EUVD-2026-73729

Untrusted pointer dereference in Microsoft Office PowerPoint allows an unauthorized attacker to disclose information over a network...

EUVD-2026-73726

Heap-based buffer overflow in Windows Media Player allows an unauthorized attacker to execute code over a network...

CVE-2026-70296

CVE-2026-70296 is an out-of-bounds write in the Windows Imaging Component that allows an unauthorized, unauthenticated attacker to achieve remote code execution over the network. The vulnerability is rated CVSS 3.1 9.8 (Critical) with a vector of AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H, indicating lo...

CVE-2026-69439

Heap-based buffer overflow in .NET and Visual Studio allows an unauthorized attacker to elevate privileges over a network...

CVE-2026-69632

A use-after-free vulnerability in Microsoft Office allows an unauthorized attacker to achieve remote code execution over a network . The attack requires user interaction (per CVSS vector UI:R) but no prior authentication. The CVSS v3.1 base score is 8.8 (HIGH) with full impact to confidentiality,...

CVE-2026-69629

Microsoft Office Outlook is affected by a heap-based buffer overflow vulnerability that allows an unauthorized attacker to execute code over a network, resulting in Remote Code Execution . The flaw requires user interaction but no prior privileges, yielding a CVSS v3.1 score of 8.8 (HIGH) with hi...

CVE-2026-69601

CVE-2026-69601 is a heap-based buffer overflow in Microsoft Windows Media Foundation that allows an unauthorized, unprivileged attacker to achieve remote code execution over a network , provided the victim is induced to interact (e.g., open a crafted media file). The assigned CVSS 3.1 score is 8....

EUVD-2026-73711

Heap-based buffer overflow in Microsoft Office allows an unauthorized attacker to execute code over a network...

CVE-2026-69442

CVE-2026-69442 is a heap-based buffer overflow in Microsoft Office that allows an unauthorized, remote attacker to execute code over a network, requiring user interaction. The CVSS 3.1 score is 8.8 (HIGH) , with a network attack vector, low complexity, and no privileges required, but user interac...

EUVD-2026-73708

Use after free in Windows Deployment Services allows an unauthorized attacker to execute code over a network...

EUVD-2026-73701

Stack-based buffer overflow in Windows DHCP Server allows an unauthorized attacker to execute code over a network...

CVE-2026-69510

CVE-2026-69510 is a stack-based buffer overflow in Windows DHCP Server that allows an unauthorized, network-based attacker to achieve remote code execution without prior authentication. The vulnerability carries a CVSS 3.1 base score of 8.1 (HIGH) , with high attack complexity but no privileges r...

CVE-2026-69499

CVE-2026-69499 is an integer overflow or wraparound vulnerability in the Windows Imaging Component that allows an unauthorized attacker to achieve remote code execution over a network. The flaw requires user interaction (e.g., opening a crafted file), but no prior privileges are needed. The CVSS ...

CVE-2026-69397

OpenSSH for Windows is affected by a use-after-free flaw that allows an unauthorized attacker to achieve remote code execution over a network. The vulnerability is rated CVSS 7.5 (High) with the vector AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H, indicating a network-based attack with high complexity tha...

EUVD-2026-73690

Stack-based buffer overflow in Windows Hyper-V allows an unauthorized attacker to execute code over a network...

CVE-2026-69334

CVE-2026-69334 is a heap-based buffer overflow in the Windows Volume Manager Extension Driver that allows an unauthorized attacker to execute code over a network. The CVSS 3.1 base score is 8.8 (HIGH) with a vector of AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H, indicating network-reachable remote code e...

EUVD-2026-73684

Heap-based buffer overflow in Windows Volume Manager Extension Driver allows an unauthorized attacker to execute code over a network...

CVE-2026-72932

CVE-2026-72932 is a buffer over-read in the Windows Message Queuing Queue Manager that allows an unauthorized, unauthenticated attacker to disclose information over a network . The CVSS 3.1 score is 7.5 (HIGH) , with a network attack vector, low complexity, and high confidentiality impact but no ...

EUVD-2026-73664

Use after free in Windows SMB Client allows an unauthorized attacker to execute code over a network...

CVE-2026-72928

A use-after-free vulnerability in Windows DNS Server allows an authorized (low-privilege) attacker to execute remote code over a network . The CVSS 3.1 score is 7.5 (High) , reflecting a network attack vector with high complexity but high impact to confidentiality, integrity, and availability. Th...