CVE-2026-58640

CVE-2026-58640 is a heap-based buffer overflow in Windows NTFS that enables an authorized local attacker to execute code. The vulnerability is tied to Windows NTFS logic and has a CVSS v3.1 score of 7.3 (HIGH) with local access required and user interaction. Affected component: Windows NTFS; root...

CVE-2026-58618

CVE-2026-58618 : Heap-based buffer overflow in Microsoft Office Excel can allow a local attacker to execute code. Affects Excel components implicated in the heap overflow; CVSS 3.1 base score 7.8 (High). Exploitation is local and requires user interaction. Current connected docs reference Microso...

CVE-2026-58610

CVE-2026-58610: A heap-based buffer overflow in Microsoft Windows Media Foundation is described as allowing an unauthorized attacker to execute code locally. The NVD entry confirms the vulnerability and impact (local code execution) with a CVSS 3.1 base score of 7.8 (HIGH) and a local attack vect...

CVE-2026-55948

CVE-2026-55948 is a use-after-free vulnerability in Microsoft Office Excel that can allow local code execution. Affected: Excel (Office). Root cause: use-after-free in the Excel component. Impact: HIGH for confidentiality, integrity, and availability. CVSS v3.1 base score 7.8; attack vector LOCAL...

CVE-2026-55948

Use after free in Microsoft Office Excel allows an unauthorized attacker to execute code locally...

CVE-2026-55899

Stack-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code locally...

CVE-2026-55899

Microsoft Excel is affected by a stack-based buffer overflow (CVE-2026-55899) that can allow a local attacker to execute code with high impact. The CVSS indicates local access with user interaction required and high confidentiality/integrity/availability impact. Root cause: overflow in Excel’s ha...

CVE-2026-50675

CVE-2026-50675 describes a heap-based buffer overflow in Microsoft Office Excel that allows a local attacker to execute code on the affected system. The connected sources confirm the issue is tied to Excel, with a high-severity CVSS 3.1 score (AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H). No specific vul...

CVE-2026-50675

Heap-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code locally...

CVE-2026-50520

Improper neutralization of special elements used in a command 'command injection' in Visual Studio Code allows an unauthorized attacker to execute code locally...

CVE-2026-50520

CVE-2026-50520: Visual Studio Code is affected by a command-injection vulnerability due to improper neutralization of special elements in a command, enabling a local attacker to execute code. The CVSS v3.1 base score is 8.4 (HIGH) with LOCAL attack vector, no user interaction required, and high i...

CVE-2026-55011

Integer underflow wrap or wraparound in Microsoft Defender allows an unauthorized attacker to execute code locally...

CVE-2026-55011

CVE-2026-55011 : The vulnerability is a local code execution in Microsoft Defender caused by an integer underflow (wrap/wraparound), allowing an unauthorized attacker to run code on the affected system. The available documents consistently describe a local-execution impact from this underflow; no...

CVE-2026-55012

Integer overflow or wraparound in Microsoft Defender allows an unauthorized attacker to execute code locally...

CVE-2026-55012

CVE-2026-55012 is a Microsoft Defender vulnerability described as an integer overflow/wraparound that enables local code execution. The CVSS details indicate a Local attack vector with User Interaction required, no privileges required, and impacts to Confidentiality, Integrity, and Availability (...

CVE-2026-54122

CVE-2026-54122 describes a heap-based buffer overflow in Windows GDI+ that enables local code execution by an unauthenticated attacker. The vulnerability affects the Windows GDI+ component and is rated high (CVSS 3.1: AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H, 8.4). The available documents confirm the ...

CVE-2026-54122

Heap-based buffer overflow in Windows GDI+ allows an unauthorized attacker to execute code locally...

CVE-2026-54109

CVE-2026-54109 : Integer overflow or wraparound in Windows Resilient File System (ReFS) allows an authorized local attacker to execute code. The NVD entry confirms a local-execution impact with high severity (AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H). Details in connected sources show the vulnerabilit...

CVE-2026-54109

Integer overflow or wraparound in Windows Resilient File System ReFS allows an authorized attacker to execute code locally...

CVE-2026-54992

CVE-2026-54992 is a heap-based buffer overflow affecting the Windows Message Queuing Queue Manager that allows a local attacker to execute code. The vulnerability is described in NVD/MSRC references as enabling local arbitrary code execution. The public entries consistently describe the same unde...