CVE-2026-45636 Windows NTFS Remote Code Execution Vulnerability

...

CVE-2026-45636 Windows NTFS Remote Code Execution Vulnerability

...

CVE-2026-45599

The CVE-2026-45599 entry describes a use-after-free in Windows’ Universal Plug and Play component (upnp.dll) that enables a remote attacker to execute code over the network via the UPnP Device Host. The vulnerability is rated CVSSv3.1: 8.1 (HIGH) with Network attack vector, no privileges required...

EUVD-2026-35556

Use after free in Universal Plug and Play upnp.dll allows an unauthorized attacker to execute code over a network...

CVE-2026-45463 Microsoft Office Remote Code Execution Vulnerability

...

CVE-2026-45457 Microsoft Word Remote Code Execution Vulnerability

...

CVE-2026-45454 Microsoft SharePoint Remote Code Execution Vulnerability

...

CVE-2026-26142 Nuance PowerScribe Remote Code Execution Vulnerability

...

CVE-2026-26142

CVE-2026-26142 affects Nuance PowerScribe. The issue is a deserialization of untrusted data in PowerScribe that allows an unauthenticated attacker to execute code over a network (remote code execution). The vulnerability’s CVSSv3.1 metrics indicate NETWORK access, low attack complexity, and no pr...

CVE-2026-47654

CVE-2026-47654 is described as a heap-based buffer overflow in Remote Desktop Client enabling remote code execution over a network. The CVSS v3.1 metrics indicate NETWORK attack vector, HIGH impact on confidentiality, integrity, and availability, with NO privileges and UI interaction required. No...

CVE-2026-48563 Remote Desktop Client Remote Code Execution Vulnerability

...

CVE-2026-47652 Windows Hyper-V Remote Code Execution Vulnerability

...

CVE-2026-47653 Remote Desktop Client Remote Code Execution Vulnerability

...

CVE-2026-47635 Microsoft Outlook and Word Remote Code Execution Vulnerability

...

CVE-2026-47298 Microsoft SharePoint Server Remote Code Execution Vulnerability

...

CVE-2026-47298

CVE-2026-47298 constrains Microsoft Office SharePoint, where improper authorization allows an attacker with network access to execute code on vulnerable systems. The vulnerability is described as a remote code execution issue with a high impact on confidentiality, integrity, and availability (CVE...

CVE-2026-32193 Azure Kubernetes Service (AKS) Remote Code Execution Vulnerability

...

CVE-2026-47292 Visual Studio Code MSSQL Extension Remote Code Execution Vulnerability

...

CVE-2026-47291 HTTP.sys Remote Code Execution Vulnerability

...

CVE-2026-47291

The CVE-2026-47291 entry describes an integer overflow/ wraparound in Windows HTTP.sys that enables a remote attacker to execute code over the network. Affected software component: Windows HTTP.sys. Root cause: integer overflow/wraparound in the HTTP.sys processing path. Impact: unauthenticated n...