CVE-2026-69781 Windows DHCP Client Denial of Service Vulnerability
Missing release of memory after effective lifetime in Windows DHCP Client allows an unauthorized attacker to deny service over an adjacent network.
EPSS 0.01 CVE-2026-69781 US
Missing release of memory after effective lifetime in Windows DHCP Client allows an unauthorized attacker to deny service over an adjacent network.
EPSS 0.01 CVE-2026-69781 US
Improper limitation of a pathname to a restricted directory ('path traversal') in Windows PowerShell allows an authorized attacker to elevate privileges over a network.
EPSS 0.01 CVE-2026-69807 US
Heap-based buffer overflow in Windows DHCP Client allows an authorized attacker to elevate privileges over an adjacent network.
EPSS 0.01 CVE-2026-69777 US
Out-of-bounds read in Windows Kerberos allows an unauthorized attacker to deny service over a network.
EPSS 0.01 CVE-2026-69760 US
Integer underflow (wrap or wraparound) in Microsoft Standard XPS allows an unauthorized attacker to execute code over a network.
EPSS 0.01 CVE-2026-69824 Microsoft US
Use after free in Microsoft Windows Search Component allows an authorized attacker to elevate privileges locally.
EPSS < 0.01 CVE-2026-69911 Microsoft US
Heap-based buffer overflow in Windows DHCP Server allows an authorized attacker to execute code over an adjacent network.
EPSS 0.01 CVE-2026-69847 US
Use after free in Windows Media allows an authorized attacker to elevate privileges locally.
EPSS < 0.01 CVE-2026-69891 US
Untrusted pointer dereference in Kernel Streaming WOW Thunk Service Driver allows an authorized attacker to elevate privileges locally.
EPSS < 0.01 CVE-2026-69900 US
Use after free in Windows Win32K allows an authorized attacker to elevate privileges locally.
EPSS < 0.01 CVE-2026-69818 US
Improper handling of insufficient permissions or privileges in Windows Enterprise App Management allows an authorized attacker to elevate privileges locally.
EPSS < 0.01 CVE-2026-69907 US
Untrusted search path in Windows Smart Card allows an authorized attacker to elevate privileges locally.
EPSS < 0.01 CVE-2026-69785 US
Heap-based buffer overflow in Windows DHCP Server allows an authorized attacker to execute code locally.
EPSS < 0.01 CVE-2026-69878 US
Use after free in Windows Web Platform Storage allows an authorized attacker to elevate privileges locally.
EPSS < 0.01 CVE-2026-69708 US
Use after free in Windows TCP/IP allows an authorized attacker to elevate privileges over a network.
EPSS 0.01 CVE-2026-69761 US
Use of uninitialized resource in Windows Win32K allows an authorized attacker to disclose information locally.
EPSS < 0.01 CVE-2026-69853 US
Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Win32K allows an authorized attacker to bypass a security feature locally.
EPSS < 0.01 CVE-2026-69792 US
Missing release of memory after effective lifetime in Active Directory Domain Services allows an unauthorized attacker to deny service over a network.
EPSS 0.01 CVE-2026-69809 US
Use of uninitialized resource in Windows DNS allows an authorized attacker to disclose information locally.
EPSS < 0.01 CVE-2026-69672 US
Out-of-bounds read in Windows Spaceport.sys allows an authorized attacker to disclose information locally.
EPSS < 0.01 CVE-2026-69895 US
Time-of-check time-of-use (toctou) race condition in Windows Win32K allows an authorized attacker to elevate privileges locally.
EPSS < 0.01 CVE-2026-69779 US
Heap-based buffer overflow in Windows Print Spooler Components allows an authorized attacker to elevate privileges locally.
EPSS < 0.01 CVE-2026-69921 US
Improper validation of consistency within input in Windows TCP/IP allows an unauthorized attacker to bypass a security feature over a network.
EPSS 0.01 CVE-2026-69793 US
Dependency on vulnerable third-party component in Windows Secure Boot allows an authorized attacker to bypass a security feature locally.
EPSS < 0.01 CVE-2026-69713 US
Heap-based buffer overflow in Windows RNDIS allows an unauthorized attacker to execute code over a network.
EPSS 0.01 CVE-2026-69768 US
Use after free in Windows Win32K allows an authorized attacker to elevate privileges over a network.
EPSS 0.01 CVE-2026-69706 US
Buffer over-read in Windows Encrypting File System (EFS) allows an authorized attacker to disclose information locally.
EPSS < 0.01 CVE-2026-69794 US
Heap-based buffer overflow in Windows Biometric Service allows an authorized attacker to elevate privileges over a network.
EPSS 0.01 CVE-2026-69773 US
Heap-based buffer overflow in HID class driver allows an authorized attacker to elevate privileges locally.
EPSS < 0.01 CVE-2026-69731 US
Use after free in Windows Credential Providers allows an authorized attacker to elevate privileges locally.
EPSS < 0.01 CVE-2026-69814 US
Use after free in Windows Audio Service allows an authorized attacker to elevate privileges locally.
EPSS < 0.01 CVE-2026-69692 US
Heap-based buffer overflow in Windows Audio Service allows an authorized attacker to elevate privileges locally.
EPSS < 0.01 CVE-2026-69801 US
Integer overflow or wraparound in Windows Biometric Service allows an authorized attacker to elevate privileges locally.
EPSS < 0.01 CVE-2026-69738 US
Heap-based buffer overflow in Windows Biometric Service allows an authorized attacker to elevate privileges over a network.
EPSS 0.01 CVE-2026-69826 US
Heap-based buffer overflow in Windows Biometric Service allows an authorized attacker to elevate privileges over a network.
EPSS 0.01 CVE-2026-69727 US
Heap-based buffer overflow in Windows Encrypting File System (EFS) allows an authorized attacker to elevate privileges locally.
EPSS < 0.01 CVE-2026-69841 US
Heap-based buffer overflow in Windows Encrypting File System (EFS) allows an authorized attacker to elevate privileges over a network.
EPSS 0.01 CVE-2026-69688 US
Missing authentication for critical function in Windows Modern Device Management (MDM) allows an authorized attacker to bypass a security feature locally.
EPSS < 0.01 CVE-2026-69674 US
Use after free in Windows Device Association Service allows an authorized attacker to elevate privileges locally.
EPSS < 0.01 CVE-2026-69866 US
Out-of-bounds read in Windows DHCP Server allows an authorized attacker to deny service over an adjacent network.
EPSS 0.01 CVE-2026-69679 US
Out-of-bounds read in Windows Win32K allows an authorized attacker to elevate privileges locally.
EPSS < 0.01 CVE-2026-69844 US
Heap-based buffer overflow in Windows NTFS allows an authorized attacker to execute code locally.
EPSS < 0.01 CVE-2026-69709 US
Stack-based buffer overflow in Windows Device Association Service allows an authorized attacker to elevate privileges over a network.
EPSS 0.01 CVE-2026-69714 US
Use after free in Windows Accounts Control allows an authorized attacker to elevate privileges locally.
EPSS < 0.01 CVE-2026-69816 US
Use after free in Windows Accounts Control allows an authorized attacker to elevate privileges locally.
EPSS < 0.01 CVE-2026-69654 US
Use after free in Windows ALPC allows an authorized attacker to elevate privileges locally.
EPSS < 0.01 CVE-2026-69834 US
Use after free in Windows Win32K allows an authorized attacker to elevate privileges locally.
EPSS < 0.01 CVE-2026-69652 US
Integer overflow or wraparound in Windows USB Audio Class driver (usbaudio.sys) allows an authorized attacker to elevate privileges locally.
EPSS < 0.01 CVE-2026-69707 US
Use after free in Windows Device Association Service allows an authorized attacker to elevate privileges locally.
EPSS < 0.01 CVE-2026-69791 US
Integer underflow (wrap or wraparound) in Windows USB Audio Class driver (usbaudio.sys) allows an authorized attacker to elevate privileges locally.
EPSS < 0.01 CVE-2026-69687 US
Heap-based buffer overflow in Windows Spaceport.sys allows an authorized attacker to elevate privileges over a network.
EPSS 0.01 CVE-2026-69643 US
Out-of-bounds read in Windows DHCP Server allows an unauthorized attacker to disclose information over a network.
EPSS 0.01 CVE-2026-69803 US
Heap-based buffer overflow in Windows Kerberos allows an authorized attacker to elevate privileges locally.
EPSS < 0.01 CVE-2026-69685 US
Use after free in Windows Host Guardian Service allows an authorized attacker to elevate privileges locally.
EPSS < 0.01 CVE-2026-69682 US
Out-of-bounds read in Windows DHCP Server allows an authorized attacker to deny service over an adjacent network.
EPSS 0.01 CVE-2026-69637 US
Out-of-bounds read in Windows Direct Show allows an unauthorized attacker to execute code over a network.
EPSS 0.01 CVE-2026-69715 US
Improper encoding or escaping of output in Active Directory Certificate Services (AD CS) allows an authorized attacker to elevate privileges locally.
EPSS < 0.01 CVE-2026-69821 US
Heap-based buffer overflow in Windows MIDI Service Module allows an authorized attacker to elevate privileges locally.
EPSS < 0.01 CVE-2026-69720 US
Stack-based buffer overflow in Windows DHCP Server allows an unauthorized attacker to execute code over a network.
EPSS 0.01 CVE-2026-69620 US
Out-of-bounds read in Windows exFAT File System allows an authorized attacker to elevate privileges over a network.
EPSS 0.01 CVE-2026-69619 US