Windows 10 CVEs and Security Vulnerabilities

CVE-2026-69329

BranchCache Denial of Service Vulnerability

Out-of-bounds read in BranchCache allows an unauthorized attacker to deny service over a network.

CVSS 3.1 · 7.5 High EPSS 1.2% KEV · Not listed

Vendors

Microsoft

Products

Windows 10 1607 Windows 10 1809 Windows 10 21h2 and 23 more

CVE-2026-69338

Remote Desktop Gateway Service Elevation of Privilege Vulnerability

Use after free in Remote Desktop Gateway Service allows an authorized attacker to elevate privileges over a network.

CVSS 3.1 · 7.1 High EPSS < 1% KEV · Not listed

Vendors

Microsoft

Products

Windows 10 1607 Windows 10 1809 Windows Server 2012 and 11 more

CVE-2026-69358

Remote Desktop Client Remote Code Execution Vulnerability

Use of uninitialized resource in Remote Desktop Client allows an authorized attacker to execute code over a network.

CVSS 3.1 · 7.1 High EPSS < 1% KEV · Not listed

Vendors

Microsoft

Products

Windows 10 1607 Windows 10 1809 Windows 10 21h2 and 18 more

CVE-2026-69360

Microsoft Office Word Remote Code Execution Vulnerability

Heap-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code over a network.

CVSS 3.1 · 8.8 High EPSS < 1% KEV · Not listed

Vendors

Microsoft

Products

Windows 10 1607 Windows 10 1809 Windows 10 21h2 and 23 more

CVE-2026-69359

Active Directory Domain Services Elevation of Privilege Vulnerability

Heap-based buffer overflow in Active Directory Domain Services allows an authorized attacker to elevate privileges locally.

CVSS 3.1 · 7.8 High EPSS < 1% KEV · Not listed

Vendors

Microsoft

Products

Windows 10 1607 Windows 10 1809 Windows 10 21h2 and 18 more

CVE-2026-77504

Microsoft Office Word Remote Code Execution Vulnerability

Double free in Microsoft Office Word allows an unauthorized attacker to execute code over a network.

CVSS 3.1 · 8.8 High EPSS < 1% KEV · Not listed

Vendors

Microsoft

Products

Windows 10 1607 Windows 10 1809 Windows 10 21h2 and 23 more

CVE-2026-69367

Microsoft Standard XPS Information Disclosure Vulnerability

Out-of-bounds read in Microsoft Standard XPS allows an authorized attacker to disclose information locally.

CVSS 3.1 · 5.5 Medium EPSS < 1% KEV · Not listed

Vendors

Microsoft

Products

Windows 10 1607 Windows 10 1809 Windows 10 21h2 and 23 more

CVE-2026-69376

Microsoft Standard XPS Information Disclosure Vulnerability

Out-of-bounds read in Microsoft Standard XPS allows an authorized attacker to disclose information locally.

CVSS 3.1 · 5.5 Medium EPSS < 1% KEV · Not listed

Vendors

Microsoft

Products

Windows 10 1607 Windows 10 1809 Windows 10 21h2 and 23 more

CVE-2026-69605

Microsoft Install Service Elevation of Privilege Vulnerability

Use after free in Microsoft Install Service allows an authorized attacker to elevate privileges locally.

CVSS 3.1 · 7 High EPSS < 1% KEV · Not listed

Vendors

Microsoft

Products

Windows 10 21h2 Windows 10 21h2 Windows 10 22h2 and 12 more

CVE-2026-69611

Virtual Hard Disk (VHD) Miniport Driver Elevation of Privilege Vulernability

Use after free in Virtual Hard Disk (VHD) Miniport Driver allows an authorized attacker to elevate privileges locally.

CVSS 3.1 · 7 High EPSS < 1% KEV · Not listed

Vendors

Microsoft

Products

Windows 10 1607 Windows 10 1809 Windows 10 21h2 and 18 more

CVE-2026-69365

Microsoft Local Security Authority (LSA) Server Elevation of Privilege Vulnerability

Out-of-bounds read in Microsoft Local Security Authority Server (lsasrv) allows an authorized attacker to elevate privileges over a network.

CVSS 3.1 · 8 High EPSS < 1% KEV · Not listed

Vendors

Microsoft

Products

Windows 10 21h2 Windows 10 21h2 Windows 10 22h2 and 12 more

CVE-2026-62762

Windows Active Directory Domain Services Denial of Service Vulnerability

Null pointer dereference in Active Directory Domain Services allows an authorized attacker to deny service over a network.

CVSS 3.1 · 6.5 Medium EPSS 1.1% KEV · Not listed

Vendors

Microsoft

Products

Windows 10 1607 Windows 10 1809 Windows 10 21h2 and 23 more

CVE-2026-68828

Remote Desktop Client Remote Code Execution Vulnerability

Heap-based buffer overflow in Remote Desktop Client allows an unauthorized attacker to execute code over a network.

CVSS 3.1 · 8.8 High EPSS < 1% KEV · Not listed

Vendors

Microsoft

Products

Windows 10 1607 Windows 10 1809 Windows 10 21h2 and 23 more

CVE-2026-68852

Microsoft Account Information Disclosure Vulnerability

Use of uninitialized resource in Microsoft Account allows an authorized attacker to disclose information locally.

CVSS 3.1 · 5.5 Medium EPSS < 1% KEV · Not listed

Vendors

Microsoft

Products

Windows 10 1607 Windows 10 1809 Windows 10 21h2 and 23 more

CVE-2026-68885

Microsoft Standard XPS Elevation of Privilege Vulnerability

Heap-based buffer overflow in Microsoft Standard XPS allows an authorized attacker to elevate privileges locally.

CVSS 3.1 · 7.8 High EPSS < 1% KEV · Not listed

Vendors

Microsoft

Products

Windows 10 1607 Windows 10 1809 Windows 10 21h2 and 23 more

CVE-2026-68888

Microsoft Standard XPS Elevation of Privilege Vulnerability

Heap-based buffer overflow in Microsoft Standard XPS allows an authorized attacker to elevate privileges locally.

CVSS 3.1 · 7.8 High EPSS < 1% KEV · Not listed

Vendors

Microsoft

Products

Windows 10 1607 Windows 10 1809 Windows 10 21h2 and 23 more

CVE-2026-68895

Internet Storage Name Service Information Disclosure Vulnerability

Numeric truncation error in Internet Storage Name Service allows an authorized attacker to disclose information locally.

CVSS 3.1 · 5.5 Medium EPSS < 1% KEV · Not listed

Vendors

Microsoft

Products

Windows 10 1607 Windows 10 1809 Windows 10 21h2 and 23 more

CVE-2026-69395

Active Directory Certificate Services (AD CS) Information Disclosure Vulnerability

Use of externally-controlled format string in Active Directory Certificate Services (AD CS) allows an authorized attacker to disclose information over a network.

CVSS 3.1 · 6.5 Medium EPSS < 1% KEV · Not listed

Vendors

Microsoft

Products

Windows 10 1607 Windows 10 1809 Windows Server 2012 and 11 more

CVE-2026-69407

Volume Manager Driver Elevation of Privilege Vulnerability

Integer overflow or wraparound in Volume Manager Driver allows an authorized attacker to elevate privileges locally.

CVSS 3.1 · 7.8 High EPSS < 1% KEV · Not listed

Vendors

Microsoft

Products

Windows 10 1607 Windows 10 1809 Windows 10 21h2 and 23 more

CVE-2026-69418

Volume Manager Driver Elevation of Privilege Vulnerability

Heap-based buffer overflow in Volume Manager Driver allows an authorized attacker to elevate privileges over a network.

CVSS 3.1 · 8 High EPSS < 1% KEV · Not listed

Vendors

Microsoft

Products

Windows 10 1607 Windows 10 1809 Windows 10 21h2 and 23 more

Search vulnerabilities

BranchCache Denial of Service Vulnerability

Remote Desktop Gateway Service Elevation of Privilege Vulnerability

Remote Desktop Client Remote Code Execution Vulnerability

Microsoft Office Word Remote Code Execution Vulnerability

Active Directory Domain Services Elevation of Privilege Vulnerability

Microsoft Office Word Remote Code Execution Vulnerability

Microsoft Standard XPS Information Disclosure Vulnerability

Microsoft Standard XPS Information Disclosure Vulnerability

Microsoft Install Service Elevation of Privilege Vulnerability

Virtual Hard Disk (VHD) Miniport Driver Elevation of Privilege Vulernability

Microsoft Local Security Authority (LSA) Server Elevation of Privilege Vulnerability

Windows Active Directory Domain Services Denial of Service Vulnerability

Remote Desktop Client Remote Code Execution Vulnerability

Microsoft Account Information Disclosure Vulnerability

Microsoft Standard XPS Elevation of Privilege Vulnerability

Microsoft Standard XPS Elevation of Privilege Vulnerability

Internet Storage Name Service Information Disclosure Vulnerability

Active Directory Certificate Services (AD CS) Information Disclosure Vulnerability

Volume Manager Driver Elevation of Privilege Vulnerability

Volume Manager Driver Elevation of Privilege Vulnerability