CVE-2026-88166

Microsoft Office SharePoint is affected by CVE-2026-88166 , which involves an integer overflow or wraparound vulnerability. An authorized attacker can exploit this flaw to achieve arbitrary code execution over a network. Microsoft has released security updates to address this vulnerability; users...

CVE-2026-70242

A heap-based buffer overflow vulnerability exists in Microsoft Office Outlook , allowing an unauthorized attacker to execute arbitrary code over a network. The vulnerability has a CRITICAL severity rating (CVSS 9.8). Microsoft has released official updates to address this issue, and users are adv...

CVE-2026-88144

A Use after free vulnerability in Microsoft Office PowerPoint allows an unauthorized attacker to execute arbitrary code over a network. This flaw could lead to a compromise of the victim's context, including the ability to execute code or access sensitive information. To successfully exploit this...

CVE-2026-70215

A Use after free vulnerability in Microsoft Office PowerPoint allows an unauthorized attacker to execute code over a network. The vulnerability has a CVSS 3.1 score of 8.8 and carries a high severity for confidentiality, integrity, and availability. Exploitation typically requires a victim to ope...

CVE-2026-88163

An integer overflow or wraparound vulnerability in Microsoft Office SharePoint allows an authorized attacker to achieve remote code execution over a network. While the NCSC advisory lists this CVE under SharePoint, it notes the impact as "Not a Vulnerability" (translated from the source text), co...

CVE-2026-69802

The Network Device Enrollment Service (NDES) is impacted by a weak authentication vulnerability (CWE-1390). This flaw allows an unauthorized attacker to achieve remote code execution over the network. The vulnerability carries a HIGH base severity score of 8.1. While the documents confirm the imp...

CVE-2026-70153

A heap-based buffer overflow vulnerability exists in the Microsoft PostScript Printer Driver . This flaw allows an unauthorized attacker to achieve remote code execution over a network. The vulnerability is classified with a CVSS score of 9.80 , indicating a critical impact on confidentiality, in...

CVE-2026-88120

A Use after free vulnerability in the Windows DHCP Server allows an unauthorized attacker to execute code over a network. The vulnerability has a CVSS 3.1 base score of 8.1 and is categorized as HIGH severity. While the root cause is identified as a memory management issue, specific component det...

CVE-2026-70254

An out-of-bounds read vulnerability in Microsoft Office Excel allows an unauthorized attacker to execute code over a network. Exploitation of this vulnerability requires the victim to be tricked into opening a malicious file or clicking a malicious link. Microsoft has released updates to address ...

CVE-2026-88112

A DNS Server vulnerability exists due to an untrusted pointer dereference (CWE-822). This flaw allows an unauthorized attacker to achieve remote code execution over a network. The vulnerability has a CVSS 3.1 base score of 8.8 (High) . While the impact covers high levels of confidentiality, integ...

CVE-2026-88119

A Use after free vulnerability exists in the Windows DHCP Server , which could allow an unauthorized attacker to execute code over a network . The vulnerability is associated with CWE-416 and has a CVSS 3.1 base score of 8.1 (High) . No specific exploit information or affected versions are provid...

CVE-2026-88116

A DNS Server vulnerability (CVE-2026-88116) involves an untrusted pointer dereference , which could allow an unauthorized attacker to achieve remote code execution over a network. The vulnerability is associated with Windows systems. The CVSS 3.1 score is 8.8 (High) , indicating high impact on co...

CVE-2026-88114

A vulnerability exists in the DNS Server (Windows Domain Name Service) where an untrusted pointer dereference allows an unauthorized attacker to achieve remote code execution over a network. This flaw has a CVSS v3.1 score of 8.8 (High) . While the impact includes high severity for confidentialit...

CVE-2026-88117

A Use after free vulnerability in the Windows DHCP Server allows an unauthorized attacker to execute arbitrary code over a network. The vulnerability is categorized under CWE-416 and has a HIGH base severity score of 8.1. While the impact includes high confidentiality, integrity, and availability...

CVE-2026-70297

A vulnerability in Skype for Business and Microsoft Lync allows an authorized attacker to execute code over a network via absolute path traversal . This flaw leads to arbitrary code execution with a CVSS score of 8.80. Microsoft has released updates to address this vulnerability, and users are en...

CVE-2026-70571

A stack-based buffer overflow exists in Microsoft Exchange Server , which may allow an unauthorized attacker to achieve remote code execution over a network. The vulnerability's severity is rated as High (CVSS 3.1 score of 8.1), potentially impacting confidentiality, integrity, and availability. ...

CVE-2026-70158

The Windows Routing and Remote Access Service (RRAS) is vulnerable to Remote Code Execution (RCE) . This vulnerability is caused by a Double Free (CWE-415) condition, which could allow an attacker to gain unauthorized access to a victim's machine. The issue is rated as High severity with a CVSS 3...

CVE-2026-70229

A vulnerability in Active Directory Domain Services involves incorrect authorization , which allows an unauthorized attacker to perform remote code execution over a network. The vulnerability is assigned CWE-863 and has a High base severity score of 8.1. No specific version numbers, root cause te...

CVE-2026-70250

A Use after free vulnerability in the Windows DHCP Client allows an unauthorized attacker to execute code over an adjacent network . The vulnerability is associated with CWE-416 (Use After Free) and CWE-362 (Race Condition). While the specific root cause is linked to concurrent execution using sh...

CVE-2026-70112

A heap-based buffer overflow vulnerability exists in the Windows Spaceport.sys component. This flaw allows an authorized attacker to achieve local code execution . The vulnerability is characterized by high impacts on confidentiality, integrity, and availability, with a CVSS 3.1 base score of 7.8...