Threat database

Out-of-bounds read in DNS Server allows an authorized attacker to disclose information over a network.

Out-of-bounds read in DNS Server allows an authorized attacker to disclose information over a network.

Use after free in Remote Desktop Client allows an unauthorized attacker to execute code over a network.

Time-of-check time-of-use (toctou) race condition in Windows Win32 Kernel Subsystem allows an authorized attacker to disclose information locally.

Remote Code Execution in Windows Routing and Remote Access Service (RRAS) allows attacker to gain an unauthorized access to victim's machine

Use after free in Windows Error Reporting allows an authorized attacker to elevate privileges locally.

Out-of-bounds read in Windows NTFS allows an authorized attacker to elevate privileges locally.

External control of system or configuration setting in Windows Setup Files Cleanup allows an authorized attacker to elevate privileges locally.

Use after free in Quality Windows Audio/Video Experience (QWAVE) service allows an authorized attacker to elevate privileges locally.

Concurrent execution using shared resource with improper synchronization ('race condition') in Microsoft Account allows an authorized attacker to elevate privileges locally.

Out-of-bounds read in Windows Installer allows an authorized attacker to disclose information locally.

Concurrent execution using shared resource with improper synchronization ('race condition') in Active Directory Certificate Services (AD CS) allows an authorized attacker to elevate privileges locally.

CVE-2026-69329 is a high-severity vulnerability in Microsoft Windows 10 Version 1607 and related builds, involving an out-of-bounds read in the BranchCache component. This flaw allows an unauthorized attacker to cause a denial of service over a network. The vulnerability does not impact confidentiality or integrity but affects availability. Microsoft has issued an official fix for this vulnerability.

CVE-2026-62762 is a vulnerability in Microsoft Windows 10 Version 1607 involving a null pointer dereference in Active Directory Domain Services. This flaw allows an authorized attacker to cause a denial of service over a network. The vulnerability has a medium severity rating with a CVSS score of 6.5. Microsoft has released an official fix to address this issue.

CVE-2026-69345 is an out-of-bounds read vulnerability in Microsoft Standard XPS on Windows 10 Version 1607 and related builds. It allows an authorized local attacker to disclose information. The vulnerability has a medium severity with a CVSS score of 5.5. An official fix is available from Microsoft.

CVE-2026-68893 is a use-after-free vulnerability in the Windows Remote Desktop Licensing Service affecting multiple versions of Microsoft Windows 10, including version 1607. This vulnerability allows an authorized attacker to elevate privileges over a network. The issue has a high severity rating with a CVSS score of 7.1. An official fix is available from Microsoft.

Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Speech allows an authorized attacker to elevate privileges locally.