CVE-2026-70093: Heap-based Buffer Overflow

Heap-based buffer overflow in Windows Rich Text Edit Control allows an authorized attacker to elevate privileges locally...

CVE-2026-85905: Heap-based Buffer Overflow

Heap-based buffer overflow in Windows UI Immersive Server allows an authorized attacker to elevate privileges locally...

PT-2026-113143

Name of the Vulnerable Software and Affected Versions Windows Distributed File System DFS affected versions not specified Description A heap-based buffer overflow occurs in the Windows Distributed File System DFS, which allows an authorized attacker to elevate privileges locally. A heap-based...

PT-2026-113256

Buffer over-read in DNS Server allows an authorized attacker to disclose information over a network...

PT-2026-111942

Heap-based buffer overflow in Microsoft Office Visio allows an unauthorized attacker to execute code over a network...

CVE-2026-95124

Buffer Overflow vulnerability in madmurphy libconfini v.1.16.4 allows a remote attacker to cause a denial of service via an allocation-size mismatch between its bundled loadinibuffer utility and stripinicache...

PT-2026-112602

Name of the Vulnerable Software and Affected Versions Windows Event Tracing affected versions not specified Description A heap-based buffer overflow occurs in Windows Event Tracing, which is a mechanism for logging system events. This flaw allows an unauthorized attacker to execute arbitrary code...

PT-2026-112573

Name of the Vulnerable Software and Affected Versions Windows Installer affected versions not specified Description A heap-based buffer overflow occurs when a program writes more data to a heap memory block than it can hold, potentially corrupting memory. This issue allows an authorized attacker ...

Microsoft Windows: CVE-2026-88193: Microsoft Scripting Engine Elevation of Privilege Vulnerability

Heap-based buffer overflow in Microsoft Scripting Engine allows an authorized attacker to elevate privileges locally...

Microsoft Windows: CVE-2026-84014: Windows Device Association Service Elevation of Privilege Vulnerability

Heap-based buffer overflow in Windows Device Association Service allows an authorized attacker to elevate privileges locally...

Microsoft Windows: CVE-2026-108130: Windows Virtualization-Based Security (VBS) Enclave Elevation of Privilege Vulnerability

Heap-based buffer overflow in Windows Virtualization-Based Security VBS Enclave allows an authorized attacker to elevate privileges locally...

Microsoft Windows: CVE-2026-105007: Windows NDIS Elevation of Privilege Vulnerability

An elevation of privilege vulnerability exists in the Network Driver Interface Specification NDIS when ndis.sys fails to check the length of a buffer prior to copying memory to it. To exploit the vulnerability, in a local attack scenario, an attacker could run a specially crafted application to...

Microsoft Windows: CVE-2026-87699: Winlogon Elevation of Privilege Vulnerability

Heap-based buffer overflow in Winlogon allows an authorized attacker to elevate privileges locally...

Microsoft Windows: CVE-2026-69789: Windows Reliable Multicast Transport Driver (RMCAST) Remote Code Execution Vulnerability

Heap-based buffer overflow in Reliable Multicast Transport Driver RMCAST allows an unauthorized attacker to execute code over an adjacent network...

Microsoft Windows: CVE-2026-83931: Windows Hyper-V Remote Code Execution Vulnerability

Heap-based buffer overflow in Windows Hyper-V allows an authorized attacker to execute code locally...

Microsoft Windows: CVE-2026-85910: Windows StateRepository API Information Disclosure Vulnerability

Buffer over-read in Windows StateRepository API allows an authorized attacker to disclose information locally...

Microsoft Windows: CVE-2026-85908: Windows Graphics Component Elevation of Privilege Vulnerability

Heap-based buffer overflow in Windows Win32K - GRFX allows an authorized attacker to elevate privileges locally...

Microsoft Windows: CVE-2026-83698: Windows Client-Side Caching (CSC) Service Elevation of Privilege Vulnerability

Heap-based buffer overflow in Windows Client-Side Caching CSC Service allows an authorized attacker to elevate privileges locally...

Microsoft Windows: CVE-2026-83685: Windows Internet Key Exchange (IKE) Extension Denial of Service Vulnerability

Buffer over-read in Windows IKE Extension allows an authorized attacker to deny service over a network...

Microsoft Windows: CVE-2026-83680: Windows Installer Elevation of Privilege Vulnerability

Heap-based buffer overflow in Windows Installer allows an authorized attacker to elevate privileges locally...