5569 matches found
EUVD-2026-73812
Use after free in Windows Services for NFS ONCRPC XDR Driver allows an unauthorized attacker to execute code over a network...
EUVD-2026-73800
Untrusted pointer dereference in Windows Failover Cluster allows an unauthorized attacker to execute code over a network...
EUVD-2026-73801
Use after free in Reliable Multicast Transport Driver RMCAST allows an unauthorized attacker to execute code over a network...
CVE-2026-78445
CVE-2026-78445 is a use-after-free vulnerability in the Windows Services for NFS ONCRPC XDR Driver , allowing an unauthorized attacker to execute code over a network. Microsoft rates it CVSS 9.8 (Critical) with no privileges required and no user interaction. The vulnerability affects the ONCRPC X...
EUVD-2026-73796
Out-of-bounds read in Windows OLE DB allows an unauthorized attacker to disclose information over a network...
CVE-2026-78442
CVE-2026-78442 is a heap-based buffer overflow in Windows OLE DB that allows an unauthorized attacker to achieve remote code execution over a network with user interaction. The CNA-assigned CVSS 3.1 score is 8.8 (High) with full impact on confidentiality, integrity, and availability. CISA's SSVC ...
EUVD-2026-73794
Out-of-bounds read in SQL Server allows an unauthorized attacker to disclose information over a network...
CVE-2026-77911
CVE-2026-77911 is an out-of-bounds read vulnerability in Microsoft Office Word that allows an unauthorized attacker to disclose information over a network . The flaw requires user interaction and has a CVSS 3.1 score of 6.5 (MEDIUM) with high confidentiality impact but no integrity or availabilit...
EUVD-2026-73790
Null pointer dereference in Microsoft Office Word allows an unauthorized attacker to execute code over a network...
CVE-2026-77901
A null pointer dereference in Microsoft Office Word allows an unauthorized attacker to execute code over a network. The vulnerability requires user interaction (e.g., opening a crafted document) but no prior authentication. CISA rates the technical impact as total while noting exploitation is cur...
CVE-2026-73016
A heap-based buffer overflow in DirectWrite , a component of Microsoft's Graphics Component, allows an unauthorized attacker to achieve remote code execution over a network. The attack requires low complexity, no privileges, and user interaction, with full impact on confidentiality, integrity, an...
EUVD-2026-73777
Heap-based buffer overflow in Windows Imaging Component allows an unauthorized attacker to execute code over a network...
CVE-2026-73010
CVE-2026-73010 is a use-after-free vulnerability in Windows Failover Cluster that allows an unauthenticated, remote attacker to achieve code execution over the network. Microsoft rates it CVSS 9.8 (Critical) with low attack complexity, no required privileges, and high impact to confidentiality, i...
EUVD-2026-73754
Improper resolution of path equivalence in Windows URL Moniker allows an unauthorized attacker to bypass a security feature over a network...
EUVD-2026-73753
Heap-based buffer overflow in Graphic Fonts allows an unauthorized attacker to execute code over a network...
CVE-2026-72987
CVE-2026-72987 is a use after free vulnerability in Windows DNS that allows an unauthorized attacker to execute code over a network, resulting in full compromise of confidentiality, integrity, and availability. The CVSS 3.1 base score is 8.1 (HIGH) , with a network attack vector, high complexity,...
EUVD-2026-73743
Use after free in Windows DNS allows an unauthorized attacker to execute code over a network...
CVE-2026-72975
CVE-2026-72975 is an out-of-bounds read in Microsoft Office PowerPoint that allows an unauthenticated remote attacker to disclose information over a network. The vulnerability requires user interaction (e.g., opening a crafted file) but no prior privileges. CVSS 3.1 scores it 6.5 (Medium) , with ...