Windows Program Compatibility Assistant Service vulnerabilities
14 known CVE vulnerabilities in Windows Program Compatibility Assistant Service, translated and rated.
- CVE-2026-96920High
Heap-based buffer overflow in Windows Program Compatibility Assistant Service allows an authorized attacker to elevate privileges locally.
- CVE-2026-83781High
Improper null termination in Windows Program Compatibility Assistant Service allows an authorized attacker to elevate privileges locally.
- CVE-2026-72969High
Use after free in Windows Program Compatibility Assistant Service allows an authorized attacker to elevate privileges locally.
- CVE-2026-72968High
Use after free in Windows Program Compatibility Assistant Service allows an authorized attacker to elevate privileges locally.
- CVE-2026-72934High
Use after free in Windows Program Compatibility Assistant Service allows an authorized attacker to elevate privileges locally.
- CVE-2026-69743High
Use after free in Windows Program Compatibility Assistant Service allows an authorized attacker to elevate privileges locally.
- CVE-2026-69596High
Use after free in Windows Program Compatibility Assistant Service allows an authorized attacker to elevate privileges locally.
- CVE-2026-69563High
Heap-based buffer overflow in Windows Program Compatibility Assistant Service allows an authorized attacker to elevate privileges locally.
- CVE-2026-69534High
Improper neutralization of special elements used in a command ('command injection') in Windows Program Compatibility Assistant Service allows an authorized attacker to elevate privileges locally.
- CVE-2026-68876High
Heap-based buffer overflow in Windows Program Compatibility Assistant Service allows an authorized attacker to elevate privileges over a network.
- CVE-2026-68874Medium
A vulnerability in Windows Program Compatibility Assistant Service causes an out-of-bounds read, allowing an authorized attacker to disclose information over a network.
- CVE-2026-68873Medium
A vulnerability in the Windows Program Compatibility Assistant Service allows sensitive information to be written to a log file. An authorized attacker could exploit this to disclose information locally.
- CVE-2026-68845High
Heap-based buffer overflow in Windows Program Compatibility Assistant Service allows an authorized attacker to elevate privileges locally.
- CVE-2026-62696High
Integer underflow (wrap or wraparound) in Windows Program Compatibility Assistant Service allows an authorized attacker to elevate privileges locally.
Vulnerability data from NVD (NIST) · CISA KEV · EPSS

