CVE-2026-97815

A heap-based buffer overflow vulnerability exists in Windows Error Reporting , which could allow an unauthorized attacker to achieve remote code execution over a network. The vulnerability has a CVSS v3.1 score of 9.8 (CRITICAL), indicating a high risk of impact on confidentiality, integrity, and...

CVE-2026-97816

A Use after free vulnerability in OpenSSH for Windows allows an unauthorized attacker to execute arbitrary code over a network. The vulnerability has a CVSS 3.1 score of 9.8 and is classified as CRITICAL . Exploitation of this flaw does not require prior authentication or user interaction. While ...

CVE-2026-97805

The Windows Partition Management Driver contains an out-of-bounds read vulnerability (CWE-125) caused by improper input validation (CWE-20). This flaw allows an unauthorized attacker to achieve remote code execution over a network. The vulnerability is rated as CRITICAL with a CVSS 3.1 score of 9...

CVE-2026-96113

A Heap-based buffer overflow and Numeric Truncation Error (CWE-122, CWE-197) exist in the DNS Server on Windows . This vulnerability allows an unauthorized attacker to achieve Remote Code Execution over a network. The vulnerability has a critical CVSS 3.1 score of 9.8, indicating high impact on c...

EUVD-2026-100403

Deserialization of untrusted data in Microsoft Office SharePoint allows an authorized attacker to execute code over a network...

CVE-2026-105013

A deserialization of untrusted data vulnerability in Microsoft Office SharePoint allows an authorized attacker to achieve arbitrary code execution over a network. The impact of this vulnerability is rated as High with a CVSS score of 7.40 . Microsoft has released updates to address this issue, an...

CVE-2026-103575

A Use after free vulnerability exists in the Remote Desktop Client , which may allow an unauthorized attacker to achieve remote code execution over a network. The vulnerability has a CVSS 3.1 base score of 8.8 (High) . While the impact includes high confidentiality, integrity, and availability, u...

CVE-2026-105005

An out-of-bounds write vulnerability exists in Windows Schannel , which could allow an unauthorized attacker to execute code over a network . The vulnerability is associated with CWE-787 and has a CVSS v3.1 base score of 8.1 (High) . While the documents confirm the impact and root cause type, spe...

EUVD-2026-100374

Out-of-bounds read in Windows Text Shaping allows an unauthorized attacker to execute code over a network...

CVE-2026-102225

Windows is affected by an out-of-bounds read vulnerability within the Text Shaping component. This flaw could allow an unauthorized attacker to achieve remote code execution over a network. The vulnerability is associated with CWE-125 (Out-of-bounds Read) and CWE-197 (Numeric Truncation Error). W...

CVE-2026-100215

A Heap-based buffer overflow exists in the Microsoft Graphics Component . This vulnerability allows an unauthorized attacker to achieve local code execution . The CVSS 3.1 score is 7.8 (High) , indicating a local attack vector requiring user interaction. An official fix is available; however, spe...

CVE-2026-102214

A Use after free vulnerability in Windows Hyper-V allows an authorized attacker to achieve local code execution . The vulnerability is categorized under CWE-416 and has a CVSS 3.1 base score of 8.8 (High) . The metrics indicate that the attack is local, requires low privileges, and has low comple...

CVE-2026-102210

A Heap-based buffer overflow vulnerability exists in Windows Text Shaping . This flaw allows an unauthorized attacker to achieve remote code execution over a network. The vulnerability is classified with a CRITICAL CVSS score of 9.8, indicating high impact on confidentiality, integrity, and avail...

CVE-2026-102203

A type confusion vulnerability in the RPC Runtime allows an unauthorized attacker to execute code over a network. This issue involves the access of resources using incompatible types, which can lead to remote code execution. While the vulnerability is confirmed with a high base score, specific de...

CVE-2026-100219

A Use after free vulnerability exists in Microsoft QUIC , allowing an unauthorized attacker to achieve remote code execution over a network. This vulnerability is part of a broader set of critical issues in Windows components. For actual abuse, no prior authentication is required, and exploitatio...

CVE-2026-100218

A use after free vulnerability in the Remote Desktop Gateway Service allows an unauthorized attacker to achieve remote code execution over a network. The vulnerability is associated with CWE-416 and has a base severity of 8.1 (High) . While the documents confirm the existence of the vulnerability...

CVE-2026-100220

A heap-based buffer overflow exists in the Windows Media Video Decoder , which may allow an unauthorized attacker to achieve remote code execution over a network. The vulnerability is associated with CWE-122 . While the documents confirm the impact and root cause, specific exploit details or in-t...

CVE-2026-100222

A heap-based buffer overflow vulnerability exists in the Network Policy Server (NPS) component of Microsoft Windows. This flaw allows an unauthorized attacker to execute arbitrary code over a network. The vulnerability is associated with a CVSS score of 9.8, indicating a critical risk level where...

CVE-2026-88219

A vulnerability in the RPC Runtime involves an untrusted pointer dereference , which could allow an unauthorized attacker to execute code over a network . The issue is associated with CWE-822 and has a CVSS v3.1 base score of 8.8 (High) . While the vulnerability allows for remote code execution, ...

CVE-2026-100214

Dynamics Business Central is vulnerable to a Remote Code Execution (RCE) flaw due to the deserialization of untrusted data . An authorized attacker can exploit this vulnerability over a network to execute arbitrary code. The vulnerability has a CVSS 3.1 base score of 8.8 (High) . Microsoft has ad...