156 matches found
CVE-2026-83998
Heap-based buffer overflow in Remote Desktop Client allows an unauthorized attacker to execute code over a network...
CVE-2026-80073
Out-of-bounds read in Microsoft Office Outlook allows an unauthorized attacker to disclose information over a network...
CVE-2026-78463
Improper control of generation of code 'code injection' in Remote Desktop Client allows an unauthorized attacker to execute code over a network...
CVE-2026-77495
Heap-based buffer overflow in Windows Imaging Component allows an unauthorized attacker to execute code over a network...
CVE-2026-73012
Heap-based buffer overflow in Windows Management Services allows an authorized attacker to elevate privileges over a network...
CVE-2026-69769
Heap-based buffer overflow in Windows HTTP Print Provider allows an unauthorized attacker to execute code over a network...
CVE-2026-69744
Null pointer dereference in Windows Kerberos allows an unauthorized attacker to deny service over a network...
CVE-2026-69732
Heap-based buffer overflow in Windows Link Layer Topology Discovery Protocol allows an unauthorized attacker to execute code over a network...
CVE-2026-69714
Stack-based buffer overflow in Windows Device Association Service allows an authorized attacker to elevate privileges over a network...
CVE-2026-69434
Heap-based buffer overflow in Windows URL Moniker allows an unauthorized attacker to execute code over a network...
CVE-2026-69357
Use after free in Windows NDIS allows an authorized attacker to elevate privileges over a network...
CVE-2026-78462
CVE-2026-78462 is an authorization bypass through a user-controlled key in Visual Studio Code that allows an unauthenticated network attacker to bypass a security feature . The underlying weakness is the use of a user-controllable key in an authorization check, enabling remote exploitation with l...
CVE-2026-72977
CVE-2026-72977 is an out-of-bounds read vulnerability in Microsoft Office PowerPoint that allows an unauthorized, network-based attacker to disclose information . The attack requires user interaction (e.g., opening a crafted file) but no prior authentication. CVSS 3.1 base score is 6.5 (MEDIUM) w...
EUVD-2026-73636
Use after free in Windows DNS allows an unauthorized attacker to execute code over a network...
CVE-2026-69427
CVE-2026-69427 is an out-of-bounds read vulnerability in the Windows VOLSNAP.SYS driver (Volume Shadow Copy service). An authorized attacker can exploit it over a network to elevate privileges . The CVSS 3.1 base score is 8.0 (HIGH) with a vector of AV:N/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H , indicatin...
CVE-2026-69360
CVE-2026-69360 is a heap-based buffer overflow in Microsoft Office Word that allows an unauthorized attacker to achieve remote code execution over a network. The attack requires user interaction (e.g., opening a malicious document) but no prior authentication. The assigned CVSS v3.1 score is 8.8 ...
CVE-2026-78504
CVE-2026-78504 is a stack-based buffer overflow in Microsoft Office Word that allows an unauthorized attacker to achieve remote code execution over a network . The vulnerability is rated CVSS 3.1: 8.8 (High) with vector AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H, meaning exploitation requires user inter...
CVE-2026-77908
CVE-2026-77908 is a code injection vulnerability in Microsoft Dynamics 365 On-Premises that allows an authorized attacker (low privileges) to achieve remote code execution over a network. The flaw stems from improper control of code generation, and the CVSS 3.1 score is 8.8 (HIGH) with impacts ra...