CVE-2026-69610
High · 7.0CVSS
7.0
EPSS
—
Published
Sep 8, 2026
CISA due date
—
The record
Buffer over-read in Windows Win32K allows an authorized attacker to elevate privileges locally.
Affected packages
| Ecosystem | Package | Introduced | Fixed |
|---|
Related vulnerabilities
- CVE-2026-93524 A buffer overread in CheckKeySyms() in X.Org X Server before 21.1.25 and XWayland before… CWE-126
- CVE-2026-57185 Asterisk is an open source private branch exchange and telephony toolkit. CWE-126
- CVE-2026-53920 odhcpd is the DHCPv6, DHCPv4, and router-advertisement server used by OpenWrt. CWE-126
- CVE-2026-55606 odhcpd is the DHCPv6, DHCPv4, and router-advertisement server used by OpenWrt. CWE-126
- CVE-2026-107928 When curl is built with GnuTLS, a malicious WebSocket server can make curl send memory… CWE-126
- CVE-2026-112404 Pillow is a Python imaging library. CWE-126
- CVE-2026-112394 Pillow is a Python imaging library. CWE-126
- CVE-2026-85745 MariaDB server is a community developed fork of MySQL server. CWE-126