5499 matches found
EUVD-2026-73377
Improper privilege management in SQL Server allows an authorized attacker to elevate privileges over a network...
CVE-2026-62813
CVE-2026-62813 is a use after free vulnerability in Windows Active Directory Domain Services (AD DS) that allows an authorized attacker (low privileges) to achieve remote code execution over a network. The CVSS 3.1 score is 7.5 (HIGH) with high complexity and no user interaction required. No expl...
EUVD-2026-73364
Heap-based buffer overflow in Windows Print Spooler Components allows an unauthorized attacker to execute code over a network...
EUVD-2026-73346
Heap-based buffer overflow in Windows Schannel allows an unauthorized attacker to execute code over a network...
EUVD-2026-73334
Interpretation conflict in Visual Studio Code allows an unauthorized attacker to bypass a security feature over a network...
CVE-2026-81378
An interpretation conflict in Visual Studio Code allows an unauthorized attacker to bypass a security feature over a network . The vulnerability is rated CVSS 3.1: 8.2 (HIGH) with the vector AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:L/A:N , indicating that exploitation requires user interaction , results in ...
EUVD-2026-73332
Incomplete comparison with missing factors in Visual Studio Code allows an unauthorized attacker to bypass a security feature over a network...
EUVD-2026-73330
Inconsistent interpretation of http requests 'http request/response smuggling' in Visual Studio Code allows an unauthorized attacker to bypass a security feature over a network...
CVE-2026-80074
CVE-2026-80074 is a heap-based buffer overflow in Microsoft Remote Desktop Client that allows an unauthorized attacker to achieve remote code execution over the network. The CVSS 3.1 score is 8.8 (HIGH) with a vector of AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H, meaning exploitation requires user inter...
CVE-2026-80077
CVE-2026-80077 is a heap-based buffer overflow in the Microsoft Remote Desktop Client that allows an unauthorized attacker to achieve remote code execution over a network. The CVSS v3.1 score is 8.8 (HIGH) , with an attack vector of network, low complexity, no privileges required, and user intera...
CVE-2026-78523
A use-after-free vulnerability in Windows DNS Server allows an unauthenticated, remote attacker to cause a denial of service over the network. NVD scores it 7.5 (HIGH) with low attack complexity, while Microsoft's CNA rates it 5.9 (MEDIUM) with high attack complexity. CISA's SSVC assessment indic...
CVE-2026-65669
CVE-2026-65669 is an elevation of privilege vulnerability in Microsoft SQL Server caused by improper neutralization of special elements in output used by a downstream component (injection). An unauthorized attacker can exploit it over a network with low complexity and no prior privileges , though...
EUVD-2026-73317
Heap-based buffer overflow in SQL Server allows an authorized attacker to execute code over a network...
EUVD-2026-73311
Stack-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code over a network...
CVE-2026-78510
A heap-based buffer overflow exists in Microsoft Office and Microsoft 365 Apps for Enterprise packages, specifically affecting Microsoft Word and Microsoft Outlook . This vulnerability allows an unauthorized attacker to execute arbitrary code. While the Initial Description mentions local executio...
CVE-2026-78502
An out-of-bounds read in Microsoft Office Word allows an unauthorized, remote attacker to disclose information over a network, provided the victim opens a crafted document (user interaction required). The CVSS 3.1 base score is 6.5 (MEDIUM) with high confidentiality impact but no integrity or ava...
EUVD-2026-73306
Out-of-bounds read in Microsoft Office Excel allows an unauthorized attacker to disclose information over a network...
EUVD-2026-73304
Heap-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code over a network...
CVE-2026-78511
CVE-2026-78511 is a heap-based buffer overflow in Microsoft Office Word that allows an unauthorized attacker to achieve remote code execution over a network. The vulnerability requires user interaction (e.g., opening a crafted document), with no prior privileges needed and low attack complexity. ...