| CVE-2026-69397 | Use after free in OpenSSH for Windows allows an unauthorized attacker to execute code over a network. | high | |
| CVE-2026-69408 | Integer overflow or wraparound in Microsoft Windows Media Foundation allows an unauthorized attacker to execute code over a network. | critical | |
| CVE-2026-69433 | Heap-based buffer overflow in Windows Error Reporting allows an authorized attacker to elevate privileges locally. | high | |
| CVE-2026-69588 | Missing release of memory after effective lifetime in Windows TCP/IP allows an unauthorized attacker to deny service over a network. | high | |
| CVE-2026-69614 | Stack-based buffer overflow in Microsoft Office Access allows an unauthorized attacker to execute code over a network. | high | |
| CVE-2026-69624 | Incomplete list of disallowed inputs in Active Directory Certificate Services (AD CS) allows an authorized attacker to perform tampering over a network. | medium | |
| CVE-2026-69631 | Integer overflow or wraparound in Windows DNS allows an unauthorized attacker to deny service over a network. | high | |
| CVE-2026-69669 | Heap-based buffer overflow in Windows Kernel allows an unauthorized attacker to execute code over a network. | high | |
| CVE-2026-69734 | Integer overflow or wraparound in Microsoft Office Word allows an unauthorized attacker to disclose information over a network. | medium | |
| CVE-2026-69896 | Use after free in Windows Error Reporting allows an authorized attacker to elevate privileges locally. | high | |
| CVE-2026-69834 | Use after free in Windows ALPC allows an authorized attacker to elevate privileges locally. | high | |
| CVE-2026-72981 | Use after free in IP Helper allows an unauthorized attacker to execute code over a network. | high | |
| CVE-2026-80073 | Out-of-bounds read in Microsoft Office Outlook allows an unauthorized attacker to disclose information over a network. | medium | |
| CVE-2026-81952 | Heap-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code over a network. | high | |
| CVE-2026-80082 | Out-of-bounds read in Microsoft Office allows an unauthorized attacker to disclose information over a network. | medium | |
| CVE-2026-69816 | Use after free in Windows Accounts Control allows an authorized attacker to elevate privileges locally. | high | |
| CVE-2026-69691 | Heap-based buffer overflow in Windows Spaceport.sys allows an authorized attacker to elevate privileges locally. | high | |
| CVE-2026-69839 | Uncaught exception in Windows iSCSI Target Service allows an authorized attacker to deny service over a network. | medium | |
| CVE-2026-69621 | Heap-based buffer overflow in Windows Fax Service allows an authorized attacker to elevate privileges locally. | high | |
| CVE-2026-69498 | Use after free in Windows Win32K allows an authorized attacker to elevate privileges locally. | high | |
| CVE-2026-69322 | Double free in Microsoft Windows Search Component allows an authorized attacker to elevate privileges over a network. | high | |
| CVE-2026-81378 | Interpretation conflict in Visual Studio Code allows an unauthorized attacker to bypass a security feature over a network. | high | |
| CVE-2026-77481 | Heap-based buffer overflow in SQL Server allows an authorized attacker to execute code over a network. | high | |
| CVE-2026-77482 | Heap-based buffer overflow in SQL Server allows an unauthorized attacker to execute code over a network. | high | |
| CVE-2026-55045 | Out-of-bounds read in Microsoft Office allows an unauthorized attacker to execute code locally. | high | |
| CVE-2026-55032 | Use after free in Microsoft Office Word allows an unauthorized attacker to execute code locally. | high | |
| CVE-2026-50681 | Exposure of sensitive information to an unauthorized actor in Windows Cryptographic Services allows an authorized attacker to disclose information locally. | medium | |
| CVE-2026-50307 | Use after free in Windows TCP/IP allows an authorized attacker to elevate privileges locally. | high | |
| CVE-2026-50391 | Improper privilege management in Windows Group Policy allows an authorized attacker to elevate privileges locally. | high | |
| CVE-2026-50447 | Heap-based buffer overflow in Windows Message Queuing allows an unauthorized attacker to execute code over a network. | critical | |
| CVE-2026-70337 | Relative path traversal in Microsoft PowerShell Core allows an unauthorized attacker to execute code over a network. | high | |
| CVE-2026-64906 | Heap-based buffer overflow in Microsoft Office Access allows an unauthorized attacker to execute code locally. | high | |
| CVE-2026-62889 | Double free in Windows Secure Socket Tunneling Protocol (SSTP) allows an unauthorized attacker to execute code over a network. | high | |
| CVE-2026-61357 | Use after free in Application Information Services allows an authorized attacker to elevate privileges locally. | high | |
| CVE-2026-62880 | Out-of-bounds read in Windows NTFS allows an authorized attacker to elevate privileges locally. | high | |
| CVE-2026-69346 | Heap-based buffer overflow in Windows Print Spooler Components allows an authorized attacker to elevate privileges over a network. | high | |
| CVE-2026-69381 | Out-of-bounds read in Windows Storage Port Driver allows an unauthorized attacker to disclose information with a physical attack. | medium | |
| CVE-2026-69395 | Use of externally-controlled format string in Active Directory Certificate Services (AD CS) allows an authorized attacker to disclose information over a network. | medium | |
| CVE-2026-69405 | Missing release of memory after effective lifetime in Windows DHCP Server allows an authorized attacker to deny service over an adjacent network. | medium | |
| CVE-2026-69464 | Execution with unnecessary privileges in Microsoft Office SharePoint allows an authorized attacker to elevate privileges over a network. | high | |
| CVE-2026-69531 | Unintended proxy or intermediary ('confused deputy') in Microsoft Windows Speech allows an authorized attacker to perform tampering locally. | medium | |
| CVE-2026-69534 | Improper neutralization of special elements used in a command ('command injection') in Windows Program Compatibility Assistant Service allows an authorized attacker to elevate privileges locally. | high | |
| CVE-2026-69569 | Untrusted pointer dereference in Windows Print Spooler Components allows an authorized attacker to deny service over a network. | medium | |
| CVE-2026-69598 | Incorrect calculation of buffer size in Windows iSCSI allows an unauthorized attacker to execute code over a network. | high | |
| CVE-2026-69610 | Buffer over-read in Windows Win32K allows an authorized attacker to elevate privileges locally. | high | |
| CVE-2026-69715 | Out-of-bounds read in Windows Direct Show allows an unauthorized attacker to execute code over a network. | critical | |
| CVE-2026-69720 | Heap-based buffer overflow in Windows MIDI Service Module allows an authorized attacker to elevate privileges locally. | high | |
| CVE-2026-77483 | Weak authentication in SQL Server allows an authorized attacker to elevate privileges over a network. | high | |
| CVE-2026-78447 | Heap-based buffer overflow in Windows Biometric Service allows an authorized attacker to elevate privileges locally. | high | |
| CVE-2026-69866 | Use after free in Windows Device Association Service allows an authorized attacker to elevate privileges locally. | high | |
