CVE-2026-69595

CVE-2026-69595 is a use-after-free vulnerability in the Windows Services for NFS ONCRPC XDR Driver that allows an unauthorized, unauthenticated attacker to achieve remote code execution over the network. Microsoft rated it CRITICAL (CVSS 3.1: 9.8) with low attack complexity and no user interactio...

CVE-2026-78450

CVE-2026-78450 is a use-after-free vulnerability in the Windows Reliable Multicast Transport Driver (RMCAST) that allows an unauthorized, network-based attacker to achieve remote code execution . The vulnerability was reported by Microsoft (CNA source) and assigned a CVSS 3.1 base score of 8.1 (H...

EUVD-2026-73800

Untrusted pointer dereference in Windows Failover Cluster allows an unauthorized attacker to execute code over a network...

EUVD-2026-73799

Use after free in Reliable Multicast Transport Driver RMCAST allows an unauthorized attacker to execute code over a network...

EUVD-2026-73797

Use after free in Windows Services for NFS ONCRPC XDR Driver allows an unauthorized attacker to execute code over a network...

CVE-2026-78442

CVE-2026-78442 is a heap-based buffer overflow in Windows OLE DB that allows an unauthorized attacker to achieve remote code execution over a network with user interaction. The CNA-assigned CVSS 3.1 score is 8.8 (High) with full impact on confidentiality, integrity, and availability. CISA's SSVC ...

EUVD-2026-73795

Heap-based buffer overflow in Windows OLE DB allows an unauthorized attacker to execute code over a network...

CVE-2026-77486

CVE-2026-77486 is a remote code execution vulnerability in Microsoft SQL Server caused by an integer overflow or wraparound , allowing an unauthorized attacker to execute code over a network. The vulnerability requires user interaction (UI:R) but demands no prior privileges (PR:N) and has low att...

EUVD-2026-73788

Integer overflow or wraparound in SQL Server allows an unauthorized attacker to execute code over a network...

CVE-2026-71328

A heap-based buffer overflow in Visual Studio (and .NET , per the CVE record) allows an unauthorized attacker to execute code over a network, constituting a Remote Code Execution (RCE) vulnerability. The CVSS v3.1 base score is 8.8 (HIGH) , with the attack requiring user interaction but no prior ...

CVE-2026-73016

A heap-based buffer overflow in DirectWrite , a component of Microsoft's Graphics Component, allows an unauthorized attacker to achieve remote code execution over a network. The attack requires low complexity, no privileges, and user interaction, with full impact on confidentiality, integrity, an...

EUVD-2026-73779

Heap-based buffer overflow in Microsoft Graphics Component allows an unauthorized attacker to execute code over a network...

CVE-2026-73013

CVE-2026-73013 is a heap-based buffer overflow in Windows Imaging Component that allows an unauthorized, remote attacker to achieve code execution over a network. The Microsoft CNA assigns a CVSS 3.1 base score of 8.8 (HIGH) with the vector AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H, indicating a networ...

CVE-2026-73023

A heap-based buffer overflow in the Windows Imaging Component allows an unauthorized attacker to achieve remote code execution over a network . The vulnerability is rated CVSS 8.8 (HIGH) with a vector of AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H, indicating network reachability, low complexity, no priv...

EUVD-2026-73775

Use after free in Windows Failover Cluster allows an unauthorized attacker to execute code over a network...

CVE-2026-73006

CVE-2026-73006 is a stack-based buffer overflow in DirectWrite , a component of the Microsoft Graphics Component , that allows an unauthorized remote attacker to achieve remote code execution over a network. The flaw requires user interaction (e.g., opening a crafted file) but no prior authentica...

EUVD-2026-73774

Stack-based buffer overflow in Microsoft Graphics Component allows an unauthorized attacker to execute code over a network...

CVE-2026-73009

This use-after-free vulnerability affects Windows Secure Socket Tunneling Protocol (SSTP) , allowing an unauthorized attacker to achieve remote code execution over a network with low attack complexity and no required privileges or user interaction . The CVSS 3.1 score is 9.8 (Critical) with high ...

EUVD-2026-73773

Use after free in Windows Secure Socket Tunneling Protocol SSTP allows an unauthorized attacker to execute code over a network...

CVE-2026-73018

CVE-2026-73018 is a heap-based buffer overflow in the Graphic Fonts component that allows an unauthorized attacker to achieve remote code execution over a network, with user interaction required . Scored CVSS 8.8 HIGH (C/H I/H A/H) and published by Microsoft (source: [email protected]). No spe...