SEPTEMBER 17, 2026
Live Feed
Back to database
Case File

CVE-2026-69564

HIGH · CVSS 7 EPSS 0.25%

Source: NVD + CISA KEV + EPSS · Published 2026-09-08 · Last synced 2026-09-17

CyberRota Analysis

AI-Generated

A heap-based buffer overflow vulnerability in the Windows Online Certificate Status Protocol (OCSP) can be exploited by an authorized attacker to elevate their privileges locally. This poses a significant risk to systems where OCSP is utilized, potentially allowing unauthorized access to sensitive resources. Organizations using Windows environments should prioritize patching this vulnerability to mitigate the risk of privilege escalation attacks.

CVE
CVE-2026-69564
Severity
HIGH
CVSS
7
EPSS
0.25%
Windows

Original NVD Description

Heap-based buffer overflow in Windows Online Certificate Status Protocol (OCSP) allows an authorized attacker to elevate privileges locally.