EUVD-2026-56766

Server-side request forgery ssrf in Microsoft Office SharePoint allows an authorized attacker to elevate privileges over a network...

CVE-2026-70326 Microsoft SharePoint Server Elevation of Privilege Vulnerability

...

CVE-2026-68812

Heap-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code locally...

CVE-2026-68804

Numeric truncation error in Microsoft Office Excel allows an unauthorized attacker to execute code locally...

EUVD-2026-56751

Heap-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to disclose information locally...

CVE-2026-66807

CVE-2026-66807 is a Microsoft Office Graphics Component vulnerability described as a stack-based buffer overflow. Affected product is Microsoft Office/Graphics Component; impact centers on code execution with a CVSSv3.1 base score of 7.8 (HIGH). Exploitation vector/conflict exists between sources...

CVE-2026-65810 .NET Framework Elevation of Privilege Vulnerability

...

EUVD-2026-56745

Relative path traversal in .NET Framework allows an unauthorized attacker to elevate privileges locally...

CVE-2026-65810 .NET Framework Elevation of Privilege Vulnerability

...

CVE-2026-65810

CVE-2026-65810 is a .NET Framework relative path traversal vulnerability that enables a local attacker to elevate privileges. Affected software is the .NET Framework; root cause is path traversal in a dotnet component that can be triggered locally, with high impact to confidentiality, integrity, ...

CVE-2026-66802

CVE-2026-66802 describes a race condition in Microsoft Azure Attestation service and Device Health Attestation Service caused by improper synchronization of a shared resource. This concurrency issue allows an unauthenticated, network-based attacker to execute code on affected systems, with high i...

CVE-2026-65798 Windows DNS Elevation of Privilege Vulnerability

...

EUVD-2026-56743

Numeric truncation error in Windows DNS allows an authorized attacker to elevate privileges locally...

CVE-2026-65798

CVE-2026-65798 corresponds to a numeric truncation error in Windows DNS that enables an authorized attacker to perform local privilege escalation. Affected component: Windows DNS. Root cause: numeric truncation in DNS handling leading to elevated privileges. Impact is described as local elevation...

CVE-2026-65798 Windows DNS Elevation of Privilege Vulnerability

...

CVE-2026-65797 Windows DNS Elevation of Privilege Vulnerability

...

CVE-2026-65797

CVE-2026-65797 involves a numeric truncation error in Windows DNS that can allow an authorized attacker to elevate privileges locally. The available documents confirm the affected component as Windows DNS and the root cause as a numeric truncation flaw. The impact is local privilege escalation wi...

CVE-2026-65799 Windows DNS Elevation of Privilege Vulnerability

...

CVE-2026-65797 Windows DNS Elevation of Privilege Vulnerability

...

CVE-2026-65799

CVE-2026-65799 is an integer overflow or wraparound vulnerability in the Windows DNS service that allows an authorized local attacker to elevate privileges . The FSTEC BDU further characterizes the root cause as a buffer overflow in dynamic memory . Microsoft rates it CVSS 6.7 (MEDIUM) with high ...