CVE-2026-88171: Double Free

Double free in Windows DHCP Server allows an unauthorized attacker to execute code over a network...

CVE-2026-94520: Use of Externally-Controlled Format String

Use of externally-controlled format string in SQL Server allows an authorized attacker to deny service over a network...

CVE-2026-88183: Out-of-bounds Read

Out-of-bounds read in Microsoft Office PowerPoint allows an unauthorized attacker to disclose information over a network...

CVE-2026-88166: Integer Overflow or Wraparound

Integer overflow or wraparound in Microsoft Office SharePoint allows an authorized attacker to execute code over a network...

CVE-2026-88163: Integer Overflow or Wraparound

Integer overflow or wraparound in Microsoft Office SharePoint allows an authorized attacker to execute code over a network...

CVE-2026-88142: Heap-based Buffer Overflow

Use after free in Windows Background Intelligent Transfer Service BITS allows an unauthorized attacker to execute code over a network...

CVE-2026-88150: Use of Uninitialized Resource

Use of uninitialized resource in Microsoft Office Word allows an unauthorized attacker to execute code over a network...

CVE-2026-84017: NULL Pointer Dereference

Null pointer dereference in Windows Routing and Remote Access Service RRAS allows an unauthorized attacker to deny service over a network...

CVE-2026-85856: Heap-based Buffer Overflow

Heap-based buffer overflow in Windows Internet Connection Sharing ICS allows an authorized attacker to execute code over an adjacent network...

CVE-2026-85816: Out-of-bounds Read

Out-of-bounds read in Windows Wi-Fi Driver allows an authorized attacker to disclose information over an adjacent network...

CVE-2026-83928: Missing Authentication for Critical Function

Out-of-bounds write in Windows Local Security Authority Subsystem Service LSASS allows an unauthorized attacker to execute code over a network...

CVE-2026-88122: Out-of-bounds Read

Out-of-bounds read in DNS Server allows an authorized attacker to deny service over a network...

CVE-2026-70207: Heap-based Buffer Overflow

Heap-based buffer overflow in Network Policy Server NPS allows an authorized attacker to execute code over a network...

CVE-2026-70202: Server-Side Request Forgery (SSRF)

Server-side request forgery ssrf in Microsoft Office SharePoint allows an authorized attacker to elevate privileges over a network...

CVE-2026-70250: Use After Free

Use after free in Windows DHCP Client allows an unauthorized attacker to execute code over an adjacent network...

CVE-2026-70246: Incorrect Authorization

Incorrect authorization in Microsoft Office SharePoint allows an authorized attacker to elevate privileges over a network...

CVE-2026-70267: Inclusion of Functionality from Untrusted Control Sphere

Inclusion of functionality from untrusted control sphere in Microsoft Office SharePoint allows an authorized attacker to execute code over a network...

CVE-2026-70210: Heap-based Buffer Overflow

Heap-based buffer overflow in Windows OLE DB allows an unauthorized attacker to elevate privileges over a network...

Microsoft Windows: CVE-2026-96866: Network Device Enrollment Service (NDES) Denial of Service Vulnerability

Out-of-bounds read in Network Device Enrollment Service NDES allows an unauthorized attacker to deny service over a network...

Microsoft Windows: CVE-2026-85939: Windows Kernel Security Feature Bypass Vulnerability

Weak authentication in Windows Kernel allows an authorized attacker to bypass a security feature over a network...