CVE-2026-83869

A critical integer underflow (wrap or wraparound) vulnerability in the Windows Domain Name Service (DNS) Server allows an unauthorized attacker to achieve remote code execution over a network. This vulnerability, identified as CVE-2026-83869 , carries a CVSS v3.1 score of 9.8 , indicating a high ...

CVE-2026-83754

A heap-based buffer overflow vulnerability exists in OpenSSH for Windows , potentially allowing an unauthorized attacker to achieve remote code execution over a network. The vulnerability is confirmed to have a high severity (CVSS 3.1 score of 7.5) with network attack vectors and high impact on c...

CVE-2026-83748

A heap-based buffer overflow vulnerability exists in Windows Error Reporting . This flaw allows an unauthorized attacker to achieve remote code execution over a network. The vulnerability is rated with a CVSS score of 9.8 (CRITICAL), indicating a high level of severity with low attack complexity ...

CVE-2026-83693

A heap-based buffer overflow exists in Windows Error Reporting , which could allow an unauthorized attacker to achieve remote code execution over a network. The vulnerability is classified as CRITICAL with a CVSS score of 9.8. While the documents confirm the impact is the execution of arbitrary c...

CVE-2026-83688

A Heap-based buffer overflow exists in the Remote Desktop Client , which could allow an unauthorized attacker to execute code over a network . The vulnerability is associated with CWE-122 and CWE-190 . While the documents confirm the existence of the flaw and its potential for remote code executi...

CVE-2026-83642

A type confusion vulnerability exists in the Windows Domain Name Service (DNS Server). This flaw allows an unauthorized attacker to achieve remote code execution over a network. The vulnerability is categorized under CWE-843 . No specific exploit information or remediation steps are provided in t...

CVE-2026-69521

A Remote Code Execution (RCE) vulnerability exists in Windows iSCSI due to an integer overflow or wraparound condition. This flaw allows an unauthorized attacker to execute code over a network. The vulnerability is confirmed with a High base severity score of 8.8 . No specific exploit details or ...

CVE-2026-69634

A heap-based buffer overflow in Windows iSCSI allows an unauthorized attacker to achieve remote code execution over a network. This vulnerability is classified as CRITICAL with a CVSSv3.1 score of 9.80 , indicating a high risk to confidentiality, integrity, and availability. For actual abuse to o...

CVE-2026-70126

The Windows Bluetooth Port Driver contains an out-of-bounds read vulnerability (CWE-125) caused by improper input validation (CWE-20). This flaw allows an unauthorized attacker to achieve remote code execution over an adjacent network . The vulnerability has a high base severity score of 7.1. Off...

CVE-2026-70095

A heap-based buffer overflow in Windows iSCSI allows an unauthorized attacker to achieve remote code execution over a network. The vulnerability has a CVSS 3.1 base score of 7.5 (High) , where the attack vector is network-based, requires high complexity, and necessitates user interaction. While t...

CVE-2026-70096

A heap-based buffer overflow exists in the Windows Rich Text Edit Control , which could allow an unauthorized attacker to achieve Remote Code Execution (RCE) over a network. This vulnerability is rated with a CRITICAL CVSS score of 9.8 . Microsoft has released official updates to address this iss...

CVE-2026-70062

A double free vulnerability exists in Windows Libarchive , which could allow an unauthorized attacker to achieve remote code execution over a network. The vulnerability is characterized by a high base score of 8.1 with a network attack vector and high complexity. No specific exploit details or re...

CVE-2026-70058

The Windows DHCP Server is vulnerable to an out-of-bounds write (CWE-787) that allows an unauthorized attacker to execute code over a network. The vulnerability has a CVSS 3.1 base score of 7.5 (HIGH) , with a primary impact on availability . Remediation is available via an official fix provided ...

CVE-2026-108460

A Use after free vulnerability exists in Windows Message Queuing , which could allow an unauthorized attacker to execute code over a network. The CVSS 3.1 score is 8.1 (HIGH) , reflecting high impacts on confidentiality, integrity, and availability. While specific technical root causes or affecte...

CVE-2026-69639

A heap-based buffer overflow vulnerability exists in Windows Libarchive , which allows an unauthorized attacker to achieve remote code execution over a network. The vulnerability is assigned a CVSS v3.1 score of 9.8 , indicating a critical risk level. Microsoft has released updates to address thi...

CVE-2026-108467

A heap-based buffer overflow exists in the Microsoft PostScript Printer Driver . This vulnerability allows an authorized attacker to achieve remote code execution over a network. While the specific software versions are not detailed in the provided documents, the flaw enables significant impact o...

CVE-2026-105717

A heap-based buffer overflow in Microsoft Office Access allows an unauthorized attacker to execute arbitrary code over a network. This vulnerability is caused by improper input validation (CWE-20) and has a HIGH base severity score of 8.8. Microsoft has released official updates to address this i...

CVE-2026-105718

An out-of-bounds read vulnerability in Microsoft Office Excel allows an unauthorized attacker to execute code over a network. This flaw is associated with CWE-125 and CWE-20 , indicating issues with memory handling and input validation. The vulnerability has a High severity rating (CVSS 3.1: 8.8)...

CVE-2026-69370

Visual Studio Code is vulnerable to a command injection flaw due to the improper neutralization of special elements used in a command. This vulnerability allows an unauthorized attacker to achieve remote code execution over a network. While the impact is high, specific details regarding the vulne...

CVE-2026-105715

A vulnerability in Microsoft Office Word involves an integer overflow or wraparound , which could allow an unauthorized attacker to achieve remote code execution over a network. The impact of this vulnerability includes potential arbitrary code execution within the victim's context. Microsoft has...