CVE-2026-88150

A use of uninitialized resource vulnerability in Microsoft Office Word allows an unauthorized attacker to achieve remote code execution over a network. The vulnerability has a CVSS 3.1 score of 8.8 (High) . Microsoft has released security updates to address this issue; users are recommended to in...

CVE-2026-85900

A deserialization of untrusted data vulnerability in Microsoft Office SharePoint allows an authorized attacker to achieve arbitrary code execution over a network. This flaw is categorized as CWE-502 and has a CVSS 3.1 score of 8.80 (High). Microsoft has released official updates to address this v...

CVE-2026-88151

Microsoft Office Excel is affected by an out-of-bounds read vulnerability (CVE-2026-88151 ), which may allow an unauthorized attacker to disclose information over a network. This vulnerability has been addressed by Microsoft with the release of security updates. Users are encouraged to install th...

CVE-2026-70298

A path traversal vulnerability in Microsoft Office SharePoint (CVE-2026-70298) allows an authorized attacker to disclose sensitive information over a network due to an improper limitation of a pathname to a restricted directory. Microsoft has released updates to address this issue; users are enco...

CVE-2026-70251

A Server-side request forgery (SSRF) vulnerability exists in Microsoft Office SharePoint , as detailed in CVE-2026-70251 . This flaw allows an authorized attacker to achieve privilege escalation over a network. Microsoft has released official updates to address this issue; users are encouraged to...

CVE-2026-70206

An out-of-bounds read vulnerability exists in Microsoft Office Word , which may allow an unauthorized attacker to disclose information over a network. This vulnerability is categorized as a security risk that could grant access to sensitive data. Microsoft has released official updates to address...

CVE-2026-70282

A heap-based buffer overflow vulnerability exists in Microsoft Office Outlook , which could allow an unauthorized attacker to achieve remote code execution over a network. To successfully exploit this, an attacker must trick a victim into opening a malicious file or clicking a malicious link. Mic...

CVE-2026-70266

A SQL injection vulnerability exists in Microsoft Office SharePoint due to the improper neutralization of special elements used in an SQL command. This flaw allows an authorized attacker to elevate privileges over a network. Microsoft has released updates to address this issue, and users are enco...

CVE-2026-70267

A vulnerability in Microsoft Office SharePoint allows an authorized attacker to perform remote code execution over a network. The root cause is the inclusion of functionality from untrusted control sphere (CWE-829). This issue has a CVSS v3.1 score of 7.2 (High) , impacting confidentiality, integ...

CVE-2026-70175

A vulnerability in ASP.NET Core allows an unauthorized attacker to elevate privileges over a network due to improper authentication . The vulnerability has a CVSS 3.1 base score of 8.1 (High) . While the technical root cause and specific versions are not detailed in the provided documents, the im...

CVE-2026-70197

A vulnerability in .NET allows an unauthorized attacker to perform an out-of-bounds write , which can result in the execution of arbitrary code over a network. This issue is identified with a CVSS v3.1 score of 8.1 (High). While the documents confirm the vulnerability and its potential impact, sp...

CVE-2026-70196

A Denial of Service vulnerability exists in ASP.NET Core due to inefficient algorithmic complexity . An unauthorized attacker can exploit this issue over a network to disrupt service availability. Microsoft has identified this vulnerability and provides an official fix in their update guidance.

CVE-2026-70181

A Denial of Service vulnerability exists in ASP.NET Core due to the allocation of resources without limits or throttling . An unauthorized attacker can exploit this flaw over a network to deny service. Exploitation details are not provided.

CVE-2026-70159

A Denial-of-Service vulnerability exists in ASP.NET Core due to the allocation of resources without limits or throttling . This flaw allows an unauthorized attacker to cause a service interruption over a network. The vulnerability has a CVSS v3.1 score of 7.5 (High) . No specific patch versions o...

CVE-2026-70183

A race condition vulnerability exists in ASP.NET Core due to concurrent execution using a shared resource with improper synchronization. This flaw allows an authorized attacker to elevate privileges over a network. The vulnerability has a CVSS 3.1 score of 7.5 (High). No specific remediation step...

CVE-2026-70013

A Use after free vulnerability in Windows iSCSI allows an unauthorized attacker to execute code over a network. The vulnerability has a High base severity score of 8.1. While the documents do not provide specific file paths or technical root causes, the impact includes potential Remote Code Execu...

CVE-2026-70038

A Use after free vulnerability exists in Windows iSCSI that allows an unauthorized attacker to execute arbitrary code over a network. The vulnerability is associated with CWE-416 (Use After Free) and CWE-122 (Heap-based Buffer Overflow). Exploitation details are not provided in the documents. Rem...

CVE-2026-70031

A heap-based buffer overflow vulnerability exists in Windows iSCSI , which could allow an unauthorized attacker to cause a denial of service over a network. The vulnerability has a CVSS 3.1 base score of 7.5, reflecting a high impact on availability. No specific exploit details or exploit code ar...

CVE-2026-69982

A weak authentication vulnerability in Active Directory Federation Services (AD FS) allows an unauthorized attacker to bypass a security feature over a network. The vulnerability is associated with CWE-1390 . While the base severity score is 5.9 (Medium) , the impact is primarily on integrity (Hi...

CVE-2026-70005

Weak authentication in Active Directory Federation Services (AD FS) allows an unauthorized attacker to bypass a security feature over a network. This vulnerability is associated with CWE-1390 (Weak Authentication). While the base CVSS score is 5.9 (Medium) , the attack complexity is high. No spec...