102650 matches found
EUVD-2026-73346
Heap-based buffer overflow in Windows Schannel allows an unauthorized attacker to execute code over a network...
EUVD-2026-73340
Heap-based buffer overflow in Windows Resilient File System ReFS allows an authorized attacker to elevate privileges locally...
CVE-2026-70065
CVE-2026-70065 affects the Windows DHCP Server , where a missing release of memory after its effective lifetime allows an unauthorized, network-based attacker to cause a denial of service with no impact to confidentiality or integrity. The CVSS 3.1 score is 7.5 (HIGH) with low attack complexity a...
CVE-2026-80075
CVE-2026-80075 is a heap-based buffer overflow in Windows Work Folders that allows an authorized attacker to elevate privileges locally . The Microsoft-assigned CVSS 3.1 score is 7.8 (HIGH) , with a vector of AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H, indicating local attack vector, low complexity, low...
CVE-2026-67643
CVE-2026-67643 is a heap-based buffer overflow in Microsoft SQL Server that allows an unauthorized attacker to achieve remote code execution over a network. Microsoft assigned a CVSS 3.1 score of 9.8 (Critical) with a vector of AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H. CISA's SSVC assessment rates exp...
CVE-2026-78517
A heap-based buffer overflow in Microsoft Office Word allows an unauthorized, remote attacker to execute code over a network. The CVSS 3.1 score is 8.8 (HIGH) , with a network attack vector, low complexity, no required privileges, but user interaction required. CISA's SSVC assessment rates exploi...
EUVD-2026-73312
Heap-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code over a network...
EUVD-2026-73313
Heap-based buffer overflow in Microsoft Office Outlook allows an unauthorized attacker to execute code over a network...
CVE-2026-78504
CVE-2026-78504 is a stack-based buffer overflow in Microsoft Office Word that allows an unauthorized attacker to achieve remote code execution over a network . The vulnerability is rated CVSS 3.1: 8.8 (High) with vector AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H, meaning exploitation requires user inter...
EUVD-2026-73311
Stack-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code over a network...
CVE-2026-78505
CVE-2026-78505 is a heap-based buffer overflow in Microsoft Office that allows an unauthorized attacker to execute code over a network. The vulnerability is rated CVSS 3.1 8.8 (HIGH) with a vector of AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H , meaning exploitation requires user interaction but no prior...
CVE-2026-67379
CVE-2026-67379 is a stack-based buffer overflow in Microsoft SQL Server that allows an authorized attacker (low privileges) to achieve remote code execution over the network. The CVSS 3.1 score is 8.5 (HIGH) with a scope change, reflecting high impact on confidentiality, integrity, and availabili...
EUVD-2026-73296
Stack-based buffer overflow in Microsoft Graphics Component allows an unauthorized attacker to execute code over a network...
CVE-2026-78439
CVE-2026-78439 is a stack-based buffer overflow in the Microsoft Office Graphics Component that allows an unauthorized attacker to execute code over a network, rated CVSS 3.1: 8.8 (High) . The attack vector is network-based with low complexity and no privileges required , though user interaction ...
EUVD-2026-73294
Improper control of generation of code 'code injection' in Microsoft Dynamics 365 allows an authorized attacker to execute code over a network...
CVE-2026-77908
CVE-2026-77908 is a code injection vulnerability in Microsoft Dynamics 365 On-Premises that allows an authorized attacker (low privileges) to achieve remote code execution over a network. The flaw stems from improper control of code generation, and the CVSS 3.1 score is 8.8 (HIGH) with impacts ra...
CVE-2026-77907
A heap-based buffer overflow in Visual Studio allows an unauthorized attacker to achieve remote code execution over a network. The CVSS v3.1 score is 8.8 (High) , with a vector of AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H, meaning user interaction is required but no prior privileges are needed. CISA's ...
CVE-2026-77904
CVE-2026-77904 is a heap-based buffer overflow in the Windows Volume Manager Extension Driver that allows an attacker with low privileges to achieve local privilege escalation without user interaction. The vulnerability is rated HIGH (CVSS 7.8) with high impact on confidentiality, integrity, and ...
CVE-2026-77898
CVE-2026-77898 is a heap-based buffer overflow in Microsoft Office that allows an unauthorized attacker to achieve remote code execution over a network. The vulnerability requires user interaction (e.g., opening a crafted file) and has a high attack complexity , reflected in its CVSS 3.1 score of...