CVE-2026-77908

CVE-2026-77908 is a code injection vulnerability in Microsoft Dynamics 365 On-Premises that allows an authorized attacker (low privileges) to achieve remote code execution over a network. The flaw stems from improper control of code generation, and the CVSS 3.1 score is 8.8 (HIGH) with impacts ra...

CVE-2026-77899

CVE-2026-77899 is a use-after-free vulnerability in Windows Security Center that allows an authorized attacker to escalate privileges locally . The CVSS v3.1 score is 7.0 (HIGH) with a vector of AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H, reflecting the need for low privileges and high attack complexity...

EUVD-2026-73289

Improper access control in Microsoft Office SharePoint allows an authorized attacker to execute code over a network...

CVE-2026-69282

This vulnerability in Microsoft Office SharePoint stems from improper access control , allowing an authorized attacker to achieve remote code execution over a network. The CVSS 3.1 score is 8.8 (HIGH) with a vector of AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H, indicating low attack complexity but requi...

EUVD-2026-73288

Improper access control in Microsoft Office SharePoint allows an authorized attacker to execute code over a network...

CVE-2026-69273

CVE-2026-69273 is an improper access control vulnerability in Microsoft Office SharePoint that allows an authorized attacker to execute code over a network. The CVSS 3.1 base score is 8.8 (HIGH) , with a network attack vector, low complexity, and low required privileges, resulting in high impact ...

EUVD-2026-73286

Improper access control in Microsoft Office SharePoint allows an authorized attacker to execute code over a network...

CVE-2026-69268

CVE-2026-69268 is an improper access control vulnerability in Microsoft Office SharePoint that allows an authorized attacker to execute code over a network. The assigned CVSS 3.1 score is 8.8 (HIGH) , with a vector of network attack, low complexity, and low privileges required, leading to high im...

EUVD-2026-73280

Out-of-bounds read in Windows DHCP Server allows an authorized attacker to execute code locally...

CVE-2026-77891

CVE-2026-77891 is an out-of-bounds read vulnerability in Windows DHCP Server that allows an authorized attacker to achieve local code execution . The CVSS 3.1 score is 6.4 (MEDIUM) with a vector of AV:L/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H, indicating a local attack requiring high complexity and high p...

EUVD-2026-73273

Out-of-bounds read in Windows DHCP Server allows an authorized attacker to execute code locally...

CVE-2026-77887

CVE-2026-77887 is an out-of-bounds read vulnerability in Windows DHCP Server that allows an authorized attacker to achieve local code execution . Per the CVSS 3.1 vector (6.4 MEDIUM), exploitation requires a local attack vector with high complexity and high privileges , no user interaction, and y...

CVE-2026-77500

A release of invalid pointer or reference vulnerability in the Windows Device Association Service allows an authorized attacker to escalate privileges locally. The flaw is rated CVSS 7.8 (High) with a vector of AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H, meaning an attacker with low local privileges and...

EUVD-2026-73264

Out-of-bounds read in Storage Port Driver allows an authorized attacker to disclose information locally...

CVE-2026-77489

CVE-2026-77489 is a null pointer dereference in Windows Biometric Service that allows an authorized local attacker to elevate privileges. The flaw carries a CVSS 3.1 score of 7.8 (HIGH) with a vector of AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H, meaning exploitation requires only low privileges and no ...

EUVD-2026-73259

Heap-based buffer overflow in Windows Biometric Service allows an authorized attacker to elevate privileges locally...

CVE-2026-69476

A heap-based buffer overflow in the Windows Biometric Service allows an authorized attacker to escalate privileges locally. The vulnerability is rated CVSS 7.8 (High) with low complexity and low privileges required, resulting in high impact to confidentiality, integrity, and availability. No spec...

CVE-2026-69787

CVE-2026-69787 is a heap-based buffer overflow in the Windows Biometric Service that allows an authorized local attacker to escalate privileges. The assigned CVSS 3.1 score is 7.8 (High) , with a vector of AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H, indicating low attack complexity and low privileges re...

CVE-2026-70283

CVE-2026-70283 affects Windows Win32K , the kernel-mode component handling window management. The root cause is an incorrect authorization flaw that allows a local attacker with low privileges to achieve local privilege escalation , resulting in full compromise of confidentiality, integrity, and ...

CVE-2026-69804

A time-of-check time-of-use (TOCTOU) race condition in Microsoft Office SharePoint allows an authorized attacker (low privileges required) to achieve remote code execution over the network. The vulnerability is rated CVSS 7.5 (HIGH) with high impact to confidentiality, integrity, and availability...