Microsoft SQL Server Remote Code Execution Vulnerability

Heap-based buffer overflow in SQL Server allows an authorized attacker to execute code over a network...

Microsoft Office Word Remote Code Execution Vulnerability

Numeric truncation error in Microsoft Office Word allows an unauthorized attacker to execute code over a network...

Microsoft Dynamics 365 On-Premises Remote Code Execution Vulnerability

Deserialization of untrusted data in Microsoft Dynamics 365 allows an authorized attacker to execute code over a network...

Microsoft Office Remote Code Execution Vulnerability

Use after free in Microsoft Office allows an unauthorized attacker to execute code over a network...

Windows Hyper-V Remote Code Execution Vulnerability

Stack-based buffer overflow in Windows Hyper-V allows an unauthorized attacker to execute code over a network...

Windows Media Player Remote Code Execution Vulnerability

Heap-based buffer overflow in Windows Media Player allows an unauthorized attacker to execute code over a network...

Windows Routing and Remote Access Service (RRAS) Remote Code Execution Vulnerability

Remote Code Execution in Windows Routing and Remote Access Service RRAS allows attacker to gain an unauthorized access to victim's machine...

Windows DNS Server Remote Code Execution Vulnerability

Use after free in Windows DNS allows an unauthorized attacker to execute code over a network...

Windows Text Shaping Remote Code Execution Vulnerability

Heap-based buffer overflow in Windows Text Shaping allows an unauthorized attacker to execute code over a network...

Windows RNDIS Remote Code Execution Vulnerability

Heap-based buffer overflow in Windows RNDIS allows an unauthorized attacker to execute code over a network...

.NET and Visual Studio Remote Code Execution Vulnerability

Heap-based buffer overflow in Visual Studio allows an unauthorized attacker to execute code over a network...

DirectWrite Remote Code Execution Vulnerability

Stack-based buffer overflow in Microsoft Graphics Component allows an unauthorized attacker to execute code over a network...

Microsoft WDAC OLE DB provider for SQL Remote Code Execution Vulnerability

Heap-based buffer overflow in Microsoft WDAC OLE DB provider for SQL allows an unauthorized attacker to execute code over a network...

Windows Event Logging Service Remote Code Execution Vulnerability

Out-of-bounds read in Windows Event Logging Service allows an unauthorized attacker to execute code over a network...

Microsoft Windows Media Foundation Remote Code Execution Vulnerability

Heap-based buffer overflow in Microsoft Windows Media Foundation allows an unauthorized attacker to execute code over a network...

Windows DHCP Server Remote Code Execution Vulnerability

Heap-based buffer overflow in Windows DHCP Server allows an authorized attacker to execute code over an adjacent network...

CVE-2026-75021

fastify-cli starts the Node.js Inspector when a debug flag is used, but it ignores the explicit bind address the user supplies and binds the Inspector to a broadly reachable address instead of the intended loopback. As a result the debugging interface can be exposed beyond the local machine, and...

CVE-2026-75021 fastify-cli vulnerable to remote code execution via ignored explicit Inspector bind address

fastify-cli starts the Node.js Inspector when a debug flag is used, but it ignores the explicit bind address the user supplies and binds the Inspector to a broadly reachable address instead of the intended loopback. As a result the debugging interface can be exposed beyond the local machine, and...

CVE-2026-75021

fastify-cli (versions 1.5.0 through 8.0.1) starts the Node.js Inspector when a debug flag is used, but ignores the explicit bind address the user supplies, binding the Inspector to a broadly reachable address instead of the intended loopback. Because the Inspector protocol permits arbitrary code ...

CVE-2026-75021 fastify-cli vulnerable to remote code execution via ignored explicit Inspector bind address

fastify-cli starts the Node.js Inspector when a debug flag is used, but it ignores the explicit bind address the user supplies and binds the Inspector to a broadly reachable address instead of the intended loopback. As a result the debugging interface can be exposed beyond the local machine, and...