CVE-2026-69686

Microsoft Office Word is affected by a stack-based buffer overflow that allows an unauthorized, network-based attacker to achieve remote code execution . The CVSS 3.1 base score is 8.8 (HIGH) , with a vector of AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H, indicating that user interaction is required (e.g...

EUVD-2026-73151

Stack-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code over a network...

CVE-2026-69678

Microsoft Office PowerPoint is affected by a use-after-free vulnerability that allows an unauthorized attacker to achieve remote code execution over a network, rated CVSS 8.8 (HIGH) with user interaction required and no prior privileges. The attack vector is network-based with low complexity, yie...

CVE-2026-69649

CVE-2026-69649 is a heap-based buffer overflow in the Windows Raw Image Extension that allows an unauthorized attacker to achieve remote code execution over a network. The vulnerability requires user interaction but no prior privileges, with a CVSS 3.1 score of 8.8 (HIGH) reflecting high impact o...

EUVD-2026-73147

Heap-based buffer overflow in Windows Raw Image Extension allows an unauthorized attacker to execute code over a network...

CVE-2026-69641

CVE-2026-69641 is a missing authorization vulnerability in Microsoft Exchange Server that allows an authorized attacker to elevate privileges over a network . The CVSS v3.1 base score is 9.1 (Critical) with a scope change, indicating high impact on confidentiality, integrity, and availability onc...

EUVD-2026-73139

Heap-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code over a network...

CVE-2026-69443

CVE-2026-69443 is an out-of-bounds read in Windows Device Health Attestation (DHA) that allows an unauthorized attacker to disclose information over a network . The vulnerability is rated CVSS 7.5 (High) with a vector of AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N, meaning it is exploitable over the netw...

EUVD-2026-73127

Authorization bypass through user-controlled key in Microsoft Exchange Server allows an authorized attacker to perform tampering over a network...

CVE-2026-69378

Microsoft Exchange Server is affected by an uncontrolled recursion vulnerability that allows an unauthenticated, remote attacker to cause a denial of service over the network. The CVSS 3.1 score is 7.5 (HIGH) with low attack complexity, no privileges required, and no user interaction needed. No s...

EUVD-2026-73124

External control of file name or path in Microsoft Exchange Server allows an authorized attacker to execute code over a network...

EUVD-2026-73122

Out-of-bounds read in Windows Message Queuing Queue Manager allows an unauthorized attacker to deny service over a network...

EUVD-2026-73112

Use after free in Windows Deployment Services allows an authorized attacker to execute code over a network...

CVE-2026-70586

CVE-2026-70586 is a heap-based buffer overflow in Windows Paint that allows an unauthorized attacker to achieve remote code execution over a network. The vulnerability requires user interaction (e.g., opening a crafted file) but no prior privileges. Microsoft rates it CVSS 8.8 (HIGH) with high im...

EUVD-2026-73081

Improper link resolution before file access 'link following' in Windows Shell allows an unauthorized attacker to perform spoofing over a network...

CVE-2026-70351

CVE-2026-70351 is an integer overflow or wraparound in Microsoft WebP Image Extension that allows an unauthorized attacker to achieve remote code execution over a network. The CVSS 3.1 base score is 8.8 (High) , with low attack complexity and no privileges required, though user interaction is req...

CVE-2026-70342

CVE-2026-70342 affects the Windows Ancillary Function Driver for WinSock (AFD). The vulnerability is a use after free flaw that allows an unauthorized attacker to elevate privileges over a network. The CVSS 3.1 score is 8.1 (HIGH) , with a vector of network-based, high complexity, no privileges r...

EUVD-2026-73070

Use after free in Windows Key Distribution Center allows an authorized attacker to execute code over a network...

EUVD-2026-73069

Use after free in Windows DNS allows an unauthorized attacker to execute code over a network...

CVE-2026-69732

CVE-2026-69732 is a heap-based buffer overflow in Windows Link Layer Topology Discovery Protocol (LLTD) that allows an unauthorized attacker to execute code over a network. The vulnerability carries a CVSS 3.1 score of 8.1 (HIGH) , with high impact on confidentiality, integrity, and availability,...