this flaw to achieve remote code execution over a network, potentially compromising the integrity and availability of the clustering environment.

Affected products:

Windows Failover Cluster

Source: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-78444

Related in this roundup: CVE-2026-73010, CVE-2026-71338, CVE-2026-72989.

CVE-2026-78450

CVE-2026-78450 describes a use-after-free vulnerability in the Windows Reliable Multicast Transport Driver (RMCAST) that can be exploited by an unauthorized remote attacker to achieve arbitrary code execution via network-based vectors.

Affected products:

Windows Reliable Multicast Transport Driver

Source: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-78450

Related in this roundup: CVE-2026-78449, CVE-2026-69530.

CVE-2026-78447

CVE-2026-78447 is a heap-based buffer overflow vulnerability in the Windows Biometric Service that allows an already authorized local attacker to perform privilege escalation on the affected system.

Affected products:

Windows Biometric Service

Source: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-78447

Related in this roundup: CVE-2026-69293, CVE-2026-69298, CVE-2026-69323, CVE-2026-69583, CVE-2026-69589, CVE-2026-69580, CVE-2026-69476, CVE-2026-69787, CVE-2026-77489, CVE-2026-83955, CVE-2026-83986, CVE-2026-83969, CVE-2026-83988, CVE-2026-83979, CVE-2026-83974, CVE-2026-83975, CVE-2026-83976, CVE-2026-69727, CVE-2026-69826, CVE-2026-69738, CVE-2026-69773, CVE-2026-70573, CVE-2026-70572, CVE-2026-70581, CVE-2026-72941, CVE-2026-69352, CVE-2026-69489, CVE-2026-69593, CVE-2026-72995, CVE-2026-72988, CVE-2026-72990, CVE-2026-72991, CVE-2026-72992, CVE-2026-72993, CVE-2026-72994, CVE-2026-72996, CVE-2026-72997, CVE-2026-73002, CVE-2026-73020, CVE-2026-73000, CVE-2026-73001, CVE-2026-73021, CVE-2026-73015, CVE-2026-73011, CVE-2026-73008, CVE-2026-73007, CVE-2026-73026, CVE-2026-78448, CVE-2026-83971, CVE-2026-83954, CVE-2026-83967, CVE-2026-83970, CVE-2026-83972, CVE-2026-83968, CVE-2026-83973, CVE-2026-83981, CVE-2026-83977, CVE-2026-83978, CVE-2026-83982, CVE-2026-83980, CVE-2026-83987, CVE-2026-83983, CVE-2026-83985.

CVE-2026-78448

A heap-based buffer overflow vulnerability exists in the Windows Biometric Service, allowing a locally authenticated attacker to escalate their privileges to a higher level of access on the system.

Affected products:

Windows Biometric Service

Source: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-78448

Related in this roundup: CVE-2026-69293, CVE-2026-69298, CVE-2026-69323, CVE-2026-69583, CVE-2026-69589, CVE-2026-69580, CVE-2026-69476, CVE-2026-69787, CVE-2026-77489, CVE-2026-83955, CVE-2026-83986, CVE-2026-83969, CVE-2026-83988, CVE-2026-83979, CVE-2026-83974, CVE-2026-83975, CVE-2026-83976, CVE-2026-69727, CVE-2026-69826, CVE-2026-69738, CVE-2026-69773, CVE-2026-70573, CVE-2026-70572, CVE-2026-70581, CVE-2026-72941, CVE-2026-69352, CVE-2026-69489, CVE-2026-69593, CVE-2026-72995, CVE-2026-72988, CVE-2026-72990, CVE-2026-72991, CVE-2026-72992, CVE-2026-72993, CVE-2026-72994, CVE-2026-72996, CVE-2026-72997, CVE-2026-73002, CVE-2026-73020, CVE-2026-73000, CVE-2026-73001, CVE-2026-73021, CVE-2026-73015, CVE-2026-73011, CVE-2026-73008, CVE-2026-73007, CVE-2026-73026, CVE-2026-78447, CVE-2026-83971, CVE-2026-83954, CVE-2026-83967, CVE-2026-83970, CVE-2026-83972, CVE-2026-83968, CVE-2026-83973, CVE-2026-83981, CVE-2026-83977, CVE-2026-83978, CVE-2026-83982, CVE-2026-83980, CVE-2026-83987, CVE-2026-83983, CVE-2026-83985.

CVE-2026-78451

CVE-2026-78451 describes an untrusted pointer dereference vulnerability within the Microsoft Windows SCSI Class System File. Successful exploitation of this flaw allows an attacker with physical access to the target system to achieve privilege escalation.

Affected products:

Windows

Source: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-78451

Related in this roundup: CVE-2026-81963, CVE-2026-85880, CVE-2026-69496, CVE-2026-69586, CVE-2026-69768, CVE-2026-73025, CVE-2026-56172, CVE-2026-68832, CVE-2026-68834, CVE-2026-68838, CVE-2026-68841, CVE-2026-68875, CVE-2026-68877, CVE-2026-68880, CVE-2026-69265, CVE-2026-69270, CVE-2026-69274, CVE-2026-69275, CVE-2026-69280, CVE-2026-69283, CVE-2026-69284, CVE-2026-69289, CVE-2026-69296, CVE-2026-69300, CVE-2026-69301, CVE-2026-69307, CVE-2026-69312, CVE-2026-69314, CVE-2026-69332, CVE-2026-69333, CVE-2026-69335, CVE-2026-68833, CVE-2026-68851, CVE-2026-69366, CVE-2026-69337, CVE-2026-69347, CVE-2026-69379, CVE-2026-69390, CVE-2026-69401, CVE-2026-69413, CVE-2026-69420, CVE-2026-69429, CVE-2026-69448, CVE-2026-69455, CVE-2026-69532, CVE-2026-69472, CVE-2026-69479, CVE-2026-69531, CVE-2026-69517, CVE-2026-69505, CVE-2026-69504, CVE-2026-69527, CVE-2026-69549, CVE-2026-69588, CVE-2026-69609, CVE-2026-69648, CVE-2026-69689, CVE-2026-69790, CVE-2026-69638, CVE-2026-69859, CVE-2026-69717, CVE-2026-69711, CVE-2026-69875, CVE-2026-69889, CVE-2026-69757, CVE-2026-69741, CVE-2026-69762, CVE-2026-69744, CVE-2026-69832, CVE-2026-69691, CVE-2026-69808, CVE-2026-69775, CVE-2026-69822, CVE-2026-69770, CVE-2026-69676, CVE-2026-70289, CVE-2026-70563, CVE-2026-71329, CVE-2026-71332, CVE-2026-71350, CVE-2026-71348, CVE-2026-71345, CVE-2026-69469, CVE-2026-69501, CVE-2026-69548, CVE-2026-69846, CVE-2026-70283, CVE-2026-72981, CVE-2026-77491, CVE-2026-77492, CVE-2026-77503, CVE-2026-80093, CVE-2026-72949, CVE-2026-70019, CVE-2026-72940, CVE-2026-69573, CVE-2026-70290, CVE-2026-83991, CVE-2026-83999, CVE-2026-69321, CVE-2026-69316, CVE-2026-69340, CVE-2026-69348, CVE-2026-69350, CVE-2026-69353, CVE-2026-69357, CVE-2026-69393, CVE-2026-69410, CVE-2026-69421, CVE-2026-69428, CVE-2026-69425, CVE-2026-69427, CVE-2026-69434, CVE-2026-69456, CVE-2026-69459, CVE-2026-69478, CVE-2026-69561, CVE-2026-69512, CVE-2026-69498, CVE-2026-69571, CVE-2026-69535, CVE-2026-69538, CVE-2026-69591, CVE-2026-69566, CVE-2026-69567, CVE-2026-69584, CVE-2026-69617, CVE-2026-69630, CVE-2026-69610, CVE-2026-69881, CVE-2026-69680, CVE-2026-69619, CVE-2026-69685, CVE-2026-69643, CVE-2026-69687, CVE-2026-69791, CVE-2026-69707, CVE-2026-69652, CVE-2026-69834, CVE-2026-69709, CVE-2026-69844, CVE-2026-69814, CVE-2026-69731, CVE-2026-69706, CVE-2026-69779, CVE-2026-69895, CVE-2026-69792, CVE-2026-69853, CVE-2026-69761, CVE-2026-69785, CVE-2026-69818, CVE-2026-69786, CVE-2026-69874, CVE-2026-70565, CVE-2026-70574, CVE-2026-70569, CVE-2026-70575, CVE-2026-71349, CVE-2026-72927, CVE-2026-72952, CVE-2026-72942, CVE-2026-72966, CVE-2026-72967, CVE-2026-69426, CVE-2026-69564, CVE-2026-72985, CVE-2026-73019, CVE-2026-78452, CVE-2026-83940, CVE-2026-69598, CVE-2026-83995, CVE-2026-83501, CVE-2026-83498.

CVE-2026-78453

CVE-2026-78453 describes an integer underflow vulnerability within the Microsoft Windows SCSI Class System File. This flaw can be exploited by an unauthorized remote attacker to disclose sensitive information over a network, potentially facilitating further reconnaissance or exploitation.

Affected products:

Windows SCSI Class System File

Source: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-78453

CVE-2026-78455

CVE-2026-78455 is an out-of-bounds read vulnerability in the Xbox platform. An unauthorized attacker with physical access to the device can leverage this flaw to perform an information disclosure attack.

Affected products:

Xbox

Source: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-78455

CVE-2026-78452

CVE-2026-78452 is an information disclosure vulnerability in the Microsoft Windows SCSI Class System File. The flaw exists due to an out-of-bounds read, which can be exploited by an unauthorized attacker via a physical attack to access sensitive information.

Affected products:

Windows

Source: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-78452

Related in this roundup: CVE-2026-81963, CVE-2026-85880, CVE-2026-69496, CVE-2026-69586, CVE-2026-69768, CVE-2026-73025, CVE-2026-56172, CVE-2026-68832, CVE-2026-68834, CVE-2026-68838, CVE-2026-68841, CVE-2026-68875, CVE-2026-68877, CVE-2026-68880, CVE-2026-69265, CVE-2026-69270, CVE-2026-69274, CVE-2026-69275, CVE-2026-69280, CVE-2026-69283, CVE-2026-69284, CVE-2026-69289, CVE-2026-69296, CVE-2026-69300, CVE-2026-69301, CVE-2026-69307, CVE-2026-69312, CVE-2026-69314, CVE-2026-69332, CVE-2026-69333, CVE-2026-69335, CVE-2026-68833, CVE-2026-68851, CVE-2026-69366, CVE-2026-69337, CVE-2026-69347, CVE-2026-69379, CVE-2026-69390, CVE-2026-69401, CVE-2026-69413, CVE-2026-69420, CVE-2026-69429, CVE-2026-69448, CVE-2026-69455, CVE-2026-69532, CVE-2026-69472, CVE-2026-69479, CVE-2026-69531, CVE-2026-69517, CVE-2026-69505, CVE-2026-69504, CVE-2026-69527, CVE-2026-69549, CVE-2026-69588, CVE-2026-69609, CVE-2026-69648, CVE-2026-69689, CVE-2026-69790, CVE-2026-69638, CVE-2026-69859, CVE-2026-69717, CVE-2026-69711, CVE-2026-69875, CVE-2026-69889, CVE-2026-69757, CVE-2026-69741, CVE-2026-69762, CVE-2026-69744, CVE-2026-69832, CVE-2026-69691, CVE-2026-69808, CVE-2026-69775, CVE-2026-69822, CVE-2026-69770, CVE-2026-69676, CVE-2026-70289, CVE-2026-70563, CVE-2026-71329, CVE-2026-71332, CVE-2026-71350, CVE-2026-71348, CVE-2026-71345, CVE-2026-69469, CVE-2026-69501, CVE-2026-69548, CVE-2026-69846, CVE-2026-70283, CVE-2026-72981, CVE-2026-77491, CVE-2026-77492, CVE-2026-77503, CVE-2026-80093, CVE-2026-72949, CVE-2026-70019, CVE-2026-72940, CVE-2026-69573, CVE-2026-70290, CVE-2026-83991, CVE-2026-83999, CVE-2026-69321, CVE-2026-69316, CVE-2026-69340, CVE-2026-69348, CVE-2026-69350, CVE-2026-69353, CVE-2026-69357, CVE-2026-69393, CVE-2026-69410, CVE-2026-69421, CVE-2026-69428, CVE-2026-69425, CVE-2026-69427, CVE-2026-69434, CVE-2026-69456, CVE-2026-69459, CVE-2026-69478, CVE-2026-69561, CVE-2026-69512, CVE-2026-69498, CVE-2026-69571, CVE-2026-69535, CVE-2026-69538, CVE-2026-69591, CVE-2026-69566, CVE-2026-69567, CVE-2026-69584, CVE-2026-69617, CVE-2026-69630, CVE-2026-69610, CVE-2026-69881, CVE-2026-69680, CVE-2026-69619, CVE-2026-69685, CVE-2026-69643, CVE-2026-69687, CVE-2026-69791, CVE-2026-69707, CVE-2026-69652, CVE-2026-69834, CVE-2026-69709, CVE-2026-69844, CVE-2026-69814, CVE-2026-69731, CVE-2026-69706, CVE-2026-69779, CVE-2026-69895, CVE-2026-69792, CVE-2026-69853, CVE-2026-69761, CVE-2026-69785, CVE-2026-69818, CVE-2026-69786, CVE-2026-69874, CVE-2026-70565, CVE-2026-70574, CVE-2026-70569, CVE-2026-70575, CVE-2026-71349, CVE-2026-72927, CVE-2026-72952, CVE-2026-72942, CVE-2026-72966, CVE-2026-72967, CVE-2026-69426, CVE-2026-69564, CVE-2026-72985, CVE-2026-73019, CVE-2026-78451, CVE-2026-83940, CVE-2026-69598, CVE-2026-83995, CVE-2026-83501, CVE-2026-83498.

CVE-2026-78454

CVE-2026-78454 is an out-of-bounds read vulnerability in the Windows CD-ROM driver. An attacker with local authorization can exploit this flaw to perform unauthorized information disclosure on the host system.

Affected products:

Windows CD-ROM Driver

Source: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-78454

Related in this roundup: CVE-2026-78508.

CVE-2026-78456

CVE-2026-78456 is a heap-based buffer overflow vulnerability in Microsoft SQL Server that enables an authenticated attacker to execute arbitrary code over the network. The flaw resides within the server's memory management processes, allowing for potential remote code execution.

Affected products:

SQL Server

Source: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-78456

Related in this roundup: CVE-2026-65669, CVE-2026-47297, CVE-2026-66814, CVE-2026-66818, CVE-2026-66819, CVE-2026-66820, CVE-2026-67368, CVE-2026-67370, CVE-2026-67373, CVE-2026-67376, CVE-2026-67378, CVE-2026-67379, CVE-2026-67380, CVE-2026-67381, CVE-2026-67384, CVE-2026-67385, CVE-2026-67388, CVE-2026-67631, CVE-2026-67636, CVE-2026-67638, CVE-2026-67639, CVE-2026-67642, CVE-2026-67643, CVE-2026-68775, CVE-2026-68786, CVE-2026-68787, CVE-2026-77482, CVE-2026-67629, CVE-2026-67630, CVE-2026-67633, CVE-2026-68781, CVE-2026-68784, CVE-2026-68785, CVE-2026-67383, CVE-2026-67389, CVE-2026-73029, CVE-2026-66816, CVE-2026-67386, CVE-2026-67390, CVE-2026-67393, CVE-2026-67641, CVE-2026-67648, CVE-2026-68776, CVE-2026-68777, CVE-2026-68778, CVE-2026-68779, CVE-2026-68780, CVE-2026-73028, CVE-2026-77480, CVE-2026-77483, CVE-2026-77484, CVE-2026-77487, CVE-2026-77485, CVE-2026-77486, CVE-2026-77488, CVE-2026-69562, CVE-2026-67369, CVE-2026-67624, CVE-2026-67645, CVE-2026-77481.

CVE-2026-78457

A use-after-free vulnerability exists in the Windows Security Health Service that allows a locally authenticated attacker to elevate their privileges to a higher integrity level on an affected Windows system.

Affected products:

Windows Security Health Service

Source: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-78457

CVE-2026-78462

CVE-2026-78462 is a security feature bypass vulnerability in Visual Studio Code that allows an unauthorized attacker to leverage a user-controlled key to bypass security controls over a network.

Affected products:

Visual Studio Code

Source: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-78462

Related in this roundup: CVE-2026-81376, CVE-2026-70334, CVE-2026-78461, CVE-2026-81356, CVE-2026-81357, CVE-2026-81377, CVE-2026-81378, CVE-2026-81379, CVE-2026-81383.

CVE-2026-78464

The Windows MIDI Service Module contains a time-of-check time-of-use (TOCTOU) race condition that allows a locally authenticated attacker to elevate their privileges on an affected Windows system.

Affected products:

Windows MIDI Service Module

Source: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-78464

Related in this roundup: CVE-2026-69339, CVE-2026-68842, CVE-2026-69440, CVE-2026-69508, CVE-2026-69720.

CVE-2026-67369

An out-of-bounds read vulnerability in Microsoft SQL Server allows an authenticated attacker to disclose sensitive information over a network connection by reading memory outside the allocated buffer.

Affected products:

SQL Server

Source: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-67369

Related in this roundup: CVE-2026-65669, CVE-2026-47297, CVE-2026-66814, CVE-2026-66818, CVE-2026-66819, CVE-2026-66820, CVE-2026-67368, CVE-2026-67370, CVE-2026-67373, CVE-2026-67376, CVE-2026-67378, CVE-2026-67379, CVE-2026-67380, CVE-2026-67381, CVE-2026-67384, CVE-2026-67385, CVE-2026-67388, CVE-2026-67631, CVE-2026-67636, CVE-2026-67638, CVE-2026-67639, CVE-2026-67642, CVE-2026-67643, CVE-2026-68775, CVE-2026-68786, CVE-2026-68787, CVE-2026-77482, CVE-2026-67629, CVE-2026-67630, CVE-2026-67633, CVE-2026-68781, CVE-2026-68784, CVE-2026-68785, CVE-2026-67383, CVE-2026-67389, CVE-2026-73029, CVE-2026-66816, CVE-2026-67386, CVE-2026-67390, CVE-2026-67393, CVE-2026-67641, CVE-2026-67648, CVE-2026-68776, CVE-2026-68777, CVE-2026-68778, CVE-2026-68779, CVE-2026-68780, CVE-2026-73028, CVE-2026-77480, CVE-2026-77483, CVE-2026-77484, CVE-2026-77487, CVE-2026-77485, CVE-2026-77486, CVE-2026-77488, CVE-2026-69562, CVE-2026-78456, CVE-2026-67624, CVE-2026-67645, CVE-2026-77481.

CVE-2026-78507

CVE-2026-78507 describes a use-after-free vulnerability in Microsoft Office Word that enables a remote attacker to execute arbitrary code on a target system. Exploitation requires user interaction or access over a network, potentially leading to full system compromise.

Affected products:

Office Word

Source: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-78507

Related in this roundup: CVE-2026-69556, CVE-2026-69671, CVE-2026-69686, CVE-2026-69722, CVE-2026-69734, CVE-2026-69719, CVE-2026-69759, CVE-2026-69764, CVE-2026-78511, CVE-2026-78502, CVE-2026-78504, CVE-2026-78517, CVE-2026-68843, CVE-2026-69360, CVE-2026-72972, CVE-2026-72976, CVE-2026-77901, CVE-2026-77911, CVE-2026-78506, CVE-2026-78514, CVE-2026-78503, CVE-2026-78521, CVE-2026-78522, CVE-2026-78526, CVE-2026-80080, CVE-2026-83951, CVE-2026-83949.

CVE-2026-78506

CVE-2026-78506 describes an information disclosure vulnerability in Microsoft Office Word caused by improper null termination. An unauthorized attacker can exploit this flaw to disclose sensitive local information.

Affected products:

Office Word

Source: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-78506

Related in this roundup: CVE-2026-69556, CVE-2026-69671, CVE-2026-69686, CVE-2026-69722, CVE-2026-69734, CVE-2026-69719, CVE-2026-69759, CVE-2026-69764, CVE-2026-78511, CVE-2026-78502, CVE-2026-78504, CVE-2026-78517, CVE-2026-68843, CVE-2026-69360, CVE-2026-72972, CVE-2026-72976, CVE-2026-77901, CVE-2026-77911, CVE-2026-78507, CVE-2026-78514, CVE-2026-78503, CVE-2026-78521, CVE-2026-78522, CVE-2026-78526, CVE-2026-80080, CVE-2026-83951, CVE-2026-83949.

CVE-2026-78512

CVE-2026-78512 is a remote code execution vulnerability in Microsoft Office Word caused by a numeric truncation error. This vulnerability allows an unauthenticated, remote attacker to execute arbitrary code on the target system by exploiting the way the application processes malformed documents.

Affected products:

Office

Source: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-78512

Related in this roundup: CVE-2026-69285, CVE-2026-69739, CVE-2026-77504, CVE-2026-77898, CVE-2026-78439, CVE-2026-78505, CVE-2026-64918, CVE-2026-69442, CVE-2026-69626, CVE-2026-69632, CVE-2026-72938, CVE-2026-72973, CVE-2026-80079, CVE-2026-78524, CVE-2026-80078, CVE-2026-80076, CVE-2026-80087, CVE-2026-80085, CVE-2026-80088, CVE-2026-80091, CVE-2026-80089, CVE-2026-80090, CVE-2026-80082.

CVE-2026-78514

CVE-2026-78514 is a use-after-free vulnerability in Microsoft Office Word that enables a remote attacker to execute arbitrary code. The vulnerability is triggered over a network, potentially allowing for unauthenticated remote code execution.

Affected products:

Office Word

Source: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-78514

Related in this roundup: CVE-2026-69556, CVE-2026-69671, CVE-2026-69686, CVE-2026-69722, CVE-2026-69734, CVE-2026-69719, CVE-2026-69759, CVE-2026-69764, CVE-2026-78511, CVE-2026-78502, CVE-2026-78504, CVE-2026-78517, CVE-2026-68843, CVE-2026-69360, CVE-2026-72972, CVE-2026-72976, CVE-2026-77901, CVE-2026-77911, CVE-2026-78507, CVE-2026-78506, CVE-2026-78503, CVE-2026-78521, CVE-2026-78522, CVE-2026-78526, CVE-2026-80080, CVE-2026-83951, CVE-2026-83949.

CVE-2026-78503

CVE-2026-78503 is an out-of-bounds read vulnerability in Microsoft Office Word that enables an unauthenticated attacker to perform remote information disclosure over a network. Successful exploitation allows access to sensitive data that should be protected.

Affected products:

Office Word

Source: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-78503

Related in this roundup: CVE-2026-69556, CVE-2026-69671, CVE-2026-69686, CVE-2026-69722, CVE-2026-69734, CVE-2026-69719, CVE-2026-69759, CVE-2026-69764, CVE-2026-78511, CVE-2026-78502, CVE-2026-78504, CVE-2026-78517, CVE-2026-68843, CVE-2026-69360, CVE-2026-72972, CVE-2026-72976, CVE-2026-77901, CVE-2026-77911, CVE-2026-78507, CVE-2026-78506, CVE-2026-78514, CVE-2026-78521, CVE-2026-78522, CVE-2026-78526, CVE-2026-80080, CVE-2026-83951, CVE-2026-83949.

CVE-2026-78516

CVE-2026-78516 describes a buffer over-read vulnerability within Windows Storage that enables an unauthorized attacker with physical access to a targeted system to perform an information disclosure attack.

Affected products:

Windows Storage

Source: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-78516

Related in this roundup: CVE-2026-69328.

CVE-2026-67624

CVE-2026-67624 describes an out-of-bounds read vulnerability in Microsoft SQL Server that enables an authorized attacker to perform unauthorized information disclosure over the network.

Affected products:

SQL Server

Source: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-67624

Related in this roundup: CVE-2026-65669, CVE-2026-47297, CVE-2026-66814, CVE-2026-66818, CVE-2026-66819, CVE-2026-66820, CVE-2026-67368, CVE-2026-67370, CVE-2026-67373, CVE-2026-67376, CVE-2026-67378, CVE-2026-67379, CVE-2026-67380, CVE-2026-67381, CVE-2026-67384, CVE-2026-67385, CVE-2026-67388, CVE-2026-67631, CVE-2026-67636, CVE-2026-67638, CVE-2026-67639, CVE-2026-67642, CVE-2026-67643, CVE-2026-68775, CVE-2026-68786, CVE-2026-68787, CVE-2026-77482, CVE-2026-67629, CVE-2026-67630, CVE-2026-67633, CVE-2026-68781, CVE-2026-68784, CVE-2026-68785, CVE-2026-67383, CVE-2026-67389, CVE-2026-73029, CVE-2026-66816, CVE-2026-67386, CVE-2026-67390, CVE-2026-67393, CVE-2026-67641, CVE-2026-67648, CVE-2026-68776, CVE-2026-68777, CVE-2026-68778, CVE-2026-68779, CVE-2026-68780, CVE-2026-73028, CVE-2026-77480, CVE-2026-77483, CVE-2026-77484, CVE-2026-77487, CVE-2026-77485, CVE-2026-77486, CVE-2026-77488, CVE-2026-69562, CVE-2026-78456, CVE-2026-67369, CVE-2026-67645, CVE-2026-77481.

CVE-2026-67645

CVE-2026-67645 is an out-of-bounds read vulnerability in Microsoft SQL Server that allows an authenticated attacker to perform unauthorized information disclosure over a network. The flaw stems from improper memory handling, which could be exploited by an attacker with existing access to the server to read sensitive data.

Affected products:

SQL Server

Source: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-67645

Related in this roundup: CVE-2026-65669, CVE-2026-47297, CVE-2026-66814, CVE-2026-66818, CVE-2026-66819, CVE-2026-66820, CVE-2026-67368, CVE-2026-67370, CVE-2026-67373, CVE-2026-67376, CVE-2026-67378, CVE-2026-67379, CVE-2026-67380, CVE-2026-67381, CVE-2026-67384, CVE-2026-67385, CVE-2026-67388, CVE-2026-67631, CVE-2026-67636, CVE-2026-67638, CVE-2026-67639, CVE-2026-67642, CVE-2026-67643, CVE-2026-68775, CVE-2026-68786, CVE-2026-68787, CVE-2026-77482, CVE-2026-67629, CVE-2026-67630, CVE-2026-67633, CVE-2026-68781, CVE-2026-68784, CVE-2026-68785, CVE-2026-67383, CVE-2026-67389, CVE-2026-73029, CVE-2026-66816, CVE-2026-67386, CVE-2026-67390, CVE-2026-67393, CVE-2026-67641, CVE-2026-67648, CVE-2026-68776, CVE-2026-68777, CVE-2026-68778, CVE-2026-68779, CVE-2026-68780, CVE-2026-73028, CVE-2026-77480, CVE-2026-77483, CVE-2026-77484, CVE-2026-77487, CVE-2026-77485, CVE-2026-77486, CVE-2026-77488, CVE-2026-69562, CVE-2026-78456, CVE-2026-67369, CVE-2026-67624, CVE-2026-77481.

CVE-2026-77481

CVE-2026-77481 describes a heap-based buffer overflow vulnerability in Microsoft SQL Server that allows an authenticated attacker to achieve remote code execution over a network connection by leveraging flaws in memory management.

Affected products:

SQL Server

Source: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-77481

Related in this roundup: CVE-2026-65669, CVE-2026-47297, CVE-2026-66814, CVE-2026-66818, CVE-2026-66819, CVE-2026-66820, CVE-2026-67368, CVE-2026-67370, CVE-2026-67373, CVE-2026-67376, CVE-2026-67378, CVE-2026-67379, CVE-2026-67380, CVE-2026-67381, CVE-2026-67384, CVE-2026-67385, CVE-2026-67388, CVE-2026-67631, CVE-2026-67636, CVE-2026-67638, CVE-2026-67639, CVE-2026-67642, CVE-2026-67643, CVE-2026-68775, CVE-2026-68786, CVE-2026-68787, CVE-2026-77482, CVE-2026-67629, CVE-2026-67630, CVE-2026-67633, CVE-2026-68781, CVE-2026-68784, CVE-2026-68785, CVE-2026-67383, CVE-2026-67389, CVE-2026-73029, CVE-2026-66816, CVE-2026-67386, CVE-2026-67390, CVE-2026-67393, CVE-2026-67641, CVE-2026-67648, CVE-2026-68776, CVE-2026-68777, CVE-2026-68778, CVE-2026-68779, CVE-2026-68780, CVE-2026-73028, CVE-2026-77480, CVE-2026-77483, CVE-2026-77484, CVE-2026-77487, CVE-2026-77485, CVE-2026-77486, CVE-2026-77488, CVE-2026-69562, CVE-2026-78456, CVE-2026-67369, CVE-2026-67624, CVE-2026-67645.

CVE-2026-78519

A remote code execution vulnerability exists in Microsoft Office Outlook due to the use of an uninitialized resource. This flaw allows an unauthorized network-based attacker to execute arbitrary code on the target system.

Affected products:

Office Outlook

Source: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-78519

Related in this roundup: CVE-2026-69629, CVE-2026-80073, CVE-2026-78520, CVE-2026-80084, CVE-2026-78525.

CVE-2026-80079

CVE-2026-80079 is an out-of-bounds read vulnerability in Microsoft Office Word that enables an unauthorized remote attacker to disclose sensitive information over a network.

Affected products:

Office

Source: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-80079

Related in this roundup: CVE-2026-69285, CVE-2026-69739, CVE-2026-77504, CVE-2026-77898, CVE-2026-78439, CVE-2026-78505, CVE-2026-64918, CVE-2026-69442, CVE-2026-69626, CVE-2026-69632, CVE-2026-72938, CVE-2026-72973, CVE-2026-78512, CVE-2026-78524, CVE-2026-80078, CVE-2026-80076, CVE-2026-80087, CVE-2026-80085, CVE-2026-80088, CVE-2026-80091, CVE-2026-80089, CVE-2026-80090, CVE-2026-80082.

CVE-2026-78521

CVE-2026-78521 describes a heap-based buffer overflow vulnerability in Microsoft Office Word that enables a remote, unauthorized attacker to execute arbitrary code. The vulnerability allows for remote code execution via network-based vectors, requiring defensive monitoring for malformed document structures that trigger memory corruption.

Affected products:

Office Word

Source: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-78521

Related in this roundup: CVE-2026-69556, CVE-2026-69671, CVE-2026-69686, CVE-2026-69722, CVE-2026-69734, CVE-2026-69719, CVE-2026-69759, CVE-2026-69764, CVE-2026-78511, CVE-2026-78502, CVE-2026-78504, CVE-2026-78517, CVE-2026-68843, CVE-2026-69360, CVE-2026-72972, CVE-2026-72976, CVE-2026-77901, CVE-2026-77911, CVE-2026-78507, CVE-2026-78506, CVE-2026-78514, CVE-2026-78503, CVE-2026-78522, CVE-2026-78526, CVE-2026-80080, CVE-2026-83951, CVE-2026-83949.

CVE-2026-80073

CVE-2026-80073 is an out-of-bounds read vulnerability in Microsoft Office Outlook that enables an unauthorized attacker to perform information disclosure via network vectors.

Affected products:

Office Outlook

Source: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-80073

Related in this roundup: CVE-2026-69629, CVE-2026-78519, CVE-2026-78520, CVE-2026-80084, CVE-2026-78525.

CVE-2026-78522

CVE-2026-78522 is an out-of-bounds read vulnerability in Microsoft Office Word that enables an unauthorized attacker to perform information disclosure over a network. The vulnerability occurs due to improper memory handling, which may allow attackers to access sensitive data residing in memory without requiring specific user interaction.

Affected products:

Office Word

Source: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-78522

Related in this roundup: CVE-2026-69556, CVE-2026-69671, CVE-2026-69686, CVE-2026-69722, CVE-2026-69734, CVE-2026-69719, CVE-2026-69759, CVE-2026-69764, CVE-2026-78511, CVE-2026-78502, CVE-2026-78504, CVE-2026-78517, CVE-2026-68843, CVE-2026-69360, CVE-2026-72972, CVE-2026-72976, CVE-2026-77901, CVE-2026-77911, CVE-2026-78507, CVE-2026-78506, CVE-2026-78514, CVE-2026-78503, CVE-2026-78521, CVE-2026-78526, CVE-2026-80080, CVE-2026-83951, CVE-2026-83949.

CVE-2026-78520

CVE-2026-78520 is an out-of-bounds read vulnerability in Microsoft Office Outlook that can be leveraged by a remote, unauthorized attacker to achieve code execution over a network.

Affected products:

Office Outlook

Source: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-78520

Related in this roundup: CVE-2026-69629, CVE-2026-78519, CVE-2026-80073, CVE-2026-80084, CVE-2026-78525.

CVE-2026-78524

CVE-2026-78524 is an out-of-bounds write vulnerability in Microsoft Office that enables an unauthorized remote attacker to achieve arbitrary code execution. This vulnerability is triggered via network-based vectors and poses a critical risk to users of the software suite.

Affected products:

Office

Source: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-78524

Related in this roundup: CVE-2026-69285, CVE-2026-69739, CVE-2026-77504, CVE-2026-77898, CVE-2026-78439, CVE-2026-78505, CVE-2026-64918, CVE-2026-69442, CVE-2026-69626, CVE-2026-69632, CVE-2026-72938, CVE-2026-72973, CVE-2026-78512, CVE-2026-80079, CVE-2026-80078, CVE-2026-80076, CVE-2026-80087, CVE-2026-80085, CVE-2026-80088, CVE-2026-80091, CVE-2026-80089, CVE-2026-80090, CVE-2026-80082.

CVE-2026-80078

CVE-2026-80078 is an out-of-bounds read vulnerability in Microsoft Office that enables an unauthorized attacker to disclose sensitive information over a network. Detection efforts should focus on identifying abnormal network traffic patterns or unexpected memory access behavior associated with Microsoft Office processes.

Affected products:

Office

Source: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-80078

Related in this roundup: CVE-2026-69285, CVE-2026-69739, CVE-2026-77504, CVE-2026-77898, CVE-2026-78439, CVE-2026-78505, CVE-2026-64918, CVE-2026-69442, CVE-2026-69626, CVE-2026-69632, CVE-2026-72938, CVE-2026-72973, CVE-2026-78512, CVE-2026-80079, CVE-2026-78524, CVE-2026-80076, CVE-2026-80087, CVE-2026-80085, CVE-2026-80088, CVE-2026-80091, CVE-2026-80089, CVE-2026-80090, CVE-2026-80082.

CVE-2026-80076

CVE-2026-80076 describes an out-of-bounds read vulnerability in Microsoft Office that enables an unauthorized attacker to perform information disclosure over a network. The vulnerability exists within the application's processing logic, allowing sensitive data exposure without requiring specialized user interaction.

Affected products:

Office

Source: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-80076

Related in this roundup: CVE-2026-69285, CVE-2026-69739, CVE-2026-77504, CVE-2026-77898, CVE-2026-78439, CVE-2026-78505, CVE-2026-64918, CVE-2026-69442, CVE-2026-69626, CVE-2026-69632, CVE-2026-72938, CVE-2026-72973, CVE-2026-78512, CVE-2026-80079, CVE-2026-78524, CVE-2026-80078, CVE-2026-80087, CVE-2026-80085, CVE-2026-80088, CVE-2026-80091, CVE-2026-80089, CVE-2026-80090, CVE-2026-80082.

CVE-2026-78526

CVE-2026-78526 is a heap-based buffer overflow vulnerability in Microsoft Office Word that enables an unauthorized remote attacker to execute arbitrary code. The vulnerability occurs during the processing of malicious document files, allowing for potential system compromise.

Affected products:

Office Word

Source: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-78526

Related in this roundup: CVE-2026-69556, CVE-2026-69671, CVE-2026-69686, CVE-2026-69722, CVE-2026-69734, CVE-2026-69719, CVE-2026-69759, CVE-2026-69764, CVE-2026-78511, CVE-2026-78502, CVE-2026-78504, CVE-2026-78517, CVE-2026-68843, CVE-2026-69360, CVE-2026-72972, CVE-2026-72976, CVE-2026-77901, CVE-2026-77911, CVE-2026-78507, CVE-2026-78506, CVE-2026-78514, CVE-2026-78503, CVE-2026-78521, CVE-2026-78522, CVE-2026-80080, CVE-2026-83951, CVE-2026-83949.

CVE-2026-80084

CVE-2026-80084 describes an out-of-bounds read vulnerability in Microsoft Office Outlook that can be exploited by an unauthorized attacker to disclose sensitive information over a network.

Affected products:

Office Outlook

Source: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-80084

Related in this roundup: CVE-2026-69629, CVE-2026-78519, CVE-2026-80073, CVE-2026-78520, CVE-2026-78525.

CVE-2026-78525

A use-after-free vulnerability exists in Microsoft Office Outlook that allows a remote, unauthenticated attacker to achieve remote code execution via network-based vectors.

Affected products:

Office Outlook

Source: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-78525

Related in this roundup: CVE-2026-69629, CVE-2026-78519, CVE-2026-80073, CVE-2026-78520, CVE-2026-80084.

CVE-2026-80086

CVE-2026-80086 is an out-of-bounds read vulnerability in Microsoft PowerPoint that enables an unauthorized remote attacker to disclose sensitive information over a network. The vulnerability involves improper handling of memory boundaries during document processing.

Affected products:

PowerPoint

Source: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-80086

Related in this roundup: CVE-2026-69767, CVE-2026-69797, CVE-2026-78513, CVE-2026-72975, CVE-2026-80081.

CVE-2026-80080

A double free vulnerability in Microsoft Office Word enables a remote, unauthorized attacker to execute arbitrary code on a target system. This vulnerability can be triggered over a network, potentially through malicious document delivery.

Affected products:

Office Word

Source: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-80080

Related in this roundup: CVE-2026-69556, CVE-2026-69671, CVE-2026-69686, CVE-2026-69722, CVE-2026-69734, CVE-2026-69719, CVE-2026-69759, CVE-2026-69764, CVE-2026-78511, CVE-2026-78502, CVE-2026-78504, CVE-2026-78517, CVE-2026-68843, CVE-2026-69360, CVE-2026-72972, CVE-2026-72976, CVE-2026-77901, CVE-2026-77911, CVE-2026-78507, CVE-2026-78506, CVE-2026-78514, CVE-2026-78503, CVE-2026-78521, CVE-2026-78522, CVE-2026-78526, CVE-2026-83951, CVE-2026-83949.

CVE-2026-80087

CVE-2026-80087 is a heap-based buffer overflow vulnerability in Microsoft Office that enables an unauthenticated attacker to perform remote information disclosure over a network.

Affected products:

Office

Source: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-80087

Related in this roundup: CVE-2026-69285, CVE-2026-69739, CVE-2026-77504, CVE-2026-77898, CVE-2026-78439, CVE-2026-78505, CVE-2026-64918, CVE-2026-69442, CVE-2026-69626, CVE-2026-69632, CVE-2026-72938, CVE-2026-72973, CVE-2026-78512, CVE-2026-80079, CVE-2026-78524, CVE-2026-80078, CVE-2026-80076, CVE-2026-80085, CVE-2026-80088, CVE-2026-80091, CVE-2026-80089, CVE-2026-80090, CVE-2026-80082.

CVE-2026-80085

CVE-2026-80085 is a heap-based buffer overflow vulnerability in Microsoft Office Word that enables a remote attacker to achieve code execution over a network by leveraging a maliciously crafted document.

Affected products:

Office

Source: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-80085

Related in this roundup: CVE-2026-69285, CVE-2026-69739, CVE-2026-77504, CVE-2026-77898, CVE-2026-78439, CVE-2026-78505, CVE-2026-64918, CVE-2026-69442, CVE-2026-69626, CVE-2026-69632, CVE-2026-72938, CVE-2026-72973, CVE-2026-78512, CVE-2026-80079, CVE-2026-78524, CVE-2026-80078, CVE-2026-80076, CVE-2026-80087, CVE-2026-80088, CVE-2026-80091, CVE-2026-80089, CVE-2026-80090, CVE-2026-80082.

CVE-2026-80088

CVE-2026-80088 is an out-of-bounds read vulnerability in Microsoft Office Word that enables an unauthorized remote attacker to disclose sensitive information over a network.

Affected products:

Office

Source: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-80088

Related in this roundup: CVE-2026-69285, CVE-2026-69739, CVE-2026-77504, CVE-2026-77898, CVE-2026-78439, CVE-2026-78505, CVE-2026-64918, CVE-2026-69442, CVE-2026-69626, CVE-2026-69632, CVE-2026-72938, CVE-2026-72973, CVE-2026-78512, CVE-2026-80079, CVE-2026-78524, CVE-2026-80078, CVE-2026-80076, CVE-2026-80087, CVE-2026-80085, CVE-2026-80091, CVE-2026-80089, CVE-2026-80090, CVE-2026-80082.

CVE-2026-80091

CVE-2026-80091 describes an information disclosure vulnerability in Microsoft Office resulting from the use of an uninitialized resource. An unauthenticated attacker can exploit this via network vectors to gain access to sensitive information without requiring elevated privileges.

Affected products:

Office

Source: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-80091

Related in this roundup: CVE-2026-69285, CVE-2026-69739, CVE-2026-77504, CVE-2026-77898, CVE-2026-78439, CVE-2026-78505, CVE-2026-64918, CVE-2026-69442, CVE-2026-69626, CVE-2026-69632, CVE-2026-72938, CVE-2026-72973, CVE-2026-78512, CVE-2026-80079, CVE-2026-78524, CVE-2026-80078, CVE-2026-80076, CVE-2026-80087, CVE-2026-80085, CVE-2026-80088, CVE-2026-80089, CVE-2026-80090, CVE-2026-80082.

CVE-2026-80089

CVE-2026-80089 is an out-of-bounds read vulnerability in Microsoft Office that allows an unauthorized remote attacker to disclose sensitive information from the application's memory space over a network.

Affected products:

Office

Source: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-80089

Related in this roundup: CVE-2026-69285, CVE-2026-69739, CVE-2026-77504, CVE-2026-77898, CVE-2026-78439, CVE-2026-78505, CVE-2026-64918, CVE-2026-69442, CVE-2026-69626, CVE-2026-69632, CVE-2026-72938, CVE-2026-72973, CVE-2026-78512, CVE-2026-80079, CVE-2026-78524, CVE-2026-80078, CVE-2026-80076, CVE-2026-80087, CVE-2026-80085, CVE-2026-80088, CVE-2026-80091, CVE-2026-80090, CVE-2026-80082.

CVE-2026-80090

CVE-2026-80090 describes an out-of-bounds read vulnerability in Microsoft Office Word that enables an unauthorized remote attacker to disclose sensitive information from the application's memory space over a network connection.

Affected products:

Office

Source: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-80090

Related in this roundup: CVE-2026-69285, CVE-2026-69739, CVE-2026-77504, CVE-2026-77898, CVE-2026-78439, CVE-2026-78505, CVE-2026-64918, CVE-2026-69442, CVE-2026-69626, CVE-2026-69632, CVE-2026-72938, CVE-2026-72973, CVE-2026-78512, CVE-2026-80079, CVE-2026-78524, CVE-2026-80078, CVE-2026-80076, CVE-2026-80087, CVE-2026-80085, CVE-2026-80088, CVE-2026-80091, CVE-2026-80089, CVE-2026-80082.

CVE-2026-80081

CVE-2026-80081 describes a use-after-free vulnerability in Microsoft PowerPoint that enables a remote attacker to achieve code execution over a network. Detection efforts should focus on monitoring for anomalous file handling or unexpected process spawns originating from PowerPoint instances.

Affected products:

PowerPoint

Source: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-80081

Related in this roundup: CVE-2026-69767, CVE-2026-69797, CVE-2026-78513, CVE-2026-72975, CVE-2026-80086.

CVE-2026-80082

CVE-2026-80082 is an out-of-bounds read vulnerability in Microsoft Office that enables an unauthorized remote attacker to disclose sensitive information over a network. Detection efforts should focus on identifying abnormal network traffic patterns or memory access anomalies originating from Office applications.

Affected products:

Office

Source: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-80082

Related in this roundup: CVE-2026-69285, CVE-2026-69739, CVE-2026-77504, CVE-2026-77898, CVE-2026-78439, CVE-2026-78505, CVE-2026-64918, CVE-2026-69442, CVE-2026-69626, CVE-2026-69632, CVE-2026-72938, CVE-2026-72973, CVE-2026-78512, CVE-2026-80079, CVE-2026-78524, CVE-2026-80078, CVE-2026-80076, CVE-2026-80087, CVE-2026-80085, CVE-2026-80088, CVE-2026-80091, CVE-2026-80089, CVE-2026-80090.

CVE-2026-80096

CVE-2026-80096 is an elevation of privilege vulnerability in Windows Remote Desktop Services caused by an out-of-bounds read. An authenticated attacker can exploit this over the network to gain elevated privileges on the target system.

Affected products:

Windows Remote Desktop Services

Source: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-80096

Related in this roundup: CVE-2026-69475.

CVE-2026-81352

CVE-2026-81352 is a heap-based buffer overflow vulnerability in the Microsoft Windows Codecs Library, which enables an unauthenticated remote attacker to achieve remote code execution via a network vector.

Affected products:

Windows Codecs Library

Source: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-81352

Related in this roundup: CVE-2026-58599, CVE-2026-58600.

CVE-2026-81353

CVE-2026-81353 is a heap-based buffer overflow vulnerability within the Microsoft Windows Codecs Library affecting HEIF Image Extensions. A local, unauthorized attacker can exploit this flaw to achieve remote code execution on the target system by tricking a user into opening a maliciously crafted image file.

Affected products:

HEIF Image Extensions
Windows Codecs Library

Source: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-81353

CVE-2026-81354

CVE-2026-81354 is a heap-based buffer overflow vulnerability in Windows Hello that allows an authenticated attacker to perform local privilege escalation on the affected system.

Affected products:

Windows Hello

Source: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-81354

Related in this roundup: CVE-2026-69740, CVE-2026-72980, CVE-2026-69799, CVE-2026-69710, CVE-2026-69725, CVE-2026-69864, CVE-2026-69820, CVE-2026-69784.

CVE-2026-81383

CVE-2026-81383 is an information disclosure vulnerability in Visual Studio Code resulting from the incorrect resolution of names or references. An unauthorized attacker can exploit this flaw to gain access to sensitive information over a network connection.

Affected products:

Visual Studio Code

Source: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-81383

Related in this roundup: CVE-2026-81376, CVE-2026-70334, CVE-2026-78461, CVE-2026-81356, CVE-2026-81357, CVE-2026-81377, CVE-2026-81378, CVE-2026-81379, CVE-2026-78462.

CVE-2026-81385

Microsoft Office Publisher is vulnerable to a remote code execution vulnerability caused by the deserialization of untrusted data, which can be exploited by an unauthorized attacker over a network.

Affected products:

Office Publisher

Source: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-81385

Related in this roundup: CVE-2026-69742.

CVE-2026-81398

CVE-2026-81398 is a heap-based buffer overflow vulnerability in Microsoft Excel that can be leveraged by an unauthorized attacker to achieve remote code execution through the processing of a specially crafted file.

Affected products:

Excel

Source: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-81398

Related in this roundup: CVE-2026-78515, CVE-2026-81386, CVE-2026-81947, CVE-2026-81387, CVE-2026-81954, CVE-2026-81390, CVE-2026-81399, CVE-2026-81391, CVE-2026-81401, CVE-2026-81958, CVE-2026-81396, CVE-2026-81392, CVE-2026-81397, CVE-2026-81956, CVE-2026-81393, CVE-2026-81400, CVE-2026-81389, CVE-2026-81394, CVE-2026-81960, CVE-2026-81395, CVE-2026-81957, CVE-2026-81388, CVE-2026-81951, CVE-2026-81959, CVE-2026-81953, CVE-2026-81949, CVE-2026-81950, CVE-2026-81948, CVE-2026-85875.

CVE-2026-81386

CVE-2026-81386 is a heap-based buffer overflow vulnerability in Microsoft Excel that allows an unauthorized attacker to achieve remote code execution. Detection engineers should monitor for anomalous process creation or crashes originating from the Excel application while parsing untrusted spreadsheet files.

Affected products:

Excel

Source: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-81386

Related in this roundup: CVE-2026-78515, CVE-2026-81398, CVE-2026-81947, CVE-2026-81387, CVE-2026-81954, CVE-2026-81390, CVE-2026-81399, CVE-2026-81391, CVE-2026-81401, CVE-2026-81958, CVE-2026-81396, CVE-2026-81392, CVE-2026-81397, CVE-2026-81956, CVE-2026-81393, CVE-2026-81400, CVE-2026-81389, CVE-2026-81394, CVE-2026-81960, CVE-2026-81395, CVE-2026-81957, CVE-2026-81388, CVE-2026-81951, CVE-2026-81959, CVE-2026-81953, CVE-2026-81949, CVE-2026-81950, CVE-2026-81948, CVE-2026-85875.

CVE-2026-81947

CVE-2026-81947 is a heap-based buffer overflow vulnerability in Microsoft Excel that allows an unauthorized attacker to achieve remote code execution. The vulnerability is triggered when the application processes malicious input, leading to memory corruption.

Affected products:

Excel

Source: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-81947

Related in this roundup: CVE-2026-78515, CVE-2026-81398, CVE-2026-81386, CVE-2026-81387, CVE-2026-81954, CVE-2026-81390, CVE-2026-81399, CVE-2026-81391, CVE-2026-81401, CVE-2026-81958, CVE-2026-81396, CVE-2026-81392, CVE-2026-81397, CVE-2026-81956, CVE-2026-81393, CVE-2026-81400, CVE-2026-81389, CVE-2026-81394, CVE-2026-81960, CVE-2026-81395, CVE-2026-81957, CVE-2026-81388, CVE-2026-81951, CVE-2026-81959, CVE-2026-81953, CVE-2026-81949, CVE-2026-81950, CVE-2026-81948, CVE-2026-85875.

CVE-2026-81387

CVE-2026-81387 describes an information disclosure vulnerability in Microsoft Excel. The vulnerability allows an unauthorized attacker to gain access to sensitive system information through the application's processing of files, potentially leading to unauthorized data exposure.

Affected products:

Excel

Source: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-81387

Related in this roundup: CVE-2026-78515, CVE-2026-81398, CVE-2026-81386, CVE-2026-81947, CVE-2026-81954, CVE-2026-81390, CVE-2026-81399, CVE-2026-81391, CVE-2026-81401, CVE-2026-81958, CVE-2026-81396, CVE-2026-81392, CVE-2026-81397, CVE-2026-81956, CVE-2026-81393, CVE-2026-81400, CVE-2026-81389, CVE-2026-81394, CVE-2026-81960, CVE-2026-81395, CVE-2026-81957, CVE-2026-81388, CVE-2026-81951, CVE-2026-81959, CVE-2026-81953, CVE-2026-81949, CVE-2026-81950, CVE-2026-81948, CVE-2026-85875.

CVE-2026-81954

CVE-2026-81954 is a remote code execution vulnerability in Microsoft Excel caused by a use-after-free flaw. An unauthorized attacker can exploit this vulnerability to execute arbitrary code locally on the victim's machine.

Affected products:

Excel

Source: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-81954

Related in this roundup: CVE-2026-78515, CVE-2026-81398, CVE-2026-81386, CVE-2026-81947, CVE-2026-81387, CVE-2026-81390, CVE-2026-81399, CVE-2026-81391, CVE-2026-81401, CVE-2026-81958, CVE-2026-81396, CVE-2026-81392, CVE-2026-81397, CVE-2026-81956, CVE-2026-81393, CVE-2026-81400, CVE-2026-81389, CVE-2026-81394, CVE-2026-81960, CVE-2026-81395, CVE-2026-81957, CVE-2026-81388, CVE-2026-81951, CVE-2026-81959, CVE-2026-81953, CVE-2026-81949, CVE-2026-81950, CVE-2026-81948, CVE-2026-85875.

CVE-2026-81390

CVE-2026-81390 describes an out-of-bounds read vulnerability in Microsoft Excel that allows an attacker to disclose sensitive information locally. This flaw occurs during the processing of specially crafted files, potentially allowing an attacker to read memory contents when a user opens a malicious document.

Affected products:

Excel

Source: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-81390

Related in this roundup: CVE-2026-78515, CVE-2026-81398, CVE-2026-81386, CVE-2026-81947, CVE-2026-81387, CVE-2026-81954, CVE-2026-81399, CVE-2026-81391, CVE-2026-81401, CVE-2026-81958, CVE-2026-81396, CVE-2026-81392, CVE-2026-81397, CVE-2026-81956, CVE-2026-81393, CVE-2026-81400, CVE-2026-81389, CVE-2026-81394, CVE-2026-81960, CVE-2026-81395, CVE-2026-81957, CVE-2026-81388, CVE-2026-81951, CVE-2026-81959, CVE-2026-81953, CVE-2026-81949, CVE-2026-81950, CVE-2026-81948, CVE-2026-85875.

CVE-2026-81399

A buffer over-read vulnerability exists in Microsoft Excel that allows an attacker to perform unauthorized information disclosure locally on the affected system.

Affected products:

Excel

Source: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-81399

Related in this roundup: CVE-2026-78515, CVE-2026-81398, CVE-2026-81386, CVE-2026-81947, CVE-2026-81387, CVE-2026-81954, CVE-2026-81390, CVE-2026-81391, CVE-2026-81401, CVE-2026-81958, CVE-2026-81396, CVE-2026-81392, CVE-2026-81397, CVE-2026-81956, CVE-2026-81393, CVE-2026-81400, CVE-2026-81389, CVE-2026-81394, CVE-2026-81960, CVE-2026-81395, CVE-2026-81957, CVE-2026-81388, CVE-2026-81951, CVE-2026-81959, CVE-2026-81953, CVE-2026-81949, CVE-2026-81950, CVE-2026-81948, CVE-2026-85875.

CVE-2026-81391

CVE-2026-81391 is an information disclosure vulnerability in Microsoft Excel caused by the use of an uninitialized resource. An unauthorized attacker can exploit this flaw to access sensitive information locally, typically requiring a user to open a specially crafted malicious file.

Affected products:

Excel

Source: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-81391

Related in this roundup: CVE-2026-78515, CVE-2026-81398, CVE-2026-81386, CVE-2026-81947, CVE-2026-81387, CVE-2026-81954, CVE-2026-81390, CVE-2026-81399, CVE-2026-81401, CVE-2026-81958, CVE-2026-81396, CVE-2026-81392, CVE-2026-81397, CVE-2026-81956, CVE-2026-81393, CVE-2026-81400, CVE-2026-81389, CVE-2026-81394, CVE-2026-81960, CVE-2026-81395, CVE-2026-81957, CVE-2026-81388, CVE-2026-81951, CVE-2026-81959, CVE-2026-81953, CVE-2026-81949, CVE-2026-81950, CVE-2026-81948, CVE-2026-85875.

CVE-2026-81401

CVE-2026-81401 is a type confusion vulnerability in Microsoft Excel that allows an unauthorized attacker to perform local information disclosure. This vulnerability occurs when the application incorrectly handles resource types, potentially leading to unauthorized access to sensitive data within the user's environment.

Affected products:

Excel

Source: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-81401

Related in this roundup: CVE-2026-78515, CVE-2026-81398, CVE-2026-81386, CVE-2026-81947, CVE-2026-81387, CVE-2026-81954, CVE-2026-81390, CVE-2026-81399, CVE-2026-81391, CVE-2026-81958, CVE-2026-81396, CVE-2026-81392, CVE-2026-81397, CVE-2026-81956, CVE-2026-81393, CVE-2026-81400, CVE-2026-81389, CVE-2026-81394, CVE-2026-81960, CVE-2026-81395, CVE-2026-81957, CVE-2026-81388, CVE-2026-81951, CVE-2026-81959, CVE-2026-81953, CVE-2026-81949, CVE-2026-81950, CVE-2026-81948, CVE-2026-85875.

CVE-2026-81958

CVE-2026-81958 is an information disclosure vulnerability in Microsoft Excel caused by the use of an uninitialized resource. An attacker can exploit this flaw to disclose sensitive local information.

Affected products:

Excel

Source: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-81958

Related in this roundup: CVE-2026-78515, CVE-2026-81398, CVE-2026-81386, CVE-2026-81947, CVE-2026-81387, CVE-2026-81954, CVE-2026-81390, CVE-2026-81399, CVE-2026-81391, CVE-2026-81401, CVE-2026-81396, CVE-2026-81392, CVE-2026-81397, CVE-2026-81956, CVE-2026-81393, CVE-2026-81400, CVE-2026-81389, CVE-2026-81394, CVE-2026-81960, CVE-2026-81395, CVE-2026-81957, CVE-2026-81388, CVE-2026-81951, CVE-2026-81959, CVE-2026-81953, CVE-2026-81949, CVE-2026-81950, CVE-2026-81948, CVE-2026-85875.

CVE-2026-81396

A stack-based buffer overflow vulnerability in Microsoft Excel allows an unauthorized attacker to achieve remote code execution. This vulnerability is triggered when a user opens a specially crafted file, leading to memory corruption that can be leveraged for arbitrary code execution within the context of the current user.

Affected products:

Excel

Source: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-81396

Related in this roundup: CVE-2026-78515, CVE-2026-81398, CVE-2026-81386, CVE-2026-81947, CVE-2026-81387, CVE-2026-81954, CVE-2026-81390, CVE-2026-81399, CVE-2026-81391, CVE-2026-81401, CVE-2026-81958, CVE-2026-81392, CVE-2026-81397, CVE-2026-81956, CVE-2026-81393, CVE-2026-81400, CVE-2026-81389, CVE-2026-81394, CVE-2026-81960, CVE-2026-81395, CVE-2026-81957, CVE-2026-81388, CVE-2026-81951, CVE-2026-81959, CVE-2026-81953, CVE-2026-81949, CVE-2026-81950, CVE-2026-81948, CVE-2026-85875.

CVE-2026-81392

Microsoft Excel is susceptible to an out-of-bounds read vulnerability that allows a local unauthorized attacker to disclose sensitive information by exploiting the way the application processes data.

Affected products:

Excel

Source: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-81392

Related in this roundup: CVE-2026-78515, CVE-2026-81398, CVE-2026-81386, CVE-2026-81947, CVE-2026-81387, CVE-2026-81954, CVE-2026-81390, CVE-2026-81399, CVE-2026-81391, CVE-2026-81401, CVE-2026-81958, CVE-2026-81396, CVE-2026-81397, CVE-2026-81956, CVE-2026-81393, CVE-2026-81400, CVE-2026-81389, CVE-2026-81394, CVE-2026-81960, CVE-2026-81395, CVE-2026-81957, CVE-2026-81388, CVE-2026-81951, CVE-2026-81959, CVE-2026-81953, CVE-2026-81949, CVE-2026-81950, CVE-2026-81948, CVE-2026-85875.

CVE-2026-81397

CVE-2026-81397 is a heap-based buffer overflow vulnerability in Microsoft Excel that allows an unauthorized attacker to achieve remote code execution. The vulnerability is triggered during the processing of malformed files, enabling arbitrary code execution on the host system.

Affected products:

Excel

Source: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-81397

Related in this roundup: CVE-2026-78515, CVE-2026-81398, CVE-2026-81386, CVE-2026-81947, CVE-2026-81387, CVE-2026-81954, CVE-2026-81390, CVE-2026-81399, CVE-2026-81391, CVE-2026-81401, CVE-2026-81958, CVE-2026-81396, CVE-2026-81392, CVE-2026-81956, CVE-2026-81393, CVE-2026-81400, CVE-2026-81389, CVE-2026-81394, CVE-2026-81960, CVE-2026-81395, CVE-2026-81957, CVE-2026-81388, CVE-2026-81951, CVE-2026-81959, CVE-2026-81953, CVE-2026-81949, CVE-2026-81950, CVE-2026-81948, CVE-2026-85875.

CVE-2026-81956

CVE-2026-81956 is an out-of-bounds read vulnerability in Microsoft Excel that can be exploited by an unauthorized attacker to achieve remote code execution, typically by inducing a user to open a specially crafted malicious file.

Affected products:

Excel

Source: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-81956

Related in this roundup: CVE-2026-78515, CVE-2026-81398, CVE-2026-81386, CVE-2026-81947, CVE-2026-81387, CVE-2026-81954, CVE-2026-81390, CVE-2026-81399, CVE-2026-81391, CVE-2026-81401, CVE-2026-81958, CVE-2026-81396, CVE-2026-81392, CVE-2026-81397, CVE-2026-81393, CVE-2026-81400, CVE-2026-81389, CVE-2026-81394, CVE-2026-81960, CVE-2026-81395, CVE-2026-81957, CVE-2026-81388, CVE-2026-81951, CVE-2026-81959, CVE-2026-81953, CVE-2026-81949, CVE-2026-81950, CVE-2026-81948, CVE-2026-85875.

CVE-2026-81393

An out-of-bounds read vulnerability in Microsoft Excel allows an unauthorized local attacker to disclose sensitive information by exploiting improper memory handling.

Affected products:

Excel

Source: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-81393

Related in this roundup: CVE-2026-78515, CVE-2026-81398, CVE-2026-81386, CVE-2026-81947, CVE-2026-81387, CVE-2026-81954, CVE-2026-81390, CVE-2026-81399, CVE-2026-81391, CVE-2026-81401, CVE-2026-81958, CVE-2026-81396, CVE-2026-81392, CVE-2026-81397, CVE-2026-81956, CVE-2026-81400, CVE-2026-81389, CVE-2026-81394, CVE-2026-81960, CVE-2026-81395, CVE-2026-81957, CVE-2026-81388, CVE-2026-81951, CVE-2026-81959, CVE-2026-81953, CVE-2026-81949, CVE-2026-81950, CVE-2026-81948, CVE-2026-85875.

CVE-2026-81400

CVE-2026-81400 is an out-of-bounds read vulnerability in Microsoft Excel that allows a local, unauthorized attacker to perform information disclosure. Detection engineers should monitor for abnormal file access patterns or crash events related to the Excel process, which may indicate exploitation attempts.

Affected products:

Excel

Source: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-81400

Related in this roundup: CVE-2026-78515, CVE-2026-81398, CVE-2026-81386, CVE-2026-81947, CVE-2026-81387, CVE-2026-81954, CVE-2026-81390, CVE-2026-81399, CVE-2026-81391, CVE-2026-81401, CVE-2026-81958, CVE-2026-81396, CVE-2026-81392, CVE-2026-81397, CVE-2026-81956, CVE-2026-81393, CVE-2026-81389, CVE-2026-81394, CVE-2026-81960, CVE-2026-81395, CVE-2026-81957, CVE-2026-81388, CVE-2026-81951, CVE-2026-81959, CVE-2026-81953, CVE-2026-81949, CVE-2026-81950, CVE-2026-81948, CVE-2026-85875.

CVE-2026-81389

A heap-based buffer overflow vulnerability in Microsoft Excel allows an unauthorized attacker to execute arbitrary code locally. Detection engineers should monitor for abnormal process spawning or memory corruption patterns associated with the Excel application.

Affected products:

Excel

Source: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-81389

Related in this roundup: CVE-2026-78515, CVE-2026-81398, CVE-2026-81386, CVE-2026-81947, CVE-2026-81387, CVE-2026-81954, CVE-2026-81390, CVE-2026-81399, CVE-2026-81391, CVE-2026-81401, CVE-2026-81958, CVE-2026-81396, CVE-2026-81392, CVE-2026-81397, CVE-2026-81956, CVE-2026-81393, CVE-2026-81400, CVE-2026-81394, CVE-2026-81960, CVE-2026-81395, CVE-2026-81957, CVE-2026-81388, CVE-2026-81951, CVE-2026-81959, CVE-2026-81953, CVE-2026-81949, CVE-2026-81950, CVE-2026-81948, CVE-2026-85875.

CVE-2026-81394

Microsoft Excel is susceptible to an information disclosure vulnerability that allows an unauthorized local attacker to access sensitive system information by exploiting a flaw in how the application exposes data to the control sphere.

Affected products:

Excel

Source: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-81394

Related in this roundup: CVE-2026-78515, CVE-2026-81398, CVE-2026-81386, CVE-2026-81947, CVE-2026-81387, CVE-2026-81954, CVE-2026-81390, CVE-2026-81399, CVE-2026-81391, CVE-2026-81401, CVE-2026-81958, CVE-2026-81396, CVE-2026-81392, CVE-2026-81397, CVE-2026-81956, CVE-2026-81393, CVE-2026-81400, CVE-2026-81389, CVE-2026-81960, CVE-2026-81395, CVE-2026-81957, CVE-2026-81388, CVE-2026-81951, CVE-2026-81959, CVE-2026-81953, CVE-2026-81949, CVE-2026-81950, CVE-2026-81948, CVE-2026-85875.

CVE-2026-81960

CVE-2026-81960 is a heap-based buffer overflow vulnerability in Microsoft Excel that allows an attacker to execute arbitrary code locally when a victim opens a specially crafted file.

Affected products:

Excel

Source: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-81960

Related in this roundup: CVE-2026-78515, CVE-2026-81398, CVE-2026-81386, CVE-2026-81947, CVE-2026-81387, CVE-2026-81954, CVE-2026-81390, CVE-2026-81399, CVE-2026-81391, CVE-2026-81401, CVE-2026-81958, CVE-2026-81396, CVE-2026-81392, CVE-2026-81397, CVE-2026-81956, CVE-2026-81393, CVE-2026-81400, CVE-2026-81389, CVE-2026-81394, CVE-2026-81395, CVE-2026-81957, CVE-2026-81388, CVE-2026-81951, CVE-2026-81959, CVE-2026-81953, CVE-2026-81949, CVE-2026-81950, CVE-2026-81948, CVE-2026-85875.

CVE-2026-81395

Microsoft Excel contains an out-of-bounds read vulnerability that allows an unauthorized attacker to disclose sensitive information locally. The flaw exists due to improper handling of memory bounds during file processing.

Affected products:

Excel

Source: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-81395

Related in this roundup: CVE-2026-78515, CVE-2026-81398, CVE-2026-81386, CVE-2026-81947, CVE-2026-81387, CVE-2026-81954, CVE-2026-81390, CVE-2026-81399, CVE-2026-81391, CVE-2026-81401, CVE-2026-81958, CVE-2026-81396, CVE-2026-81392, CVE-2026-81397, CVE-2026-81956, CVE-2026-81393, CVE-2026-81400, CVE-2026-81389, CVE-2026-81394, CVE-2026-81960, CVE-2026-81957, CVE-2026-81388, CVE-2026-81951, CVE-2026-81959, CVE-2026-81953, CVE-2026-81949, CVE-2026-81950, CVE-2026-81948, CVE-2026-85875.

CVE-2026-81957

CVE-2026-81957 describes an out-of-bounds read vulnerability in Microsoft Excel that can be leveraged by an unauthorized attacker to achieve remote code execution. Detection engineering should focus on monitoring for anomalous file handling patterns within the Excel process and anomalous child process spawns resulting from spreadsheet applications.

Affected products:

Excel

Source: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-81957

Related in this roundup: CVE-2026-78515, CVE-2026-81398, CVE-2026-81386, CVE-2026-81947, CVE-2026-81387, CVE-2026-81954, CVE-2026-81390, CVE-2026-81399, CVE-2026-81391, CVE-2026-81401, CVE-2026-81958, CVE-2026-81396, CVE-2026-81392, CVE-2026-81397, CVE-2026-81956, CVE-2026-81393, CVE-2026-81400, CVE-2026-81389, CVE-2026-81394, CVE-2026-81960, CVE-2026-81395, CVE-2026-81388, CVE-2026-81951, CVE-2026-81959, CVE-2026-81953, CVE-2026-81949, CVE-2026-81950, CVE-2026-81948, CVE-2026-85875.

CVE-2026-81388

Microsoft Excel is susceptible to a stack-based buffer overflow vulnerability, identified as CVE-2026-81388, which allows an unauthorized attacker to achieve remote code execution when a victim opens a specially crafted file.

Affected products:

Excel

Source: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-81388

Related in this roundup: CVE-2026-78515, CVE-2026-81398, CVE-2026-81386, CVE-2026-81947, CVE-2026-81387, CVE-2026-81954, CVE-2026-81390, CVE-2026-81399, CVE-2026-81391, CVE-2026-81401, CVE-2026-81958, CVE-2026-81396, CVE-2026-81392, CVE-2026-81397, CVE-2026-81956, CVE-2026-81393, CVE-2026-81400, CVE-2026-81389, CVE-2026-81394, CVE-2026-81960, CVE-2026-81395, CVE-2026-81957, CVE-2026-81951, CVE-2026-81959, CVE-2026-81953, CVE-2026-81949, CVE-2026-81950, CVE-2026-81948, CVE-2026-85875.

CVE-2026-81955

CVE-2026-81955 is a heap-based buffer overflow vulnerability within the Microsoft Windows Graphics Component. An unauthenticated attacker can exploit this flaw to achieve remote code execution over a network, presenting a high risk for arbitrary code injection and system compromise.

Affected products:

Windows Graphics Component

Source: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-81955

CVE-2026-81951

A heap-based buffer overflow vulnerability in Microsoft Excel allows an unauthorized attacker to achieve remote code execution through a maliciously crafted file.

Affected products:

Excel

Source: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-81951

Related in this roundup: CVE-2026-78515, CVE-2026-81398, CVE-2026-81386, CVE-2026-81947, CVE-2026-81387, CVE-2026-81954, CVE-2026-81390, CVE-2026-81399, CVE-2026-81391, CVE-2026-81401, CVE-2026-81958, CVE-2026-81396, CVE-2026-81392, CVE-2026-81397, CVE-2026-81956, CVE-2026-81393, CVE-2026-81400, CVE-2026-81389, CVE-2026-81394, CVE-2026-81960, CVE-2026-81395, CVE-2026-81957, CVE-2026-81388, CVE-2026-81959, CVE-2026-81953, CVE-2026-81949, CVE-2026-81950, CVE-2026-81948, CVE-2026-85875.

CVE-2026-81952

CVE-2026-81952 is a heap-based buffer overflow vulnerability in Microsoft Word that allows an unauthenticated remote attacker to execute arbitrary code. The vulnerability is triggered over a network, potentially allowing for remote code execution upon opening a maliciously crafted document.

Affected products:

Word

Source: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-81952

Related in this roundup: CVE-2026-78510.

CVE-2026-81959

A heap-based buffer overflow vulnerability in Microsoft Excel allows an unauthorized attacker to achieve remote code execution on the local system. Detection engineering should focus on monitoring for abnormal process behavior initiated by Excel.exe or unusual child processes spawned by the application.

Affected products:

Excel

Source: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-81959

Related in this roundup: CVE-2026-78515, CVE-2026-81398, CVE-2026-81386, CVE-2026-81947, CVE-2026-81387, CVE-2026-81954, CVE-2026-81390, CVE-2026-81399, CVE-2026-81391, CVE-2026-81401, CVE-2026-81958, CVE-2026-81396, CVE-2026-81392, CVE-2026-81397, CVE-2026-81956, CVE-2026-81393, CVE-2026-81400, CVE-2026-81389, CVE-2026-81394, CVE-2026-81960, CVE-2026-81395, CVE-2026-81957, CVE-2026-81388, CVE-2026-81951, CVE-2026-81953, CVE-2026-81949, CVE-2026-81950, CVE-2026-81948, CVE-2026-85875.

CVE-2026-81953

CVE-2026-81953 describes a stack-based buffer overflow vulnerability in Microsoft Excel that can be exploited by an unauthorized attacker to achieve remote code execution on the host machine.

Affected products:

Excel

Source: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-81953

Related in this roundup: CVE-2026-78515, CVE-2026-81398, CVE-2026-81386, CVE-2026-81947, CVE-2026-81387, CVE-2026-81954, CVE-2026-81390, CVE-2026-81399, CVE-2026-81391, CVE-2026-81401, CVE-2026-81958, CVE-2026-81396, CVE-2026-81392, CVE-2026-81397, CVE-2026-81956, CVE-2026-81393, CVE-2026-81400, CVE-2026-81389, CVE-2026-81394, CVE-2026-81960, CVE-2026-81395, CVE-2026-81957, CVE-2026-81388, CVE-2026-81951, CVE-2026-81959, CVE-2026-81949, CVE-2026-81950, CVE-2026-81948, CVE-2026-85875.

CVE-2026-81949

CVE-2026-81949 describes an integer overflow or wraparound vulnerability within Microsoft Excel that can be exploited by an unauthorized attacker to achieve remote code execution on the host machine. The vulnerability is triggered during the processing of malformed Excel files, potentially leading to arbitrary code execution in the context of the current user.

Affected products:

Excel

Source: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-81949

Related in this roundup: CVE-2026-78515, CVE-2026-81398, CVE-2026-81386, CVE-2026-81947, CVE-2026-81387, CVE-2026-81954, CVE-2026-81390, CVE-2026-81399, CVE-2026-81391, CVE-2026-81401, CVE-2026-81958, CVE-2026-81396, CVE-2026-81392, CVE-2026-81397, CVE-2026-81956, CVE-2026-81393, CVE-2026-81400, CVE-2026-81389, CVE-2026-81394, CVE-2026-81960, CVE-2026-81395, CVE-2026-81957, CVE-2026-81388, CVE-2026-81951, CVE-2026-81959, CVE-2026-81953, CVE-2026-81950, CVE-2026-81948, CVE-2026-85875.

CVE-2026-81950

A double free vulnerability exists in Microsoft Excel, which can be exploited by an unauthorized attacker to achieve remote code execution through the processing of specially crafted files.

Affected products:

Excel

Source: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-81950

Related in this roundup: CVE-2026-78515, CVE-2026-81398, CVE-2026-81386, CVE-2026-81947, CVE-2026-81387, CVE-2026-81954, CVE-2026-81390, CVE-2026-81399, CVE-2026-81391, CVE-2026-81401, CVE-2026-81958, CVE-2026-81396, CVE-2026-81392, CVE-2026-81397, CVE-2026-81956, CVE-2026-81393, CVE-2026-81400, CVE-2026-81389, CVE-2026-81394, CVE-2026-81960, CVE-2026-81395, CVE-2026-81957, CVE-2026-81388, CVE-2026-81951, CVE-2026-81959, CVE-2026-81953, CVE-2026-81949, CVE-2026-81948, CVE-2026-85875.

CVE-2026-81948

CVE-2026-81948 describes a heap-based buffer overflow vulnerability in Microsoft Excel that can be exploited by an unauthorized attacker to achieve remote code execution through the processing of specially crafted files.

Affected products:

Excel

Source: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-81948

Related in this roundup: CVE-2026-78515, CVE-2026-81398, CVE-2026-81386, CVE-2026-81947, CVE-2026-81387, CVE-2026-81954, CVE-2026-81390, CVE-2026-81399, CVE-2026-81391, CVE-2026-81401, CVE-2026-81958, CVE-2026-81396, CVE-2026-81392, CVE-2026-81397, CVE-2026-81956, CVE-2026-81393, CVE-2026-81400, CVE-2026-81389, CVE-2026-81394, CVE-2026-81960, CVE-2026-81395, CVE-2026-81957, CVE-2026-81388, CVE-2026-81951, CVE-2026-81959, CVE-2026-81953, CVE-2026-81949, CVE-2026-81950, CVE-2026-85875.

CVE-2026-77906

CVE-2026-77906 is a heap-based buffer overflow vulnerability in Microsoft Visual Studio that enables remote code execution by an unauthorized attacker over a network.

Affected products:

Visual Studio

Source: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-77906

Related in this roundup: CVE-2026-69522, CVE-2026-77907, CVE-2026-71328.

CVE-2026-83940

The Windows Device Association Service contains a use-after-free vulnerability that allows a local, authorized attacker to escalate their privileges to a higher level of authority on the target Windows system.

Affected products:

Windows

Source: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-83940

Related in this roundup: CVE-2026-81963, CVE-2026-85880, CVE-2026-69496, CVE-2026-69586, CVE-2026-69768, CVE-2026-73025, CVE-2026-56172, CVE-2026-68832, CVE-2026-68834, CVE-2026-68838, CVE-2026-68841, CVE-2026-68875, CVE-2026-68877, CVE-2026-68880, CVE-2026-69265, CVE-2026-69270, CVE-2026-69274, CVE-2026-69275, CVE-2026-69280, CVE-2026-69283, CVE-2026-69284, CVE-2026-69289, CVE-2026-69296, CVE-2026-69300, CVE-2026-69301, CVE-2026-69307, CVE-2026-69312, CVE-2026-69314, CVE-2026-69332, CVE-2026-69333, CVE-2026-69335, CVE-2026-68833, CVE-2026-68851, CVE-2026-69366, CVE-2026-69337, CVE-2026-69347, CVE-2026-69379, CVE-2026-69390, CVE-2026-69401, CVE-2026-69413, CVE-2026-69420, CVE-2026-69429, CVE-2026-69448, CVE-2026-69455, CVE-2026-69532, CVE-2026-69472, CVE-2026-69479, CVE-2026-69531, CVE-2026-69517, CVE-2026-69505, CVE-2026-69504, CVE-2026-69527, CVE-2026-69549, CVE-2026-69588, CVE-2026-69609, CVE-2026-69648, CVE-2026-69689, CVE-2026-69790, CVE-2026-69638, CVE-2026-69859, CVE-2026-69717, CVE-2026-69711, CVE-2026-69875, CVE-2026-69889, CVE-2026-69757, CVE-2026-69741, CVE-2026-69762, CVE-2026-69744, CVE-2026-69832, CVE-2026-69691, CVE-2026-69808, CVE-2026-69775, CVE-2026-69822, CVE-2026-69770, CVE-2026-69676, CVE-2026-70289, CVE-2026-70563, CVE-2026-71329, CVE-2026-71332, CVE-2026-71350, CVE-2026-71348, CVE-2026-71345, CVE-2026-69469, CVE-2026-69501, CVE-2026-69548, CVE-2026-69846, CVE-2026-70283, CVE-2026-72981, CVE-2026-77491, CVE-2026-77492, CVE-2026-77503, CVE-2026-80093, CVE-2026-72949, CVE-2026-70019, CVE-2026-72940, CVE-2026-69573, CVE-2026-70290, CVE-2026-83991, CVE-2026-83999, CVE-2026-69321, CVE-2026-69316, CVE-2026-69340, CVE-2026-69348, CVE-2026-69350, CVE-2026-69353, CVE-2026-69357, CVE-2026-69393, CVE-2026-69410, CVE-2026-69421, CVE-2026-69428, CVE-2026-69425, CVE-2026-69427, CVE-2026-69434, CVE-2026-69456, CVE-2026-69459, CVE-2026-69478, CVE-2026-69561, CVE-2026-69512, CVE-2026-69498, CVE-2026-69571, CVE-2026-69535, CVE-2026-69538, CVE-2026-69591, CVE-2026-69566, CVE-2026-69567, CVE-2026-69584, CVE-2026-69617, CVE-2026-69630, CVE-2026-69610, CVE-2026-69881, CVE-2026-69680, CVE-2026-69619, CVE-2026-69685, CVE-2026-69643, CVE-2026-69687, CVE-2026-69791, CVE-2026-69707, CVE-2026-69652, CVE-2026-69834, CVE-2026-69709, CVE-2026-69844, CVE-2026-69814, CVE-2026-69731, CVE-2026-69706, CVE-2026-69779, CVE-2026-69895, CVE-2026-69792, CVE-2026-69853, CVE-2026-69761, CVE-2026-69785, CVE-2026-69818, CVE-2026-69786, CVE-2026-69874, CVE-2026-70565, CVE-2026-70574, CVE-2026-70569, CVE-2026-70575, CVE-2026-71349, CVE-2026-72927, CVE-2026-72952, CVE-2026-72942, CVE-2026-72966, CVE-2026-72967, CVE-2026-69426, CVE-2026-69564, CVE-2026-72985, CVE-2026-73019, CVE-2026-78451, CVE-2026-78452, CVE-2026-69598, CVE-2026-83995, CVE-2026-83501, CVE-2026-83498.

CVE-2026-83939

CVE-2026-83939 is a local privilege escalation vulnerability in Windows Secure Kernel Mode caused by an untrusted pointer dereference. An attacker with existing local access can exploit this flaw to execute code or perform actions with elevated privileges within the kernel.

Affected products:

Windows Secure Kernel Mode

Source: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-83939

Related in this roundup: CVE-2026-69906.

CVE-2026-77897

CVE-2026-77897 describes a relative path traversal vulnerability in Microsoft Power Automate Desktop that enables an authorized local attacker to elevate their privileges on the host system.

Affected products:

Power Automate Desktop

Source: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-77897

CVE-2026-83948

Microsoft Azure CLI is susceptible to a command injection vulnerability due to improper neutralization of special elements in commands, allowing an authorized attacker to achieve remote code execution over a network.

Affected products:

Azure CLI

Source: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-83948

CVE-2026-83951

CVE-2026-83951 is an information disclosure vulnerability in Microsoft Office Word caused by a buffer over-read. An unauthorized attacker could exploit this vulnerability to disclose sensitive information from the local environment.

Affected products:

Office Word

Source: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-83951

Related in this roundup: CVE-2026-69556, CVE-2026-69671, CVE-2026-69686, CVE-2026-69722, CVE-2026-69734, CVE-2026-69719, CVE-2026-69759, CVE-2026-69764, CVE-2026-78511, CVE-2026-78502, CVE-2026-78504, CVE-2026-78517, CVE-2026-68843, CVE-2026-69360, CVE-2026-72972, CVE-2026-72976, CVE-2026-77901, CVE-2026-77911, CVE-2026-78507, CVE-2026-78506, CVE-2026-78514, CVE-2026-78503, CVE-2026-78521, CVE-2026-78522, CVE-2026-78526, CVE-2026-80080, CVE-2026-83949.

CVE-2026-83949

CVE-2026-83949 is a buffer over-read vulnerability in Microsoft Office Word that enables an unauthorized local attacker to perform an information disclosure attack.

Affected products:

Office Word

Source: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-83949

Related in this roundup: CVE-2026-69556, CVE-2026-69671, CVE-2026-69686, CVE-2026-69722, CVE-2026-69734, CVE-2026-69719, CVE-2026-69759, CVE-2026-69764, CVE-2026-78511, CVE-2026-78502, CVE-2026-78504, CVE-2026-78517, CVE-2026-68843, CVE-2026-69360, CVE-2026-72972, CVE-2026-72976, CVE-2026-77901, CVE-2026-77911, CVE-2026-78507, CVE-2026-78506, CVE-2026-78514, CVE-2026-78503, CVE-2026-78521, CVE-2026-78522, CVE-2026-78526, CVE-2026-80080, CVE-2026-83951.

CVE-2026-69530

A use-after-free vulnerability in the Windows Reliable Multicast Transport Driver (RMCAST) allows an unauthenticated remote attacker to achieve arbitrary code execution by sending specifically crafted network packets to the affected system.

Affected products:

Windows Reliable Multicast Transport Driver

Source: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-69530

Related in this roundup: CVE-2026-78449, CVE-2026-78450.

CVE-2026-69381

CVE-2026-69381 describes an out-of-bounds read vulnerability in the Windows Storage Port Driver. An unauthorized attacker with physical access to the system can exploit this flaw to disclose sensitive information.

Affected products:

Windows Storage Port Driver

Source: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-69381

Related in this roundup: CVE-2026-72937.

CVE-2026-72965

A use-after-free vulnerability in the Windows WebClient Service allows a locally authenticated attacker to elevate their privileges to a higher level of access on the system.

Affected products:

Windows WebClient Service

Source: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-72965

CVE-2026-69598

A vulnerability in the Windows iSCSI component stems from an incorrect buffer size calculation, which can be exploited by an unauthorized remote attacker to achieve code execution over a network.

Affected products:

Windows

Source: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-69598

Related in this roundup: CVE-2026-81963, CVE-2026-85880, CVE-2026-69496, CVE-2026-69586, CVE-2026-69768, CVE-2026-73025, CVE-2026-56172, CVE-2026-68832, CVE-2026-68834, CVE-2026-68838, CVE-2026-68841, CVE-2026-68875, CVE-2026-68877, CVE-2026-68880, CVE-2026-69265, CVE-2026-69270, CVE-2026-69274, CVE-2026-69275, CVE-2026-69280, CVE-2026-69283, CVE-2026-69284, CVE-2026-69289, CVE-2026-69296, CVE-2026-69300, CVE-2026-69301, CVE-2026-69307, CVE-2026-69312, CVE-2026-69314, CVE-2026-69332, CVE-2026-69333, CVE-2026-69335, CVE-2026-68833, CVE-2026-68851, CVE-2026-69366, CVE-2026-69337, CVE-2026-69347, CVE-2026-69379, CVE-2026-69390, CVE-2026-69401, CVE-2026-69413, CVE-2026-69420, CVE-2026-69429, CVE-2026-69448, CVE-2026-69455, CVE-2026-69532, CVE-2026-69472, CVE-2026-69479, CVE-2026-69531, CVE-2026-69517, CVE-2026-69505, CVE-2026-69504, CVE-2026-69527, CVE-2026-69549, CVE-2026-69588, CVE-2026-69609, CVE-2026-69648, CVE-2026-69689, CVE-2026-69790, CVE-2026-69638, CVE-2026-69859, CVE-2026-69717, CVE-2026-69711, CVE-2026-69875, CVE-2026-69889, CVE-2026-69757, CVE-2026-69741, CVE-2026-69762, CVE-2026-69744, CVE-2026-69832, CVE-2026-69691, CVE-2026-69808, CVE-2026-69775, CVE-2026-69822, CVE-2026-69770, CVE-2026-69676, CVE-2026-70289, CVE-2026-70563, CVE-2026-71329, CVE-2026-71332, CVE-2026-71350, CVE-2026-71348, CVE-2026-71345, CVE-2026-69469, CVE-2026-69501, CVE-2026-69548, CVE-2026-69846, CVE-2026-70283, CVE-2026-72981, CVE-2026-77491, CVE-2026-77492, CVE-2026-77503, CVE-2026-80093, CVE-2026-72949, CVE-2026-70019, CVE-2026-72940, CVE-2026-69573, CVE-2026-70290, CVE-2026-83991, CVE-2026-83999, CVE-2026-69321, CVE-2026-69316, CVE-2026-69340, CVE-2026-69348, CVE-2026-69350, CVE-2026-69353, CVE-2026-69357, CVE-2026-69393, CVE-2026-69410, CVE-2026-69421, CVE-2026-69428, CVE-2026-69425, CVE-2026-69427, CVE-2026-69434, CVE-2026-69456, CVE-2026-69459, CVE-2026-69478, CVE-2026-69561, CVE-2026-69512, CVE-2026-69498, CVE-2026-69571, CVE-2026-69535, CVE-2026-69538, CVE-2026-69591, CVE-2026-69566, CVE-2026-69567, CVE-2026-69584, CVE-2026-69617, CVE-2026-69630, CVE-2026-69610, CVE-2026-69881, CVE-2026-69680, CVE-2026-69619, CVE-2026-69685, CVE-2026-69643, CVE-2026-69687, CVE-2026-69791, CVE-2026-69707, CVE-2026-69652, CVE-2026-69834, CVE-2026-69709, CVE-2026-69844, CVE-2026-69814, CVE-2026-69731, CVE-2026-69706, CVE-2026-69779, CVE-2026-69895, CVE-2026-69792, CVE-2026-69853, CVE-2026-69761, CVE-2026-69785, CVE-2026-69818, CVE-2026-69786, CVE-2026-69874, CVE-2026-70565, CVE-2026-70574, CVE-2026-70569, CVE-2026-70575, CVE-2026-71349, CVE-2026-72927, CVE-2026-72952, CVE-2026-72942, CVE-2026-72966, CVE-2026-72967, CVE-2026-69426, CVE-2026-69564, CVE-2026-72985, CVE-2026-73019, CVE-2026-78451, CVE-2026-78452, CVE-2026-83940, CVE-2026-83995, CVE-2026-83501, CVE-2026-83498.

CVE-2026-83971

CVE-2026-83971 is a heap-based buffer overflow vulnerability in the Windows Biometric Service that enables a locally authorized attacker to escalate their privileges. Detection should focus on monitoring for unauthorized or anomalous calls to the Windows Biometric Service or unusual process creation originating from the service process.

Affected products:

Windows Biometric Service

Source: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-83971

Related in this roundup: CVE-2026-69293, CVE-2026-69298, CVE-2026-69323, CVE-2026-69583, CVE-2026-69589, CVE-2026-69580, CVE-2026-69476, CVE-2026-69787, CVE-2026-77489, CVE-2026-83955, CVE-2026-83986, CVE-2026-83969, CVE-2026-83988, CVE-2026-83979, CVE-2026-83974, CVE-2026-83975, CVE-2026-83976, CVE-2026-69727, CVE-2026-69826, CVE-2026-69738, CVE-2026-69773, CVE-2026-70573, CVE-2026-70572, CVE-2026-70581, CVE-2026-72941, CVE-2026-69352, CVE-2026-69489, CVE-2026-69593, CVE-2026-72995, CVE-2026-72988, CVE-2026-72990, CVE-2026-72991, CVE-2026-72992, CVE-2026-72993, CVE-2026-72994, CVE-2026-72996, CVE-2026-72997, CVE-2026-73002, CVE-2026-73020, CVE-2026-73000, CVE-2026-73001, CVE-2026-73021, CVE-2026-73015, CVE-2026-73011, CVE-2026-73008, CVE-2026-73007, CVE-2026-73026, CVE-2026-78447, CVE-2026-78448, CVE-2026-83954, CVE-2026-83967, CVE-2026-83970, CVE-2026-83972, CVE-2026-83968, CVE-2026-83973, CVE-2026-83981, CVE-2026-83977, CVE-2026-83978, CVE-2026-83982, CVE-2026-83980, CVE-2026-83987, CVE-2026-83983, CVE-2026-83985.

CVE-2026-83954

CVE-2026-83954 describes a heap-based buffer overflow vulnerability in the Windows Biometric Service. An attacker with local authorization can exploit this flaw to achieve privilege escalation on the affected system.

Affected products:

Windows Biometric Service

Source: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-83954

Related in this roundup: CVE-2026-69293, CVE-2026-69298, CVE-2026-69323, CVE-2026-69583, CVE-2026-69589, CVE-2026-69580, CVE-2026-69476, CVE-2026-69787, CVE-2026-77489, CVE-2026-83955, CVE-2026-83986, CVE-2026-83969, CVE-2026-83988, CVE-2026-83979, CVE-2026-83974, CVE-2026-83975, CVE-2026-83976, CVE-2026-69727, CVE-2026-69826, CVE-2026-69738, CVE-2026-69773, CVE-2026-70573, CVE-2026-70572, CVE-2026-70581, CVE-2026-72941, CVE-2026-69352, CVE-2026-69489, CVE-2026-69593, CVE-2026-72995, CVE-2026-72988, CVE-2026-72990, CVE-2026-72991, CVE-2026-72992, CVE-2026-72993, CVE-2026-72994, CVE-2026-72996, CVE-2026-72997, CVE-2026-73002, CVE-2026-73020, CVE-2026-73000, CVE-2026-73001, CVE-2026-73021, CVE-2026-73015, CVE-2026-73011, CVE-2026-73008, CVE-2026-73007, CVE-2026-73026, CVE-2026-78447, CVE-2026-78448, CVE-2026-83971, CVE-2026-83967, CVE-2026-83970, CVE-2026-83972, CVE-2026-83968, CVE-2026-83973, CVE-2026-83981, CVE-2026-83977, CVE-2026-83978, CVE-2026-83982, CVE-2026-83980, CVE-2026-83987, CVE-2026-83983, CVE-2026-83985.

CVE-2026-83967

CVE-2026-83967 is a heap-based buffer overflow vulnerability within the Windows Biometric Service that enables a locally authenticated attacker to achieve privilege escalation on the affected system.

Affected products:

Windows Biometric Service

Source: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-83967

Related in this roundup: CVE-2026-69293, CVE-2026-69298, CVE-2026-69323, CVE-2026-69583, CVE-2026-69589, CVE-2026-69580, CVE-2026-69476, CVE-2026-69787, CVE-2026-77489, CVE-2026-83955, CVE-2026-83986, CVE-2026-83969, CVE-2026-83988, CVE-2026-83979, CVE-2026-83974, CVE-2026-83975, CVE-2026-83976, CVE-2026-69727, CVE-2026-69826, CVE-2026-69738, CVE-2026-69773, CVE-2026-70573, CVE-2026-70572, CVE-2026-70581, CVE-2026-72941, CVE-2026-69352, CVE-2026-69489, CVE-2026-69593, CVE-2026-72995, CVE-2026-72988, CVE-2026-72990, CVE-2026-72991, CVE-2026-72992, CVE-2026-72993, CVE-2026-72994, CVE-2026-72996, CVE-2026-72997, CVE-2026-73002, CVE-2026-73020, CVE-2026-73000, CVE-2026-73001, CVE-2026-73021, CVE-2026-73015, CVE-2026-73011, CVE-2026-73008, CVE-2026-73007, CVE-2026-73026, CVE-2026-78447, CVE-2026-78448, CVE-2026-83971, CVE-2026-83954, CVE-2026-83970, CVE-2026-83972, CVE-2026-83968, CVE-2026-83973, CVE-2026-83981, CVE-2026-83977, CVE-2026-83978, CVE-2026-83982, CVE-2026-83980, CVE-2026-83987, CVE-2026-83983, CVE-2026-83985.

CVE-2026-83970

The Windows Biometric Service contains a heap-based buffer overflow vulnerability that can be exploited by an authorized local attacker to gain elevated privileges on the system.

Affected products:

Windows Biometric Service

Source: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-83970

Related in this roundup: CVE-2026-69293, CVE-2026-69298, CVE-2026-69323, CVE-2026-69583, CVE-2026-69589, CVE-2026-69580, CVE-2026-69476, CVE-2026-69787, CVE-2026-77489, CVE-2026-83955, CVE-2026-83986, CVE-2026-83969, CVE-2026-83988, CVE-2026-83979, CVE-2026-83974, CVE-2026-83975, CVE-2026-83976, CVE-2026-69727, CVE-2026-69826, CVE-2026-69738, CVE-2026-69773, CVE-2026-70573, CVE-2026-70572, CVE-2026-70581, CVE-2026-72941, CVE-2026-69352, CVE-2026-69489, CVE-2026-69593, CVE-2026-72995, CVE-2026-72988, CVE-2026-72990, CVE-2026-72991, CVE-2026-72992, CVE-2026-72993, CVE-2026-72994, CVE-2026-72996, CVE-2026-72997, CVE-2026-73002, CVE-2026-73020, CVE-2026-73000, CVE-2026-73001, CVE-2026-73021, CVE-2026-73015, CVE-2026-73011, CVE-2026-73008, CVE-2026-73007, CVE-2026-73026, CVE-2026-78447, CVE-2026-78448, CVE-2026-83971, CVE-2026-83954, CVE-2026-83967, CVE-2026-83972, CVE-2026-83968, CVE-2026-83973, CVE-2026-83981, CVE-2026-83977, CVE-2026-83978, CVE-2026-83982, CVE-2026-83980, CVE-2026-83987, CVE-2026-83983, CVE-2026-83985.

CVE-2026-83972

CVE-2026-83972 is a local privilege escalation vulnerability in the Windows Biometric Service resulting from a heap-based buffer overflow. An attacker with authorized access can exploit this flaw to gain elevated privileges on the affected system.

Affected products:

Windows Biometric Service

Source: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-83972

Related in this roundup: CVE-2026-69293, CVE-2026-69298, CVE-2026-69323, CVE-2026-69583, CVE-2026-69589, CVE-2026-69580, CVE-2026-69476, CVE-2026-69787, CVE-2026-77489, CVE-2026-83955, CVE-2026-83986, CVE-2026-83969, CVE-2026-83988, CVE-2026-83979, CVE-2026-83974, CVE-2026-83975, CVE-2026-83976, CVE-2026-69727, CVE-2026-69826, CVE-2026-69738, CVE-2026-69773, CVE-2026-70573, CVE-2026-70572, CVE-2026-70581, CVE-2026-72941, CVE-2026-69352, CVE-2026-69489, CVE-2026-69593, CVE-2026-72995, CVE-2026-72988, CVE-2026-72990, CVE-2026-72991, CVE-2026-72992, CVE-2026-72993, CVE-2026-72994, CVE-2026-72996, CVE-2026-72997, CVE-2026-73002, CVE-2026-73020, CVE-2026-73000, CVE-2026-73001, CVE-2026-73021, CVE-2026-73015, CVE-2026-73011, CVE-2026-73008, CVE-2026-73007, CVE-2026-73026, CVE-2026-78447, CVE-2026-78448, CVE-2026-83971, CVE-2026-83954, CVE-2026-83967, CVE-2026-83970, CVE-2026-83968, CVE-2026-83973, CVE-2026-83981, CVE-2026-83977, CVE-2026-83978, CVE-2026-83982, CVE-2026-83980, CVE-2026-83987, CVE-2026-83983, CVE-2026-83985.

CVE-2026-83968

A use-after-free vulnerability exists in the Windows Biometric Service that allows an authorized local attacker to achieve privilege escalation.

Affected products:

Windows Biometric Service

Source: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-83968

Related in this roundup: CVE-2026-69293, CVE-2026-69298, CVE-2026-69323, CVE-2026-69583, CVE-2026-69589, CVE-2026-69580, CVE-2026-69476, CVE-2026-69787, CVE-2026-77489, CVE-2026-83955, CVE-2026-83986, CVE-2026-83969, CVE-2026-83988, CVE-2026-83979, CVE-2026-83974, CVE-2026-83975, CVE-2026-83976, CVE-2026-69727, CVE-2026-69826, CVE-2026-69738, CVE-2026-69773, CVE-2026-70573, CVE-2026-70572, CVE-2026-70581, CVE-2026-72941, CVE-2026-69352, CVE-2026-69489, CVE-2026-69593, CVE-2026-72995, CVE-2026-72988, CVE-2026-72990, CVE-2026-72991, CVE-2026-72992, CVE-2026-72993, CVE-2026-72994, CVE-2026-72996, CVE-2026-72997, CVE-2026-73002, CVE-2026-73020, CVE-2026-73000, CVE-2026-73001, CVE-2026-73021, CVE-2026-73015, CVE-2026-73011, CVE-2026-73008, CVE-2026-73007, CVE-2026-73026, CVE-2026-78447, CVE-2026-78448, CVE-2026-83971, CVE-2026-83954, CVE-2026-83967, CVE-2026-83970, CVE-2026-83972, CVE-2026-83973, CVE-2026-83981, CVE-2026-83977, CVE-2026-83978, CVE-2026-83982, CVE-2026-83980, CVE-2026-83987, CVE-2026-83983, CVE-2026-83985.

CVE-2026-70145

CVE-2026-70145 describes an out-of-bounds read vulnerability within the Microsoft Windows Search Component. This flaw allows an authenticated local attacker to perform unauthorized information disclosure by reading sensitive data from memory.

Affected products:

Windows Search Component

Source: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-70145

Related in this roundup: CVE-2026-68896, CVE-2026-69305, CVE-2026-69322, CVE-2026-69507, CVE-2026-69554, CVE-2026-69585, CVE-2026-69608, CVE-2026-69453, CVE-2026-69600, CVE-2026-69911.

CVE-2026-83973

CVE-2026-83973 is a heap-based buffer overflow vulnerability in the Windows Biometric Service that allows a locally authorized attacker to escalate their privileges. Detection should focus on monitoring anomalous process behavior or unauthorized attempts to interact with the biometric service API.

Affected products:

Windows Biometric Service

Source: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-83973

Related in this roundup: CVE-2026-69293, CVE-2026-69298, CVE-2026-69323, CVE-2026-69583, CVE-2026-69589, CVE-2026-69580, CVE-2026-69476, CVE-2026-69787, CVE-2026-77489, CVE-2026-83955, CVE-2026-83986, CVE-2026-83969, CVE-2026-83988, CVE-2026-83979, CVE-2026-83974, CVE-2026-83975, CVE-2026-83976, CVE-2026-69727, CVE-2026-69826, CVE-2026-69738, CVE-2026-69773, CVE-2026-70573, CVE-2026-70572, CVE-2026-70581, CVE-2026-72941, CVE-2026-69352, CVE-2026-69489, CVE-2026-69593, CVE-2026-72995, CVE-2026-72988, CVE-2026-72990, CVE-2026-72991, CVE-2026-72992, CVE-2026-72993, CVE-2026-72994, CVE-2026-72996, CVE-2026-72997, CVE-2026-73002, CVE-2026-73020, CVE-2026-73000, CVE-2026-73001, CVE-2026-73021, CVE-2026-73015, CVE-2026-73011, CVE-2026-73008, CVE-2026-73007, CVE-2026-73026, CVE-2026-78447, CVE-2026-78448, CVE-2026-83971, CVE-2026-83954, CVE-2026-83967, CVE-2026-83970, CVE-2026-83972, CVE-2026-83968, CVE-2026-83981, CVE-2026-83977, CVE-2026-83978, CVE-2026-83982, CVE-2026-83980, CVE-2026-83987, CVE-2026-83983, CVE-2026-83985.

CVE-2026-83981

A heap-based buffer overflow vulnerability exists in the Windows Biometric Service, allowing a locally authenticated attacker to escalate their privileges to a higher level of authority on the system.

Affected products:

Windows Biometric Service

Source: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-83981

Related in this roundup: CVE-2026-69293, CVE-2026-69298, CVE-2026-69323, CVE-2026-69583, CVE-2026-69589, CVE-2026-69580, CVE-2026-69476, CVE-2026-69787, CVE-2026-77489, CVE-2026-83955, CVE-2026-83986, CVE-2026-83969, CVE-2026-83988, CVE-2026-83979, CVE-2026-83974, CVE-2026-83975, CVE-2026-83976, CVE-2026-69727, CVE-2026-69826, CVE-2026-69738, CVE-2026-69773, CVE-2026-70573, CVE-2026-70572, CVE-2026-70581, CVE-2026-72941, CVE-2026-69352, CVE-2026-69489, CVE-2026-69593, CVE-2026-72995, CVE-2026-72988, CVE-2026-72990, CVE-2026-72991, CVE-2026-72992, CVE-2026-72993, CVE-2026-72994, CVE-2026-72996, CVE-2026-72997, CVE-2026-73002, CVE-2026-73020, CVE-2026-73000, CVE-2026-73001, CVE-2026-73021, CVE-2026-73015, CVE-2026-73011, CVE-2026-73008, CVE-2026-73007, CVE-2026-73026, CVE-2026-78447, CVE-2026-78448, CVE-2026-83971, CVE-2026-83954, CVE-2026-83967, CVE-2026-83970, CVE-2026-83972, CVE-2026-83968, CVE-2026-83973, CVE-2026-83977, CVE-2026-83978, CVE-2026-83982, CVE-2026-83980, CVE-2026-83987, CVE-2026-83983, CVE-2026-83985.

CVE-2026-83977

CVE-2026-83977 is a heap-based buffer overflow vulnerability within the Windows Biometric Service that enables a local, authorized attacker to elevate their privileges on an affected system.

Affected products:

Windows Biometric Service

Source: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-83977

Related in this roundup: CVE-2026-69293, CVE-2026-69298, CVE-2026-69323, CVE-2026-69583, CVE-2026-69589, CVE-2026-69580, CVE-2026-69476, CVE-2026-69787, CVE-2026-77489, CVE-2026-83955, CVE-2026-83986, CVE-2026-83969, CVE-2026-83988, CVE-2026-83979, CVE-2026-83974, CVE-2026-83975, CVE-2026-83976, CVE-2026-69727, CVE-2026-69826, CVE-2026-69738, CVE-2026-69773, CVE-2026-70573, CVE-2026-70572, CVE-2026-70581, CVE-2026-72941, CVE-2026-69352, CVE-2026-69489, CVE-2026-69593, CVE-2026-72995, CVE-2026-72988, CVE-2026-72990, CVE-2026-72991, CVE-2026-72992, CVE-2026-72993, CVE-2026-72994, CVE-2026-72996, CVE-2026-72997, CVE-2026-73002, CVE-2026-73020, CVE-2026-73000, CVE-2026-73001, CVE-2026-73021, CVE-2026-73015, CVE-2026-73011, CVE-2026-73008, CVE-2026-73007, CVE-2026-73026, CVE-2026-78447, CVE-2026-78448, CVE-2026-83971, CVE-2026-83954, CVE-2026-83967, CVE-2026-83970, CVE-2026-83972, CVE-2026-83968, CVE-2026-83973, CVE-2026-83981, CVE-2026-83978, CVE-2026-83982, CVE-2026-83980, CVE-2026-83987, CVE-2026-83983, CVE-2026-83985.

CVE-2026-83978

CVE-2026-83978 is a heap-based buffer overflow vulnerability in the Windows Biometric Service that allows an already authorized local attacker to escalate their privileges. Detection should focus on monitoring for anomalous behavior or unauthorized process execution originating from the biometric service components.

Affected products:

Windows Biometric Service

Source: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-83978

Related in this roundup: CVE-2026-69293, CVE-2026-69298, CVE-2026-69323, CVE-2026-69583, CVE-2026-69589, CVE-2026-69580, CVE-2026-69476, CVE-2026-69787, CVE-2026-77489, CVE-2026-83955, CVE-2026-83986, CVE-2026-83969, CVE-2026-83988, CVE-2026-83979, CVE-2026-83974, CVE-2026-83975, CVE-2026-83976, CVE-2026-69727, CVE-2026-69826, CVE-2026-69738, CVE-2026-69773, CVE-2026-70573, CVE-2026-70572, CVE-2026-70581, CVE-2026-72941, CVE-2026-69352, CVE-2026-69489, CVE-2026-69593, CVE-2026-72995, CVE-2026-72988, CVE-2026-72990, CVE-2026-72991, CVE-2026-72992, CVE-2026-72993, CVE-2026-72994, CVE-2026-72996, CVE-2026-72997, CVE-2026-73002, CVE-2026-73020, CVE-2026-73000, CVE-2026-73001, CVE-2026-73021, CVE-2026-73015, CVE-2026-73011, CVE-2026-73008, CVE-2026-73007, CVE-2026-73026, CVE-2026-78447, CVE-2026-78448, CVE-2026-83971, CVE-2026-83954, CVE-2026-83967, CVE-2026-83970, CVE-2026-83972, CVE-2026-83968, CVE-2026-83973, CVE-2026-83981, CVE-2026-83977, CVE-2026-83982, CVE-2026-83980, CVE-2026-83987, CVE-2026-83983, CVE-2026-83985.

CVE-2026-83982

CVE-2026-83982 describes a heap-based buffer overflow vulnerability in the Windows Biometric Service that can be exploited by an authorized local attacker to achieve privilege escalation.

Affected products:

Windows Biometric Service

Source: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-83982

Related in this roundup: CVE-2026-69293, CVE-2026-69298, CVE-2026-69323, CVE-2026-69583, CVE-2026-69589, CVE-2026-69580, CVE-2026-69476, CVE-2026-69787, CVE-2026-77489, CVE-2026-83955, CVE-2026-83986, CVE-2026-83969, CVE-2026-83988, CVE-2026-83979, CVE-2026-83974, CVE-2026-83975, CVE-2026-83976, CVE-2026-69727, CVE-2026-69826, CVE-2026-69738, CVE-2026-69773, CVE-2026-70573, CVE-2026-70572, CVE-2026-70581, CVE-2026-72941, CVE-2026-69352, CVE-2026-69489, CVE-2026-69593, CVE-2026-72995, CVE-2026-72988, CVE-2026-72990, CVE-2026-72991, CVE-2026-72992, CVE-2026-72993, CVE-2026-72994, CVE-2026-72996, CVE-2026-72997, CVE-2026-73002, CVE-2026-73020, CVE-2026-73000, CVE-2026-73001, CVE-2026-73021, CVE-2026-73015, CVE-2026-73011, CVE-2026-73008, CVE-2026-73007, CVE-2026-73026, CVE-2026-78447, CVE-2026-78448, CVE-2026-83971, CVE-2026-83954, CVE-2026-83967, CVE-2026-83970, CVE-2026-83972, CVE-2026-83968, CVE-2026-83973, CVE-2026-83981, CVE-2026-83977, CVE-2026-83978, CVE-2026-83980, CVE-2026-83987, CVE-2026-83983, CVE-2026-83985.

CVE-2026-83980

CVE-2026-83980 describes a heap-based buffer overflow vulnerability in the Windows Biometric Service that allows a locally authenticated attacker to elevate their privileges to SYSTEM level.

Affected products:

Windows Biometric Service

Source: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-83980

Related in this roundup: CVE-2026-69293, CVE-2026-69298, CVE-2026-69323, CVE-2026-69583, CVE-2026-69589, CVE-2026-69580, CVE-2026-69476, CVE-2026-69787, CVE-2026-77489, CVE-2026-83955, CVE-2026-83986, CVE-2026-83969, CVE-2026-83988, CVE-2026-83979, CVE-2026-83974, CVE-2026-83975, CVE-2026-83976, CVE-2026-69727, CVE-2026-69826, CVE-2026-69738, CVE-2026-69773, CVE-2026-70573, CVE-2026-70572, CVE-2026-70581, CVE-2026-72941, CVE-2026-69352, CVE-2026-69489, CVE-2026-69593, CVE-2026-72995, CVE-2026-72988, CVE-2026-72990, CVE-2026-72991, CVE-2026-72992, CVE-2026-72993, CVE-2026-72994, CVE-2026-72996, CVE-2026-72997, CVE-2026-73002, CVE-2026-73020, CVE-2026-73000, CVE-2026-73001, CVE-2026-73021, CVE-2026-73015, CVE-2026-73011, CVE-2026-73008, CVE-2026-73007, CVE-2026-73026, CVE-2026-78447, CVE-2026-78448, CVE-2026-83971, CVE-2026-83954, CVE-2026-83967, CVE-2026-83970, CVE-2026-83972, CVE-2026-83968, CVE-2026-83973, CVE-2026-83981, CVE-2026-83977, CVE-2026-83978, CVE-2026-83982, CVE-2026-83987, CVE-2026-83983, CVE-2026-83985.

CVE-2026-83987

A heap-based buffer overflow vulnerability in the Windows Biometric Service allows a locally authenticated attacker to elevate their privileges to a higher level of access.

Affected products:

Windows Biometric Service

Source: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-83987

Related in this roundup: CVE-2026-69293, CVE-2026-69298, CVE-2026-69323, CVE-2026-69583, CVE-2026-69589, CVE-2026-69580, CVE-2026-69476, CVE-2026-69787, CVE-2026-77489, CVE-2026-83955, CVE-2026-83986, CVE-2026-83969, CVE-2026-83988, CVE-2026-83979, CVE-2026-83974, CVE-2026-83975, CVE-2026-83976, CVE-2026-69727, CVE-2026-69826, CVE-2026-69738, CVE-2026-69773, CVE-2026-70573, CVE-2026-70572, CVE-2026-70581, CVE-2026-72941, CVE-2026-69352, CVE-2026-69489, CVE-2026-69593, CVE-2026-72995, CVE-2026-72988, CVE-2026-72990, CVE-2026-72991, CVE-2026-72992, CVE-2026-72993, CVE-2026-72994, CVE-2026-72996, CVE-2026-72997, CVE-2026-73002, CVE-2026-73020, CVE-2026-73000, CVE-2026-73001, CVE-2026-73021, CVE-2026-73015, CVE-2026-73011, CVE-2026-73008, CVE-2026-73007, CVE-2026-73026, CVE-2026-78447, CVE-2026-78448, CVE-2026-83971, CVE-2026-83954, CVE-2026-83967, CVE-2026-83970, CVE-2026-83972, CVE-2026-83968, CVE-2026-83973, CVE-2026-83981, CVE-2026-83977, CVE-2026-83978, CVE-2026-83982, CVE-2026-83980, CVE-2026-83983, CVE-2026-83985.

CVE-2026-83983

The Windows Biometric Service contains a heap-based buffer overflow vulnerability that allows a locally authorized attacker to escalate their privileges to a higher integrity level on the affected system.

Affected products:

Windows Biometric Service

Source: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-83983

Related in this roundup: CVE-2026-69293, CVE-2026-69298, CVE-2026-69323, CVE-2026-69583, CVE-2026-69589, CVE-2026-69580, CVE-2026-69476, CVE-2026-69787, CVE-2026-77489, CVE-2026-83955, CVE-2026-83986, CVE-2026-83969, CVE-2026-83988, CVE-2026-83979, CVE-2026-83974, CVE-2026-83975, CVE-2026-83976, CVE-2026-69727, CVE-2026-69826, CVE-2026-69738, CVE-2026-69773, CVE-2026-70573, CVE-2026-70572, CVE-2026-70581, CVE-2026-72941, CVE-2026-69352, CVE-2026-69489, CVE-2026-69593, CVE-2026-72995, CVE-2026-72988, CVE-2026-72990, CVE-2026-72991, CVE-2026-72992, CVE-2026-72993, CVE-2026-72994, CVE-2026-72996, CVE-2026-72997, CVE-2026-73002, CVE-2026-73020, CVE-2026-73000, CVE-2026-73001, CVE-2026-73021, CVE-2026-73015, CVE-2026-73011, CVE-2026-73008, CVE-2026-73007, CVE-2026-73026, CVE-2026-78447, CVE-2026-78448, CVE-2026-83971, CVE-2026-83954, CVE-2026-83967, CVE-2026-83970, CVE-2026-83972, CVE-2026-83968, CVE-2026-83973, CVE-2026-83981, CVE-2026-83977, CVE-2026-83978, CVE-2026-83982, CVE-2026-83980, CVE-2026-83987, CVE-2026-83985.

CVE-2026-83985

The Windows Biometric Service contains a heap-based buffer overflow vulnerability that allows a local, authorized attacker to achieve privilege escalation by exploiting the vulnerable service component.

Affected products:

Windows Biometric Service

Source: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-83985

Related in this roundup: CVE-2026-69293, CVE-2026-69298, CVE-2026-69323, CVE-2026-69583, CVE-2026-69589, CVE-2026-69580, CVE-2026-69476, CVE-2026-69787, CVE-2026-77489, CVE-2026-83955, CVE-2026-83986, CVE-2026-83969, CVE-2026-83988, CVE-2026-83979, CVE-2026-83974, CVE-2026-83975, CVE-2026-83976, CVE-2026-69727, CVE-2026-69826, CVE-2026-69738, CVE-2026-69773, CVE-2026-70573, CVE-2026-70572, CVE-2026-70581, CVE-2026-72941, CVE-2026-69352, CVE-2026-69489, CVE-2026-69593, CVE-2026-72995, CVE-2026-72988, CVE-2026-72990, CVE-2026-72991, CVE-2026-72992, CVE-2026-72993, CVE-2026-72994, CVE-2026-72996, CVE-2026-72997, CVE-2026-73002, CVE-2026-73020, CVE-2026-73000, CVE-2026-73001, CVE-2026-73021, CVE-2026-73015, CVE-2026-73011, CVE-2026-73008, CVE-2026-73007, CVE-2026-73026, CVE-2026-78447, CVE-2026-78448, CVE-2026-83971, CVE-2026-83954, CVE-2026-83967, CVE-2026-83970, CVE-2026-83972, CVE-2026-83968, CVE-2026-83973, CVE-2026-83981, CVE-2026-83977, CVE-2026-83978, CVE-2026-83982, CVE-2026-83980, CVE-2026-83987, CVE-2026-83983.

CVE-2026-83989

CVE-2026-83989 describes an out-of-bounds read vulnerability in the Windows Services for NFS ONCRPC XDR driver. An unauthorized attacker can exploit this remotely over a network to trigger a denial-of-service condition, impacting service availability.

Affected products:

Windows Services for NFS

Source: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-83989

Related in this roundup: CVE-2026-69595, CVE-2026-78445, CVE-2026-70585, CVE-2026-71330, CVE-2026-73024.

CVE-2026-83990

The Microsoft Graphics Component contains a stack-based buffer overflow vulnerability that allows a locally authenticated attacker to elevate privileges on the affected system.

Affected products:

Graphics Component

Source: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-83990

Related in this roundup: CVE-2026-77493, CVE-2026-69467, CVE-2026-73006, CVE-2026-73016, CVE-2026-84000.

CVE-2026-83992

CVE-2026-83992 is a heap-based buffer overflow vulnerability in the Windows Imaging Component that allows a remote, unauthorized attacker to execute arbitrary code. Detection engineering teams should monitor for anomalous process spawns or memory corruption events originating from image processing workflows or services that utilize the Windows Imaging Component APIs.

Affected products:

Windows Imaging Component

Source: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-83992

Related in this roundup: CVE-2026-70296, CVE-2026-69860, CVE-2026-77495, CVE-2026-69318, CVE-2026-69499, CVE-2026-73023, CVE-2026-73013.

CVE-2026-83995

A heap-based buffer overflow vulnerability exists in the Windows NTFS file system, which can be exploited by a locally authenticated attacker to escalate their privileges to a higher integrity level.

Affected products:

Windows

Source: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-83995

Related in this roundup: CVE-2026-81963, CVE-2026-85880, CVE-2026-69496, CVE-2026-69586, CVE-2026-69768, CVE-2026-73025, CVE-2026-56172, CVE-2026-68832, CVE-2026-68834, CVE-2026-68838, CVE-2026-68841, CVE-2026-68875, CVE-2026-68877, CVE-2026-68880, CVE-2026-69265, CVE-2026-69270, CVE-2026-69274, CVE-2026-69275, CVE-2026-69280, CVE-2026-69283, CVE-2026-69284, CVE-2026-69289, CVE-2026-69296, CVE-2026-69300, CVE-2026-69301, CVE-2026-69307, CVE-2026-69312, CVE-2026-69314, CVE-2026-69332, CVE-2026-69333, CVE-2026-69335, CVE-2026-68833, CVE-2026-68851, CVE-2026-69366, CVE-2026-69337, CVE-2026-69347, CVE-2026-69379, CVE-2026-69390, CVE-2026-69401, CVE-2026-69413, CVE-2026-69420, CVE-2026-69429, CVE-2026-69448, CVE-2026-69455, CVE-2026-69532, CVE-2026-69472, CVE-2026-69479, CVE-2026-69531, CVE-2026-69517, CVE-2026-69505, CVE-2026-69504, CVE-2026-69527, CVE-2026-69549, CVE-2026-69588, CVE-2026-69609, CVE-2026-69648, CVE-2026-69689, CVE-2026-69790, CVE-2026-69638, CVE-2026-69859, CVE-2026-69717, CVE-2026-69711, CVE-2026-69875, CVE-2026-69889, CVE-2026-69757, CVE-2026-69741, CVE-2026-69762, CVE-2026-69744, CVE-2026-69832, CVE-2026-69691, CVE-2026-69808, CVE-2026-69775, CVE-2026-69822, CVE-2026-69770, CVE-2026-69676, CVE-2026-70289, CVE-2026-70563, CVE-2026-71329, CVE-2026-71332, CVE-2026-71350, CVE-2026-71348, CVE-2026-71345, CVE-2026-69469, CVE-2026-69501, CVE-2026-69548, CVE-2026-69846, CVE-2026-70283, CVE-2026-72981, CVE-2026-77491, CVE-2026-77492, CVE-2026-77503, CVE-2026-80093, CVE-2026-72949, CVE-2026-70019, CVE-2026-72940, CVE-2026-69573, CVE-2026-70290, CVE-2026-83991, CVE-2026-83999, CVE-2026-69321, CVE-2026-69316, CVE-2026-69340, CVE-2026-69348, CVE-2026-69350, CVE-2026-69353, CVE-2026-69357, CVE-2026-69393, CVE-2026-69410, CVE-2026-69421, CVE-2026-69428, CVE-2026-69425, CVE-2026-69427, CVE-2026-69434, CVE-2026-69456, CVE-2026-69459, CVE-2026-69478, CVE-2026-69561, CVE-2026-69512, CVE-2026-69498, CVE-2026-69571, CVE-2026-69535, CVE-2026-69538, CVE-2026-69591, CVE-2026-69566, CVE-2026-69567, CVE-2026-69584, CVE-2026-69617, CVE-2026-69630, CVE-2026-69610, CVE-2026-69881, CVE-2026-69680, CVE-2026-69619, CVE-2026-69685, CVE-2026-69643, CVE-2026-69687, CVE-2026-69791, CVE-2026-69707, CVE-2026-69652, CVE-2026-69834, CVE-2026-69709, CVE-2026-69844, CVE-2026-69814, CVE-2026-69731, CVE-2026-69706, CVE-2026-69779, CVE-2026-69895, CVE-2026-69792, CVE-2026-69853, CVE-2026-69761, CVE-2026-69785, CVE-2026-69818, CVE-2026-69786, CVE-2026-69874, CVE-2026-70565, CVE-2026-70574, CVE-2026-70569, CVE-2026-70575, CVE-2026-71349, CVE-2026-72927, CVE-2026-72952, CVE-2026-72942, CVE-2026-72966, CVE-2026-72967, CVE-2026-69426, CVE-2026-69564, CVE-2026-72985, CVE-2026-73019, CVE-2026-78451, CVE-2026-78452, CVE-2026-83940, CVE-2026-69598, CVE-2026-83501, CVE-2026-83498.

CVE-2026-83997

CVE-2026-83997 is a remote code execution vulnerability in Windows Message Queuing caused by a use-after-free flaw. An unauthenticated attacker can exploit this over the network to execute arbitrary code on the affected Windows system.

Affected products:

Windows Message Queuing

Source: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-83997

Related in this roundup: CVE-2026-69579, CVE-2026-68887, CVE-2026-69645.

CVE-2026-84000

CVE-2026-84000 is a heap-based buffer overflow vulnerability within the Microsoft Graphics Component that allows an authorized local attacker to achieve remote code execution.

Affected products:

Graphics Component

Source: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-84000

Related in this roundup: CVE-2026-77493, CVE-2026-69467, CVE-2026-73006, CVE-2026-73016, CVE-2026-83990.

CVE-2026-69806

CVE-2026-69806 is an elevation of privilege vulnerability in .NET that allows an authenticated local attacker to gain unauthorized access to sensitive information, potentially leading to privilege escalation.

Affected products:

.NET

Source: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-69806

Related in this roundup: CVE-2026-69439, CVE-2026-69805, CVE-2026-58649.

CVE-2026-85875

CVE-2026-85875 is an out-of-bounds read vulnerability in Microsoft Office Excel that enables an unauthorized local attacker to perform information disclosure. Detection efforts should focus on monitoring anomalous memory access patterns or unexpected file processing behavior within Excel instances.

Affected products:

Excel

Source: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-85875

Related in this roundup: CVE-2026-78515, CVE-2026-81398, CVE-2026-81386, CVE-2026-81947, CVE-2026-81387, CVE-2026-81954, CVE-2026-81390, CVE-2026-81399, CVE-2026-81391, CVE-2026-81401, CVE-2026-81958, CVE-2026-81396, CVE-2026-81392, CVE-2026-81397, CVE-2026-81956, CVE-2026-81393, CVE-2026-81400, CVE-2026-81389, CVE-2026-81394, CVE-2026-81960, CVE-2026-81395, CVE-2026-81957, CVE-2026-81388, CVE-2026-81951, CVE-2026-81959, CVE-2026-81953, CVE-2026-81949, CVE-2026-81950, CVE-2026-81948.

CVE-2026-83501

CVE-2026-83501 is an out-of-bounds read vulnerability in Windows Virtualization-Based Security (VBS) Enclave that enables a locally authorized attacker to perform an information disclosure attack.

Affected products:

Windows

Source: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-83501

Related in this roundup: CVE-2026-81963, CVE-2026-85880, CVE-2026-69496, CVE-2026-69586, CVE-2026-69768, CVE-2026-73025, CVE-2026-56172, CVE-2026-68832, CVE-2026-68834, CVE-2026-68838, CVE-2026-68841, CVE-2026-68875, CVE-2026-68877, CVE-2026-68880, CVE-2026-69265, CVE-2026-69270, CVE-2026-69274, CVE-2026-69275, CVE-2026-69280, CVE-2026-69283, CVE-2026-69284, CVE-2026-69289, CVE-2026-69296, CVE-2026-69300, CVE-2026-69301, CVE-2026-69307, CVE-2026-69312, CVE-2026-69314, CVE-2026-69332, CVE-2026-69333, CVE-2026-69335, CVE-2026-68833, CVE-2026-68851, CVE-2026-69366, CVE-2026-69337, CVE-2026-69347, CVE-2026-69379, CVE-2026-69390, CVE-2026-69401, CVE-2026-69413, CVE-2026-69420, CVE-2026-69429, CVE-2026-69448, CVE-2026-69455, CVE-2026-69532, CVE-2026-69472, CVE-2026-69479, CVE-2026-69531, CVE-2026-69517, CVE-2026-69505, CVE-2026-69504, CVE-2026-69527, CVE-2026-69549, CVE-2026-69588, CVE-2026-69609, CVE-2026-69648, CVE-2026-69689, CVE-2026-69790, CVE-2026-69638, CVE-2026-69859, CVE-2026-69717, CVE-2026-69711, CVE-2026-69875, CVE-2026-69889, CVE-2026-69757, CVE-2026-69741, CVE-2026-69762, CVE-2026-69744, CVE-2026-69832, CVE-2026-69691, CVE-2026-69808, CVE-2026-69775, CVE-2026-69822, CVE-2026-69770, CVE-2026-69676, CVE-2026-70289, CVE-2026-70563, CVE-2026-71329, CVE-2026-71332, CVE-2026-71350, CVE-2026-71348, CVE-2026-71345, CVE-2026-69469, CVE-2026-69501, CVE-2026-69548, CVE-2026-69846, CVE-2026-70283, CVE-2026-72981, CVE-2026-77491, CVE-2026-77492, CVE-2026-77503, CVE-2026-80093, CVE-2026-72949, CVE-2026-70019, CVE-2026-72940, CVE-2026-69573, CVE-2026-70290, CVE-2026-83991, CVE-2026-83999, CVE-2026-69321, CVE-2026-69316, CVE-2026-69340, CVE-2026-69348, CVE-2026-69350, CVE-2026-69353, CVE-2026-69357, CVE-2026-69393, CVE-2026-69410, CVE-2026-69421, CVE-2026-69428, CVE-2026-69425, CVE-2026-69427, CVE-2026-69434, CVE-2026-69456, CVE-2026-69459, CVE-2026-69478, CVE-2026-69561, CVE-2026-69512, CVE-2026-69498, CVE-2026-69571, CVE-2026-69535, CVE-2026-69538, CVE-2026-69591, CVE-2026-69566, CVE-2026-69567, CVE-2026-69584, CVE-2026-69617, CVE-2026-69630, CVE-2026-69610, CVE-2026-69881, CVE-2026-69680, CVE-2026-69619, CVE-2026-69685, CVE-2026-69643, CVE-2026-69687, CVE-2026-69791, CVE-2026-69707, CVE-2026-69652, CVE-2026-69834, CVE-2026-69709, CVE-2026-69844, CVE-2026-69814, CVE-2026-69731, CVE-2026-69706, CVE-2026-69779, CVE-2026-69895, CVE-2026-69792, CVE-2026-69853, CVE-2026-69761, CVE-2026-69785, CVE-2026-69818, CVE-2026-69786, CVE-2026-69874, CVE-2026-70565, CVE-2026-70574, CVE-2026-70569, CVE-2026-70575, CVE-2026-71349, CVE-2026-72927, CVE-2026-72952, CVE-2026-72942, CVE-2026-72966, CVE-2026-72967, CVE-2026-69426, CVE-2026-69564, CVE-2026-72985, CVE-2026-73019, CVE-2026-78451, CVE-2026-78452, CVE-2026-83940, CVE-2026-69598, CVE-2026-83995, CVE-2026-83498.

CVE-2026-83498

A vulnerability exists in Windows Virtualization-Based Security (VBS) Enclave due to an untrusted pointer dereference, which allows an authorized local attacker to elevate their privileges to a higher level within the system.

Affected products:

Windows

Source: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-83498

Related in this roundup: CVE-2026-81963, CVE-2026-85880, CVE-2026-69496, CVE-2026-69586, CVE-2026-69768, CVE-2026-73025, CVE-2026-56172, CVE-2026-68832, CVE-2026-68834, CVE-2026-68838, CVE-2026-68841, CVE-2026-68875, CVE-2026-68877, CVE-2026-68880, CVE-2026-69265, CVE-2026-69270, CVE-2026-69274, CVE-2026-69275, CVE-2026-69280, CVE-2026-69283, CVE-2026-69284, CVE-2026-69289, CVE-2026-69296, CVE-2026-69300, CVE-2026-69301, CVE-2026-69307, CVE-2026-69312, CVE-2026-69314, CVE-2026-69332, CVE-2026-69333, CVE-2026-69335, CVE-2026-68833, CVE-2026-68851, CVE-2026-69366, CVE-2026-69337, CVE-2026-69347, CVE-2026-69379, CVE-2026-69390, CVE-2026-69401, CVE-2026-69413, CVE-2026-69420, CVE-2026-69429, CVE-2026-69448, CVE-2026-69455, CVE-2026-69532, CVE-2026-69472, CVE-2026-69479, CVE-2026-69531, CVE-2026-69517, CVE-2026-69505, CVE-2026-69504, CVE-2026-69527, CVE-2026-69549, CVE-2026-69588, CVE-2026-69609, CVE-2026-69648, CVE-2026-69689, CVE-2026-69790, CVE-2026-69638, CVE-2026-69859, CVE-2026-69717, CVE-2026-69711, CVE-2026-69875, CVE-2026-69889, CVE-2026-69757, CVE-2026-69741, CVE-2026-69762, CVE-2026-69744, CVE-2026-69832, CVE-2026-69691, CVE-2026-69808, CVE-2026-69775, CVE-2026-69822, CVE-2026-69770, CVE-2026-69676, CVE-2026-70289, CVE-2026-70563, CVE-2026-71329, CVE-2026-71332, CVE-2026-71350, CVE-2026-71348, CVE-2026-71345, CVE-2026-69469, CVE-2026-69501, CVE-2026-69548, CVE-2026-69846, CVE-2026-70283, CVE-2026-72981, CVE-2026-77491, CVE-2026-77492, CVE-2026-77503, CVE-2026-80093, CVE-2026-72949, CVE-2026-70019, CVE-2026-72940, CVE-2026-69573, CVE-2026-70290, CVE-2026-83991, CVE-2026-83999, CVE-2026-69321, CVE-2026-69316, CVE-2026-69340, CVE-2026-69348, CVE-2026-69350, CVE-2026-69353, CVE-2026-69357, CVE-2026-69393, CVE-2026-69410, CVE-2026-69421, CVE-2026-69428, CVE-2026-69425, CVE-2026-69427, CVE-2026-69434, CVE-2026-69456, CVE-2026-69459, CVE-2026-69478, CVE-2026-69561, CVE-2026-69512, CVE-2026-69498, CVE-2026-69571, CVE-2026-69535, CVE-2026-69538, CVE-2026-69591, CVE-2026-69566, CVE-2026-69567, CVE-2026-69584, CVE-2026-69617, CVE-2026-69630, CVE-2026-69610, CVE-2026-69881, CVE-2026-69680, CVE-2026-69619, CVE-2026-69685, CVE-2026-69643, CVE-2026-69687, CVE-2026-69791, CVE-2026-69707, CVE-2026-69652, CVE-2026-69834, CVE-2026-69709, CVE-2026-69844, CVE-2026-69814, CVE-2026-69731, CVE-2026-69706, CVE-2026-69779, CVE-2026-69895, CVE-2026-69792, CVE-2026-69853, CVE-2026-69761, CVE-2026-69785, CVE-2026-69818, CVE-2026-69786, CVE-2026-69874, CVE-2026-70565, CVE-2026-70574, CVE-2026-70569, CVE-2026-70575, CVE-2026-71349, CVE-2026-72927, CVE-2026-72952, CVE-2026-72942, CVE-2026-72966, CVE-2026-72967, CVE-2026-69426, CVE-2026-69564, CVE-2026-72985, CVE-2026-73019, CVE-2026-78451, CVE-2026-78452, CVE-2026-83940, CVE-2026-69598, CVE-2026-83995, CVE-2026-83501.

CVE-2026-84003

CVE-2026-84003 describes an authentication bypass vulnerability within the Microsoft Authentication Library (MSAL) for Node.js. The vulnerability, caused by a capture-replay flaw, allows unauthorized remote attackers to perform spoofing attacks over a network by intercepting and replaying authentication tokens or requests.

Affected products:

Authentication Library (MSAL) for Node.js

Source: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-84003

CVE-2026-66303

A null pointer dereference vulnerability exists in Skype for Business and Lync that allows an authorized attacker to trigger a denial of service condition over the network.

Affected products:

Skype for Business
Lync

Source: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-66303

Related in this roundup: CVE-2026-66302, CVE-2026-66304, CVE-2026-66306, CVE-2026-66308, CVE-2026-63523, CVE-2026-66305, CVE-2026-69642, CVE-2026-69646, CVE-2026-66307.

CVE-2026-66307

CVE-2026-66307 is a denial of service vulnerability in Skype for Business and Lync caused by an integer underflow flaw, allowing a remote unauthorized attacker to disrupt service availability over a network.

Affected products:

Skype for Business
Lync

Source: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-66307

Related in this roundup: CVE-2026-66302, CVE-2026-66304, CVE-2026-66306, CVE-2026-66308, CVE-2026-63523, CVE-2026-66305, CVE-2026-69642, CVE-2026-69646, CVE-2026-66303.

Cpe:2.3:a:microsoft:copilot_studio:-:*:*:*:*:*:*:* - CraftedSignal Threat Feed

Microsoft Security Updates - September 2026

Summary

CVE-2026-62916

CVE-2026-70352

CVE-2026-80098

CVE-2026-83711

CVE-2026-62906

CVE-2026-65818

CVE-2026-69857

CVE-2026-70178

CVE-2026-81963

CVE-2026-85880

CVE-2026-65669

CVE-2026-68839

CVE-2026-69276

CVE-2026-69356

CVE-2026-69408

CVE-2026-69463

CVE-2026-69491

CVE-2026-69493

CVE-2026-69496

CVE-2026-69525

CVE-2026-69579

CVE-2026-69586

CVE-2026-69590

CVE-2026-69595

CVE-2026-69641

CVE-2026-69715

CVE-2026-69730

CVE-2026-69768

CVE-2026-69769

CVE-2026-69824

CVE-2026-69829

CVE-2026-69845

CVE-2026-69910

CVE-2026-70296

CVE-2026-72979

CVE-2026-72982

CVE-2026-72983

CVE-2026-73009

CVE-2026-73010

CVE-2026-73025

CVE-2026-77493

CVE-2026-78445

CVE-2026-81376

CVE-2026-83941

CVE-2026-66302

CVE-2026-47297

CVE-2026-50349

CVE-2026-55007

CVE-2026-56172

CVE-2026-56177

CVE-2026-56198

CVE-2026-57098

CVE-2026-57099

CVE-2026-58599

CVE-2026-58600

CVE-2026-58611

CVE-2026-62694

CVE-2026-62697

CVE-2026-62744

CVE-2026-62759

CVE-2026-62810

CVE-2026-62813

CVE-2026-62895

CVE-2026-65772

CVE-2026-66814

CVE-2026-66818

CVE-2026-66819

CVE-2026-66820

CVE-2026-67368

CVE-2026-67370

CVE-2026-67373

CVE-2026-67376

CVE-2026-67378

CVE-2026-67379

CVE-2026-67380

CVE-2026-67381

CVE-2026-67384

Cpe:2.3:a:microsoft:copilot_studio:-:::::::* - CraftedSignal Threat Feed