Xint receives three September Microsoft memory-safety credits

MSRC credits Theori researchers working with Xint on Windows Error Reporting and VHD Miniport memory-corruption vulnerabilities.

Bug class: Heap buffer overflow and out-of-bounds read enabling SYSTEM elevation
Affected codebase: Microsoft Windows Error Reporting and VHD Miniport
Credited system: Xint Code
Disclosed: September 8, 2026
Attribution: Direct source attribution
AI role: Unspecified
Severity: high

Source status: MSRC credits insu and Theori with Xint on the three accepted CVEs. Theori's product material supplies the AI-assisted system description.

Summary

Windows Error Reporting CVE-2026-69436 is a heap buffer overflow. The VHD Miniport pair covers a second heap buffer overflow and an out-of-bounds read. Microsoft says all three can lead to local privilege escalation, including SYSTEM-level impact.

References

Catalogued in the Bugflation public ledger. Disagree with the attribution or severity label? Email the desk.