CVE-2026-69508 is a stack-based buffer overflow vulnerability in the Windows MIDI Service Module of Microsoft Windows 11 Version 24H2. This flaw allows an authorized local attacker to elevate privileges. The vulnerability affects specific builds of Windows 11 Version 24H2 prior to fixed versions 10.0.26100.9445, 10.0.26200.9445, and 10.0.28000.2954. A patch has been officially released by Microsoft to address this issue.
CVE-2026-69503 is a stack-based buffer overflow vulnerability in the Windows USB Driver affecting Windows 10 Version 1809 and later builds up to specific patched versions. This flaw allows an authorized attacker to elevate privileges over a network. The vulnerability has a high severity rating with a CVSS score of 8.0. Official patches have been released by Microsoft to address this issue.
CVE-2026-69467 is a stack-based buffer overflow vulnerability in the Microsoft Graphics Component affecting Windows 10 Version 21H2 and related builds. It allows an authorized local attacker to elevate privileges. The vulnerability has been assigned a high severity with a CVSS score of 7.8. Microsoft has released official fixes for affected versions.
CVE-2026-69301 is a stack-based buffer overflow vulnerability in the Windows Win32K component affecting Windows 10 Version 1607 and related builds. It allows an authorized attacker to elevate privileges over a network. The vulnerability has a high severity score and has been officially fixed by Microsoft in multiple Windows 10 updates.
CVE-2026-69277 is a stack-based buffer overflow vulnerability in the Microsoft Local Security Authority Server (lsasrv) component of Windows 10 Version 1607 and related versions. It allows an authorized local attacker to elevate privileges. The vulnerability has been assigned a high severity with a CVSS score of 7.8. Microsoft has issued official fixes for affected versions.
CVE-2026-68838 is a stack-based buffer overflow vulnerability in the Windows NTFS component affecting multiple versions of Microsoft Windows 10, including Version 1607. This flaw allows an authorized attacker to elevate privileges over a network. The vulnerability has been assigned a high severity with a CVSS score of 8.0. Official patches have been released to address this issue.
CVE-2026-68834 is a stack-based buffer overflow vulnerability in the Windows NTFS component affecting multiple versions of Microsoft Windows 10, including Version 1607. This flaw allows an authorized attacker to elevate privileges over a network. The vulnerability has a high severity rating with a CVSS score of 8. An official fix is available and has been released in specific Windows 10 builds.
CVE-2026-78504 is a high-severity stack-based buffer overflow vulnerability in Microsoft Office Word within Microsoft 365 Apps for Enterprise. This flaw allows an unauthorized attacker to execute code remotely over a network. The vulnerability affects multiple versions prior to specific fixed releases. Microsoft has issued official fixes for the affected versions.
CVE-2026-67379 is a high-severity stack-based buffer overflow vulnerability in Microsoft SQL Server 2019 (CU 32) that allows an authorized attacker to execute code remotely over a network. The vulnerability affects multiple versions prior to specific fixed releases. An official fix is available from Microsoft.
CVE-2026-78439 is a high-severity stack-based buffer overflow vulnerability in the Microsoft Graphics Component of Microsoft Office 365 for Mac. It allows an unauthorized attacker to execute code remotely over a network. The vulnerability affects multiple versions of Office 365 for Mac prior to 16.113.26091433 and 16.0.20430.20000. Microsoft has released official fixes for these versions. No known exploits are currently reported in the wild.
CVE-2026-72982 is a critical stack-based buffer overflow vulnerability in the Windows Netlogon component affecting multiple versions of Microsoft Windows 10, including Version 1607. This flaw allows an unauthorized attacker to execute arbitrary code remotely over a network without user interaction or privileges. The vulnerability has a CVSS score of 9.8, indicating a high severity with complete confidentiality, integrity, and availability impact. Official patches have been released by Microsoft to address this issue.
CVE-2026-69759 is a stack-based buffer overflow vulnerability in Microsoft Office Word, part of Microsoft 365 Apps for Enterprise. It allows an unauthorized attacker to execute code remotely over a network. The vulnerability affects multiple versions prior to specific fixed releases. A high-severity issue with a CVSS score of 8.8, it has an official fix available from Microsoft.
CVE-2026-69722 is a stack-based buffer overflow vulnerability in Microsoft Office Word within Microsoft 365 Apps for Enterprise. This flaw allows an unauthorized attacker to execute code remotely over a network. The vulnerability affects multiple versions of Microsoft 365 Apps for Enterprise prior to specific fixed releases. A high-severity CVSS 3.1 score of 8.8 reflects the critical impact on confidentiality, integrity, and availability. Microsoft has issued official fixes for the affected versions.
CVE-2026-69686 is a stack-based buffer overflow vulnerability in Microsoft Office Word, part of Microsoft 365 Apps for Enterprise. It allows an unauthorized attacker to execute code remotely over a network. The vulnerability affects multiple versions prior to fixed releases. Microsoft has issued official fixes for this vulnerability. The CVSS v3.1 score is 8.8, indicating high severity.
CVE-2026-71337 is a stack-based buffer overflow vulnerability in the Windows Storage Management Provider on Microsoft Windows 10 Version 21H2. This flaw allows an authorized local attacker to elevate privileges. The vulnerability has a high severity rating with a CVSS score of 7.8. Microsoft has released official fixes for affected versions.
CVE-2026-69762 is a stack-based buffer overflow vulnerability in the Windows Win32K component affecting Windows 10 Version 1809 and later builds. This flaw allows an authorized attacker to elevate privileges over a network. The vulnerability has a high severity score and has been officially fixed in multiple Windows 10 builds.
CVE-2026-69689 is an out-of-bounds read vulnerability in the Windows Win32K component affecting multiple builds of Windows 10 Version 1809 and related versions. This flaw allows an authorized attacker to elevate privileges over a network. The vulnerability has a high severity rating with a CVSS score of 8. An official fix is available and has been released in specific Windows 10 builds.
CVE-2026-69461 is a high-severity stack-based buffer overflow vulnerability in the Windows NTFS component affecting multiple Windows 10 versions including Version 1607. This flaw allows an unauthorized attacker to execute code remotely over a network. Microsoft has released official fixes for all affected versions.
CVE-2026-69412 is a stack-based buffer overflow vulnerability in the Windows DHCP Server component affecting multiple versions of Microsoft Windows including Windows 10 Version 1607. This flaw allows an authorized attacker to execute arbitrary code remotely over an adjacent network. The vulnerability has a high severity score and has been officially fixed by Microsoft in specific updates.
CVE-2026-69391 is a stack-based buffer overflow vulnerability in the Windows Broker Infrastructure Service affecting multiple builds of Windows 10 Version 1607 and later. This flaw allows an authorized local attacker to elevate privileges. The vulnerability has a high severity score of 7.8 and has been officially fixed in specific Windows 10 builds.