CVE-2026-97007

A heap-based buffer overflow exists in Microsoft Office Excel , potentially allowing an unauthorized attacker to execute arbitrary code over a network. The vulnerability is rated as HIGH severity (CVSS 3.1: 8.8) and requires user interaction to exploit. Microsoft has released official fixes to ad...

CVE-2026-97773

A heap-based buffer overflow vulnerability exists in Microsoft Office Excel , which could allow an unauthorized attacker to achieve arbitrary code execution over a network. The vulnerability's severity is rated as High (CVSS 3.1: 8.8) due to its potential for significant confidentiality, integrit...

CVE-2026-97769

A heap-based buffer overflow vulnerability exists in Microsoft Office Excel , which can allow an unauthorized attacker to execute code over a network . The vulnerability is associated with CWE-122 (Heap-based Buffer Overflow) and CWE-20 (Improper Input Validation). Practical consequences include ...

CVE-2026-97756

A heap-based buffer overflow exists in Microsoft Office Excel , which allows an unauthorized attacker to execute code over a network. Exploitation typically requires the victim to open a malicious file or click a malicious link. Microsoft has released updates to address this vulnerability; users ...

CVE-2026-97748

A heap-based buffer overflow vulnerability exists in Microsoft Office Excel , which could allow an unauthorized attacker to achieve arbitrary code execution over a network. To successfully exploit this vulnerability, an attacker must typically trick a victim into opening a malicious file or click...

EUVD-2026-100276

Heap-based buffer overflow in Microsoft Windows Media Foundation allows an unauthorized attacker to execute code over a network...

CVE-2026-96952

A Heap-based buffer overflow vulnerability exists in Microsoft Windows Media Foundation . This flaw could allow an unauthorized attacker to achieve remote code execution over a network. The vulnerability is characterized by a CVSS v3.1 score of 8.8 (High) , indicating significant impacts on confi...

CVE-2026-96202

A heap-based buffer overflow exists in the Windows Raw Image Extension . This vulnerability enables an unauthorized attacker to achieve remote code execution over a network. The issue is associated with CWE-122 . No specific exploit details or information regarding in-the-wild exploitation are pr...

CVE-2026-96934

A Use after free vulnerability in the Windows DHCP Server allows an unauthorized attacker to execute arbitrary code over a network. This vulnerability has a CRITICAL base score of 9.8 . While the specific root cause is identified as a use after free, detailed exploit information or specific patch...

CVE-2026-96320

A heap-based buffer overflow vulnerability exists in the Windows DHCP Server . This flaw allows an unauthorized attacker to achieve remote code execution over a network. The vulnerability is rated as CRITICAL with a CVSS score of 9.80 , as it can be exploited without prior authentication or user ...

CVE-2026-96230

The ASP.NET Core framework is vulnerable to a cross-site scripting (XSS) issue caused by the improper neutralization of input during web page generation. An unauthorized attacker can exploit this vulnerability over a network to achieve execution of arbitrary code . The vulnerability has a CVSS sc...

EUVD-2026-100205

Improper neutralization of input during web page generation 'cross-site scripting' in ASP.NET Core allows an unauthorized attacker to execute code over a network...

EUVD-2026-100197

Deserialization of untrusted data in .NET Framework allows an unauthorized attacker to execute code over a network...

CVE-2026-70035

Deserialization of untrusted data in .NET Framework allows an unauthorized attacker to execute code over a network...

CVE-2026-83520

The .NET framework is vulnerable to a deserialization of untrusted data flaw, which allows an unauthorized attacker to achieve execution of arbitrary code over a network. This vulnerability has a CVSSv3.1 score of 8.80 and is categorized under CWE-502 . While the provided documents confirm the im...

CVE-2026-88207

A heap-based buffer overflow in Microsoft Office PowerPoint allows an unauthorized attacker to achieve arbitrary code execution over a network. The vulnerability requires user interaction, as an attacker must trick a victim into opening a malicious file or clicking a malicious link. Microsoft has...

CVE-2026-70343

A heap-based buffer overflow vulnerability exists in the Microsoft MPEG-2 Video Extension . This flaw allows an unauthorized attacker to achieve remote code execution over a network. The vulnerability is associated with CWE-122 and carries a CVSS 3.1 base score of 8.8 (High) , indicating high imp...

CVE-2026-70007

A vulnerability exists in the .NET Framework where an out-of-bounds write flaw allows an unauthorized attacker to execute arbitrary code over a network. This issue has a CVSS 3.1 score of 8.8 (High severity) and was identified by Microsoft. The NCSC confirms that this vulnerability can result in ...

CVE-2026-70035

The ½.NET Framework is affected by a deserialization of untrusted data vulnerability, which allows an unauthorized attacker to execute code over a network . The vulnerability is classified with a CVSS score of 8.8 and results in the execution of arbitrary code . No specific exploit information or...

CVE-2026-88186

A heap-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to achieve arbitrary code execution over a network. The vulnerability is associated with CWE-122 (Heap-based Buffer Overflow) and CWE-190 (Integer Overflow or Wraparound). Microsoft has released updates to addre...