CVE-2026-66802

CVE-2026-66802 describes a race condition in Microsoft Azure Attestation service and Device Health Attestation Service caused by improper synchronization of a shared resource. This concurrency issue allows an unauthenticated, network-based attacker to execute code on affected systems, with high i...

EUVD-2026-56744

Heap-based buffer overflow in Windows iSCSI Target Service allows an unauthorized attacker to deny service over a network...

CVE-2026-65794 Windows SMB Client Information Disclosure Vulnerability

...

EUVD-2026-56740

Buffer over-read in Windows SMB Client allows an unauthorized attacker to disclose information over a network...

CVE-2026-65791

CVE-2026-65791 : Heap-based buffer overflow in Windows iSCSI Target Service enables remote code execution over a network. Affected: Windows iSCSI Target Service. Root cause: heap-based overflow. Impact: unauthorized code execution with high confidentiality, integrity, and availability implication...

EUVD-2026-56738

Heap-based buffer overflow in Windows iSCSI Target Service allows an unauthorized attacker to execute code over a network...

EUVD-2026-56731

Inadequate encryption strength in Windows Active Directory allows an authorized attacker to bypass a security feature over a network...

EUVD-2026-56725

Null pointer dereference in Windows iSCSI Target Service allows an unauthorized attacker to deny service over a network...

EUVD-2026-56723

Insufficiently protected credentials in Microsoft Office Outlook allows an unauthorized attacker to perform spoofing over a network...

EUVD-2026-56722

Missing authentication for critical function in Microsoft Office SharePoint allows an authorized attacker to elevate privileges over a network...

EUVD-2026-56718

Improper neutralization of input during web page generation 'cross-site scripting' in Microsoft Office SharePoint allows an authorized attacker to perform spoofing over a network...

CVE-2026-64906 Microsoft Access Remote Code Execution Vulnerability

...

EUVD-2026-56706

Deserialization of untrusted data in Microsoft Office SharePoint allows an authorized attacker to execute code over a network...

EUVD-2026-56688

Authentication bypass by capture-replay in Microsoft Exchange Server allows an authorized attacker to elevate privileges over a network...

EUVD-2026-56680

Incorrect authorization in .NET Framework allows an authorized attacker to elevate privileges over a network...

EUVD-2026-56677

Integer overflow or wraparound in Windows GDI+ allows an unauthorized attacker to execute code over a network...

EUVD-2026-56676

Stack-based buffer overflow in Remote Desktop Client allows an unauthorized attacker to execute code over a network...

CVE-2026-62823 Windows DHCP Server Remote Code Execution Vulnerability

...

EUVD-2026-56675

Heap-based buffer overflow in Windows DHCP Server allows an unauthorized attacker to execute code over an adjacent network...

CVE-2026-62823

CVE-2026-62823 affects Windows DHCP Server and is caused by a heap-based buffer overflow in the DHCP service. This vulnerability enables remote code execution by an attacker on an adjacent network, with an attack vector of Adjacent Network and no user interaction required. The CVSS 3.1 base score...