CVE-2026-69729
HighCVSS 8.8Exploitation Probability (EPSS)
Elevated risk57th percentile - higher than 57% of all known CVEs
Summary
Heap-based buffer overflow in Windows Credential Providers allows an authorized attacker to execute code over a network.
Risk Assessment
An attacker with network access could execute arbitrary code on the system, potentially leading to full system compromise.
Recommendation
Apply Windows security updates and restrict network access to authentication services.
Other vulnerabilities in Windows Credential Providers
See all- CVE-2026-103568High
Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Credential Providers allows an authorized attacker to elevate privileges locally.
- CVE-2026-69814High
Use after free in Windows Credential Providers allows an authorized attacker to elevate privileges locally.
- CVE-2026-69790High
A heap-based buffer overflow in Windows Credential Providers allows an authorized attacker to elevate privileges locally.
Original NVD description (English source)
Heap-based buffer overflow in Windows Credential Providers allows an authorized attacker to execute code over a network.
Vulnerability data from NVD (NIST) · CISA KEV · EPSS