2079 matches found
EUVD-2026-73796
Out-of-bounds read in Windows OLE DB allows an unauthorized attacker to disclose information over a network...
CVE-2026-71328
A heap-based buffer overflow in Visual Studio (and .NET , per the CVE record) allows an unauthorized attacker to execute code over a network, constituting a Remote Code Execution (RCE) vulnerability. The CVSS v3.1 base score is 8.8 (HIGH) , with the attack requiring user interaction but no prior ...
EUVD-2026-73776
Heap-based buffer overflow in Windows Imaging Component allows an unauthorized attacker to execute code over a network...
EUVD-2026-73774
Stack-based buffer overflow in Microsoft Graphics Component allows an unauthorized attacker to execute code over a network...
CVE-2026-73006
CVE-2026-73006 is a stack-based buffer overflow in DirectWrite , a component of the Microsoft Graphics Component , that allows an unauthorized remote attacker to achieve remote code execution over a network. The flaw requires user interaction (e.g., opening a crafted file) but no prior authentica...
CVE-2026-73009
This use-after-free vulnerability affects Windows Secure Socket Tunneling Protocol (SSTP) , allowing an unauthorized attacker to achieve remote code execution over a network with low attack complexity and no required privileges or user interaction . The CVSS 3.1 score is 9.8 (Critical) with high ...
CVE-2026-72977
CVE-2026-72977 is an out-of-bounds read vulnerability in Microsoft Office PowerPoint that allows an unauthorized, network-based attacker to disclose information . The attack requires user interaction (e.g., opening a crafted file) but no prior authentication. CVSS 3.1 base score is 6.5 (MEDIUM) w...
EUVD-2026-73734
Out-of-bounds read in Microsoft Office PowerPoint allows an unauthorized attacker to disclose information over a network...
CVE-2026-72974
Microsoft Office Excel is affected by a buffer over-read vulnerability that allows an unauthorized attacker to disclose information over a network . The CVSS 3.1 score is 6.5 (MEDIUM) with vector AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N , meaning exploitation requires user interaction (likely opening ...
EUVD-2026-73727
Out-of-bounds write in Windows Imaging Component allows an unauthorized attacker to execute code over a network...
CVE-2026-70296
CVE-2026-70296 is an out-of-bounds write in the Windows Imaging Component that allows an unauthorized, unauthenticated attacker to achieve remote code execution over the network. The vulnerability is rated CVSS 3.1 9.8 (Critical) with a vector of AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H, indicating lo...
CVE-2026-69805
CVE-2026-69805 is an elevation of privilege vulnerability in Microsoft .NET , caused by external control of a file name or path . An unauthorized network-based attacker can exploit this to escalate privileges, with high impact on confidentiality, integrity, and availability. The CVSS 3.1 score is...
CVE-2026-58649
CVE-2026-58649 is an origin validation error in .NET that allows an unauthorized, remote attacker to disclose information over a network . The vulnerability requires user interaction (UI:R) but no prior privileges (PR:N). CVSS 3.1 scores it 6.5 (MEDIUM) with high confidentiality impact and no int...
EUVD-2026-73718
Buffer over-read in Microsoft Office allows an unauthorized attacker to disclose information over a network...
CVE-2026-69601
CVE-2026-69601 is a heap-based buffer overflow in Microsoft Windows Media Foundation that allows an unauthorized, unprivileged attacker to achieve remote code execution over a network , provided the victim is induced to interact (e.g., open a crafted media file). The assigned CVSS 3.1 score is 8....
CVE-2026-69397
OpenSSH for Windows is affected by a use-after-free flaw that allows an unauthorized attacker to achieve remote code execution over a network. The vulnerability is rated CVSS 7.5 (High) with the vector AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H, indicating a network-based attack with high complexity tha...
EUVD-2026-73675
Heap-based buffer overflow in Windows Media Player allows an unauthorized attacker to execute code over a network...
CVE-2026-72942
CVE-2026-72942 is an out-of-bounds read vulnerability in the Windows Spaceport.sys driver that allows an unauthorized attacker to disclose information over a network. The vulnerability requires user interaction but no prior privileges , with high confidentiality impact and no impact on integrity ...