CVE-2026-70015 is a heap-based buffer overflow vulnerability in the Windows Local Security Authority Subsystem Service (LSASS) affecting multiple versions of Windows 10. It allows an authorized local attacker to elevate privileges by exploiting a use-after-free condition. The vulnerability has a high severity rating and has been officially fixed in specific Windows 10 updates.
CVE-2026-70010 is a heap-based buffer overflow vulnerability in the Windows NTFS component affecting multiple builds of Windows 10 Version 1607 and later. This flaw allows an authorized local attacker to elevate privileges on the affected system. Microsoft has released official fixes for all affected versions.
CVE-2026-69970 is a heap-based buffer overflow vulnerability in the Microsoft Streaming Service on Windows 10 Version 1607 and related builds. It allows an authorized local attacker to elevate privileges. The vulnerability has been assigned a high severity score and has official patches available from Microsoft.
CVE-2026-69963 is a heap-based buffer overflow vulnerability in the Microsoft Streaming Service on Windows 10 Version 1607 and related builds. It allows an authorized local attacker to elevate privileges. The vulnerability has a high severity score of 7.8 and affects multiple Windows 10 builds prior to specific fixed versions. Microsoft has released official fixes for all affected versions.
CVE-2026-69958 is a heap-based buffer overflow vulnerability in the Windows Overlay Filter component affecting multiple versions of Microsoft Windows 10, including Version 1607 and later builds. This flaw allows an unauthorized attacker with physical access to execute arbitrary code on the affected system. The vulnerability has been assigned a CVSS 3.1 base score of 6.8, indicating a medium severity level. Microsoft has released official fixes for all affected versions.
CVE-2026-69947 is a heap-based buffer overflow vulnerability in the Windows Overlay Filter component of Microsoft Windows 10 Version 21H2. This flaw allows an unauthorized attacker with physical access to execute arbitrary code on the affected system. The vulnerability affects multiple builds of Windows 10 21H2 prior to specific fixed versions. Microsoft has released official patches to address this issue.
CVE-2026-69918 is a heap-based buffer overflow vulnerability in Windows Core Messaging affecting multiple builds of Microsoft Windows 10, including Version 1607 and later updates. This flaw allows an authorized local attacker to elevate privileges. The vulnerability has been assigned a high severity with a CVSS score of 8.8. Official fixes have been released by Microsoft for all affected versions.
CVE-2026-69909 is a heap-based buffer overflow vulnerability in Microsoft COM on Windows 10 Version 1607 and other specified versions. It allows an authorized local attacker to elevate privileges. The vulnerability has been assigned a high severity with a CVSS score of 7.8. Official patches have been released to address this issue.
CVE-2026-69639 is a critical heap-based buffer overflow vulnerability in the Windows Libarchive component affecting multiple builds of Windows 10 Version 1809 and later. This flaw allows an unauthorized attacker to execute arbitrary code remotely over a network without user interaction. Microsoft has released official fixes for all affected versions.
CVE-2026-69363 is a heap-based buffer overflow vulnerability in Windows Error Reporting affecting multiple versions of Microsoft Windows 10, including Version 1607. This flaw allows an authorized attacker to elevate privileges over a network. The vulnerability has a high severity rating and has been officially fixed in specific Windows updates.
CVE-2026-69898 is a heap-based buffer overflow vulnerability in the Windows Kernel affecting Windows 10 Version 1809 and related builds. This flaw allows an authorized local attacker to elevate privileges on the affected system. The vulnerability has a high severity score of 7.8 and has been officially fixed by Microsoft in multiple Windows 10 builds.
CVE-2026-108399 is a heap-based buffer overflow vulnerability in Windows Hyper-V on Microsoft Windows 10 Version 1607 and other specified versions. It allows an authorized local attacker with high privileges to elevate their privileges further. The vulnerability has been assigned a high severity score of 7.2 and affects multiple Windows 10 builds prior to their respective fixed versions. Microsoft has released official patches to address this issue.
CVE-2026-105717 is a heap-based buffer overflow vulnerability in Microsoft Office Access within Microsoft 365 Apps for Enterprise. This flaw allows an unauthorized attacker to execute code remotely over a network. The vulnerability affects specific versions prior to 16.0.14334.20974 and 16.0.17932.21056, with official fixes available. The CVSS score of 8.8 indicates a high severity level, reflecting the potential for complete confidentiality, integrity, and availability impact.
CVE-2026-108467 is a heap-based buffer overflow vulnerability in the Microsoft PostScript Printer Driver on Windows 10 Version 1607 and related versions. This flaw allows an authorized attacker to execute arbitrary code over a network. The vulnerability has a high severity with a CVSS score of 8.8. Microsoft has released official fixes for affected versions.
CVE-2026-105716 is a heap-based buffer overflow vulnerability in Microsoft Office Access, part of Microsoft 365 Apps for Enterprise. This flaw allows an unauthorized attacker to execute code remotely over a network. The vulnerability affects specific versions prior to 16.0.14334.20974 and 16.0.17932.21056, which contain the official fixes. The issue has a high severity rating with a CVSS score of 8.8. No known exploits in the wild have been reported. Microsoft has released official patches to address this vulnerability.
CVE-2026-105714 is a heap-based buffer overflow vulnerability in Microsoft Office Access within Microsoft 365 Apps for Enterprise. This flaw allows an unauthorized attacker to execute code remotely over a network. The vulnerability affects specific versions prior to 16.0.14334.20974 and 16.0.17932.21056. Microsoft has issued official fixes for the affected versions. The vulnerability has a high severity rating with a CVSS score of 7.5.
CVE-2026-105599 is a heap-based buffer overflow vulnerability in Microsoft Office PowerPoint within Microsoft 365 Apps for Enterprise. This flaw allows an unauthorized attacker to execute code remotely over a network. The vulnerability has a high severity score of 7.5 and affects multiple versions prior to the fixed releases. Microsoft has issued official fixes for this vulnerability.
CVE-2026-105598 is a heap-based buffer overflow vulnerability in Microsoft Office Access within Microsoft 365 Apps for Enterprise. This flaw allows an unauthorized attacker to execute code remotely over a network. The vulnerability affects specific versions prior to 16.0.14334.20974 and 16.0.17932.21056. Microsoft has released official fixes for this issue. The vulnerability has a high severity rating with a CVSS score of 8.8.
CVE-2026-105597 is a heap-based buffer overflow vulnerability in Microsoft Office Access, part of Microsoft 365 Apps for Enterprise. This flaw allows an unauthorized attacker to execute code remotely over a network. The vulnerability affects specific versions prior to 16.0.14334.20974 and 16.0.17932.21056. Microsoft has released official fixes for this issue. The vulnerability has a high severity rating with a CVSS score of 8.8.
CVE-2026-105596 is a heap-based buffer overflow vulnerability in Microsoft Office Access within Microsoft 365 Apps for Enterprise. It allows an unauthorized attacker to execute code remotely over a network. The vulnerability affects specific versions prior to 16.0.14334.20974 and 16.0.17932.21056. An official fix is available from Microsoft.