CVE-2026-67388

Heap-based buffer overflow in SQL Server allows an authorized attacker to execute code over a network...

CVE-2026-67381

Heap-based buffer overflow in SQL Server allows an authorized attacker to elevate privileges over a network...

CVE-2026-66818

Improper privilege management in SQL Server allows an authorized attacker to elevate privileges over a network...

CVE-2026-66819

Improper neutralization of special elements used in an sql command 'sql injection' in SQL Server allows an authorized attacker to elevate privileges over a network...

CVE-2026-66820

Improper neutralization of special elements used in an sql command 'sql injection' in SQL Server allows an authorized attacker to elevate privileges over a network...

CVE-2026-66814

Insufficient granularity of access control in SQL Server allows an authorized attacker to elevate privileges over a network...

CVE-2026-62813

Use after free in Active Directory Domain Services allows an authorized attacker to execute code over a network...

CVE-2026-62801

Improper limitation of a pathname to a restricted directory 'path traversal' in Windows PowerShell allows an unauthorized attacker to bypass a security feature over a network...

CVE-2026-62744

Heap-based buffer overflow in Microsoft Windows Media Foundation allows an unauthorized attacker to execute code over a network...

CVE-2026-47297

Deserialization of untrusted data in SQL Server allows an unauthorized attacker to execute code over a network...

EUVD-2026-73914

Heap-based buffer overflow in Windows Imaging Component allows an unauthorized attacker to execute code over a network...

EUVD-2026-73895

Incorrect calculation of buffer size in Windows iSCSI allows an unauthorized attacker to execute code over a network...

CVE-2026-69530

CVE-2026-69530 is a use-after-free vulnerability in the Windows Reliable Multicast Transport Driver (RMCAST) that allows an unauthorized, remote attacker to execute code over a network. The vulnerability is rated CVSS 8.1 (HIGH) with an attack complexity of high , requiring no privileges or user ...

EUVD-2026-73875

Heap-based buffer overflow in Microsoft Graphics Component allows an unauthorized attacker to execute code over a network...

CVE-2026-81955

A heap-based buffer overflow in the Microsoft Windows Graphics Component allows an unauthorized, remote attacker to achieve code execution over a network . The vulnerability requires user interaction but no prior privileges. Microsoft rates it CVSS 8.8 (HIGH) with full impact on confidentiality, ...

CVE-2026-81352

A heap-based buffer overflow exists in the Microsoft Windows Codecs Library , specifically affecting Web Media Extensions . This vulnerability allows an unauthorized attacker to execute arbitrary code over a network. Exploitation of this flaw could result in remote code execution . Documentation ...

CVE-2026-80096

CVE-2026-80096 is an out-of-bounds read vulnerability in Windows Remote Desktop Services that allows an authorized attacker to elevate privileges over a network. Microsoft rated it CVSS 3.1: 8.8 (High) with a vector of AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H, indicating a network-exploitable flaw req...

CVE-2026-80081

CVE-2026-80081 is a use-after-free vulnerability in Microsoft Office PowerPoint that allows an unauthorized attacker to achieve remote code execution over a network. The CVSS 3.1 score is 8.8 (HIGH) with a vector of AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H, meaning exploitation requires user interacti...

EUVD-2026-73843

Out-of-bounds read in Microsoft Office allows an unauthorized attacker to disclose information over a network...

EUVD-2026-73844

Out-of-bounds read in Microsoft Office Word allows an unauthorized attacker to disclose information over a network...