CVE-2026-12745: Deserialization of Untrusted Data

A Deserialization of Untrusted Data vulnerability in Ivanti Neurons for ITSM before 2026.2 allows a remote unauthenticated attacker to execute arbitrary code on the server...

CVE-2026-77908: Improper Control of Generation of Code

Improper control of generation of code 'code injection' in Microsoft Dynamics 365 allows an authorized attacker to execute code over a network...

CVE-2026-72983: Use After Free

Use after free in Windows Internet Connection Sharing ICS allows an unauthorized attacker to execute code over a network...

CVE-2026-69769: Heap-based Buffer Overflow

Heap-based buffer overflow in Windows HTTP Print Provider allows an unauthorized attacker to execute code over a network...

CVE-2026-69429: Heap-based Buffer Overflow

Heap-based buffer overflow in Windows IKE Extension allows an authorized attacker to execute code over a network...

CVE-2026-78442: Heap-based Buffer Overflow

Heap-based buffer overflow in Windows OLE DB allows an unauthorized attacker to execute code over a network...

CVE-2026-69334: Heap-based Buffer Overflow

Heap-based buffer overflow in Windows Volume Manager Extension Driver allows an unauthorized attacker to execute code over a network...

CVE-2026-67379: Stack-based Buffer Overflow

Stack-based buffer overflow in SQL Server allows an authorized attacker to execute code over a network...

CVE-2026-69778: Heap-based Buffer Overflow

Heap-based buffer overflow in Microsoft Office Access allows an unauthorized attacker to execute code over a network...

CVE-2026-70203: Heap-based Buffer Overflow

Heap-based buffer overflow in Windows Media Player allows an unauthorized attacker to execute code over a network...

CVE-2026-72986: Heap-based Buffer Overflow

Heap-based buffer overflow in Graphic Fonts allows an unauthorized attacker to execute code over a network...

PT-2026-87192

InstantCMS is a free and open source content management system. Versions prior to 2.18.2 have a Remote Code Execution RCE issue that allows remote authenticated attackers to execute any PHP code via the component installer. It is possible to upload a malicious component into the server, however, ...

PT-2026-87897

Use after free in Windows DNS allows an unauthorized attacker to execute code over a network...

CVE-2026-78449: Use After Free

Use after free in Reliable Multicast Transport Driver RMCAST allows an unauthorized attacker to execute code over a network...

PT-2026-87539

Use after free in Active Directory Domain Services allows an unauthorized attacker to execute code over a network...

CVE-2026-69360: Heap-based Buffer Overflow

Heap-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code over a network...

CVE-2026-77906: Heap-based Buffer Overflow

Heap-based buffer overflow in Visual Studio allows an unauthorized attacker to execute code over a network...

CVE-2026-72957: Heap-based Buffer Overflow

Heap-based buffer overflow in Windows Deployment Services allows an authorized attacker to execute code locally...

CVE-2026-72979: Use After Free

Use after free in Windows DHCP Server allows an unauthorized attacker to execute code over a network...

CVE-2026-69827: Concurrent Execution using Shared Resource with Improper Synchronization

Concurrent execution using shared resource with improper synchronization 'race condition' in DNS Server allows an unauthorized attacker to execute code over a network...