CVE-2026-97009

A heap-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to achieve remote code execution locally. The vulnerability carries a CVSS v3.1 score of 7.8 (High) . Microsoft has released official updates to address this security flaw. Users are encouraged to install the l...

CVE-2026-97750

A stack-based buffer overflow vulnerability exists in Microsoft Office Excel , which allows an unauthorized attacker to achieve remote code execution over a network. The vulnerability is rated as HIGH severity (CVSS 8.8) and requires user interaction to exploit. Microsoft has released updates to ...

CVE-2026-97753

A heap-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to achieve Remote Code Execution (RCE) over a network. The vulnerability involves a heap-based buffer overflow and an integer overflow/wraparound (CWE-122, CWE-190). Exploitation requires user interaction , suc...

CVE-2026-97766

A Heap-based buffer overflow vulnerability in Microsoft Office Excel allows an unauthorized attacker to execute arbitrary code over a network. The severity is rated as High with a CVSS 3.1 score of 8.8. Microsoft has released updates to address this vulnerability; users are recommended to install...

CVE-2026-97001

A heap-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to achieve remote code execution locally. The vulnerability is confirmed by multiple sources, including NVD and Microsoft security advisories. To successfully exploit this, an attacker must trick the victim into...

CVE-2026-97017

A use after free vulnerability in Microsoft Office Excel allows an unauthorized attacker to achieve remote code execution over a network. The vulnerability has a CVSS v3.1 score of 8.8 (High) . To mitigate this risk, Microsoft has released updates; users are encouraged to install the latest secur...

CVE-2026-97749

A double free vulnerability in Microsoft Office Outlook allows an unauthorized attacker to achieve remote code execution over a network. This vulnerability has a CRITICAL CVSSv3.1 base score of 9.8 . Microsoft has released updates to address this issue; users are recommended to install the latest...

CVE-2026-96943

A vulnerability exists in the Windows Raw Image Extension due to an integer overflow or wraparound condition. This flaw allows an unauthorized attacker to achieve remote code execution over a network. The vulnerability is associated with CWE-190 (Integer Overflow or Wraparound) and CWE-122 (Heap-...

CVE-2026-97012

A stack-based buffer overflow in Microsoft Office Outlook allows an unauthorized attacker to achieve remote code execution over a network. The vulnerability has a High severity rating with a CVSS score of 8.8 . Microsoft has released security updates to address this issue, and users are encourage...

CVE-2026-96996

A heap-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code locally . The vulnerability's impact is categorized as Arbitrary code execution with a CVSS 3.1 base score of 7.8. To successfully exploit this vulnerability, an attacker typically requires the v...

CVE-2026-97016

A heap-based buffer overflow in Microsoft Office Outlook allows an unauthorized attacker to achieve remote code execution over a network. The vulnerability has a CRITICAL severity score of 9.8 . Microsoft has released updates to address this issue, and users are encouraged to install them via the...

CVE-2019-0708

CVE-2019-0708 Unauthenticated CVE-2019-0708 "BlueKeep" Scanner PoC by @JaGoTu and @zerosum0x0. Technical details: https://zerosum0x0.blogspot.com/2019/05/avoiding-dos-how-bluekeep-scanners-work.html Metasploit Module The Metasploit module has been pulled to rapid7:master. msf5 use...

CVE-2026-96867

A vulnerability exists in Windows NTFS involving an out-of-bounds read (CWE-125). This flaw allows an authorized attacker to achieve local code execution . The vulnerability is rated as HIGH severity with a CVSS 3.1 score of 7.8. Remediation is available via an official fix provided by Microsoft....

CVE-2026-96864

A double free vulnerability exists in the Microsoft Failover Cluster Virtual Driver . This flaw allows an unauthorized attacker to achieve remote code execution over a network. The vulnerability is classified as CRITICAL with a CVSS 3.1 score of 9.8 . While the documents confirm the impact is the...

CVE-2026-96220

The Windows Assigned Access feature contains an improper control of generation of code (code injection) vulnerability. This flaw allows an authorized attacker to perform a local privilege escalation . The vulnerability is associated with CWE-94 . No specific exploit links or exploit details are p...

CVE-2026-96219

A critical out-of-bounds write vulnerability exists in the Windows Local Security Authority Subsystem Service (LSASS) . This flaw allows an unauthorized attacker to achieve remote code execution over a network. The vulnerability is assigned a CVSS v3.1 score of 9.80 , indicating a high severity l...

CVE-2026-96224

An out-of-bounds write vulnerability exists in .NET , allowing an unauthorized attacker to achieve remote code execution over a network. The vulnerability has a CVSS v3.1 score of 8.80 (High), where the attack complexity is low, but user interaction is required. Exploitation details and specific ...

CVE-2026-88197

A heap-based buffer overflow exists in Microsoft Office , which could allow an unauthorized attacker to execute arbitrary code over a network. This vulnerability affects several products, including Word , Excel , Access , Outlook , Visio , SharePoint , and PowerPoint . To successfully exploit the...

CVE-2026-88202

A heap-based buffer overflow exists in Microsoft Office Word , potentially allowing an unauthorized attacker to achieve remote code execution over a network. The vulnerability is rated with a HIGH severity (CVSS 3.1 score of 8.8). To successfully exploit this, an attacker may require the victim t...

CVE-2026-88196

A heap-based buffer overflow vulnerability in Microsoft Office allows an unauthorized attacker to achieve remote code execution over a network. The vulnerability affects multiple products including Word , Excel , Access , Outlook , Visio , SharePoint , and PowerPoint , as well as subcomponents li...