CVE-2026-59113

CVE-2026-59113 concerns Visual Studio Code. The vulnerability is described as missing authorization that allows an unauthorized attacker to execute code over a network. The NVD entry cites a CVSS v3.1 base score of 8.8 (High) with network attack vector, no privileges required, user interaction re...

CVE-2026-59113 Visual Studio Code Remote Code Execution Vulnerability

...

EUVD-2026-56302

Improper neutralization of special elements used in a command 'command injection' in Windows Active Directory allows an unauthorized attacker to execute code over a network...

CVE-2026-54984 Windows Imaging Component Remote Code Execution Vulnerability

...

CVE-2026-49179 Windows Active Directory Domain Services Remote Code Execution Vulnerability

...

CVE-2026-54984

Windows Imaging Component contains a heap-based buffer overflow that allows an unauthenticated user with local access to execute arbitrary code. This CVE-2026-54984 is described as a local, high-severity issue (CVSS 7.8). The documents provide no exploit details or remediation guidance; refer to ...

CVE-2026-49179

Improper neutralization of special elements used in a command 'command injection' in Windows Active Directory allows an unauthorized attacker to execute code over a network...

CVE-2026-54984 Windows Imaging Component Remote Code Execution Vulnerability

...

CVE-2026-49179 Windows Active Directory Domain Services Remote Code Execution Vulnerability

...

CVE-2026-49179

CVE-2026-49179 describes a remote code execution vulnerability in Windows Active Directory Domain Services caused by improper neutralization of special elements used in a command (command injection). The issue allows an unauthenticated attacker to run code over the network with high impact (confi...

CVE-2026-63520 Microsoft SharePoint Server Remote Code Execution Vulnerability

...

CVE-2026-63520 Microsoft SharePoint Server Remote Code Execution Vulnerability

...

EUVD-2026-56298

Improper input validation in Microsoft Office SharePoint allows an unauthorized attacker to execute code over a network...

CVE-2026-63520

CVE-2026-63520 is an RCE in Microsoft SharePoint via an unsafe ".NET type instantiation" in Business Connectivity Services. Affected products include SharePoint Server Subscription Edition, SharePoint Server 2019, SharePoint Server 2016, Project Server 2013 SP1, and Office Web Apps 2013 SP1. The ...

EUVD-2026-56295

Deserialization of untrusted data in Microsoft Office SharePoint allows an authorized attacker to execute code over a network...

CVE-2026-63514 Microsoft SharePoint Server Remote Code Execution Vulnerability

...

CVE-2026-63514 Microsoft SharePoint Server Remote Code Execution Vulnerability

...

CVE-2026-63514

Summary: CVE-2026-63514 involves deserialization of untrusted data in Microsoft Office SharePoint, enabling an authorized attacker to execute code remotely over a network. Affected component: SharePoint Server (deserialization path in untrusted data handling). Impact: Remote code execution with H...

EUVD-2026-56290

Improper limitation of a pathname to a restricted directory 'path traversal' in Microsoft Teams for Android allows an unauthorized attacker to execute code over a network...

CVE-2026-65768

CVE-2026-65768 is a Microsoft Teams for Android path traversal leading to remote code execution over a network. The root cause is an improper limitation of a pathname to a restricted directory, enabling an unauthenticated, network-based attacker to run code. Public CVSS data assigns a high/critic...