CVE-2026-62893

CVE-2026-62893 affects Windows Deployment Services’ TFTP Server. The provided sources confirm a use-after-free defect that enables an unauthenticated, remote attacker to execute code over the network. CVSSv3.1 base score is 9.8 (CRITICAL) with network exploitation, no user interaction, and impact...

CVE-2026-62893 Windows Deployment Services TFTP Server Remote Code Execution Vulnerability

...

CVE-2026-62889 Windows Secure Socket Tunneling Protocol (SSTP) Remote Code Execution Vulnerability

...

CVE-2026-62889 Windows Secure Socket Tunneling Protocol (SSTP) Remote Code Execution Vulnerability

...

EUVD-2026-56401

Double free in Windows Secure Socket Tunneling Protocol SSTP allows an unauthorized attacker to execute code over a network...

CVE-2026-62889

CVE-2026-62889 is a Windows SSTP remote code execution vulnerability caused by a double free in the SSTP implementation. The available descriptions from NVD and CVE records state that an unauthenticated attacker could exploit this over a network to execute arbitrary code. The CVSS 3.1 base score ...

EUVD-2026-56400

Stack-based buffer overflow in Windows DNS allows an unauthorized attacker to execute code over a network...

CVE-2026-62878

CVE-2026-62878 is a Windows DNS Server remote code execution vulnerability caused by a stack-based buffer overflow. The NVD entry indicates a network-based exploit with a critical CVSS v3.1 base score of 9.8 (AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H). Impact is the ability for an unauthenticated, remo...

CVE-2026-62878 Windows DNS Server Remote Code Execution Vulnerability

...

CVE-2026-62878 Windows DNS Server Remote Code Execution Vulnerability

...

CVE-2026-62819

CVE-2026-62819 corresponds to a Remote Code Execution vulnerability in Windows Routing and Remote Access Service (RRAS). Available details indicate that the vulnerability resides in RRAS and could allow an attacker to gain unauthorized code execution on a victim’s machine via a network attack. Th...

CVE-2026-62820 Windows DNS Server Remote Code Execution Vulnerability

...

CVE-2026-62820 Windows DNS Server Remote Code Execution Vulnerability

...

CVE-2026-62820

CVE-2026-62820 concerns Windows DNS Server. The issue is a race condition caused by concurrent execution using a shared resource with improper synchronization, leading to remote code execution over a network. Affected product is Windows DNS Server; the vulnerability is triggered via network acces...

CVE-2026-62819 Windows Routing and Remote Access Service (RRAS) Remote Code Execution Vulnerability

...

EUVD-2026-56397

Concurrent execution using shared resource with improper synchronization 'race condition' in Windows DNS allows an unauthorized attacker to execute code over a network...

EUVD-2026-56396

Remote Code Execution in Windows Routing and Remote Access Service RRAS allows attacker to gain an unauthorized access to victim's machine...

CVE-2026-62819 Windows Routing and Remote Access Service (RRAS) Remote Code Execution Vulnerability

...

CVE-2026-62818

CVE-2026-62818 affects Microsoft Windows Active Directory Certificate Services (AD CS). The vulnerability is a use-after-free in AD CS that allows an authorized attacker to execute arbitrary code over a network. CVSS v3.1 base metrics indicate a HIGH severity (8.8) with Network attack vector, Low...

CVE-2026-62817

CVE-2026-62817 describes an out-of-bounds write in Windows DNS Server that enables remote code execution by an unauthenticated attacker over an adjacent network. The advisory consistently identifies the affected component as Windows DNS Server and cites a high-severity impact (CVSS v3.1: 8.8, AV:...