CVE-2026-69829

What is CVE-2026-69829?

Heap-based buffer overflow in Windows Shell allows an unauthorized attacker to execute code over a network.

Timeline

• 2026-09-08Published to the U.S. National Vulnerability Database (NVD)
• 2026-09-18First covered in a defend.network daily briefing
• 2026-09-24NVD record last updated

Affected product

Microsoft Windows

NVD also lists CPE entries for: Microsoft Windows 10 1607, Microsoft Windows 10 1809, Microsoft Windows 10 21h2, Microsoft Windows 10 22h2, Microsoft Windows 11 23h2

References

• https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-69829
• https://nvd.nist.gov/vuln/detail/CVE-2026-69829

Referenced in our briefings & reports

• Microsoft, Fortra vulnerabilities patched; Warlock escalates SharePoint attacks on critical infrastructure (2026-10-04)
• Fortinet FortiMail zero-day exploited; KillSec ransomware leadership dismantled (2026-10-02)
• Microsoft’s record patch batch; fake LastPass installer deploys kernel EDR killer (2026-09-22)
• Microsoft patches 974 CVEs; Check Point RCE; Docker Sandboxes escape on macOS (2026-09-18)

Related vulnerabilities

• CVE-2026-68820 – Microsoft Windows Ancillary Function Driver For WinSock (same product)
• CVE-2026-33824 – Microsoft Internet Key Exchange (IKE) Service Extensions (same product)
• CVE-2026-85880 – Microsoft Windows (same product)
• CVE-2026-96951 – Microsoft Windows (same product)
• CVE-2026-69730 – Microsoft Windows (same product)
• CVE-2026-56155 – Microsoft Active Directory Federation Services (same product)

Microsoft: 390 known exploited vulnerabilities (CISA KEV) →