CVE-2026-69454

The Microsoft Azure Attestation service and Device Health Attestation Service are affected by an out-of-bounds read vulnerability (CWE-125). This flaw allows an unauthorized attacker to disclose information over a network. The vulnerability has a CVSS 3.1 score of 7.5 (High) and is mitigated by a...

CVE-2026-70072

A vulnerability in Windows Netlogon allows an authorized attacker to perform a denial of service over a network. The root cause is the allocation of resources without limits or throttling (CWE-770). The impact is high availability disruption. Remediation via an official fix is available through M...

CVE-2026-70207

A heap-based buffer overflow vulnerability exists in Network Policy Server (NPS) . This flaw allows an authorized attacker to achieve remote code execution over a network. The vulnerability is classified with a CVSS 3.1 base score of 7.5 (High) , indicating significant impact on confidentiality, ...

CVE-2026-69992

A Use after free vulnerability exists in Windows Remote Desktop Services , which could allow an unauthorized attacker to achieve remote code execution over a network. The vulnerability has a High severity rating with a CVSS 3.1 score of 7.5 . While the documents do not specify the exact file or f...

CVE-2026-69994

A use after free vulnerability exists in the Remote Desktop Client , which allows an unauthorized attacker to execute code over a network . The vulnerability has a CVSS 3.1 base score of 7.5 (High) . No specific affected versions, root cause components, or exploit links are provided in the docume...

CVE-2026-70069

A stack-based buffer overflow vulnerability exists in the Windows DHCP Server . This flaw allows an authorized attacker to achieve remote code execution over a network. The vulnerability carries a CVSS 3.1 base score of 8.8 (High) , indicating significant impact on confidentiality, integrity, and...

CVE-2026-70012

A Use after free vulnerability in the Remote Desktop Client allows an unauthorized attacker to execute code over a network. The vulnerability's impact is categorized as HIGH for confidentiality, integrity, and availability. No specific exploitations or exploit links are provided in the documents....

CVE-2026-70006

A Use after free vulnerability in the Remote Desktop Client allows an unauthorized attacker to execute code over a network. The vulnerability has a CVSS 3.1 base score of 7.5 (High) , where the attack vector is Network and user interaction is Required . Exploitation details are not provided in th...

CVE-2026-69986

A Use after free vulnerability in the Remote Desktop Client allows an unauthorized attacker to execute code over a network. The issue results in a High severity impact, potentially compromising confidentiality, integrity, and availability. While specific affected versions or components are not de...

CVE-2026-69991

A Use after free vulnerability exists in the Remote Desktop Client , which could allow an unauthorized attacker to achieve remote code execution over a network. The vulnerability has a HIGH base severity score of 7.5. No specific technical details regarding the underlying component or version are...

CVE-2026-69987

A Use after free vulnerability exists in the Remote Desktop Client , which could allow an unauthorized attacker to execute code over a network . The vulnerability is categorized under CWE-416 . While the root cause is identified as a memory management issue, specific affected versions or internal...

CVE-2026-97778

A vulnerability exists in Microsoft Office Excel caused by an integer overflow or wraparound . This flaw allows an unauthorized attacker to achieve remote code execution over a network. While the technical root cause is an integer overflow, the specific component or file is not identified in the ...

CVE-2026-97759

A Use after free vulnerability in Microsoft Office Excel allows an unauthorized attacker to achieve remote code execution over a network. The impact is rated as High (CVSS 8.8), potentially allowing for high confidentiality, integrity, and availability impacts. Microsoft has released official upd...

CVE-2026-97739

A vulnerability exists in Microsoft Office Excel due to an Integer underflow (wrap or wraparound) . This flaw allows an unauthorized attacker to achieve Remote Code Execution over a network. Microsoft has released updates to address this issue; users are advised to install the latest security pat...

CVE-2026-97789

A Use after free vulnerability exists in the Remote Desktop Client , which allows an unauthorized attacker to execute arbitrary code over a network. The vulnerability's CVSS 3.1 score is 7.5 (High) , indicating significant impacts on confidentiality, integrity, and availability. While the attack ...

CVE-2026-97782

A vulnerability exists in Microsoft Office SharePoint where an observable discrepancy allows an authorized attacker to perform tampering over a network . The impact of this vulnerability includes high levels of confidentiality and integrity impact, with a CVSS v3.1 score of 6.8 . Microsoft has re...

CVE-2026-97776

A heap-based buffer overflow vulnerability in Microsoft Office Excel allows an unauthorized attacker to achieve remote code execution over a network. To successfully exploit this vulnerability, an attacker must trick a victim into opening a malicious file or clicking a malicious link. Microsoft h...

CVE-2026-97771

A use after free vulnerability in Microsoft Office Excel allows an unauthorized attacker to achieve remote code execution over a network. Microsoft has released updates to address this vulnerability; users are recommended to install the latest security updates. Exploitation details and specific p...

CVE-2026-97747

A Use after free vulnerability in Microsoft Office Excel allows an unauthorized attacker to execute arbitrary code over a network. The vulnerability has been addressed by Microsoft with the release of official updates. Users are recommended to install these updates to mitigate the risk. Exploitat...

CVE-2026-97740

A vulnerability in Microsoft Office Excel allows an unauthorized attacker to disclose sensitive system information over a network. The issue is characterized as an exposure of sensitive system information to an unauthorized control sphere (CWE-497). An attacker can exploit this to gain access to ...