Skip to content
Heist/ feed
Back to feed
Unrated

CVE-2026-69275 Kernel Streaming WOW Thunk Service Driver Elevation of Privilege Vulnerability

Type: advisorySources: Microsoft security updates

An authorized attacker could use a use-after-free vulnerability in the Kernel Streaming WOW Thunk Service Driver to elevate privileges locally.

Products
Kernel Streaming WOW Thunk Service Driver
Affected versions
Not specified
Fixed versions
Not specified
CVEs
CVE-2026-69275
Confirmed fixed CVEs
Not specified
Updated in this feed
7 Nov 2026, 06:22 UTC · Revision 1

Source evidence

CVE-2026-69275 Kernel Streaming WOW Thunk Service Driver Elevation of Privilege Vulnerability

official-microsoft-security-updates · Original source

Published 8 Sept 2026, 14:00 UTC

An authorized attacker could use a use-after-free vulnerability in the Kernel Streaming WOW Thunk Service Driver to elevate privileges locally.

Use after free in Kernel Streaming WOW Thunk Service Driver allows an authorized attacker to elevate privileges locally.

Kernel Streaming WOW Thunk Service Driver

Fixed versions: Not specified

Prerequisites: authorized attacker

Complete source record
{
  "id": "d3ae4b2842a942f7e489a9830a95d4bdaf430679beb5fb7365ae59fee7029df7",
  "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-69275",
  "method": "llm",
  "payload": {
    "kind": "advisory",
    "title": "CVE-2026-69275 Kernel Streaming WOW Thunk Service Driver Elevation of Privilege Vulnerability",
    "summary": "An authorized attacker could use a use-after-free vulnerability in the Kernel Streaming WOW Thunk Service Driver to elevate privileges locally.",
    "evidence": "Use after free in Kernel Streaming WOW Thunk Service Driver allows an authorized attacker to elevate privileges locally.",
    "products": [
      {
        "name": {
          "value": "Kernel Streaming WOW Thunk Service Driver",
          "evidence": "Kernel Streaming WOW Thunk Service Driver"
        },
        "prerequisites": [
          {
            "value": "authorized attacker",
            "evidence": "allows an authorized attacker"
          }
        ],
        "fixed_versions": [],
        "affected_versions": []
      }
    ],
    "severity": "unknown",
    "fixed_cves": [],
    "related_cves": [
      {
        "value": "CVE-2026-69275",
        "evidence": "CVE-2026-69275 Kernel Streaming WOW Thunk Service Driver Elevation of Privilege Vulnerability"
      }
    ],
    "security_relevant": true,
    "severity_evidence": null
  },
  "source_id": "official-microsoft-security-updates",
  "document_id": 26816,
  "published_at": "2026-09-08T14:00:00+00:00"
}