CVE-2026-69386
Heap-based buffer overflow in Microsoft Windows Media Foundation allows an unauthorized attacker to execute code over a network.
- CVSS
- 8,8
- EPSS
- 0,82 %
- Publikacja
- Poprawka
- Status poprawki nieustalony
KATALOG PODATNOŚCI
Wyszukuj po identyfikatorze CVE, nazwie produktu lub opisie. Filtruj według sygnałów ryzyka.
Pełny dostępny katalog: publikacje z ostatnich 365 dni oraz całe dostępne KEV.
Heap-based buffer overflow in Microsoft Windows Media Foundation allows an unauthorized attacker to execute code over a network.
Use after free in Windows Bluetooth Service allows an authorized attacker to elevate privileges locally.
Missing authorization in Windows Modern Device Management (MDM) allows an authorized attacker to elevate privileges locally.
Uncontrolled recursion in Microsoft Exchange Server allows an unauthorized attacker to deny service over a network.
Błędne rozwiązywanie linków w NTFS umożliwia lokalne podniesienie uprawnień przez autoryzowanego atakującego.
Missing authorization in Microsoft Exchange Server allows an authorized attacker to elevate privileges over a network.
Heap-based buffer overflow in Windows Overlay Filter allows an authorized attacker to elevate privileges locally.
Heap-based buffer overflow in Windows Overlay Filter allows an authorized attacker to elevate privileges over a network.
Use after free in Windows Error Reporting allows an authorized attacker to elevate privileges locally.
Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Print Spooler Components allows an authorized attacker to elevate privileges over a network.
Out-of-bounds read in Microsoft Local Security Authority Server (lsasrv) allows an authorized attacker to elevate privileges over a network.
Błąd use after free w jądrze Windows pozwala autoryzowanemu atakującemu na eskalację uprawnień.
Use after free in Windows NDIS allows an authorized attacker to elevate privileges over a network.
Use of uninitialized resource in Remote Desktop Client allows an authorized attacker to execute code over a network.
Heap-based buffer overflow in Active Directory Domain Services allows an authorized attacker to elevate privileges locally.
Heap-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code over a network.
Przepełnienie bufora w Windows Biometric Service pozwala lokalnie podnieść uprawnienia.
External control of file name or path in Microsoft Exchange Server allows an authorized attacker to execute code over a network.
Heap-based buffer overflow in Windows Print Spooler Components allows an authorized attacker to elevate privileges over a network.
Heap-based buffer overflow in Windows Fast FAT Driver allows an unauthorized attacker to execute code locally.
Przepełnienie bufora w Windows Win32K umożliwia lokalne podniesienie uprawnień przez atakującego.
Double free in Windows Registry allows an authorized attacker to elevate privileges over a network.
Use after free in Remote Desktop Gateway Service allows an authorized attacker to elevate privileges over a network.
Przepełnienie bufora w NTFS w systemie Windows umożliwia atakującemu eskalację uprawnień przez sieć.
Use after free in Windows Image Acquisition allows an authorized attacker to elevate privileges locally.
| CVE / produkt | Sygnały | Oceny | Publikacja | Zapisz |
|---|---|---|---|---|
| CVE-2026-69386 Heap-based buffer overflow in Microsoft Windows Media Foundation allows an unauthorized attacker to execute code over a network. |
Monitoruj |
CVSS 8,8EPSS 0,82 % | ||
| CVE-2026-69388 Use after free in Windows Bluetooth Service allows an authorized attacker to elevate privileges locally. |
Monitoruj |
CVSS 7,0EPSS 0,26 % | ||
| CVE-2026-69377 Missing authorization in Windows Modern Device Management (MDM) allows an authorized attacker to elevate privileges locally. |
Monitoruj |
CVSS 7,8EPSS 0,3 % | ||
| CVE-2026-69378 Uncontrolled recursion in Microsoft Exchange Server allows an unauthorized attacker to deny service over a network. |
Monitoruj |
CVSS 7,5EPSS 1,17 % | ||
| CVE-2026-69379 Błędne rozwiązywanie linków w NTFS umożliwia lokalne podniesienie uprawnień przez autoryzowanego atakującego. |
Monitoruj |
CVSS 7,0EPSS 0,28 % | ||
| CVE-2026-69380 Missing authorization in Microsoft Exchange Server allows an authorized attacker to elevate privileges over a network. |
Monitoruj |
CVSS 8,1EPSS 0,69 % | ||
| CVE-2026-69368 Heap-based buffer overflow in Windows Overlay Filter allows an authorized attacker to elevate privileges locally. |
Monitoruj |
CVSS 7,8EPSS 0,33 % | ||
| CVE-2026-69371 Heap-based buffer overflow in Windows Overlay Filter allows an authorized attacker to elevate privileges over a network. |
Monitoruj |
CVSS 8,0EPSS 0,77 % | ||
| CVE-2026-69362 Use after free in Windows Error Reporting allows an authorized attacker to elevate privileges locally. |
Monitoruj |
CVSS 7,0EPSS 0,26 % | ||
| CVE-2026-69364 Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Print Spooler Components allows an authorized attacker to elevate privileges over a… |
Monitoruj |
CVSS 7,1EPSS 0,44 % | ||
| CVE-2026-69365 Out-of-bounds read in Microsoft Local Security Authority Server (lsasrv) allows an authorized attacker to elevate privileges over a network. |
Monitoruj |
CVSS 8,0EPSS 0,77 % | ||
| CVE-2026-69366 Błąd use after free w jądrze Windows pozwala autoryzowanemu atakującemu na eskalację uprawnień. |
Monitoruj |
CVSS 7,1EPSS 0,57 % | ||
| CVE-2026-69357 Use after free in Windows NDIS allows an authorized attacker to elevate privileges over a network. |
Monitoruj |
CVSS 7,1EPSS 0,57 % | ||
| CVE-2026-69358 Use of uninitialized resource in Remote Desktop Client allows an authorized attacker to execute code over a network. |
Monitoruj |
CVSS 7,1EPSS 0,57 % | ||
| CVE-2026-69359 Heap-based buffer overflow in Active Directory Domain Services allows an authorized attacker to elevate privileges locally. |
Monitoruj |
CVSS 7,8EPSS 0,33 % | ||
| CVE-2026-69360 Heap-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code over a network. |
Monitoruj |
CVSS 8,8EPSS 0,82 % | ||
| CVE-2026-69352 Przepełnienie bufora w Windows Biometric Service pozwala lokalnie podnieść uprawnienia. |
Monitoruj |
CVSS 7,8EPSS 0,33 % | ||
| CVE-2026-69355 External control of file name or path in Microsoft Exchange Server allows an authorized attacker to execute code over a network. |
Monitoruj |
CVSS 8,8EPSS 0,91 % | ||
| CVE-2026-69346 Heap-based buffer overflow in Windows Print Spooler Components allows an authorized attacker to elevate privileges over a network. |
Monitoruj |
CVSS 8,0EPSS 0,77 % | ||
| CVE-2026-69347 Heap-based buffer overflow in Windows Fast FAT Driver allows an unauthorized attacker to execute code locally. |
Monitoruj |
CVSS 7,4EPSS 0,29 % | ||
| CVE-2026-69348 Przepełnienie bufora w Windows Win32K umożliwia lokalne podniesienie uprawnień przez atakującego. |
Monitoruj |
CVSS 7,8EPSS 0,33 % | ||
| CVE-2026-69337 Double free in Windows Registry allows an authorized attacker to elevate privileges over a network. |
Monitoruj |
CVSS 7,1EPSS 0,57 % | ||
| CVE-2026-69338 Use after free in Remote Desktop Gateway Service allows an authorized attacker to elevate privileges over a network. |
Monitoruj |
CVSS 7,1EPSS 0,57 % | ||
| CVE-2026-69340 Przepełnienie bufora w NTFS w systemie Windows umożliwia atakującemu eskalację uprawnień przez sieć. |
Monitoruj |
CVSS 7,1EPSS 0,57 % | ||
| CVE-2026-69341 Use after free in Windows Image Acquisition allows an authorized attacker to elevate privileges locally. |
Monitoruj |
CVSS 7,0EPSS 0,26 % |
Zakres katalogu: ostatnie 365 dni oraz wszystkie zachowane KEV.
Ostatnio zakończone okno publikacji NVD: 12.11.2026, 23:02 UTC – 13.11.2026, 04:02 UTC. To pojedyncze okno importu, nie granica pokrycia katalogu.