CVE-2026-62913 Microsoft Exchange Server Remote Code Execution Vulnerability

...

CVE-2026-62913

CVE-2026-62913 describes a heap-based buffer overflow in Microsoft Exchange Server that allows an authorized attacker to execute code over a network. The CVSS v3.1 base score is 8.8 (HIGH) with NETWORK attack vector, LOW attack complexity, and privileges required: LOW; impact on confidentiality, ...

EUVD-2026-56414

Deserialization of untrusted data in Microsoft Exchange Server allows an authorized attacker to deny service over a network...

CVE-2026-62913 Microsoft Exchange Server Remote Code Execution Vulnerability

...

CVE-2026-62912 Microsoft Exchange Server Denial of Service Vulnerability

...

CVE-2026-62912 Microsoft Exchange Server Denial of Service Vulnerability

...

EUVD-2026-56415

Heap-based buffer overflow in Microsoft Exchange Server allows an authorized attacker to execute code over a network...

CVE-2026-62910 Microsoft Exchange Server Elevation of Privilege Vulnerability

...

CVE-2026-62910

CVE-2026-62910 affects Microsoft Exchange Server and stems from improper control of resource identifiers (resource injection). According to the available documents, the issue allows an authorized attacker to elevate privileges over a network, with CVSS v3.1 base metrics: Network attack vector, Lo...

EUVD-2026-56413

Improper control of resource identifiers 'resource injection' in Microsoft Exchange Server allows an authorized attacker to elevate privileges over a network...

CVE-2026-62910 Microsoft Exchange Server Elevation of Privilege Vulnerability

...

CVE-2026-62893 Windows Deployment Services TFTP Server Remote Code Execution Vulnerability

...

CVE-2026-62893

CVE-2026-62893 affects Windows Deployment Services’ TFTP Server. The provided sources confirm a use-after-free defect that enables an unauthenticated, remote attacker to execute code over the network. CVSSv3.1 base score is 9.8 (CRITICAL) with network exploitation, no user interaction, and impact...

CVE-2026-62893 Windows Deployment Services TFTP Server Remote Code Execution Vulnerability

...

CVE-2026-62878

CVE-2026-62878 is a Windows DNS Server remote code execution vulnerability caused by a stack-based buffer overflow. The NVD entry indicates a network-based exploit with a critical CVSS v3.1 base score of 9.8 (AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H). Impact is the ability for an unauthenticated, remo...

CVE-2026-62878 Windows DNS Server Remote Code Execution Vulnerability

...

CVE-2026-62878 Windows DNS Server Remote Code Execution Vulnerability

...

CVE-2026-62820 Windows DNS Server Remote Code Execution Vulnerability

...

CVE-2026-62820 Windows DNS Server Remote Code Execution Vulnerability

...

CVE-2026-62820

CVE-2026-62820 concerns Windows DNS Server. The issue is a race condition caused by concurrent execution using a shared resource with improper synchronization, leading to remote code execution over a network. Affected product is Windows DNS Server; the vulnerability is triggered via network acces...