CVE-2026-70287

A heap-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to achieve arbitrary code execution over a network. The vulnerability carries a CVSS v3.1 score of 8.8 (High) , indicating that an attacker could exploit this to execute code with high impact on confidentiality,...

CVE-2026-70256

A heap-based buffer overflow vulnerability exists in Microsoft Office Outlook , which could allow an unauthorized attacker to achieve remote code execution over a network. The impact of this vulnerability is rated as HIGH with a CVSS score of 8.8 . Microsoft has released updates to address this i...

CVE-2026-70268

A heap-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to achieve remote code execution over a network. To successfully exploit this vulnerability, an attacker must typically trick a victim into opening a malicious file or clicking a malicious link. Microsoft has re...

CVE-2026-70269

A heap-based buffer overflow vulnerability in Microsoft Office Word allows an unauthorized attacker to achieve Remote Code Execution (RCE) over a network. The vulnerability is associated with CWE-122 and CWE-190 . Microsoft has released official updates to address this flaw. Users are recommended...

CVE-2026-70282

A heap-based buffer overflow vulnerability exists in Microsoft Office Outlook , which could allow an unauthorized attacker to achieve remote code execution over a network. To successfully exploit this, an attacker must trick a victim into opening a malicious file or clicking a malicious link. Mic...

CVE-2026-70109

A heap-based buffer overflow exists in the Microsoft PostScript Printer Driver , which allows an unauthorized attacker to achieve local privilege elevation . The vulnerability is classified as a High severity issue (CVSS 3.1 score of 7.8). Official remediation is available via a Microsoft securit...

CVE-2026-70092

A heap-based buffer overflow vulnerability exists in the Microsoft PostScript Printer Driver . This flaw allows an unauthorized attacker to achieve local privilege escalation . The provided documents do not specify the exact component, file, or function responsible for the overflow, nor do they d...

CVE-2026-70110

A stack-based buffer overflow vulnerability exists in the Microsoft PostScript Printer Driver . This flaw allows an unauthorized attacker to achieve local privilege escalation . The CVSS 3.1 base score is 7.8 (High) , indicating significant impacts on confidentiality, integrity, and availability....

CVE-2026-70116

A stack-based buffer overflow vulnerability exists in the Windows Resilient File System (ReFS) . This flaw allows an unauthorized attacker to perform a security feature bypass through a physical attack vector. The CVSS 3.1 score is 4.2 (Medium), with a high complexity and a high impact on integri...

CVE-2026-70147

A heap-based buffer overflow vulnerability exists in the Microsoft PostScript Printer Driver . This flaw allows an unauthorized attacker to achieve remote code execution over a network. The vulnerability is associated with a CRITICAL CVSS v3.1 score of 9.80 , indicating high impact on confidentia...

CVE-2026-70068

A heap-based buffer overflow exists in the Windows Client-Side Caching (CSC) Service . This vulnerability allows an unauthorized attacker to elevate privileges over a network. The issue involves a heap-based buffer overflow (CWE-122) and an untrusted pointer dereference (CWE-822). Exploitation de...

CVE-2026-70131

A heap-based buffer overflow exists in Microsoft Windows Media Foundation . This vulnerability allows an unauthorized attacker to achieve local privilege elevation . While the specific component or file causing the overflow is not detailed in the provided documents, the impact is categorized as H...

CVE-2026-70024

A stack-based buffer overflow exists in Windows Internet Information Services (IIS), which could allow an unauthorized attacker to execute arbitrary code over a network. The vulnerability is characterized by improper input validation (CWE-20) and has a CRITICAL severity score of 9.80. This flaw a...

CVE-2026-70031

A heap-based buffer overflow vulnerability exists in Windows iSCSI , which could allow an unauthorized attacker to cause a denial of service over a network. The vulnerability has a CVSS 3.1 base score of 7.5, reflecting a high impact on availability. No specific exploit details or exploit code ar...

EUVD-2026-99674

Heap-based buffer overflow in Windows iSCSI allows an unauthorized attacker to deny service over a network...

CVE-2026-69949

A heap-based buffer overflow vulnerability exists in Windows Client for NFS . This flaw allows an authorized attacker to perform a local privilege escalation . The provided documents do not specify the exact component or file involved, nor do they provide specific remediation steps or exploit det...

CVE-2026-88143

A heap-based buffer overflow exists in the Windows Storage Spaces Controller . This vulnerability allows an authorized attacker to perform a local privilege escalation . The technical root cause is associated with CWE-122 (Heap-based Buffer Overflow) and CWE-191 (Integer Underflow). No specific e...

CVE-2026-87716

A heap-based buffer overflow vulnerability exists in the Windows Storage Spaces Controller . This flaw allows an unauthorized attacker to perform a denial of service (DoS) attack over a network. The CVSS 3.1 score of 7.5 (High) reflects an attack vector that requires no privileges or user interac...

CVE-2026-87706

A heap-based buffer overflow vulnerability exists in the Windows Storage Spaces Controller . This flaw allows an authorized attacker to achieve local privilege escalation . The vulnerability has a HIGH severity score of 7.8. No specific version numbers, exploit links, or detailed remediation step...

CVE-2026-87707

A heap-based buffer overflow in the Windows Fax and Scan Service allows an authorized attacker to achieve local privilege escalation . The vulnerability has a high CVSS 3.1 base score of 7.8 . Official remediation is available through a Microsoft fix .