CVE-2026-88119

A Use after free vulnerability exists in the Windows DHCP Server , which could allow an unauthorized attacker to execute code over a network . The vulnerability is associated with CWE-416 and has a CVSS 3.1 base score of 8.1 (High) . No specific exploit information or affected versions are provid...

CVE-2026-88114

A vulnerability exists in the DNS Server (Windows Domain Name Service) where an untrusted pointer dereference allows an unauthorized attacker to achieve remote code execution over a network. This flaw has a CVSS v3.1 score of 8.8 (High) . While the impact includes high severity for confidentialit...

CVE-2026-88112

A DNS Server vulnerability exists due to an untrusted pointer dereference (CWE-822). This flaw allows an unauthorized attacker to achieve remote code execution over a network. The vulnerability has a CVSS 3.1 base score of 8.8 (High) . While the impact covers high levels of confidentiality, integ...

EUVD-2026-100144

Inclusion of functionality from untrusted control sphere in Microsoft Exchange Server allows an authorized attacker to elevate privileges locally...

EUVD-2026-100143

Deserialization of untrusted data in Microsoft Exchange Server allows an authorized attacker to elevate privileges locally...

EUVD-2026-100139

Stack-based buffer overflow in Microsoft Exchange Server allows an unauthorized attacker to execute code over a network...

EUVD-2026-100145

Improper verification of cryptographic signature in Microsoft Exchange Server allows an authorized attacker to elevate privileges over a network...

CVE-2026-87692

A deserialization of untrusted data vulnerability in Microsoft Exchange Server allows an authorized attacker to achieve local privilege escalation . The flaw could also potentially lead to impersonating other users, gaining elevated privileges, and executing arbitrary code with process rights. Mi...

CVE-2026-87695

A vulnerability in Microsoft Exchange Server involves the inclusion of functionality from an untrusted control sphere, which allows an authorized attacker to achieve local privilege escalation . The vulnerability has a base score of 7.8 (High) . Microsoft has released updates to address this issu...

CVE-2026-87696

A vulnerability in Microsoft Exchange Server allows an authorized attacker to elevate privileges over a network due to improper verification of cryptographic signatures (CWE-347). Successful exploitation could allow an attacker to impersonate other users and execute arbitrary code with process ri...

CVE-2026-77910

A vulnerability in Microsoft Exchange Server involves incorrect authorization , which allows an authorized attacker to elevate privileges over a network. The impact includes the potential for an attacker to impersonate other users, gain elevated privileges, and execute arbitrary code with process...

EUVD-2026-100140

Incorrect authorization in Microsoft Exchange Server allows an authorized attacker to elevate privileges over a network...

EUVD-2026-100137

Improper neutralization of input during web page generation 'cross-site scripting' in Microsoft Exchange Server allows an unauthorized attacker to perform spoofing over a network...

CVE-2026-70279

Microsoft Exchange Server is affected by a cross-site scripting (XSS) vulnerability caused by the improper neutralization of input during web page generation. This flaw allows an unauthorized attacker to perform spoofing over a network. While the documents do not specify the exact internal compon...

CVE-2026-70571

A stack-based buffer overflow exists in Microsoft Exchange Server , which may allow an unauthorized attacker to achieve remote code execution over a network. The vulnerability's severity is rated as High (CVSS 3.1 score of 8.1), potentially impacting confidentiality, integrity, and availability. ...

EUVD-2026-100103

Double free in Windows DHCP Server allows an unauthorized attacker to execute code over a network...

CVE-2026-88171

A double free vulnerability in the Windows DHCP Server allows an unauthorized attacker to achieve remote code execution over a network. The vulnerability is categorized under CWE-415 . While the severity is high, the exploit code maturity is currently listed as unproven . No specific exploit link...

CVE-2026-88115

An out-of-bounds read vulnerability exists in Windows Server for NFS , which may allow an unauthorized attacker to achieve remote code execution over a network. The CVSS 3.1 score is 8.8 (HIGH) , indicating significant impact on confidentiality, integrity, and availability. While the vulnerabilit...

CVE-2026-88127

A Use after free vulnerability in the Windows SMB Server allows an authorized attacker to perform a local privilege escalation . The vulnerability is associated with CWE-416 and carries a High base severity score of 7.0. Remediation is available via an official fix provided by Microsoft. No speci...

CVE-2026-85905

A heap-based buffer overflow exists in the Windows UI Immersive Server . This vulnerability allows an authorized attacker to achieve local privilege escalation . The impact includes high levels of risk to confidentiality, integrity, and availability. Remediation is available through an official f...