CVE-2026-68845

A heap-based buffer overflow vulnerability in the Windows Program Compatibility Assistant Service allows authorized attackers to escalate their privileges locally. This high-severity flaw could enable attackers to execute arbitrary code with elevated permissions, potentially compromising system integrity. Organizations using affected Windows products should prioritize patching to mitigate the risk of local privilege escalation attacks.