CVE-2026-86509: Stack-based Buffer Overflow

A flaw has been found in D-Link DIR-895L A1102b07. This impacts the function sendOffer/sendACK of the file udhcpcd/serverpacket.c of the component udhcpcd. This manipulation causes stack-based buffer overflow. The attack can only be done within the local network. The exploit has been published an...

CVE-2026-80090: Out-of-bounds Read

Out-of-bounds read in Microsoft Office Word allows an unauthorized attacker to disclose information over a network...

CVE-2026-80088: Out-of-bounds Read

Out-of-bounds read in Microsoft Office Word allows an unauthorized attacker to disclose information over a network...

CVE-2026-81952: Heap-based Buffer Overflow

Heap-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code over a network...

CVE-2026-65669: Improper Neutralization of Special Elements in Output Used by a Downstream Component

Improper neutralization of special elements in output used by a downstream component 'injection' in SQL Server allows an unauthorized attacker to elevate privileges over a network...

CVE-2026-69423: Heap-based Buffer Overflow

Heap-based buffer overflow in Windows USB Video Driver allows an authorized attacker to elevate privileges over a network...

CVE-2026-69443: Out-of-bounds Read

Out-of-bounds read in Microsoft Azure Attestation service and Device Health Attestation Service allows an unauthorized attacker to disclose information over a network...

CVE-2026-69620: Stack-based Buffer Overflow

Stack-based buffer overflow in Windows DHCP Server allows an unauthorized attacker to execute code over a network...

PT-2026-87549

Name of the Vulnerable Software and Affected Versions Windows Remote Desktop Services affected versions not specified Description A use after free issue in Windows Remote Desktop Services allows an authorized attacker to execute arbitrary code over a network, which can affect the system. Use afte...

CVE-2026-68834: Stack-based Buffer Overflow

Stack-based buffer overflow in Windows NTFS allows an authorized attacker to elevate privileges over a network...

CVE-2026-68889: Heap-based Buffer Overflow

Heap-based buffer overflow in Microsoft Standard XPS allows an authorized attacker to elevate privileges over a network...

PT-2026-87351

Name of the Vulnerable Software and Affected Versions Microsoft Windows Search Component affected versions not specified Description A use-after-free condition in the Microsoft Windows Search Component allows an authorized attacker to elevate privileges over a network. Use-after-free is a memory...

PT-2026-87267

Name of the Vulnerable Software and Affected Versions Remote Desktop Client affected versions not specified Description A heap-based buffer overflow occurs in the Remote Desktop Client, which allows an unauthorized attacker to execute arbitrary code over a network and affect the system. A...

PT-2026-88008

Name of the Vulnerable Software and Affected Versions Microsoft Office Word affected versions not specified Description A stack-based buffer overflow occurs when a program writes more data to a buffer located on the stack than the buffer is allocated to hold, potentially overwriting adjacent...

PT-2026-88018

Name of the Vulnerable Software and Affected Versions Microsoft Office Word affected versions not specified Description A use after free issue exists in Microsoft Office Word, which allows an unauthorized remote attacker to execute arbitrary code over a network and affect the system. Use after fr...

PT-2026-88009

Name of the Vulnerable Software and Affected Versions Microsoft Office affected versions not specified Description A heap-based buffer overflow occurs when a program writes more data to a heap memory block than it can hold, potentially corrupting memory. This issue allows an unauthorized remote...

CVE-2026-78439: Stack-based Buffer Overflow

Stack-based buffer overflow in Microsoft Graphics Component allows an unauthorized attacker to execute code over a network...

CVE-2026-78511: Heap-based Buffer Overflow

Heap-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code over a network...

CVE-2026-81349: Improper Neutralization of Special Elements used in an OS Command

Improper neutralization of special elements used in an os command 'os command injection' in Azure HDInsights allows an authorized attacker to elevate privileges over a network...

CVE-2026-77909: Insufficiently Protected Credentials

Insufficiently protected credentials in Azure CycleCloud allows an authorized attacker to disclose information over a network...