Threat Intelligence Database

Heap-based buffer overflow in HID Parser Library allows an authorized attacker to elevate privileges locally.

Use after free in Windows Error Reporting allows an authorized attacker to elevate privileges locally.

Use after free in Windows Push Notifications allows an authorized attacker to elevate privileges locally.

CVE-2026-69324 is a high-severity vulnerability in Microsoft Windows 10 Version 1607 and other specified versions. It involves a type confusion flaw in the Windows Performance Monitor component that allows an authorized local attacker to elevate privileges. The vulnerability has been officially fixed by Microsoft. No known exploits are reported in the wild.

CVE-2026-69321 is a medium severity vulnerability in Microsoft Windows 10 Version 1607 and related builds, involving missing authentication for a critical function in the Windows Power Dependency Coordinator. This flaw allows an authorized local attacker to perform tampering actions without proper authentication. The vulnerability affects multiple Windows 10 builds prior to specific patched versions. An official fix is available from Microsoft.

CVE-2026-68889 is a heap-based buffer overflow vulnerability in Microsoft Standard XPS on Windows 10 Version 1607 and related builds. It allows an authorized attacker to elevate privileges over a network. The vulnerability has a high severity score of 7.1 and affects multiple Windows 10 builds prior to specific patch versions. An official fix is available from Microsoft.

CVE-2026-69394 is a heap-based buffer overflow vulnerability in the Windows Audio Service affecting multiple versions of Microsoft Windows 10, including Version 1607. This flaw allows an authorized local attacker to elevate privileges. The vulnerability has a high severity rating with a CVSS score of 7. An official fix is available from Microsoft.