CVE-2026-96934

A Use after free vulnerability in the Windows DHCP Server allows an unauthorized attacker to execute arbitrary code over a network. This vulnerability has a CRITICAL base score of 9.8 . While the specific root cause is identified as a use after free, detailed exploit information or specific patch...

CVE-2026-96320

A heap-based buffer overflow vulnerability exists in the Windows DHCP Server . This flaw allows an unauthorized attacker to achieve remote code execution over a network. The vulnerability is rated as CRITICAL with a CVSS score of 9.80 , as it can be exploited without prior authentication or user ...

EUVD-2026-100205

Improper neutralization of input during web page generation 'cross-site scripting' in ASP.NET Core allows an unauthorized attacker to execute code over a network...

CVE-2026-96230

The ASP.NET Core framework is vulnerable to a cross-site scripting (XSS) issue caused by the improper neutralization of input during web page generation. An unauthorized attacker can exploit this vulnerability over a network to achieve execution of arbitrary code . The vulnerability has a CVSS sc...

EUVD-2026-100197

Deserialization of untrusted data in .NET Framework allows an unauthorized attacker to execute code over a network...

CVE-2026-70007

A vulnerability exists in the .NET Framework where an out-of-bounds write flaw allows an unauthorized attacker to execute arbitrary code over a network. This issue has a CVSS 3.1 score of 8.8 (High severity) and was identified by Microsoft. The NCSC confirms that this vulnerability can result in ...

CVE-2026-70343

A heap-based buffer overflow vulnerability exists in the Microsoft MPEG-2 Video Extension . This flaw allows an unauthorized attacker to achieve remote code execution over a network. The vulnerability is associated with CWE-122 and carries a CVSS 3.1 base score of 8.8 (High) , indicating high imp...

CVE-2026-70035

The ½.NET Framework is affected by a deserialization of untrusted data vulnerability, which allows an unauthorized attacker to execute code over a network . The vulnerability is classified with a CVSS score of 8.8 and results in the execution of arbitrary code . No specific exploit information or...

CVE-2026-88207

A heap-based buffer overflow in Microsoft Office PowerPoint allows an unauthorized attacker to achieve arbitrary code execution over a network. The vulnerability requires user interaction, as an attacker must trick a victim into opening a malicious file or clicking a malicious link. Microsoft has...

CVE-2026-83520

The .NET framework is vulnerable to a deserialization of untrusted data flaw, which allows an unauthorized attacker to achieve execution of arbitrary code over a network. This vulnerability has a CVSSv3.1 score of 8.80 and is categorized under CWE-502 . While the provided documents confirm the im...

CVE-2026-70035

Deserialization of untrusted data in .NET Framework allows an unauthorized attacker to execute code over a network...

CVE-2026-88185

A heap-based buffer overflow exists in Microsoft Office Word , which may allow an unauthorized attacker to execute code over a network. This vulnerability is associated with CWE-122 and has a CVSS v3.1 score of 8.1 (High). Microsoft has released updates to address this vulnerability. Affected sys...

CVE-2026-88186

A heap-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to achieve arbitrary code execution over a network. The vulnerability is associated with CWE-122 (Heap-based Buffer Overflow) and CWE-190 (Integer Overflow or Wraparound). Microsoft has released updates to addre...

CVE-2026-70242

A heap-based buffer overflow vulnerability exists in Microsoft Office Outlook , allowing an unauthorized attacker to execute arbitrary code over a network. The vulnerability has a CRITICAL severity rating (CVSS 9.8). Microsoft has released official updates to address this issue, and users are adv...

CVE-2026-70153

A heap-based buffer overflow vulnerability exists in the Microsoft PostScript Printer Driver . This flaw allows an unauthorized attacker to achieve remote code execution over a network. The vulnerability is classified with a CVSS score of 9.80 , indicating a critical impact on confidentiality, in...

CVE-2026-70254

An out-of-bounds read vulnerability in Microsoft Office Excel allows an unauthorized attacker to execute code over a network. Exploitation of this vulnerability requires the victim to be tricked into opening a malicious file or clicking a malicious link. Microsoft has released updates to address ...

CVE-2026-88112

A DNS Server vulnerability exists due to an untrusted pointer dereference (CWE-822). This flaw allows an unauthorized attacker to achieve remote code execution over a network. The vulnerability has a CVSS 3.1 base score of 8.8 (High) . While the impact covers high levels of confidentiality, integ...

EUVD-2026-100139

Stack-based buffer overflow in Microsoft Exchange Server allows an unauthorized attacker to execute code over a network...

CVE-2026-70571

A stack-based buffer overflow exists in Microsoft Exchange Server , which may allow an unauthorized attacker to achieve remote code execution over a network. The vulnerability's severity is rated as High (CVSS 3.1 score of 8.1), potentially impacting confidentiality, integrity, and availability. ...

CVE-2026-70158

The Windows Routing and Remote Access Service (RRAS) is vulnerable to Remote Code Execution (RCE) . This vulnerability is caused by a Double Free (CWE-415) condition, which could allow an attacker to gain unauthorized access to a victim's machine. The issue is rated as High severity with a CVSS 3...