CVE-2026-85353: Out-of-bounds Read

Out-of-bounds read in Windows Print Spooler Components allows an unauthorized attacker to disclose information over a network...

CVE-2026-85363: Integer Overflow or Wraparound

Integer overflow or wraparound in .NET Framework allows an unauthorized attacker to elevate privileges over a network...

CVE-2026-83759: Improper Control of Generation of Code

Improper control of generation of code 'code injection' in Windows Encrypting File System EFS allows an authorized attacker to execute code over a network...

CVE-2026-83862: Use After Free

Use after free in Windows Network Load Balancing allows an unauthorized attacker to execute code over an adjacent network...

CVE-2026-85808: Out-of-bounds Read

Out-of-bounds read in Windows Routing and Remote Access Service RRAS allows an unauthorized attacker to deny service over a network...

CVE-2026-83795: Heap-based Buffer Overflow

Heap-based buffer overflow in Windows IKE Extension allows an unauthorized attacker to deny service over a network...

CVE-2026-83945: Heap-based Buffer Overflow

Heap-based buffer overflow in SQL Server allows an authorized attacker to execute code over a network...

CVE-2026-84007: Out-of-bounds Read

Out-of-bounds read in Remote Desktop Gateway Service allows an authorized attacker to disclose information over a network...

CVE-2026-88136: Improper Resolution of Path Equivalence

Improper resolution of path equivalence in WebDAV allows an authorized attacker to execute code over a network...

CVE-2026-85931: Heap-based Buffer Overflow

Heap-based buffer overflow in Windows Distributed File System DFS allows an authorized attacker to execute code over a network...

CVE-2026-85936: Double Free

Double free in Windows Shell allows an unauthorized attacker to execute code over a network...

CVE-2026-87716: Heap-based Buffer Overflow

Heap-based buffer overflow in Windows Storage Spaces Controller allows an unauthorized attacker to deny service over a network...

CVE-2026-87696: Improper Verification of Cryptographic Signature

Improper verification of cryptographic signature in Microsoft Exchange Server allows an authorized attacker to elevate privileges over a network...

CVE-2026-88084: Allocation of Resources Without Limits or Throttling

Allocation of resources without limits or throttling in SQL Server allows an authorized attacker to deny service over a network...

CVE-2026-97781: Improper Neutralization of Special Elements used in a Command

Improper neutralization of special elements used in a command 'command injection' in Microsoft Office OneNote allows an unauthorized attacker to execute code over a network...

CVE-2026-88209: Improper Neutralization of Input During Web Page Generation

Improper neutralization of input during web page generation 'cross-site scripting' in Microsoft Office SharePoint allows an authorized attacker to perform spoofing over a network...

CVE-2026-88833: Integer Underflow (Wrap or Wraparound)

A flaw was found in BusyBox's udhcpc DHCP client. When processing raw DHCP packets, the client replaces the validated packet length with an attacker-controlled value from the IP header without re-validating the minimum size. This leads to an integer underflow when subtracting header sizes, causin...

CVE-2026-88204: Improper Neutralization of Input During Web Page Generation

Improper neutralization of input during web page generation 'cross-site scripting' in Microsoft Office SharePoint allows an authorized attacker to perform spoofing over a network...

CVE-2026-88171: Double Free

Double free in Windows DHCP Server allows an unauthorized attacker to execute code over a network...

CVE-2026-94520: Use of Externally-Controlled Format String

Use of externally-controlled format string in SQL Server allows an authorized attacker to deny service over a network...