CRITICALVulnerability
Verified
Global

NVD CRITICAL: CVE-2026-69829 — Heap-based buffer overflow in Windows Shell allows an unauthorized attacker to e...

·Source: NIST NVD

Updated:

Executive Summary

Heap-based buffer overflow in Windows Shell allows an unauthorized attacker to execute code over a network.

Analysis

Heap-based buffer overflow in Windows Shell allows an unauthorized attacker to execute code over a network. CVSS Score: 9.8. Published: 2026-09-08T18:19:54.707.

Indicators of Compromise (1)

CVE (1)
CVE-2026-69829
Source Attribution

Originally published by NIST NVD on Sep 8, 2026. Verified by: NIST.

Related Threats

MEDIUMVulnerability

Microsoft Plugs Nearly 1,000 Security Holes

Microsoft Corp. today issued updates to plug at least 974 security holes in its Windows operating systems and other software, by far its biggest single patch batch ever. Microsoft says artificial intelligence is helping to speed the discovery of vulnerabilities, but security experts warn that many organizations already are struggling to prioritize the more human-intensive endeavor of testing and d

CVE-2026-69730CVE-2026-69829
Krebs on Security
CRITICALRansomware

Patch Tuesday - September 2026

Microsoft is publishing 974 own-product vulnerabilities on September 2026 Patch Tuesday , including 723 vulnerabilities in Windows. Along with Microsoft fixes for 25 non-Microsoft CVEs, that brings the total number of vulnerabilities on the table today to 999. Whether this is the biggest Patch Tuesday ever depends on how we count, but this is by far the most CVEs that Microsoft has ever published

CVE-2026-85880CVE-2026-81963
Rapid7
CRITICALVulnerabilityNEW

Critical UEFI Flaw Exposes Systems to Pre-Boot Attacks

<img src="https://ismg-cdn.nyc3.cdn.digitaloceanspaces.com/articles/critical-uefi-flaw-exposes-systems-to-pre-boot-attacks-image_small-3-a-33252.jpg" align=right hspace=4><b>Attackers Can Exploit ICMP Error Handling Before Operating System Protections Load</b><br>A critical buffer overflow in TianoCore's EDK II UEFI firmware, tracked as CVE-2026-97631, could let unauthenticated attackers execute c

CVE-2026-97631
Bank Info Security