CVE-2026-28618: Heap-based Buffer Overflow

In decfrmprepare of oapv.c, there is a possible OOB write due to a heap buffer overflow. This could lead to remote code execution with no additional execution privileges needed. User interaction is not needed for exploitation...

CVE-2026-70570: Use After Free

Remote Code Execution in Windows Routing and Remote Access Service RRAS allows attacker to gain an unauthorized access to victim's machine...

PT-2026-87531

Heap-based buffer overflow in Microsoft Windows Media Foundation allows an unauthorized attacker to execute code over a network...

PT-2026-87657

Stack-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code over a network...

CVE-2026-78521: Heap-based Buffer Overflow

Heap-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code over a network...

CVE-2026-49879: Out-of-bounds Write

In multiple functions of rwt3t.cc, there is a possible out of bounds write due to an integer overflow. This could lead to remote code execution with no additional execution privileges needed. User interaction is not needed for exploitation...

CVE-2026-77493: Double Free

Double free in Microsoft Graphics Component allows an unauthorized attacker to execute code over a network...

CVE-2026-77901: NULL Pointer Dereference

Null pointer dereference in Microsoft Office Word allows an unauthorized attacker to execute code over a network...

CVE-2026-69522

Heap-based buffer overflow in Visual Studio allows an unauthorized attacker to execute code over a network...

CVE-2026-71328: Heap-based Buffer Overflow

Heap-based buffer overflow in Visual Studio allows an unauthorized attacker to execute code over a network...

CVE-2026-49919: Integer Overflow or Wraparound

In ttfacecolrblendlayer of ttcolr.c, there is a possible remote code execution due to an integer overflow. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation...

PT-2026-87705

Heap-based buffer overflow in Windows RNDIS allows an unauthorized attacker to execute code over a network...

PT-2026-87988

🚨 HIGH: CVE-2026-78444 CVSS 8.1 Untrusted pointer dereference in Windows Failover Cluster enables remote code execution over network. No authentication required. Patch immediately. CVE Vulnerability PatchNow ThreatIntel DFIR https://t.co/JlgAg4R9uL...

PT-2026-87954

Heap-based buffer overflow in Windows Imaging Component allows an unauthorized attacker to execute code over a network...

PT-2026-87874

Remote Code Execution in Windows Routing and Remote Access Service RRAS allows attacker to gain an unauthorized access to victim's machine...

PT-2026-87987

Heap-based buffer overflow in Windows OLE DB allows an unauthorized attacker to execute code over a network...

CVE-2026-81955: Heap-based Buffer Overflow

Heap-based buffer overflow in Microsoft Graphics Component allows an unauthorized attacker to execute code over a network...

PT-2026-88093

Heap-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code over a network...

CVE-2026-81951: Heap-based Buffer Overflow

Heap-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code locally...

CVE-2026-69514: Heap-based Buffer Overflow

Heap-based buffer overflow in Windows Remote Desktop Services allows an authorized attacker to execute code over a network...