CVE-2026-70031

A heap-based buffer overflow vulnerability exists in Windows iSCSI , which could allow an unauthorized attacker to cause a denial of service over a network. The vulnerability has a CVSS 3.1 base score of 7.5, reflecting a high impact on availability. No specific exploit details or exploit code ar...

CVE-2026-70024

A stack-based buffer overflow exists in Windows Internet Information Services (IIS), which could allow an unauthorized attacker to execute arbitrary code over a network. The vulnerability is characterized by improper input validation (CWE-20) and has a CRITICAL severity score of 9.80. This flaw a...

EUVD-2026-99674

Heap-based buffer overflow in Windows iSCSI allows an unauthorized attacker to deny service over a network...

CVE-2026-70131

A heap-based buffer overflow exists in Microsoft Windows Media Foundation . This vulnerability allows an unauthorized attacker to achieve local privilege elevation . While the specific component or file causing the overflow is not detailed in the provided documents, the impact is categorized as H...

CVE-2026-69949

A heap-based buffer overflow vulnerability exists in Windows Client for NFS . This flaw allows an authorized attacker to perform a local privilege escalation . The provided documents do not specify the exact component or file involved, nor do they provide specific remediation steps or exploit det...

CVE-2026-88143

A heap-based buffer overflow exists in the Windows Storage Spaces Controller . This vulnerability allows an authorized attacker to perform a local privilege escalation . The technical root cause is associated with CWE-122 (Heap-based Buffer Overflow) and CWE-191 (Integer Underflow). No specific e...

CVE-2026-87707

A heap-based buffer overflow in the Windows Fax and Scan Service allows an authorized attacker to achieve local privilege escalation . The vulnerability has a high CVSS 3.1 base score of 7.8 . Official remediation is available through a Microsoft fix .

CVE-2026-87716

A heap-based buffer overflow vulnerability exists in the Windows Storage Spaces Controller . This flaw allows an unauthorized attacker to perform a denial of service (DoS) attack over a network. The CVSS 3.1 score of 7.5 (High) reflects an attack vector that requires no privileges or user interac...

CVE-2026-87706

A heap-based buffer overflow vulnerability exists in the Windows Storage Spaces Controller . This flaw allows an authorized attacker to achieve local privilege escalation . The vulnerability has a HIGH severity score of 7.8. No specific version numbers, exploit links, or detailed remediation step...

CVE-2026-85935

A buffer over-read vulnerability exists in the Windows USB Driver . This flaw allows an authorized attacker to disclose information locally on the affected system. The vulnerability is categorized under CWE-126 and has a CVSS 3.1 base score of 5.5, indicating a MEDIUM severity. Official remediati...

CVE-2026-85931

A heap-based buffer overflow in the Windows Distributed File System (DFS) allows an authorized attacker to achieve remote code execution over a network. The vulnerability impacts the Windows environment and carries a high severity score of 8.8. No specific exploit links or manual workarounds are ...

CVE-2026-85928

A heap-based buffer overflow exists in the Windows Volume Manager Extension Driver , which may allow an unauthorized attacker to execute arbitrary code over a network. This vulnerability is rated as CRITICAL with a CVSS 3.1 score of 9.80 . No specific exploit details or remediation instructions a...

CVE-2026-85867

A heap-based buffer overflow exists in the Windows Remote Access Connection Manager . This vulnerability allows an authorized attacker to achieve local privilege elevation . No specific exploit details or remediation versions are provided in the documentation.

CVE-2026-83888

A buffer over-read vulnerability exists in the Windows CD-ROM Driver . This flaw allows an unauthorized attacker to elevate privileges over a network. The vulnerability is listed with a Medium severity (CVSS 3.1 score of 6.5), indicating that while it allows for privilege escalation, it requires ...

CVE-2026-70262

A heap-based buffer overflow vulnerability exists in WebDAV , which could allow an unauthorized attacker to elevate privileges over a network. The provided documents do not specify the exact affected software version, specific component, or root cause. Exploitation details and specific remediatio...

CVE-2026-70210

A heap-based buffer overflow in Windows OLE DB allows an unauthorized attacker to achieve elevation of privilege over a network. The vulnerability (CWE-122, CWE-125) has a CVSS 3.1 base score of 8.8 . Exploitation details are not provided in the documents. Remediation via an official fix is indic...

CVE-2026-70238

A heap-based buffer overflow exists in the Windows Storage Spaces Controller . This vulnerability allows an authorized attacker to achieve local privilege elevation . No specific version numbers, underlying code files, or remediation steps are provided in the documents. Exploitation details are n...

CVE-2026-88168

A heap-based buffer overflow exists in the Windows Bind Filter Driver . This vulnerability enables an authorized attacker to achieve local privilege elevation . While the technical root cause is identified as a heap overflow, specific details regarding the vulnerable function or file are not prov...

CVE-2026-70048

A heap-based buffer overflow exists in the Windows Resilient File System (ReFS) . This vulnerability allows an authorized attacker to achieve local privilege elevation . The technical root cause is a memory management issue within the ReFS component. Information regarding specific affected versio...

CVE-2026-70041

A buffer over-read vulnerability exists in the Windows CD-ROM Driver . This flaw allows an authorized attacker to disclose information locally on the affected system. The CVSS 3.1 score is 5.5 (Medium) , reflecting a local attack vector requiring low privileges. Specific details regarding the und...