CVE-2026-83642

A type confusion vulnerability exists in the Windows Domain Name Service (DNS Server). This flaw allows an unauthorized attacker to achieve remote code execution over a network. The vulnerability is categorized under CWE-843 . No specific exploit information or remediation steps are provided in t...

CVE-2026-83655

The Network Policy Server (NPS) is affected by an out-of-bounds read vulnerability (CWE-125). This flaw allows an unauthorized attacker to cause a denial of service (DoS) over a network. The vulnerability has a High severity rating with a CVSS 3.1 score of 7.5 . No specific exploit details or inf...

CVE-2026-83499

The Windows Server Update Service is impacted by an insufficient granularity of access control vulnerability (CWE-1220). This flaw allows an authorized attacker to achieve local privilege escalation . While the technical root cause is not further detailed in the provided documents, the vulnerabil...

CVE-2026-83635

A vulnerability exists in the DNS Server caused by an out-of-bounds read (CWE-125). This flaw allows an unauthorized attacker to perform a denial of service (DoS) over the network. The vulnerability has a HIGH base severity score of 7.5 (CVSS 3.1). While specific affected versions or internal com...

CVE-2026-81969

The Windows Server Update Service is affected by a vulnerability involving insufficient granularity of access control . This flaw allows an authorized attacker to perform a local privilege escalation . The vulnerability is characterized by a HIGH base severity score of 7.8 and is associated with ...

CVE-2026-69830

A race condition vulnerability exists in the Windows DHCP Server due to concurrent execution using a shared resource with improper synchronization (CWE-362 , CWE-416 ). This flaw allows an unauthorized attacker to achieve remote code execution over the network. The CVSS 3.1 score is 8.1 (High) , ...

CVE-2026-70133

The Windows SMB Server is susceptible to a Denial of Service vulnerability caused by the allocation of resources without limits or throttling (CWE-770). An unauthorized attacker can exploit this flaw over the network to disrupt service availability. While specific exploit details or in-the-wild o...

CVE-2026-70127

A Use after free vulnerability exists in the Windows Domain Name Service (DNS Server) . This flaw allows an unauthorized attacker to achieve Remote Code Execution (RCE) over a network. The vulnerability is rated as HIGH severity (CVSS 3.1 score of 8.1) and affects confidentiality, integrity, and ...

CVE-2026-70085

A missing authorization vulnerability exists in the DNS Server , which allows an authorized attacker to perform tampering locally . The vulnerability is associated with CWE-862 . The CVSS 3.1 score is 5.5 (Medium) , with a high impact on integrity . No specific exploit information or patch versio...

CVE-2026-70083

A vulnerability in the DNS Server results from incorrect authorization , which allows an authorized attacker to perform tampering locally . This flaw impacts the integrity of the system. No specific software versions, root causes, or remediation steps are provided in the documents. Exploitation d...

CVE-2026-70087

A vulnerability in the DNS Server stems from incorrect authorization , which allows an authorized attacker to locally bypass a security feature . The impact is categorized as a high level of integrity loss (CVSS 3.1 score of 5.5). While technical details regarding the specific component or root c...

CVE-2026-70058

The Windows DHCP Server is vulnerable to an out-of-bounds write (CWE-787) that allows an unauthorized attacker to execute code over a network. The vulnerability has a CVSS 3.1 base score of 7.5 (HIGH) , with a primary impact on availability . Remediation is available via an official fix provided ...

CVE-2026-69795

A null pointer dereference vulnerability exists in the Windows Clipboard Server . This flaw allows an authorized attacker to achieve local privilege escalation . No specific exploitation details or direct links are provided in the documentation, but the vulnerability is addressed via an official ...

CVE-2026-103572

A code injection vulnerability exists in Visual Studio Tools for Applications and SQL Server Management Studio . Due to improper control of code generation, an unauthorized attacker can execute arbitrary code over a network. This vulnerability has a CVSS 3.1 score of 8.8 and is reported to have a...

EUVD-2026-99027

Improper control of generation of code 'code injection' in Visual Studio Tools for Applications and SQL Server Management Studio allows an unauthorized attacker to execute code over a network...

CVE-2026-110249

A flaw was found in Thunderbird. A malicious, compromised, or intercepted Exchange server can cause a Denial of Service DoS by returning a crafted Simple Object Access Protocol SOAP response containing an element with an excessive number of attributes. Processing these attributes monopolizes the...

Vulnerabilities in Microsoft SQL Server

Microsoft has identified vulnerabilities in SQL Server. Malicious actors could exploit these vulnerabilities to cause a denial-of-service attack, gain excessive privileges, execute arbitrary code, and potentially access sensitive data. Microsoft has provided updates that address these...

Vulnerabilities in Microsoft Exchange Server

Microsoft has addressed vulnerabilities in Exchange. A malicious individual could exploit these vulnerabilities to impersonate other users, gain elevated privileges, and execute arbitrary code with process rights. An out-of-band update was previously released for the vulnerability with identifier...

CVE-2026-110249

A malicious, compromised, or MITM-controlled Exchange server can return a single well-formed SOAP response containing an element with enough attributes to keep Thunderbird's main thread CPU-bound for seconds to hours. This vulnerability was fixed in Thunderbird 158 and Thunderbird 153.5...

EUVD-2026-99208

A malicious, compromised, or MITM-controlled Exchange server can return a single well-formed SOAP response containing an element with enough attributes to keep Thunderbird's main thread CPU-bound for seconds to hours. This vulnerability was fixed in Thunderbird 158 and Thunderbird 153.5...