CVE Tools

CVE-2026-69769

Windows HTTP Print Provider Remote Code Execution Vulnerability

Published: Sep 8, 2026Updated: Sep 9, 2026 Sources: CVE List NVDCWE-122

Description

Heap-based buffer overflow in Windows HTTP Print Provider allows an unauthorized attacker to execute code over a network.

In plain language

AI Act now

CVE-2026-69769 is a serious Windows vulnerability that can let an attacker run code over the network on affected Windows versions; if you run Windows 10/11 or Windows Server, you should act soon and install the fixes.

Executive summary

CVE-2026-69769 is a heap-based buffer overflow in the Windows HTTP Print Provider that can enable remote code execution by a network-based attacker without authentication on affected Windows versions; Microsoft has released fixed builds.

If affected, business impact
Full server compromiseMalware installationRansomware riskNetwork-wide disruption

What to do now

  1. Check which of these you run: Windows 10, Windows 11, or any listed Windows Server (2012/2012 R2/2016/2019/2022/2025).
  2. Confirm you’re on a vulnerable build by comparing your Windows version to the fixed versions Microsoft lists for CVE-2026-69769.
  3. Upgrade/patch now to the exact fixed version for your OS branch: Windows 10 (10.0.14393.9512 or 10.0.17763.9245 or 10.0.19044.7725 or 10.0.19045.7725), Windows 11 (10.0.22631.7582 or 10.0.26100.9445 or 10.0.26200.9445 or 10.0.28000.2954), Windows Server 2012 (6.2.9200.26349), Windows Server 2012 R2 (6.3.9600.23397), Windows Server 2016 (10.0.14393.9512), Windows Server 2019 (10.0.17763.9245).
  4. After patching, verify the OS build number changed to one of the fixed versions and that your update succeeded.
Patch / advisory Usually a quick update

CVSS Vector Breakdown

AV:NAC:LPR:NUI:NS:UC:HI:HA:H
Exploitability
AV:NAttack Vector
Network
AC:LAttack Complexity
Low
PR:NPrivileges Required
None
UI:NUser Interaction
None
Scope
S:UScope
Unchanged
Impact
C:HConfidentiality
High
I:HIntegrity
High
A:HAvailability
High

Weaknesses

Affected Products

and 12 more affected products View all →

Exploitability

No known exploits, KEV entries, or remediation guidance available for this vulnerability yet.

Attack Graph

Products CVE Techniques Tactics

Click technique nodes for MITRE ATT&CK details · drag to pan · Ctrl/ + scroll to zoom, or go fullscreen.

MITRE ATT&CK

1 technique
Privilege Escalation
View detailed technique mapping

References

3

Unlock Complete Vulnerability Intelligence

Get the full picture for CVE-2026-69769 and every CVE in our database. Create a free account — no credit card required.

Create Free Account
Plain-language analysis
Impact assessment and exploitation scenario in plain English
Attack graph visualization
Interactive attack path and kill chain mapping
Exploit details & PoC links
ExploitDB, Metasploit, GitHub PoCs with direct links
Nuclei scanner templates
Ready-to-use vulnerability scanner templates
Full remediation guide
Patch instructions, workarounds, and compliance impact
Interactive AI chat
Ask questions about this vulnerability in natural language
Related vulnerabilities
Semantically similar CVEs and attack patterns
REST API & MCP access
Integrate vulnerability data into your workflows