CVE-2026-72927 is a heap-based buffer overflow vulnerability in the Winsock component of Microsoft Windows 10 Version 1607 and related builds. This flaw allows an authorized local attacker to elevate privileges on the affected system. The vulnerability has a CVSS score of 6.7, indicating a medium severity level. Official patches have been released by Microsoft to address this issue.
CVE-2026-71349 is a heap-based buffer overflow vulnerability in the Windows Spaceport.sys driver affecting multiple versions of Microsoft Windows 10, including Version 1607 and later builds. This flaw allows an unauthorized attacker with physical access to execute arbitrary code on the affected system. The vulnerability has been assigned a CVSS 3.1 score of 6.8, indicating a medium severity level. Official patches have been released by Microsoft to address this issue.
CVE-2026-70583 is a heap-based buffer overflow vulnerability in Windows Core Messaging on Microsoft Windows 10 Version 1607 and later versions. It allows an authorized local attacker to elevate privileges. The vulnerability has a high severity rating with a CVSS score of 7.8. Microsoft has released official fixes for affected versions.
CVE-2026-70578 is a heap-based buffer overflow vulnerability in Windows Credential Guard on Windows 10 Version 21H2 and related builds. It allows an authorized local attacker to elevate privileges. The vulnerability has been assigned a high severity with a CVSS score of 7.0. Microsoft has released official fixes for affected versions.
CVE-2026-70573 is a heap-based buffer overflow vulnerability in the Windows Biometric Service on Microsoft Windows 10 Version 1607 and later builds. This flaw allows an authorized local attacker to elevate privileges. The vulnerability has been assigned a high severity rating with a CVSS score of 7. A patch addressing this issue is officially available from Microsoft.
CVE-2026-70568 is a heap-based buffer overflow vulnerability in the Windows Defender Firewall Service on Microsoft Windows 10 Version 1607 and other specified versions. This flaw allows an authorized local attacker to elevate privileges. The vulnerability has a high severity rating and has been officially fixed in multiple Windows 10 builds.
CVE-2026-58599 is a heap-based buffer overflow vulnerability in the Microsoft HEVC Video Extensions codec library. This flaw allows an unauthorized local attacker to execute arbitrary code on the affected system. The vulnerability affects multiple versions of the HEVC Video Extensions prior to fixed releases. Microsoft has issued official patches to address this issue.
CVE-2026-69820 is a heap-based buffer overflow vulnerability in Windows Hello on Microsoft Windows 10 Version 21H2 and related builds. This flaw allows an authorized local attacker to elevate privileges. The vulnerability affects multiple Windows 10 builds prior to specific fixed versions. Microsoft has released official patches to address this issue. The vulnerability has a high severity rating with a CVSS score of 8.2. There are no known exploits in the wild at this time.
CVE-2026-69786 is a heap-based buffer overflow vulnerability in the Windows Text Shaping component affecting multiple versions of Microsoft Windows 10, including Version 1607. This flaw allows an unauthorized attacker to execute code remotely over a network. The vulnerability has a high severity with a CVSS score of 8.1. Microsoft has released official fixes for all affected versions.
CVE-2026-69852 is a high-severity heap-based buffer overflow vulnerability in the Windows Routing and Remote Access Service (RRAS) affecting multiple versions of Microsoft Windows 10, including version 1607. This flaw allows an attacker to execute remote code and gain unauthorized access to the affected system. Official patches have been released to address this issue.
CVE-2026-69769 is a critical heap-based buffer overflow vulnerability in the Windows HTTP Print Provider affecting multiple versions of Microsoft Windows 10 and some earlier Windows versions. This flaw allows an unauthorized attacker to execute arbitrary code remotely over a network without user interaction. The vulnerability has been officially fixed in specific Windows updates.
CVE-2026-69829 is a critical heap-based buffer overflow vulnerability in the Windows Shell component affecting multiple versions of Microsoft Windows 10, including Version 1607 and later builds. This flaw allows an unauthorized attacker to execute arbitrary code remotely over a network without user interaction or privileges. The vulnerability has a CVSS score of 9.8, indicating a high severity with impacts on confidentiality, integrity, and availability. Microsoft has released official patches that address this issue in specific fixed versions.
CVE-2026-69845 is a critical heap-based buffer overflow vulnerability in the Windows DHCP Server component affecting multiple versions of Microsoft Windows 10 and earlier Windows versions. This flaw allows an unauthorized attacker to execute arbitrary code remotely over a network without user interaction or privileges. Microsoft has released official fixes for all affected versions.
CVE-2026-69777 is a heap-based buffer overflow vulnerability in the Windows DHCP Client component of Microsoft Windows 11 Version 24H2. This flaw allows an authorized attacker on an adjacent network to elevate privileges. The vulnerability affects specific builds of Windows 11 Version 24H2 prior to certain fixed versions. Microsoft has released official fixes for this issue.
CVE-2026-69824 is a critical integer underflow vulnerability in Microsoft Standard XPS on Windows 10 Version 1607 and other specified versions. This flaw allows an unauthorized attacker to execute code remotely over a network without user interaction or privileges. The vulnerability has a CVSS score of 9.8, indicating high impact on confidentiality, integrity, and availability. Microsoft has released official fixes for all affected versions.
CVE-2026-69847 is a heap-based buffer overflow vulnerability in the Windows DHCP Server component affecting multiple versions of Microsoft Windows 10, including Version 1607. This flaw allows an authorized attacker on an adjacent network to execute arbitrary code. The vulnerability has a high severity rating and has been officially fixed in specific Windows 10 builds.
CVE-2026-69878 is a heap-based buffer overflow vulnerability in the Windows DHCP Server component affecting multiple versions of Microsoft Windows 10 and some earlier versions. This flaw allows an authorized attacker with high privileges to execute code locally on the affected system. The vulnerability has been assigned a CVSS 3.1 base score of 6.4, indicating a medium severity level. Official patches have been released by Microsoft to address this issue.
CVE-2026-69921 is a heap-based buffer overflow vulnerability in the Windows Print Spooler components affecting Windows 10 Version 21H2 and related builds. It allows an authorized local attacker to elevate privileges. The vulnerability has a high severity score of 7.8 and has been officially fixed by Microsoft in specific Windows 10 builds.
CVE-2026-69768 is a critical heap-based buffer overflow vulnerability in the Windows RNDIS component affecting multiple versions of Microsoft Windows 10, including version 1607. This flaw allows an unauthorized attacker to execute arbitrary code remotely over a network without user interaction. The vulnerability has a CVSS score of 9.8, indicating high impact on confidentiality, integrity, and availability. Microsoft has issued official fixes for all affected versions.
CVE-2026-69773 is a heap-based buffer overflow vulnerability in the Windows Biometric Service on Microsoft Windows 10 Version 1607 and related builds. This flaw allows an authorized attacker to elevate privileges over a network. The vulnerability has been assigned a high severity with a CVSS score of 8.0. Official patches have been released to address this issue in multiple Windows 10 builds.