CVE-2026-85339

A Remote Code Execution vulnerability exists in the Windows Routing and Remote Access Service (RRAS) . This flaw is caused by an Integer Underflow (CWE-191) and a Heap-based Buffer Overflow (CWE-122), which could allow an attacker to gain unauthorized access to a victim's machine. The vulnerabili...

CVE-2026-69886

A heap-based buffer overflow vulnerability exists in the Windows Imaging Component . This flaw allows an unauthorized attacker to achieve remote code execution over a network. The vulnerability has a CVSS 3.1 score of 9.8 (CRITICAL) . While the documents do not provide specific exploit links or v...

CVE-2026-84012

A double free vulnerability exists in the Remote Desktop Gateway Service . This flaw allows an unauthorized attacker to achieve remote code execution over a network. The vulnerability is associated with CWE-415 . While the specific software versions and detailed root causes are not explicitly lis...

CVE-2026-83929

An out-of-bounds write vulnerability exists in Windows GDI . This flaw could allow an unauthorized attacker to achieve remote code execution over a network. The vulnerability's severity is rated as HIGH with a CVSS 3.1 score of 8.8, requiring user interaction. Documentation does not provide speci...

CVE-2026-70275

A vulnerability exists in the Windows CD-ROM File System Driver due to an untrusted pointer dereference . This flaw could allow an unauthorized attacker to achieve remote code execution over a network. The vulnerability has a CVSS 3.1 base score of 8.8 (High) . No specific exploitations or in-the...

CVE-2026-70089

A heap-based buffer overflow vulnerability exists in the Windows GDI component. This flaw could allow an unauthorized attacker to achieve remote code execution over a network. The vulnerability is characterized by a HIGH base severity score of 8.8. No specific exploit details or patch versions ar...

CVE-2026-83869

A critical integer underflow (wrap or wraparound) vulnerability in the Windows Domain Name Service (DNS) Server allows an unauthorized attacker to achieve remote code execution over a network. This vulnerability, identified as CVE-2026-83869 , carries a CVSS v3.1 score of 9.8 , indicating a high ...

CVE-2026-83754

A heap-based buffer overflow vulnerability exists in OpenSSH for Windows , potentially allowing an unauthorized attacker to achieve remote code execution over a network. The vulnerability is confirmed to have a high severity (CVSS 3.1 score of 7.5) with network attack vectors and high impact on c...

CVE-2026-83748

A heap-based buffer overflow vulnerability exists in Windows Error Reporting . This flaw allows an unauthorized attacker to achieve remote code execution over a network. The vulnerability is rated with a CVSS score of 9.8 (CRITICAL), indicating a high level of severity with low attack complexity ...

CVE-2026-83693

A heap-based buffer overflow exists in Windows Error Reporting , which could allow an unauthorized attacker to achieve remote code execution over a network. The vulnerability is classified as CRITICAL with a CVSS score of 9.8. While the documents confirm the impact is the execution of arbitrary c...

CVE-2026-83688

A Heap-based buffer overflow exists in the Remote Desktop Client , which could allow an unauthorized attacker to execute code over a network . The vulnerability is associated with CWE-122 and CWE-190 . While the documents confirm the existence of the flaw and its potential for remote code executi...

CVE-2026-83642

A type confusion vulnerability exists in the Windows Domain Name Service (DNS Server). This flaw allows an unauthorized attacker to achieve remote code execution over a network. The vulnerability is categorized under CWE-843 . No specific exploit information or remediation steps are provided in t...

CVE-2026-69521

A Remote Code Execution (RCE) vulnerability exists in Windows iSCSI due to an integer overflow or wraparound condition. This flaw allows an unauthorized attacker to execute code over a network. The vulnerability is confirmed with a High base severity score of 8.8 . No specific exploit details or ...

CVE-2026-69634

A heap-based buffer overflow in Windows iSCSI allows an unauthorized attacker to achieve remote code execution over a network. This vulnerability is classified as CRITICAL with a CVSSv3.1 score of 9.80 , indicating a high risk to confidentiality, integrity, and availability. For actual abuse to o...

CVE-2026-70126

The Windows Bluetooth Port Driver contains an out-of-bounds read vulnerability (CWE-125) caused by improper input validation (CWE-20). This flaw allows an unauthorized attacker to achieve remote code execution over an adjacent network . The vulnerability has a high base severity score of 7.1. Off...

CVE-2026-70095

A heap-based buffer overflow in Windows iSCSI allows an unauthorized attacker to achieve remote code execution over a network. The vulnerability has a CVSS 3.1 base score of 7.5 (High) , where the attack vector is network-based, requires high complexity, and necessitates user interaction. While t...

CVE-2026-70096

A heap-based buffer overflow exists in the Windows Rich Text Edit Control , which could allow an unauthorized attacker to achieve Remote Code Execution (RCE) over a network. This vulnerability is rated with a CRITICAL CVSS score of 9.8 . Microsoft has released official updates to address this iss...

CVE-2026-70062

A double free vulnerability exists in Windows Libarchive , which could allow an unauthorized attacker to achieve remote code execution over a network. The vulnerability is characterized by a high base score of 8.1 with a network attack vector and high complexity. No specific exploit details or re...

CVE-2026-70058

The Windows DHCP Server is vulnerable to an out-of-bounds write (CWE-787) that allows an unauthorized attacker to execute code over a network. The vulnerability has a CVSS 3.1 base score of 7.5 (HIGH) , with a primary impact on availability . Remediation is available via an official fix provided ...

CVE-2026-69639

A heap-based buffer overflow vulnerability exists in Windows Libarchive , which allows an unauthorized attacker to achieve remote code execution over a network. The vulnerability is assigned a CVSS v3.1 score of 9.8 , indicating a critical risk level. Microsoft has released updates to address thi...