EUVD-2026-56435

Heap-based buffer overflow in Windows Remote Access API allows an authorized attacker to elevate privileges locally...

CVE-2026-65671 Remote Access API Elevation of Privilege Vulnerability

...

EUVD-2026-56433

Deserialization of untrusted data in Microsoft Office SharePoint allows an authorized attacker to execute code over a network...

CVE-2026-65658

CVE-2026-65658 involves a deserialization vulnerability in Microsoft Office SharePoint that can allow an authorized attacker to execute arbitrary code over the network. The published description identifies deserialization of untrusted data as the root cause, with the CVSS 3.1 base score of 8.8 (H...

CVE-2026-65658 Microsoft SharePoint Server Remote Code Execution Vulnerability

...

EUVD-2026-56418

Exposure of sensitive information to an unauthorized actor in Microsoft Defender for Endpoint allows an authorized attacker to disclose information locally...

CVE-2026-62915 Microsoft Exchange Server Security Feature Bypass Vulnerability

...

CVE-2026-62915 Microsoft Exchange Server Security Feature Bypass Vulnerability

...

CVE-2026-62913 Microsoft Exchange Server Remote Code Execution Vulnerability

...

CVE-2026-62913

CVE-2026-62913 describes a heap-based buffer overflow in Microsoft Exchange Server that allows an authorized attacker to execute code over a network. The CVSS v3.1 base score is 8.8 (HIGH) with NETWORK attack vector, LOW attack complexity, and privileges required: LOW; impact on confidentiality, ...

EUVD-2026-56413

Improper control of resource identifiers 'resource injection' in Microsoft Exchange Server allows an authorized attacker to elevate privileges over a network...

EUVD-2026-56410

Inclusion of functionality from untrusted control sphere in .NET allows an unauthorized attacker to disclose information over a network...

EUVD-2026-56409

Unchecked input for loop condition in .NET allows an unauthorized attacker to deny service over a network...

EUVD-2026-56408

Improper removal of sensitive information before storage or transfer in .NET allows an unauthorized attacker to disclose information over a network...

EUVD-2026-56407

Inconsistent interpretation of http requests 'http request/response smuggling' in .NET allows an unauthorized attacker to bypass a security feature over a network...

EUVD-2026-56404

Use after free in Windows Deployment Services allows an unauthorized attacker to execute code over a network...

CVE-2026-62893

CVE-2026-62893 affects Windows Deployment Services’ TFTP Server. The provided sources confirm a use-after-free defect that enables an unauthenticated, remote attacker to execute code over the network. CVSSv3.1 base score is 9.8 (CRITICAL) with network exploitation, no user interaction, and impact...

CVE-2026-62892 Capability Access Management Service (camsvc) Elevation of Privilege Vulnerability

...

CVE-2026-62892 Capability Access Management Service (camsvc) Elevation of Privilege Vulnerability

...

CVE-2026-62892

CVE-2026-62892 is a use-after-free vulnerability in the Capability Access Management Service (camsvc) that could allow an authorized attacker to elevate privileges locally. The publicly available data identifies a local attack vector with high impact (confidentiality, integrity, and availability)...