CVE-2026-69850

HighCVSS 7.8/10Last modified Oct 16, 2026

Description

Untrusted pointer dereference in Windows Certificates allows an authorized attacker to elevate privileges locally.

Metrics

CVSS 3.1 7.8/10CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Weakness enumeration

CWE-822

Affected software

Source: the vendor's advisory (CNA). NVD analysis pending.

No affected versions have been published.

Timeline

Published
Oct 13, 2026
Last modified
Oct 16, 2026
NVD status
Undergoing Analysis

Related CVEs from 2026

CVE-2026-698519.9Server-side request forgery (ssrf) in Azure Active Directory allows an authorized attacker to elevate privileges over a network.CVE-2026-698527.5Remote Code Execution in Windows Routing and Remote Access Service (RRAS) allows attacker to gain an unauthorized access to victim's machineCVE-2026-698534.7Use of uninitialized resource in Windows Win32K allows an authorized attacker to disclose information locally.CVE-2026-698548.1Improper authentication in Spring Cloud Azure allows an unauthorized attacker to elevate privileges over a network.CVE-2026-698556.5Server-side request forgery (ssrf) in Microsoft Copilot in Azure allows an authorized attacker to disclose information over a network.CVE-2026-698567.0Use after free in Windows Storage allows an authorized attacker to elevate privileges locally.CVE-2026-698578.8Authorization bypass through user-controlled key in Azure Cosmos DB allows an authorized attacker to perform spoofing over a network.CVE-2026-698588.1Use after free in Windows DNS allows an unauthorized attacker to execute code over a network.CVE-2026-698597.0Time-of-check time-of-use (toctou) race condition in Windows USB Audio Class driver (usbaudio.sys) allows an authorized attacker to elevate CVE-2026-69863.7A security vulnerability has been detected in Cesanta Mongoose up to 7.20. This issue affects the function mg_aes_gcm_decrypt of the file /sCVE-2026-698608.8Heap-based buffer overflow in Windows Imaging Component allows an unauthorized attacker to execute code over a network.CVE-2026-698625.5Out-of-bounds read in Windows Wireless Wide Area Network Service allows an authorized attacker to disclose information locally.
CVE-2026-69850: High severity, CVSS 7.8 | Vulnix