CVE-2026-66820: Improper Neutralization of Special Elements used in an SQL Command

Improper neutralization of special elements used in an sql command 'sql injection' in SQL Server allows an authorized attacker to elevate privileges over a network...

CVE-2026-81955: Heap-based Buffer Overflow

Heap-based buffer overflow in Microsoft Graphics Component allows an unauthorized attacker to execute code over a network...

CVE-2026-81349: Improper Neutralization of Special Elements used in an OS Command

Improper neutralization of special elements used in an os command 'os command injection' in Azure HDInsights allows an authorized attacker to elevate privileges over a network...

CVE-2026-78439: Stack-based Buffer Overflow

Stack-based buffer overflow in Microsoft Graphics Component allows an unauthorized attacker to execute code over a network...

PT-2026-88011

Name of the Vulnerable Software and Affected Versions Microsoft Office Word affected versions not specified Description A use after free condition exists in Microsoft Office Word. This flaw allows an unauthorized attacker to execute arbitrary code over a network. Use after free is a memory...

PT-2026-88016

Name of the Vulnerable Software and Affected Versions Microsoft Office Word affected versions not specified Description A numeric truncation error occurs in Microsoft Office Word, which allows an unauthorized remote attacker to execute arbitrary code over a network and affect the system. Numeric...

PT-2026-88018

Name of the Vulnerable Software and Affected Versions Microsoft Office Word affected versions not specified Description A use after free issue exists in Microsoft Office Word, which allows an unauthorized remote attacker to execute arbitrary code over a network and affect the system. Use after fr...

CVE-2026-77906: Heap-based Buffer Overflow

Heap-based buffer overflow in Visual Studio allows an unauthorized attacker to execute code over a network...

CVE-2026-65669: Improper Neutralization of Special Elements in Output Used by a Downstream Component

Improper neutralization of special elements in output used by a downstream component 'injection' in SQL Server allows an unauthorized attacker to elevate privileges over a network...

PT-2026-88049

Name of the Vulnerable Software and Affected Versions Microsoft Office affected versions not specified Description Use of an uninitialized resource in Microsoft Office allows an unauthorized attacker to disclose sensitive information over a network, which can subsequently affect the system...

PT-2026-87234

Name of the Vulnerable Software and Affected Versions SQL Server affected versions not specified Description A use after free issue exists that allows an authorized attacker to execute arbitrary code over a network, potentially affecting the system. Use after free is a memory corruption flaw that...

PT-2026-87704

Name of the Vulnerable Software and Affected Versions Microsoft Office PowerPoint affected versions not specified Description A use-after-free issue in Microsoft Office PowerPoint allows an unauthorized remote attacker to execute arbitrary code over a network. Use-after-free is a memory corruptio...

CVE-2026-69631: Integer Overflow or Wraparound

Integer overflow or wraparound in Windows DNS allows an unauthorized attacker to deny service over a network...

PT-2026-87666

Use after free in Windows Win32K allows an authorized attacker to elevate privileges over a network...

CVE-2026-69423: Heap-based Buffer Overflow

Heap-based buffer overflow in Windows USB Video Driver allows an authorized attacker to elevate privileges over a network...

PT-2026-88003

Authorization bypass through user-controlled key in Visual Studio Code allows an unauthorized attacker to bypass a security feature over a network...

CVE-2026-70575: NULL Pointer Dereference

Null pointer dereference in Windows Schannel allows an authorized attacker to deny service over a network...

CVE-2026-69809: Missing Release of Memory after Effective Lifetime

Missing release of memory after effective lifetime in Active Directory Domain Services allows an unauthorized attacker to deny service over a network...

CVE-2026-69807: Improper Limitation of a Pathname to a Restricted Directory

Improper limitation of a pathname to a restricted directory 'path traversal' in Windows PowerShell allows an authorized attacker to elevate privileges over a network...

PT-2026-87221

Name of the Vulnerable Software and Affected Versions SQL Server affected versions not specified Description Improper neutralization of special elements used in an SQL command, known as SQL injection, allows an authorized attacker to elevate privileges over a network. SQL injection is a technique...