CVE-2026-88186

A heap-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to achieve arbitrary code execution over a network. The vulnerability is associated with CWE-122 (Heap-based Buffer Overflow) and CWE-190 (Integer Overflow or Wraparound). Microsoft has released updates to addre...

CVE-2026-88185

A heap-based buffer overflow exists in Microsoft Office Word , which may allow an unauthorized attacker to execute code over a network. This vulnerability is associated with CWE-122 and has a CVSS v3.1 score of 8.1 (High). Microsoft has released updates to address this vulnerability. Affected sys...

cve-2022-28944

CVE-2022-28944 EMCO Software Multiple Products Unauthenticated Update Remote Code Execution Vulnerability. Usage: python3 cve-2022-28944poc.py Details in the report at gerr.re. Steps to reproduce 1. Install an affected product of EMCO Software; 2. Set spoof storage.emcosoftware.com to our attacke...

CVE-2026-88166

Microsoft Office SharePoint is affected by CVE-2026-88166 , which involves an integer overflow or wraparound vulnerability. An authorized attacker can exploit this flaw to achieve arbitrary code execution over a network. Microsoft has released security updates to address this vulnerability; users...

CVE-2026-70215

A Use after free vulnerability in Microsoft Office PowerPoint allows an unauthorized attacker to execute code over a network. The vulnerability has a CVSS 3.1 score of 8.8 and carries a high severity for confidentiality, integrity, and availability. Exploitation typically requires a victim to ope...

CVE-2026-88163

An integer overflow or wraparound vulnerability in Microsoft Office SharePoint allows an authorized attacker to achieve remote code execution over a network. While the NCSC advisory lists this CVE under SharePoint, it notes the impact as "Not a Vulnerability" (translated from the source text), co...

CVE-2026-70242

A heap-based buffer overflow vulnerability exists in Microsoft Office Outlook , allowing an unauthorized attacker to execute arbitrary code over a network. The vulnerability has a CRITICAL severity rating (CVSS 9.8). Microsoft has released official updates to address this issue, and users are adv...

CVE-2026-88144

A Use after free vulnerability in Microsoft Office PowerPoint allows an unauthorized attacker to execute arbitrary code over a network. This flaw could lead to a compromise of the victim's context, including the ability to execute code or access sensitive information. To successfully exploit this...

CVE-2026-70153

A heap-based buffer overflow vulnerability exists in the Microsoft PostScript Printer Driver . This flaw allows an unauthorized attacker to achieve remote code execution over a network. The vulnerability is classified with a CVSS score of 9.80 , indicating a critical impact on confidentiality, in...

CVE-2026-69802

The Network Device Enrollment Service (NDES) is impacted by a weak authentication vulnerability (CWE-1390). This flaw allows an unauthorized attacker to achieve remote code execution over the network. The vulnerability carries a HIGH base severity score of 8.1. While the documents confirm the imp...

CVE-2026-88120

A Use after free vulnerability in the Windows DHCP Server allows an unauthorized attacker to execute code over a network. The vulnerability has a CVSS 3.1 base score of 8.1 and is categorized as HIGH severity. While the root cause is identified as a memory management issue, specific component det...

CVE-2026-70254

An out-of-bounds read vulnerability in Microsoft Office Excel allows an unauthorized attacker to execute code over a network. Exploitation of this vulnerability requires the victim to be tricked into opening a malicious file or clicking a malicious link. Microsoft has released updates to address ...

CVE-2026-88117

A Use after free vulnerability in the Windows DHCP Server allows an unauthorized attacker to execute arbitrary code over a network. The vulnerability is categorized under CWE-416 and has a HIGH base severity score of 8.1. While the impact includes high confidentiality, integrity, and availability...

CVE-2026-88119

A Use after free vulnerability exists in the Windows DHCP Server , which could allow an unauthorized attacker to execute code over a network . The vulnerability is associated with CWE-416 and has a CVSS 3.1 base score of 8.1 (High) . No specific exploit information or affected versions are provid...

CVE-2026-88112

A DNS Server vulnerability exists due to an untrusted pointer dereference (CWE-822). This flaw allows an unauthorized attacker to achieve remote code execution over a network. The vulnerability has a CVSS 3.1 base score of 8.8 (High) . While the impact covers high levels of confidentiality, integ...

CVE-2026-88116

A DNS Server vulnerability (CVE-2026-88116) involves an untrusted pointer dereference , which could allow an unauthorized attacker to achieve remote code execution over a network. The vulnerability is associated with Windows systems. The CVSS 3.1 score is 8.8 (High) , indicating high impact on co...

CVE-2026-88114

A vulnerability exists in the DNS Server (Windows Domain Name Service) where an untrusted pointer dereference allows an unauthorized attacker to achieve remote code execution over a network. This flaw has a CVSS v3.1 score of 8.8 (High) . While the impact includes high severity for confidentialit...

CVE-2026-70297

A vulnerability in Skype for Business and Microsoft Lync allows an authorized attacker to execute code over a network via absolute path traversal . This flaw leads to arbitrary code execution with a CVSS score of 8.80. Microsoft has released updates to address this vulnerability, and users are en...

CVE-2026-70571

A stack-based buffer overflow exists in Microsoft Exchange Server , which may allow an unauthorized attacker to achieve remote code execution over a network. The vulnerability's severity is rated as High (CVSS 3.1 score of 8.1), potentially impacting confidentiality, integrity, and availability. ...

CVE-2026-70250

A Use after free vulnerability in the Windows DHCP Client allows an unauthorized attacker to execute code over an adjacent network . The vulnerability is associated with CWE-416 (Use After Free) and CWE-362 (Race Condition). While the specific root cause is linked to concurrent execution using sh...