CVE-2026-105569

HighCVSS 7.8/10Last modified Nov 10, 2026

Description

Out-of-bounds read in Windows Cloud Files Mini Filter Driver allows an authorized attacker to elevate privileges locally.

Metrics

CVSS 3.1 7.8/10CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Weakness enumeration

CWE-125

Affected software

Source: the vendor's advisory (CNA). NVD analysis pending.

No affected versions have been published.

Timeline

Published
Nov 10, 2026
Last modified
Nov 10, 2026
NVD status
Awaiting Analysis

Related CVEs from 2026

CVE-2026-105579.8The Yarbo Android and iOS applications contain hard-coded MQTT broker credentials that are identical for all users and all devices. These crCVE-2026-1055706.7Docker Sandboxes compared OAuth token-endpoint hostnames case-sensitively when deciding whether to mask managed credential responses, while CVE-2026-1055717.3A flaw has been found in PickMall Lilishop up to 4.2.4. The impacted element is an unknown function of the file /buyer/passport/member/bindMCVE-2026-1055724.3A vulnerability has been found in PickMall Lilishop up to 4.2.4. This affects an unknown function of the file /buyer/trade/receipt of the coCVE-2026-1055734.3A vulnerability was found in newbee-ltd newbee-mall up to 2.7.5. This impacts an unknown function of the file /jshERP-boot/accountHead/updatCVE-2026-1055747.0Use after free in Windows MIDI Service Module allows an authorized attacker to elevate privileges locally.CVE-2026-1055757.8Access of resource using incompatible type ('type confusion') in Windows DWM Core Library allows an authorized attacker to elevate privilegeCVE-2026-1055787.5Integer overflow or wraparound in Microsoft JScript allows an unauthorized attacker to execute code over a network.CVE-2026-1055797.5Integer overflow or wraparound in Windows DNS allows an unauthorized attacker to disclose information over a network.CVE-2026-105586.3A vulnerability was detected in SourceCodester Pizzafy Ecommerce System 1.0. Impacted is an unknown function of the file /admin/index.php. PCVE-2026-1055807.8Heap-based buffer overflow in Windows Management Instrumentation allows an unauthorized attacker to execute code locally.CVE-2026-1055818.8Stack-based buffer overflow in Desktop Window Manager allows an authorized attacker to elevate privileges locally.
CVE-2026-105569: High severity, CVSS 7.8 | Vulnix