5504 matches found
EUVD-2026-73304
Heap-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code over a network...
CVE-2026-78511
CVE-2026-78511 is a heap-based buffer overflow in Microsoft Office Word that allows an unauthorized attacker to achieve remote code execution over a network. The vulnerability requires user interaction (e.g., opening a crafted document), with no prior privileges needed and low attack complexity. ...
EUVD-2026-73299
Improper control of generation of code 'code injection' in Remote Desktop Client allows an unauthorized attacker to execute code over a network...
EUVD-2026-73298
Untrusted pointer dereference in SQL Server allows an authorized attacker to execute code over a network...
EUVD-2026-73290
Heap-based buffer overflow in Microsoft Office allows an unauthorized attacker to execute code over a network...
CVE-2026-69285
A heap-based buffer overflow in Microsoft Office allows an unauthorized attacker to achieve remote code execution over a network. The vulnerability is rated CVSS 3.1: 8.8 (High) with a vector of AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H, meaning it requires user interaction but no prior authentication....
CVE-2026-77896
The Windows Remote Desktop Client is affected by an integer overflow or wraparound vulnerability. This flaw allows an unauthorized attacker to perform a denial of service (DoS) attack over a network. While the CVSS scores vary between 6.5 and 7.5 depending on the source, they consistently indicat...
EUVD-2026-73279
Access of resource using incompatible type 'type confusion' in Windows DHCP Server allows an unauthorized attacker to deny service over a network...
EUVD-2026-73276
Access of resource using incompatible type 'type confusion' in Windows DHCP Server allows an unauthorized attacker to deny service over a network...
CVE-2026-77504
CVE-2026-77504 is a double free flaw in Microsoft Office Word that allows an unauthorized attacker to achieve remote code execution over a network with user interaction required. The vulnerability carries a CVSS 3.1 score of 8.8 (HIGH) with full confidentiality, integrity, and availability impact...
EUVD-2026-73269
Access of resource using incompatible type 'type confusion' in Windows DHCP Server allows an unauthorized attacker to deny service over a network...
EUVD-2026-73270
Out-of-bounds read in Windows DHCP Server allows an unauthorized attacker to deny service over a network...
EUVD-2026-73265
Double free in Microsoft Graphics Component allows an unauthorized attacker to execute code over a network...
CVE-2026-77493
CVE-2026-77493 is a double free flaw in the Microsoft Windows Graphics Component that allows an unauthorized, remote attacker to achieve code execution over the network with no privileges or user interaction. The CNA-assigned CVSS 3.1 score is 9.8 (CRITICAL) , with high impact to confidentiality,...
EUVD-2026-73261
Use after free in Windows Message Queuing allows an unauthorized attacker to execute code over a network...
CVE-2026-72982
This is a stack-based buffer overflow in Windows Netlogon that allows an unauthorized attacker to achieve remote code execution over a network. The vulnerability is rated CVSS 9.8 (CRITICAL) with a vector of AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H, indicating a low-complexity network attack requiring...
CVE-2026-69804
A time-of-check time-of-use (TOCTOU) race condition in Microsoft Office SharePoint allows an authorized attacker (low privileges required) to achieve remote code execution over the network. The vulnerability is rated CVSS 7.5 (HIGH) with high impact to confidentiality, integrity, and availability...
CVE-2026-69797
CVE-2026-69797 is a use-after-free vulnerability in Microsoft Office PowerPoint that allows an unauthorized attacker to achieve remote code execution over a network. The attacker must persuade a user to open a crafted file, as the CVSS vector includes user interaction required (CVSS 3.1: 8.8 HIGH...
CVE-2026-69767
CVE-2026-69767 is a use after free vulnerability in Microsoft Office PowerPoint that allows an unauthorized attacker to achieve remote code execution over a network. The CVSS 3.1 score is 8.8 (HIGH) with a vector of AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H, meaning exploitation requires user interacti...