CVE-2026-83891

A stack-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute arbitrary code over a network. The vulnerability stems from improper input validation and can result in arbitrary code execution within the victim's context. To successfully exploit this, an attacker...

CVE-2026-88145

A heap-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to achieve Remote Code Execution (RCE) over a network. This vulnerability is caused by underlying issues in how the application handles memory, potentially leading to a complete compromise of the victim's conte...

CVE-2024-4040

CVE-2024-4040 A server side template injection vulnerability in CrushFTP in all versions before 10.7.1 and 11.1.0 on all platforms allows unauthenticated remote attackers to read files from the filesystem outside of the VFS Sandbox, bypass authentication to gain administrative access, and perform...

CVE-2026-70291

A heap-based buffer overflow in Microsoft Office Outlook allows an unauthorized attacker to achieve Remote Code Execution (RCE) over a network. The vulnerability has a CRITICAL severity score of 9.8 . To exploit these types of vulnerabilities, an attacker typically tricks a victim into opening a ...

CVE-2026-70302

A heap-based buffer overflow vulnerability in Microsoft Office Word allows an unauthorized attacker to execute arbitrary code over a network. The vulnerability has a CVSS v3.1 base score of 8.8 (High) . An attacker could potentially exploit this to perform remote code execution, though specific e...

CVE-2026-70268

A heap-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to achieve remote code execution over a network. To successfully exploit this vulnerability, an attacker must typically trick a victim into opening a malicious file or clicking a malicious link. Microsoft has re...

CVE-2026-70287

A heap-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to achieve arbitrary code execution over a network. The vulnerability carries a CVSS v3.1 score of 8.8 (High) , indicating that an attacker could exploit this to execute code with high impact on confidentiality,...

CVE-2026-70269

A heap-based buffer overflow vulnerability in Microsoft Office Word allows an unauthorized attacker to achieve Remote Code Execution (RCE) over a network. The vulnerability is associated with CWE-122 and CWE-190 . Microsoft has released official updates to address this flaw. Users are recommended...

CVE-2026-70257

A heap-based buffer overflow vulnerability exists in Microsoft Office Outlook , which could allow an unauthorized attacker to execute arbitrary code over a network. The underlying cause involves a heap-based buffer overflow and an integer overflow or wraparound (CWE-122, CWE-190). Impacted system...

CVE-2026-70256

A heap-based buffer overflow vulnerability exists in Microsoft Office Outlook , which could allow an unauthorized attacker to achieve remote code execution over a network. The impact of this vulnerability is rated as HIGH with a CVSS score of 8.8 . Microsoft has released updates to address this i...

CVE-2026-70147

A heap-based buffer overflow vulnerability exists in the Microsoft PostScript Printer Driver . This flaw allows an unauthorized attacker to achieve remote code execution over a network. The vulnerability is associated with a CRITICAL CVSS v3.1 score of 9.80 , indicating high impact on confidentia...

CVE-2026-70174

The .NET runtime is vulnerable to a Remote Code Execution (RCE) flaw due to an improperly implemented security check for standard . An unauthorized attacker can exploit this vulnerability over a network to execute arbitrary code. The vulnerability has a CVSS score of 8.80 and is categorized under...

CVE-2026-70137

A vulnerability in Windows Remote Access Connection Manager involves improper access control , which allows an authorized attacker to perform a local information disclosure . The CVSS 3.1 score is 5.5 (Medium) , with a high impact on confidentiality. No specific exploit details or versions are pr...

CVE-2026-70024

A stack-based buffer overflow exists in Windows Internet Information Services (IIS), which could allow an unauthorized attacker to execute arbitrary code over a network. The vulnerability is characterized by improper input validation (CWE-20) and has a CRITICAL severity score of 9.80. This flaw a...

CVE-2026-88102

A Use after free vulnerability exists in Windows Failover Cluster , which allows an unauthorized attacker to execute arbitrary code over a network. This vulnerability has a CRITICAL CVSS score of 9.80 . No specific exploit details, affected versions, or remediation steps are provided in the docum...

CVE-2026-87697

The .NET component is vulnerable to a Remote Code Execution (RCE) vulnerability due to the deserialization of untrusted data . An unauthorized attacker can exploit this flaw over a network to execute arbitrary code. The vulnerability has been identified in the context of Microsoft Developer Tools...

CVE-2026-85928

A heap-based buffer overflow exists in the Windows Volume Manager Extension Driver , which may allow an unauthorized attacker to execute arbitrary code over a network. This vulnerability is rated as CRITICAL with a CVSS 3.1 score of 9.80 . No specific exploit details or remediation instructions a...

CVE-2026-85926

A Use after free vulnerability exists in the Windows Secure Socket Tunneling Protocol (SSTP) . This flaw allows an unauthorized attacker to achieve remote code execution over a network. The CVSS 3.1 score is 8.1 (High) , with high impact across confidentiality, integrity, and availability. Docume...

CVE-2026-85867

A heap-based buffer overflow exists in the Windows Remote Access Connection Manager . This vulnerability allows an authorized attacker to achieve local privilege elevation . No specific exploit details or remediation versions are provided in the documentation.

CVE-2026-70187

A Use after free vulnerability exists in the Remote Desktop Gateway Service on Windows systems. This flaw allows an unauthorized attacker to achieve Remote Code Execution (RCE) over a network. The vulnerability is associated with CWE-416 . While the impact is classified as HIGH with a CVSS 3.1 sc...