CVE-2026-68888

Heap-based buffer overflow in Microsoft Standard XPS allows an authorized attacker to elevate privileges locally...

CVE-2026-68885

Heap-based buffer overflow in Microsoft Standard XPS allows an authorized attacker to elevate privileges locally...

CVE-2026-68881

Out-of-bounds read in Microsoft Standard XPS allows an authorized attacker to disclose information locally...

net/mail: golang: net/mail: Denial of Service via pathological email address parsing

A flaw was found in the net/mail package within the Go standard library. A remote attacker could provide specially crafted, pathological email addresses. When these malformed email addresses are parsed by the consumePhrase function, it can lead to excessive resource consumption due to quadratic...

EUVD-2026-73622

Integer underflow wrap or wraparound in Microsoft Standard XPS allows an unauthorized attacker to execute code over a network...

CVE-2026-69824

CVE-2026-69824 is an integer underflow (wrap or wraparound) vulnerability in Microsoft Standard XPS that allows an unauthorized attacker to achieve remote code execution over a network with no privileges required and no user interaction. The CVSS v3.1 score is 9.8 (Critical) with a vector of AV:N...

EUVD-2026-73472

Out-of-bounds read in Microsoft Standard XPS allows an authorized attacker to disclose information locally...

CVE-2026-69376

CVE-2026-69376 is an out-of-bounds read vulnerability in Microsoft Standard XPS that allows an authorized local attacker to disclose information . The CVSS 3.1 score is 5.5 (Medium) with a vector of AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N, indicating local attack, low complexity, low privileges requi...

EUVD-2026-73448

Out-of-bounds read in Microsoft Standard XPS allows an authorized attacker to disclose information locally...

CVE-2026-69308

Microsoft Standard XPS is affected by an out-of-bounds read that allows an authorized, local attacker to disclose information . The vulnerability requires low privileges and no user interaction, with a CVSS 3.1 score of 5.5 (MEDIUM) (C:H/I:N/A:N). CISA's SSVC assessment rates exploitation as none...

EUVD-2026-73445

Heap-based buffer overflow in Microsoft Standard XPS allows an authorized attacker to elevate privileges over a network...

CVE-2026-69313

Microsoft Standard XPS is affected by a heap-based buffer overflow that allows an authorized attacker to elevate privileges over a network. The CVSS 3.1 score is 7.1 (HIGH) , with a network attack vector, high complexity, low privileges required, and user interaction required, leading to high imp...

EUVD-2026-73427

Integer underflow wrap or wraparound in Microsoft Standard XPS allows an authorized attacker to elevate privileges locally...

CVE-2026-69269

CVE-2026-69269 is an integer underflow (wrap or wraparound) vulnerability in Microsoft Standard XPS that allows an authorized attacker with local access and low privileges to achieve local privilege escalation with high impact on confidentiality, integrity, and availability (CVSS 3.1: 7.8 HIGH )....

EUVD-2026-73420

Heap-based buffer overflow in Microsoft Standard XPS allows an authorized attacker to elevate privileges over a network...

CVE-2026-69272

A heap-based buffer overflow in Microsoft Standard XPS allows an authorized attacker to elevate privileges over a network . The CVSS 3.1 score is 7.1 (HIGH) , with an attack vector of network, high complexity , low privileges required , and user interaction required , leading to high impact on co...

EUVD-2026-73419

Out-of-bounds read in Microsoft Standard XPS allows an authorized attacker to disclose information locally...

EUVD-2026-73418

Heap-based buffer overflow in Microsoft Standard XPS allows an authorized attacker to elevate privileges over a network...

CVE-2026-68889

A heap-based buffer overflow in Microsoft Standard XPS allows an authorized attacker to elevate privileges over a network. The CNA-assessed CVSS 3.1 score is 7.1 (HIGH) with a vector of AV:N/AC:H/PR:L/UI:R/S:U/C:H/I:H/A:H, indicating that exploitation requires low privileges, user interaction, an...

CVE-2026-68891

CVE-2026-68891 is an out-of-bounds read in Microsoft Standard XPS that allows an authorized attacker to disclose information locally. The CVSS v3.1 score is 4.7 (MEDIUM) , reflecting a local attack vector with high complexity and low privileges required, resulting in high confidentiality impact w...