CVE-2026-70033

The Windows Remote Desktop Gateway (RD Gateway) is susceptible to a Denial of Service (DoS) vulnerability caused by a missing release of memory after effective lifetime (CWE-401) within the Remote Desktop Gateway Service . An unauthorized attacker can exploit this issue over a network to disrupt ...

CVE-2026-69976

A Use after free vulnerability in the Remote Desktop Client allows an unauthorized attacker to execute code over a network. The vulnerability results in a high impact on confidentiality, integrity, and availability. No specific technical details regarding the root cause component or exploit links...

CVE-2026-69639

A heap-based buffer overflow vulnerability exists in Windows Libarchive , which allows an unauthorized attacker to achieve remote code execution over a network. The vulnerability is assigned a CVSS v3.1 score of 9.8 , indicating a critical risk level. Microsoft has released updates to address thi...

CVE-2026-108460

A Use after free vulnerability exists in Windows Message Queuing , which could allow an unauthorized attacker to execute code over a network. The CVSS 3.1 score is 8.1 (HIGH) , reflecting high impacts on confidentiality, integrity, and availability. While specific technical root causes or affecte...

CVE-2026-108467

A heap-based buffer overflow exists in the Microsoft PostScript Printer Driver . This vulnerability allows an authorized attacker to achieve remote code execution over a network. While the specific software versions are not detailed in the provided documents, the flaw enables significant impact o...

CVE-2026-105718

An out-of-bounds read vulnerability in Microsoft Office Excel allows an unauthorized attacker to execute code over a network. This flaw is associated with CWE-125 and CWE-20 , indicating issues with memory handling and input validation. The vulnerability has a High severity rating (CVSS 3.1: 8.8)...

CVE-2026-105717

A heap-based buffer overflow in Microsoft Office Access allows an unauthorized attacker to execute arbitrary code over a network. This vulnerability is caused by improper input validation (CWE-20) and has a HIGH base severity score of 8.8. Microsoft has released official updates to address this i...

CVE-2026-108458

A Use after free vulnerability exists in the Remote Desktop Client . This flaw allows an unauthorized attacker to achieve Remote Code Execution (RCE) over a network. The vulnerability is rated with a HIGH base severity score of 8.8. Remediation is available via an OFFICIAL_FIX provided by Microso...

CVE-2026-105716

A heap-based buffer overflow vulnerability exists in Microsoft Office Access , which allows an unauthorized attacker to achieve remote code execution over a network. This vulnerability is listed alongside other critical flaws in the Office suite and has a CVSS v3.1 score of 8.8 (High) . Microsoft...

CVE-2026-69370

Visual Studio Code is vulnerable to a command injection flaw due to the improper neutralization of special elements used in a command. This vulnerability allows an unauthorized attacker to achieve remote code execution over a network. While the impact is high, specific details regarding the vulne...

CVE-2026-105599

A heap-based buffer overflow exists in Microsoft Office PowerPoint , which could allow an unauthorized attacker to execute code over a network . The vulnerability is associated with a HIGH severity score of 7.5 . Microsoft has released updates to address this vulnerability, and users are encourag...

CVE-2026-105598

A heap-based buffer overflow vulnerability in Microsoft Office Access allows an unauthorized attacker to achieve remote code execution over a network. The vulnerability impacts the core application and can lead to high levels of confidentiality, integrity, and availability impact. Microsoft has r...

CVE-2026-105714

A heap-based buffer overflow in Microsoft Office Access allows an unauthorized attacker to execute arbitrary code over a network. The vulnerability has a CVSS 3.1 score of 7.5 (High) and requires user interaction. Microsoft has released official updates to address this vulnerability; users are en...

CVE-2026-105715

A vulnerability in Microsoft Office Word involves an integer overflow or wraparound , which could allow an unauthorized attacker to achieve remote code execution over a network. The impact of this vulnerability includes potential arbitrary code execution within the victim's context. Microsoft has...

EUVD-2026-99054

Heap-based buffer overflow in Microsoft Office Access allows an unauthorized attacker to execute code over a network...

EUVD-2026-99053

Heap-based buffer overflow in Microsoft Office Access allows an unauthorized attacker to execute code over a network...

EUVD-2026-99057

Heap-based buffer overflow in Microsoft Office Access allows an unauthorized attacker to execute code over a network...

CVE-2026-105592

A heap-based buffer overflow exists in Microsoft Office Access , which could allow an unauthorized attacker to execute arbitrary code over a network. To successfully exploit this, an attacker must typically trick a victim into opening a malicious file or clicking a malicious link. Microsoft has r...

CVE-2026-105595

An out-of-bounds read vulnerability in Microsoft Office Access allows an unauthorized attacker to achieve remote code execution over a network. The vulnerability impacts the software's ability to securely handle data, potentially leading to the execution of arbitrary code in the context of the us...

CVE-2026-105597

A heap-based buffer overflow exists in Microsoft Office Access , which could allow an unauthorized attacker to execute arbitrary code over a network. This vulnerability is associated with a High severity (CVSS 8.8) and can be triggered remotely. Microsoft has released updates to address this issu...