Microsoft Windows 10 Version 22H2 vulnerabilities

CVE-2026-69403 Medium · 5.5 CWE-862 Sep 8, 2026

Windows SMB Server Information Disclosure Vulnerability

Missing authorization in Windows SMB Server allows an authorized attacker to disclose information locally.

CVE-2026-69398 High · 7.0 CWE-362 Sep 8, 2026

Windows Bluetooth Service Elevation of Privilege Vulnerability

Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Bluetooth Service allows an authorized attacker to elevate privileges locally.

CVE-2026-69397 High · 7.5 CWE-416 Sep 8, 2026

Microsoft OpenSSH for Windows Remote Code Execution Vulnerability

Use after free in OpenSSH for Windows allows an unauthorized attacker to execute code over a network.

CVE-2026-69396 High · 7.1 CWE-416 Sep 8, 2026

Windows NDIS Elevation of Privilege Vulnerability

Use after free in Windows NDIS allows an authorized attacker to elevate privileges over a network.

CVE-2026-69394 High · 7.0 CWE-122 Sep 8, 2026

Windows Audio Service Elevation of Privilege Vulnerability

Heap-based buffer overflow in Windows Audio Service allows an authorized attacker to elevate privileges locally.

CVE-2026-69393 Medium · 5.7 CWE-125 Sep 8, 2026

Windows Spaceport.sys Information Disclosure Vulnerability

Out-of-bounds read in Windows Spaceport.sys allows an authorized attacker to disclose information over a network.

CVE-2026-69391 High · 7.8 CWE-121 Sep 8, 2026

Windows Broker Infrastructure Service Elevation of Privilege Vulnerability

Stack-based buffer overflow in Windows Broker Infrastructure Service allows an authorized attacker to elevate privileges locally.

CVE-2026-69390 Medium · 5.5 CWE-125 Sep 8, 2026

Windows Spaceport.sys Information Disclosure Vulnerability

Out-of-bounds read in Windows Spaceport.sys allows an authorized attacker to disclose information locally.

CVE-2026-69389 High · 7.8 CWE-122 Sep 8, 2026

Windows Storage Management Provider Elevation of Privilege Vulnerability

Heap-based buffer overflow in Windows Storage Management Provider allows an authorized attacker to elevate privileges locally.

CVE-2026-69388 High · 7.0 CWE-416 Sep 8, 2026

Windows Bluetooth Service Elevation of Privilege Vulnerability

Use after free in Windows Bluetooth Service allows an authorized attacker to elevate privileges locally.

CVE-2026-69386 High · 8.8 CWE-122 Sep 8, 2026

Microsoft Windows Media Foundation Remote Code Execution Vulnerability

Heap-based buffer overflow in Microsoft Windows Media Foundation allows an unauthorized attacker to execute code over a network.

CVE-2026-69385 High · 7.0 CWE-362 Sep 8, 2026

Windows TCP/IP Elevation of Privilege Vulnerability

Concurrent execution using shared resource with improper synchronization ('race condition') in Windows TCP/IP allows an authorized attacker to elevate privileges locally.

CVE-2026-69384 High · 7.1 CWE-476 Sep 8, 2026

Virtual Hard Disk (VHD) Miniport Driver Denial of Service Vulnerability

Null pointer dereference in Virtual Hard Disk (VHD) Miniport Driver allows an unauthorized attacker to deny service locally.

CVE-2026-69381 Medium · 4.6 CWE-125 Sep 8, 2026

Windows Storage Port Driver Information Disclosure Vulnerability

Out-of-bounds read in Windows Storage Port Driver allows an unauthorized attacker to disclose information with a physical attack.

CVE-2026-69377 High · 7.8 CWE-862 Sep 8, 2026

Windows Modern Device Management (MDM) Elevation of Privilege Vulnerability

Missing authorization in Windows Modern Device Management (MDM) allows an authorized attacker to elevate privileges locally.

CVE-2026-69376 Medium · 5.5 CWE-125 Sep 8, 2026

Microsoft Standard XPS Information Disclosure Vulnerability

Out-of-bounds read in Microsoft Standard XPS allows an authorized attacker to disclose information locally.

CVE-2026-69374 Medium · 6.5 CWE-770 Sep 8, 2026

Windows SMB Server Denial of Service Vulnerability

Allocation of resources without limits or throttling in Windows SMB Server allows an authorized attacker to deny service over a network.

CVE-2026-69373 Medium · 6.7 CWE-125 Sep 8, 2026

Windows Overlay Filter Elevation of Privilege Vulnerability

Integer overflow or wraparound in Windows Overlay Filter allows an authorized attacker to elevate privileges locally.

CVE-2026-69371 High · 8.0 CWE-122 Sep 8, 2026

Windows Overlay Filter Elevation of Privilege Vulnerability

Heap-based buffer overflow in Windows Overlay Filter allows an authorized attacker to elevate privileges over a network.

CVE-2026-69368 High · 7.8 CWE-122 Sep 8, 2026

Windows Overlay Filter Elevation of Privilege Vulnerability

Heap-based buffer overflow in Windows Overlay Filter allows an authorized attacker to elevate privileges locally.

CVE-2026-69367 Medium · 5.5 CWE-125 Sep 8, 2026

Microsoft Standard XPS Information Disclosure Vulnerability

Out-of-bounds read in Microsoft Standard XPS allows an authorized attacker to disclose information locally.

CVE-2026-69366 High · 7.1 CWE-416 Sep 8, 2026

Windows Kernel Elevation of Privilege Vulnerability

Use after free in Windows Kernel allows an authorized attacker to elevate privileges over a network.

CVE-2026-69365 High · 8.0 CWE-125 Sep 8, 2026

Microsoft Local Security Authority (LSA) Server Elevation of Privilege Vulnerability

Out-of-bounds read in Microsoft Local Security Authority Server (lsasrv) allows an authorized attacker to elevate privileges over a network.

CVE-2026-69364 High · 7.1 CWE-362 Sep 8, 2026

Windows Print Spooler Components Elevation of Privilege Vulnerability

Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Print Spooler Components allows an authorized attacker to elevate privileges over a network.

CVE-2026-69362 High · 7.0 CWE-416 Sep 8, 2026

Windows Error Reporting Elevation of Privilege Vulnerability

Use after free in Windows Error Reporting allows an authorized attacker to elevate privileges locally.