Microsoft Security Response Center
CVE-2026-69898 Windows Kernel Elevation of Privilege Vulnerability
Heap-based buffer overflow in Windows Kernel allows an authorized attacker to elevate privileges locally.
90-day archive
All news
Search by headline, summary or source name. Every item links to its own original page.
Category: Vulnerabilities & Zero-Day
Clear filters
2192 news
Page 36 of 74
Microsoft Security Response Center
CVE-2026-69883 Windows iSCSI Remote Code Execution Vulnerability
Use after free in Windows iSCSI allows an unauthorized attacker to execute code over a network.
Microsoft Security Response Center
CVE-2026-69882 Windows Update Elevation of Privilege Vulnerability
Untrusted search path in Windows Update allows an authorized attacker to elevate privileges locally.
Microsoft Security Response Center
CVE-2026-69867 SQLite Elevation of Privilege Vulnerability
Out-of-bounds read in SQLite allows an authorized attacker to elevate privileges locally.
Microsoft Security Response Center
CVE-2026-69850 Windows Certificates Elevation of Privilege Vulnerability
Untrusted pointer dereference in Windows Certificates allows an authorized attacker to elevate privileges locally.
Microsoft Security Response Center
CVE-2026-69840 Windows Certificates Elevation of Privilege Vulnerability
Use after free in Windows Certificates allows an authorized attacker to elevate privileges locally.
Microsoft Security Response Center
CVE-2026-69830 Windows DHCP Server Remote Code Execution Vulnerability
Concurrent execution using shared resource with improper synchronization ('race condition') in Windows DHCP Server allows an unauthorized attacker to execute code over a network.
Microsoft Security Response Center
CVE-2026-69795 Windows Clipboard Server Elevation of Privilege Vulnerability
Null pointer dereference in Windows Clipboard Server allows an authorized attacker to elevate privileges locally.
Microsoft Security Response Center
CVE-2026-69766 Windows Storage Elevation of Privilege Vulnerability
Use after free in Windows Storage allows an authorized attacker to elevate privileges locally.
Microsoft Security Response Center
CVE-2026-69763 Windows Storage Elevation of Privilege Vulnerability
Use after free in Windows Storage allows an authorized attacker to elevate privileges locally.
Microsoft Security Response Center
CVE-2026-69743 Windows Program Compatibility Assistant Service Elevation of Privilege Vulnerability
Use after free in Windows Program Compatibility Assistant Service allows an authorized attacker to elevate privileges locally.
Microsoft Security Response Center
CVE-2026-69721 Windows iSCSI Information Disclosure Vulnerability
Out-of-bounds read in Windows iSCSI allows an authorized attacker to disclose information locally.
Microsoft Security Response Center
CVE-2026-69718 Windows Update Elevation of Privilege Vulnerability
Improper neutralization of special elements used in a command ('command injection') in Windows Update allows an authorized attacker to elevate privileges locally.
Microsoft Security Response Center
CVE-2026-69705 Windows iSCSI Remote Code Execution Vulnerability
Out-of-bounds write in Windows iSCSI allows an unauthorized attacker to execute code over a network.
Microsoft Security Response Center
CVE-2026-69673 Windows Update Elevation of Privilege Vulnerability
Improper link resolution before file access ('link following') in Windows Update allows an authorized attacker to elevate privileges locally.
Microsoft Security Response Center
CVE-2026-69651 .NET Denial of Service Vulnerability
Inefficient algorithmic complexity in .NET allows an unauthorized attacker to deny service over a network.
Microsoft Security Response Center
CVE-2026-69650 Windows Key Distribution Center Elevation of Privilege Vulnerability
Improper verification of cryptographic signature in Windows Key Distribution Center allows an authorized attacker to elevate privileges locally.
Microsoft Security Response Center
CVE-2026-69644 Windows iSCSI Information Disclosure Vulnerability
Exposure of sensitive system information to an unauthorized control sphere in Windows iSCSI allows an authorized attacker to disclose information locally.
Microsoft Security Response Center
CVE-2026-69639 Windows libarchive Remote Code Execution Vulnerability
Heap-based buffer overflow in Windows Libarchive allows an unauthorized attacker to execute code over a network.
Microsoft Security Response Center
CVE-2026-69634 Windows iSCSI Remote Code Execution Vulnerability
Heap-based buffer overflow in Windows iSCSI allows an unauthorized attacker to execute code over a network.
Microsoft Security Response Center
CVE-2026-69633 Windows Update Elevation of Privilege Vulnerability
Heap-based buffer overflow in Windows Update allows an authorized attacker to elevate privileges locally.
Microsoft Security Response Center
CVE-2026-69521 Windows iSCSI Remote Code Execution Vulnerability
Integer overflow or wraparound in Windows iSCSI allows an unauthorized attacker to execute code over a network.
Microsoft Security Response Center
CVE-2026-69387 Windows Error Reporting Elevation of Privilege Vulnerability
Use after free in Windows Error Reporting allows an authorized attacker to elevate privileges locally.
Microsoft Security Response Center
CVE-2026-69370 Visual Studio Code Remote Code Execution Vulnerability
Improper neutralization of special elements used in a command ('command injection') in Visual Studio Code allows an unauthorized attacker to execute code over a network.
Microsoft Security Response Center
CVE-2026-69363 Windows Error Reporting Elevation of Privilege Vulnerability
Heap-based buffer overflow in Windows Error Reporting allows an authorized attacker to elevate privileges over a network.
Microsoft Security Response Center
CVE-2026-69354 Windows Error Reporting Elevation of Privilege Vulnerability
Heap-based buffer overflow in Windows Error Reporting allows an authorized attacker to elevate privileges locally.
Microsoft Security Response Center
CVE-2026-68836 Windows kernel32.dll Elevation of Privilege Vulnerability
Heap-based buffer overflow in Windows kernel32.dll allows an authorized attacker to elevate privileges locally.
Microsoft Security Response Center
CVE-2026-67625 Microsoft SQL Server Remote Code Execution Vulnerability
Heap-based buffer overflow in SQL Server allows an authorized attacker to execute code over a network.
Microsoft Security Response Center
CVE-2026-66822 .NET Information Disclosure Vulnerability
Insertion of sensitive information into sent data in .NET allows an unauthorized attacker to disclose information over a network.
Microsoft Security Response Center
CVE-2026-61931 Windows Perception Simulation Service Elevation of Privilege Vulnerability
Use after free in Windows Perception Simulation Service allows an authorized attacker to elevate privileges locally.