CVE-2026-69271
HighCVSS 8.0Exploitation Probability (EPSS)
Elevated risk54th percentile - higher than 54% of all known CVEs
Summary
A heap-based buffer overflow in Microsoft Standard XPS allows an authorized attacker to elevate privileges over a network.
Risk Assessment
A remote attacker could exploit this to escalate privileges and execute code on the system.
Recommendation
Apply the latest Windows security updates.
Other vulnerabilities in Microsoft Standard XPS
See all- CVE-2026-69824Critical
Integer underflow (wrap or wraparound) in Microsoft Standard XPS allows an unauthorized attacker to execute code remotely over a network.
- CVE-2026-69376Medium
The vulnerability in Microsoft Standard XPS is an out-of-bounds read. It allows an authorized attacker to disclose information locally.
- CVE-2026-69367Medium
An out-of-bounds read vulnerability in Microsoft Standard XPS allows an authorized attacker to disclose information locally.
- CVE-2026-69345Medium
An out-of-bounds read vulnerability in Microsoft Standard XPS allows an authorized attacker to disclose information locally.
- CVE-2026-69336High
Heap-based buffer overflow in Microsoft Standard XPS allows an authorized attacker to elevate privileges over a network.
- CVE-2026-69313High
Heap-based buffer overflow in Microsoft Standard XPS allows an authorized attacker to elevate privileges over a network.
- CVE-2026-69308Medium
An out-of-bounds read in Microsoft Standard XPS allows an authorized attacker to disclose information locally.
- CVE-2026-69272High
A heap-based buffer overflow in Microsoft Standard XPS allows an authorized attacker to elevate privileges over a network.
- CVE-2026-69269High
An integer underflow (wrap or wraparound) in Microsoft Standard XPS allows an authorized attacker to elevate privileges locally.
- CVE-2026-68897High
Heap-based buffer overflow in Microsoft Standard XPS allows an authorized attacker to elevate privileges locally.
Original NVD description (English source)
Heap-based buffer overflow in Microsoft Standard XPS allows an authorized attacker to elevate privileges over a network.
Vulnerability data from NVD (NIST) · CISA KEV · EPSS