272142 matches found
CVE-2026-77481
CVE-2026-77481 is a heap-based buffer overflow in Microsoft SQL Server that allows an authorized attacker (low privileges required) to achieve remote code execution over a network . The CVSS 3.1 base score is 8.8 (HIGH) , with high impact to confidentiality, integrity, and availability, and no us...
EUVD-2026-73818
Numeric truncation error in Microsoft Office Word allows an unauthorized attacker to execute code over a network...
CVE-2026-78512
Microsoft Office Word is affected by a numeric truncation error that allows an unauthorized attacker to achieve remote code execution over a network. Exploitation requires user interaction (e.g., opening a crafted document) but no prior privileges. The CVSS 3.1 score is 8.8 (HIGH) with full impac...
CVE-2026-69595
CVE-2026-69595 is a use-after-free vulnerability in the Windows Services for NFS ONCRPC XDR Driver that allows an unauthorized, unauthenticated attacker to achieve remote code execution over the network. Microsoft rated it CRITICAL (CVSS 3.1: 9.8) with low attack complexity and no user interactio...
CVE-2026-78450
CVE-2026-78450 is a use-after-free vulnerability in the Windows Reliable Multicast Transport Driver (RMCAST) that allows an unauthorized, network-based attacker to achieve remote code execution . The vulnerability was reported by Microsoft (CNA source) and assigned a CVSS 3.1 base score of 8.1 (H...
EUVD-2026-73800
Untrusted pointer dereference in Windows Failover Cluster allows an unauthorized attacker to execute code over a network...
EUVD-2026-73799
Use after free in Reliable Multicast Transport Driver RMCAST allows an unauthorized attacker to execute code over a network...
EUVD-2026-73797
Use after free in Windows Services for NFS ONCRPC XDR Driver allows an unauthorized attacker to execute code over a network...
CVE-2026-78442
CVE-2026-78442 is a heap-based buffer overflow in Windows OLE DB that allows an unauthorized attacker to achieve remote code execution over a network with user interaction. The CNA-assigned CVSS 3.1 score is 8.8 (High) with full impact on confidentiality, integrity, and availability. CISA's SSVC ...
EUVD-2026-73795
Heap-based buffer overflow in Windows OLE DB allows an unauthorized attacker to execute code over a network...
EUVD-2026-73788
Integer overflow or wraparound in SQL Server allows an unauthorized attacker to execute code over a network...
CVE-2026-77486
CVE-2026-77486 is a remote code execution vulnerability in Microsoft SQL Server caused by an integer overflow or wraparound , allowing an unauthorized attacker to execute code over a network. The vulnerability requires user interaction (UI:R) but demands no prior privileges (PR:N) and has low att...
CVE-2026-71328
A heap-based buffer overflow in Visual Studio (and .NET , per the CVE record) allows an unauthorized attacker to execute code over a network, constituting a Remote Code Execution (RCE) vulnerability. The CVSS v3.1 base score is 8.8 (HIGH) , with the attack requiring user interaction but no prior ...
CVE-2026-73016
A heap-based buffer overflow in DirectWrite , a component of Microsoft's Graphics Component, allows an unauthorized attacker to achieve remote code execution over a network. The attack requires low complexity, no privileges, and user interaction, with full impact on confidentiality, integrity, an...
EUVD-2026-73779
Heap-based buffer overflow in Microsoft Graphics Component allows an unauthorized attacker to execute code over a network...
CVE-2026-73013
CVE-2026-73013 is a heap-based buffer overflow in Windows Imaging Component that allows an unauthorized, remote attacker to achieve code execution over a network. The Microsoft CNA assigns a CVSS 3.1 base score of 8.8 (HIGH) with the vector AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H, indicating a networ...
CVE-2026-73023
A heap-based buffer overflow in the Windows Imaging Component allows an unauthorized attacker to achieve remote code execution over a network . The vulnerability is rated CVSS 8.8 (HIGH) with a vector of AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H, indicating network reachability, low complexity, no priv...
EUVD-2026-73775
Use after free in Windows Failover Cluster allows an unauthorized attacker to execute code over a network...
CVE-2026-73006
CVE-2026-73006 is a stack-based buffer overflow in DirectWrite , a component of the Microsoft Graphics Component , that allows an unauthorized remote attacker to achieve remote code execution over a network. The flaw requires user interaction (e.g., opening a crafted file) but no prior authentica...