CVE-2026-95904

A buffer over-read vulnerability exists in the Windows Event Logging Service . This flaw allows an authorized attacker to perform a local information disclosure. The vulnerability is assigned a Medium severity (CVSS 3.1 score of 5.5) and is characterized by low attack complexity and low privilege...

CVE-2026-96995

A stack-based buffer overflow exists in Microsoft Office Word , which allows an authorized attacker to achieve local privilege escalation . The vulnerability is associated with CWE-121 (Stack-based Buffer Overflow) and CWE-197 (Numeric Truncation Error). Microsoft has released updates to address ...

CVE-2026-96868

A heap-based buffer overflow exists in the Windows Kernel , which could allow an authorized attacker to achieve local privilege escalation . The vulnerability is characterized by high complexity and requires local access. No specific exploit details or information regarding in-the-wild exploitati...

CVE-2026-96856

A heap-based buffer overflow exists in Windows Management Instrumentation , which allows an authorized attacker to achieve local privilege elevation . The vulnerability is categorized as HIGH severity with a CVSS 3.1 score of 7.8 . No specific exploit details or evidence of in-the-wild exploitati...

CVE-2026-96863

A heap-based buffer overflow vulnerability exists in the Windows Storage Port Driver . This flaw allows an unauthorized attacker to elevate privileges via a physical attack . The provided documents do not specify the exact affected versions or the specific function/file involved. No information r...

CVE-2026-96851

A buffer over-read vulnerability exists in Windows Management Instrumentation . This flaw allows an authorized attacker to disclose information locally on the affected system. The vulnerability is classified as an information disclosure issue with a CVSS 3.1 score of 5.5 (Medium) . While the docu...

CVE-2026-96848

A buffer over-read vulnerability exists in the Windows Win32 Kernel Subsystem . This flaw allows an authorized attacker to perform a local information disclosure , potentially exposing sensitive data. While the CVSS v3.1 score is 5.5 (Medium) , the vulnerability has a high confidentiality impact....

CVE-2026-96312

A heap-based buffer overflow exists in the Windows Kernel that enables an authorized attacker to perform a local privilege escalation . The vulnerability is categorized under CWE-122 . While the specific component or function is not detailed in the provided documents, the impact involves a high s...

CVE-2026-96318

A Heap-based buffer overflow in Windows Resume allows an authorized attacker to elevate privileges locally . The vulnerability has a CVSS 3.1 base score of 7.8 (High) and is categorized under CWE-122 . While the specific component or file is not detailed, the impact includes high levels of confid...

CVE-2026-96248

A stack-based buffer overflow exists in the Windows Host Guardian Service , which could allow an unauthorized attacker to perform a denial of service (DoS) attack over a network. The vulnerability is categorized under CWE-121 and has been assigned a High base severity score of 7.5. Remediation is...

CVE-2026-96217

A heap-based buffer overflow exists in Windows NTFS that allows an authorized attacker to elevate privileges locally . The vulnerability is associated with CWE-122 (Heap-based Buffer Overflow) and CWE-190 (Integer Overflow or Wraparound). No specific exploit information or details on in-the-wild ...

CVE-2026-88202

A heap-based buffer overflow exists in Microsoft Office Word , potentially allowing an unauthorized attacker to achieve remote code execution over a network. The vulnerability is rated with a HIGH severity (CVSS 3.1 score of 8.8). To successfully exploit this, an attacker may require the victim t...

CVE-2026-88196

A heap-based buffer overflow vulnerability in Microsoft Office allows an unauthorized attacker to achieve remote code execution over a network. The vulnerability affects multiple products including Word , Excel , Access , Outlook , Visio , SharePoint , and PowerPoint , as well as subcomponents li...

CVE-2026-88197

A heap-based buffer overflow exists in Microsoft Office , which could allow an unauthorized attacker to execute arbitrary code over a network. This vulnerability affects several products, including Word , Excel , Access , Outlook , Visio , SharePoint , and PowerPoint . To successfully exploit the...

CVE-2026-88167

A buffer over-read vulnerability exists in Microsoft Office Word , which could allow an unauthorized attacker to disclose information over a network. The vulnerability is associated with CWE-126 and has been addressed by Microsoft in a released update. Details regarding specific affected versions...

CVE-2026-88201

A buffer over-read vulnerability in Microsoft Office Excel allows an unauthorized attacker to disclose sensitive information over a network. This vulnerability impacts the confidentiality of data within the victim's context. Microsoft has released official updates to address this issue; users are...

CVE-2026-70301

A heap-based buffer overflow exists in Microsoft Office Word , which could allow an unauthorized attacker to execute arbitrary code over a network. To successfully exploit this vulnerability, an attacker must trick a victim into opening a malicious file or clicking a malicious link. Microsoft has...

CVE-2026-88156

A stack-based buffer overflow in Microsoft Office Outlook allows an unauthorized attacker to achieve remote code execution over a network. The vulnerability is confirmed as a critical issue with a CVSS 3.1 base score of 9.8 . Exploitation of similar Office vulnerabilities typically requires a vic...

CVE-2026-83891

A stack-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute arbitrary code over a network. The vulnerability stems from improper input validation and can result in arbitrary code execution within the victim's context. To successfully exploit this, an attacker...

CVE-2026-88155

A heap-based buffer overflow exists in Microsoft Office SharePoint , which allows an authorized attacker to achieve arbitrary code execution over a network. The vulnerability has a CVSS v3.1 base score of 8.80 (High). Microsoft has released security updates to address this vulnerability; users ar...