CVE-2026-66818: Improper Privilege Management

Improper privilege management in SQL Server allows an authorized attacker to elevate privileges over a network...

CVE-2026-62813: Use After Free

Use after free in Active Directory Domain Services allows an authorized attacker to execute code over a network...

CVE-2026-68827: Integer Underflow (Wrap or Wraparound)

Integer underflow wrap or wraparound in Windows GDI+ allows an authorized attacker to elevate privileges over a network...

CVE-2026-68784: Out-of-bounds Read

Out-of-bounds read in SQL Server allows an authorized attacker to disclose information over a network...

CVE-2026-67643: Heap-based Buffer Overflow

Heap-based buffer overflow in SQL Server allows an unauthorized attacker to execute code over a network...

CVE-2026-67373: Heap-based Buffer Overflow

Heap-based buffer overflow in SQL Server allows an authorized attacker to execute code over a network...

CVE-2026-62762: NULL Pointer Dereference

Null pointer dereference in Active Directory Domain Services allows an authorized attacker to deny service over a network...

CVE-2026-77893: Out-of-bounds Read

Out-of-bounds read in Windows DHCP Server allows an unauthorized attacker to deny service over a network...

PT-2026-87822

Microsoft Security Advisory CVE-2026-71328 – .NET and Visual Studio Remote Code Execution Vulnerability Executive summary Microsoft is releasing this security advisory to provide information about a vulnerability in Microsoft.DiaSymReader.Native. This advisory also provides guidance on what...

PT-2026-87711

Name of the Vulnerable Software and Affected Versions Windows DWM Core Library affected versions not specified Description A use-after-free condition in the Windows DWM Core Library allows an authorized attacker to elevate privileges over a network. Use-after-free is a memory corruption issue tha...

PT-2026-87633

Name of the Vulnerable Software and Affected Versions Microsoft Office affected versions not specified Description A use after free condition exists in Microsoft Office, which could allow an unauthorized attacker to execute arbitrary code over a network. Use after free is a memory corruption issu...

CVE-2026-78511: Heap-based Buffer Overflow

Heap-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code over a network...

CVE-2026-72977: Out-of-bounds Read

Out-of-bounds read in Microsoft Office PowerPoint allows an unauthorized attacker to disclose information over a network...

CVE-2026-69491: Heap-based Buffer Overflow

Heap-based buffer overflow in Windows Microsoft DirectMusic allows an unauthorized attacker to execute code over a network...

PT-2026-87985

Name of the Vulnerable Software and Affected Versions Microsoft Graphics Component affected versions not specified Description A stack-based buffer overflow exists in the Microsoft Graphics Component. This flaw allows an unauthorized attacker to execute arbitrary code over a network. A stack-base...

CVE-2026-69386: Heap-based Buffer Overflow

Heap-based buffer overflow in Microsoft Windows Media Foundation allows an unauthorized attacker to execute code over a network...

PT-2026-88143

Heap-based buffer overflow in Remote Desktop Client allows an unauthorized attacker to execute code over a network...

PT-2026-87221

Name of the Vulnerable Software and Affected Versions SQL Server affected versions not specified Description Improper neutralization of special elements used in an SQL command, known as SQL injection, allows an authorized attacker to elevate privileges over a network. SQL injection is a technique...

PT-2026-88049

Name of the Vulnerable Software and Affected Versions Microsoft Office affected versions not specified Description Use of an uninitialized resource in Microsoft Office allows an unauthorized attacker to disclose sensitive information over a network, which can subsequently affect the system...

PT-2026-87701

Name of the Vulnerable Software and Affected Versions Windows TCP/IP affected versions not specified Description A use-after-free condition in Windows TCP/IP enables an authorized attacker to elevate privileges over a network. Use-after-free is a memory corruption issue that occurs when an...