EUVD-2026-100140

Incorrect authorization in Microsoft Exchange Server allows an authorized attacker to elevate privileges over a network...

EUVD-2026-100144

Inclusion of functionality from untrusted control sphere in Microsoft Exchange Server allows an authorized attacker to elevate privileges locally...

EUVD-2026-100139

Stack-based buffer overflow in Microsoft Exchange Server allows an unauthorized attacker to execute code over a network...

EUVD-2026-100145

Improper verification of cryptographic signature in Microsoft Exchange Server allows an authorized attacker to elevate privileges over a network...

EUVD-2026-100143

Deserialization of untrusted data in Microsoft Exchange Server allows an authorized attacker to elevate privileges locally...

CVE-2026-70571

A stack-based buffer overflow exists in Microsoft Exchange Server , which may allow an unauthorized attacker to achieve remote code execution over a network. The vulnerability's severity is rated as High (CVSS 3.1 score of 8.1), potentially impacting confidentiality, integrity, and availability. ...

EUVD-2026-100137

Improper neutralization of input during web page generation 'cross-site scripting' in Microsoft Exchange Server allows an unauthorized attacker to perform spoofing over a network...

CVE-2026-70279

Microsoft Exchange Server is affected by a cross-site scripting (XSS) vulnerability caused by the improper neutralization of input during web page generation. This flaw allows an unauthorized attacker to perform spoofing over a network. While the documents do not specify the exact internal compon...

CVE-2026-77910

A vulnerability in Microsoft Exchange Server involves incorrect authorization , which allows an authorized attacker to elevate privileges over a network. The impact includes the potential for an attacker to impersonate other users, gain elevated privileges, and execute arbitrary code with process...

CVE-2026-87692

A deserialization of untrusted data vulnerability in Microsoft Exchange Server allows an authorized attacker to achieve local privilege escalation . The flaw could also potentially lead to impersonating other users, gaining elevated privileges, and executing arbitrary code with process rights. Mi...

CVE-2026-87695

A vulnerability in Microsoft Exchange Server involves the inclusion of functionality from an untrusted control sphere, which allows an authorized attacker to achieve local privilege escalation . The vulnerability has a base score of 7.8 (High) . Microsoft has released updates to address this issu...

CVE-2026-87696

A vulnerability in Microsoft Exchange Server allows an authorized attacker to elevate privileges over a network due to improper verification of cryptographic signatures (CWE-347). Successful exploitation could allow an attacker to impersonate other users and execute arbitrary code with process ri...

EUVD-2026-100103

Double free in Windows DHCP Server allows an unauthorized attacker to execute code over a network...

CVE-2026-88115

An out-of-bounds read vulnerability exists in Windows Server for NFS , which may allow an unauthorized attacker to achieve remote code execution over a network. The CVSS 3.1 score is 8.8 (HIGH) , indicating significant impact on confidentiality, integrity, and availability. While the vulnerabilit...

CVE-2026-88171

A double free vulnerability in the Windows DHCP Server allows an unauthorized attacker to achieve remote code execution over a network. The vulnerability is categorized under CWE-415 . While the severity is high, the exploit code maturity is currently listed as unproven . No specific exploit link...

CVE-2026-88127

A Use after free vulnerability in the Windows SMB Server allows an authorized attacker to perform a local privilege escalation . The vulnerability is associated with CWE-416 and carries a High base severity score of 7.0. Remediation is available via an official fix provided by Microsoft. No speci...

CVE-2026-85905

A heap-based buffer overflow exists in the Windows UI Immersive Server . This vulnerability allows an authorized attacker to achieve local privilege escalation . The impact includes high levels of risk to confidentiality, integrity, and availability. Remediation is available through an official f...

CVE-2026-85903

A vulnerability exists in the Windows Domain Name Service (DNS Server) caused by an untrusted pointer dereference . This flaw allows an unauthorized attacker to achieve Remote Code Execution (RCE) over a network. The vulnerability is rated as High severity with a CVSS score of 8.8. While exploita...

CVE-2026-83889

The Windows DNS Server is affected by a vulnerability involving the release of an invalid pointer or reference . This flaw allows an authorized attacker to achieve remote code execution over a network. The vulnerability is associated with CWE-763 . No specific exploit information or remediation d...

CVE-2026-83771

A Use after free vulnerability exists in the Windows Camera Frame Server Monitor . This flaw allows an unauthorized attacker to elevate privileges over an adjacent network. The vulnerability is associated with CWE-416 and has a High base severity score of 8.8. No specific exploit details or direc...