| CVE | Vendor / Product | Sev | Risk | CVSS | EPSS | KEV | Published | Description |
|---|---|---|---|---|---|---|---|---|
| CVE-2026-69991 | Hig | 0.49 | 7.5 | 0.01 | Oct 13, 2026 | Use after free in Remote Desktop Client allows an unauthorized attacker to execute code over a network. | ||
| CVE-2026-69988 | Hig | 0.49 | 7.5 | 0.01 | Oct 13, 2026 | Use after free in Remote Desktop Client allows an unauthorized attacker to execute code over a network. | ||
| CVE-2026-69987 | Hig | 0.49 | 7.5 | 0.01 | Oct 13, 2026 | Use after free in Remote Desktop Client allows an unauthorized attacker to execute code over a network. | ||
| CVE-2026-69986 | Hig | 0.49 | 7.5 | 0.01 | Oct 13, 2026 | Use after free in Remote Desktop Client allows an unauthorized attacker to execute code over a network. | ||
| CVE-2026-69985 | Hig | 0.57 | 8.8 | 0.01 | Oct 13, 2026 | Heap-based buffer overflow in Windows Libarchive allows an unauthorized attacker to execute code over a network. | ||
| CVE-2026-69984 | Hig | 0.49 | 7.5 | 0.01 | Oct 13, 2026 | Use after free in Remote Desktop Client allows an unauthorized attacker to execute code over a network. | ||
| CVE-2026-69977 | Hig | 0.46 | 7.0 | 0.00 | Oct 13, 2026 | Use after free in Quality Windows Audio/Video Experience (QWAVE) service allows an authorized attacker to elevate privileges locally. | ||
| CVE-2026-69976 | Hig | 0.49 | 7.5 | 0.01 | Oct 13, 2026 | Use after free in Remote Desktop Client allows an unauthorized attacker to execute code over a network. | ||
| CVE-2026-69970 | Hig | 0.46 | 7.0 | 0.00 | Oct 13, 2026 | Heap-based buffer overflow in Microsoft Streaming Service allows an authorized attacker to elevate privileges locally. | ||
| CVE-2026-69966 | Hig | 0.51 | 7.8 | 0.00 | Oct 13, 2026 | Integer overflow or wraparound in Microsoft Streaming Service allows an authorized attacker to elevate privileges locally. | ||
| CVE-2026-69964 | Hig | 0.46 | 7.0 | 0.00 | Oct 13, 2026 | Use after free in Microsoft Streaming Service allows an authorized attacker to elevate privileges locally. | ||
| CVE-2026-69963 | Hig | 0.51 | 7.8 | 0.00 | Oct 13, 2026 | Heap-based buffer overflow in Microsoft Streaming Service allows an authorized attacker to elevate privileges locally. | ||
| CVE-2026-69959 | Hig | 0.51 | 7.8 | 0.00 | Oct 13, 2026 | Out-of-bounds read in Windows Overlay Filter allows an authorized attacker to execute code locally. | ||
| CVE-2026-69957 | Hig | 0.51 | 7.8 | 0.00 | Oct 13, 2026 | Integer overflow or wraparound in Windows Overlay Filter allows an authorized attacker to elevate privileges locally. | ||
| CVE-2026-69953 | Hig | 0.51 | 7.8 | 0.00 | Oct 13, 2026 | Buffer over-read in Windows Overlay Filter allows an authorized attacker to elevate privileges locally. | ||
| CVE-2026-69952 | Hig | 0.51 | 7.8 | 0.00 | Oct 13, 2026 | Out-of-bounds read in Windows Overlay Filter allows an authorized attacker to elevate privileges locally. | ||
| CVE-2026-69950 | Hig | 0.51 | 7.8 | 0.00 | Oct 13, 2026 | Buffer over-read in Windows Overlay Filter allows an authorized attacker to elevate privileges locally. | ||
| CVE-2026-69949 | Hig | 0.51 | 7.8 | 0.00 | Oct 13, 2026 | Heap-based buffer overflow in Windows Client for NFS allows an authorized attacker to elevate privileges locally. | ||
| CVE-2026-69945 | Hig | 0.57 | 8.8 | 0.00 | Oct 13, 2026 | Missing authorization in Windows AppX Deployment Extensions allows an authorized attacker to elevate privileges locally. | ||
| CVE-2026-69943 | Hig | 0.57 | 8.8 | 0.01 | Oct 13, 2026 | Improper limitation of a pathname to a restricted directory ('path traversal') in Microsoft Office SharePoint allows an authorized attacker to execute code over a network. | ||
| CVE-2026-69942 | Hig | 0.51 | 7.8 | 0.00 | Oct 13, 2026 | Buffer over-read in Windows Overlay Filter allows an authorized attacker to execute code locally. | ||
| CVE-2026-69935 | Hig | 0.46 | 7.0 | 0.00 | Oct 13, 2026 | Use after free in Windows Storage allows an authorized attacker to elevate privileges locally. | ||
| CVE-2026-69934 | Hig | 0.51 | 7.8 | 0.00 | Oct 13, 2026 | Integer overflow or wraparound in Windows Spaceport.sys allows an authorized attacker to elevate privileges locally. | ||
| CVE-2026-69931 | Hig | 0.46 | 7.0 | 0.00 | Oct 13, 2026 | Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Storage allows an authorized attacker to elevate privileges locally. | ||
| CVE-2026-69926 | Hig | 0.51 | 7.8 | 0.00 | Oct 13, 2026 | Access of resource using incompatible type ('type confusion') in Desktop Window Manager allows an authorized attacker to elevate privileges locally. | ||
| CVE-2026-69923 | Hig | 0.51 | 7.8 | 0.01 | Oct 13, 2026 | Uncontrolled search path element in Windows AI allows an authorized attacker to elevate privileges locally. | ||
| CVE-2026-69918 | Hig | 0.57 | 8.8 | 0.00 | Oct 13, 2026 | Heap-based buffer overflow in Windows Core Messaging allows an authorized attacker to elevate privileges locally. | ||
| CVE-2026-69916 | Hig | 0.51 | 7.8 | 0.00 | Oct 13, 2026 | Integer overflow or wraparound in Windows NTFS allows an authorized attacker to elevate privileges locally. | ||
| CVE-2026-69915 | Hig | 0.46 | 7.0 | 0.00 | Oct 13, 2026 | Use after free in Windows NTFS allows an authorized attacker to elevate privileges locally. | ||
| CVE-2026-69913 | Hig | 0.53 | 8.1 | 0.01 | Oct 13, 2026 | Use after free in Windows TCP/IP allows an unauthorized attacker to execute code over a network. | ||
| CVE-2026-69909 | Hig | 0.51 | 7.8 | 0.00 | Oct 13, 2026 | Heap-based buffer overflow in Microsoft COM for Windows allows an authorized attacker to elevate privileges locally. | ||
| CVE-2026-69898 | Hig | 0.51 | 7.8 | 0.00 | Oct 13, 2026 | Heap-based buffer overflow in Windows Kernel allows an authorized attacker to elevate privileges locally. | ||
| CVE-2026-69884 | Hig | 0.51 | 7.8 | 0.00 | Oct 13, 2026 | Buffer over-read in Windows GDI allows an authorized attacker to elevate privileges locally. | ||
| CVE-2026-69882 | Hig | 0.51 | 7.8 | 0.01 | Oct 13, 2026 | Untrusted search path in Windows Update allows an authorized attacker to elevate privileges locally. | ||
| CVE-2026-69880 | Hig | 0.51 | 7.8 | 0.00 | Oct 13, 2026 | Access of resource using incompatible type ('type confusion') in Desktop Window Manager allows an authorized attacker to elevate privileges locally. | ||
| CVE-2026-69867 | Hig | 0.51 | 7.8 | 0.00 | Oct 13, 2026 | Out-of-bounds read in SQLite allows an authorized attacker to elevate privileges locally. | ||
| CVE-2026-69856 | Hig | 0.46 | 7.0 | 0.00 | Oct 13, 2026 | Use after free in Windows Storage allows an authorized attacker to elevate privileges locally. | ||
| CVE-2026-69850 | Hig | 0.51 | 7.8 | 0.00 | Oct 13, 2026 | Untrusted pointer dereference in Windows Certificates allows an authorized attacker to elevate privileges locally. | ||
| CVE-2026-69840 | Hig | 0.46 | 7.0 | 0.00 | Oct 13, 2026 | Use after free in Windows Certificates allows an authorized attacker to elevate privileges locally. | ||
| CVE-2026-69830 | Hig | 0.53 | 8.1 | 0.00 | Oct 13, 2026 | Concurrent execution using shared resource with improper synchronization ('race condition') in Windows DHCP Server allows an unauthorized attacker to execute code over a network. | ||
| CVE-2026-69802 | Hig | 0.53 | 8.1 | 0.01 | Oct 13, 2026 | Weak authentication in Network Device Enrollment Service (NDES) allows an unauthorized attacker to execute code over a network. | ||
| CVE-2026-69798 | Hig | 0.51 | 7.8 | 0.00 | Oct 13, 2026 | Use after free in Windows Wired AutoConfig Service allows an authorized attacker to elevate privileges locally. | ||
| CVE-2026-69795 | Hig | 0.46 | 7.0 | 0.00 | Oct 13, 2026 | Null pointer dereference in Windows Clipboard Server allows an authorized attacker to elevate privileges locally. | ||
| CVE-2026-69789 | Hig | 0.49 | 7.5 | 0.00 | Oct 13, 2026 | Heap-based buffer overflow in Reliable Multicast Transport Driver (RMCAST) allows an unauthorized attacker to execute code over an adjacent network. | ||
| CVE-2026-69783 | Hig | 0.51 | 7.8 | 0.01 | Oct 13, 2026 | External control of file name or path in Windows Update allows an authorized attacker to elevate privileges locally. | ||
| CVE-2026-69766 | Hig | 0.46 | 7.0 | 0.00 | Oct 13, 2026 | Use after free in Windows Storage allows an authorized attacker to elevate privileges locally. | ||
| CVE-2026-69765 | Hig | 0.57 | 8.8 | 0.01 | Oct 13, 2026 | Use after free in Windows Storport Miniport Driver allows an unauthorized attacker to execute code over a network. | ||
| CVE-2026-69763 | Hig | 0.46 | 7.0 | 0.00 | Oct 13, 2026 | Use after free in Windows Storage allows an authorized attacker to elevate privileges locally. | ||
| CVE-2026-69743 | Hig | 0.45 | 7.0 | 0.00 | Oct 13, 2026 | Use after free in Windows Program Compatibility Assistant Service allows an authorized attacker to elevate privileges locally. | ||
| CVE-2026-69736 | Hig | 0.46 | 7.0 | 0.00 | Oct 13, 2026 | Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Credential Manager allows an authorized attacker to elevate privileges locally. |
- risk 0.49cvss 7.5epss 0.01
Use after free in Remote Desktop Client allows an unauthorized attacker to execute code over a network.
- risk 0.49cvss 7.5epss 0.01
Use after free in Remote Desktop Client allows an unauthorized attacker to execute code over a network.
- risk 0.49cvss 7.5epss 0.01
Use after free in Remote Desktop Client allows an unauthorized attacker to execute code over a network.
- risk 0.49cvss 7.5epss 0.01
Use after free in Remote Desktop Client allows an unauthorized attacker to execute code over a network.
- risk 0.57cvss 8.8epss 0.01
Heap-based buffer overflow in Windows Libarchive allows an unauthorized attacker to execute code over a network.
- risk 0.49cvss 7.5epss 0.01
Use after free in Remote Desktop Client allows an unauthorized attacker to execute code over a network.
- risk 0.46cvss 7.0epss 0.00
Use after free in Quality Windows Audio/Video Experience (QWAVE) service allows an authorized attacker to elevate privileges locally.
- risk 0.49cvss 7.5epss 0.01
Use after free in Remote Desktop Client allows an unauthorized attacker to execute code over a network.
- risk 0.46cvss 7.0epss 0.00
Heap-based buffer overflow in Microsoft Streaming Service allows an authorized attacker to elevate privileges locally.
- risk 0.51cvss 7.8epss 0.00
Integer overflow or wraparound in Microsoft Streaming Service allows an authorized attacker to elevate privileges locally.
- risk 0.46cvss 7.0epss 0.00
Use after free in Microsoft Streaming Service allows an authorized attacker to elevate privileges locally.
- risk 0.51cvss 7.8epss 0.00
Heap-based buffer overflow in Microsoft Streaming Service allows an authorized attacker to elevate privileges locally.
- risk 0.51cvss 7.8epss 0.00
Out-of-bounds read in Windows Overlay Filter allows an authorized attacker to execute code locally.
- risk 0.51cvss 7.8epss 0.00
Integer overflow or wraparound in Windows Overlay Filter allows an authorized attacker to elevate privileges locally.
- risk 0.51cvss 7.8epss 0.00
Buffer over-read in Windows Overlay Filter allows an authorized attacker to elevate privileges locally.
- risk 0.51cvss 7.8epss 0.00
Out-of-bounds read in Windows Overlay Filter allows an authorized attacker to elevate privileges locally.
- risk 0.51cvss 7.8epss 0.00
Buffer over-read in Windows Overlay Filter allows an authorized attacker to elevate privileges locally.
- risk 0.51cvss 7.8epss 0.00
Heap-based buffer overflow in Windows Client for NFS allows an authorized attacker to elevate privileges locally.
- risk 0.57cvss 8.8epss 0.00
Missing authorization in Windows AppX Deployment Extensions allows an authorized attacker to elevate privileges locally.
- risk 0.57cvss 8.8epss 0.01
Improper limitation of a pathname to a restricted directory ('path traversal') in Microsoft Office SharePoint allows an authorized attacker to execute code over a network.
- risk 0.51cvss 7.8epss 0.00
Buffer over-read in Windows Overlay Filter allows an authorized attacker to execute code locally.
- risk 0.46cvss 7.0epss 0.00
Use after free in Windows Storage allows an authorized attacker to elevate privileges locally.
- risk 0.51cvss 7.8epss 0.00
Integer overflow or wraparound in Windows Spaceport.sys allows an authorized attacker to elevate privileges locally.
- risk 0.46cvss 7.0epss 0.00
Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Storage allows an authorized attacker to elevate privileges locally.
- risk 0.51cvss 7.8epss 0.00
Access of resource using incompatible type ('type confusion') in Desktop Window Manager allows an authorized attacker to elevate privileges locally.
- risk 0.51cvss 7.8epss 0.01
Uncontrolled search path element in Windows AI allows an authorized attacker to elevate privileges locally.
- risk 0.57cvss 8.8epss 0.00
Heap-based buffer overflow in Windows Core Messaging allows an authorized attacker to elevate privileges locally.
- risk 0.51cvss 7.8epss 0.00
Integer overflow or wraparound in Windows NTFS allows an authorized attacker to elevate privileges locally.
- risk 0.46cvss 7.0epss 0.00
Use after free in Windows NTFS allows an authorized attacker to elevate privileges locally.
- risk 0.53cvss 8.1epss 0.01
Use after free in Windows TCP/IP allows an unauthorized attacker to execute code over a network.
- risk 0.51cvss 7.8epss 0.00
Heap-based buffer overflow in Microsoft COM for Windows allows an authorized attacker to elevate privileges locally.
- risk 0.51cvss 7.8epss 0.00
Heap-based buffer overflow in Windows Kernel allows an authorized attacker to elevate privileges locally.
- risk 0.51cvss 7.8epss 0.00
Buffer over-read in Windows GDI allows an authorized attacker to elevate privileges locally.
- risk 0.51cvss 7.8epss 0.01
Untrusted search path in Windows Update allows an authorized attacker to elevate privileges locally.
- risk 0.51cvss 7.8epss 0.00
Access of resource using incompatible type ('type confusion') in Desktop Window Manager allows an authorized attacker to elevate privileges locally.
- risk 0.51cvss 7.8epss 0.00
Out-of-bounds read in SQLite allows an authorized attacker to elevate privileges locally.
- risk 0.46cvss 7.0epss 0.00
Use after free in Windows Storage allows an authorized attacker to elevate privileges locally.
- risk 0.51cvss 7.8epss 0.00
Untrusted pointer dereference in Windows Certificates allows an authorized attacker to elevate privileges locally.
- risk 0.46cvss 7.0epss 0.00
Use after free in Windows Certificates allows an authorized attacker to elevate privileges locally.
- risk 0.53cvss 8.1epss 0.00
Concurrent execution using shared resource with improper synchronization ('race condition') in Windows DHCP Server allows an unauthorized attacker to execute code over a network.
- risk 0.53cvss 8.1epss 0.01
Weak authentication in Network Device Enrollment Service (NDES) allows an unauthorized attacker to execute code over a network.
- risk 0.51cvss 7.8epss 0.00
Use after free in Windows Wired AutoConfig Service allows an authorized attacker to elevate privileges locally.
- risk 0.46cvss 7.0epss 0.00
Null pointer dereference in Windows Clipboard Server allows an authorized attacker to elevate privileges locally.
- risk 0.49cvss 7.5epss 0.00
Heap-based buffer overflow in Reliable Multicast Transport Driver (RMCAST) allows an unauthorized attacker to execute code over an adjacent network.
- risk 0.51cvss 7.8epss 0.01
External control of file name or path in Windows Update allows an authorized attacker to elevate privileges locally.
- risk 0.46cvss 7.0epss 0.00
Use after free in Windows Storage allows an authorized attacker to elevate privileges locally.
- risk 0.57cvss 8.8epss 0.01
Use after free in Windows Storport Miniport Driver allows an unauthorized attacker to execute code over a network.
- risk 0.46cvss 7.0epss 0.00
Use after free in Windows Storage allows an authorized attacker to elevate privileges locally.
- risk 0.45cvss 7.0epss 0.00
Use after free in Windows Program Compatibility Assistant Service allows an authorized attacker to elevate privileges locally.
- risk 0.46cvss 7.0epss 0.00
Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Credential Manager allows an authorized attacker to elevate privileges locally.