277958 matches found
CVE-2026-69829
CVE-2026-69829 is a heap-based buffer overflow in Windows Shell that allows an unauthorized attacker to achieve remote code execution over a network . Microsoft's assigned CVSS 3.1 score is 9.8 (CRITICAL) , with an attack vector of Network, low complexity, no privileges required, and no user inte...
CVE-2026-69769
CVE-2026-69769 is a heap-based buffer overflow in the Windows HTTP Print Provider that allows an unauthorized, remote attacker to achieve code execution over a network . The vulnerability is rated CRITICAL (CVSS 9.8) with low attack complexity, no required privileges, and no user interaction, yie...
EUVD-2026-73628
Heap-based buffer overflow in Windows DHCP Server allows an unauthorized attacker to execute code over a network...
EUVD-2026-73622
Integer underflow wrap or wraparound in Microsoft Standard XPS allows an unauthorized attacker to execute code over a network...
CVE-2026-69824
CVE-2026-69824 is an integer underflow (wrap or wraparound) vulnerability in Microsoft Standard XPS that allows an unauthorized attacker to achieve remote code execution over a network with no privileges required and no user interaction. The CVSS v3.1 score is 9.8 (Critical) with a vector of AV:N...
EUVD-2026-73602
Heap-based buffer overflow in Windows RNDIS allows an unauthorized attacker to execute code over a network...
CVE-2026-69620
CVE-2026-69620 is a stack-based buffer overflow in Windows DHCP Server that allows an unauthorized attacker to achieve remote code execution over a network. The CVSS 3.1 score is 8.1 (HIGH) with a vector of AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H, indicating network-based exploitation with high compl...
CVE-2026-54611 InstantCMS has Remote Code Execution in package installer
InstantCMS is a free and open source content management system. Versions prior to 2.18.2 have a Remote Code Execution RCE issue that allows remote authenticated attackers to execute any PHP code via the component installer. It is possible to upload a malicious component into the server, however, ...
CVE-2026-54611 InstantCMS has Remote Code Execution in package installer
InstantCMS is a free and open source content management system. Versions prior to 2.18.2 have a Remote Code Execution RCE issue that allows remote authenticated attackers to execute any PHP code via the component installer. It is possible to upload a malicious component into the server, however, ...
CVE-2026-54611
InstantCMS , a free and open-source content management system, contains a Remote Code Execution vulnerability in its component installer in versions prior to 2.18.2 . A remote authenticated attacker can upload a malicious component; although the component is not formally installed, the uploaded P...
EUVD-2026-73542
Integer overflow or wraparound in Microsoft Windows PDF allows an unauthorized attacker to execute code over a network...
CVE-2026-69493
CVE-2026-69493 is a critical (CVSS 9.8) out-of-bounds read vulnerability in Windows Event Logging Service , as assigned by Microsoft . The flaw allows an unauthorized, network-based attacker to achieve remote code execution without user interaction, with high impact to confidentiality, integrity,...
CVE-2026-69434
A heap-based buffer overflow in Windows URL Moniker allows an unauthorized attacker to achieve remote code execution over a network. The vulnerability requires user interaction (e.g., opening a malicious URL) but no prior authentication or privileges, per the CVSS 3.1 vector (AV:N/AC:L/PR:N/UI:R/...
EUVD-2026-73504
Heap-based buffer overflow in Windows URL Moniker allows an unauthorized attacker to execute code over a network...
EUVD-2026-73496
Incorrect conversion between numeric types in Microsoft JScript allows an unauthorized attacker to execute code over a network...
EUVD-2026-73483
Heap-based buffer overflow in Microsoft Windows Media Foundation allows an unauthorized attacker to execute code over a network...
CVE-2026-69386
CVE-2026-69386 is a heap-based buffer overflow in Microsoft Windows Media Foundation that allows an unauthorized attacker to achieve remote code execution over a network. The vulnerability carries a CVSS 3.1 score of 8.8 (HIGH) , with a network attack vector, low complexity, no privileges require...
CVE-2026-69360
CVE-2026-69360 is a heap-based buffer overflow in Microsoft Office Word that allows an unauthorized attacker to achieve remote code execution over a network. The attack requires user interaction (e.g., opening a malicious document) but no prior authentication. The assigned CVSS v3.1 score is 8.8 ...