CVE-2026-100203

A heap-based buffer overflow exists in the Windows Update Service , which could allow an authorized attacker to achieve local privilege escalation . The vulnerability is classified as High severity with a CVSS 3.1 score of 7.0. While the root cause is identified as a heap overflow, specific file ...

CVE-2026-96071

A heap-based buffer overflow exists in Windows Media , which could allow an unauthorized attacker to execute arbitrary code over a network . The vulnerability is associated with CWE-122 . While the CVSS score indicates a HIGH severity (7.5) with potential for high impact on confidentiality, integ...

CVE-2026-97768

A heap-based buffer overflow exists in Microsoft Office Excel , which could allow an unauthorized attacker to execute code over a network. The vulnerability has a CVSS v3.1 score of 8.8 and requires user interaction. Microsoft has released updates to address this vulnerability, and users are enco...

CVE-2026-100201

A heap-based buffer overflow vulnerability exists in the Windows Client License Service . This flaw allows an authorized attacker to achieve local privilege escalation . The vulnerability is associated with CWE-122 (Heap-based Buffer Overflow) and CWE-197 (Numeric Truncation Error). Details regar...

CVE-2026-97757

A heap-based buffer overflow vulnerability exists in Microsoft Office Excel , which could allow an unauthorized attacker to achieve remote code execution over a network. The vulnerability has been addressed by Microsoft in recent security updates. To mitigate this risk, users are recommended to i...

CVE-2026-97004

Microsoft Office Excel is affected by a heap-based buffer overflow (CWE-122) and an integer underflow (CWE-191) that allows an unauthorized attacker to execute arbitrary code over a network. Exploitation requires the victim to open a malicious file or click a malicious link. Microsoft has release...

CVE-2026-97777

A heap-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute arbitrary code over a network. The vulnerability requires user interaction , specifically tricking a victim into opening a malicious file or clicking a malicious link. Microsoft has released updates ...

CVE-2026-97742

A stack-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code over a network. The vulnerability carries a CVSS 3.1 score of 8.8 (HIGH) . Microsoft has released updates to address this vulnerability, and users are encouraged to install them to mitigate ris...

CVE-2026-97741

A heap-based buffer overflow exists in Microsoft Office Excel , which allows an unauthorized attacker to achieve arbitrary code execution over a network. The vulnerability is associated with CWE-122 (Heap-based Buffer Overflow) and CWE-193 (Off-by-one Error). An attacker could exploit this to exe...

CVE-2026-97763

A heap-based buffer overflow exists in Microsoft Office Excel , which could allow an unauthorized attacker to achieve remote code execution over a network. To successfully exploit this vulnerability, an attacker would typically need to trick a victim into opening a malicious file or clicking a ma...

CVE-2026-97769

A heap-based buffer overflow vulnerability exists in Microsoft Office Excel , which can allow an unauthorized attacker to execute code over a network . The vulnerability is associated with CWE-122 (Heap-based Buffer Overflow) and CWE-20 (Improper Input Validation). Practical consequences include ...

CVE-2026-97748

A heap-based buffer overflow vulnerability exists in Microsoft Office Excel , which could allow an unauthorized attacker to achieve arbitrary code execution over a network. To successfully exploit this vulnerability, an attacker must typically trick a victim into opening a malicious file or click...

CVE-2026-97008

A buffer underwrite (buffer underflow) vulnerability exists in Microsoft Office Excel . This flaw allows an unauthorized attacker to execute arbitrary code over a network. Microsoft has released security updates to address this vulnerability; users are recommended to install the latest patches vi...

CVE-2026-97756

A heap-based buffer overflow exists in Microsoft Office Excel , which allows an unauthorized attacker to execute code over a network. Exploitation typically requires the victim to open a malicious file or click a malicious link. Microsoft has released updates to address this vulnerability; users ...

CVE-2026-97007

A heap-based buffer overflow exists in Microsoft Office Excel , potentially allowing an unauthorized attacker to execute arbitrary code over a network. The vulnerability is rated as HIGH severity (CVSS 3.1: 8.8) and requires user interaction to exploit. Microsoft has released official fixes to ad...

CVE-2026-97773

A heap-based buffer overflow vulnerability exists in Microsoft Office Excel , which could allow an unauthorized attacker to achieve arbitrary code execution over a network. The vulnerability's severity is rated as High (CVSS 3.1: 8.8) due to its potential for significant confidentiality, integrit...

EUVD-2026-100276

Heap-based buffer overflow in Microsoft Windows Media Foundation allows an unauthorized attacker to execute code over a network...

CVE-2026-96952

A Heap-based buffer overflow vulnerability exists in Microsoft Windows Media Foundation . This flaw could allow an unauthorized attacker to achieve remote code execution over a network. The vulnerability is characterized by a CVSS v3.1 score of 8.8 (High) , indicating significant impacts on confi...

CVE-2026-96202

A heap-based buffer overflow exists in the Windows Raw Image Extension . This vulnerability enables an unauthorized attacker to achieve remote code execution over a network. The issue is associated with CWE-122 . No specific exploit details or information regarding in-the-wild exploitation are pr...

CVE-2026-96938

A Heap-based buffer overflow exists in the Windows Distributed File System (DFS) . This vulnerability allows an authorized attacker to achieve local privilege escalation . The CVSS 3.1 score is 6.7 (Medium) , with high impact on confidentiality, integrity, and availability. Official fixes are ava...