EUVD-2026-35563

Use after free in Universal Plug and Play upnp.dll allows an unauthorized attacker to execute code over a network...

CVE-2026-45635

CVE-2026-45635 affects Windows UPnP Device Host through a use-after-free in upnp.dll, enabling remote code execution over the network. The issue is tied to the Universal Plug and Play component, with impact described as remote, unauthenticated code execution; CVSSv3.1 base score 8.1 (HIGH). Affec...

CVE-2026-45635 Windows UPnP Device Host Remote Code Execution Vulnerability

...

CVE-2026-45636 Windows NTFS Remote Code Execution Vulnerability

...

CVE-2026-45636 Windows NTFS Remote Code Execution Vulnerability

...

CVE-2026-45599 Windows UPnP Device Host Remote Code Execution Vulnerability

...

EUVD-2026-35556

Use after free in Universal Plug and Play upnp.dll allows an unauthorized attacker to execute code over a network...

CVE-2026-45599

The CVE-2026-45599 entry describes a use-after-free in Windows’ Universal Plug and Play component (upnp.dll) that enables a remote attacker to execute code over the network via the UPnP Device Host. The vulnerability is rated CVSSv3.1: 8.1 (HIGH) with Network attack vector, no privileges required...

CVE-2026-45463 Microsoft Office Remote Code Execution Vulnerability

...

CVE-2026-45463 Microsoft Office Remote Code Execution Vulnerability

...

CVE-2026-45457 Microsoft Word Remote Code Execution Vulnerability

...

CVE-2026-45454 Microsoft SharePoint Remote Code Execution Vulnerability

...

CVE-2026-45454 Microsoft SharePoint Remote Code Execution Vulnerability

...

CVE-2026-26142 Nuance PowerScribe Remote Code Execution Vulnerability

...

CVE-2026-26142 Nuance PowerScribe Remote Code Execution Vulnerability

...

CVE-2026-26142

CVE-2026-26142 affects Nuance PowerScribe. The issue is a deserialization of untrusted data in PowerScribe that allows an unauthenticated attacker to execute code over a network (remote code execution). The vulnerability’s CVSSv3.1 metrics indicate NETWORK access, low attack complexity, and no pr...

CVE-2026-47654

CVE-2026-47654 is described as a heap-based buffer overflow in Remote Desktop Client enabling remote code execution over a network. The CVSS v3.1 metrics indicate NETWORK attack vector, HIGH impact on confidentiality, integrity, and availability, with NO privileges and UI interaction required. No...

CVE-2026-48563 Remote Desktop Client Remote Code Execution Vulnerability

...

CVE-2026-48563 Remote Desktop Client Remote Code Execution Vulnerability

...

CVE-2026-47654 Remote Desktop Client Remote Code Execution Vulnerability

...