CVE-2026-69722

Microsoft Office Word is affected by a stack-based buffer overflow that enables an unauthorized attacker to achieve remote code execution over a network . The vulnerability requires user interaction (e.g., opening a crafted document) but needs no prior authentication. The CVSS 3.1 score is 8.8 (H...

CVE-2026-69518

CVE-2026-69518 is a heap-based buffer overflow in Windows Remote Desktop that allows an unauthorized attacker to execute code over a network. The vulnerability is classified with CVSS 3.1 score 8.8 (HIGH) , with a vector of AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H , indicating network-reachable attack...

CVE-2026-68887

CVE-2026-68887 is an out-of-bounds read in Windows Message Queuing Queue Manager that allows an unauthorized, network-based attacker to trigger a denial of service . The vulnerability requires no prior authentication or user interaction and carries a CVSS 3.1 base score of 7.5 (HIGH) , with impac...

CVE-2026-70587

CVE-2026-70587 is an information disclosure vulnerability in Windows Remote Desktop Protocol (RDP) caused by improper null termination . An unauthenticated remote attacker can exploit this over a network to disclose sensitive information , with no user interaction required. The CVSS 3.1 base scor...

CVE-2026-69730

CVE-2026-69730 is a use-after-free vulnerability in Windows DNS that allows an unauthorized, remote attacker to execute arbitrary code over the network without any user interaction or prior privileges. Microsoft rates it CVSS 9.8 (Critical) , with high impact on confidentiality, integrity, and av...

EUVD-2026-73068

Heap-based buffer overflow in Windows Imaging Component allows an unauthorized attacker to execute code over a network...

EUVD-2026-73053

Out-of-bounds write in RPC Runtime allows an unauthorized attacker to execute code over a network...

CVE-2026-69689

An out-of-bounds read in the Windows Win32K component allows an authorized attacker to elevate privileges over a network . The CVSS v3.1 score is 8.0 (HIGH) with vector AV:N/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H , indicating a network-based attack requiring low privileges and user interaction, with high...

EUVD-2026-73006

Use after free in Windows Remote Desktop Services allows an unauthorized attacker to execute code over a network...

CVE-2026-69418

Volume Manager Driver contains a heap-based buffer overflow that allows an authorized attacker to elevate privileges over a network. The vulnerability is rated CVSS 3.1: 8.0 (HIGH) with low attack complexity, low privileges required, and user interaction needed, yielding high impact to confidenti...

EUVD-2026-73229

Use of uninitialized resource in Windows Management Instrumentation allows an authorized attacker to disclose information over a network...

EUVD-2026-73195

Use after free in Windows Print Spooler Components allows an authorized attacker to elevate privileges over a network...

CVE-2026-62801

CVE-2026-62801 is a path traversal vulnerability in Windows PowerShell that allows an unauthorized, remote attacker to bypass a security feature. The improper limitation of a pathname to a restricted directory means an attacker can reference files or resources outside the intended directory. The ...

Windows DHCP Server Denial of Service Vulnerability

Out-of-bounds read in Windows DHCP Server allows an unauthorized attacker to deny service over a network...

Microsoft Office Outlook Remote Code Execution Vulnerability

Heap-based buffer overflow in Microsoft Office Outlook allows an unauthorized attacker to execute code over a network...

Microsoft SQL Server Elevation of Privilege Vulnerability

Improper neutralization of special elements in output used by a downstream component 'injection' in SQL Server allows an unauthorized attacker to elevate privileges over a network...

Microsoft Office Word Remote Code Execution Vulnerability

Stack-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code over a network...

Windows DNS Server Remote Code Execution Vulnerability

Use after free in Windows DNS allows an unauthorized attacker to execute code over a network...

Windows Biometric Service Elevation of Privilege Vulnerability

Heap-based buffer overflow in Windows Biometric Service allows an authorized attacker to elevate privileges over a network...

Windows HTTP Print Provider Remote Code Execution Vulnerability

Heap-based buffer overflow in Windows HTTP Print Provider allows an authorized attacker to execute code over a network...