Threat Intelligence Database

Release of invalid pointer or reference in RPC Runtime allows an authorized attacker to elevate privileges locally.

Improper privilege management in Python allows an authorized attacker to elevate privileges locally.

Heap-based buffer overflow in Windows Background Intelligent Transfer Service (BITS) allows an authorized attacker to elevate privileges locally.

Out-of-bounds write in Windows GDI allows an unauthorized attacker to execute code over a network.

Use after free in Connected Devices Platform Service (Cdpsvc) allows an authorized attacker to elevate privileges locally.

Use after free in Windows Kernel allows an authorized attacker to elevate privileges locally.

Use after free in Virtual Hard Disk (VHD) Miniport Driver allows an authorized attacker to elevate privileges locally.

Out-of-bounds read in SQLite allows an authorized attacker to elevate privileges locally.

Use after free in Windows Broadcast DVR User Service allows an authorized attacker to elevate privileges locally.

CVE-2026-68891 is an out-of-bounds read vulnerability in Microsoft Standard XPS on Windows 10 Version 1607 and other specified versions. It allows an authorized local attacker with low privileges to disclose information. The vulnerability has a medium severity with a CVSS score of 4.7. An official fix is available from Microsoft.