401004 matches found
CVE-2026-83789
A heap-based buffer overflow exists in the Windows SMB Client component. This vulnerability allows an unauthorized attacker to elevate privileges over a network. The CVSS 3.1 score is 8.8 (High) , indicating significant impact on confidentiality, integrity, and availability. While an official fix...
CVE-2026-83788
A buffer over-read vulnerability exists in the Windows RNDIS component, specifically within rndismp6.sys . This flaw allows an unauthorized attacker to perform an information disclosure by conducting a physical attack . No specific exploit details or in-the-wild exploitation information are provi...
CVE-2026-83767
A stack-based buffer overflow vulnerability exists in the Windows Installer component. This flaw allows an authorized attacker to perform a local privilege escalation on affected systems. The vulnerability is characterized by a High severity base score of 7.8. No specific details regarding exploi...
CVE-2026-83778
A heap-based buffer overflow vulnerability exists in the Microsoft Internet Messaging API . This flaw allows an unauthorized attacker to achieve remote code execution over a network. The vulnerability has a high severity rating (CVSS 8.8) and requires user interaction. No specific exploit details...
CVE-2026-83770
A heap-based buffer overflow exists in Windows Text Shaping that allows an unauthorized attacker to execute arbitrary code over a network. This vulnerability is classified as CRITICAL with a CVSS score of 9.8. Systems connected to public networks are at a higher risk, as the vulnerability can be ...
CVE-2026-83757
A heap-based buffer overflow exists in the Windows Win32K component. This vulnerability allows an authorized attacker to achieve local privilege escalation . The official remediation is an OFFICIAL_FIX provided by Microsoft. No specific exploit code or in-the-wild exploitation details are provide...
CVE-2026-83736
A heap-based buffer overflow exists in the Windows Kernel . This vulnerability allows an authorized attacker to perform a local privilege escalation . The official CVSS 3.1 score is 5.5 (Medium) , with a high impact on availability. Remediation via an official fix is available through Microsoft's...
CVE-2026-83725
A heap-based buffer overflow exists in the Microsoft Windows Search Component , which could allow an unauthorized attacker to execute code over a network. The vulnerability is associated with CWE-122 and CWE-190 . Detailed information regarding specific affected versions, the exact root cause, or...
CVE-2026-83716
A heap-based buffer overflow vulnerability exists in Windows Hyper-V . This flaw allows an authorized attacker to achieve local code execution . While the specific component or file causing the overflow is not detailed in the provided documents, the vulnerability has a HIGH base severity score of...
CVE-2026-83724
A heap-based buffer overflow exists in Windows Management Instrumentation , which allows an authorized attacker to achieve local privilege elevation . The vulnerability has a CVSS 3.1 base score of 7.0 (High) . No specific exploit details, exploit links, or specific software versions are provided...
CVE-2026-83685
A buffer over-read vulnerability exists in the Windows IKE Extension . This flaw allows an authorized attacker to perform a denial of service (DoS) over the network. The vulnerability is confirmed by Microsoft metrics with a CVSS score of 6.5. No specific exploit details or remediation steps are ...
CVE-2026-83698
A heap-based buffer overflow exists in the Windows Client-Side Caching (CSC) Service . This vulnerability allows an authorized attacker to achieve local privilege escalation . No specific exploit information or in-the-wild exploitation details are provided in the documents. Remediation involves a...
CVE-2026-83709
A heap-based buffer overflow vulnerability exists in Windows NTLM . This flaw allows an authorized attacker to achieve local privilege elevation . While the vulnerability's technical impact is high regarding confidentiality, integrity, and availability, the documents do not provide specific explo...
CVE-2026-83680
A heap-based buffer overflow vulnerability exists in Windows Installer . This flaw allows an authorized attacker to achieve local privilege elevation . The vulnerability has a CVSS 3.1 base score of 7.0 (HIGH) . While the technical root cause is identified as a heap overflow, no specific exploit ...
CVE-2026-83643
A stack-based buffer overflow vulnerability exists in Windows Error Reporting , which could allow an unauthorized attacker to execute code over a network . The vulnerability has a CVSS 3.1 base score of 8.8 (High) , indicating significant impact on confidentiality, integrity, and availability. No...
CVE-2026-83640
A heap-based buffer overflow exists in Windows NTFS that allows an authorized attacker to achieve local code execution . The vulnerability is rated with a High severity (CVSS 3.1 score of 7.8). No specific exploit details or in-the-wild exploitation information are provided in the documents. Reme...
CVE-2026-83639
A heap-based buffer overflow vulnerability exists in the Windows Sensor Data Service . This flaw allows an authorized attacker to achieve local privilege escalation . While the CVSS 3.1 score of 7.8 indicates a high severity, specific exploitation details or in-the-wild occurrences are not provid...
CVE-2026-83638
A heap-based buffer overflow exists in the Windows USB Driver . This vulnerability allows an authorized attacker to perform a local privilege elevation . No specific versions are listed as affected, and no exploit details or proof-of-concept code are provided in the documents. Remediation involve...
CVE-2026-83588
A heap-based buffer overflow exists in the Windows USB Driver . This vulnerability allows an authorized attacker to achieve local privilege escalation . No specific exploit details or in-the-wild exploitation information are provided in the documents.
CVE-2026-83579
A heap-based buffer overflow exists in the Windows Smart Card component. This vulnerability allows an authorized attacker to achieve local privilege escalation . No specific software versions, root causes, or exploit details are provided in the documents, but an official fix is indicated by the r...