CVE-2026-69814
HighCVSS 7.0Exploitation Probability (EPSS)
Low risk17th percentile - higher than 17% of all known CVEs
Summary
Use after free in Windows Credential Providers allows an authorized attacker to elevate privileges locally.
Risk Assessment
A local attacker could exploit this flaw to escalate privileges and potentially capture credentials or bypass login security.
Recommendation
Apply the latest Windows security updates.
Other vulnerabilities in Windows Credential Providers
See all- CVE-2026-103568High
Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Credential Providers allows an authorized attacker to elevate privileges locally.
- CVE-2026-69790High
A heap-based buffer overflow in Windows Credential Providers allows an authorized attacker to elevate privileges locally.
- CVE-2026-69729High
Heap-based buffer overflow in Windows Credential Providers allows an authorized attacker to execute code over a network.
Original NVD description (English source)
Use after free in Windows Credential Providers allows an authorized attacker to elevate privileges locally.
Vulnerability data from NVD (NIST) · CISA KEV · EPSS