CVE-2026-83635

A vulnerability exists in the DNS Server caused by an out-of-bounds read (CWE-125). This flaw allows an unauthorized attacker to perform a denial of service (DoS) over the network. The vulnerability has a HIGH base severity score of 7.5 (CVSS 3.1). While specific affected versions or internal com...

CVE-2026-83578

A critical integer underflow (wrap or wraparound) vulnerability exists in Windows PowerShell . This flaw allows an unauthorized attacker to achieve remote code execution over a network. According to the provided metrics, the vulnerability has a CVSSv3.1 score of 9.8 , indicating high severity for...

CVE-2026-69830

A race condition vulnerability exists in the Windows DHCP Server due to concurrent execution using a shared resource with improper synchronization (CWE-362 , CWE-416 ). This flaw allows an unauthorized attacker to achieve remote code execution over the network. The CVSS 3.1 score is 8.1 (High) , ...

CVE-2026-69651

A Denial-of-Service vulnerability exists in .NET due to inefficient algorithmic complexity . This flaw allows an unauthorized attacker to cause a service disruption over a network. The vulnerability has been identified as part of the Microsoft Developer Tools suite. While the vulnerability is con...

CVE-2026-69883

A Use after free vulnerability in Windows iSCSI allows an unauthorized attacker to achieve Remote Code Execution (RCE) over a network. The vulnerability carries a CRITICAL base score of 9.8 , impacting confidentiality, integrity, and availability. No specific exploit details or remediation steps ...

CVE-2026-66822

The .NET component is affected by an information disclosure vulnerability where sensitive information can be inserted into sent data. This flaw allows an unauthorized attacker to disclose information over a network. The vulnerability has a CVSS v3.1 score of 5.9 (Medium severity) and is classifie...

CVE-2026-69705

A critical out-of-bounds write vulnerability in Windows iSCSI allows an unauthorized attacker to achieve remote code execution over a network. The vulnerability is rated with a CVSS score of 9.80 , indicating a high severity where no prior authentication or user interaction is required. Systems c...

CVE-2026-70119

An out-of-bounds read vulnerability exists in Windows DNS . This flaw allows an authorized attacker to achieve remote code execution over a network. While the specific affected versions or internal components are not detailed in the provided documents, the vulnerability is confirmed to impact the...

CVE-2026-70133

The Windows SMB Server is susceptible to a Denial of Service vulnerability caused by the allocation of resources without limits or throttling (CWE-770). An unauthorized attacker can exploit this flaw over the network to disrupt service availability. While specific exploit details or in-the-wild o...

CVE-2026-70166

An out-of-bounds read vulnerability exists in Windows DNS . This flaw allows an authorized attacker to perform a denial of service over a network. The CVSS 3.1 score is 6.5 (Medium) , with high availability impact. No specific exploit details or patch versions are provided in the documents.

CVE-2026-70127

A Use after free vulnerability exists in the Windows Domain Name Service (DNS Server) . This flaw allows an unauthorized attacker to achieve Remote Code Execution (RCE) over a network. The vulnerability is rated as HIGH severity (CVSS 3.1 score of 8.1) and affects confidentiality, integrity, and ...

CVE-2026-70082

An uncaught exception in Windows DNS allows an unauthorized attacker to perform a Denial of Service (DoS) over the network. The vulnerability is categorized under CWE-248 and has a CVSS 3.1 base score of 7.5 . While the documents confirm the impact is a high availability risk, specific details re...

CVE-2026-70014

A Use after free vulnerability in Windows Cryptographic Services allows an authorized attacker to execute code over a network. The vulnerability results in Remote Code Execution (RCE) and is characterized by a high base severity score. Specific details regarding the impacted component or file are...

CVE-2026-70033

The Windows Remote Desktop Gateway (RD Gateway) is susceptible to a Denial of Service (DoS) vulnerability caused by a missing release of memory after effective lifetime (CWE-401) within the Remote Desktop Gateway Service . An unauthorized attacker can exploit this issue over a network to disrupt ...

CVE-2026-70025

A Use after free vulnerability in Windows Netlogon allows an authorized attacker to perform a denial of service over a network. The vulnerability is confirmed with a CVSS 3.1 base score of 5.3 (Medium severity). While the attack vector is network-based, it requires low privileges and has high att...

CVE-2026-69968

A relative path traversal vulnerability exists in Windows Libarchive . This flaw allows an unauthorized attacker to perform tampering over a network. The vulnerability is rated as Medium severity (CVSS 3.1: 6.5) with a focus on integrity impact . Exploitation details are not provided in the docum...

CVE-2026-69973

A path traversal vulnerability exists in Windows Libarchive due to an improper limitation of a pathname to a restricted directory. This flaw allows an unauthorized attacker to perform tampering over a network. The vulnerability has been assigned a MEDIUM severity with a CVSS 3.1 score of 6.5, whe...

CVE-2026-69976

A Use after free vulnerability in the Remote Desktop Client allows an unauthorized attacker to execute code over a network. The vulnerability results in a high impact on confidentiality, integrity, and availability. No specific technical details regarding the root cause component or exploit links...

CVE-2026-69913

A Use after free vulnerability exists in the Windows TCP/IP stack. This flaw allows an unauthorized attacker to achieve remote code execution over a network. Exploitation details and specific affected versions are not provided in the documents, but the vulnerability is confirmed as a HIGH severit...

CVE-2026-108466

An out-of-bounds read vulnerability exists in the Windows Kernel . This flaw allows an unauthorized attacker to cause a denial of service over a network. The vulnerability is associated with CWE-125 and has a CVSS 3.1 base score of 5.3 (Medium), where the attack complexity is high and user intera...