886 matches found
CVE-2026-70587
CVE-2026-70587 is an information disclosure vulnerability in Windows Remote Desktop Protocol (RDP) caused by improper null termination . An unauthenticated remote attacker can exploit this over a network to disclose sensitive information , with no user interaction required. The CVSS 3.1 base scor...
CVE-2026-69730
CVE-2026-69730 is a use-after-free vulnerability in Windows DNS that allows an unauthorized, remote attacker to execute arbitrary code over the network without any user interaction or prior privileges. Microsoft rates it CVSS 9.8 (Critical) , with high impact on confidentiality, integrity, and av...
EUVD-2026-73068
Heap-based buffer overflow in Windows Imaging Component allows an unauthorized attacker to execute code over a network...
EUVD-2026-73053
Out-of-bounds write in RPC Runtime allows an unauthorized attacker to execute code over a network...
CVE-2026-69689
An out-of-bounds read in the Windows Win32K component allows an authorized attacker to elevate privileges over a network . The CVSS v3.1 score is 8.0 (HIGH) with vector AV:N/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H , indicating a network-based attack requiring low privileges and user interaction, with high...
EUVD-2026-73006
Use after free in Windows Remote Desktop Services allows an unauthorized attacker to execute code over a network...
CVE-2026-69418
Volume Manager Driver contains a heap-based buffer overflow that allows an authorized attacker to elevate privileges over a network. The vulnerability is rated CVSS 3.1: 8.0 (HIGH) with low attack complexity, low privileges required, and user interaction needed, yielding high impact to confidenti...
EUVD-2026-73229
Use of uninitialized resource in Windows Management Instrumentation allows an authorized attacker to disclose information over a network...
EUVD-2026-73195
Use after free in Windows Print Spooler Components allows an authorized attacker to elevate privileges over a network...
CVE-2026-62801
CVE-2026-62801 is a path traversal vulnerability in Windows PowerShell that allows an unauthorized, remote attacker to bypass a security feature. The improper limitation of a pathname to a restricted directory means an attacker can reference files or resources outside the intended directory. The ...
Windows Biometric Service Elevation of Privilege Vulnerability
Heap-based buffer overflow in Windows Biometric Service allows an authorized attacker to elevate privileges over a network...
Windows DHCP Server Denial of Service Vulnerability
Out-of-bounds read in Windows DHCP Server allows an unauthorized attacker to deny service over a network...
Microsoft Office Word Remote Code Execution Vulnerability
Stack-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code over a network...
Windows iSCSI Denial of Service Vulnerability
Out-of-bounds read in Windows iSCSI allows an unauthorized attacker to deny service over a network...
Windows Volume Manager Extension Driver Remote Code Execution Vulnerability
Heap-based buffer overflow in Windows Volume Manager Extension Driver allows an unauthorized attacker to execute code over a network...
Microsoft SQL Server Elevation of Privilege Vulnerability
Heap-based buffer overflow in SQL Server allows an authorized attacker to elevate privileges over a network...
Microsoft SQL Server Remote Code Execution Vulnerability
Heap-based buffer overflow in SQL Server allows an authorized attacker to execute code over a network...
Microsoft Office Excel Information Disclosure Vulnerability
Out-of-bounds read in Microsoft Office Excel allows an unauthorized attacker to disclose information over a network...