CVE-2026-83677

A memory leak vulnerability (CWE-401) exists in the Windows DHCP Client due to a missing release of memory after its effective lifetime. This flaw allows an unauthorized attacker to conduct a denial of service (DoS) attack over a network. The CVSS v3.1 score is 7.5 (High) , indicating low attack ...

CVE-2026-83683

A vulnerability in Windows Encrypting File System (EFS) allows an authorized attacker to perform an absolute path traversal to disclose information over a network. The impact is categorized as high confidentiality impact with a CVSS 3.1 base score of 6.5 . While specific exploit details are not p...

CVE-2026-83665

A null pointer dereference vulnerability exists in the Windows DHCP Server , which could allow an unauthorized attacker to cause a denial of service over the network. The vulnerability is associated with CWE-476 . No specific versions, root cause files, or exploit links are provided in the docume...

CVE-2026-83645

A Denial of Service (DoS) vulnerability exists in Active Directory Federation Services (AD FS) due to the allocation of resources without limits or throttling (CWE-770). An unauthorized attacker can exploit this over a network to disrupt services. No specific affected versions, exploit links, or ...

CVE-2026-83647

An out-of-bounds read vulnerability exists in Active Directory Domain Services . This flaw allows an unauthorized attacker to perform a denial of service (DoS) attack over a network. The vulnerability is categorized under CWE-125 . Official remediation is available via Microsoft, but specific pat...

CVE-2026-69577

The Microsoft Azure Attestation service and Device Health Attestation Service are affected by an out-of-bounds read vulnerability (CWE-125). This flaw allows an unauthorized attacker to disclose information over a network . The vulnerability has a HIGH base severity score of 7.5, as it is remotel...

CVE-2026-69454

The Microsoft Azure Attestation service and Device Health Attestation Service are affected by an out-of-bounds read vulnerability (CWE-125). This flaw allows an unauthorized attacker to disclose information over a network. The vulnerability has a CVSS 3.1 score of 7.5 (High) and is mitigated by a...

CVE-2026-70072

A vulnerability in Windows Netlogon allows an authorized attacker to perform a denial of service over a network. The root cause is the allocation of resources without limits or throttling (CWE-770). The impact is high availability disruption. Remediation via an official fix is available through M...

CVE-2026-70207

A heap-based buffer overflow vulnerability exists in Network Policy Server (NPS) . This flaw allows an authorized attacker to achieve remote code execution over a network. The vulnerability is classified with a CVSS 3.1 base score of 7.5 (High) , indicating significant impact on confidentiality, ...

CVE-2026-70012

A Use after free vulnerability in the Remote Desktop Client allows an unauthorized attacker to execute code over a network. The vulnerability's impact is categorized as HIGH for confidentiality, integrity, and availability. No specific exploitations or exploit links are provided in the documents....

CVE-2026-70069

A stack-based buffer overflow vulnerability exists in the Windows DHCP Server . This flaw allows an authorized attacker to achieve remote code execution over a network. The vulnerability carries a CVSS 3.1 base score of 8.8 (High) , indicating significant impact on confidentiality, integrity, and...

CVE-2026-70006

A Use after free vulnerability in the Remote Desktop Client allows an unauthorized attacker to execute code over a network. The vulnerability has a CVSS 3.1 base score of 7.5 (High) , where the attack vector is Network and user interaction is Required . Exploitation details are not provided in th...

CVE-2026-69992

A Use after free vulnerability exists in Windows Remote Desktop Services , which could allow an unauthorized attacker to achieve remote code execution over a network. The vulnerability has a High severity rating with a CVSS 3.1 score of 7.5 . While the documents do not specify the exact file or f...

CVE-2026-69994

A use after free vulnerability exists in the Remote Desktop Client , which allows an unauthorized attacker to execute code over a network . The vulnerability has a CVSS 3.1 base score of 7.5 (High) . No specific affected versions, root cause components, or exploit links are provided in the docume...

CVE-2026-69987

A Use after free vulnerability exists in the Remote Desktop Client , which could allow an unauthorized attacker to execute code over a network . The vulnerability is categorized under CWE-416 . While the root cause is identified as a memory management issue, specific affected versions or internal...

CVE-2026-69991

A Use after free vulnerability exists in the Remote Desktop Client , which could allow an unauthorized attacker to achieve remote code execution over a network. The vulnerability has a HIGH base severity score of 7.5. No specific technical details regarding the underlying component or version are...

CVE-2026-69986

A Use after free vulnerability in the Remote Desktop Client allows an unauthorized attacker to execute code over a network. The issue results in a High severity impact, potentially compromising confidentiality, integrity, and availability. While specific affected versions or components are not de...

CVE-2026-97759

A Use after free vulnerability in Microsoft Office Excel allows an unauthorized attacker to achieve remote code execution over a network. The impact is rated as High (CVSS 8.8), potentially allowing for high confidentiality, integrity, and availability impacts. Microsoft has released official upd...

EUVD-2026-99835

Use after free in Remote Desktop Client allows an unauthorized attacker to execute code over a network...

CVE-2026-97739

A vulnerability exists in Microsoft Office Excel due to an Integer underflow (wrap or wraparound) . This flaw allows an unauthorized attacker to achieve Remote Code Execution over a network. Microsoft has released updates to address this issue; users are advised to install the latest security pat...