147163 matches found
EUVD-2026-73838
Double free in Microsoft Office Word allows an unauthorized attacker to execute code over a network...
CVE-2026-80080
CVE-2026-80080 is a double free vulnerability in Microsoft Office Word that allows an unauthorized attacker to achieve remote code execution over a network with user interaction required. The CVSS 3.1 base score is 8.8 (HIGH) , reflecting high impact to confidentiality, integrity, and availabilit...
EUVD-2026-73836
Use after free in Microsoft Office Outlook allows an unauthorized attacker to execute code over a network...
CVE-2026-78525
CVE-2026-78525 is a use-after-free vulnerability in Microsoft Office Outlook that allows an unauthenticated, remote attacker to achieve remote code execution . The CVSS v3.1 base score is 8.8 (High) , with a vector of AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H, meaning user interaction is required but n...
CVE-2026-82063
A use-after-free security issue in the cursor management component of MongoDB Server allows an authenticated user to cause a denial of service. Under specific timing conditions during cursor operations, a stale pointer to a freed resource may be retained and subsequently dereferenced during curso...
CVE-2026-82061
A use-after-free security issue exists in the server's query execution memory tracking subsystem. An authenticated user with read privileges can trigger a write to freed heap memory through a sequence of standard database commands, leading to server process crash or potential memory corruption. N...
CVE-2026-78514
CVE-2026-78514 is a use-after-free vulnerability in Microsoft Office Word that allows an unauthorized attacker to achieve remote code execution over a network. The CVSS v3.1 score is 8.8 (HIGH) with the vector AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H, meaning exploitation requires user interaction (e....
EUVD-2026-73819
Use after free in Microsoft Office Word allows an unauthorized attacker to execute code over a network...
CVE-2026-82056
A race condition in MongoDB server's text index query parsing can cause a heap use-after-free read when handling upsert retry paths. Under certain concurrent index lifecycle operations, a raw pointer to internal text index metadata may be dereferenced after the underlying structures have been...
CVE-2026-78507
CVE-2026-78507 is a use-after-free vulnerability in Microsoft Office Word that allows an unauthorized attacker to achieve remote code execution over a network. The attack requires user interaction (e.g., opening a malicious document) but no prior privileges. The CVSS 3.1 score is 8.8 (High) with ...
EUVD-2026-73816
Use after free in Microsoft Office Word allows an unauthorized attacker to execute code over a network...
EUVD-2026-73812
Use after free in Windows Services for NFS ONCRPC XDR Driver allows an unauthorized attacker to execute code over a network...
CVE-2026-69595
CVE-2026-69595 is a use-after-free vulnerability in the Windows Services for NFS ONCRPC XDR Driver that allows an unauthorized, unauthenticated attacker to achieve remote code execution over the network. Microsoft rated it CRITICAL (CVSS 3.1: 9.8) with low attack complexity and no user interactio...
EUVD-2026-73810
Use after free in Windows Security Health Service allows an authorized attacker to elevate privileges locally...
CVE-2026-78457
CVE-2026-78457 is a use-after-free vulnerability in Windows Security Health Service that enables a locally authenticated attacker to achieve privilege escalation . The CVSS 3.1 score is 7.0 (HIGH) , with a local attack vector, high complexity, low privileges required, and no user interaction. Imp...
EUVD-2026-73801
Use after free in Reliable Multicast Transport Driver RMCAST allows an unauthorized attacker to execute code over a network...
CVE-2026-78450
CVE-2026-78450 is a use-after-free vulnerability in the Windows Reliable Multicast Transport Driver (RMCAST) that allows an unauthorized, network-based attacker to achieve remote code execution . The vulnerability was reported by Microsoft (CNA source) and assigned a CVSS 3.1 base score of 8.1 (H...
CVE-2026-78449
CVE-2026-78449 is a use-after-free vulnerability in the Windows Reliable Multicast Transport Driver (RMCAST) that allows an unauthorized attacker to execute code over the network. The vulnerability is rated CVSS 3.1: 8.1 (HIGH) with a vector of AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H, indicating a ne...