CVE Vulnerability Database

Complete database of CVE vulnerabilities. Track critical security threats, exploits and patches. Updated daily from NVD NIST.

CVE-2026-69802

8.1

Weak authentication in Network Device Enrollment Service (NDES) allows an unauthorized attacker to execute code over a network.

Microsoft
Details

CVE-2026-69798

7.8

Use after free in Windows Wired AutoConfig Service allows an authorized attacker to elevate privileges locally.

Microsoft
Details

CVE-2026-69795

7.0

Null pointer dereference in Windows Clipboard Server allows an authorized attacker to elevate privileges locally.

Microsoft
Details

CVE-2026-69789

7.5

Heap-based buffer overflow in Reliable Multicast Transport Driver (RMCAST) allows an unauthorized attacker to execute code over an adjacent network.

Microsoft
Details

CVE-2026-69783

7.8

External control of file name or path in Windows Update allows an authorized attacker to elevate privileges locally.

Microsoft
Details

CVE-2026-69766

7.0

Use after free in Windows Storage allows an authorized attacker to elevate privileges locally.

Microsoft
Details

CVE-2026-69765

8.8

Use after free in Windows Storport Miniport Driver allows an unauthorized attacker to execute code over a network.

Microsoft
Details

CVE-2026-69763

7.0

Use after free in Windows Storage allows an authorized attacker to elevate privileges locally.

Microsoft
Details

CVE-2026-69743

7.0

Use after free in Windows Program Compatibility Assistant Service allows an authorized attacker to elevate privileges locally.

Microsoft
Details

CVE-2026-69736

7.0

Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Credential Manager allows an authorized attacker to elevate privileges locally.

Microsoft
Details
← 991/12166 →