CVE-2026-102198

An out-of-bounds read vulnerability exists in the Windows Remote Desktop Protocol , which allows an authorized attacker to disclose information over a network. The vulnerability is classified as CWE-125 and carries a medium severity score of 5.3 . While the documents confirm the existence of the ...

CVE-2026-102203

A type confusion vulnerability in the RPC Runtime allows an unauthorized attacker to execute code over a network. This issue involves the access of resources using incompatible types, which can lead to remote code execution. While the vulnerability is confirmed with a high base score, specific de...

CVE-2026-102192

A vulnerability exists in Windows Failover Cluster due to an integer underflow (wrap or wraparound) . This flaw allows an unauthorized attacker to perform a denial of service (DoS) attack over a network. The CVSS 3.1 score is 7.5 (High) , indicating a significant impact on availability. No specif...

CVE-2026-102199

A stack-based buffer overflow exists in the Microsoft Windows Codecs Library , which could allow an unauthorized attacker to cause a denial of service (DoS) over a network. The vulnerability requires user interaction to trigger. Documentation regarding specific affected versions or an official pa...

CVE-2026-96209

An out-of-bounds read vulnerability exists in the Windows Network File System . This flaw allows an authorized attacker to achieve local privilege elevation . The vulnerability is classified as CWE-125 and has been assigned a CVSS 3.1 base score of 7.0 (High) . No specific exploit links or techni...

CVE-2026-102186

The Windows Network File System is susceptible to an untrusted pointer dereference vulnerability (CWE-822). This flaw allows an authorized attacker to perform a local information disclosure . The vulnerability has a CVSS 3.1 base score of 4.7 (Medium) , characterized by high attack complexity and...

CVE-2026-100219

A Use after free vulnerability exists in Microsoft QUIC , allowing an unauthorized attacker to achieve remote code execution over a network. This vulnerability is part of a broader set of critical issues in Windows components. For actual abuse, no prior authentication is required, and exploitatio...

CVE-2026-100218

A use after free vulnerability in the Remote Desktop Gateway Service allows an unauthorized attacker to achieve remote code execution over a network. The vulnerability is associated with CWE-416 and has a base severity of 8.1 (High) . While the documents confirm the existence of the vulnerability...

CVE-2026-100222

A heap-based buffer overflow vulnerability exists in the Network Policy Server (NPS) component of Microsoft Windows. This flaw allows an unauthorized attacker to execute arbitrary code over a network. The vulnerability is associated with a CVSS score of 9.8, indicating a critical risk level where...

CVE-2026-100210

A heap-based buffer overflow exists in Microsoft Office Excel , which could allow an unauthorized attacker to achieve arbitrary code execution over a network. This vulnerability is rated with a High severity (CVSS 3.1: 8.8). Microsoft has released official fixes to address this issue; users are r...

CVE-2026-100211

A Use after free vulnerability in Microsoft Office Excel allows an unauthorized attacker to execute code over a network. This flaw results in Arbitrary code execution and has a CVSS v3.1 base score of 8.8 . Microsoft has released updates to address this vulnerability; users are recommended to ins...

CVE-2026-58280

A Denial-of-Service vulnerability exists in .NET due to uncontrolled recursion . An unauthorized attacker can exploit this flaw over a network to cause a denial of service. This vulnerability has been identified as part of the Microsoft Developer Tools suite. Detailed remediation instructions are...

CVE-2026-100209

A use after free vulnerability in Microsoft Office Excel allows an unauthorized attacker to achieve arbitrary code execution over a network. The vulnerability has a CVSS v3.1 score of 8.8 (High) . While specific technical root causes or internal file paths are not provided, the vulnerability is c...

CVE-2026-97745

A Use after free vulnerability in Microsoft Office Excel allows an unauthorized attacker to execute arbitrary code over a network. The vulnerability has a CVSS 3.1 score of 8.8 (High) . Microsoft has released updates to address this and other related vulnerabilities across various Office products...

CVE-2026-97772

A double free vulnerability in Microsoft Office Excel allows an unauthorized attacker to achieve remote code execution over a network. The issue is classified with a CVSS 3.1 score of 8.8 (High) . Microsoft has released security updates to address this vulnerability; users are advised to install ...

CVE-2026-97775

A Use after free vulnerability in Microsoft Office Excel allows an unauthorized attacker to achieve arbitrary code execution over a network. The vulnerability, identified as CVE-2026-97775 , carries a CVSS v3.1 score of 8.8 (High) . Microsoft has released official updates to address this and othe...

CVE-2026-97746

An integer underflow (wrap or wraparound) vulnerability in Microsoft Office Excel allows an unauthorized attacker to achieve remote code execution over a network. The vulnerability has a HIGH severity rating (CVSS 8.8). To mitigate this risk, users are encouraged to install the official security ...

CVE-2026-97762

An out-of-bounds write vulnerability exists in Microsoft Office Excel , which may allow an unauthorized attacker to execute arbitrary code over a network. The vulnerability has a CVSS 3.1 base score of 8.8 (High) and requires user interaction to exploit. Microsoft has released updates to address ...

CVE-2026-97011

A use of uninitialized resource vulnerability in Microsoft Office Excel allows an unauthorized attacker to execute code over a network. This flaw is categorized under CWE-908 (Use of Uninitialized Resource) and CWE-763 (Release of Invalid Pointer or Reference). The impact of successful exploitati...

CVE-2026-97010

A use after free vulnerability exists in Microsoft Office Excel , which may allow an unauthorized attacker to achieve arbitrary code execution over a network. The vulnerability carries a CVSS 3.1 score of 8.8 (High) . Microsoft has released updates to address this issue; users are encouraged to i...