CVE-2026-68775

Microsoft SQL Server is affected by a heap-based buffer overflow vulnerability that allows an authorized attacker (with low privileges) to achieve remote code execution over a network. The CVSS 3.1 base score is 8.8 (HIGH) with a vector of AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H, indicating high impa...

CVE-2026-67642

Microsoft SQL Server is affected by a heap-based buffer overflow that allows an authorized attacker (low privileges required) to achieve remote code execution over the network. The vulnerability is rated CVSS 3.1 8.8 (High) with high impact to confidentiality, integrity, and availability. CISA's ...

EUVD-2026-73389

Heap-based buffer overflow in SQL Server allows an authorized attacker to execute code over a network...

EUVD-2026-73387

Heap-based buffer overflow in SQL Server allows an authorized attacker to execute code over a network...

CVE-2026-67638

Microsoft SQL Server is affected by a heap-based buffer overflow that allows an authorized (low-privilege) attacker to execute code over the network, resulting in a Remote Code Execution vulnerability. The CVSS 3.1 score is 8.8 (HIGH) with vector AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H, sourced by Mi...

EUVD-2026-73383

Heap-based buffer overflow in SQL Server allows an authorized attacker to execute code over a network...

EUVD-2026-73379

Heap-based buffer overflow in SQL Server allows an authorized attacker to execute code over a network...

CVE-2026-67381

A heap-based buffer overflow in Microsoft SQL Server allows an authorized attacker to elevate privileges over a network . The CVSS 3.1 score is 8.8 (HIGH) , with an attack vector of network, low complexity, low privileges required, and no user interaction needed, resulting in high impact to confi...

EUVD-2026-73380

Heap-based buffer overflow in SQL Server allows an authorized attacker to elevate privileges over a network...

CVE-2026-67380

CVE-2026-67380 is a heap-based buffer overflow in Microsoft SQL Server that allows an authorized attacker to achieve remote code execution over a network. The vulnerability is rated CVSS 8.8 (HIGH) with a vector of AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H, meaning exploitation requires network access,...

EUVD-2026-73365

Heap-based buffer overflow in Windows ALPC allows an authorized attacker to elevate privileges locally...

CVE-2026-85880

CVE-2026-85880 is a heap-based buffer overflow in Windows ALPC (Advanced Local Procedure Call) that enables a locally authorized attacker to escalate privileges with full impact on confidentiality, integrity, and availability (CVSS 7.8 HIGH). CISA added this CVE to the Known Exploited Vulnerabili...

EUVD-2026-73364

Heap-based buffer overflow in Windows Print Spooler Components allows an unauthorized attacker to execute code over a network...

EUVD-2026-73361

Heap-based buffer overflow in Remote Desktop Client allows an unauthorized attacker to execute code over a network...

CVE-2026-83998

A heap-based buffer overflow in Microsoft Remote Desktop Client allows an unauthorized attacker to achieve remote code execution over a network, requiring user interaction but no prior privileges (CVSS 8.8 HIGH ). The CNA is Microsoft ([email protected]), with the advisory published via MSRC ....

EUVD-2026-73360

Heap-based buffer overflow in Windows Error Reporting allows an authorized attacker to elevate privileges locally...

EUVD-2026-73357

Heap-based buffer overflow in Windows Biometric Service allows an authorized attacker to elevate privileges locally...

CVE-2026-83976

CVE-2026-83976 is a heap-based buffer overflow in the Windows Biometric Service that allows an authorized attacker to achieve local privilege escalation . The vulnerability requires low privileges and no user interaction , with an attack vector of local and low complexity , rated CVSS 7.8 (HIGH) ...

EUVD-2026-73356

Heap-based buffer overflow in Windows Biometric Service allows an authorized attacker to elevate privileges locally...

CVE-2026-83975

Windows Biometric Service is affected by a heap-based buffer overflow that allows a locally authenticated attacker with low privileges to escalate to higher privilege. The vulnerability requires no user interaction and has low attack complexity , resulting in a CVSS 3.1 score of 7.8 (HIGH) with h...