CVE-2026-97747

A Use after free vulnerability in Microsoft Office Excel allows an unauthorized attacker to execute arbitrary code over a network. The vulnerability has been addressed by Microsoft with the release of official updates. Users are recommended to install these updates to mitigate the risk. Exploitat...

CVE-2026-97740

A vulnerability in Microsoft Office Excel allows an unauthorized attacker to disclose sensitive system information over a network. The issue is characterized as an exposure of sensitive system information to an unauthorized control sphere (CWE-497). An attacker can exploit this to gain access to ...

CVE-2026-97766

A Heap-based buffer overflow vulnerability in Microsoft Office Excel allows an unauthorized attacker to execute arbitrary code over a network. The severity is rated as High with a CVSS 3.1 score of 8.8. Microsoft has released updates to address this vulnerability; users are recommended to install...

CVE-2026-97749

A double free vulnerability in Microsoft Office Outlook allows an unauthorized attacker to achieve remote code execution over a network. This vulnerability has a CRITICAL CVSSv3.1 base score of 9.8 . Microsoft has released updates to address this issue; users are recommended to install the latest...

CVE-2026-69452

A Use after free vulnerability in Windows Enterprise App Management allows an authorized attacker to elevate privileges over a network. The vulnerability is associated with CWE-416 and has a CVSS 3.1 base score of 7.1 (High). No specific exploit code or details on in-the-wild exploitation are pro...

CVE-2026-96861

An out-of-bounds read vulnerability exists in the Network Device Enrollment Service (NDES) . This flaw allows an unauthorized attacker to perform a denial of service (DoS) attack over a network. No specific software versions, root causes, or remediation details are provided in the documents. Expl...

CVE-2026-96866

An out-of-bounds read vulnerability exists in the Network Device Enrollment Service (NDES) . This flaw allows an unauthorized attacker to perform a Denial of Service (DoS) attack over a network. The vulnerability is characterized by a CVSS 3.1 score of 7.5 (High) with a network attack vector and ...

CVE-2026-96246

An out-of-bounds read vulnerability exists in Network Policy Server (NPS) . This flaw allows an unauthorized attacker to disclose information over a network. The vulnerability is associated with CWE-125 and has a HIGH CVSSv3.1 severity score of 7.5 . No specific root cause, affected versions, or ...

CVE-2026-96248

A stack-based buffer overflow exists in the Windows Host Guardian Service , which could allow an unauthorized attacker to perform a denial of service (DoS) attack over a network. The vulnerability is categorized under CWE-121 and has been assigned a High base severity score of 7.5. Remediation is...

CVE-2026-96311

A vulnerability exists in the Windows Network List Service due to improper authorization . This flaw allows an authorized attacker to perform local tampering . The impact is categorized as a high integrity compromise with a base score of 5.5. No specific exploit details or in-the-wild exploitatio...

CVE-2026-96236

A Denial of Service vulnerability exists in ASP.NET Core due to the allocation of resources without limits or throttling . An unauthorized attacker can exploit this flaw over a network to disrupt service availability. Remediation is provided via an official fix .

CVE-2026-96219

A critical out-of-bounds write vulnerability exists in the Windows Local Security Authority Subsystem Service (LSASS) . This flaw allows an unauthorized attacker to achieve remote code execution over a network. The vulnerability is assigned a CVSS v3.1 score of 9.80 , indicating a high severity l...

CVE-2026-96224

An out-of-bounds write vulnerability exists in .NET , allowing an unauthorized attacker to achieve remote code execution over a network. The vulnerability has a CVSS v3.1 score of 8.80 (High), where the attack complexity is low, but user interaction is required. Exploitation details and specific ...

CVE-2026-88201

A buffer over-read vulnerability in Microsoft Office Excel allows an unauthorized attacker to disclose sensitive information over a network. This vulnerability impacts the confidentiality of data within the victim's context. Microsoft has released official updates to address this issue; users are...

CVE-2026-88198

A missing authorization vulnerability in Microsoft Office SharePoint (CVE-2026-88198) allows an authorized attacker to elevate privileges over a network. The impact is rated as High with a CVSS 3.1 score of 8.8. Microsoft has released official updates to address this issue; users are recommended ...

CVE-2026-88178

A Use after free vulnerability in Microsoft Office PowerPoint allows an unauthorized attacker to achieve Remote Code Execution over a network. The vulnerability has a CRITICAL severity with a CVSS score of 9.8 . Microsoft has released updates to address this issue; users are encouraged to install...

CVE-2026-88196

A heap-based buffer overflow vulnerability in Microsoft Office allows an unauthorized attacker to achieve remote code execution over a network. The vulnerability affects multiple products including Word , Excel , Access , Outlook , Visio , SharePoint , and PowerPoint , as well as subcomponents li...

CVE-2026-88150

A use of uninitialized resource vulnerability in Microsoft Office Word allows an unauthorized attacker to achieve remote code execution over a network. The vulnerability has a CVSS 3.1 score of 8.8 (High) . Microsoft has released security updates to address this issue; users are recommended to in...

CVE-2026-70298

A path traversal vulnerability in Microsoft Office SharePoint (CVE-2026-70298) allows an authorized attacker to disclose sensitive information over a network due to an improper limitation of a pathname to a restricted directory. Microsoft has released updates to address this issue; users are enco...

CVE-2026-85900

A deserialization of untrusted data vulnerability in Microsoft Office SharePoint allows an authorized attacker to achieve arbitrary code execution over a network. This flaw is categorized as CWE-502 and has a CVSS 3.1 score of 8.80 (High). Microsoft has released official updates to address this v...