CVE-2026-69476 is a heap-based buffer overflow vulnerability in the Windows Biometric Service on Microsoft Windows 10 Version 1607 and related builds. This flaw allows an authorized local attacker to elevate privileges. The vulnerability has been assigned a high severity with a CVSS score of 7.8. Microsoft has released official fixes for all affected versions.
CVE-2026-77495 is a heap-based buffer overflow vulnerability in the Windows Imaging Component of Microsoft Windows 10 Version 1607 and related versions. This flaw allows an unauthorized attacker to execute code remotely over a network. The vulnerability has a high severity with a CVSS score of 8.8. Microsoft has released official fixes for all affected versions.
CVE-2026-69778 is a heap-based buffer overflow vulnerability in Microsoft Office Access within Microsoft 365 Apps for Enterprise. This flaw allows an unauthorized attacker to execute code remotely over a network. The vulnerability affects multiple versions prior to specific fixed releases. Microsoft has issued official fixes for the affected versions.
CVE-2026-69764 is a heap-based buffer overflow vulnerability in Microsoft Office Word within Microsoft 365 Apps for Enterprise. This flaw allows an unauthorized attacker to execute code remotely over a network. The vulnerability affects multiple versions prior to specific fixed releases. Microsoft has issued official fixes for the affected versions. The vulnerability has a high severity rating with a CVSS score of 8.8. No known exploits are currently reported in the wild.
CVE-2026-69529 is a heap-based buffer overflow vulnerability in Microsoft Office Access, part of Microsoft 365 Apps for Enterprise. This flaw allows an unauthorized attacker to execute code remotely over a network. The vulnerability affects multiple versions prior to fixed releases. Microsoft has issued official fixes for the affected versions. The CVSS v3.1 score is 8.8, indicating high severity with impacts on confidentiality, integrity, and availability.
CVE-2026-69671 is a heap-based buffer overflow vulnerability in Microsoft Office Word within Microsoft 365 Apps for Enterprise. This flaw allows an unauthorized attacker to execute code remotely over a network. The vulnerability has a high severity with a CVSS score of 8.8. Microsoft has issued official fixes for multiple affected versions. No known exploits are reported in the wild at this time.
CVE-2026-69649 is a heap-based buffer overflow vulnerability in the Microsoft Raw Image Extension. It allows an unauthorized attacker to execute code remotely over a network. The vulnerability affects versions from 2.1.0.0 up to but not including 2.4.24.0. Microsoft has released an official fix in version 2.4.24.0. The vulnerability has a high severity score of 8.8 and requires user interaction for exploitation.
CVE-2026-69603 is a heap-based buffer overflow vulnerability in Windows Hyper-V affecting multiple versions of Microsoft Windows 10, including Version 1607. It allows an authorized local attacker to execute code with elevated privileges. The vulnerability has a high severity score of 8.8 and has been officially fixed in specific Windows updates.
CVE-2026-69604 is a heap-based buffer overflow vulnerability in the Windows Audio Service affecting multiple versions of Microsoft Windows 10, including Version 1607. It allows an authorized local attacker to elevate privileges. The vulnerability has a high severity with a CVSS score of 7.8. Official patches are available for all affected versions.
CVE-2026-69580 is a heap-based buffer overflow vulnerability in the Windows Biometric Service on Microsoft Windows 10 Version 1607 and later versions. This flaw allows an authorized local attacker to elevate privileges. The vulnerability has a high severity rating with a CVSS score of 7.8. Microsoft has released official fixes for all affected versions.
CVE-2026-69589 is a heap-based buffer overflow vulnerability in the Windows Biometric Service on Microsoft Windows 10 Version 1607 and later builds. This flaw allows an authorized local attacker to elevate privileges. The vulnerability has been assigned a high severity with a CVSS score of 7.8. Official patches have been released to address this issue in multiple Windows 10 builds.
CVE-2026-69583 is a heap-based buffer overflow vulnerability in the Windows Biometric Service on Windows 10 Version 1607 and later builds. This flaw allows an authorized local attacker to elevate privileges. The vulnerability has a high severity rating with a CVSS score of 7.8. Microsoft has released official fixes for all affected versions.
CVE-2026-69556 is a heap-based buffer overflow vulnerability in Microsoft Office Word, part of Microsoft 365 Apps for Enterprise. This flaw allows an unauthorized attacker to execute code remotely over a network. The vulnerability affects multiple versions prior to 16.113.26091433 and 16.0.5569.1002, which contain the official fixes. The issue has a high severity with a CVSS score of 8.8. No known exploits are currently reported in the wild. Microsoft has released official patches to address this vulnerability.
CVE-2026-69548 is a heap-based buffer overflow vulnerability in the Windows RNDIS component affecting multiple versions of Microsoft Windows 10, including Version 1607. This flaw allows an unauthorized attacker with physical access to the device to disclose information. The vulnerability has a medium severity rating with a CVSS score of 4.6. Microsoft has released official fixes for all affected versions.
CVE-2026-69544 is a heap-based buffer overflow vulnerability in the Windows SMB Client component of Microsoft Windows 11 version 26H1. This flaw allows an authorized local attacker to elevate privileges on the affected system. The vulnerability has a high severity rating with a CVSS score of 7.8. Microsoft has released an official fix in version 10.0.28000.2954 to address this issue.
CVE-2026-69518 is a heap-based buffer overflow vulnerability in Windows Remote Desktop affecting multiple Windows 10 versions including Version 1607. This flaw allows an unauthorized attacker to execute code remotely over a network. The vulnerability has a high severity CVSS score of 8.8 and has been officially fixed in several Windows 10 builds.
CVE-2026-69469 is an integer overflow or wraparound vulnerability in the Windows USB Audio Class driver (usbaudio.sys) affecting multiple builds of Windows 10 Version 1809 and later. This flaw allows an unauthorized attacker with physical access to elevate privileges on the affected system. The vulnerability has a CVSS 3.1 base score of 6.6, indicating a medium severity level. Microsoft has released official fixes for all affected versions.
CVE-2026-69394 is a heap-based buffer overflow vulnerability in the Windows Audio Service affecting multiple versions of Microsoft Windows 10, including Version 1607. This flaw allows an authorized local attacker to elevate privileges on the affected system. The vulnerability has a high severity rating and has been officially fixed in specific Windows updates.
CVE-2026-69293 is a heap-based buffer overflow vulnerability in the Windows Biometric Service on Microsoft Windows 10 Version 1607 and later versions. This flaw allows an authorized local attacker to elevate privileges. The vulnerability has been assigned a high severity with a CVSS score of 7.8. Official patches have been released to address this issue in multiple Windows 10 builds.
CVE-2026-68877 is a heap-based buffer overflow vulnerability in the Windows Storage Spaces Controller component of Microsoft Windows 10 Version 1607 and later builds. An authorized local attacker can exploit this flaw to execute arbitrary code with elevated privileges. The vulnerability affects multiple Windows 10 builds prior to specific fixed versions. Microsoft has released official patches to address this issue.