CVE-2026-88207

A heap-based buffer overflow in Microsoft Office PowerPoint allows an unauthorized attacker to achieve arbitrary code execution over a network. The vulnerability requires user interaction, as an attacker must trick a victim into opening a malicious file or clicking a malicious link. Microsoft has...

CVE-2026-85363

The .NET Framework is affected by a vulnerability involving an integer overflow or wraparound (CWE-190). This flaw allows an unauthorized attacker to elevate privileges over a network. The vulnerability has been assigned a High severity score of 8.80 . Remediation is available via an official fix...

CVE-2026-88185

A heap-based buffer overflow exists in Microsoft Office Word , which may allow an unauthorized attacker to execute code over a network. This vulnerability is associated with CWE-122 and has a CVSS v3.1 score of 8.1 (High). Microsoft has released updates to address this vulnerability. Affected sys...

CVE-2026-88166

Microsoft Office SharePoint is affected by CVE-2026-88166 , which involves an integer overflow or wraparound vulnerability. An authorized attacker can exploit this flaw to achieve arbitrary code execution over a network. Microsoft has released security updates to address this vulnerability; users...

CVE-2026-88186

A heap-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to achieve arbitrary code execution over a network. The vulnerability is associated with CWE-122 (Heap-based Buffer Overflow) and CWE-190 (Integer Overflow or Wraparound). Microsoft has released updates to addre...

CVE-2026-88163

An integer overflow or wraparound vulnerability in Microsoft Office SharePoint allows an authorized attacker to achieve remote code execution over a network. While the NCSC advisory lists this CVE under SharePoint, it notes the impact as "Not a Vulnerability" (translated from the source text), co...

CVE-2026-70242

A heap-based buffer overflow vulnerability exists in Microsoft Office Outlook , allowing an unauthorized attacker to execute arbitrary code over a network. The vulnerability has a CRITICAL severity rating (CVSS 9.8). Microsoft has released official updates to address this issue, and users are adv...

CVE-2026-70153

A heap-based buffer overflow vulnerability exists in the Microsoft PostScript Printer Driver . This flaw allows an unauthorized attacker to achieve remote code execution over a network. The vulnerability is classified with a CVSS score of 9.80 , indicating a critical impact on confidentiality, in...

CVE-2026-88093

A Heap-based buffer overflow exists in the Desktop Window Manager , which allows an authorized attacker to perform a local privilege escalation . The vulnerability has a High severity rating (CVSS 3.1 score of 7.8) and involves a LOW attack complexity. No specific exploit information or patch ver...

EUVD-2026-100139

Stack-based buffer overflow in Microsoft Exchange Server allows an unauthorized attacker to execute code over a network...

CVE-2026-70571

A stack-based buffer overflow exists in Microsoft Exchange Server , which may allow an unauthorized attacker to achieve remote code execution over a network. The vulnerability's severity is rated as High (CVSS 3.1 score of 8.1), potentially impacting confidentiality, integrity, and availability. ...

CVE-2026-70143

A heap-based buffer overflow exists in the Windows Network File System , which may allow an authorized attacker to achieve local code execution . The vulnerability is associated with CWE-122 and carries a High base severity score of 7.8. No specific exploit details or remediation steps are provid...

CVE-2026-70112

A heap-based buffer overflow vulnerability exists in the Windows Spaceport.sys component. This flaw allows an authorized attacker to achieve local code execution . The vulnerability is characterized by high impacts on confidentiality, integrity, and availability, with a CVSS 3.1 base score of 7.8...

CVE-2026-70054

A heap-based buffer overflow exists in Windows NetBIOS that allows an authorized attacker to achieve local privilege escalation . The vulnerability results in high impacts on confidentiality, integrity, and availability. An official fix is available, and no specific exploit code or in-the-wild ex...

CVE-2026-88193

A heap-based buffer overflow exists in the Microsoft Scripting Engine , which can be exploited by an authorized attacker to achieve local privilege elevation . The vulnerability is confirmed with a CVSS 3.1 base score of 7.8, indicating a High severity impact on confidentiality, integrity, and av...

CVE-2026-88128

A heap-based buffer overflow exists in the Windows DWM Core Library . This vulnerability allows an authorized attacker to achieve local privilege elevation . The CVSS 3.1 score is 7.8 (High), with an official fix available. No specific exploit details or in-the-wild exploitation information are p...

CVE-2026-88147

A heap-based buffer overflow exists in the Windows Secure Socket Tunneling Protocol (SSTP) . This vulnerability allows an authorized attacker to perform a local privilege escalation . The impact includes high levels of confidentiality, integrity, and availability loss as reported in the CVSS metr...

CVE-2026-88118

An integer overflow or wraparound vulnerability exists in the Windows Background Intelligent Transfer Service (BITS) . This flaw allows an authorized attacker to achieve local privilege elevation . The vulnerability is associated with CWE-190 (Integer Overflow or Wraparound) and CWE-122 (Heap-bas...

CVE-2026-87702

A vulnerability in Windows Resource Management (MRM) involving an integer overflow or wraparound allows an authorized attacker to achieve local privilege elevation . The vulnerability is characterized by a high base severity score of 7.8. No specific patch versions, workarounds, or exploit detail...

CVE-2026-88110

A heap-based buffer overflow exists in the Windows Graphics Kernel . This vulnerability allows an authorized attacker to achieve local privilege elevation . No specific versions, root causes, or remediation details are provided in the documents. Exploitation details are not present.