EUVD-2026-73207

Heap-based buffer overflow in Microsoft Standard XPS allows an authorized attacker to elevate privileges locally...

CVE-2026-68890

CVE-2026-68890 is a heap-based buffer overflow in Microsoft Standard XPS that allows an authorized local attacker to escalate privileges . The vulnerability is scored CVSS 3.1: 7.8 (HIGH) with a vector of AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H, reflecting low attack complexity, low privileges requir...

EUVD-2026-73208

Heap-based buffer overflow in Microsoft Standard XPS allows an authorized attacker to elevate privileges over a network...

CVE-2026-69271

A heap-based buffer overflow in Microsoft Standard XPS allows an authorized attacker to elevate privileges over a network with user interaction required . The vulnerability is scored CVSS 3.1: 8.0 (HIGH) with high impact to confidentiality, integrity, and availability. CISA's SSVC assessment indi...

EUVD-2026-73203

Heap-based buffer overflow in Microsoft Standard XPS allows an authorized attacker to elevate privileges locally...

EUVD-2026-73199

Heap-based buffer overflow in Windows Program Compatibility Assistant Service allows an authorized attacker to elevate privileges locally...

CVE-2026-68845

CVE-2026-68845 is a heap-based buffer overflow in the Windows Program Compatibility Assistant Service that allows an authorized attacker to perform local privilege escalation . Microsoft rates it HIGH severity (CVSS 3.1: 7.8) with a local attack vector, low complexity, low privileges required, an...

EUVD-2026-73196

Heap-based buffer overflow in Windows NTFS allows an authorized attacker to elevate privileges locally...

EUVD-2026-73194

Heap-based buffer overflow in Windows NTFS allows an unauthorized attacker to execute code with a physical attack...

CVE-2026-68787

A heap-based buffer overflow in Microsoft SQL Server allows an authorized attacker with low privileges to execute code locally. The flaw requires no user interaction and results in high impact to confidentiality, integrity, and availability (CVSS 3.1 base score 7.8 – HIGH , vector AV:L/AC:L/PR:L/...

CVE-2026-68785

Microsoft SQL Server is affected by a heap-based buffer overflow that allows an authorized attacker (high privileges required) to execute code over a network. The CVSS v3.1 score is 4.9 (Medium) , reflecting a network attack vector with low complexity, high privileges required, and no user intera...

EUVD-2026-73189

Heap-based buffer overflow in SQL Server allows an authorized attacker to execute code over a network...

EUVD-2026-73185

Heap-based buffer overflow in SQL Server allows an authorized attacker to execute code over a network...

EUVD-2026-73182

Heap-based buffer overflow in SQL Server allows an authorized attacker to execute code over a network...

EUVD-2026-73175

Heap-based buffer overflow in SQL Server allows an unauthorized attacker to execute code over a network...

CVE-2026-77482

CVE-2026-77482 is a heap-based buffer overflow in Microsoft SQL Server that allows an unauthorized attacker to achieve remote code execution over a network. The CVSS 3.1 score is 8.8 (High) with vector AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H, indicating low attack complexity but required user interac...

CVE-2026-69522

Heap-based buffer overflow in Visual Studio allows an unauthorized attacker to execute code over a network...

EUVD-2026-73167

Heap-based buffer overflow in Microsoft Windows Media Foundation allows an unauthorized attacker to execute code over a network...

CVE-2026-62744

A heap-based buffer overflow in Microsoft Windows Media Foundation allows an unauthorized attacker to achieve remote code execution over a network. The vulnerability requires user interaction but no prior authentication (CVSS 3.1 base score: 8.8 – HIGH ). No specific affected version range or pat...

libyang: libyang: Denial of Service or arbitrary code execution via maliciously crafted LYB binary blob

A flaw was found in libyang, a YANG data modeling language library. An integer overflow in the lybreadstring function can lead to a heap buffer overflow when parsing a maliciously crafted LYB binary blob. A remote attacker, by supplying this malicious LYB data to any libyang consumer such as a...