EUVD-2026-73584

Heap-based buffer overflow in Windows NTFS allows an authorized attacker to execute code locally...

CVE-2026-69709

A heap-based buffer overflow in Windows NTFS allows an authorized attacker with low privileges and no user interaction to execute code locally. The vulnerability is rated CVSS 3.1 7.8 (HIGH) with full impact on confidentiality, integrity, and availability. The Microsoft reference points to a spec...

CVE-2026-69715

CVE-2026-69715 is an out-of-bounds read in Windows Direct Show that allows an unauthorized, unauthenticated attacker to achieve remote code execution over a network. The vulnerability is rated CVSS 9.8 (CRITICAL) (AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H), indicating high impact to confidentiality, in...

EUVD-2026-73570

Out-of-bounds read in Windows Direct Show allows an unauthorized attacker to execute code over a network...

CVE-2026-69620

CVE-2026-69620 is a stack-based buffer overflow in Windows DHCP Server that allows an unauthorized attacker to achieve remote code execution over a network. The CVSS 3.1 score is 8.1 (HIGH) with a vector of AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H, indicating network-based exploitation with high compl...

EUVD-2026-73567

Stack-based buffer overflow in Windows DHCP Server allows an unauthorized attacker to execute code over a network...

EUVD-2026-73562

Heap-based buffer overflow in Windows Kernel allows an unauthorized attacker to execute code over a network...

CVE-2026-54611 InstantCMS has Remote Code Execution in package installer

InstantCMS is a free and open source content management system. Versions prior to 2.18.2 have a Remote Code Execution RCE issue that allows remote authenticated attackers to execute any PHP code via the component installer. It is possible to upload a malicious component into the server, however, ...

CVE-2026-54611

InstantCMS , a free and open-source content management system, contains a Remote Code Execution vulnerability in its component installer in versions prior to 2.18.2 . A remote authenticated attacker can upload a malicious component; although the component is not formally installed, the uploaded P...

CVE-2026-54611 InstantCMS has Remote Code Execution in package installer

InstantCMS is a free and open source content management system. Versions prior to 2.18.2 have a Remote Code Execution RCE issue that allows remote authenticated attackers to execute any PHP code via the component installer. It is possible to upload a malicious component into the server, however, ...

CVE-2026-69669

CVE-2026-69669 is a heap-based buffer overflow in the Windows Kernel that allows an unauthorized attacker to achieve remote code execution over a network. The Microsoft-provided CVSS 3.1 score is 8.8 (HIGH) with the vector AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H, indicating a network-reachable attack...

EUVD-2026-73544

Heap-based buffer overflow in Windows NTFS allows an unauthorized attacker to execute code with a physical attack...

CVE-2026-69566

CVE-2026-69566 is a heap-based buffer overflow in Windows NTFS that allows an unauthorized attacker to execute code with a physical attack . The assigned CVSS 3.1 score is 6.8 (Medium) with a vector of AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H, reflecting that exploitation requires physical access but ...

CVE-2026-69586

CVE-2026-69586 is a critical (CVSS 9.8) integer overflow or wraparound vulnerability in Microsoft Windows PDF that allows an unauthorized attacker to execute code over a network with no privileges required and no user interaction. The attack vector is network-based with low complexity , yielding ...

EUVD-2026-73542

Integer overflow or wraparound in Microsoft Windows PDF allows an unauthorized attacker to execute code over a network...

CVE-2026-69538

CVE-2026-69538 is an out-of-bounds read vulnerability in the Windows Spaceport.sys driver. An attacker with low local privileges can exploit this to execute code on the target system, leading to high impact on confidentiality, integrity, and availability (CVSS 3.1 score 7.8 – HIGH ). The attack v...

EUVD-2026-73537

Out-of-bounds read in Windows Spaceport.sys allows an authorized attacker to execute code locally...

EUVD-2026-73533

Use after free in Windows Remote Desktop Services allows an authorized attacker to execute code over a network...

CVE-2026-69536

CVE-2026-69536 is a use-after-free vulnerability in Windows Remote Desktop Services that allows an authorized attacker to achieve remote code execution over a network. The CVSS v3.1 score is 7.1 (HIGH) , with a vector of AV:N/AC:H/PR:L/UI:R/S:U/C:H/I:H/A:H, indicating that while exploitation requ...

CVE-2026-69546

CVE-2026-69546 is a use-after-free vulnerability in Windows Active Directory Domain Services that allows an unauthorized attacker to achieve remote code execution over the network. The CVSS 3.1 score is 8.1 (High) with a vector of AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H, indicating high attack comple...