Common Vulnerabilities and Exposures (CVE)

CVE-2026-69424

Sep 10, 2026 23:08:05 UTC

Heap-based buffer overflow in Windows Distributed File System (DFS) allows an authorized attacker to elevate privileges locally.

CVE-2026-69416

Sep 10, 2026 23:08:05 UTC

Buffer over-read in Windows DHCP Server allows an authorized attacker to deny service over an adjacent network.

CVE-2026-69407

Sep 10, 2026 23:08:04 UTC

Integer overflow or wraparound in Volume Manager Driver allows an authorized attacker to elevate privileges locally.

CVE-2026-69405

Sep 10, 2026 23:08:04 UTC

Missing release of memory after effective lifetime in Windows DHCP Server allows an authorized attacker to deny service over an adjacent network.

CVE-2026-69421

Sep 10, 2026 23:08:03 UTC

Integer underflow (wrap or wraparound) in Windows Kernel Mode Driver allows an authorized attacker to elevate privileges locally.

CVE-2026-69398

Sep 10, 2026 23:08:03 UTC

Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Bluetooth Service allows an authorized attacker to elevate privileges locally.

CVE-2026-69410

Sep 10, 2026 23:08:02 UTC

Use after free in Windows Win32K allows an authorized attacker to elevate privileges locally.

CVE-2026-69396

Sep 10, 2026 23:08:02 UTC

Use after free in Windows NDIS allows an authorized attacker to elevate privileges over a network.

CVE-2026-69393

Sep 10, 2026 23:08:01 UTC

Out-of-bounds read in Windows Spaceport.sys allows an authorized attacker to disclose information over a network.

CVE-2026-69388

Sep 10, 2026 23:08:01 UTC

Use after free in Windows Bluetooth Service allows an authorized attacker to elevate privileges locally.

CVE-2026-69386

Sep 10, 2026 23:08:00 UTC

Heap-based buffer overflow in Microsoft Windows Media Foundation allows an unauthorized attacker to execute code over a network.

CVE-2026-69385

Sep 10, 2026 23:08:00 UTC

Concurrent execution using shared resource with improper synchronization ('race condition') in Windows TCP/IP allows an authorized attacker to elevate privileges locally.

CVE-2026-69374

Sep 10, 2026 23:07:59 UTC

Allocation of resources without limits or throttling in Windows SMB Server allows an authorized attacker to deny service over a network.

CVE-2026-69373

Sep 10, 2026 23:07:59 UTC

Integer overflow or wraparound in Windows Overlay Filter allows an authorized attacker to elevate privileges locally.

CVE-2026-69403

Sep 10, 2026 23:07:58 UTC

Missing authorization in Windows SMB Server allows an authorized attacker to disclose information locally.