CVE-2026-96909

A heap-based buffer overflow in Windows BitLocker allows an unauthorized attacker to achieve remote code execution over a network. This vulnerability is classified with a CRITICAL CVSS score of 9.80 . While specific technical details regarding the underlying component or file are not provided bey...

CVE-2026-96251

A security flaw in Microsoft PowerShell arises from the reliance on untrusted inputs during a security decision. This vulnerability allows an unauthorized attacker to achieve remote code execution over a network. The impact is characterized by high levels of confidentiality, integrity, and availa...

CVE-2026-96320

A heap-based buffer overflow vulnerability exists in the Windows DHCP Server . This flaw allows an unauthorized attacker to achieve remote code execution over a network. The vulnerability is rated as CRITICAL with a CVSS score of 9.80 , as it can be exploited without prior authentication or user ...

CVE-2026-96230

The ASP.NET Core framework is vulnerable to a cross-site scripting (XSS) issue caused by the improper neutralization of input during web page generation. An unauthorized attacker can exploit this vulnerability over a network to achieve execution of arbitrary code . The vulnerability has a CVSS sc...

CVE-2026-96235

A vulnerability in .NET involves an out-of-bounds write that allows an unauthorized attacker to execute arbitrary code over a network. This issue is categorized under CWE-787 and has a CVSS 3.1 score of 8.8 (High) . Exploitation details are not provided in the documents, but the impact includes h...

CVE-2026-96237

The .NET framework is affected by a vulnerability involving the inclusion of functionality from untrusted control sphere (CWE-829). An unauthorized attacker can exploit this to execute arbitrary code over a network. The vulnerability has a CVSS v3.1 score of 7.5 (High) and requires user interacti...

CVE-2026-70007

A vulnerability exists in the .NET Framework where an out-of-bounds write flaw allows an unauthorized attacker to execute arbitrary code over a network. This issue has a CVSS 3.1 score of 8.8 (High severity) and was identified by Microsoft. The NCSC confirms that this vulnerability can result in ...

CVE-2026-70343

A heap-based buffer overflow vulnerability exists in the Microsoft MPEG-2 Video Extension . This flaw allows an unauthorized attacker to achieve remote code execution over a network. The vulnerability is associated with CWE-122 and carries a CVSS 3.1 base score of 8.8 (High) , indicating high imp...

CVE-2026-83520

The .NET framework is vulnerable to a deserialization of untrusted data flaw, which allows an unauthorized attacker to achieve execution of arbitrary code over a network. This vulnerability has a CVSSv3.1 score of 8.80 and is categorized under CWE-502 . While the provided documents confirm the im...

CVE-2026-70035

The ½.NET Framework is affected by a deserialization of untrusted data vulnerability, which allows an unauthorized attacker to execute code over a network . The vulnerability is classified with a CVSS score of 8.8 and results in the execution of arbitrary code . No specific exploit information or...

CVE-2026-88207

A heap-based buffer overflow in Microsoft Office PowerPoint allows an unauthorized attacker to achieve arbitrary code execution over a network. The vulnerability requires user interaction, as an attacker must trick a victim into opening a malicious file or clicking a malicious link. Microsoft has...

cve-2022-28944

CVE-2022-28944 EMCO Software Multiple Products Unauthenticated Update Remote Code Execution Vulnerability. Usage: python3 cve-2022-28944poc.py Details in the report at gerr.re. Steps to reproduce 1. Install an affected product of EMCO Software; 2. Set spoof storage.emcosoftware.com to our attacke...

CVE-2026-88166

Microsoft Office SharePoint is affected by CVE-2026-88166 , which involves an integer overflow or wraparound vulnerability. An authorized attacker can exploit this flaw to achieve arbitrary code execution over a network. Microsoft has released security updates to address this vulnerability; users...

CVE-2026-88185

A heap-based buffer overflow exists in Microsoft Office Word , which may allow an unauthorized attacker to execute code over a network. This vulnerability is associated with CWE-122 and has a CVSS v3.1 score of 8.1 (High). Microsoft has released updates to address this vulnerability. Affected sys...

CVE-2026-88186

A heap-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to achieve arbitrary code execution over a network. The vulnerability is associated with CWE-122 (Heap-based Buffer Overflow) and CWE-190 (Integer Overflow or Wraparound). Microsoft has released updates to addre...

CVE-2026-70215

A Use after free vulnerability in Microsoft Office PowerPoint allows an unauthorized attacker to execute code over a network. The vulnerability has a CVSS 3.1 score of 8.8 and carries a high severity for confidentiality, integrity, and availability. Exploitation typically requires a victim to ope...

CVE-2026-88163

An integer overflow or wraparound vulnerability in Microsoft Office SharePoint allows an authorized attacker to achieve remote code execution over a network. While the NCSC advisory lists this CVE under SharePoint, it notes the impact as "Not a Vulnerability" (translated from the source text), co...

CVE-2026-88144

A Use after free vulnerability in Microsoft Office PowerPoint allows an unauthorized attacker to execute arbitrary code over a network. This flaw could lead to a compromise of the victim's context, including the ability to execute code or access sensitive information. To successfully exploit this...

CVE-2026-70242

A heap-based buffer overflow vulnerability exists in Microsoft Office Outlook , allowing an unauthorized attacker to execute arbitrary code over a network. The vulnerability has a CRITICAL severity rating (CVSS 9.8). Microsoft has released official updates to address this issue, and users are adv...

CVE-2026-70153

A heap-based buffer overflow vulnerability exists in the Microsoft PostScript Printer Driver . This flaw allows an unauthorized attacker to achieve remote code execution over a network. The vulnerability is classified with a CVSS score of 9.80 , indicating a critical impact on confidentiality, in...