CVE-2026-83680

A heap-based buffer overflow vulnerability exists in Windows Installer . This flaw allows an authorized attacker to achieve local privilege elevation . The vulnerability has a CVSS 3.1 base score of 7.0 (HIGH) . While the technical root cause is identified as a heap overflow, no specific exploit ...

CVE-2026-83640

A heap-based buffer overflow exists in Windows NTFS that allows an authorized attacker to achieve local code execution . The vulnerability is rated with a High severity (CVSS 3.1 score of 7.8). No specific exploit details or in-the-wild exploitation information are provided in the documents. Reme...

CVE-2026-83638

A heap-based buffer overflow exists in the Windows USB Driver . This vulnerability allows an authorized attacker to perform a local privilege elevation . No specific versions are listed as affected, and no exploit details or proof-of-concept code are provided in the documents. Remediation involve...

CVE-2026-83639

A heap-based buffer overflow vulnerability exists in the Windows Sensor Data Service . This flaw allows an authorized attacker to achieve local privilege escalation . While the CVSS 3.1 score of 7.8 indicates a high severity, specific exploitation details or in-the-wild occurrences are not provid...

CVE-2026-83643

A stack-based buffer overflow vulnerability exists in Windows Error Reporting , which could allow an unauthorized attacker to execute code over a network . The vulnerability has a CVSS 3.1 base score of 8.8 (High) , indicating significant impact on confidentiality, integrity, and availability. No...

CVE-2026-83588

A heap-based buffer overflow exists in the Windows USB Driver . This vulnerability allows an authorized attacker to achieve local privilege escalation . No specific exploit details or in-the-wild exploitation information are provided in the documents.

CVE-2026-83573

An integer overflow or wraparound vulnerability exists in a Windows Kernel Mode Driver . This flaw allows an unauthorized attacker to elevate privileges by performing a physical attack . The vulnerability is characterized by a MEDIUM base severity score (6.8) and involves a PHYSICAL attack vector...

CVE-2026-83579

A heap-based buffer overflow exists in the Windows Smart Card component. This vulnerability allows an authorized attacker to achieve local privilege escalation . No specific software versions, root causes, or exploit details are provided in the documents, but an official fix is indicated by the r...

CVE-2026-83514

A heap-based buffer overflow vulnerability exists in the Windows Partition Management Driver . This flaw allows an authorized attacker to achieve local privilege escalation . While the technical root cause is identified as a heap-based buffer overflow (CWE-122), specific exploit details or in-the...

CVE-2026-83519

A heap-based buffer overflow exists in Windows Error Reporting , which could allow an unauthorized attacker to execute arbitrary code over a network. This vulnerability has a CVSS score of 9.80 and does not require prior authentication or user interaction. Exploitation details and specific patche...

CVE-2026-83523

A Heap-based buffer overflow vulnerability exists in Windows Image Acquisition . This flaw allows an unauthorized attacker to achieve remote code execution over a network. The vulnerability has a High severity rating with a CVSS 3.1 score of 8.8 . No specific exploit details or proof-of-concept l...

CVE-2026-83517

A heap-based buffer overflow in Microsoft Windows Media Foundation allows an unauthorized attacker to achieve remote code execution over a network. This vulnerability is rated as CRITICAL with a CVSS score of 9.80 , as it enables an attacker to execute arbitrary code without prior authentication ...

CVE-2026-78459

A heap-based buffer overflow vulnerability exists in Windows Internet Information Services . This flaw allows an authorized attacker to achieve local privilege escalation . The vulnerability has a CVSS 3.1 score of 7.8 (High) . Official remediation is available via Microsoft's update guide.

CVE-2026-69471

A heap-based buffer overflow exists in the Windows Installer component. This vulnerability allows an authorized attacker to achieve local privilege escalation . The documentation identifies the root cause as a heap-based buffer overflow (CWE-122) and an out-of-bounds read (CWE-125). While the CVS...

CVE-2026-69326

A heap-based buffer overflow vulnerability exists in Graphic Fonts , which could allow an unauthorized attacker to achieve remote code execution over a network. The vulnerability has a CVSS 3.1 base score of 8.8 (High) , indicating significant impact on confidentiality, integrity, and availabilit...

CVE-2026-77496

A Heap-based buffer overflow exists in the Windows Imaging Component , which could allow an unauthorized attacker to achieve Remote Code Execution (RCE) over a network. The vulnerability has a HIGH base severity score of 8.8. No specific exploit details or in-the-wild exploitation information are...

CVE-2026-69635

A heap-based buffer overflow exists in Windows Installer , which could allow an authorized attacker to elevate privileges through a physical attack . The vulnerability is associated with CWE-122 . No specific exploit details or in-the-wild exploitation information are provided in the documents. R...

CVE-2026-77902

A heap-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code over a network. Exploitation of this vulnerability requires the victim to open a malicious file or click a malicious link. Microsoft has released updates to address this and other vulnerabilitie...

CVE-2026-70258

A heap-based buffer overflow exists in Microsoft Windows Media Foundation , which could allow an unauthorized attacker to achieve remote code execution over a network. The vulnerability is associated with CWE-122 (Heap-based Buffer Overflow) and CWE-190 (Integer Overflow or Wraparound). No specif...

CVE-2026-70157

A Heap-based buffer overflow vulnerability exists in the Windows System Information Console . This flaw allows an unauthorized attacker to achieve remote code execution over a network. The vulnerability is classified as CRITICAL with a CVSS score of 9.8, impacting confidentiality, integrity, and ...