CVE-2026-85926

A Use after free vulnerability exists in the Windows Secure Socket Tunneling Protocol (SSTP) . This flaw allows an unauthorized attacker to achieve remote code execution over a network. The CVSS 3.1 score is 8.1 (High) , with high impact across confidentiality, integrity, and availability. Docume...

CVE-2026-70187

A Use after free vulnerability exists in the Remote Desktop Gateway Service on Windows systems. This flaw allows an unauthorized attacker to achieve Remote Code Execution (RCE) over a network. The vulnerability is associated with CWE-416 . While the impact is classified as HIGH with a CVSS 3.1 sc...

EUVD-2026-99610

Origin validation error in Microsoft Power Apps allows an authorized attacker to execute code over a network...

CVE-2026-70167

A type confusion vulnerability (CWE-843, CWE-822) exists in the Windows Domain Name Service (DNS Server) . This flaw allows an authorized attacker to achieve Remote Code Execution (RCE) over a network. The vulnerability is characterized by the access of resources using incompatible types. While t...

CVE-2026-70213

An origin validation error in Microsoft Power Apps allows an authorized attacker to perform remote code execution over a network. This vulnerability has a HIGH severity rating with a CVSS score of 8.0. Documentation confirms the impact is the execution of arbitrary code . No specific exploit link...

CVE-2026-69943

A path traversal vulnerability (improper limitation of a pathname to a restricted directory) exists in Microsoft Office SharePoint . This flaw allows an authorized attacker to achieve arbitrary code execution over a network. Microsoft has released updates to address this vulnerability; users are ...

CVE-2026-88159

A Use after free vulnerability exists in the Windows Background Intelligent Transfer Service (BITS) . This flaw allows an unauthorized attacker to execute code over a network . The vulnerability is associated with CWE-125 (Out-of-bounds Read). No specific exploit details or in-the-wild exploitati...

CVE-2026-88173

A Use after free vulnerability in the Windows Background Intelligent Transfer Service (BITS) allows an unauthorized attacker to execute code over a network . The vulnerability is associated with CWE-416 (Use After Free) and CWE-367 (Time-of-check Time-of-use Race Condition). The impact includes h...

CVE-2026-70052

An integer overflow or wraparound vulnerability exists in Windows PowerShell . This flaw allows an authorized attacker to achieve local code execution . While the technical root cause is identified as an integer overflow or wraparound, specific affected versions or files are not detailed in the p...

CVE-2026-88165

An out-of-bounds write vulnerability exists in Active Directory Domain Services . This flaw allows an authorized attacker to achieve remote code execution over a network. While the vulnerability is confirmed with a HIGH base severity score (8.8), the provided documents do not specify the exact so...

CVE-2026-88157

A heap-based buffer overflow exists in OpenSSH for Windows , which may allow an unauthorized attacker to execute code over a network . The vulnerability is confirmed and carries a High base severity score of 8.8. While the specific component or file is not detailed in the provided documents, the ...

CVE-2026-85856

A heap-based buffer overflow vulnerability exists in Windows Internet Connection Sharing (ICS) . This flaw allows an authorized attacker to achieve remote code execution over an adjacent network . The vulnerability has a CVSS 3.1 base score of 7.1 (High) , with impacts on confidentiality, integri...

CVE-2026-85814

A heap-based buffer overflow exists in Microsoft Windows Media Foundation , which could allow an unauthorized attacker to achieve remote code execution over a network. The vulnerability has a CVSS v3.1 score of 9.8 (CRITICAL), indicating a high impact on confidentiality, integrity, and availabili...

CVE-2026-85817

A vulnerability in Windows PowerShell allows an unauthorized attacker to execute code over a network due to reliance on untrusted inputs in a security decision. The impact is rated as HIGH with a CVSS 3.1 score of 8.8, affecting confidentiality, integrity, and availability. Official fix informati...

CVE-2026-85811

A Use after free vulnerability exists in Network Policy Server (NPS) , which could allow an unauthorized attacker to execute code over an adjacent network. The vulnerability is classified as having a High severity base score of 7.5. No specific versions, affected components, or remediation steps ...

CVE-2026-85809

A Remote Code Execution vulnerability exists in the Windows Routing and Remote Access Service (RRAS) . This flaw, identified as a Heap-based Buffer Overflow (CWE-122) , allows an attacker to gain unauthorized access to a victim's machine. The vulnerability is rated as CRITICAL with a CVSS v3.1 sc...

CVE-2026-85806

A critical integer underflow (wrap or wraparound) vulnerability exists in the Network Policy Server (NPS) . This flaw allows an unauthorized attacker to achieve remote code execution over a network. The vulnerability is rated as CRITICAL with a CVSS 3.1 score of 9.80 . While the documents confirm...

CVE-2026-85799

A Use after free vulnerability exists in the Network Policy Server (NPS) . This flaw allows an unauthorized attacker to achieve remote code execution over a network. The vulnerability is confirmed with a CVSS 3.1 base score of 8.1 (High) , indicating significant potential impact on confidentialit...

CVE-2026-85798

A heap-based buffer overflow exists in the Windows Distributed File System (DFS) . This vulnerability allows an authorized attacker to achieve remote code execution over a network. The CVSS 3.1 score is 7.2, reflecting high impact on confidentiality, integrity, and availability. No specific explo...

CVE-2026-85371

A Use after free vulnerability exists in Network Policy Server (NPS) , which could allow an unauthorized attacker to execute code over a network . The vulnerability is associated with CWE-416 and has a CVSS 3.1 base score of 8.1 . No specific affected versions, root causes, or exploit links are p...