CVE-2026-83935

A heap-based buffer overflow vulnerability exists in Microsoft XML , which allows an unauthorized attacker to achieve remote code execution over a network. This vulnerability is categorized as CRITICAL with a CVSSv3.1 score of 9.8 . The NCSC confirms that this flaw allows malicious actors to exec...

CVE-2026-83910

A critical out-of-bounds write vulnerability exists in the RPC Runtime component of Microsoft Windows . An unauthorized attacker can exploit this flaw over a network to achieve arbitrary code execution . This vulnerability is categorized as having a CVSS score of 9.80 , allowing for remote exploi...

CVE-2026-83856

An out-of-bounds read vulnerability exists in the Windows Event Logging Service . This flaw allows an unauthorized attacker to achieve remote code execution over a network. The vulnerability is associated with CWE-125 and has a CVSS 3.1 base score of 7.5 . No specific exploit code or remediation ...

CVE-2026-83874

A heap-based buffer overflow exists in Windows Event Tracing which could allow an unauthorized attacker to achieve remote code execution over a network. The vulnerability carries a high severity score of 8.8, indicating significant impact on confidentiality, integrity, and availability. While the...

CVE-2026-83797

The Windows Partition Management Driver contains an out-of-bounds read vulnerability (CWE-125). This flaw could allow an unauthorized attacker to achieve remote code execution over a network. The vulnerability is rated as HIGH severity with a CVSS 3.1 score of 8.8. Official remediation is availab...

CVE-2026-83778

A heap-based buffer overflow vulnerability exists in the Microsoft Internet Messaging API . This flaw allows an unauthorized attacker to achieve remote code execution over a network. The vulnerability has a high severity rating (CVSS 8.8) and requires user interaction. No specific exploit details...

CVE-2026-83770

A heap-based buffer overflow exists in Windows Text Shaping that allows an unauthorized attacker to execute arbitrary code over a network. This vulnerability is classified as CRITICAL with a CVSS score of 9.8. Systems connected to public networks are at a higher risk, as the vulnerability can be ...

CVE-2026-83725

A heap-based buffer overflow exists in the Microsoft Windows Search Component , which could allow an unauthorized attacker to execute code over a network. The vulnerability is associated with CWE-122 and CWE-190 . Detailed information regarding specific affected versions, the exact root cause, or...

CVE-2026-83643

A stack-based buffer overflow vulnerability exists in Windows Error Reporting , which could allow an unauthorized attacker to execute code over a network . The vulnerability has a CVSS 3.1 base score of 8.8 (High) , indicating significant impact on confidentiality, integrity, and availability. No...

CVE-2026-83517

A heap-based buffer overflow in Microsoft Windows Media Foundation allows an unauthorized attacker to achieve remote code execution over a network. This vulnerability is rated as CRITICAL with a CVSS score of 9.80 , as it enables an attacker to execute arbitrary code without prior authentication ...

CVE-2026-83523

A Heap-based buffer overflow vulnerability exists in Windows Image Acquisition . This flaw allows an unauthorized attacker to achieve remote code execution over a network. The vulnerability has a High severity rating with a CVSS 3.1 score of 8.8 . No specific exploit details or proof-of-concept l...

CVE-2026-83519

A heap-based buffer overflow exists in Windows Error Reporting , which could allow an unauthorized attacker to execute arbitrary code over a network. This vulnerability has a CVSS score of 9.80 and does not require prior authentication or user interaction. Exploitation details and specific patche...

CVE-2026-77496

A Heap-based buffer overflow exists in the Windows Imaging Component , which could allow an unauthorized attacker to achieve Remote Code Execution (RCE) over a network. The vulnerability has a HIGH base severity score of 8.8. No specific exploit details or in-the-wild exploitation information are...

CVE-2026-69326

A heap-based buffer overflow vulnerability exists in Graphic Fonts , which could allow an unauthorized attacker to achieve remote code execution over a network. The vulnerability has a CVSS 3.1 base score of 8.8 (High) , indicating significant impact on confidentiality, integrity, and availabilit...

CVE-2026-77902

A heap-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code over a network. Exploitation of this vulnerability requires the victim to open a malicious file or click a malicious link. Microsoft has released updates to address this and other vulnerabilitie...

CVE-2026-69765

A Use after free vulnerability exists in the Windows Storport Miniport Driver . This flaw allows an unauthorized attacker to achieve remote code execution over a network. The vulnerability has a CVSS 3.1 base score of 8.8 (High) . While specific exploitation details are not provided, an official ...

CVE-2026-70258

A heap-based buffer overflow exists in Microsoft Windows Media Foundation , which could allow an unauthorized attacker to achieve remote code execution over a network. The vulnerability is associated with CWE-122 (Heap-based Buffer Overflow) and CWE-190 (Integer Overflow or Wraparound). No specif...

CVE-2026-70157

A Heap-based buffer overflow vulnerability exists in the Windows System Information Console . This flaw allows an unauthorized attacker to achieve remote code execution over a network. The vulnerability is classified as CRITICAL with a CVSS score of 9.8, impacting confidentiality, integrity, and ...

CVE-2026-69998

A Use after free vulnerability in the Remote Desktop Client allows an unauthorized attacker to achieve remote code execution over a network. The vulnerability has a High base severity (7.5) and requires user interaction. While specific component details or exploit links are not provided in the do...

CVE-2026-70004

A use after free vulnerability in the Remote Desktop Client allows an unauthorized attacker to execute code over a network. The vulnerability has a high CVSS 3.1 base score of 7.5, indicating significant impact on confidentiality, integrity, and availability. No specific software versions, underl...