CVE-2026-69305
HighCVSS 7.1Summary
Use after free in Microsoft Windows Search Component allows an authorized attacker to elevate privileges over a network.
Risk Assessment
A remote attacker could exploit this vulnerability to gain elevated privileges, potentially leading to unauthorized system access.
Recommendation
Apply the latest Windows security updates.
Other vulnerabilities in Microsoft Windows Search
See all- CVE-2026-69507Medium
A vulnerability in the Windows Search component allows insertion of sensitive information into an externally accessible file or directory. An authorized attacker could exploit this to disclose information over a network.
- CVE-2017-11772High
The Microsoft Windows Search component on various versions of the operating system allows information disclosure due to improper handling of objects in memory. This vulnerability affects multiple versions of Windows, including Windows Server 2008, Windows 7, Windows 8.1, Windows 10, and Windows Server 2016.
- CVE-2017-11771Critical
The Windows Search component on various versions of Microsoft Windows allows remote code execution due to improper handling of DNS responses.
Original NVD description (English source)
Use after free in Microsoft Windows Search Component allows an authorized attacker to elevate privileges over a network.