CVE-2026-83519

A heap-based buffer overflow exists in Windows Error Reporting , which could allow an unauthorized attacker to execute arbitrary code over a network. This vulnerability has a CVSS score of 9.80 and does not require prior authentication or user interaction. Exploitation details and specific patche...

CVE-2026-69471

A heap-based buffer overflow exists in the Windows Installer component. This vulnerability allows an authorized attacker to achieve local privilege escalation . The documentation identifies the root cause as a heap-based buffer overflow (CWE-122) and an out-of-bounds read (CWE-125). While the CVS...

CVE-2026-78459

A heap-based buffer overflow vulnerability exists in Windows Internet Information Services . This flaw allows an authorized attacker to achieve local privilege escalation . The vulnerability has a CVSS 3.1 score of 7.8 (High) . Official remediation is available via Microsoft's update guide.

CVE-2026-77496

A Heap-based buffer overflow exists in the Windows Imaging Component , which could allow an unauthorized attacker to achieve Remote Code Execution (RCE) over a network. The vulnerability has a HIGH base severity score of 8.8. No specific exploit details or in-the-wild exploitation information are...

CVE-2026-69635

A heap-based buffer overflow exists in Windows Installer , which could allow an authorized attacker to elevate privileges through a physical attack . The vulnerability is associated with CWE-122 . No specific exploit details or in-the-wild exploitation information are provided in the documents. R...

CVE-2026-69326

A heap-based buffer overflow vulnerability exists in Graphic Fonts , which could allow an unauthorized attacker to achieve remote code execution over a network. The vulnerability has a CVSS 3.1 base score of 8.8 (High) , indicating significant impact on confidentiality, integrity, and availabilit...

CVE-2026-77902

A heap-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code over a network. Exploitation of this vulnerability requires the victim to open a malicious file or click a malicious link. Microsoft has released updates to address this and other vulnerabilitie...

CVE-2026-70258

A heap-based buffer overflow exists in Microsoft Windows Media Foundation , which could allow an unauthorized attacker to achieve remote code execution over a network. The vulnerability is associated with CWE-122 (Heap-based Buffer Overflow) and CWE-190 (Integer Overflow or Wraparound). No specif...

CVE-2026-70207

A heap-based buffer overflow vulnerability exists in Network Policy Server (NPS) . This flaw allows an authorized attacker to achieve remote code execution over a network. The vulnerability is classified with a CVSS 3.1 base score of 7.5 (High) , indicating significant impact on confidentiality, ...

CVE-2026-70157

A Heap-based buffer overflow vulnerability exists in the Windows System Information Console . This flaw allows an unauthorized attacker to achieve remote code execution over a network. The vulnerability is classified as CRITICAL with a CVSS score of 9.8, impacting confidentiality, integrity, and ...

CVE-2026-70069

A stack-based buffer overflow vulnerability exists in the Windows DHCP Server . This flaw allows an authorized attacker to achieve remote code execution over a network. The vulnerability carries a CVSS 3.1 base score of 8.8 (High) , indicating significant impact on confidentiality, integrity, and...

CVE-2026-69985

A heap-based buffer overflow vulnerability exists in Windows Libarchive . This flaw allows an unauthorized attacker to achieve Remote Code Execution (RCE) over a network. The vulnerability is confirmed with a High base severity score (8.8). While the documents confirm the impact and root cause, s...

CVE-2026-97794

A heap-based buffer overflow exists in the Windows Container Isolation FS Filter Driver (unionfs.sys) . This vulnerability allows an authorized attacker to achieve local privilege escalation . While the CVSS 3.1 score indicates a High severity (7.8), no specific exploit details or in-the-wild exp...

EUVD-2026-99836

Heap-based buffer overflow in Windows Container Isolation FS Filter Driver unionfs.sys allows an authorized attacker to elevate privileges locally...

CVE-2026-97765

A heap-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to achieve Remote Code Execution (RCE) over a network. The vulnerability has a CVSS 3.1 score of 8.8 (High) . Microsoft has released security updates to address this issue, and users are encouraged to install t...

CVE-2026-96096

A Heap-based buffer overflow in Windows Media Player allows an unauthorized attacker to execute arbitrary code over a network. This vulnerability has a CRITICAL CVSS v3.1 base score of 9.8 . No specific version numbers, root causes, or remediation steps are provided in the documents beyond the ge...

CVE-2026-97780

A heap-based buffer overflow exists in Microsoft Office Excel that allows an unauthorized attacker to achieve remote code execution over a network. The vulnerability has a HIGH severity rating (CVSS 3.1 score of 8.8) and requires user interaction to exploit. Microsoft has released updates to addr...

CVE-2026-97754

A heap-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code over a network . This vulnerability enables remote code execution, which can lead to a denial-of-service, privilege escalation, or unauthorized access to sensitive information. To successfully e...

CVE-2026-97776

A heap-based buffer overflow vulnerability in Microsoft Office Excel allows an unauthorized attacker to achieve remote code execution over a network. To successfully exploit this vulnerability, an attacker must trick a victim into opening a malicious file or clicking a malicious link. Microsoft h...

CVE-2026-97003

A heap-based buffer overflow vulnerability in Microsoft Office Excel allows an unauthorized attacker to execute arbitrary code over a network. This vulnerability impacts the Excel component and can lead to remote code execution. Microsoft has released updates to address this issue; users are enco...