811 matches found
EUVD-2026-73287
Heap-based buffer overflow in Microsoft Office allows an unauthorized attacker to execute code over a network...
CVE-2026-77893
CVE-2026-77893 is an out-of-bounds read in Windows DHCP Server that allows an unauthorized, remote attacker to cause a denial of service over the network. The CVSS 3.1 base score is 7.5 (High) , with a vector of network attack, low complexity, no privileges required, no user interaction, and high...
CVE-2026-77886
CVE-2026-77886 is an out-of-bounds read in Windows DHCP Server that allows an unauthorized, network-based attacker to cause a denial of service . The vulnerability requires no user interaction or prior authentication, with a CVSS 3.1 score of 7.5 (HIGH) — driven entirely by the availability impac...
CVE-2026-77505
CVE-2026-77505 is a use after free vulnerability in Windows DNS Server that allows an unauthorized, unauthenticated attacker to execute code over a network. The flaw is scored 8.1 (HIGH) under CVSS 3.1, with a network attack vector, high attack complexity, no required privileges, and high impact ...
CVE-2026-77495
CVE-2026-77495 is a heap-based buffer overflow in Windows Imaging Component that allows an unauthorized attacker to execute code over a network. The vulnerability is rated CVSS 3.1: 8.8 (HIGH) with vector AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H, meaning it is exploitable over the network with low com...
EUVD-2026-73249
Out-of-bounds read in Windows DHCP Server allows an unauthorized attacker to disclose information over a network...
CVE-2026-69778
CVE-2026-69778 is a heap-based buffer overflow in Microsoft Office Access that allows an unauthorized attacker to execute code over a network. The CVSS v3.1 score is 8.8 (HIGH) with a network vector, low complexity, no required privileges, but user interaction required . CISA's SSVC assessment in...
EUVD-2026-73150
Stack-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code over a network...
CVE-2026-69722
Microsoft Office Word is affected by a stack-based buffer overflow that enables an unauthorized attacker to achieve remote code execution over a network . The vulnerability requires user interaction (e.g., opening a crafted document) but needs no prior authentication. The CVSS 3.1 score is 8.8 (H...
CVE-2026-69518
CVE-2026-69518 is a heap-based buffer overflow in Windows Remote Desktop that allows an unauthorized attacker to execute code over a network. The vulnerability is classified with CVSS 3.1 score 8.8 (HIGH) , with a vector of AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H , indicating network-reachable attack...
CVE-2026-68887
CVE-2026-68887 is an out-of-bounds read in Windows Message Queuing Queue Manager that allows an unauthorized, network-based attacker to trigger a denial of service . The vulnerability requires no prior authentication or user interaction and carries a CVSS 3.1 base score of 7.5 (HIGH) , with impac...
CVE-2026-70587
CVE-2026-70587 is an information disclosure vulnerability in Windows Remote Desktop Protocol (RDP) caused by improper null termination . An unauthenticated remote attacker can exploit this over a network to disclose sensitive information , with no user interaction required. The CVSS 3.1 base scor...
CVE-2026-69730
CVE-2026-69730 is a use-after-free vulnerability in Windows DNS that allows an unauthorized, remote attacker to execute arbitrary code over the network without any user interaction or prior privileges. Microsoft rates it CVSS 9.8 (Critical) , with high impact on confidentiality, integrity, and av...
EUVD-2026-73068
Heap-based buffer overflow in Windows Imaging Component allows an unauthorized attacker to execute code over a network...
EUVD-2026-73053
Out-of-bounds write in RPC Runtime allows an unauthorized attacker to execute code over a network...
CVE-2026-69689
An out-of-bounds read in the Windows Win32K component allows an authorized attacker to elevate privileges over a network . The CVSS v3.1 score is 8.0 (HIGH) with vector AV:N/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H , indicating a network-based attack requiring low privileges and user interaction, with high...
EUVD-2026-73006
Use after free in Windows Remote Desktop Services allows an unauthorized attacker to execute code over a network...
CVE-2026-69418
Volume Manager Driver contains a heap-based buffer overflow that allows an authorized attacker to elevate privileges over a network. The vulnerability is rated CVSS 3.1: 8.0 (HIGH) with low attack complexity, low privileges required, and user interaction needed, yielding high impact to confidenti...