CVE-2026-69909
HighCVSS 7.8Exploitation Probability (EPSS)
Low risk22th percentile - higher than 22% of all known CVEs
Summary
Heap-based buffer overflow in Microsoft COM for Windows allows an authorized attacker to elevate privileges locally.
Risk Assessment
Privilege escalation in COM could allow an attacker full system control.
Recommendation
Install the latest security updates.
Other vulnerabilities in Microsoft COM
See all- CVE-2026-69299High
Use after free in Microsoft COM for Windows allows an authorized attacker to elevate privileges locally.
- CVE-2026-69294Medium
A vulnerability in Microsoft COM for Windows causes error messages to contain sensitive information. This allows an authorized attacker to disclose information locally.
- CVE-2026-59136Medium
Use of an uninitialized resource in Microsoft COM for Windows allows an authorized attacker to disclose information locally.
Original NVD description (English source)
Heap-based buffer overflow in Microsoft COM for Windows allows an authorized attacker to elevate privileges locally.
Vulnerability data from NVD (NIST) · CISA KEV · EPSS