CVE-2026-69766 — Use after free in Windows Storage allows an authorized attacker to elevate privileges locally.
Use after free in Windows Storage allows an authorized attacker to elevate privileges locally.
CVSS 7
Cyber Threat Dashboard
Veille cybersécurité : alertes, vulnérabilités, actualités et outils pour se protéger.
4993Éléments
34147 derniers jours
140Aujourd'hui
2286Critique + haute
14/10/2026 11:41Dernière collecte
CVE-2026-69765 — Use after free in Windows Storport Miniport Driver allows an unauthorized attacker to execute code over a net…
Use after free in Windows Storport Miniport Driver allows an unauthorized attacker to execute code over a network.
CVSS 8.8
NVD · CVE récentesCWE-416
CVE-2026-69763 — Use after free in Windows Storage allows an authorized attacker to elevate privileges locally.
Use after free in Windows Storage allows an authorized attacker to elevate privileges locally.
CVSS 7
CVE-2026-69743 — Use after free in Windows Program Compatibility Assistant Service allows an authorized attacker to elevate pr…
Use after free in Windows Program Compatibility Assistant Service allows an authorized attacker to elevate privileges locally.
CVSS 7
NVD · CVE récentesCWE-416
CVE-2026-69736 — Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Creden…
Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Credential Manager allows an authorized attacker to elevate privileges locally.
CVSS 7
CVE-2026-69733 — Untrusted search path in Windows Update allows an authorized attacker to elevate privileges locally.
Untrusted search path in Windows Update allows an authorized attacker to elevate privileges locally.
CVSS 7.8
NVD · CVE récentesCWE-426
CVE-2026-69721 — Out-of-bounds read in Windows iSCSI allows an authorized attacker to disclose information locally.
Out-of-bounds read in Windows iSCSI allows an authorized attacker to disclose information locally.
CVSS 5.5
NVD · CVE récentesCWE-125
CVE-2026-69718 — Improper neutralization of special elements used in a command ('command injection') in Windows Update allows…
Improper neutralization of special elements used in a command ('command injection') in Windows Update allows an authorized attacker to elevate privileges locally.
CVSS 7.8
NVD · CVE récentesCWE-77
CVE-2026-69705 — Out-of-bounds write in Windows iSCSI allows an unauthorized attacker to execute code over a network.
Out-of-bounds write in Windows iSCSI allows an unauthorized attacker to execute code over a network.
CVSS 9.8
NVD · CVE récentesCWE-787
CVE-2026-69675 — Out-of-bounds read in Windows Network File System allows an authorized attacker to disclose information local…
Out-of-bounds read in Windows Network File System allows an authorized attacker to disclose information locally.
CVSS 5.5
NVD · CVE récentesCWE-125
CVE-2026-69673 — Improper link resolution before file access ('link following') in Windows Update allows an authorized attacke…
Improper link resolution before file access ('link following') in Windows Update allows an authorized attacker to elevate privileges locally.
CVSS 7.8
NVD · CVE récentesCWE-59
CVE-2026-69651 — Inefficient algorithmic complexity in .NET allows an unauthorized attacker to deny service over a network.
Inefficient algorithmic complexity in .NET allows an unauthorized attacker to deny service over a network.
CVSS 7.5
NVD · CVE récentesCWE-407