CVE-2026-69997

Use after free in Remote Desktop Client allows an unauthorized attacker to execute code over a network...

CVE-2026-69985

Heap-based buffer overflow in Windows Libarchive allows an unauthorized attacker to execute code over a network...

CVE-2026-69988

Use after free in Remote Desktop Client allows an unauthorized attacker to execute code over a network...

CVE-2026-69943

Improper limitation of a pathname to a restricted directory 'path traversal' in Microsoft Office SharePoint allows an authorized attacker to execute code over a network...

CVE-2026-69886

Heap-based buffer overflow in Windows Imaging Component allows an unauthorized attacker to execute code over a network...

CVE-2026-69830

Concurrent execution using shared resource with improper synchronization 'race condition' in Windows DHCP Server allows an unauthorized attacker to execute code over a network...

CVE-2026-69765

Use after free in Windows Storport Miniport Driver allows an unauthorized attacker to execute code over a network...

CVE-2026-69634

Heap-based buffer overflow in Windows iSCSI allows an unauthorized attacker to execute code over a network...

CVE-2026-69639

Heap-based buffer overflow in Windows Libarchive allows an unauthorized attacker to execute code over a network...

CVE-2026-69521

Integer overflow or wraparound in Windows iSCSI allows an unauthorized attacker to execute code over a network...

CVE-2026-69326

Heap-based buffer overflow in Graphic Fonts allows an unauthorized attacker to execute code over a network...

CVE-2026-108467

Heap-based buffer overflow in Microsoft PostScript Printer Driver allows an authorized attacker to execute code over a network...

CVE-2026-108457

Out-of-bounds write in Microsoft Windows PDF allows an unauthorized attacker to execute code over a network...

CVE-2026-108460

Use after free in Windows Message Queuing allows an unauthorized attacker to execute code over a network...

CVE-2026-110111

Xen Orchestra before 6.9.0 contains an improper access control vulnerability that allows any authenticated user to become global administrator by abusing the unprotected vm.importFromEsxi and vm.importMultipleFromEsxi methods. Attackers can point xo-server at a malicious ESXi host serving a craft...

UBUNTU-CVE-2026-110111

Xen Orchestra before 6.9.0 contains an improper access control vulnerability that allows any authenticated user to become global administrator by abusing the unprotected vm.importFromEsxi and vm.importMultipleFromEsxi methods. Attackers can point xo-server at a malicious ESXi host serving a craft...

CVE-2026-105716

Heap-based buffer overflow in Microsoft Office Access allows an unauthorized attacker to execute code over a network...

CVE-2026-105714

Heap-based buffer overflow in Microsoft Office Access allows an unauthorized attacker to execute code over a network...

CVE-2026-105717

Heap-based buffer overflow in Microsoft Office Access allows an unauthorized attacker to execute code over a network...

CVE-2026-105718

Out-of-bounds read in Microsoft Office Excel allows an unauthorized attacker to execute code over a network...