Home / CVEs
CVE Database
Published vulnerabilities with severity, known exploitation and official sources.
CVE-2026-69604
High · 7.8
CWE-122 Sep 8, 2026
Windows Audio Service Elevation of Privilege Vulnerability
Heap-based buffer overflow in Windows Audio Service allows an authorized attacker to elevate privileges locally.
CVE-2026-69603
High · 8.8
CWE-122 Sep 8, 2026
Windows Hyper-V Remote Code Execution Vulnerability
Heap-based buffer overflow in Windows Hyper-V allows an authorized attacker to execute code locally.
CVE-2026-69601
High · 8.8
CWE-122 Sep 8, 2026
Microsoft Windows Media Foundation Remote Code Execution Vulnerability
Heap-based buffer overflow in Microsoft Windows Media Foundation allows an unauthorized attacker to execute code over a network.
CVE-2026-69594
High · 7.8
CWE-122 Sep 8, 2026
Microsoft Local Security Authority (LSA) Server Elevation of Privilege Vulnerability
Heap-based buffer overflow in Microsoft Local Security Authority Server (lsasrv) allows an authorized attacker to elevate privileges locally.
CVE-2026-69593
High · 7.8
CWE-122 Sep 8, 2026
Windows Biometric Service Elevation of Privilege Vulnerability
Heap-based buffer overflow in Windows Biometric Service allows an authorized attacker to elevate privileges locally.
CVE-2026-69592
High · 7.8
CWE-122 Sep 8, 2026
Windows Universal Disk Format File System Driver (UDFS) Elevation of Privilege Vulnerability
Heap-based buffer overflow in Windows Universal Disk Format File System Driver (UDFS) allows an authorized attacker to elevate privileges locally.
CVE-2026-69590
Critical · 9.8
CWE-122 Sep 8, 2026
Windows Routing and Remote Access Service (RRAS) Remote Code Execution Vulnerability
Remote Code Execution in Windows Routing and Remote Access Service (RRAS) allows attacker to gain an unauthorized access to victim's machine
CVE-2026-69589
High · 7.8
CWE-122 Sep 8, 2026
Windows Biometric Service Elevation of Privilege Vulnerability
Heap-based buffer overflow in Windows Biometric Service allows an authorized attacker to elevate privileges locally.
CVE-2026-69586
Critical · 9.8
CWE-122 Sep 8, 2026
Microsoft Windows PDF Remote Code Execution Vulnerability
Integer overflow or wraparound in Microsoft Windows PDF allows an unauthorized attacker to execute code over a network.
CVE-2026-69583
High · 7.8
CWE-122 Sep 8, 2026
Windows Biometric Service Elevation of Privilege Vulnerability
Heap-based buffer overflow in Windows Biometric Service allows an authorized attacker to elevate privileges locally.
CVE-2026-69580
High · 7.8
CWE-122 Sep 8, 2026
Windows Biometric Service Elevation of Privilege Vulnerability
Heap-based buffer overflow in Windows Biometric Service allows an authorized attacker to elevate privileges locally.
CVE-2026-69578
High · 7.0
CWE-122 Sep 8, 2026
Windows Kernel Elevation of Privilege Vulnerability
Numeric truncation error in Windows Kernel allows an authorized attacker to elevate privileges locally.
CVE-2026-69571
High · 7.8
CWE-122 Sep 8, 2026
Windows USB Audio Class driver (usbaudio.sys) Elevation of Privilege Vulnerability
Heap-based buffer overflow in Windows USB Audio Class driver (usbaudio.sys) allows an authorized attacker to elevate privileges locally.
CVE-2026-69566
Medium · 6.8
CWE-122 Sep 8, 2026
Windows NTFS Remote Code Execution Vulnerability
Heap-based buffer overflow in Windows NTFS allows an unauthorized attacker to execute code with a physical attack.
CVE-2026-69564
High · 7.0
CWE-122 Sep 8, 2026
Windows Online Certificate Status Protocol (OCSP) Elevation of Privilege Vulnerability
Heap-based buffer overflow in Windows Online Certificate Status Protocol (OCSP) allows an authorized attacker to elevate privileges locally.
CVE-2026-69563
High · 7.0
CWE-122 Sep 8, 2026
Windows Program Compatibility Assistant Service Elevation of Privilege Vulnerability
Heap-based buffer overflow in Windows Program Compatibility Assistant Service allows an authorized attacker to elevate privileges locally.
CVE-2026-69556
High · 8.8
CWE-122 Sep 8, 2026
Microsoft Office Word Remote Code Execution Vulnerability
Heap-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code over a network.
CVE-2026-69548
Medium · 4.6
CWE-122 Sep 8, 2026
Windows RNDIS Information Disclosure Vulnerability
Heap-based buffer overflow in Windows RNDIS allows an unauthorized attacker to disclose information with a physical attack.
CVE-2026-69547
High · 8.8
CWE-122 Sep 8, 2026
Windows DHCP Server Remote Code Execution Vulnerability
Heap-based buffer overflow in Windows DHCP Server allows an authorized attacker to execute code over a network.
CVE-2026-69544
High · 7.8
CWE-122 Sep 8, 2026
Windows SMB Client Elevation of Privilege Vulnerability
Heap-based buffer overflow in Windows SMB Client allows an authorized attacker to elevate privileges locally.
CVE-2026-69542
High · 7.8
CWE-122 Sep 8, 2026
Windows Camera Frame Server Monitor Elevation of Privilege Vulnerability
Heap-based buffer overflow in Windows Camera Frame Server Monitor allows an authorized attacker to elevate privileges locally.
CVE-2026-69541
High · 7.8
CWE-122 Sep 8, 2026
Virtual Hard Disk (VHD) Miniport Driver Elevation of Privilege Vulernability
Heap-based buffer overflow in Virtual Hard Disk (VHD) Miniport Driver allows an authorized attacker to elevate privileges locally.
CVE-2026-69535
High · 7.8
CWE-122 Sep 8, 2026
Windows Spaceport.sys Elevation of Privilege Vulnerability
Numeric truncation error in Windows Spaceport.sys allows an authorized attacker to elevate privileges locally.
CVE-2026-69529
High · 8.8
CWE-122 Sep 8, 2026
Microsoft Office Access Remote Code Execution Vulnerability
Heap-based buffer overflow in Microsoft Office Access allows an unauthorized attacker to execute code over a network.
CVE-2026-69522
High · 8.8
CWE-122 Sep 8, 2026
.NET and Visual Studio Remote Code Execution Vulnerability
Heap-based buffer overflow in Visual Studio allows an unauthorized attacker to execute code over a network.