Home / CVEs
CVE Database
Published vulnerabilities with severity, known exploitation and official sources.
CVE-2026-69909
High · 7.8
CWE-122 Oct 13, 2026
Microsoft COM for Windows Elevation of Privilege Vulnerability
Heap-based buffer overflow in Microsoft COM for Windows allows an authorized attacker to elevate privileges locally.
CVE-2026-69898
High · 7.8
CWE-122 Oct 13, 2026
Windows Kernel Elevation of Privilege Vulnerability
Heap-based buffer overflow in Windows Kernel allows an authorized attacker to elevate privileges locally.
CVE-2026-69886
Critical · 9.8
CWE-122 Oct 13, 2026
Windows Imaging Component Remote Code Execution Vulnerability
Heap-based buffer overflow in Windows Imaging Component allows an unauthorized attacker to execute code over a network.
CVE-2026-69789
High · 7.5
CWE-122 Oct 13, 2026
Windows Reliable Multicast Transport Driver (RMCAST) Remote Code Execution Vulnerability
Heap-based buffer overflow in Reliable Multicast Transport Driver (RMCAST) allows an unauthorized attacker to execute code over an adjacent network.
CVE-2026-69639
Critical · 9.8
CWE-122 Oct 13, 2026
Windows libarchive Remote Code Execution Vulnerability
Heap-based buffer overflow in Windows Libarchive allows an unauthorized attacker to execute code over a network.
CVE-2026-69635
Medium · 6.6
CWE-122 Oct 13, 2026
Windows Installer Elevation of Privilege Vulnerability
Heap-based buffer overflow in Windows Installer allows an authorized attacker to elevate privileges with a physical attack.
CVE-2026-69634
Critical · 9.8
CWE-122 Oct 13, 2026
Windows iSCSI Remote Code Execution Vulnerability
Heap-based buffer overflow in Windows iSCSI allows an unauthorized attacker to execute code over a network.
CVE-2026-69633
High · 7.8
CWE-122 Oct 13, 2026
Windows Update Elevation of Privilege Vulnerability
Heap-based buffer overflow in Windows Update allows an authorized attacker to elevate privileges locally.
CVE-2026-69471
High · 7.8
CWE-122 Oct 13, 2026
Windows Installer Elevation of Privilege Vulnerability
Heap-based buffer overflow in Windows Installer allows an authorized attacker to elevate privileges locally.
CVE-2026-69363
High · 8.0
CWE-122 Oct 13, 2026
Windows Error Reporting Elevation of Privilege Vulnerability
Heap-based buffer overflow in Windows Error Reporting allows an authorized attacker to elevate privileges over a network.
CVE-2026-69354
High · 7.8
CWE-122 Oct 13, 2026
Windows Error Reporting Elevation of Privilege Vulnerability
Heap-based buffer overflow in Windows Error Reporting allows an authorized attacker to elevate privileges locally.
CVE-2026-69326
High · 8.8
CWE-122 Oct 13, 2026
Graphic Fonts Remote Code Execution Vulnerability
Heap-based buffer overflow in Graphic Fonts allows an unauthorized attacker to execute code over a network.
CVE-2026-68836
High · 7.8
CWE-122 Oct 13, 2026
Windows kernel32.dll Elevation of Privilege Vulnerability
Heap-based buffer overflow in Windows kernel32.dll allows an authorized attacker to elevate privileges locally.
CVE-2026-109453
High · 7.0
CWE-122 Oct 13, 2026
Virtual Hard Disk (VHD) Miniport Driver Elevation of Privilege Vulnerability
Heap-based buffer overflow in Virtual Hard Disk (VHD) Miniport Driver allows an authorized attacker to elevate privileges locally.
CVE-2026-108467
High · 8.8
CWE-122 Oct 13, 2026
Microsoft PostScript Printer Driver Remote Code Execution Vulnerability
Heap-based buffer overflow in Microsoft PostScript Printer Driver allows an authorized attacker to execute code over a network.
CVE-2026-108399
High · 7.2
CWE-122 Oct 13, 2026
Windows Hyper-V Elevation of Privilege Vulnerability
Heap-based buffer overflow in Windows Hyper-V allows an authorized attacker to elevate privileges locally.
CVE-2026-108130
High · 7.8
CWE-122 Oct 13, 2026
Windows Virtualization-Based Security (VBS) Enclave Elevation of Privilege Vulnerability
Heap-based buffer overflow in Windows Virtualization-Based Security (VBS) Enclave allows an authorized attacker to elevate privileges locally.
CVE-2026-105716
High · 8.8
CWE-122 Oct 13, 2026
Microsoft Office Access Remote Code Execution Vulnerability
Heap-based buffer overflow in Microsoft Office Access allows an unauthorized attacker to execute code over a network.
CVE-2026-105714
High · 7.5
CWE-122 Oct 13, 2026
Microsoft Office Access Remote Code Execution Vulnerability
Heap-based buffer overflow in Microsoft Office Access allows an unauthorized attacker to execute code over a network.
CVE-2026-105599
High · 7.5
CWE-122 Oct 13, 2026
Microsoft Office PowerPoint Remote Code Execution Vulnerability
Heap-based buffer overflow in Microsoft Office PowerPoint allows an unauthorized attacker to execute code over a network.
CVE-2026-105598
High · 8.8
CWE-122 Oct 13, 2026
Microsoft Office Access Remote Code Execution Vulnerability
Heap-based buffer overflow in Microsoft Office Access allows an unauthorized attacker to execute code over a network.
CVE-2026-105597
High · 8.8
CWE-122 Oct 13, 2026
Microsoft Office Access Remote Code Execution Vulnerability
Heap-based buffer overflow in Microsoft Office Access allows an unauthorized attacker to execute code over a network.
CVE-2026-105596
High · 8.8
CWE-122 Oct 13, 2026
Microsoft Office Access Remote Code Execution Vulnerability
Heap-based buffer overflow in Microsoft Office Access allows an unauthorized attacker to execute code over a network.
CVE-2026-105593
High · 8.8
CWE-122 Oct 13, 2026
Microsoft Office Access Remote Code Execution Vulnerability
Heap-based buffer overflow in Microsoft Office Access allows an unauthorized attacker to execute code over a network.
CVE-2026-105592
High · 7.5
CWE-122 Oct 13, 2026
Microsoft Office Access Remote Code Execution Vulnerability
Heap-based buffer overflow in Microsoft Office Access allows an unauthorized attacker to execute code over a network.