CVE-2026-100214

Dynamics Business Central is vulnerable to a Remote Code Execution (RCE) flaw due to the deserialization of untrusted data . An authorized attacker can exploit this vulnerability over a network to execute arbitrary code. The vulnerability has a CVSS 3.1 base score of 8.8 (High) . Microsoft has ad...

CVE-2026-100222

A heap-based buffer overflow vulnerability exists in the Network Policy Server (NPS) component of Microsoft Windows. This flaw allows an unauthorized attacker to execute arbitrary code over a network. The vulnerability is associated with a CVSS score of 9.8, indicating a critical risk level where...

EUVD-2026-100318

Improper neutralization of special elements used in an os command 'os command injection' in Azure CycleCloud allows an authorized attacker to execute code locally...

EUVD-2026-100322

Use after free in Microsoft Office Excel allows an unauthorized attacker to execute code over a network...

EUVD-2026-100319

Use after free in Microsoft Office Excel allows an unauthorized attacker to execute code over a network...

EUVD-2026-100320

Use after free in Microsoft Office Excel allows an unauthorized attacker to execute code over a network...

EUVD-2026-100323

Incorrect privilege assignment in Visual Studio Code allows an authorized attacker to bypass a security feature locally...

EUVD-2026-100321

Heap-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code over a network...

CVE-2026-100212

A Use after free vulnerability in Microsoft Office Excel allows an unauthorized attacker to execute arbitrary code over a network. This flaw can lead to high impact consequences regarding confidentiality, integrity, and availability. Microsoft has released updates to address this vulnerability; u...

CVE-2026-100207

A vulnerability in Azure CycleCloud involving improper neutralization of special elements used in an OS command (OS command injection) allows an authorized attacker to execute code locally . This flaw is associated with CWE-78 and has a CVSS 3.1 base score of 7.3 . While the vulnerability was ide...

CVE-2026-100210

A heap-based buffer overflow exists in Microsoft Office Excel , which could allow an unauthorized attacker to achieve arbitrary code execution over a network. This vulnerability is rated with a High severity (CVSS 3.1: 8.8). Microsoft has released official fixes to address this issue; users are r...

CVE-2026-102851

Visual Studio Code is affected by an incorrect privilege assignment vulnerability. This flaw allows an authorized attacker to bypass a security feature locally. The vulnerability has a Medium base severity (6.1) and requires local access and user interaction to exploit. Specific technical details...

CVE-2026-100209

A use after free vulnerability in Microsoft Office Excel allows an unauthorized attacker to achieve arbitrary code execution over a network. The vulnerability has a CVSS v3.1 score of 8.8 (High) . While specific technical root causes or internal file paths are not provided, the vulnerability is c...

CVE-2026-100211

A Use after free vulnerability in Microsoft Office Excel allows an unauthorized attacker to execute code over a network. This flaw results in Arbitrary code execution and has a CVSS v3.1 base score of 8.8 . Microsoft has released updates to address this vulnerability; users are recommended to ins...

CVE-2026-100202

A Use after free vulnerability exists in the Windows Message Queuing Queue Manager . This flaw allows an unauthorized attacker to achieve remote code execution over a network. The vulnerability is rated as CRITICAL with a CVSS score of 9.80 . While specific exploit links are not provided, the doc...

EUVD-2026-100325

Improper control of generation of code 'code injection' in ASP.NET Core allows an unauthorized attacker to execute code over a network...

CVE-2026-102870

ASP.NET Core is vulnerable to improper control of generation of code (code injection) , which allows an unauthorized attacker to execute code over a network. This vulnerability has a HIGH severity with a CVSS score of 8.80 , and the potential impact includes the execution of arbitrary code . Whil...

CVE-2026-102870

Improper control of generation of code 'code injection' in ASP.NET Core allows an unauthorized attacker to execute code over a network...

CVE-2026-97745

A Use after free vulnerability in Microsoft Office Excel allows an unauthorized attacker to execute arbitrary code over a network. The vulnerability has a CVSS 3.1 score of 8.8 (High) . Microsoft has released updates to address this and other related vulnerabilities across various Office products...

CVE-2026-96071

A heap-based buffer overflow exists in Windows Media , which could allow an unauthorized attacker to execute arbitrary code over a network . The vulnerability is associated with CWE-122 . While the CVSS score indicates a HIGH severity (7.5) with potential for high impact on confidentiality, integ...