EUVD-2026-73819

Use after free in Microsoft Office Word allows an unauthorized attacker to execute code over a network...

EUVD-2026-73816

Use after free in Microsoft Office Word allows an unauthorized attacker to execute code over a network...

CVE-2026-78507

CVE-2026-78507 is a use-after-free vulnerability in Microsoft Office Word that allows an unauthorized attacker to achieve remote code execution over a network. The attack requires user interaction (e.g., opening a malicious document) but no prior privileges. The CVSS 3.1 score is 8.8 (High) with ...

EUVD-2026-73815

Out-of-bounds read in SQL Server allows an authorized attacker to disclose information over a network...

CVE-2026-66819

CVE-2026-66819 is an SQL injection vulnerability in Microsoft SQL Server , caused by improper neutralization of special elements used in SQL commands. An authorized attacker can exploit it over a network to elevate privileges , with a CVSS 3.1 score of 8.8 (HIGH) and impacts rated High for confid...

CVE-2026-67369

CVE-2026-67369 is an out-of-bounds read in Microsoft SQL Server that allows an authorized attacker to disclose information over a network. The vulnerability requires low privileges and has a CVSS 3.1 score of 6.5 (MEDIUM) with high confidentiality impact but no integrity or availability impact. C...

EUVD-2026-73812

Use after free in Windows Services for NFS ONCRPC XDR Driver allows an unauthorized attacker to execute code over a network...

EUVD-2026-73811

Authorization bypass through user-controlled key in Visual Studio Code allows an unauthorized attacker to bypass a security feature over a network...

CVE-2026-78462

CVE-2026-78462 is an authorization bypass through a user-controlled key in Visual Studio Code that allows an unauthenticated network attacker to bypass a security feature . The underlying weakness is the use of a user-controllable key in an authorization check, enabling remote exploitation with l...

CVE-2026-78456

CVE-2026-78456 affects Microsoft SQL Server and is caused by a heap-based buffer overflow that allows an authorized attacker (low privileges required) to achieve remote code execution over the network. The CVSS v3.1 score is 8.8 (HIGH) with a vector of AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H, reflect...

EUVD-2026-73809

Heap-based buffer overflow in SQL Server allows an authorized attacker to execute code over a network...

CVE-2026-78453

CVE-2026-78453 is an integer underflow (wraparound) in the Microsoft Windows SCSI Class System File that allows an unauthorized, remote attacker to disclose information over a network . The vulnerability requires user interaction and demands no prior privileges , with a CVSS 3.1 base score of 6.5...

EUVD-2026-73805

Integer underflow wrap or wraparound in Microsoft Windows SCSI Class System File allows an unauthorized attacker to disclose information over a network...

EUVD-2026-73800

Untrusted pointer dereference in Windows Failover Cluster allows an unauthorized attacker to execute code over a network...

CVE-2026-78444

CVE-2026-78444 is an untrusted pointer dereference vulnerability in Windows Failover Cluster that allows an unauthorized, network-based attacker to achieve remote code execution . The attack requires high complexity but no prior privileges or user interaction, with high impact to confidentiality,...

EUVD-2026-73801

Use after free in Reliable Multicast Transport Driver RMCAST allows an unauthorized attacker to execute code over a network...

CVE-2026-78450

CVE-2026-78450 is a use-after-free vulnerability in the Windows Reliable Multicast Transport Driver (RMCAST) that allows an unauthorized, network-based attacker to achieve remote code execution . The vulnerability was reported by Microsoft (CNA source) and assigned a CVSS 3.1 base score of 8.1 (H...

CVE-2026-78446

A Use after free vulnerability exists in the Windows Distributed File System (DFS) , which allows an authorized attacker to perform a denial of service (DoS) over a network. While the CVE title mentions Remote Code Execution, the primary description and metrics focus on the DoS impact. No specifi...

EUVD-2026-73798

Use after free in Windows Distributed File System DFS allows an authorized attacker to deny service over a network...

CVE-2026-78449

CVE-2026-78449 is a use-after-free vulnerability in the Windows Reliable Multicast Transport Driver (RMCAST) that allows an unauthorized attacker to execute code over the network. The vulnerability is rated CVSS 3.1: 8.1 (HIGH) with a vector of AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H, indicating a ne...