CVE-2026-69974
MediumCVSS 4.7Exploitation Probability (EPSS)
Low risk20th percentile - higher than 20% of all known CVEs
Summary
Out-of-bounds read in Desktop Window Manager allows an authorized attacker to disclose information locally.
Risk Assessment
An attacker may gain access to sensitive data in memory, potentially leading to information leakage.
Recommendation
Update Windows to the latest patched version and restrict remote desktop access.
Other vulnerabilities in Desktop Window Manager
See all- CVE-2026-96108High
A use after free vulnerability in Desktop Window Manager allows an authenticated attacker to elevate privileges locally. The flaw arises from the use of freed memory.
- CVE-2026-88093High
Heap-based buffer overflow vulnerability in the Desktop Window Manager. An authorized attacker can elevate privileges locally.
- CVE-2026-70255High
Heap-based buffer overflow in Desktop Window Manager allows an authorized attacker to elevate privileges locally.
- CVE-2026-70234Medium
Buffer over-read in Desktop Window Manager allows an authorized attacker to disclose information locally.
- CVE-2026-70228High
Out-of-bounds read in the Desktop Window Manager component. An authorized attacker can elevate privileges locally.
- CVE-2026-69926High
Type confusion (access of resource using incompatible type) in Desktop Window Manager. An authorized attacker can exploit this flaw to elevate privileges locally.
- CVE-2026-69880High
Access of resource using incompatible type ('type confusion') in Desktop Window Manager allows an authorized attacker to elevate privileges locally.
- CVE-2026-65788High
Use after free in Desktop Window Manager allows an authorized attacker to elevate privileges locally.
- CVE-2026-65787High
Heap-based buffer overflow in Desktop Window Manager allows an authorized attacker to elevate privileges locally.
- CVE-2026-65786High
Heap-based buffer overflow in Desktop Window Manager allows an authorized attacker to elevate privileges locally.
Original NVD description (English source)
Out-of-bounds read in Desktop Window Manager allows an authorized attacker to disclose information locally.
Vulnerability data from NVD (NIST) · CISA KEV · EPSS

