CVE-2026-69963

HighCVSS 7.8/10Last modified Oct 16, 2026

Description

Heap-based buffer overflow in Microsoft Streaming Service allows an authorized attacker to elevate privileges locally.

Metrics

CVSS 3.1 7.8/10CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Weakness enumeration

CWE-122CWE-190

Affected software

Source: the vendor's advisory (CNA). NVD analysis pending.

No affected versions have been published.

Timeline

Published
Oct 13, 2026
Last modified
Oct 16, 2026
NVD status
Awaiting Analysis

Related CVEs from 2026

CVE-2026-699647.0Use after free in Microsoft Streaming Service allows an authorized attacker to elevate privileges locally.CVE-2026-699667.8Integer overflow or wraparound in Microsoft Streaming Service allows an authorized attacker to elevate privileges locally.CVE-2026-699675.5Out-of-bounds read in Windows Overlay Filter allows an authorized attacker to disclose information locally.CVE-2026-699686.5Relative path traversal in Windows Libarchive allows an unauthorized attacker to perform tampering over a network.CVE-2026-699694.7Improper link resolution before file access ('link following') in Windows AppX Deployment Service allows an authorized attacker to disclose CVE-2026-69972.4A security vulnerability has been detected in BDCOM P3310D 0.4.2 10.1.0F Build 86345. This impacts an unknown function of the component New CVE-2026-699707.0Heap-based buffer overflow in Microsoft Streaming Service allows an authorized attacker to elevate privileges locally.CVE-2026-699715.5Incorrect authorization in Windows Kernel-Mode Drivers allows an authorized attacker to disclose information locally.CVE-2026-699736.5Improper limitation of a pathname to a restricted directory ('path traversal') in Windows Libarchive allows an unauthorized attacker to perfCVE-2026-699744.7Out-of-bounds read in Desktop Window Manager allows an authorized attacker to disclose information locally.CVE-2026-699767.5Use after free in Remote Desktop Client allows an unauthorized attacker to execute code over a network.CVE-2026-699777.0Use after free in Quality Windows Audio/Video Experience (QWAVE) service allows an authorized attacker to elevate privileges locally.
CVE-2026-69963: High severity, CVSS 7.8 | Vulnix