CVE-2026-69918
HighCVSS 8.8Summary
Heap-based buffer overflow in Windows Core Messaging allows an authorized attacker to elevate privileges locally.
Risk Assessment
An attacker with local access could gain full control of the system, leading to complete compromise.
Recommendation
Apply the latest Windows security updates.
Other vulnerabilities in Windows Core Messaging
See all- CVE-2026-83587High
Untrusted pointer dereference in Windows Core Messaging allows an authorized attacker to elevate privileges locally.
- CVE-2026-70584High
Access of resource using incompatible type ('type confusion') in Windows Core Messaging allows an authorized attacker to elevate privileges locally.
- CVE-2026-70583High
Heap-based buffer overflow in Windows Core Messaging allows an authorized attacker to elevate privileges locally.
Original NVD description (English source)
Heap-based buffer overflow in Windows Core Messaging allows an authorized attacker to elevate privileges locally.
Vulnerability data from NVD (NIST) · CISA KEV · EPSS

