CVE-2026-69675

MediumCVSS 5.5/10Last modified Oct 13, 2026

Description

Out-of-bounds read in Windows Network File System allows an authorized attacker to disclose information locally.

Metrics

CVSS 3.1 5.5/10CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N

Weakness enumeration

CWE-125

Affected software

Source: the vendor's advisory (CNA). NVD analysis pending.

No affected versions have been published.

Timeline

Published
Oct 13, 2026
Last modified
Oct 13, 2026
NVD status
Undergoing Analysis

Related CVEs from 2026

CVE-2026-696768.8Authentication bypass by capture-replay in Windows Kerberos allows an authorized attacker to execute code over a network.CVE-2026-696788.8Use after free in Microsoft Office PowerPoint allows an unauthorized attacker to execute code over a network.CVE-2026-696795.7Out-of-bounds read in Windows DHCP Server allows an authorized attacker to deny service over an adjacent network.CVE-2026-69686.5Incomplete path traversal fixes in awslabs/tough before tough-v0.22.0 allow remote authenticated users with delegated signing authority to wCVE-2026-696808.1Origin validation error in Windows DNS allows an unauthorized attacker to perform spoofing over a network.CVE-2026-696818.8Heap-based buffer overflow in Virtual Hard Disk (VHD) Miniport Driver allows an authorized attacker to elevate privileges over a network.CVE-2026-696827.0Use after free in Windows Host Guardian Service allows an authorized attacker to elevate privileges locally.CVE-2026-696837.7Server-side request forgery (ssrf) in Microsoft Office SharePoint allows an authorized attacker to disclose information over a network.CVE-2026-696845.5Generation of error message containing sensitive information in Windows Error Reporting allows an authorized attacker to disclose informatioCVE-2026-696857.8Heap-based buffer overflow in Windows Kerberos allows an authorized attacker to elevate privileges locally.CVE-2026-696868.8Stack-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code over a network.CVE-2026-696877.8Integer underflow (wrap or wraparound) in Windows USB Audio Class driver (usbaudio.sys) allows an authorized attacker to elevate privileges
CVE-2026-69675: Medium severity, CVSS 5.5 | Vulnix