CVE-2026-69900
HighCVSS 7.8Exploitation Probability (EPSS)
Low risk23th percentile - higher than 23% of all known CVEs
Summary
Untrusted pointer dereference in Kernel Streaming WOW Thunk Service Driver allows an authorized attacker to elevate privileges locally.
Risk Assessment
An authorized user could exploit this flaw to gain higher privileges, potentially leading to system integrity compromise.
Recommendation
Install the latest security updates and restrict access to the driver to trusted applications only.
Other vulnerabilities in Kernel Streaming WOW Thunk Service Driver
See all- CVE-2026-69275High
A use-after-free vulnerability in the Kernel Streaming WOW Thunk Service Driver allows an authorized attacker to elevate privileges locally.
- CVE-2024-38237High
Elevation of privilege vulnerability in Kernel Streaming WOW Thunk Service Driver. Allows an attacker to gain higher privileges.
Original NVD description (English source)
Untrusted pointer dereference in Kernel Streaming WOW Thunk Service Driver allows an authorized attacker to elevate privileges locally.
Vulnerability data from NVD (NIST) · CISA KEV · EPSS