Threat database

Heap-based buffer overflow in Microsoft Scripting Engine allows an authorized attacker to elevate privileges locally.

CVE-2026-69293 is a heap-based buffer overflow vulnerability in the Windows Biometric Service on Microsoft Windows 10 Version 1607 and later updates. This flaw allows an authorized local attacker to elevate privileges. The vulnerability has a high severity score of 7.8 and has been officially fixed by Microsoft.

CVE-2026-69391 is a stack-based buffer overflow vulnerability in the Windows Broker Infrastructure Service on Microsoft Windows 10 Version 1607 and later builds. This flaw allows an authorized local attacker to elevate privileges on the affected system. The vulnerability has a high severity rating with a CVSS score of 7.8. Microsoft has released official fixes addressing this issue in multiple Windows 10 builds.

Heap-based buffer overflow in Windows DWM Core Library allows an authorized attacker to elevate privileges locally.