CVE-2026-77487: Improper Access Control

Improper access control in SQL Server allows an authorized attacker to elevate privileges over a network...

CVE-2026-77502: Out-of-bounds Read

Out-of-bounds read in Windows DHCP Server allows an unauthorized attacker to deny service over a network...

CVE-2026-77895: Out-of-bounds Read

Out-of-bounds read in Windows DHCP Server allows an unauthorized attacker to deny service over a network...

CVE-2026-78463: Improper Control of Generation of Code

Improper control of generation of code 'code injection' in Remote Desktop Client allows an unauthorized attacker to execute code over a network...

PT-2026-87955

Name of the Vulnerable Software and Affected Versions Windows DHCP Server affected versions not specified Description An out-of-bounds read occurs in the Windows DHCP Server, which allows an unauthorized attacker to cause a denial of service over a network. An out-of-bounds read is a condition...

PT-2026-87963

Out-of-bounds read in Windows DHCP Server allows an unauthorized attacker to deny service over a network...

PT-2026-87977

Name of the Vulnerable Software and Affected Versions Microsoft Office Word affected versions not specified Description A null pointer dereference occurs in Microsoft Office Word, which allows an unauthorized remote attacker to execute arbitrary code over a network and affect the system. A null...

CVE-2026-78462: Authorization Bypass Through User-Controlled Key

Authorization bypass through user-controlled key in Visual Studio Code allows an unauthorized attacker to bypass a security feature over a network...

CVE-2026-69462: Heap-based Buffer Overflow

Heap-based buffer overflow in Windows Error Reporting allows an authorized attacker to elevate privileges over a network...

CVE-2026-69496: Heap-based Buffer Overflow

Heap-based buffer overflow in Windows Compressed Folder allows an unauthorized attacker to execute code over a network...

CVE-2026-70019: Windows Hard Link

Windows hard link in Windows Compressed Folder allows an unauthorized attacker to disclose information over a network...

PT-2026-87479

Name of the Vulnerable Software and Affected Versions Windows Management Instrumentation affected versions not specified Description A use after free issue in Windows Management Instrumentation allows an authorized attacker to elevate privileges over a network. Use after free is a memory corrupti...

CVE-2026-77501: Out-of-bounds Read

Out-of-bounds read in Windows DHCP Server allows an unauthorized attacker to deny service over a network...

CVE-2026-77886: Out-of-bounds Read

Out-of-bounds read in Windows DHCP Server allows an unauthorized attacker to deny service over a network...

PT-2026-87524

Stack-based buffer overflow in Windows USB Driver allows an authorized attacker to elevate privileges over a network...

CVE-2026-69503: Stack-based Buffer Overflow

Stack-based buffer overflow in Windows USB Driver allows an authorized attacker to elevate privileges over a network...

PT-2026-87666

Use after free in Windows Win32K allows an authorized attacker to elevate privileges over a network...

CVE-2026-69624: Incomplete List of Disallowed Inputs

Incomplete list of disallowed inputs in Active Directory Certificate Services AD CS allows an authorized attacker to perform tampering over a network...

CVE-2026-69395: Use of Externally-Controlled Format String

Use of externally-controlled format string in Active Directory Certificate Services AD CS allows an authorized attacker to disclose information over a network...

CVE-2026-68839: Heap-based Buffer Overflow

Heap-based buffer overflow in Windows USB Mass Storage Class Driver allows an unauthorized attacker to execute code over a network...