CVE-2026-70103

A heap-based buffer overflow vulnerability exists in Windows Error Reporting . This flaw allows an authorized attacker to achieve local privilege escalation . The CVSS 3.1 score is 7.8 (High) , with impacts affecting confidentiality, integrity, and availability. Official remediation is available ...

CVE-2026-70096

A heap-based buffer overflow exists in the Windows Rich Text Edit Control , which could allow an unauthorized attacker to achieve Remote Code Execution (RCE) over a network. This vulnerability is rated with a CRITICAL CVSS score of 9.8 . Microsoft has released official updates to address this iss...

CVE-2026-70095

A heap-based buffer overflow in Windows iSCSI allows an unauthorized attacker to achieve remote code execution over a network. The vulnerability has a CVSS 3.1 base score of 7.5 (High) , where the attack vector is network-based, requires high complexity, and necessitates user interaction. While t...

CVE-2026-70060

A heap-based buffer overflow exists in the Windows Win32 Kernel Subsystem . This vulnerability allows an authorized attacker to perform a local privilege escalation . No specific exploit details or remediation steps are provided in the documents beyond the identification of the root cause and the...

CVE-2026-70027

A heap-based buffer overflow exists in the Windows Subsystem for Linux (WSL) . This vulnerability allows an authorized attacker to achieve local privilege elevation . While the specific component or root cause is not detailed in the provided documents, the impact includes unauthorized access to h...

CVE-2026-70059

A Heap-based buffer overflow exists in Windows OLE that can be exploited by an authorized attacker to achieve local privilege escalation . No specific software versions, root causes, or remediation details are provided in the documents beyond the impact of local privilege elevation. Exploit infor...

CVE-2026-70010

A heap-based buffer overflow vulnerability exists in Windows NTFS . This flaw allows an authorized attacker to achieve local privilege escalation . No specific exploit details or remediation versions are provided in the documents, but a high-severity OFFICIAL_FIX is noted in the security metrics.

CVE-2026-69970

A heap-based buffer overflow exists in the Microsoft Streaming Service (specifically identified in some documents as the Kernel Streaming Service Driver ). This vulnerability allows an authorized attacker to achieve local privilege escalation . No specific exploit code or in-the-wild exploitation...

CVE-2026-69918

A heap-based buffer overflow exists in Windows Core Messaging . This vulnerability allows an authorized attacker to achieve local privilege escalation . While specific affected versions or internal component files are not detailed in the provided documents, the impact is a local elevation of priv...

CVE-2026-69947

A heap-based buffer overflow vulnerability exists in the Windows Overlay Filter component. An unauthorized attacker can exploit this flaw via a physical attack to achieve Remote Code Execution (RCE). The vulnerability carries a MEDIUM severity rating (CVSS 3.1 score of 6.8) and can impact confide...

CVE-2026-69963

A Heap-based buffer overflow exists in the Microsoft Streaming Service (specifically the Kernel Streaming Service Driver ). This vulnerability allows an authorized attacker to achieve local privilege elevation . The vulnerability is associated with CWE-122 and CWE-190 (Integer Overflow or Wraparo...

CVE-2026-69958

A heap-based buffer overflow exists in the Windows Overlay Filter component. This vulnerability allows an unauthorized attacker to achieve Remote Code Execution (RCE) by performing a physical attack . Exploitation details or specific evidence of in-the-wild activity are not provided in the docume...

CVE-2026-69909

A heap-based buffer overflow exists in Microsoft COM for Windows , which could allow an authorized attacker to perform a local privilege elevation . The vulnerability is classified as HIGH severity with a CVSS 3.1 base score of 7.8. No specific exploit details or remediation steps are provided in...

CVE-2026-69898

A heap-based buffer overflow exists in the Windows Kernel . This vulnerability allows an authorized attacker to perform a local privilege escalation . Information regarding specific affected versions, the root cause component, or a specific patch is not provided in the documents. No exploit detai...

CVE-2026-69363

A heap-based buffer overflow exists in Windows Error Reporting , which allows an authorized attacker to achieve privilege escalation over a network. The vulnerability is associated with CWE-122 and has a CVSS 3.1 base score of 8.0 (HIGH) . Remediation is available through an official fix .

CVE-2026-69639

A heap-based buffer overflow vulnerability exists in Windows Libarchive , which allows an unauthorized attacker to achieve remote code execution over a network. The vulnerability is assigned a CVSS v3.1 score of 9.8 , indicating a critical risk level. Microsoft has released updates to address thi...

EUVD-2026-99079

Stack-based buffer overflow in SysInternals allows an authorized attacker to elevate privileges locally...

CVE-2026-108399

A heap-based buffer overflow exists in Windows Hyper-V , which could allow an authorized attacker to achieve local privilege elevation . The vulnerability is listed with a CVSS 3.1 score of 7.2 (High) , indicating that while it requires local access and high privileges to exploit, it can have a s...

CVE-2026-105717

A heap-based buffer overflow in Microsoft Office Access allows an unauthorized attacker to execute arbitrary code over a network. This vulnerability is caused by improper input validation (CWE-20) and has a HIGH base severity score of 8.8. Microsoft has released official updates to address this i...

CVE-2026-105732

A stack-based buffer overflow in SysInternals allows an authorized attacker to achieve local privilege escalation . The vulnerability has a HIGH base severity score of 7.3. No specific affected versions, root cause components, or exploit links are provided in the documents, though an official fix...