Vulnerabilities
Structured data from NIST NVD and the CISA KEV catalog. Fields the source has not provided are shown as such — nothing is inferred.
Archives: September 2026 October 2026 CISA KEV / threat intelligence
| CVE | Severity | CVSS | KEV | Description | Modified (UTC) |
|---|---|---|---|---|---|
| CVE-2026-69466 | high | 7.0 | No | Time-of-check time-of-use (toctou) race condition in Windows Kernel allows an authorized attacker to elevate privileges locally. | 2026-09-24 |
| CVE-2026-69463 | critical | 9.8 | No | Heap-based buffer overflow in Windows NTFS allows an unauthorized attacker to execute code over a network. | 2026-09-24 |
| CVE-2026-69461 | high | 8.8 | No | Stack-based buffer overflow in Windows NTFS allows an unauthorized attacker to execute code over a network. | 2026-09-24 |
| CVE-2026-69457 | medium | 5.5 | No | Out-of-bounds read in Windows USB Driver allows an authorized attacker to disclose information locally. | 2026-09-24 |
| CVE-2026-69450 | high | 7.8 | No | Out-of-bounds read in Windows Error Reporting allows an authorized attacker to elevate privileges locally. | 2026-09-24 |
| CVE-2026-69428 | high | 7.5 | No | Out-of-bounds read in Windows LDAP - Lightweight Directory Access Protocol allows an unauthorized attacker to deny service over a network. | 2026-09-24 |
| CVE-2026-69427 | high | 8.0 | No | Out-of-bounds read in Windows VOLSNAP.SYS allows an authorized attacker to elevate privileges over a network. | 2026-09-24 |
| CVE-2026-69426 | high | 7.8 | No | Heap-based buffer overflow in Windows VOLSNAP.SYS allows an authorized attacker to execute code locally. | 2026-09-24 |
| CVE-2026-69424 | high | 7.8 | No | Heap-based buffer overflow in Windows Distributed File System (DFS) allows an authorized attacker to elevate privileges locally. | 2026-09-24 |
| CVE-2026-69423 | high | 8.0 | No | Heap-based buffer overflow in Windows USB Video Driver allows an authorized attacker to elevate privileges over a network. | 2026-09-24 |
| CVE-2026-69421 | high | 7.8 | No | Integer underflow (wrap or wraparound) in Windows Kernel Mode Driver allows an authorized attacker to elevate privileges locally. | 2026-09-24 |
| CVE-2026-69420 | high | 7.8 | No | Heap-based buffer overflow in Windows VOLSNAP.SYS allows an authorized attacker to elevate privileges locally. | 2026-09-24 |
| CVE-2026-69416 | medium | 5.7 | No | Buffer over-read in Windows DHCP Server allows an authorized attacker to deny service over an adjacent network. | 2026-09-24 |
| CVE-2026-69415 | medium | 6.8 | No | Missing authentication for critical function in Windows DHCP Server allows an authorized attacker to elevate privileges over a network. | 2026-09-24 |
| CVE-2026-69413 | high | 7.0 | No | Use after free in Windows USB Audio Class driver (usbaudio.sys) allows an authorized attacker to elevate privileges locally. | 2026-09-24 |
| CVE-2026-69412 | high | 8.0 | No | Stack-based buffer overflow in Windows DHCP Server allows an authorized attacker to execute code over an adjacent network. | 2026-09-24 |
| CVE-2026-69410 | high | 7.0 | No | Use after free in Windows Win32K allows an authorized attacker to elevate privileges locally. | 2026-09-24 |
| CVE-2026-69408 | critical | 9.8 | No | Integer overflow or wraparound in Microsoft Windows Media Foundation allows an unauthorized attacker to execute code over a network. | 2026-09-24 |
| CVE-2026-69406 | medium | 5.5 | No | Exposure of sensitive system information to an unauthorized control sphere in Windows Kernel allows an authorized attacker to disclose infor... | 2026-09-24 |
| CVE-2026-69405 | medium | 5.7 | No | Missing release of memory after effective lifetime in Windows DHCP Server allows an authorized attacker to deny service over an adjacent net... | 2026-09-24 |