CVE-2026-68844 is a heap-based buffer overflow vulnerability in the Windows Storage Spaces Controller component of Microsoft Windows 10 Version 1607 and later updates. This flaw allows an authorized local attacker to execute arbitrary code with elevated privileges. The vulnerability affects multiple Windows 10 builds prior to specific fixed versions. Microsoft has released official patches to address this issue.
CVE-2026-72962 is a heap-based buffer overflow vulnerability in the Windows USB Video Driver affecting multiple builds of Microsoft Windows 10 Version 1809 and later. This flaw allows an authorized local attacker with high privileges to elevate their privileges further. The vulnerability has a high severity score of 8.2 and has been officially fixed in multiple Windows 10 builds.
CVE-2026-72946 is a heap-based buffer overflow vulnerability in the Storage Port Driver of Microsoft Windows 11 Version 24H2. This flaw allows an authorized local attacker to elevate privileges on the affected system. The vulnerability has a high severity rating with a CVSS score of 7.8. Microsoft has released official fixes for this issue in specific Windows 11 builds.
CVE-2026-72944 is a heap-based buffer overflow vulnerability in the Windows Fax Service affecting multiple versions of Microsoft Windows 10, including Version 1607. An authorized local attacker can exploit this flaw to elevate privileges. The vulnerability has a high severity rating with a CVSS score of 7.8. Official patches are available for all affected versions.
CVE-2026-71343 is a heap-based buffer overflow vulnerability in the Windows Remote Access Connection Manager component affecting multiple versions of Microsoft Windows 10, including Version 1607. The flaw allows an authorized attacker with local privileges to execute arbitrary code on the affected system. This vulnerability has been assigned a high severity rating with a CVSS score of 7.8. Official patches have been released to address this issue in the specified fixed versions.
CVE-2026-71348 is a heap-based buffer overflow vulnerability in the Windows Spaceport.sys driver affecting multiple versions of Microsoft Windows 10, including version 1607 and later builds. This flaw allows an unauthorized attacker with physical access to execute arbitrary code on the affected system. The vulnerability has been assigned a CVSS 3.1 base score of 6.8, indicating a medium severity level. Official patches have been released by Microsoft to address this issue.
CVE-2026-71350 is a heap-based buffer overflow vulnerability in the Windows Spaceport.sys driver affecting multiple versions of Microsoft Windows 10, including Version 1607 and later builds. This flaw allows an unauthorized attacker with physical access to execute arbitrary code on the affected system. The vulnerability has a CVSS 3.1 base score of 6.8, indicating a medium severity level. Microsoft has released official fixes for all affected versions.
CVE-2026-71339 is a heap-based buffer overflow vulnerability in Windows Installer on Microsoft Windows 10 Version 1607 and other specified versions. It allows an authorized local attacker to elevate privileges. The vulnerability has a CVSS 3.1 score of 6.7, indicating medium severity. An official fix is available from Microsoft.
CVE-2026-71334 is a heap-based buffer overflow vulnerability in the Windows NFS Portmapper component affecting multiple versions of Microsoft Windows 10, including version 1607. This flaw allows an authorized local attacker to elevate privileges on the affected system. The vulnerability has a high severity score of 7.8 and has been officially fixed in several Windows updates.
CVE-2026-71329 is a heap-based buffer overflow vulnerability in the Windows NTFS component affecting multiple versions of Microsoft Windows 10, including Version 1607. This flaw allows an unauthorized attacker with physical access to execute arbitrary code. The vulnerability has a CVSS score of 6.8, indicating a medium severity level. Official patches have been released for all affected versions.
CVE-2026-70586 is a heap-based buffer overflow vulnerability in Microsoft Windows 10 Version 1607's Paint application. This flaw allows an unauthorized attacker to execute arbitrary code remotely over a network. The vulnerability affects multiple Windows 10 builds prior to specific fixed versions. Microsoft has released official patches to address this issue.
CVE-2026-70564 is a heap-based buffer overflow vulnerability in the Windows Print Spooler components affecting multiple versions of Microsoft Windows 10, including Version 1607. This flaw allows an authorized local attacker to elevate privileges. The vulnerability has been assigned a high severity score of 7.8 and has official fixes available in specific Windows updates.
CVE-2026-70351 is an integer overflow or wraparound vulnerability in the Microsoft WebP Image Extension. This flaw allows an unauthorized attacker to execute code remotely over a network. The vulnerability affects versions 1.0.0.0 up to but not including 1.2.31.0. Microsoft has released an official fix in version 1.2.31.0. The vulnerability has a high severity with a CVSS score of 8.8.
CVE-2026-58600 is a heap-based buffer overflow vulnerability in the Microsoft HEVC Video Extensions codec library. It allows a local unauthorized attacker to elevate privileges on affected Windows systems. The flaw is addressed by official patches in versions 2.4.85.0, 2.4.86.0, and 2.4.87.0. The vulnerability has a high severity rating with a CVSS score of 7.8.
CVE-2026-70289 is a heap-based buffer overflow vulnerability in the Windows Win32 Kernel Subsystem affecting multiple versions of Microsoft Windows 10, including Version 1607. This flaw allows an authorized local attacker to elevate privileges. The vulnerability has been assigned a high severity score of 7.8 and has official fixes available in specific Windows 10 builds.
CVE-2026-69860 is a heap-based buffer overflow vulnerability in the Windows Imaging Component of Microsoft Windows 10 Version 1607 and related builds. This flaw allows an unauthorized attacker to execute code remotely over a network. The vulnerability has a high severity score of 8.8 and affects multiple Windows 10 versions prior to specific fixed builds. Microsoft has released official patches to address this issue.
CVE-2026-69732 is a heap-based buffer overflow vulnerability in the Windows Link Layer Topology Discovery Protocol affecting multiple versions of Microsoft Windows 10, including Version 1607. This vulnerability allows an unauthorized attacker to execute code remotely over a network. The vulnerability has a high severity with a CVSS score of 8.1. An official fix is available from Microsoft.
CVE-2026-69822 is a numeric truncation error vulnerability in the Windows Kerberos component of Microsoft Windows 10 Version 1809 and related builds. This flaw allows an authorized local attacker to elevate privileges. The vulnerability has a high severity rating with a CVSS score of 7.8. Microsoft has released official fixes for all affected versions.
CVE-2026-69758 is a heap-based buffer overflow vulnerability in the Windows Universal Disk Format File System Driver (UDFS) affecting multiple versions of Microsoft Windows 10, including Version 1607. This flaw allows an authorized local attacker to elevate privileges on the affected system. The vulnerability has a high severity rating and has been addressed in specific fixed Windows updates.
CVE-2026-69772 is a heap-based buffer overflow vulnerability in the Windows Network File System component affecting multiple builds of Microsoft Windows 10, including Version 1607. This flaw allows an unauthorized attacker to execute code remotely over a network. The vulnerability has a high severity rating with a CVSS score of 8.8. Official patches have been released to address this issue.