CVE-2026-70143

A heap-based buffer overflow exists in the Windows Network File System , which may allow an authorized attacker to achieve local code execution . The vulnerability is associated with CWE-122 and carries a High base severity score of 7.8. No specific exploit details or remediation steps are provid...

CVE-2026-69902

A vulnerability exists in Windows NTFS due to an untrusted pointer dereference . This flaw allows an authorized attacker to achieve local code execution . The vulnerability is associated with CWE-822 . While the CVSS score indicates a Medium severity, the potential impact includes high levels of ...

CVE-2026-88174

A race condition exists in Windows Deployment Services due to improper synchronization during concurrent execution using a shared resource. This vulnerability allows an unauthorized attacker to achieve remote code execution over the network. No specific exploit details or official patch versions ...

CVE-2026-88171

A double free vulnerability in the Windows DHCP Server allows an unauthorized attacker to achieve remote code execution over a network. The vulnerability is categorized under CWE-415 . While the severity is high, the exploit code maturity is currently listed as unproven . No specific exploit link...

CVE-2026-88121

A Use after free vulnerability in the Windows Background Intelligent Transfer Service (BITS) allows an unauthorized attacker to achieve remote code execution over a network. The vulnerability is associated with CWE-416 and carries a CVSS 3.1 base score of 8.0 (High) . While the impact includes hi...

CVE-2026-88115

An out-of-bounds read vulnerability exists in Windows Server for NFS , which may allow an unauthorized attacker to achieve remote code execution over a network. The CVSS 3.1 score is 8.8 (HIGH) , indicating significant impact on confidentiality, integrity, and availability. While the vulnerabilit...

CVE-2026-83934

A stack-based buffer overflow vulnerability exists in Windows GDI+ , which could allow an unauthorized attacker to achieve remote code execution over a network. The vulnerability is rated as HIGH severity with a CVSS 3.1 score of 8.8, as it could impact confidentiality, integrity, and availabilit...

CVE-2026-83935

A heap-based buffer overflow vulnerability exists in Microsoft XML , which allows an unauthorized attacker to achieve remote code execution over a network. This vulnerability is categorized as CRITICAL with a CVSSv3.1 score of 9.8 . The NCSC confirms that this flaw allows malicious actors to exec...

CVE-2026-69789

A heap-based buffer overflow exists in the Reliable Multicast Transport Driver (RMCAST) . This vulnerability allows an unauthorized attacker to achieve remote code execution over an adjacent network. The vulnerability is classified with a HIGH base severity score (7.5) and requires high attack co...

CVE-2026-83931

A heap-based buffer overflow vulnerability exists in Windows Hyper-V . This flaw allows an authorized attacker to achieve local code execution . The vulnerability has a high severity rating and the official remediation is provided via Microsoft updates.

CVE-2026-85874

A Use after free vulnerability exists in the Windows Message Queuing Queue Manager . This flaw allows an authorized attacker to achieve local code execution . The vulnerability is categorized under CWE-416 and has a high severity rating with a CVSS 3.1 base score of 7.8 . No specific exploit info...

CVE-2026-83923

A relative path traversal vulnerability exists in OpenSSH for Windows , potentially allowing an unauthorized attacker to achieve remote code execution over a network. The vulnerability is categorized under CWE-23 . While the specific component or file is not detailed in the provided documents, th...

CVE-2026-83910

A critical out-of-bounds write vulnerability exists in the RPC Runtime component of Microsoft Windows . An unauthorized attacker can exploit this flaw over a network to achieve arbitrary code execution . This vulnerability is categorized as having a CVSS score of 9.80 , allowing for remote exploi...

CVE-2026-85903

A vulnerability exists in the Windows Domain Name Service (DNS Server) caused by an untrusted pointer dereference . This flaw allows an unauthorized attacker to achieve Remote Code Execution (RCE) over a network. The vulnerability is rated as High severity with a CVSS score of 8.8. While exploita...

CVE-2026-83889

The Windows DNS Server is affected by a vulnerability involving the release of an invalid pointer or reference . This flaw allows an authorized attacker to achieve remote code execution over a network. The vulnerability is associated with CWE-763 . No specific exploit information or remediation d...

CVE-2026-83874

A heap-based buffer overflow exists in Windows Event Tracing which could allow an unauthorized attacker to achieve remote code execution over a network. The vulnerability carries a high severity score of 8.8, indicating significant impact on confidentiality, integrity, and availability. While the...

CVE-2026-83856

An out-of-bounds read vulnerability exists in the Windows Event Logging Service . This flaw allows an unauthorized attacker to achieve remote code execution over a network. The vulnerability is associated with CWE-125 and has a CVSS 3.1 base score of 7.5 . No specific exploit code or remediation ...

CVE-2026-83797

The Windows Partition Management Driver contains an out-of-bounds read vulnerability (CWE-125). This flaw could allow an unauthorized attacker to achieve remote code execution over a network. The vulnerability is rated as HIGH severity with a CVSS 3.1 score of 8.8. Official remediation is availab...

CVE-2026-83770

A heap-based buffer overflow exists in Windows Text Shaping that allows an unauthorized attacker to execute arbitrary code over a network. This vulnerability is classified as CRITICAL with a CVSS score of 9.8. Systems connected to public networks are at a higher risk, as the vulnerability can be ...

CVE-2026-83778

A heap-based buffer overflow vulnerability exists in the Microsoft Internet Messaging API . This flaw allows an unauthorized attacker to achieve remote code execution over a network. The vulnerability has a high severity rating (CVSS 8.8) and requires user interaction. No specific exploit details...