CVE-2026-105013

A deserialization of untrusted data vulnerability in Microsoft Office SharePoint allows an authorized attacker to achieve arbitrary code execution over a network. The impact of this vulnerability is rated as High with a CVSS score of 7.40 . Microsoft has released updates to address this issue, an...

EUVD-2026-100403

Deserialization of untrusted data in Microsoft Office SharePoint allows an authorized attacker to execute code over a network...

CVE-2026-100214

Dynamics Business Central is vulnerable to a Remote Code Execution (RCE) flaw due to the deserialization of untrusted data . An authorized attacker can exploit this vulnerability over a network to execute arbitrary code. The vulnerability has a CVSS 3.1 base score of 8.8 (High) . Microsoft has ad...

EUVD-2026-100328

Deserialization of untrusted data in Dynamics Business Central allows an authorized attacker to execute code over a network...

CVE-2026-96186

The Microsoft Windows Media Foundation component is vulnerable to a deserialization of untrusted data flaw (CWE-502). This vulnerability allows an authorized attacker to achieve local privilege elevation . No specific patch versions or exploit links are provided in the documents.

CVE-2026-70035

The ½.NET Framework is affected by a deserialization of untrusted data vulnerability, which allows an unauthorized attacker to execute code over a network . The vulnerability is classified with a CVSS score of 8.8 and results in the execution of arbitrary code . No specific exploit information or...

CVE-2026-83520

The .NET framework is vulnerable to a deserialization of untrusted data flaw, which allows an unauthorized attacker to achieve execution of arbitrary code over a network. This vulnerability has a CVSSv3.1 score of 8.80 and is categorized under CWE-502 . While the provided documents confirm the im...

EUVD-2026-100197

Deserialization of untrusted data in .NET Framework allows an unauthorized attacker to execute code over a network...

CVE-2026-83520

Deserialization of untrusted data in .NET allows an unauthorized attacker to execute code over a network...

CVE-2026-70035

Deserialization of untrusted data in .NET Framework allows an unauthorized attacker to execute code over a network...

CVE-2026-70035

Deserialization of untrusted data in .NET Framework allows an unauthorized attacker to execute code over a network...

EUVD-2026-100143

Deserialization of untrusted data in Microsoft Exchange Server allows an authorized attacker to elevate privileges locally...

CVE-2026-87692

A deserialization of untrusted data vulnerability in Microsoft Exchange Server allows an authorized attacker to achieve local privilege escalation . The flaw could also potentially lead to impersonating other users, gaining elevated privileges, and executing arbitrary code with process rights. Mi...

CVE-2026-85900

A deserialization of untrusted data vulnerability in Microsoft Office SharePoint allows an authorized attacker to achieve arbitrary code execution over a network. This flaw is categorized as CWE-502 and has a CVSS 3.1 score of 8.80 (High). Microsoft has released official updates to address this v...

CVE-2026-87697

The .NET component is vulnerable to a Remote Code Execution (RCE) vulnerability due to the deserialization of untrusted data . An unauthorized attacker can exploit this flaw over a network to execute arbitrary code. The vulnerability has been identified in the context of Microsoft Developer Tools...

CVE-2026-87697

Deserialization of untrusted data in .NET allows an unauthorized attacker to execute code over a network...

EUVD-2026-99638

Deserialization of untrusted data in .NET allows an unauthorized attacker to execute code over a network...

CVE-2026-87697

Deserialization of untrusted data in .NET allows an unauthorized attacker to execute code over a network...

CVE-2026-88091

A vulnerability in Windows Management Instrumentation allows an authorized attacker to achieve local privilege escalation . The root cause is the deserialization of untrusted data . This flaw poses a high risk to system integrity and confidentiality for users with low-level privileges. No specifi...

Security Bulletin: IBM WebSphere Application Server Liberty is affected by a deserialization of untrusted data (CVE-2026-93905)

Summary IBM WebSphere Application Server Liberty is affected by a deserialization of untrusted data with the batchManagement-1.0 enabled. Vulnerability Details CVEID:CVE-2026-93905 DESCRIPTION: IBM WebSphere Application Server Liberty could allow an unauthenticated remote attacker to corrupt the...