CVE-2026-69830

A race condition vulnerability exists in the Windows DHCP Server due to concurrent execution using a shared resource with improper synchronization (CWE-362 , CWE-416 ). This flaw allows an unauthorized attacker to achieve remote code execution over the network. The CVSS 3.1 score is 8.1 (High) , ...

CVE-2026-81969

The Windows Server Update Service is affected by a vulnerability involving insufficient granularity of access control . This flaw allows an authorized attacker to perform a local privilege escalation . The vulnerability is characterized by a HIGH base severity score of 7.8 and is associated with ...

CVE-2026-70133

The Windows SMB Server is susceptible to a Denial of Service vulnerability caused by the allocation of resources without limits or throttling (CWE-770). An unauthorized attacker can exploit this flaw over the network to disrupt service availability. While specific exploit details or in-the-wild o...

CVE-2026-70127

A Use after free vulnerability exists in the Windows Domain Name Service (DNS Server) . This flaw allows an unauthorized attacker to achieve Remote Code Execution (RCE) over a network. The vulnerability is rated as HIGH severity (CVSS 3.1 score of 8.1) and affects confidentiality, integrity, and ...

CVE-2026-70083

A vulnerability in the DNS Server results from incorrect authorization , which allows an authorized attacker to perform tampering locally . This flaw impacts the integrity of the system. No specific software versions, root causes, or remediation steps are provided in the documents. Exploitation d...

CVE-2026-70087

A vulnerability in the DNS Server stems from incorrect authorization , which allows an authorized attacker to locally bypass a security feature . The impact is categorized as a high level of integrity loss (CVSS 3.1 score of 5.5). While technical details regarding the specific component or root c...

CVE-2026-70085

A missing authorization vulnerability exists in the DNS Server , which allows an authorized attacker to perform tampering locally . The vulnerability is associated with CWE-862 . The CVSS 3.1 score is 5.5 (Medium) , with a high impact on integrity . No specific exploit information or patch versio...

CVE-2026-70058

The Windows DHCP Server is vulnerable to an out-of-bounds write (CWE-787) that allows an unauthorized attacker to execute code over a network. The vulnerability has a CVSS 3.1 base score of 7.5 (HIGH) , with a primary impact on availability . Remediation is available via an official fix provided ...

CVE-2026-69795

A null pointer dereference vulnerability exists in the Windows Clipboard Server . This flaw allows an authorized attacker to achieve local privilege escalation . No specific exploitation details or direct links are provided in the documentation, but the vulnerability is addressed via an official ...

CVE-2026-103572

A code injection vulnerability exists in Visual Studio Tools for Applications and SQL Server Management Studio . Due to improper control of code generation, an unauthorized attacker can execute arbitrary code over a network. This vulnerability has a CVSS 3.1 score of 8.8 and is reported to have a...

EUVD-2026-99027

Improper control of generation of code 'code injection' in Visual Studio Tools for Applications and SQL Server Management Studio allows an unauthorized attacker to execute code over a network...

CVE-2026-110249

A flaw was found in Thunderbird. The Mozilla Foundation's Security Advisory describes the following issue: A malicious, compromised, or MITM-controlled Exchange server can return a single well-formed SOAP response containing an element with enough attributes to keep Thunderbird's main thread...

Vulnerabilities in Microsoft SQL Server

Microsoft has identified vulnerabilities in SQL Server. Malicious actors could exploit these vulnerabilities to cause a denial-of-service attack, gain excessive privileges, execute arbitrary code, and potentially access sensitive data. Microsoft has provided updates that address these...

Vulnerabilities in Microsoft Exchange Server

Microsoft has addressed vulnerabilities in Exchange. A malicious individual could exploit these vulnerabilities to impersonate other users, gain elevated privileges, and execute arbitrary code with process rights. An out-of-band update was previously released for the vulnerability with identifier...

EUVD-2026-99208

A malicious, compromised, or MITM-controlled Exchange server can return a single well-formed SOAP response containing an element with enough attributes to keep Thunderbird's main thread CPU-bound for seconds to hours. This vulnerability was fixed in Thunderbird 158 and Thunderbird 153.5...

CVE-2026-110249

A malicious, compromised, or MITM-controlled Exchange server can return a single well-formed SOAP response containing an element with enough attributes to keep Thunderbird's main thread CPU-bound for seconds to hours. This vulnerability was fixed in Thunderbird 158 and Thunderbird 153.5...

CVE-2026-110131

ThriveX-Server through 4.0 contains a missing authorization vulnerability in the GET /api/article and /api/article/id endpoints that allows unauthenticated attackers to read unpublished draft and soft-deleted articles. Attackers can request sequential article ids or supply isDraft=true or...

CVE-2026-110100

Jorani before 1.0.4 contains a missing authorization vulnerability in Contracts::import that allows any authenticated user to import days off into any contract from an arbitrary URL. Attackers can submit a contract id and URL via POST to overwrite non-working-day calendars and abuse getheaders an...

CVE-2026-102989

TanStack Router is a client-first, server-capable, fully type-safe router and full-stack framework for the web. From 1.143.12 until 1.169.39 for @tanstack/start-server-core, 1.168.60 for @tanstack/react-start, 1.168.57 for @tanstack/solid-start, and 1.168.56 for @tanstack/vue-start, an...

2026-10 Cumulative Update for .NET Framework 3.5, 4.7.2 and 4.8 for Windows Server 2019 for x64 (KB5128923)

2026-10 Cumulative Update for .NET Framework 3.5, 4.7.2 and 4.8 for Windows Server 2019 for x64 KB5128923...