267242 matches found
CVE-2026-80087
A heap-based buffer overflow in Microsoft Office allows an unauthorized attacker to disclose information over a network , per the CVSS 3.1 vector (AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N) scoring it 6.5 MEDIUM . The CISA SSVC assessment rates exploitation as none , automatability as no , and technica...
CVE-2026-80085
CVE-2026-80085 is a heap-based buffer overflow in Microsoft Office Word that allows an unauthorized attacker to achieve remote code execution over a network. The attack requires user interaction (e.g., opening a crafted document) but no prior authentication, yielding high impact to confidentialit...
EUVD-2026-73834
Heap-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code over a network...
CVE-2026-78526
CVE-2026-78526 is a heap-based buffer overflow in Microsoft Office Word that allows an unauthorized attacker to achieve remote code execution over a network. The CVSS 3.1 base score is 8.8 (HIGH) , with an attack vector of network, low complexity, no privileges required, and user interaction requ...
EUVD-2026-73827
Heap-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code over a network...
CVE-2026-78521
A heap-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to achieve remote code execution over a network, rated CVSS 8.8 (HIGH) with vector AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H. The attack requires user interaction (e.g., opening a malicious document) but no prior auth...
EUVD-2026-73824
Heap-based buffer overflow in SQL Server allows an authorized attacker to execute code over a network...
CVE-2026-77481
CVE-2026-77481 is a heap-based buffer overflow in Microsoft SQL Server that allows an authorized attacker (low privileges required) to achieve remote code execution over a network . The CVSS 3.1 base score is 8.8 (HIGH) , with high impact to confidentiality, integrity, and availability, and no us...
CVE-2026-78456
CVE-2026-78456 affects Microsoft SQL Server and is caused by a heap-based buffer overflow that allows an authorized attacker (low privileges required) to achieve remote code execution over the network. The CVSS v3.1 score is 8.8 (HIGH) with a vector of AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H, reflect...
EUVD-2026-73809
Heap-based buffer overflow in SQL Server allows an authorized attacker to execute code over a network...
EUVD-2026-73802
Heap-based buffer overflow in Windows Biometric Service allows an authorized attacker to elevate privileges locally...
CVE-2026-78448
CVE-2026-78448 is a heap-based buffer overflow in Windows Biometric Service that allows an authorized attacker to achieve local privilege escalation . The CVSS v3.1 score is 7.8 (HIGH) with a vector of AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H, reflecting that a low-privileged local attacker can compro...
CVE-2026-78447
CVE-2026-78447 is a heap-based buffer overflow in the Windows Biometric Service component, which allows an authorized local attacker to achieve privilege escalation . Microsoft rates the vulnerability as HIGH severity with a CVSS v3.1 score of 7.8 (vector: AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H), in...
EUVD-2026-73803
Heap-based buffer overflow in Windows Biometric Service allows an authorized attacker to elevate privileges locally...
CVE-2026-78442
CVE-2026-78442 is a heap-based buffer overflow in Windows OLE DB that allows an unauthorized attacker to achieve remote code execution over a network with user interaction. The CNA-assigned CVSS 3.1 score is 8.8 (High) with full impact on confidentiality, integrity, and availability. CISA's SSVC ...
EUVD-2026-73795
Heap-based buffer overflow in Windows OLE DB allows an unauthorized attacker to execute code over a network...
CVE-2026-71328
Heap-based buffer overflow in Visual Studio allows an unauthorized attacker to execute code over a network...
CVE-2026-71328
A heap-based buffer overflow in Visual Studio (and .NET , per the CVE record) allows an unauthorized attacker to execute code over a network, constituting a Remote Code Execution (RCE) vulnerability. The CVSS v3.1 base score is 8.8 (HIGH) , with the attack requiring user interaction but no prior ...
CVE-2026-73016
A heap-based buffer overflow in DirectWrite , a component of Microsoft's Graphics Component, allows an unauthorized attacker to achieve remote code execution over a network. The attack requires low complexity, no privileges, and user interaction, with full impact on confidentiality, integrity, an...