CVE-2026-68835

There is a concurrent execution issue in Windows Print Spooler Components due to improper synchronization, leading to a race condition. This allows an authorized attacker to elevate privileges locally.

Out-of-bounds read in Windows Print Spooler Components allows an unauthorized attacker to disclose information over a network.

Heap-based buffer overflow in Windows Print Spooler Components allows an authorized attacker to elevate privileges locally.

A use of uninitialized resource vulnerability in Windows Print Spooler Components allows an authorized attacker to disclose information locally. The issue involves use of an uninitialized resource.

Use after free in Windows Print Spooler Components allows an authorized attacker to elevate privileges locally.

Use after free in Windows Print Spooler Components allows an authorized attacker to elevate privileges locally.

Untrusted pointer dereference in Windows Print Spooler Components allows an authorized attacker to cause a denial of service over a network.

Generation of error message containing sensitive information in Windows Print Spooler Components allows an authorized attacker to disclose information over a network.

Heap-based buffer overflow in Windows Print Spooler Components allows an authorized attacker to elevate privileges over a network.

An out-of-bounds read vulnerability in Windows Print Spooler Components allows an authorized attacker to disclose information locally.