CVE-2026-69299
HighCVSS 7.0Exploitation Probability (EPSS)
Low risk17th percentile - higher than 17% of all known CVEs
Summary
Use after free in Microsoft COM for Windows allows an authorized attacker to elevate privileges locally.
Risk Assessment
A local attacker could exploit this vulnerability to gain elevated privileges, potentially leading to full system compromise.
Recommendation
Apply the latest Windows security updates.
Other vulnerabilities in Microsoft COM
See all- CVE-2026-69909High
Heap-based buffer overflow in Microsoft COM for Windows allows an authorized attacker to elevate privileges locally.
- CVE-2026-69294Medium
A vulnerability in Microsoft COM for Windows causes error messages to contain sensitive information. This allows an authorized attacker to disclose information locally.
- CVE-2026-59136Medium
Use of an uninitialized resource in Microsoft COM for Windows allows an authorized attacker to disclose information locally.
Original NVD description (English source)
Use after free in Microsoft COM for Windows allows an authorized attacker to elevate privileges locally.
Vulnerability data from NVD (NIST) · CISA KEV · EPSS