CVE-2026-69522 :: Enginsight Vulnerability Database

Provider	Type	Base Score	Atk. Vector	Atk. Complexity	Priv. Required	Vector
NIST	Primary	8.8 HIGH	NETWORK	LOW	NONE	CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

Awaiting analysis

This vulnerability is currently awaiting analysis.

Base Score

CVSS 3.x

EPSS Score

Percentile: Unknown

Windows Releases

Platform

Version

Windows 10

1607 (x64, x86)	KB5126042
1607 (x64, x86)	KB5126047
1809 (arm64, x64, x86)	KB5126421
1809 (arm64, x64, x86)	KB5126043
21H2 (arm64, x64, x86)	KB5126046
21H2 (arm64, x64, x86)	KB5126421
22H2 (arm64, x64, x86)	KB5126046
22H2 (arm64, x64, x86)	KB5126421

Windows 11

23H2 (arm64, x64)	KB5126424
24H2 (arm64, x64)	KB5126052
25H2 (arm64, x64)	KB5126052
26H1 (arm64, x64)	KB5126053

Windows Server 2012

Standard	KB5126044
Standard	KB5126049

Windows Server 2012 R2

Standard	KB5126045
Standard	KB5126051

Windows Server 2016

Standard	KB5126042
Standard	KB5126047

Windows Server 2019

Standard	KB5126043
Standard	KB5126048

Windows Server 2022

Standard	KB5126050
Standard	KB5126422

Windows Server 2025

Standard

Common Weakness Enumeration

CWE-122 - Heap-based Buffer Overflow
A heap overflow condition is a buffer overflow, where the buffer that can be overwritten is allocated in the heap portion of memory, generally meaning that the buffer was allocated using a routine such as malloc().

Vulnerability Media Exposure

[ENGLISH] Microsoft September 2026 Patch Tuesday fixes 966 flaws, 2 zero-days
Today is Microsoft's September 2026 Patch Tuesday, with security updates released for a record-breaking 966 flaws, including two actively exploited zero-day vulnerabilities. [...]
Published: 2026-09-08T14:18:05-04:00

References

https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-69522