CVE-2026-69xxx records
Browse official CVE Program records with vulnerability descriptions, affected products, CVSS scores and source references. Browse by the year and numeric range in each CVE ID; publication and update dates appear on each record.
744 records · Page 1 of 8
Out-of-bounds read in Windows Update allows an authorized attacker to disclose information locally.
UpdatedUse after free in Remote Desktop Client allows an unauthorized attacker to execute code over a network.
UpdatedUse after free in Remote Desktop Client allows an unauthorized attacker to execute code over a network.
UpdatedUse after free in Remote Desktop Client allows an unauthorized attacker to execute code over a network.
UpdatedUse after free in Remote Desktop Client allows an unauthorized attacker to execute code over a network.
UpdatedUse after free in Remote Desktop Client allows an unauthorized attacker to execute code over a network.
UpdatedUse after free in Windows Remote Desktop Services allows an unauthorized attacker to execute code over a network.
UpdatedUse after free in Remote Desktop Client allows an unauthorized attacker to execute code over a network.
UpdatedUse after free in DNS Server allows an unauthorized attacker to execute code over a network.
UpdatedUse after free in Remote Desktop Client allows an unauthorized attacker to execute code over a network.
UpdatedUse after free in Remote Desktop Client allows an unauthorized attacker to execute code over a network.
UpdatedUse after free in Remote Desktop Client allows an unauthorized attacker to execute code over a network.
UpdatedHeap-based buffer overflow in Windows Libarchive allows an unauthorized attacker to execute code over a network.
UpdatedUse after free in Remote Desktop Client allows an unauthorized attacker to execute code over a network.
Updated- CVE-2026-69982: Active Directory Federation Services (AD FS) Security Feature Bypass Vulnerability 5.9 Medium
Weak authentication in Active Directory Federation Services (AD FS) allows an unauthorized attacker to bypass a security feature over a network.
Updated Improper protection of alternate path in Windows AppX Deployment Service allows an authorized attacker to bypass a security feature locally.
UpdatedNull pointer dereference in Windows VMSwitch allows an authorized attacker to deny service locally.
UpdatedUse after free in Quality Windows Audio/Video Experience (QWAVE) service allows an authorized attacker to elevate privileges locally.
UpdatedUse after free in Remote Desktop Client allows an unauthorized attacker to execute code over a network.
UpdatedOut-of-bounds read in Desktop Window Manager allows an authorized attacker to disclose information locally.
UpdatedImproper limitation of a pathname to a restricted directory ('path traversal') in Windows Libarchive allows an unauthorized attacker to perform tampering over a network.
UpdatedIncorrect authorization in Windows Kernel-Mode Drivers allows an authorized attacker to disclose information locally.
UpdatedHeap-based buffer overflow in Microsoft Streaming Service allows an authorized attacker to elevate privileges locally.
UpdatedImproper link resolution before file access ('link following') in Windows AppX Deployment Service allows an authorized attacker to disclose information locally.
UpdatedRelative path traversal in Windows Libarchive allows an unauthorized attacker to perform tampering over a network.
UpdatedOut-of-bounds read in Windows Overlay Filter allows an authorized attacker to disclose information locally.
UpdatedInteger overflow or wraparound in Microsoft Streaming Service allows an authorized attacker to elevate privileges locally.
UpdatedUse after free in Microsoft Streaming Service allows an authorized attacker to elevate privileges locally.
UpdatedHeap-based buffer overflow in Microsoft Streaming Service allows an authorized attacker to elevate privileges locally.
UpdatedOut-of-bounds read in Windows Overlay Filter allows an authorized attacker to execute code locally.
UpdatedHeap-based buffer overflow in Windows Overlay Filter allows an unauthorized attacker to execute code with a physical attack.
UpdatedInteger overflow or wraparound in Windows Overlay Filter allows an authorized attacker to elevate privileges locally.
UpdatedOut-of-bounds read in Windows Client for NFS allows an unauthorized attacker to disclose information over a network.
UpdatedBuffer over-read in Windows Overlay Filter allows an authorized attacker to disclose information locally.
UpdatedBuffer over-read in Windows Overlay Filter allows an authorized attacker to elevate privileges locally.
UpdatedOut-of-bounds read in Windows Overlay Filter allows an authorized attacker to elevate privileges locally.
UpdatedBuffer over-read in Windows Overlay Filter allows an authorized attacker to elevate privileges locally.
UpdatedHeap-based buffer overflow in Windows Client for NFS allows an authorized attacker to elevate privileges locally.
UpdatedHeap-based buffer overflow in Windows Overlay Filter allows an unauthorized attacker to execute code with a physical attack.
UpdatedMissing authorization in Windows AppX Deployment Extensions allows an authorized attacker to elevate privileges locally.
UpdatedImproper limitation of a pathname to a restricted directory ('path traversal') in Microsoft Office SharePoint allows an authorized attacker to execute code over a network.
UpdatedBuffer over-read in Windows Overlay Filter allows an authorized attacker to execute code locally.
UpdatedOut-of-bounds read in Windows Client for NFS allows an unauthorized attacker to disclose information over a network.
UpdatedUse after free in Windows Storage allows an authorized attacker to elevate privileges locally.
UpdatedInteger overflow or wraparound in Windows Spaceport.sys allows an authorized attacker to elevate privileges locally.
UpdatedConcurrent execution using shared resource with improper synchronization ('race condition') in Windows Storage allows an authorized attacker to elevate privileges locally.
UpdatedOut-of-bounds read in Windows DHCP Server allows an unauthorized attacker to disclose information over a network.
UpdatedOut-of-bounds read in Windows DHCP Server allows an unauthorized attacker to disclose information over a network.
UpdatedAccess of resource using incompatible type ('type confusion') in Desktop Window Manager allows an authorized attacker to elevate privileges locally.
UpdatedUncontrolled search path element in Windows AI allows an authorized attacker to elevate privileges locally.
UpdatedOut-of-bounds read in Microsoft Office Excel allows an unauthorized attacker to disclose information over a network.
UpdatedHeap-based buffer overflow in Windows Print Spooler Components allows an authorized attacker to elevate privileges locally.
UpdatedOut-of-bounds read in Windows Cryptographic Services allows an authorized attacker to disclose information locally.
UpdatedHeap-based buffer overflow in Windows Core Messaging allows an authorized attacker to elevate privileges locally.
UpdatedInteger overflow or wraparound in Windows NTFS allows an authorized attacker to elevate privileges locally.
UpdatedUse after free in Windows NTFS allows an authorized attacker to elevate privileges locally.
UpdatedOut-of-bounds read in Windows AppX Deployment Service allows an authorized attacker to disclose information locally.
UpdatedUse after free in Windows TCP/IP allows an unauthorized attacker to execute code over a network.
UpdatedUse after free in Microsoft Windows Search Component allows an authorized attacker to elevate privileges locally.
UpdatedStack-based buffer overflow in Windows Hyper-V allows an unauthorized attacker to execute code over a network.
UpdatedHeap-based buffer overflow in Microsoft COM for Windows allows an authorized attacker to elevate privileges locally.
UpdatedImproper handling of insufficient permissions or privileges in Windows Enterprise App Management allows an authorized attacker to elevate privileges locally.
UpdatedHeap-based buffer overflow in Windows Secure Kernel Mode allows an authorized attacker to elevate privileges locally.
UpdatedMissing authorization in Windows AppX Deployment Service allows an authorized attacker to perform tampering locally.
UpdatedServer-side request forgery (ssrf) in Microsoft Office SharePoint allows an authorized attacker to disclose information over a network.
UpdatedUntrusted pointer dereference in Windows NTFS allows an authorized attacker to execute code locally.
Updated- CVE-2026-69900: Kernel Streaming WOW Thunk Service Driver Elevation of Privilege Vulnerability 7.8 High
Untrusted pointer dereference in Kernel Streaming WOW Thunk Service Driver allows an authorized attacker to elevate privileges locally.
Updated Heap-based buffer overflow in Windows Kernel allows an authorized attacker to elevate privileges locally.
UpdatedUse after free in Windows Error Reporting allows an authorized attacker to elevate privileges locally.
UpdatedOut-of-bounds read in Windows Spaceport.sys allows an authorized attacker to disclose information locally.
UpdatedUse after free in Windows Media allows an authorized attacker to elevate privileges locally.
Updated- CVE-2026-69890: Windows Virtual Trusted Platform Module Elevation of Privilege Vulnerability 7.5 High
Use after free in Windows Virtual Trusted Platform Module allows an authorized attacker to elevate privileges locally.
Updated Use after free in Windows Bluetooth Service allows an authorized attacker to elevate privileges locally.
UpdatedHeap-based buffer overflow in Windows Imaging Component allows an unauthorized attacker to execute code over a network.
UpdatedBuffer over-read in Windows GDI allows an authorized attacker to elevate privileges locally.
UpdatedUse after free in Windows iSCSI allows an unauthorized attacker to execute code over a network.
UpdatedUntrusted search path in Windows Update allows an authorized attacker to elevate privileges locally.
Updated- CVE-2026-69881: Windows Internet Key Exchange (IKE) Extension Denial of Service Vulnerability 7.5 High
Null pointer dereference in Windows IKE Extension allows an unauthorized attacker to deny service over a network.
Updated Access of resource using incompatible type ('type confusion') in Desktop Window Manager allows an authorized attacker to elevate privileges locally.
UpdatedHeap-based buffer overflow in Windows DHCP Server allows an authorized attacker to execute code locally.
UpdatedOrigin validation error in Azure DevOps allows an unauthorized attacker to disclose information over a network.
UpdatedUse after free in Windows DHCP Server allows an authorized attacker to execute code over an adjacent network.
UpdatedHeap-based buffer overflow in Windows NTFS allows an authorized attacker to elevate privileges over a network.
UpdatedUntrusted pointer dereference in Windows ALPC allows an authorized attacker to elevate privileges locally.
UpdatedOut-of-bounds read in SQLite allows an authorized attacker to elevate privileges locally.
UpdatedUse after free in Windows Device Association Service allows an authorized attacker to elevate privileges locally.
UpdatedAuthorization bypass through user-controlled key in Microsoft Container Registry allows an unauthorized attacker to elevate privileges over a network.
UpdatedUse after free in Windows Hello allows an authorized attacker to elevate privileges locally.
Updated- CVE-2026-69862: Windows Wireless Wide Area Network Service Information Disclosure Vulnerability 5.5 Medium
Out-of-bounds read in Windows Wireless Wide Area Network Service allows an authorized attacker to disclose information locally.
Updated Heap-based buffer overflow in Windows Imaging Component allows an unauthorized attacker to execute code over a network.
Updated- CVE-2026-69859: Windows USB Audio Class driver (usbaudio.sys) Elevation of Privilege Vulnerability 7.0 High
Time-of-check time-of-use (toctou) race condition in Windows USB Audio Class driver (usbaudio.sys) allows an authorized attacker to elevate privileges locally.
Updated Use after free in Windows DNS allows an unauthorized attacker to execute code over a network.
UpdatedAuthorization bypass through user-controlled key in Azure Cosmos DB allows an authorized attacker to perform spoofing over a network.
UpdatedUse after free in Windows Storage allows an authorized attacker to elevate privileges locally.
UpdatedServer-side request forgery (ssrf) in Microsoft Copilot in Azure allows an authorized attacker to disclose information over a network.
UpdatedImproper authentication in Spring Cloud Azure allows an unauthorized attacker to elevate privileges over a network.
UpdatedUse of uninitialized resource in Windows Win32K allows an authorized attacker to disclose information locally.
Updated- CVE-2026-69852: Windows Routing and Remote Access Service (RRAS) Remote Code Execution Vulnerability 7.5 High
Remote Code Execution in Windows Routing and Remote Access Service (RRAS) allows attacker to gain an unauthorized access to victim's machine
Updated Server-side request forgery (ssrf) in Azure Active Directory allows an authorized attacker to elevate privileges over a network.
UpdatedUntrusted pointer dereference in Windows Certificates allows an authorized attacker to elevate privileges locally.
Updated