CVE-2026-69357

Use after free in Windows NDIS allows an authorized attacker to elevate privileges over a network...

CVE-2026-69332

Out-of-bounds read in Windows NTFS allows an authorized attacker to elevate privileges over a network...

CVE-2026-67645

Out-of-bounds read in SQL Server allows an authorized attacker to disclose information over a network...

CVE-2026-67638

Heap-based buffer overflow in SQL Server allows an authorized attacker to execute code over a network...

CVE-2026-67641

Integer overflow or wraparound in SQL Server allows an authorized attacker to deny service over a network...

CVE-2026-68775

Heap-based buffer overflow in SQL Server allows an authorized attacker to execute code over a network...

CVE-2026-62706

Out-of-bounds read in Microsoft Windows Media Foundation allows an unauthorized attacker to execute code over a network...

CVE-2026-78522

CVE-2026-78522 is an out-of-bounds read vulnerability in Microsoft Office Word that allows an unauthorized attacker to disclose information over a network . The CVSS 3.1 score is 6.5 (Medium) with a vector of AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N, meaning exploitation requires user interaction (e.g...

EUVD-2026-73820

Out-of-bounds read in Microsoft Office Word allows an unauthorized attacker to disclose information over a network...

EUVD-2026-73819

Use after free in Microsoft Office Word allows an unauthorized attacker to execute code over a network...

CVE-2026-78462

CVE-2026-78462 is an authorization bypass through a user-controlled key in Visual Studio Code that allows an unauthenticated network attacker to bypass a security feature . The underlying weakness is the use of a user-controllable key in an authorization check, enabling remote exploitation with l...

EUVD-2026-73811

Authorization bypass through user-controlled key in Visual Studio Code allows an unauthorized attacker to bypass a security feature over a network...

CVE-2026-77480

SQL Server is affected by an elevation of privilege vulnerability caused by insufficient granularity of access control . An authorized attacker with low privileges can exploit the flaw over a network to elevate their access, resulting in high impact to confidentiality, integrity, and availability...

CVE-2026-73025

CVE-2026-73025 is a Security Feature Bypass vulnerability in Windows iSCSI , rooted in weak authentication that allows an unauthorized attacker to bypass a security feature over a network. The vulnerability carries a CVSS 3.1 score of 9.8 (CRITICAL) with a network attack vector, low complexity, n...

EUVD-2026-73774

Stack-based buffer overflow in Microsoft Graphics Component allows an unauthorized attacker to execute code over a network...

CVE-2026-73009

This use-after-free vulnerability affects Windows Secure Socket Tunneling Protocol (SSTP) , allowing an unauthorized attacker to achieve remote code execution over a network with low attack complexity and no required privileges or user interaction . The CVSS 3.1 score is 9.8 (Critical) with high ...

CVE-2026-72977

CVE-2026-72977 is an out-of-bounds read vulnerability in Microsoft Office PowerPoint that allows an unauthorized, network-based attacker to disclose information . The attack requires user interaction (e.g., opening a crafted file) but no prior authentication. CVSS 3.1 base score is 6.5 (MEDIUM) w...

CVE-2026-69805

CVE-2026-69805 is an elevation of privilege vulnerability in Microsoft .NET , caused by external control of a file name or path . An unauthorized network-based attacker can exploit this to escalate privileges, with high impact on confidentiality, integrity, and availability. The CVSS 3.1 score is...

CVE-2026-69439

A heap-based buffer overflow in .NET and Visual Studio allows an unauthorized attacker to elevate privileges over a network, as reported by Microsoft (CNA: [email protected]). The vulnerability carries a CVSS 3.1 score of 8.8 (HIGH) with the vector AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H, indicati...

CVE-2026-69636

CVE-2026-69636 is an SQL injection vulnerability in Microsoft Office SharePoint , caused by improper neutralization of special elements used in SQL commands. An authorized attacker with low privileges can exploit it over a network to disclose information , with high confidentiality impact but no ...