CVE-2026-83643

A stack-based buffer overflow vulnerability exists in Windows Error Reporting , which could allow an unauthorized attacker to execute code over a network . The vulnerability has a CVSS 3.1 base score of 8.8 (High) , indicating significant impact on confidentiality, integrity, and availability. No...

CVE-2026-83519

A heap-based buffer overflow exists in Windows Error Reporting , which could allow an unauthorized attacker to execute arbitrary code over a network. This vulnerability has a CVSS score of 9.80 and does not require prior authentication or user interaction. Exploitation details and specific patche...

CVE-2026-88132

An origin validation error in Azure Key Vault allows an unauthorized attacker to disclose information over a network. This vulnerability is classified as an Access to Sensitive Data issue with a CVSS v3.1 score of 5.9 (Medium) . Microsoft has released updates to address this vulnerability; users ...

EUVD-2026-99610

Origin validation error in Microsoft Power Apps allows an authorized attacker to execute code over a network...

CVE-2026-70213

An origin validation error in Microsoft Power Apps allows an authorized attacker to perform remote code execution over a network. This vulnerability has a HIGH severity rating with a CVSS score of 8.0. Documentation confirms the impact is the execution of arbitrary code . No specific exploit link...

CVE-2026-69877

An origin validation error in Azure DevOps allows an unauthorized attacker to disclose information over a network. The vulnerability results in access to sensitive data , as indicated by the CVSS metric and the CVE description. Microsoft has released updates to address this issue, and users are r...

EUVD-2026-99597

Origin validation error in Azure DevOps allows an unauthorized attacker to disclose information over a network...

CVE-2026-85800

A Heap-based buffer overflow exists in Windows Error Reporting that allows an authorized attacker to achieve local privilege escalation . The vulnerability is associated with CWE-122 . No specific exploit details or direct links to in-the-wild exploitation are provided in the documentation. Remed...

CVE-2026-85354

A Use after free vulnerability exists in Windows Error Reporting , which could allow an authorized attacker to achieve local privilege escalation . The vulnerability is classified with a High severity base score of 7.0. No specific exploit links or remediation details beyond the official Microsof...

CVE-2026-83916

A double free vulnerability in Windows Error Reporting allows an authorized attacker to achieve local code execution . The vulnerability is characterized by a CWE-415 flaw, which can lead to significant impacts on confidentiality, integrity, and availability . An official fix is available, and sp...

CVE-2026-83826

A vulnerability exists in Windows Error Reporting due to an untrusted pointer dereference . This flaw allows an authorized attacker to perform a local privilege escalation . The CVSS 3.1 base score is 7.8 (High) , reflecting high impacts on confidentiality, integrity, and availability. While the ...

CVE-2026-83758

A heap-based buffer overflow exists in Windows Error Reporting . This vulnerability allows an authorized attacker to achieve local code execution . Remediation is available via an official fix from Microsoft.

CVE-2026-83715

The Windows Error Reporting service is vulnerable to a Missing Authentication for Critical Function (CWE-306) flaw. This vulnerability allows an authorized attacker to perform tampering locally on the affected system. The CVSS 3.1 base score is 7.1 (High) , with local access and low complexity re...

CVE-2026-83748

A heap-based buffer overflow vulnerability exists in Windows Error Reporting . This flaw allows an unauthorized attacker to achieve remote code execution over a network. The vulnerability is rated with a CVSS score of 9.8 (CRITICAL), indicating a high level of severity with low attack complexity ...

CVE-2026-83693

A heap-based buffer overflow exists in Windows Error Reporting , which could allow an unauthorized attacker to achieve remote code execution over a network. The vulnerability is classified as CRITICAL with a CVSS score of 9.8. While the documents confirm the impact is the execution of arbitrary c...

CVE-2026-83669

A vulnerability exists in Windows Error Reporting due to the use of uninitialized resource (CWE-908). This flaw allows an authorized attacker to achieve local privilege escalation . The vulnerability is rated with a CVSS 3.1 base score of 7.8 (High) . No specific exploit details or in-the-wild ex...

CVE-2026-83658

A vulnerability exists in Windows Error Reporting due to improper access control . This flaw allows an authorized attacker to perform a local information disclosure . The impact is classified as high regarding confidentiality, with a CVSS 3.1 base score of 5.5. Remediation is available via an off...

CVE-2026-69354

A heap-based buffer overflow exists in Windows Error Reporting , which can be exploited by an authorized attacker to achieve local privilege escalation . The vulnerability is associated with CWE-122 (Heap-based Buffer Overflow) and CWE-190 (Integer Overflow or Wraparound). Practical exploitation ...

CVE-2026-69387

A Use after free vulnerability exists in Windows Error Reporting , which could allow an authorized attacker to elevate privileges locally . The vulnerability is categorized with a CVSS 3.1 base score of 7.0 (High) . No specific exploit details or remediation steps are provided in the documents be...

CVE-2026-70103

A heap-based buffer overflow vulnerability exists in Windows Error Reporting . This flaw allows an authorized attacker to achieve local privilege escalation . The CVSS 3.1 score is 7.8 (High) , with impacts affecting confidentiality, integrity, and availability. Official remediation is available ...