CVE Catalog
CVE-2026-69299
HighCVSS 7.0Summary
Use after free in Microsoft COM for Windows allows an authorized attacker to elevate privileges locally.
Risk Assessment
A local attacker could exploit this vulnerability to gain elevated privileges, potentially leading to full system compromise.
Recommendation
Apply the latest Windows security updates.
Other vulnerabilities in Microsoft COM
See all- CVE-2026-69294Medium
A vulnerability in Microsoft COM for Windows causes error messages to contain sensitive information. This allows an authorized attacker to disclose information locally.
- CVE-2026-59136Medium
Use of an uninitialized resource in Microsoft COM for Windows allows an authorized attacker to disclose information locally.
Original NVD description (English source)
Use after free in Microsoft COM for Windows allows an authorized attacker to elevate privileges locally.