CVE-2026-69790
HighCVSS 7.8Exploitation Probability (EPSS)
Low risk24th percentile - higher than 24% of all known CVEs
Summary
A heap-based buffer overflow in Windows Credential Providers allows an authorized attacker to elevate privileges locally.
Risk Assessment
A local attacker could gain elevated privileges, potentially leading to full system compromise.
Recommendation
Install the latest security updates for Windows.
Other vulnerabilities in Windows Credential Providers
See all- CVE-2026-103568High
Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Credential Providers allows an authorized attacker to elevate privileges locally.
- CVE-2026-69814High
Use after free in Windows Credential Providers allows an authorized attacker to elevate privileges locally.
- CVE-2026-69729High
Heap-based buffer overflow in Windows Credential Providers allows an authorized attacker to execute code over a network.
Original NVD description (English source)
Heap-based buffer overflow in Windows Credential Providers allows an authorized attacker to elevate privileges locally.
Vulnerability data from NVD (NIST) · CISA KEV · EPSS