5496 matches found
EUVD-2026-73801
Use after free in Reliable Multicast Transport Driver RMCAST allows an unauthorized attacker to execute code over a network...
EUVD-2026-73800
Untrusted pointer dereference in Windows Failover Cluster allows an unauthorized attacker to execute code over a network...
CVE-2026-78445
CVE-2026-78445 is a use-after-free vulnerability in the Windows Services for NFS ONCRPC XDR Driver , allowing an unauthorized attacker to execute code over a network. Microsoft rates it CVSS 9.8 (Critical) with no privileges required and no user interaction. The vulnerability affects the ONCRPC X...
CVE-2026-78442
CVE-2026-78442 is a heap-based buffer overflow in Windows OLE DB that allows an unauthorized attacker to achieve remote code execution over a network with user interaction. The CNA-assigned CVSS 3.1 score is 8.8 (High) with full impact on confidentiality, integrity, and availability. CISA's SSVC ...
EUVD-2026-73796
Out-of-bounds read in Windows OLE DB allows an unauthorized attacker to disclose information over a network...
CVE-2026-77911
CVE-2026-77911 is an out-of-bounds read vulnerability in Microsoft Office Word that allows an unauthorized attacker to disclose information over a network . The flaw requires user interaction and has a CVSS 3.1 score of 6.5 (MEDIUM) with high confidentiality impact but no integrity or availabilit...
EUVD-2026-73794
Out-of-bounds read in SQL Server allows an unauthorized attacker to disclose information over a network...
EUVD-2026-73790
Null pointer dereference in Microsoft Office Word allows an unauthorized attacker to execute code over a network...
CVE-2026-77901
A null pointer dereference in Microsoft Office Word allows an unauthorized attacker to execute code over a network. The vulnerability requires user interaction (e.g., opening a crafted document) but no prior authentication. CISA rates the technical impact as total while noting exploitation is cur...
CVE-2026-73016
A heap-based buffer overflow in DirectWrite , a component of Microsoft's Graphics Component, allows an unauthorized attacker to achieve remote code execution over a network. The attack requires low complexity, no privileges, and user interaction, with full impact on confidentiality, integrity, an...
EUVD-2026-73777
Heap-based buffer overflow in Windows Imaging Component allows an unauthorized attacker to execute code over a network...
CVE-2026-73010
CVE-2026-73010 is a use-after-free vulnerability in Windows Failover Cluster that allows an unauthenticated, remote attacker to achieve code execution over the network. Microsoft rates it CVSS 9.8 (Critical) with low attack complexity, no required privileges, and high impact to confidentiality, i...
EUVD-2026-73754
Improper resolution of path equivalence in Windows URL Moniker allows an unauthorized attacker to bypass a security feature over a network...
EUVD-2026-73753
Heap-based buffer overflow in Graphic Fonts allows an unauthorized attacker to execute code over a network...
CVE-2026-72987
CVE-2026-72987 is a use after free vulnerability in Windows DNS that allows an unauthorized attacker to execute code over a network, resulting in full compromise of confidentiality, integrity, and availability. The CVSS 3.1 base score is 8.1 (HIGH) , with a network attack vector, high complexity,...
EUVD-2026-73743
Use after free in Windows DNS allows an unauthorized attacker to execute code over a network...
CVE-2026-72975
CVE-2026-72975 is an out-of-bounds read in Microsoft Office PowerPoint that allows an unauthenticated remote attacker to disclose information over a network. The vulnerability requires user interaction (e.g., opening a crafted file) but no prior privileges. CVSS 3.1 scores it 6.5 (Medium) , with ...
EUVD-2026-73733
Buffer over-read in Microsoft Office Excel allows an unauthorized attacker to disclose information over a network...
CVE-2026-72973
Microsoft Office Word is affected by a heap-based buffer overflow that can lead to Remote Code Execution over a network. An unauthorized attacker can execute code with no prior privileges, though user interaction is required (e.g., opening a crafted document). The vulnerability is rated CVSS 8.8 ...