CVE-2026-69442 is a heap-based buffer overflow vulnerability in Microsoft 365 Apps for Enterprise (Microsoft Office) that allows an unauthorized attacker to execute code remotely over a network. The vulnerability affects multiple versions prior to fixed releases. It has a high severity CVSS score of 8.8. Microsoft has issued official fixes for the affected versions.
CVE-2026-69601 is a heap-based buffer overflow vulnerability in Microsoft Windows Media Foundation affecting Windows 10 Version 1607 and other specified builds. This flaw allows an unauthorized attacker to execute code remotely over a network. The vulnerability has a high severity with a CVSS score of 8.8. Microsoft has released official fixes for all affected versions.
CVE-2026-69590 is a critical heap-based buffer overflow vulnerability in the Windows Routing and Remote Access Service (RRAS) affecting multiple versions of Microsoft Windows 10, including Version 1607. This flaw allows remote attackers to execute arbitrary code without requiring user interaction or privileges, potentially gaining unauthorized access to the affected system. Microsoft has released official fixes for all impacted versions.
CVE-2026-69593 is a heap-based buffer overflow vulnerability in the Windows Biometric Service on Windows 10 Version 1607 and later versions. This flaw allows an authorized local attacker to elevate privileges. The vulnerability has been assigned a high severity with a CVSS score of 7.8. Official fixes have been released for all affected versions.
CVE-2026-69564 is a heap-based buffer overflow vulnerability in the Windows Online Certificate Status Protocol (OCSP) component affecting multiple versions of Microsoft Windows 10 and some earlier Windows versions. This flaw allows a locally authorized attacker to elevate privileges on the affected system. Microsoft has released official fixes for all affected versions.
CVE-2026-69489 is a heap-based buffer overflow vulnerability in the Windows Biometric Service on Microsoft Windows 10 Version 1607 and related builds. It allows an authorized local attacker to elevate privileges. The vulnerability has been assigned a high severity with a CVSS score of 7.8. Official patches have been released to address the issue in multiple Windows 10 builds.
CVE-2026-69426 is a heap-based buffer overflow vulnerability in the Windows VOLSNAP.SYS driver affecting multiple versions of Microsoft Windows 10, including Version 1607. This flaw allows an authorized local attacker to execute arbitrary code with elevated privileges. The vulnerability has a high severity rating with a CVSS score of 7.8. Official patches have been released by Microsoft to address this issue.
CVE-2026-69352 is a heap-based buffer overflow vulnerability in the Windows Biometric Service on Windows 10 Version 1607 and related builds. It allows an authorized local attacker to elevate privileges. The vulnerability has been assigned a high severity score of 7.8 and has been officially fixed in multiple Windows 10 builds.
CVE-2026-69323 is a heap-based buffer overflow vulnerability in the Windows Biometric Service on Microsoft Windows 10 Version 1607 and later versions. This flaw allows an authorized local attacker to elevate privileges on the affected system. The vulnerability has been assigned a high severity score of 7.8 and has been officially fixed by Microsoft in multiple Windows 10 builds.
CVE-2026-69334 is a heap-based buffer overflow vulnerability in the Windows Volume Manager Extension Driver affecting multiple versions of Microsoft Windows 10, including Version 1607. This flaw allows an unauthorized attacker to execute code remotely over a network. The vulnerability has a high severity rating and has been officially fixed in specific Windows updates.
CVE-2026-69291 is a heap-based buffer overflow vulnerability in the Windows Volume Manager Extension Driver affecting multiple versions of Microsoft Windows 10, including Version 1607. This flaw allows an unauthorized attacker to execute code remotely over a network. The vulnerability has a high severity rating with a CVSS score of 8.8. Official patches have been released by Microsoft to address this issue.
CVE-2026-72967 is a heap-based buffer overflow vulnerability in the Windows Network Connection Broker component affecting multiple versions of Microsoft Windows 10, including Version 1607. This flaw allows an authorized local attacker to elevate privileges on the affected system. The vulnerability has a high severity rating with a CVSS score of 7.8. Microsoft has released official fixes for all affected versions.
CVE-2026-72961 is a heap-based buffer overflow vulnerability in Windows Hyper-V on Windows 10 Version 1607 and later versions. It allows an authorized local attacker to perform an out-of-bounds read that can lead to privilege escalation. The vulnerability has been assigned a high severity score of 8.2 and affects multiple Windows 10 builds prior to specific fixed versions. Microsoft has released official patches to address this issue.
CVE-2026-72960 is a heap-based buffer overflow vulnerability in Windows Media Player on Microsoft Windows 10 Version 1607 and later versions. This flaw allows an unauthorized attacker to execute arbitrary code remotely over a network. The vulnerability has a high severity score of 8.8 and affects multiple Windows 10 builds prior to their respective fixed versions. Microsoft has released official fixes for all affected versions.
CVE-2026-72959 is a high-severity heap-based buffer overflow vulnerability in Microsoft Windows 10 Version 1607 and related versions affecting the Routing and Remote Access Service (RRAS). This flaw allows an attacker with low privileges to execute remote code on the affected system without user interaction. Multiple Windows 10 builds and some earlier Windows versions are impacted. Microsoft has released official patches to address this vulnerability.
CVE-2026-72950 is a high-severity heap-based buffer overflow vulnerability in Microsoft Windows 10 Version 1607's Routing and Remote Access Service (RRAS). This flaw allows an attacker with local privileges to execute remote code and gain unauthorized access to the affected system. Multiple Windows 10 builds prior to specific fixed versions are impacted. Microsoft has released official fixes for all affected versions.
CVE-2026-72957 is a heap-based buffer overflow vulnerability in Windows Deployment Services on Microsoft Windows 10 Version 1607 and related versions. It allows an authorized attacker with local access to execute arbitrary code. The vulnerability has been assigned a high severity with a CVSS score of 7.8. Official patches have been released to address this issue.
CVE-2026-72941 is a heap-based buffer overflow vulnerability in the Windows Biometric Service on Microsoft Windows 10 Version 1607 and later builds. This flaw allows an authorized local attacker to elevate privileges. The vulnerability has been assigned a high severity with a CVSS score of 7.8. Official patches have been released by Microsoft to address this issue.
CVE-2026-72953 is a heap-based buffer overflow vulnerability in the Windows USB Driver affecting Windows 10 Version 21H2 and related builds. This flaw allows an authorized local attacker to elevate privileges. The vulnerability has been assigned a high severity with a CVSS score of 7.8. Microsoft has released official fixes for all affected versions.
CVE-2026-72933 is a heap-based buffer overflow vulnerability in the Microsoft WDAC OLE DB provider for SQL on Windows 10 Version 1607 and related builds. This flaw allows an unauthorized attacker to execute code remotely over a network. The vulnerability affects multiple Windows 10 versions prior to specific fixed builds. Microsoft has released official patches to address this issue.