CVE-2026-70268

A heap-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to achieve remote code execution over a network. To successfully exploit this vulnerability, an attacker must typically trick a victim into opening a malicious file or clicking a malicious link. Microsoft has re...

CVE-2026-70256

A heap-based buffer overflow vulnerability exists in Microsoft Office Outlook , which could allow an unauthorized attacker to achieve remote code execution over a network. The impact of this vulnerability is rated as HIGH with a CVSS score of 8.8 . Microsoft has released updates to address this i...

CVE-2026-70287

A heap-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to achieve arbitrary code execution over a network. The vulnerability carries a CVSS v3.1 score of 8.8 (High) , indicating that an attacker could exploit this to execute code with high impact on confidentiality,...

CVE-2026-70257

A heap-based buffer overflow vulnerability exists in Microsoft Office Outlook , which could allow an unauthorized attacker to execute arbitrary code over a network. The underlying cause involves a heap-based buffer overflow and an integer overflow or wraparound (CWE-122, CWE-190). Impacted system...

CVE-2026-70197

Out-of-bounds write in .NET allows an unauthorized attacker to execute code over a network...

CVE-2026-70174

Improperly implemented security check for standard in .NET allows an unauthorized attacker to execute code over a network...

EUVD-2026-99690

Improperly implemented security check for standard in .NET allows an unauthorized attacker to execute code over a network...

CVE-2026-70174

The .NET runtime is vulnerable to a Remote Code Execution (RCE) flaw due to an improperly implemented security check for standard . An unauthorized attacker can exploit this vulnerability over a network to execute arbitrary code. The vulnerability has a CVSS score of 8.80 and is categorized under...

CVE-2026-70147

A heap-based buffer overflow vulnerability exists in the Microsoft PostScript Printer Driver . This flaw allows an unauthorized attacker to achieve remote code execution over a network. The vulnerability is associated with a CRITICAL CVSS v3.1 score of 9.80 , indicating high impact on confidentia...

CVE-2026-70024

A stack-based buffer overflow exists in Windows Internet Information Services (IIS), which could allow an unauthorized attacker to execute arbitrary code over a network. The vulnerability is characterized by improper input validation (CWE-20) and has a CRITICAL severity score of 9.80. This flaw a...

CVE-2026-88102

A Use after free vulnerability exists in Windows Failover Cluster , which allows an unauthorized attacker to execute arbitrary code over a network. This vulnerability has a CRITICAL CVSS score of 9.80 . No specific exploit details, affected versions, or remediation steps are provided in the docum...

EUVD-2026-99638

Deserialization of untrusted data in .NET allows an unauthorized attacker to execute code over a network...

CVE-2026-87697

Deserialization of untrusted data in .NET allows an unauthorized attacker to execute code over a network...

CVE-2026-87697

The .NET component is vulnerable to a Remote Code Execution (RCE) vulnerability due to the deserialization of untrusted data . An unauthorized attacker can exploit this flaw over a network to execute arbitrary code. The vulnerability has been identified in the context of Microsoft Developer Tools...

CVE-2026-85928

A heap-based buffer overflow exists in the Windows Volume Manager Extension Driver , which may allow an unauthorized attacker to execute arbitrary code over a network. This vulnerability is rated as CRITICAL with a CVSS 3.1 score of 9.80 . No specific exploit details or remediation instructions a...

CVE-2026-85926

A Use after free vulnerability exists in the Windows Secure Socket Tunneling Protocol (SSTP) . This flaw allows an unauthorized attacker to achieve remote code execution over a network. The CVSS 3.1 score is 8.1 (High) , with high impact across confidentiality, integrity, and availability. Docume...

CVE-2026-88157

A heap-based buffer overflow exists in OpenSSH for Windows , which may allow an unauthorized attacker to execute code over a network . The vulnerability is confirmed and carries a High base severity score of 8.8. While the specific component or file is not detailed in the provided documents, the ...

CVE-2026-85809

A Remote Code Execution vulnerability exists in the Windows Routing and Remote Access Service (RRAS) . This flaw, identified as a Heap-based Buffer Overflow (CWE-122) , allows an attacker to gain unauthorized access to a victim's machine. The vulnerability is rated as CRITICAL with a CVSS v3.1 sc...

CVE-2026-85814

A heap-based buffer overflow exists in Microsoft Windows Media Foundation , which could allow an unauthorized attacker to achieve remote code execution over a network. The vulnerability has a CVSS v3.1 score of 9.8 (CRITICAL), indicating a high impact on confidentiality, integrity, and availabili...

CVE-2026-85792

A Remote Code Execution vulnerability exists in the Windows Routing and Remote Access Service (RRAS) . This flaw allows an attacker to gain unauthorized access to a victim's machine. The vulnerability is associated with CWE-416 (Use After Free) and has a CVSS score of 9.8 . Exploitation can occur...