268378 matches found
EUVD-2026-73744
Heap-based buffer overflow in Windows Biometric Service allows an authorized attacker to elevate privileges locally...
CVE-2026-72985
A heap-based buffer overflow in Windows Volume Shadow Copy allows an unauthorized attacker with physical access to escalate privileges, potentially compromising confidentiality, integrity, and availability (CVSS 6.8, MEDIUM). The vulnerability requires no prior privileges or user interaction, but...
EUVD-2026-73737
Heap-based buffer overflow in Windows Volume Shadow Copy allows an unauthorized attacker to elevate privileges with a physical attack...
EUVD-2026-73732
Heap-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code over a network...
CVE-2026-72973
Microsoft Office Word is affected by a heap-based buffer overflow that can lead to Remote Code Execution over a network. An unauthorized attacker can execute code with no prior privileges, though user interaction is required (e.g., opening a crafted document). The vulnerability is rated CVSS 8.8 ...
CVE-2026-72972
Microsoft Office Word is affected by a heap-based buffer overflow that allows an unauthorized attacker to achieve remote code execution over a network. The CVSS 3.1 score is 8.8 (HIGH) with a vector of AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H, meaning exploitation requires user interaction (e.g., open...
EUVD-2026-73730
Heap-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code over a network...
EUVD-2026-73726
Heap-based buffer overflow in Windows Media Player allows an unauthorized attacker to execute code over a network...
CVE-2026-70203
CVE-2026-70203 is a heap-based buffer overflow in Windows Media Player that allows an unauthorized attacker to execute code over a network . The vulnerability is classified as Remote Code Execution with a CVSS 3.1 score of 8.8 (HIGH) , reflecting a network attack vector, low complexity, no requir...
CVE-2026-69906
Windows Secure Kernel Mode vulnerability (CVE-2026-69906) involves a heap-based buffer overflow that allows an authorized local attacker to elevate privileges . The vulnerability crosses a security boundary (scope changed), resulting in high impact to confidentiality, integrity, and availability....
EUVD-2026-73725
Heap-based buffer overflow in Windows Secure Kernel Mode allows an authorized attacker to elevate privileges locally...
CVE-2026-69439
Heap-based buffer overflow in .NET and Visual Studio allows an unauthorized attacker to elevate privileges over a network...
CVE-2026-69477
A heap-based buffer overflow in Microsoft Office Access allows an authorized attacker with local access and low privileges to execute code, provided user interaction is required. The vulnerability is rated CVSS 7.3 (HIGH) with a vector of AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H, reflecting full impac...
EUVD-2026-73717
Heap-based buffer overflow in Microsoft Office Access allows an authorized attacker to execute code locally...
EUVD-2026-73716
Heap-based buffer overflow in Microsoft Office Outlook allows an unauthorized attacker to execute code over a network...
CVE-2026-69629
Microsoft Office Outlook is affected by a heap-based buffer overflow vulnerability that allows an unauthorized attacker to execute code over a network, resulting in Remote Code Execution . The flaw requires user interaction but no prior privileges, yielding a CVSS v3.1 score of 8.8 (HIGH) with hi...
EUVD-2026-73714
Stack-based buffer overflow in Microsoft Office Access allows an unauthorized attacker to execute code over a network...
CVE-2026-69614
CVE-2026-69614 is a stack-based buffer overflow in Microsoft Office Access that allows an unauthorized attacker to execute code over a network. The vulnerability carries a CVSS 3.1 base score of 8.8 (HIGH) , with a vector of network attack, low complexity, no privileges required, and user interac...
CVE-2026-69601
CVE-2026-69601 is a heap-based buffer overflow in Microsoft Windows Media Foundation that allows an unauthorized, unprivileged attacker to achieve remote code execution over a network , provided the victim is induced to interact (e.g., open a crafted media file). The assigned CVSS 3.1 score is 8....