CVE-2026-62913

CVE-2026-62913 describes a heap-based buffer overflow in Microsoft Exchange Server that allows an authorized attacker to execute code over a network. The CVSS v3.1 base score is 8.8 (HIGH) with NETWORK attack vector, LOW attack complexity, and privileges required: LOW; impact on confidentiality, ...

CVE-2026-62897 .NET Framework Remote Code Execution Vulnerability

...

CVE-2026-62889 Windows Secure Socket Tunneling Protocol (SSTP) Remote Code Execution Vulnerability

...

CVE-2026-62878 Windows DNS Server Remote Code Execution Vulnerability

...

CVE-2026-62878 Windows DNS Server Remote Code Execution Vulnerability

...

CVE-2026-62820 Windows DNS Server Remote Code Execution Vulnerability

...

CVE-2026-62819 Windows Routing and Remote Access Service (RRAS) Remote Code Execution Vulnerability

...

CVE-2026-62818

CVE-2026-62818 affects Microsoft Windows Active Directory Certificate Services (AD CS). The vulnerability is a use-after-free in AD CS that allows an authorized attacker to execute arbitrary code over a network. CVSS v3.1 base metrics indicate a HIGH severity (8.8) with Network attack vector, Low...

CVE-2026-62816 Windows Reliable Multicast Transport Driver (RMCAST) Remote Code Execution Vulnerability

...

CVE-2026-62815 Microsoft QUIC Remote Code Execution Vulnerability

...

CVE-2026-62787 Windows DNS Server Remote Code Execution Vulnerability

...

CVE-2026-62785 Windows LDAP - Lightweight Directory Access Protocol Remote Code Execution Vulnerability

...

CVE-2026-59124 Microsoft High Performance Computing (HPC) Pack Remote Code Execution Vulnerability

...

CVE-2026-59113 Visual Studio Code Remote Code Execution Vulnerability

...

CVE-2026-63520

CVE-2026-63520 is an improper input validation vulnerability in Microsoft SharePoint Server that allows an unauthorized attacker to achieve remote code execution over a network with no privileges or user interaction required, though attack complexity is high. It affects SharePoint Server 2016 , 2...

CVE-2026-63514 Microsoft SharePoint Server Remote Code Execution Vulnerability

...

CVE-2026-63514

Summary: CVE-2026-63514 involves deserialization of untrusted data in Microsoft Office SharePoint, enabling an authorized attacker to execute code remotely over a network. Affected component: SharePoint Server (deserialization path in untrusted data handling). Impact: Remote code execution with H...

Researchers Disclose AI-Assisted SharePoint Exploit Chain Reaching Unauthenticated RCE

Security researchers found a way to enter Microsoft SharePoint servers as any user, including an administrator, with no valid account. A significant part of the work that found it was done through an AI agent. The flaw, tracked as CVE-2026-55040 CVSS 9.1, affects SharePoint Server Subscription...

Important: Red Hat Security Advisory: Red Hat JBoss Enterprise Application Platform 7.4.25 Security update

A security update is now available for Red Hat JBoss Enterprise Application Platform 7.4 for Red Hat Enterprise Linux 8. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity...

jboss-marshalling-river: wildfly-clustering-infinispan-marshalling: Jboss Deserialization RCE via Unfiltered River Unmarshaller

A flaw was found in JBoss marshalling. The Infinispan session replication path deserializes replicated session data via the JBoss Marshalling River unmarshaller with no class filtering — enabling RCE via deserialization gadget chains on every cluster node...