CVE-2026-62823 Windows DHCP Server Remote Code Execution Vulnerability

...

CVE-2026-62782 Windows SMB Client Information Disclosure Vulnerability

...

CVE-2026-61921 Windows Remote Desktop Client Information Disclosure Vulnerability

...

CVE-2026-61920 Windows DNS Server Remote Code Execution Vulnerability

...

CVE-2026-65789 Windows DNS Server Remote Code Execution Vulnerability

...

CVE-2026-65785

Summary of CVE-2026-65785 : The Windows DHCP Client is affected by a vulnerability described as “Uncontrolled resource consumption,” enabling an unauthenticated attacker on an adjacent network to cause a Denial of Service . The CVSS 3.1 vector indicates: Attack Vector: Adjacent , Attack Complexit...

CVE-2026-65785 Windows DHCP Client Denial of Service Vulnerability

...

CVE-2026-62893 Windows Deployment Services TFTP Server Remote Code Execution Vulnerability

...

CVE-2026-62820 Windows DNS Server Remote Code Execution Vulnerability

...

CVE-2026-62815

CVE-2026-62815 describes a use-after-free in Microsoft QUIC that could allow a remote attacker to execute code over the network. The connected sources confirm the vulnerability type but do not specify affected products, versions, exploit details, or available patches. No remediation steps are pro...

CVE-2026-62795 Windows LDAP - Lightweight Directory Access Protocol Remote Code Execution Vulnerability

...

CVE-2026-62787

CVE-2026-62787 is a remote code execution vulnerability in Windows DNS Server caused by a use-after-free condition. An authenticated attacker could execute code over the network on a targeted host. CVSS v3.1 base score 7.5 (HIGH): AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H. The connected sources confirm...

CVE-2026-62750

CVE-2026-62750 affects Windows HTTP Protocol Stack (http.sys). A partial string comparison vulnerability in the stack enables an unauthenticated attacker on an adjacent network to perform tampering. The CVSS vector (AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N) indicates adjacent access with no privileges...

CVE-2026-62750 Windows HTTP Protocol Stack Tampering Vulnerability

...

EUVD-2026-56372

Partial string comparison in Windows HTTP Protocol Stack allows an unauthorized attacker to perform tampering over an adjacent network...

CVE-2026-62750 Windows HTTP Protocol Stack Tampering Vulnerability

...

CVE-2026-62716

CVE-2026-62716 involves an integer underflow in Windows DHCP Server that permits information disclosure to an adjacent network. The affected component is Windows DHCP Server; the root cause is a wrap/wraparound error enabling data disclosure, with attack vector described as adjacent network acces...

CVE-2026-61924

Technical details about CVE-2026-61924 are not publicly provided in the supplied documents; monitor official advisories from Microsoft and NVD for updates, affected products, and remediations.

org.apache.artemis:artemis-server: org.apache.activemq:artemis-server: Apache Artemis, Apache ActiveMQ Artemis: Message injection and exfiltration due to missing authentication

A flaw was found in Apache Artemis and Apache ActiveMQ Artemis. An unauthenticated remote attacker can exploit a missing authentication for critical function vulnerability by using the Core protocol. This allows the attacker to force a target broker to establish an outbound Core federation...

undertow-core: Undertow: Authentication Bypass via AJP ssl_cert/is_ssl Forgery

the Undertow AJP listener honours forged sslcert and isssl AJP attributes without requiring any shared-secret authentication. This enables an unauthenticated attacker with direct TCP access to port 8009 to bypass CLIENT-CERT authentication by injecting a forged X.509 certificate via the AJP...