CVE-2026-70339: Access of Resource Using Incompatible Type

Access of resource using incompatible type 'type confusion' in Microsoft Edge Chromium-based allows an unauthorized attacker to execute code over a network...

CVE-2026-70326: Server-Side Request Forgery (SSRF)

Server-side request forgery ssrf in Microsoft Office SharePoint allows an authorized attacker to elevate privileges over a network...

CVE-2026-65791: Heap-based Buffer Overflow

Heap-based buffer overflow in Windows iSCSI Target Service allows an unauthorized attacker to execute code over a network...

CVE-2026-64897: Improper Neutralization of Input During Web Page Generation

Improper neutralization of input during web page generation 'cross-site scripting' in Microsoft Office SharePoint allows an authorized attacker to perform spoofing over a network...

CVE-2026-62872: Incorrect Authorization

Incorrect authorization in .NET Framework allows an authorized attacker to elevate privileges over a network...

CVE-2026-62823: Heap-based Buffer Overflow

Heap-based buffer overflow in Windows DHCP Server allows an unauthorized attacker to execute code over an adjacent network...

CVE-2026-62778: Use After Free

Use after free in Windows DNS allows an unauthorized attacker to elevate privileges over a network...

CVE-2026-62757: Improper Verification of Cryptographic Signature

Improper verification of cryptographic signature in Windows Schannel allows an unauthorized attacker to bypass a security feature over a network...

CVE-2026-70340: Missing Authorization

Missing authorization in Azure CycleCloud allows an authorized attacker to elevate privileges over a network...

CVE-2026-62910: Improper Control of Resource Identifiers

Improper control of resource identifiers 'resource injection' in Microsoft Exchange Server allows an authorized attacker to elevate privileges over a network...

CVE-2026-62878: Stack-based Buffer Overflow

Stack-based buffer overflow in Windows DNS allows an unauthorized attacker to execute code over a network...

CVE-2026-62795: Use After Free

Use after free in Windows LDAP - Lightweight Directory Access Protocol allows an unauthorized attacker to execute code over a network...

CVE-2026-62792: Stack-based Buffer Overflow

Stack-based buffer overflow in Windows TCP/IP allows an unauthorized attacker to execute code over a network...

CVE-2026-59138: NULL Pointer Dereference

Null pointer dereference in Microsoft Remote Registry Service allows an authorized attacker to deny service over a network...

CVE-2026-59134: Heap-based Buffer Overflow

Heap-based buffer overflow in Remote Desktop Client allows an unauthorized attacker to execute code over a network...

CVE-2026-59133: Execution with Unnecessary Privileges

Execution with unnecessary privileges in Microsoft High Performance Computing HPC Pack allows an authorized attacker to elevate privileges over a network...

CVE-2026-49179: Improper Neutralization of Special Elements used in a Command

Improper neutralization of special elements used in a command 'command injection' in Windows Active Directory allows an unauthorized attacker to execute code over a network...

CVE-2026-63512: Incorrect Authorization

Incorrect authorization in Microsoft Office SharePoint allows an authorized attacker to perform tampering over a network...

PT-2026-70306

Name of the Vulnerable Software and Affected Versions IntelR PROSet/Wireless WiFi Software for Windows affected versions not specified Description A null pointer dereference within Ring 2 device drivers can lead to a denial of service. A remote, unauthenticated adversary can trigger this issue vi...

PT-2026-70439

Name of the Vulnerable Software and Affected Versions Remote Desktop Client affected versions not specified Description An out-of-bounds read exists that allows an unauthorized attacker to disclose sensitive information over a network, which can subsequently affect the system. An out-of-bounds re...