CVE-2026-69722

Stack-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code over a network...

CVE-2026-69641

Missing authorization in Microsoft Exchange Server allows an authorized attacker to elevate privileges over a network...

CVE-2026-69631

Integer overflow or wraparound in Windows DNS allows an unauthorized attacker to deny service over a network...

CVE-2026-69397

Use after free in OpenSSH for Windows allows an unauthorized attacker to execute code over a network...

CVE-2026-69332

Out-of-bounds read in Windows NTFS allows an authorized attacker to elevate privileges over a network...

CVE-2026-67638

Heap-based buffer overflow in SQL Server allows an authorized attacker to execute code over a network...

CVE-2026-67645

Out-of-bounds read in SQL Server allows an authorized attacker to disclose information over a network...

CVE-2026-67641

Integer overflow or wraparound in SQL Server allows an authorized attacker to deny service over a network...

CVE-2026-68775

Heap-based buffer overflow in SQL Server allows an authorized attacker to execute code over a network...

CVE-2026-78522

CVE-2026-78522 is an out-of-bounds read vulnerability in Microsoft Office Word that allows an unauthorized attacker to disclose information over a network . The CVSS 3.1 score is 6.5 (Medium) with a vector of AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N, meaning exploitation requires user interaction (e.g...

EUVD-2026-73820

Out-of-bounds read in Microsoft Office Word allows an unauthorized attacker to disclose information over a network...

EUVD-2026-73819

Use after free in Microsoft Office Word allows an unauthorized attacker to execute code over a network...

EUVD-2026-73811

Authorization bypass through user-controlled key in Visual Studio Code allows an unauthorized attacker to bypass a security feature over a network...

CVE-2026-78462

CVE-2026-78462 is an authorization bypass through a user-controlled key in Visual Studio Code that allows an unauthenticated network attacker to bypass a security feature . The underlying weakness is the use of a user-controllable key in an authorization check, enabling remote exploitation with l...

CVE-2026-77480

SQL Server is affected by an elevation of privilege vulnerability caused by insufficient granularity of access control . An authorized attacker with low privileges can exploit the flaw over a network to elevate their access, resulting in high impact to confidentiality, integrity, and availability...

CVE-2026-73025

CVE-2026-73025 is a Security Feature Bypass vulnerability in Windows iSCSI , rooted in weak authentication that allows an unauthorized attacker to bypass a security feature over a network. The vulnerability carries a CVSS 3.1 score of 9.8 (CRITICAL) with a network attack vector, low complexity, n...

EUVD-2026-73774

Stack-based buffer overflow in Microsoft Graphics Component allows an unauthorized attacker to execute code over a network...

CVE-2026-73009

This use-after-free vulnerability affects Windows Secure Socket Tunneling Protocol (SSTP) , allowing an unauthorized attacker to achieve remote code execution over a network with low attack complexity and no required privileges or user interaction . The CVSS 3.1 score is 9.8 (Critical) with high ...

CVE-2026-72977

CVE-2026-72977 is an out-of-bounds read vulnerability in Microsoft Office PowerPoint that allows an unauthorized, network-based attacker to disclose information . The attack requires user interaction (e.g., opening a crafted file) but no prior authentication. CVSS 3.1 base score is 6.5 (MEDIUM) w...

CVE-2026-69805

CVE-2026-69805 is an elevation of privilege vulnerability in Microsoft .NET , caused by external control of a file name or path . An unauthorized network-based attacker can exploit this to escalate privileges, with high impact on confidentiality, integrity, and availability. The CVSS 3.1 score is...