CVE-2026-62702: NULL Pointer Dereference

Null pointer dereference in Windows Graphics Kernel allows an unauthorized attacker to deny service over a network...

CVE-2026-70339: Access of Resource Using Incompatible Type

Access of resource using incompatible type 'type confusion' in Microsoft Edge Chromium-based allows an unauthorized attacker to execute code over a network...

CVE-2026-70326: Server-Side Request Forgery (SSRF)

Server-side request forgery ssrf in Microsoft Office SharePoint allows an authorized attacker to elevate privileges over a network...

CVE-2026-65791: Heap-based Buffer Overflow

Heap-based buffer overflow in Windows iSCSI Target Service allows an unauthorized attacker to execute code over a network...

CVE-2026-64897: Improper Neutralization of Input During Web Page Generation

Improper neutralization of input during web page generation 'cross-site scripting' in Microsoft Office SharePoint allows an authorized attacker to perform spoofing over a network...

CVE-2026-62872: Incorrect Authorization

Incorrect authorization in .NET Framework allows an authorized attacker to elevate privileges over a network...

CVE-2026-62823: Heap-based Buffer Overflow

Heap-based buffer overflow in Windows DHCP Server allows an unauthorized attacker to execute code over an adjacent network...

CVE-2026-62778: Use After Free

Use after free in Windows DNS allows an unauthorized attacker to elevate privileges over a network...

CVE-2026-62757: Improper Verification of Cryptographic Signature

Improper verification of cryptographic signature in Windows Schannel allows an unauthorized attacker to bypass a security feature over a network...

CVE-2026-61920: Concurrent Execution using Shared Resource with Improper Synchronization

Concurrent execution using shared resource with improper synchronization 'race condition' in Windows DNS allows an authorized attacker to execute code over a network...

CVE-2026-65806: Missing Authorization

Missing authorization in Azure CycleCloud allows an authorized attacker to disclose information over a network...

CVE-2026-70340: Missing Authorization

Missing authorization in Azure CycleCloud allows an authorized attacker to elevate privileges over a network...

CVE-2026-62910: Improper Control of Resource Identifiers

Improper control of resource identifiers 'resource injection' in Microsoft Exchange Server allows an authorized attacker to elevate privileges over a network...

CVE-2026-62878: Stack-based Buffer Overflow

Stack-based buffer overflow in Windows DNS allows an unauthorized attacker to execute code over a network...

CVE-2026-62795: Use After Free

Use after free in Windows LDAP - Lightweight Directory Access Protocol allows an unauthorized attacker to execute code over a network...

CVE-2026-62792: Stack-based Buffer Overflow

Stack-based buffer overflow in Windows TCP/IP allows an unauthorized attacker to execute code over a network...

CVE-2026-59138: NULL Pointer Dereference

Null pointer dereference in Microsoft Remote Registry Service allows an authorized attacker to deny service over a network...

CVE-2026-59134: Heap-based Buffer Overflow

Heap-based buffer overflow in Remote Desktop Client allows an unauthorized attacker to execute code over a network...

CVE-2026-59133: Execution with Unnecessary Privileges

Execution with unnecessary privileges in Microsoft High Performance Computing HPC Pack allows an authorized attacker to elevate privileges over a network...

CVE-2026-49179: Improper Neutralization of Special Elements used in a Command

Improper neutralization of special elements used in a command 'command injection' in Windows Active Directory allows an unauthorized attacker to execute code over a network...