EUVD-2026-99610

Origin validation error in Microsoft Power Apps allows an authorized attacker to execute code over a network...

CVE-2026-70187

A Use after free vulnerability exists in the Remote Desktop Gateway Service on Windows systems. This flaw allows an unauthorized attacker to achieve Remote Code Execution (RCE) over a network. The vulnerability is associated with CWE-416 . While the impact is classified as HIGH with a CVSS 3.1 sc...

CVE-2026-70210

A heap-based buffer overflow in Windows OLE DB allows an unauthorized attacker to achieve elevation of privilege over a network. The vulnerability (CWE-122, CWE-125) has a CVSS 3.1 base score of 8.8 . Exploitation details are not provided in the documents. Remediation via an official fix is indic...

CVE-2026-70167

A type confusion vulnerability (CWE-843, CWE-822) exists in the Windows Domain Name Service (DNS Server) . This flaw allows an authorized attacker to achieve Remote Code Execution (RCE) over a network. The vulnerability is characterized by the access of resources using incompatible types. While t...

CVE-2026-70170

A vulnerability exists in the Windows Kernel due to an untrusted pointer dereference . This flaw allows an authorized attacker to cause a denial of service (DoS) over a network. No specific exploitation details or patch versions are provided in the documents.

CVE-2026-70213

An origin validation error in Microsoft Power Apps allows an authorized attacker to perform remote code execution over a network. This vulnerability has a HIGH severity rating with a CVSS score of 8.0. Documentation confirms the impact is the execution of arbitrary code . No specific exploit link...

CVE-2026-69943

A path traversal vulnerability (improper limitation of a pathname to a restricted directory) exists in Microsoft Office SharePoint . This flaw allows an authorized attacker to achieve arbitrary code execution over a network. Microsoft has released updates to address this vulnerability; users are ...

EUVD-2026-99595

Out-of-bounds write in Active Directory Domain Services allows an authorized attacker to execute code over a network...

EUVD-2026-99594

Use after free in Windows Background Intelligent Transfer Service BITS allows an unauthorized attacker to execute code over a network...

EUVD-2026-99596

Improper limitation of a pathname to a restricted directory 'path traversal' in Microsoft Office SharePoint allows an authorized attacker to execute code over a network...

CVE-2026-88173

A Use after free vulnerability in the Windows Background Intelligent Transfer Service (BITS) allows an unauthorized attacker to execute code over a network . The vulnerability is associated with CWE-416 (Use After Free) and CWE-367 (Time-of-check Time-of-use Race Condition). The impact includes h...

CVE-2026-88165

An out-of-bounds write vulnerability exists in Active Directory Domain Services . This flaw allows an authorized attacker to achieve remote code execution over a network. While the vulnerability is confirmed with a HIGH base severity score (8.8), the provided documents do not specify the exact so...

CVE-2026-85881

A stack-based buffer overflow exists in the Microsoft Graphics Component , which may be leveraged by an authorized attacker to elevate privileges over a network. The vulnerability is associated with Microsoft Office Graphics. Remediation is available through official fixes provided by Microsoft.

EUVD-2026-99564

Null pointer dereference in Windows Message Queuing Queue Manager allows an authorized attacker to deny service over a network...

CVE-2026-85859

A Null pointer dereference vulnerability exists in the Windows Message Queuing Queue Manager . This flaw allows an authorized attacker to perform a denial of service (DoS) attack over a network. The vulnerability is categorized under CWE-476 and has a CVSS 3.1 score of 6.5. No specific exploit in...

CVE-2026-85856

A heap-based buffer overflow vulnerability exists in Windows Internet Connection Sharing (ICS) . This flaw allows an authorized attacker to achieve remote code execution over an adjacent network . The vulnerability has a CVSS 3.1 base score of 7.1 (High) , with impacts on confidentiality, integri...

EUVD-2026-99547

Files or directories accessible to external parties in Windows Event Viewer allows an authorized attacker to disclose information over a network...

EUVD-2026-99551

Out-of-bounds read in Windows Print Spooler Components allows an unauthorized attacker to disclose information over a network...

CVE-2026-85847

An out-of-bounds read vulnerability exists in the Windows Print Spooler Components . This flaw allows an unauthorized attacker to disclose information over a network. The vulnerability is associated with CWE-125 and carries a Medium base severity (CVSS 3.1 score of 6.5). Exploitation details are ...

CVE-2026-85840

A vulnerability in Windows Event Viewer allows an authorized attacker to disclose information over a network. The root cause is that certain files or directories are accessible to external parties , leading to potential information disclosure. The vulnerability is associated with CWE-552 . No spe...