CVE-2026-69900
Untrusted pointer dereference in Kernel Streaming WOW Thunk Service Driver allows an authorized attacker to elevate privileges locally.
CVSS
7.8
Alto
EPSS
—
KEV
—
Exploit Today
—
0-100
Publicado: 8 sept 2026 · Última mod.: 8 sept 2026 · CWE-822
Sin historial EPSS suficiente todavía.
Untrusted pointer dereference in Kernel Streaming WOW Thunk Service Driver allows an authorized attacker to elevate privileges locally.
CVECVSSEPSSKEVRExplotTítuloVis.
CVE-2026-839398.2 ALT—
———Untrusted pointer dereference in Windows Secure Kernel Mode allows an authorized attacker to elevate privileges locally.6hCVE-2026-834987.8 ALT—
———Untrusted pointer dereference in Windows Virtualization-Based Security (VBS) Enclave allows an authorized attacker to elevate privileges locally.6hCVE-2026-800838.8 ALT—
———Untrusted pointer dereference in Windows Hyper-V allows an authorized attacker to execute code locally.6hCVE-2026-784516.8 MED—
———Untrusted pointer dereference in Microsoft Windows SCSI Class System File allows an unauthorized attacker to elevate privileges with a physical attack.6hCVE-2026-729566.5 MED—
———Untrusted pointer dereference in Microsoft Office PowerPoint allows an unauthorized attacker to disclose information over a network.6hCVE-2026-729386.5 MED—
———Access of resource using incompatible type ('type confusion') in Microsoft Office PowerPoint allows an unauthorized attacker to disclose information over a network.6h