CVE-2026-70138

Windows OLE is affected by an untrusted pointer dereference vulnerability. This allows an unauthorized attacker to execute code over a network.

Heap-based buffer overflow in Windows OLE allows an authorized attacker to elevate privileges locally.

Windows OLE has a type confusion vulnerability that allows an unauthorized attacker to execute code remotely.

Improper authorization in Windows OLE allows an authorized attacker to elevate privileges locally.

A remote code execution vulnerability in the Windows OLE component allows an attacker to execute arbitrary code in the context of the logged-on user. Exploitation requires user interaction, such as opening a specially crafted file.

Remote code execution vulnerability in Windows OLE. An attacker could exploit it to execute code on the target system.

A vulnerability in Windows OLE allows for remote code execution. An attacker can exploit this flaw to gain control over the victim's system.