CVE-2026-73002 is an integer overflow or wraparound vulnerability in the Windows Biometric Service of Microsoft Windows 10 Version 1607 and later builds. This flaw allows an authorized local attacker to elevate privileges. The vulnerability has been assigned a high severity score of 7.8 and has been officially fixed in multiple Windows 10 builds.
CVE-2026-72990 is a heap-based buffer overflow vulnerability in the Windows Biometric Service on Microsoft Windows 10 Version 1607 and later builds. This flaw allows an authorized local attacker to elevate privileges on the affected system. The vulnerability has been assigned a high severity rating with a CVSS score of 7.8. Microsoft has released official fixes for all affected versions.
CVE-2026-72995 is a heap-based buffer overflow vulnerability in the Windows Biometric Service on Microsoft Windows 10 Version 1607 and related builds. This flaw allows an authorized local attacker to elevate privileges. The vulnerability has a high severity rating with a CVSS score of 7.8. Microsoft has issued official fixes for all affected versions.
CVE-2026-69499 is a high-severity integer overflow or wraparound vulnerability in Microsoft Office 365 for Mac related to the Windows Imaging Component. This flaw allows an unauthorized attacker to execute code remotely over a network. The vulnerability affects multiple versions of Microsoft Office 365 for Mac prior to fixed releases 16.112.26090911 and 16.0.20430.20000. An official fix is available from Microsoft.
CVE-2026-69298 is an integer overflow or wraparound vulnerability in the Windows Biometric Service on Microsoft Windows 10 Version 1607 and related builds. This flaw allows an authorized local attacker to elevate privileges. The vulnerability has a high severity rating and has been officially fixed in multiple Windows 10 builds.
CVE-2026-70581 is an integer overflow or wraparound vulnerability in the Windows Biometric Service on Microsoft Windows 10 Version 1607 and later builds. This flaw allows an authorized local attacker to elevate privileges. The vulnerability has a high severity rating with a CVSS score of 7.8. Microsoft has issued official fixes for all affected versions.
CVE-2026-70572 is an integer overflow or wraparound vulnerability in the Windows Biometric Service on Microsoft Windows 10 Version 1607 and later builds. This flaw allows an authorized local attacker to elevate privileges. The vulnerability has a high severity rating and has been officially fixed in multiple Windows 10 builds.
CVE-2026-69738 is an integer overflow or wraparound vulnerability in the Windows Biometric Service on Microsoft Windows 10 Version 1607 and related builds. This flaw allows an authorized local attacker to elevate privileges. The vulnerability is rated high severity with a CVSS score of 7.8. Microsoft has released official fixes for all affected versions.
CVE-2026-69707 is an integer overflow or wraparound vulnerability in the Windows USB Audio Class driver (usbaudio.sys) affecting multiple versions of Microsoft Windows 10, including Version 1607. This flaw allows an authorized local attacker to elevate privileges on the affected system. The vulnerability has a high severity rating and has been officially fixed in specific Windows updates.
CVE-2026-69584 is an integer overflow or wraparound vulnerability in the Windows USB Video Driver affecting multiple versions of Microsoft Windows 10, including Version 1607. This flaw allows an authorized local attacker to elevate privileges on the affected system. The vulnerability has a high severity rating with a CVSS score of 7.8. Official patches have been released by Microsoft to address this issue.
CVE-2026-69586 is a critical integer overflow or wraparound vulnerability in Microsoft Windows 10 Version 1607's PDF processing component. This flaw allows an unauthenticated attacker to execute arbitrary code remotely over a network. The vulnerability affects multiple Windows 10 builds prior to their respective fixed versions. Microsoft has released official patches to address this issue.
CVE-2026-69407 is an integer overflow or wraparound vulnerability in the Volume Manager Driver of Microsoft Windows 10 Version 1607 and related builds. This flaw allows an authorized local attacker to elevate privileges on the affected system. The vulnerability has been assigned a high severity score of 7.8. Official patches have been released by Microsoft to address this issue.
CVE-2026-69373 is an integer overflow or wraparound vulnerability in the Windows Overlay Filter component of Microsoft Windows 10 Version 1607 and later builds. This flaw allows an authorized local attacker with high privileges to elevate their privileges further. The vulnerability has been assigned a CVSS 3.1 score of 6.7 (medium severity). Microsoft has released official fixes for all affected versions.
CVE-2026-69329 is a high-severity vulnerability in Microsoft Windows 10 Version 1607 and related versions involving an out-of-bounds read in the BranchCache component. This flaw allows an unauthorized attacker to cause a denial of service over a network. The issue affects multiple Windows 10 builds prior to their respective fixed versions. Microsoft has released official fixes for all affected versions.
CVE-2026-69266 is an integer overflow or wraparound vulnerability in the Windows DHCP Server component affecting multiple versions of Microsoft Windows 10, including Version 1607. This flaw allows an unauthorized attacker to execute code remotely over a network. The vulnerability has a high severity rating and has been officially fixed in specific Windows updates.
CVE-2026-68889 is a heap-based buffer overflow vulnerability in Microsoft Standard XPS on Windows 10 Version 1607 and related versions. It allows an authorized attacker to elevate privileges over a network. The vulnerability has been assigned a high severity with a CVSS score of 7.1. Official fixes have been released for affected versions.
CVE-2026-67641 is an integer overflow or wraparound vulnerability in Microsoft SQL Server 2022 (CU 26) that allows an authorized attacker to cause a denial of service over a network. The flaw affects multiple versions prior to specific fixed releases. A patch is available from Microsoft to address this issue.
CVE-2026-67384 is an integer overflow or wraparound vulnerability in Microsoft SQL Server 2017 (CU 31) and related versions. This flaw allows an authorized attacker with network access and low privileges to execute arbitrary code remotely. The vulnerability affects multiple versions of SQL Server 2017, 2019, 2022, and later branches prior to specific fixed releases. Microsoft has issued official fixes for all affected versions. The vulnerability has a high severity rating with a CVSS score of 8.8, indicating a significant risk if exploited.
CVE-2026-67376 is an integer overflow or wraparound vulnerability in Microsoft SQL Server 2017 (CU 31) that allows an unauthorized attacker to cause a denial of service over a network. The issue affects multiple versions prior to specific fixed releases. A high-severity vulnerability with a CVSS score of 7.5, it has been officially fixed by Microsoft in several cumulative update versions.
CVE-2026-77896 is an integer overflow or wraparound vulnerability in the Remote Desktop Client component of Microsoft Windows 10 Version 1607. This flaw allows an unauthorized attacker to cause a denial of service (DoS) over a network. The vulnerability affects multiple Windows 10 builds prior to specific fixed versions. Microsoft has released official fixes for all affected versions.