CVE-2026-96248

A stack-based buffer overflow exists in the Windows Host Guardian Service , which could allow an unauthorized attacker to perform a denial of service (DoS) attack over a network. The vulnerability is categorized under CWE-121 and has been assigned a High base severity score of 7.5. Remediation is...

CVE-2026-96311

A vulnerability exists in the Windows Network List Service due to improper authorization . This flaw allows an authorized attacker to perform local tampering . The impact is categorized as a high integrity compromise with a base score of 5.5. No specific exploit details or in-the-wild exploitatio...

CVE-2026-96246

An out-of-bounds read vulnerability exists in Network Policy Server (NPS) . This flaw allows an unauthorized attacker to disclose information over a network. The vulnerability is associated with CWE-125 and has a HIGH CVSSv3.1 severity score of 7.5 . No specific root cause, affected versions, or ...

CVE-2026-96224

An out-of-bounds write vulnerability exists in .NET , allowing an unauthorized attacker to achieve remote code execution over a network. The vulnerability has a CVSS v3.1 score of 8.80 (High), where the attack complexity is low, but user interaction is required. Exploitation details and specific ...

CVE-2026-96219

A critical out-of-bounds write vulnerability exists in the Windows Local Security Authority Subsystem Service (LSASS) . This flaw allows an unauthorized attacker to achieve remote code execution over a network. The vulnerability is assigned a CVSS v3.1 score of 9.80 , indicating a high severity l...

CVE-2026-88196

A heap-based buffer overflow vulnerability in Microsoft Office allows an unauthorized attacker to achieve remote code execution over a network. The vulnerability affects multiple products including Word , Excel , Access , Outlook , Visio , SharePoint , and PowerPoint , as well as subcomponents li...

CVE-2026-88198

A missing authorization vulnerability in Microsoft Office SharePoint (CVE-2026-88198) allows an authorized attacker to elevate privileges over a network. The impact is rated as High with a CVSS 3.1 score of 8.8. Microsoft has released official updates to address this issue; users are recommended ...

CVE-2026-88178

A Use after free vulnerability in Microsoft Office PowerPoint allows an unauthorized attacker to achieve Remote Code Execution over a network. The vulnerability has a CRITICAL severity with a CVSS score of 9.8 . Microsoft has released updates to address this issue; users are encouraged to install...

CVE-2026-88201

A buffer over-read vulnerability in Microsoft Office Excel allows an unauthorized attacker to disclose sensitive information over a network. This vulnerability impacts the confidentiality of data within the victim's context. Microsoft has released official updates to address this issue; users are...

CVE-2026-88150

A use of uninitialized resource vulnerability in Microsoft Office Word allows an unauthorized attacker to achieve remote code execution over a network. The vulnerability has a CVSS 3.1 score of 8.8 (High) . Microsoft has released security updates to address this issue; users are recommended to in...

CVE-2026-70298

A path traversal vulnerability in Microsoft Office SharePoint (CVE-2026-70298) allows an authorized attacker to disclose sensitive information over a network due to an improper limitation of a pathname to a restricted directory. Microsoft has released updates to address this issue; users are enco...

CVE-2026-85900

A deserialization of untrusted data vulnerability in Microsoft Office SharePoint allows an authorized attacker to achieve arbitrary code execution over a network. This flaw is categorized as CWE-502 and has a CVSS 3.1 score of 8.80 (High). Microsoft has released official updates to address this v...

CVE-2026-88151

Microsoft Office Excel is affected by an out-of-bounds read vulnerability (CVE-2026-88151 ), which may allow an unauthorized attacker to disclose information over a network. This vulnerability has been addressed by Microsoft with the release of security updates. Users are encouraged to install th...

CVE-2026-70251

A Server-side request forgery (SSRF) vulnerability exists in Microsoft Office SharePoint , as detailed in CVE-2026-70251 . This flaw allows an authorized attacker to achieve privilege escalation over a network. Microsoft has released official updates to address this issue; users are encouraged to...

CVE-2026-70206

An out-of-bounds read vulnerability exists in Microsoft Office Word , which may allow an unauthorized attacker to disclose information over a network. This vulnerability is categorized as a security risk that could grant access to sensitive data. Microsoft has released official updates to address...

CVE-2026-70282

A heap-based buffer overflow vulnerability exists in Microsoft Office Outlook , which could allow an unauthorized attacker to achieve remote code execution over a network. To successfully exploit this, an attacker must trick a victim into opening a malicious file or clicking a malicious link. Mic...

CVE-2026-70266

A SQL injection vulnerability exists in Microsoft Office SharePoint due to the improper neutralization of special elements used in an SQL command. This flaw allows an authorized attacker to elevate privileges over a network. Microsoft has released updates to address this issue, and users are enco...

CVE-2026-70267

A vulnerability in Microsoft Office SharePoint allows an authorized attacker to perform remote code execution over a network. The root cause is the inclusion of functionality from untrusted control sphere (CWE-829). This issue has a CVSS v3.1 score of 7.2 (High) , impacting confidentiality, integ...

CVE-2026-70196

A Denial of Service vulnerability exists in ASP.NET Core due to inefficient algorithmic complexity . An unauthorized attacker can exploit this issue over a network to disrupt service availability. Microsoft has identified this vulnerability and provides an official fix in their update guidance.

CVE-2026-70159

A Denial-of-Service vulnerability exists in ASP.NET Core due to the allocation of resources without limits or throttling . This flaw allows an unauthorized attacker to cause a service interruption over a network. The vulnerability has a CVSS v3.1 score of 7.5 (High) . No specific patch versions o...