Common Vulnerabilities and Exposures (CVE)
CVE-2026-69426
Heap-based buffer overflow in Windows VOLSNAP.SYS allows an authorized attacker to execute code locally.
CVE-2026-69417
Improper neutralization of input during web page generation ('cross-site scripting') in Microsoft Office SharePoint allows an authorized attacker to perform spoofing over a network.
CVE-2026-69409
Execution with unnecessary privileges in Microsoft Office SharePoint allows an authorized attacker to disclose information over a network.
CVE-2026-69402
Improper neutralization of input during web page generation ('cross-site scripting') in Microsoft Office SharePoint allows an authorized attacker to perform spoofing over a network.
CVE-2026-69397
Use after free in OpenSSH for Windows allows an unauthorized attacker to execute code over a network.
CVE-2026-69395
Use of externally-controlled format string in Active Directory Certificate Services (AD CS) allows an authorized attacker to disclose information over a network.
CVE-2026-69392
Use after free in Windows Shell allows an authorized attacker to elevate privileges locally.
CVE-2026-69910
Stack-based buffer overflow in Windows Hyper-V allows an unauthorized attacker to execute code over a network.
CVE-2026-69352
Heap-based buffer overflow in Windows Biometric Service allows an authorized attacker to elevate privileges locally.
CVE-2026-69311
Use after free in Windows Audio Service allows an authorized attacker to elevate privileges locally.
CVE-2026-69298
Integer overflow or wraparound in Windows Biometric Service allows an authorized attacker to elevate privileges locally.
CVE-2026-69323
Heap-based buffer overflow in Windows Biometric Service allows an authorized attacker to elevate privileges locally.
CVE-2026-69291
Heap-based buffer overflow in Windows Volume Manager Extension Driver allows an unauthorized attacker to execute code over a network.
CVE-2026-69309
Double free in Windows Print Spooler Components allows an authorized attacker to elevate privileges locally.
CVE-2026-69287
Use after free in Windows Remote Desktop Services allows an authorized attacker to elevate privileges locally.