CVE-2026-97750

A stack-based buffer overflow vulnerability exists in Microsoft Office Excel , which allows an unauthorized attacker to achieve remote code execution over a network. The vulnerability is rated as HIGH severity (CVSS 8.8) and requires user interaction to exploit. Microsoft has released updates to ...

CVE-2026-97001

A heap-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to achieve remote code execution locally. The vulnerability is confirmed by multiple sources, including NVD and Microsoft security advisories. To successfully exploit this, an attacker must trick the victim into...

EUVD-2026-99794

Integer overflow or wraparound in Windows Raw Image Extension allows an unauthorized attacker to execute code over a network...

CVE-2026-96995

A stack-based buffer overflow exists in Microsoft Office Word , which allows an authorized attacker to achieve local privilege escalation . The vulnerability is associated with CWE-121 (Stack-based Buffer Overflow) and CWE-197 (Numeric Truncation Error). Microsoft has released updates to address ...

CVE-2026-96920

A heap-based buffer overflow exists in the Windows Program Compatibility Assistant Service . This vulnerability allows an authorized attacker to achieve local privilege escalation . While the specific component or function is not detailed, the issue impacts local security boundaries. No specific ...

CVE-2026-97016

A heap-based buffer overflow in Microsoft Office Outlook allows an unauthorized attacker to achieve remote code execution over a network. The vulnerability has a CRITICAL severity score of 9.8 . Microsoft has released updates to address this issue, and users are encouraged to install them via the...

CVE-2026-97012

A stack-based buffer overflow in Microsoft Office Outlook allows an unauthorized attacker to achieve remote code execution over a network. The vulnerability has a High severity rating with a CVSS score of 8.8 . Microsoft has released security updates to address this issue, and users are encourage...

CVE-2026-96996

A heap-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code locally . The vulnerability's impact is categorized as Arbitrary code execution with a CVSS 3.1 base score of 7.8. To successfully exploit this vulnerability, an attacker typically requires the v...

CVE-2026-96943

A vulnerability exists in the Windows Raw Image Extension due to an integer overflow or wraparound condition. This flaw allows an unauthorized attacker to achieve remote code execution over a network. The vulnerability is associated with CWE-190 (Integer Overflow or Wraparound) and CWE-122 (Heap-...

CVE-2026-96856

A heap-based buffer overflow exists in Windows Management Instrumentation , which allows an authorized attacker to achieve local privilege elevation . The vulnerability is categorized as HIGH severity with a CVSS 3.1 score of 7.8 . No specific exploit details or evidence of in-the-wild exploitati...

CVE-2026-96863

A heap-based buffer overflow vulnerability exists in the Windows Storage Port Driver . This flaw allows an unauthorized attacker to elevate privileges via a physical attack . The provided documents do not specify the exact affected versions or the specific function/file involved. No information r...

CVE-2026-96868

A heap-based buffer overflow exists in the Windows Kernel , which could allow an authorized attacker to achieve local privilege escalation . The vulnerability is characterized by high complexity and requires local access. No specific exploit details or information regarding in-the-wild exploitati...

CVE-2026-96312

A heap-based buffer overflow exists in the Windows Kernel that enables an authorized attacker to perform a local privilege escalation . The vulnerability is categorized under CWE-122 . While the specific component or function is not detailed in the provided documents, the impact involves a high s...

CVE-2026-96318

A Heap-based buffer overflow in Windows Resume allows an authorized attacker to elevate privileges locally . The vulnerability has a CVSS 3.1 base score of 7.8 (High) and is categorized under CWE-122 . While the specific component or file is not detailed, the impact includes high levels of confid...

CVE-2026-96248

A stack-based buffer overflow exists in the Windows Host Guardian Service , which could allow an unauthorized attacker to perform a denial of service (DoS) attack over a network. The vulnerability is categorized under CWE-121 and has been assigned a High base severity score of 7.5. Remediation is...

CVE-2026-96217

A heap-based buffer overflow exists in Windows NTFS that allows an authorized attacker to elevate privileges locally . The vulnerability is associated with CWE-122 (Heap-based Buffer Overflow) and CWE-190 (Integer Overflow or Wraparound). No specific exploit information or details on in-the-wild ...

CVE-2026-88197

A heap-based buffer overflow exists in Microsoft Office , which could allow an unauthorized attacker to execute arbitrary code over a network. This vulnerability affects several products, including Word , Excel , Access , Outlook , Visio , SharePoint , and PowerPoint . To successfully exploit the...

CVE-2026-88196

A heap-based buffer overflow vulnerability in Microsoft Office allows an unauthorized attacker to achieve remote code execution over a network. The vulnerability affects multiple products including Word , Excel , Access , Outlook , Visio , SharePoint , and PowerPoint , as well as subcomponents li...

CVE-2026-88202

A heap-based buffer overflow exists in Microsoft Office Word , potentially allowing an unauthorized attacker to achieve remote code execution over a network. The vulnerability is rated with a HIGH severity (CVSS 3.1 score of 8.8). To successfully exploit this, an attacker may require the victim t...

CVE-2026-70301

A heap-based buffer overflow exists in Microsoft Office Word , which could allow an unauthorized attacker to execute arbitrary code over a network. To successfully exploit this vulnerability, an attacker must trick a victim into opening a malicious file or clicking a malicious link. Microsoft has...