28912 matches found
CVE-2026-72981
CVE-2026-72981 is a use-after-free vulnerability in Microsoft's IP Helper component that allows an unauthorized attacker to achieve remote code execution over a network. The Microsoft CNA assigns a CVSS 3.1 score of 8.1 (HIGH) with a vector of AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H, indicating that ...
CVE-2026-69930
CVE-2026-69930 is an out-of-bounds read in Windows DHCP Server that allows an unauthorized, unauthenticated attacker to disclose information over a network. NVD rates it CVSS 3.1: 7.5 (HIGH) with low attack complexity, while Microsoft's CNA scores it 5.9 (MEDIUM) due to high attack complexity. CI...
CVE-2026-69529
CVE-2026-69529 is a heap-based buffer overflow in Microsoft Office Access that allows an unauthorized attacker to execute code over a network. The attack requires user interaction (e.g., opening a crafted file) but needs no prior privileges. The CVSS 3.1 score is 8.8 (HIGH) , with impacts of high...
CVE-2026-69716
Microsoft Office SharePoint is affected by a SQL injection vulnerability (improper neutralization of special elements in an SQL command) that allows an authorized attacker to escalate privileges over a network. The CVSS 3.1 base score is 8.8 (HIGH) , with network attack vector, low complexity, lo...
CVE-2026-69734
Microsoft Office Word is affected by an integer overflow or wraparound flaw that allows an unauthorized attacker to disclose information over a network . The flaw requires user interaction (opening a crafted document) but no prior authentication, carrying a CVSS 3.1 score of 6.5 (Medium) with hig...
EUVD-2026-73148
Heap-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code over a network...
EUVD-2026-73146
Missing authorization in Microsoft Exchange Server allows an authorized attacker to elevate privileges over a network...
EUVD-2026-73133
Out-of-bounds read in Windows Device Health Attestation DHA allows an unauthorized attacker to disclose information over a network...
CVE-2026-69382
CVE-2026-69382 affects Microsoft Exchange Server due to the use of a broken or risky cryptographic algorithm , allowing an unauthorized, unauthenticated attacker to disclose information over a network . The CVSS 3.1 base score is 5.9 (MEDIUM) , reflecting a network attack vector with high complex...
CVE-2026-71336
Windows Work Folder Service is vulnerable to an integer overflow or wraparound flaw that allows an authorized attacker to achieve remote code execution over the network. The CVSS 3.1 base score is 8.8 (HIGH) with vector AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H, indicating network-attackable exploitati...
EUVD-2026-73076
Use after free in Windows Ancillary Function Driver for WinSock allows an unauthorized attacker to elevate privileges over a network...
EUVD-2026-73062
Use after free in Windows DWM Core Library allows an authorized attacker to elevate privileges over a network...
CVE-2026-69775
CVE-2026-69775 is a use-after-free vulnerability in the Windows DWM Core Library that allows an authorized attacker to elevate privileges over a network. The CVSS 3.1 score is 7.1 (HIGH) , with a vector of AV:N/AC:H/PR:L/UI:R/S:U/C:H/I:H/A:H, indicating that exploitation requires network access, ...
CVE-2026-69729
CVE-2026-69729 is a heap-based buffer overflow in Windows Credential Providers that allows an authorized attacker to achieve remote code execution over a network. The vulnerability requires low privileges and no user interaction , with an attack complexity of low and network attack vector, as sco...
CVE-2026-69553
CVE-2026-69553 is a missing authorization vulnerability in Windows Hyper-V that allows an authorized attacker (with low privileges) to elevate privileges over a network . The attack requires user interaction and has high attack complexity , but the impact on confidentiality, integrity, and availa...
CVE-2026-69551
Windows DNS Server is affected by a use after free vulnerability that allows an authorized attacker to execute arbitrary code over the network. The vulnerability is rated CVSS 8.8 (HIGH) with a vector of AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H, indicating a network-based attack with low complexity th...
CVE-2026-69507
CVE-2026-69507 affects the Microsoft Windows Search Component . The vulnerability stems from insertion of sensitive information into an externally-accessible file or directory, allowing an authorized attacker to disclose information over a network. The CNA-assigned CVSS 3.1 score is 5.7 (MEDIUM) ...
EUVD-2026-72991
Heap-based buffer overflow in Windows Enterprise App Management allows an authorized attacker to elevate privileges over a network...
CVE-2026-69485
CVE-2026-69485 is a Remote Code Execution vulnerability in Microsoft Remote Desktop Client caused by use of an uninitialized resource . An authorized attacker with low privileges can exploit it remotely over a network without user interaction, achieving full compromise of confidentiality, integri...