CVE-2026-69947 Windows Overlay Filter Remote Code Execution Vulnerability
Heap-based buffer overflow in Windows Overlay Filter allows an unauthorized attacker to execute code with a physical attack.
EPSS < 0.01 CVE-2026-69947 US
Heap-based buffer overflow in Windows Overlay Filter allows an unauthorized attacker to execute code with a physical attack.
EPSS < 0.01 CVE-2026-69947 US
Buffer over-read in Windows Overlay Filter allows an authorized attacker to elevate privileges locally.
EPSS < 0.01 CVE-2026-69950 US
Missing authorization in Windows AppX Deployment Extensions allows an authorized attacker to elevate privileges locally.
EPSS < 0.01 CVE-2026-69945 US
Buffer over-read in Windows Overlay Filter allows an authorized attacker to execute code locally.
EPSS < 0.01 CVE-2026-69942 US
Heap-based buffer overflow in Windows Core Messaging allows an authorized attacker to elevate privileges locally.
EPSS < 0.01 CVE-2026-69918 US
Use after free in Windows TCP/IP allows an unauthorized attacker to execute code over a network.
EPSS 0.01 CVE-2026-69913 US
Heap-based buffer overflow in Microsoft COM for Windows allows an authorized attacker to elevate privileges locally.
EPSS < 0.01 CVE-2026-69909 Microsoft US
Missing authorization in Windows AppX Deployment Service allows an authorized attacker to perform tampering locally.
EPSS < 0.01 CVE-2026-69905 US
Access of resource using incompatible type ('type confusion') in Desktop Window Manager allows an authorized attacker to elevate privileges locally.
EPSS < 0.01 CVE-2026-69926 US
Untrusted pointer dereference in Windows Certificates allows an authorized attacker to elevate privileges locally.
EPSS < 0.01 CVE-2026-69850 US
Use after free in Windows Certificates allows an authorized attacker to elevate privileges locally.
EPSS < 0.01 CVE-2026-69840 US
Out-of-bounds read in Windows AppX Deployment Service allows an authorized attacker to disclose information locally.
EPSS < 0.01 CVE-2026-69914 US
Out-of-bounds read in SQLite allows an authorized attacker to elevate privileges locally.
EPSS < 0.01 CVE-2026-69867 SQLite US
Null pointer dereference in Windows Clipboard Server allows an authorized attacker to elevate privileges locally.
EPSS < 0.01 CVE-2026-69795 US
Use after free in Windows Storage allows an authorized attacker to elevate privileges locally.
EPSS < 0.01 CVE-2026-69935 US
Use after free in Windows Storage allows an authorized attacker to elevate privileges locally.
EPSS < 0.01 CVE-2026-69766 US
Use after free in Windows Storage allows an authorized attacker to elevate privileges locally.
EPSS < 0.01 CVE-2026-69763 US
Use after free in Windows Perception Simulation Service allows an authorized attacker to elevate privileges locally.
EPSS < 0.01 CVE-2026-61931 US
Heap-based buffer overflow in Windows Libarchive allows an unauthorized attacker to execute code over a network.
EPSS 0.01 CVE-2026-69639 US
Null pointer dereference in Windows Schannel allows an authorized attacker to elevate privileges locally.
EPSS < 0.01 CVE-2026-70566 US
Heap-based buffer overflow in Windows Error Reporting allows an authorized attacker to elevate privileges over a network.
EPSS 0.01 CVE-2026-69363 US
Use after free in Windows Program Compatibility Assistant Service allows an authorized attacker to elevate privileges locally.
EPSS < 0.01 CVE-2026-72968 US
Improper resource shutdown or release in Windows UEFI allows an authorized attacker to bypass a security feature locally.
EPSS < 0.01 CVE-2026-49785 US
Use after free in Windows Message Queuing allows an unauthorized attacker to execute code over a network.
EPSS 0.01 CVE-2026-108460 US
Heap-based buffer overflow in Windows Kernel allows an authorized attacker to elevate privileges locally.
EPSS < 0.01 CVE-2026-69898 US
Out-of-bounds read in Windows Kernel allows an unauthorized attacker to deny service over a network.
EPSS 0.01 CVE-2026-108466 US
Use after free in Windows Update Delivery Optimization allows an authorized attacker to elevate privileges locally.
EPSS < 0.01 CVE-2026-108465 US
Use after free in Software Protection Platform (SPP) allows an authorized attacker to elevate privileges locally.
EPSS < 0.01 CVE-2026-108464 US
Exposure of sensitive system information to an unauthorized control sphere in Windows Kernel allows an authorized attacker to disclose information locally.
EPSS 0.01 CVE-2026-108462 US
Use after free in Windows Broadcast DVR User Service allows an authorized attacker to elevate privileges locally.
EPSS < 0.01 CVE-2026-108461 US
Heap-based buffer overflow in Windows Hyper-V allows an authorized attacker to elevate privileges locally.
EPSS < 0.01 CVE-2026-108399 US
Improper access control in Windows Hyper-V allows an authorized attacker to execute code locally.
EPSS < 0.01 CVE-2026-105733 US
Stack-based buffer overflow in SysInternals allows an authorized attacker to elevate privileges locally.
EPSS < 0.01 CVE-2026-105732 US
Use of uninitialized resource in Microsoft Graphics Component allows an authorized attacker to disclose information locally.
EPSS < 0.01 CVE-2026-105731 Microsoft US
Improper authentication in Windows Event Tracing allows an authorized attacker to perform spoofing locally.
EPSS < 0.01 CVE-2026-70235 US
Out-of-bounds read in Microsoft Defender allows an authorized attacker to disclose information locally.
EPSS < 0.01 CVE-2026-105726 Microsoft US
Untrusted pointer dereference in Windows Distributed File System (DFS) allows an unauthorized attacker to elevate privileges over a network.
EPSS 0.01 CVE-2026-105723 US
Use after free in Windows Broadcast DVR User Service allows an authorized attacker to elevate privileges locally.
EPSS < 0.01 CVE-2026-105722 US
Improper input validation in Microsoft Office SharePoint allows an authorized attacker to disclose information over a network.
EPSS 0.01 CVE-2026-105719 Microsoft US
Out-of-bounds read in Microsoft Office Excel allows an unauthorized attacker to execute code over a network.
EPSS 0.01 CVE-2026-105718 Microsoft US
Heap-based buffer overflow in Microsoft Office Access allows an unauthorized attacker to execute code over a network.
EPSS 0.01 CVE-2026-105717 Microsoft US
Heap-based buffer overflow in Microsoft PostScript Printer Driver allows an authorized attacker to execute code over a network.
EPSS 0.01 CVE-2026-108467 Microsoft US
Untrusted search path in .NET Framework allows an authorized attacker to bypass a security feature locally.
EPSS 0.01 CVE-2026-108398 US
Improper neutralization of special elements used in a command ('command injection') in Visual Studio Code allows an unauthorized attacker to execute code over a network.
EPSS 0.01 CVE-2026-69370 US
Use after free in Remote Desktop Client allows an unauthorized attacker to execute code over a network.
EPSS 0.01 CVE-2026-108458 US
Incorrect permission assignment for critical resource in Windows Mobile Broadband allows an authorized attacker to elevate privileges locally.
EPSS < 0.01 CVE-2026-97800 US
Incorrect authorization in Microsoft Office SharePoint allows an authorized attacker to elevate privileges over a network.
EPSS < 0.01 CVE-2026-105720 Microsoft US
Heap-based buffer overflow in Microsoft Office Access allows an unauthorized attacker to execute code over a network.
EPSS 0.01 CVE-2026-105716 Microsoft US
Integer overflow or wraparound in Microsoft Office Word allows an unauthorized attacker to execute code over a network.
EPSS 0.01 CVE-2026-105715 Microsoft US
Heap-based buffer overflow in Microsoft Office Access allows an unauthorized attacker to execute code over a network.
EPSS 0.01 CVE-2026-105714 Microsoft US
Server-side request forgery (ssrf) in Microsoft Office SharePoint allows an authorized attacker to perform spoofing over an adjacent network.
EPSS < 0.01 CVE-2026-105713 Microsoft US
Out-of-bounds read in Microsoft Office Access allows an unauthorized attacker to disclose information over a network.
EPSS 0.01 CVE-2026-94506 Microsoft US
Heap-based buffer overflow in Microsoft Office PowerPoint allows an unauthorized attacker to execute code over a network.
EPSS 0.01 CVE-2026-105599 Microsoft US
Heap-based buffer overflow in Microsoft Office Access allows an unauthorized attacker to execute code over a network.
EPSS 0.01 CVE-2026-105598 Microsoft US
Heap-based buffer overflow in Microsoft Office Access allows an unauthorized attacker to execute code over a network.
EPSS 0.01 CVE-2026-105597 Microsoft US
Heap-based buffer overflow in Microsoft Office Access allows an unauthorized attacker to execute code over a network.
EPSS 0.01 CVE-2026-105596 Microsoft US
Out-of-bounds read in Microsoft Office Access allows an unauthorized attacker to execute code over a network.
EPSS 0.01 CVE-2026-105595 Microsoft US
Heap-based buffer overflow in Microsoft Office Access allows an unauthorized attacker to execute code over a network.
EPSS 0.01 CVE-2026-105593 Microsoft US
Heap-based buffer overflow in Microsoft Office Access allows an unauthorized attacker to execute code over a network.
EPSS 0.01 CVE-2026-105592 Microsoft US
Heap-based buffer overflow in Microsoft Office Access allows an unauthorized attacker to execute code over a network.
EPSS 0.01 CVE-2026-105591 Microsoft US