CVE-2026-110111

Xen Orchestra versions prior to 6.9.0 are vulnerable to an improper access control flaw involving prototype pollution . An authenticated user can escalate privileges to global administrator by abusing the unprotected vm.importFromEsxi and vm.importMultipleFromEsxi methods. By directing the xo-ser...

EUVD-2026-100459

Heap-based buffer overflow in Microsoft QUIC allows an unauthorized attacker to execute code over a network...

CVE-2026-97815

A heap-based buffer overflow vulnerability exists in Windows Error Reporting , which could allow an unauthorized attacker to achieve remote code execution over a network. The vulnerability has a CVSS v3.1 score of 9.8 (CRITICAL), indicating a high risk of impact on confidentiality, integrity, and...

CVE-2026-97814

A heap-based buffer overflow vulnerability exists in Windows Text Shaping , which could allow an unauthorized attacker to achieve remote code execution over a network. The vulnerability has a CVSS score of 9.80 and is characterized by low attack complexity, requiring no privileges or user interac...

CVE-2026-97816

A Use after free vulnerability in OpenSSH for Windows allows an unauthorized attacker to execute arbitrary code over a network. The vulnerability has a CVSS 3.1 score of 9.8 and is classified as CRITICAL . Exploitation of this flaw does not require prior authentication or user interaction. While ...

CVE-2026-97805

The Windows Partition Management Driver contains an out-of-bounds read vulnerability (CWE-125) caused by improper input validation (CWE-20). This flaw allows an unauthorized attacker to achieve remote code execution over a network. The vulnerability is rated as CRITICAL with a CVSS 3.1 score of 9...

CVE-2026-96113

A Heap-based buffer overflow and Numeric Truncation Error (CWE-122, CWE-197) exist in the DNS Server on Windows . This vulnerability allows an unauthorized attacker to achieve Remote Code Execution over a network. The vulnerability has a critical CVSS 3.1 score of 9.8, indicating high impact on c...

CVE-2026-105005

An out-of-bounds write vulnerability exists in Windows Schannel , which could allow an unauthorized attacker to execute code over a network . The vulnerability is associated with CWE-787 and has a CVSS v3.1 base score of 8.1 (High) . While the documents confirm the impact and root cause type, spe...

CVE-2026-102225

Windows is affected by an out-of-bounds read vulnerability within the Text Shaping component. This flaw could allow an unauthorized attacker to achieve remote code execution over a network. The vulnerability is associated with CWE-125 (Out-of-bounds Read) and CWE-197 (Numeric Truncation Error). W...

EUVD-2026-100374

Out-of-bounds read in Windows Text Shaping allows an unauthorized attacker to execute code over a network...

CVE-2026-102210

A Heap-based buffer overflow vulnerability exists in Windows Text Shaping . This flaw allows an unauthorized attacker to achieve remote code execution over a network. The vulnerability is classified with a CRITICAL CVSS score of 9.8, indicating high impact on confidentiality, integrity, and avail...

CVE-2026-100222

A heap-based buffer overflow vulnerability exists in the Network Policy Server (NPS) component of Microsoft Windows. This flaw allows an unauthorized attacker to execute arbitrary code over a network. The vulnerability is associated with a CVSS score of 9.8, indicating a critical risk level where...

CVE-2026-100214

Dynamics Business Central is vulnerable to a Remote Code Execution (RCE) flaw due to the deserialization of untrusted data . An authorized attacker can exploit this vulnerability over a network to execute arbitrary code. The vulnerability has a CVSS 3.1 base score of 8.8 (High) . Microsoft has ad...

CVE-2026-100220

A heap-based buffer overflow exists in the Windows Media Video Decoder , which may allow an unauthorized attacker to achieve remote code execution over a network. The vulnerability is associated with CWE-122 . While the documents confirm the impact and root cause, specific exploit details or in-t...

CVE-2026-88219

A vulnerability in the RPC Runtime involves an untrusted pointer dereference , which could allow an unauthorized attacker to execute code over a network . The issue is associated with CWE-822 and has a CVSS v3.1 base score of 8.8 (High) . While the vulnerability allows for remote code execution, ...

CVE-2026-100202

A Use after free vulnerability exists in the Windows Message Queuing Queue Manager . This flaw allows an unauthorized attacker to achieve remote code execution over a network. The vulnerability is rated as CRITICAL with a CVSS score of 9.80 . While specific exploit links are not provided, the doc...

CVE-2026-102870

ASP.NET Core is vulnerable to improper control of generation of code (code injection) , which allows an unauthorized attacker to execute code over a network. This vulnerability has a HIGH severity with a CVSS score of 8.80 , and the potential impact includes the execution of arbitrary code . Whil...

CVE-2026-102870

Improper control of generation of code 'code injection' in ASP.NET Core allows an unauthorized attacker to execute code over a network...

EUVD-2026-100319

Use after free in Microsoft Office Excel allows an unauthorized attacker to execute code over a network...

CVE-2026-97768

A heap-based buffer overflow exists in Microsoft Office Excel , which could allow an unauthorized attacker to execute code over a network. The vulnerability has a CVSS v3.1 score of 8.8 and requires user interaction. Microsoft has released updates to address this vulnerability, and users are enco...