21199 matches found
CVE-2026-83952
CVE-2026-83952 is a heap-based buffer overflow in Windows Resilient File System (ReFS) that allows an authorized attacker to elevate privileges locally . The CVSS 3.1 score is 7.8 (HIGH) with the vector AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H , reflecting low attack complexity, no user interaction re...
EUVD-2026-73329
Heap-based buffer overflow in Virtual Hard Disk VHD Miniport Driver allows an authorized attacker to execute code locally...
CVE-2026-81355
A heap-based buffer overflow in the Virtual Hard Disk (VHD) Miniport Driver allows an authorized attacker to execute code locally. The vulnerability is rated CVSS 3.1 7.5 (HIGH) with the vector AV:L/AC:H/PR:H/UI:N/S:C/C:H/I:H/A:H , indicating a local attack vector with high complexity, high privi...
EUVD-2026-73324
Heap-based buffer overflow in Windows Work Folders allows an authorized attacker to elevate privileges locally...
EUVD-2026-73323
Heap-based buffer overflow in Remote Desktop Client allows an unauthorized attacker to execute code over a network...
CVE-2026-80074
CVE-2026-80074 is a heap-based buffer overflow in Microsoft Remote Desktop Client that allows an unauthorized attacker to achieve remote code execution over the network. The CVSS 3.1 score is 8.8 (HIGH) with a vector of AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H, meaning exploitation requires user inter...
CVE-2026-80077
CVE-2026-80077 is a heap-based buffer overflow in the Microsoft Remote Desktop Client that allows an unauthorized attacker to achieve remote code execution over a network. The CVSS v3.1 score is 8.8 (HIGH) , with an attack vector of network, low complexity, no privileges required, and user intera...
CVE-2026-68786
CVE-2026-68786 is a heap-based buffer overflow in Microsoft SQL Server that allows an authorized attacker (low privileges required) to achieve remote code execution over a network with no user interaction. The assigned CVSS 3.1 score is 8.8 (HIGH) with impacts of High across confidentiality, inte...
EUVD-2026-73318
Heap-based buffer overflow in SQL Server allows an authorized attacker to execute code over a network...
EUVD-2026-73317
Heap-based buffer overflow in SQL Server allows an authorized attacker to execute code over a network...
CVE-2026-78509
CVE-2026-78509 is a heap-based buffer overflow in Microsoft Office Outlook that allows an unauthorized, remote attacker to achieve code execution over a network with no user interaction. The CNA-assigned CVSS 3.1 score is 9.8 (Critical) , reflecting low attack complexity and full impact on confid...
EUVD-2026-73308
Heap-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code over a network...
CVE-2026-78510
CVE-2026-78510 is a heap-based buffer overflow in Microsoft Office Word that allows an unauthorized attacker to execute code over a network . The vulnerability is scored CVSS 9.8 (CRITICAL) with a vector of AV:N/AC:L/PR:N/UI:N, meaning it requires no user interaction or prior authentication. No p...
CVE-2026-78505
CVE-2026-78505 is a heap-based buffer overflow in Microsoft Office that allows an unauthorized attacker to execute code over a network. The vulnerability is rated CVSS 3.1 8.8 (HIGH) with a vector of AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H , meaning exploitation requires user interaction but no prior...
EUVD-2026-73307
Heap-based buffer overflow in Microsoft Office allows an unauthorized attacker to execute code over a network...
EUVD-2026-73304
Heap-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code over a network...
CVE-2026-78511
CVE-2026-78511 is a heap-based buffer overflow in Microsoft Office Word that allows an unauthorized attacker to achieve remote code execution over a network. The vulnerability requires user interaction (e.g., opening a crafted document), with no prior privileges needed and low attack complexity. ...
EUVD-2026-73293
Heap-based buffer overflow in Visual Studio allows an unauthorized attacker to execute code over a network...