CVE-2026-69964
HighCVSS 7.0Exploitation Probability (EPSS)
Low risk14th percentile - higher than 14% of all known CVEs
Summary
Use after free in Microsoft Streaming Service allows an authorized attacker to elevate privileges locally. Exploitation requires local access to the system.
Risk Assessment
An attacker with valid credentials can gain higher privileges on the system, potentially leading to full control of the workstation or server.
Recommendation
Apply Microsoft security updates for the Microsoft Streaming Service as soon as possible and restrict local access to trusted users.
Other vulnerabilities in Microsoft Streaming Service
See all- CVE-2024-30089High
A vulnerability in Microsoft Streaming Service allows elevation of privilege. The flaw can be exploited by a local attacker to gain higher privileges on the system.
- CVE-2023-29360HighActively exploited
Microsoft Streaming Service Elevation of Privilege Vulnerability.
- CVE-2026-69970High
A heap-based buffer overflow in Microsoft Streaming Service allows an authorized attacker to elevate privileges locally.
- CVE-2026-69966High
An integer overflow or wraparound in Microsoft Streaming Service allows an authorized attacker to elevate privileges locally.
- CVE-2026-69963High
Heap-based buffer overflow in Microsoft Streaming Service allows an authorized attacker to elevate privileges locally. The flaw requires local access to the system.
- CVE-2024-30090High
A vulnerability in Microsoft Streaming Service allows elevation of privilege. An attacker could exploit this flaw to gain higher privileges on the system.
Original NVD description (English source)
Use after free in Microsoft Streaming Service allows an authorized attacker to elevate privileges locally.
Vulnerability data from NVD (NIST) · CISA KEV · EPSS