CVE-2026-65806 Azure CycleCloud Information Disclosure Vulnerability

...

CVE-2026-70340

Azure CycleCloud CVE-2026-70340: AMissing authorization vulnerability could allow an authenticated attacker to elevate privileges over a network. The issue affects Azure CycleCloud and is rated HIGH (CVSS 3.1: AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:H). The root cause is insufficient access control, en...

EUVD-2026-56561

Improper neutralization of special elements used in an os command 'os command injection' in Visual Studio Code allows an unauthorized attacker to execute code over a network...

CVE-2026-66799 Windows Key Guard Elevation of Privilege Vulnerability

...

CVE-2026-65784

CVE-2026-65784 describes an out-of-bounds read in the Windows NTFS subsystem that allows an authorized local attacker to disclose information. The CVSS v3.1 base metrics assign a 5.5 (Medium) score with local attack vector , low attack complexity , and low privileges required , with no user inter...

CVE-2026-65784 Windows NTFS Information Disclosure Vulnerability

...

EUVD-2026-56433

Deserialization of untrusted data in Microsoft Office SharePoint allows an authorized attacker to execute code over a network...

CVE-2026-65658

CVE-2026-65658 involves a deserialization vulnerability in Microsoft Office SharePoint that can allow an authorized attacker to execute arbitrary code over the network. The published description identifies deserialization of untrusted data as the root cause, with the CVSS 3.1 base score of 8.8 (H...

CVE-2026-65658 Microsoft SharePoint Server Remote Code Execution Vulnerability

...

CVE-2026-62915 Microsoft Exchange Server Security Feature Bypass Vulnerability

...

CVE-2026-62915 Microsoft Exchange Server Security Feature Bypass Vulnerability

...

CVE-2026-62913 Microsoft Exchange Server Remote Code Execution Vulnerability

...

CVE-2026-62913

CVE-2026-62913 describes a heap-based buffer overflow in Microsoft Exchange Server that allows an authorized attacker to execute code over a network. The CVSS v3.1 base score is 8.8 (HIGH) with NETWORK attack vector, LOW attack complexity, and privileges required: LOW; impact on confidentiality, ...

CVE-2026-62893

CVE-2026-62893 affects Windows Deployment Services’ TFTP Server. The provided sources confirm a use-after-free defect that enables an unauthenticated, remote attacker to execute code over the network. CVSSv3.1 base score is 9.8 (CRITICAL) with network exploitation, no user interaction, and impact...

CVE-2026-62820 Windows DNS Server Remote Code Execution Vulnerability

...

CVE-2026-62816 Windows Reliable Multicast Transport Driver (RMCAST) Remote Code Execution Vulnerability

...

CVE-2026-62812 Windows DHCP Server Elevation of Privilege Vulnerability

...

CVE-2026-62796

The CVE CVE-2026-62796 describes an out-of-bounds read in Windows NTFS that can let an authorized, low-privilege attacker disclose information locally. The defined attack vector is LOCAL with LOW complexity and no user interaction, and the impact is a confidentiality breach (information disclosed...

EUVD-2026-56384

Stack-based buffer overflow in Windows TCP/IP allows an unauthorized attacker to execute code over a network...

CVE-2026-62729

CVE-2026-62729 describes a race condition in Windows Telephony Service caused by concurrent execution on a shared resource with improper synchronization. This allows an authorized, local attacker to elevate privileges. The entry notes a local attack vector with high impact on confidentiality, int...