CVE-2026-70010

A heap-based buffer overflow vulnerability exists in Windows NTFS . This flaw allows an authorized attacker to achieve local privilege escalation . No specific exploit details or remediation versions are provided in the documents, but a high-severity OFFICIAL_FIX is noted in the security metrics.

CVE-2026-69963

A Heap-based buffer overflow exists in the Microsoft Streaming Service (specifically the Kernel Streaming Service Driver ). This vulnerability allows an authorized attacker to achieve local privilege elevation . The vulnerability is associated with CWE-122 and CWE-190 (Integer Overflow or Wraparo...

CVE-2026-69918

A heap-based buffer overflow exists in Windows Core Messaging . This vulnerability allows an authorized attacker to achieve local privilege escalation . While specific affected versions or internal component files are not detailed in the provided documents, the impact is a local elevation of priv...

CVE-2026-69958

A heap-based buffer overflow exists in the Windows Overlay Filter component. This vulnerability allows an unauthorized attacker to achieve Remote Code Execution (RCE) by performing a physical attack . Exploitation details or specific evidence of in-the-wild activity are not provided in the docume...

CVE-2026-69947

A heap-based buffer overflow vulnerability exists in the Windows Overlay Filter component. An unauthorized attacker can exploit this flaw via a physical attack to achieve Remote Code Execution (RCE). The vulnerability carries a MEDIUM severity rating (CVSS 3.1 score of 6.8) and can impact confide...

CVE-2026-69909

A heap-based buffer overflow exists in Microsoft COM for Windows , which could allow an authorized attacker to perform a local privilege elevation . The vulnerability is classified as HIGH severity with a CVSS 3.1 base score of 7.8. No specific exploit details or remediation steps are provided in...

CVE-2026-69639

A heap-based buffer overflow vulnerability exists in Windows Libarchive , which allows an unauthorized attacker to achieve remote code execution over a network. The vulnerability is assigned a CVSS v3.1 score of 9.8 , indicating a critical risk level. Microsoft has released updates to address thi...

CVE-2026-69898

A heap-based buffer overflow exists in the Windows Kernel . This vulnerability allows an authorized attacker to perform a local privilege escalation . Information regarding specific affected versions, the root cause component, or a specific patch is not provided in the documents. No exploit detai...

CVE-2026-69363

A heap-based buffer overflow exists in Windows Error Reporting , which allows an authorized attacker to achieve privilege escalation over a network. The vulnerability is associated with CWE-122 and has a CVSS 3.1 base score of 8.0 (HIGH) . Remediation is available through an official fix .

CVE-2026-105732

A stack-based buffer overflow in SysInternals allows an authorized attacker to achieve local privilege escalation . The vulnerability has a HIGH base severity score of 7.3. No specific affected versions, root cause components, or exploit links are provided in the documents, though an official fix...

CVE-2026-108467

A heap-based buffer overflow exists in the Microsoft PostScript Printer Driver . This vulnerability allows an authorized attacker to achieve remote code execution over a network. While the specific software versions are not detailed in the provided documents, the flaw enables significant impact o...

CVE-2026-105717

A heap-based buffer overflow in Microsoft Office Access allows an unauthorized attacker to execute arbitrary code over a network. This vulnerability is caused by improper input validation (CWE-20) and has a HIGH base severity score of 8.8. Microsoft has released official updates to address this i...

CVE-2026-108399

A heap-based buffer overflow exists in Windows Hyper-V , which could allow an authorized attacker to achieve local privilege elevation . The vulnerability is listed with a CVSS 3.1 score of 7.2 (High) , indicating that while it requires local access and high privileges to exploit, it can have a s...

CVE-2026-105598

A heap-based buffer overflow vulnerability in Microsoft Office Access allows an unauthorized attacker to achieve remote code execution over a network. The vulnerability impacts the core application and can lead to high levels of confidentiality, integrity, and availability impact. Microsoft has r...

CVE-2026-105599

A heap-based buffer overflow exists in Microsoft Office PowerPoint , which could allow an unauthorized attacker to execute code over a network . The vulnerability is associated with a HIGH severity score of 7.5 . Microsoft has released updates to address this vulnerability, and users are encourag...

CVE-2026-105716

A heap-based buffer overflow vulnerability exists in Microsoft Office Access , which allows an unauthorized attacker to achieve remote code execution over a network. This vulnerability is listed alongside other critical flaws in the Office suite and has a CVSS v3.1 score of 8.8 (High) . Microsoft...

CVE-2026-105714

A heap-based buffer overflow in Microsoft Office Access allows an unauthorized attacker to execute arbitrary code over a network. The vulnerability has a CVSS 3.1 score of 7.5 (High) and requires user interaction. Microsoft has released official updates to address this vulnerability; users are en...

CVE-2026-105591

A heap-based buffer overflow vulnerability in Microsoft Office Access allows an unauthorized attacker to execute arbitrary code over a network. The vulnerability has a HIGH severity (CVSS 3.1: 8.8) and requires user interaction. Microsoft has released security updates to address this issue; users...

CVE-2026-105596

A heap-based buffer overflow exists in Microsoft Office Access , which could allow an unauthorized attacker to execute arbitrary code over a network. The impact of this vulnerability is rated as High with a CVSS 3.1 score of 8.8 . Microsoft has released updates to address this vulnerability, and ...

CVE-2026-105592

A heap-based buffer overflow exists in Microsoft Office Access , which could allow an unauthorized attacker to execute arbitrary code over a network. To successfully exploit this, an attacker must typically trick a victim into opening a malicious file or clicking a malicious link. Microsoft has r...