Microsoft Windows: CVE-2026-88125: Role: DNS Server Denial of Service Vulnerability

Out-of-bounds read in DNS Server allows an authorized attacker to deny service over a network...

CVE-2026-85811: Use After Free

Use after free in Network Policy Server NPS allows an unauthorized attacker to execute code over an adjacent network...

CVE-2026-96325: Missing Reference to Active Allocated Resource

Missing reference to active allocated resource in Windows SMB Server allows an unauthorized attacker to deny service over a network...

CVE-2026-97816: Use After Free

Use after free in OpenSSH for Windows allows an unauthorized attacker to execute code over a network...

CVE-2026-97813: Heap-based Buffer Overflow

Heap-based buffer overflow in Windows Hyper-V allows an authorized attacker to disclose information over a network...

CVE-2026-67628: Out-of-bounds Read

Out-of-bounds read in SQL Server allows an authorized attacker to disclose information over a network...

CVE-2026-69675: Out-of-bounds Read

Out-of-bounds read in Windows Network File System allows an authorized attacker to disclose information locally...

CVE-2026-70167: Access of Resource Using Incompatible Type

Access of resource using incompatible type 'type confusion' in DNS Server allows an authorized attacker to execute code over a network...

CVE-2026-70143: Heap-based Buffer Overflow

Heap-based buffer overflow in Windows Network File System allows an authorized attacker to execute code locally...

CVE-2026-70170: Untrusted Pointer Dereference

Untrusted pointer dereference in Windows Kernel allows an authorized attacker to deny service over a network...

CVE-2026-70163: Allocation of Resources Without Limits or Throttling

Allocation of resources without limits or throttling in OpenSSH for Windows allows an unauthorized attacker to deny service over a network...

CVE-2026-69370: Improper Neutralization of Special Elements used in a Command

Improper neutralization of special elements used in a command 'command injection' in Visual Studio Code allows an unauthorized attacker to execute code over a network...

CVE-2026-69802: Weak Authentication

Weak authentication in Network Device Enrollment Service NDES allows an unauthorized attacker to execute code over a network...

CVE-2026-67626: Uncontrolled Resource Consumption

Uncontrolled resource consumption in SQL Server allows an authorized attacker to deny service over a network...

CVE-2026-70079: Improper Enforcement of Behavioral Workflow

Improper enforcement of behavioral workflow in Windows DNS allows an unauthorized attacker to deny service over a network...

CVE-2026-70068: Heap-based Buffer Overflow

Heap-based buffer overflow in Windows Client-Side Caching CSC Service allows an unauthorized attacker to elevate privileges over a network...

CVE-2026-70069: Stack-based Buffer Overflow

Stack-based buffer overflow in Windows DHCP Server allows an authorized attacker to execute code over a network...

CVE-2026-69998: Use After Free

Use after free in Remote Desktop Client allows an unauthorized attacker to execute code over a network...

CVE-2026-69995: Use After Free

Use after free in Remote Desktop Client allows an unauthorized attacker to execute code over a network...

CVE-2026-70005: Weak Authentication

Weak authentication in Active Directory Federation Services AD FS allows an unauthorized attacker to bypass a security feature over a network...