CVE-2026-87692

A deserialization of untrusted data vulnerability in Microsoft Exchange Server allows an authorized attacker to achieve local privilege escalation . The flaw could also potentially lead to impersonating other users, gaining elevated privileges, and executing arbitrary code with process rights. Mi...

CVE-2026-70571

A stack-based buffer overflow exists in Microsoft Exchange Server , which may allow an unauthorized attacker to achieve remote code execution over a network. The vulnerability's severity is rated as High (CVSS 3.1 score of 8.1), potentially impacting confidentiality, integrity, and availability. ...

EUVD-2026-100140

Incorrect authorization in Microsoft Exchange Server allows an authorized attacker to elevate privileges over a network...

EUVD-2026-100143

Deserialization of untrusted data in Microsoft Exchange Server allows an authorized attacker to elevate privileges locally...

CVE-2026-70279

Microsoft Exchange Server is affected by a cross-site scripting (XSS) vulnerability caused by the improper neutralization of input during web page generation. This flaw allows an unauthorized attacker to perform spoofing over a network. While the documents do not specify the exact internal compon...

EUVD-2026-100103

Double free in Windows DHCP Server allows an unauthorized attacker to execute code over a network...

CVE-2026-88171

A double free vulnerability in the Windows DHCP Server allows an unauthorized attacker to achieve remote code execution over a network. The vulnerability is categorized under CWE-415 . While the severity is high, the exploit code maturity is currently listed as unproven . No specific exploit link...

CVE-2026-88115

An out-of-bounds read vulnerability exists in Windows Server for NFS , which may allow an unauthorized attacker to achieve remote code execution over a network. The CVSS 3.1 score is 8.8 (HIGH) , indicating significant impact on confidentiality, integrity, and availability. While the vulnerabilit...

CVE-2026-88127

A Use after free vulnerability in the Windows SMB Server allows an authorized attacker to perform a local privilege escalation . The vulnerability is associated with CWE-416 and carries a High base severity score of 7.0. Remediation is available via an official fix provided by Microsoft. No speci...

CVE-2026-85903

A vulnerability exists in the Windows Domain Name Service (DNS Server) caused by an untrusted pointer dereference . This flaw allows an unauthorized attacker to achieve Remote Code Execution (RCE) over a network. The vulnerability is rated as High severity with a CVSS score of 8.8. While exploita...

CVE-2026-85905

A heap-based buffer overflow exists in the Windows UI Immersive Server . This vulnerability allows an authorized attacker to achieve local privilege escalation . The impact includes high levels of risk to confidentiality, integrity, and availability. Remediation is available through an official f...

CVE-2026-83889

The Windows DNS Server is affected by a vulnerability involving the release of an invalid pointer or reference . This flaw allows an authorized attacker to achieve remote code execution over a network. The vulnerability is associated with CWE-763 . No specific exploit information or remediation d...

CVE-2026-83771

A Use after free vulnerability exists in the Windows Camera Frame Server Monitor . This flaw allows an unauthorized attacker to elevate privileges over an adjacent network. The vulnerability is associated with CWE-416 and has a High base severity score of 8.8. No specific exploit details or direc...

CVE-2026-84994 Qwik: Crashing any Qwik Server via Resource thenable

Qwik is a performance-focused JavaScript framework. Prior to @builder.io/qwik 1.20.0 and @qwik.dev/core 2.0.0-beta.37, default server-side qwik-json deserialization causes ResourceSerializer.$fill$ to pass resource.resolved to Promise.resolve without first rejecting attacker-controlled thenables...

CVE-2026-83665

A null pointer dereference vulnerability exists in the Windows DHCP Server , which could allow an unauthorized attacker to cause a denial of service over the network. The vulnerability is associated with CWE-476 . No specific versions, root cause files, or exploit links are provided in the docume...

CVE-2026-70201

An out-of-bounds read vulnerability exists in the Windows DHCP Server . This flaw allows an authorized attacker to perform a local denial of service (DoS). The vulnerability is associated with CWE-125 (Out-of-bounds Read) and CWE-416 (Use After Free). Official remediation is available through a M...

CVE-2026-70207

A heap-based buffer overflow vulnerability exists in Network Policy Server (NPS) . This flaw allows an authorized attacker to achieve remote code execution over a network. The vulnerability is classified with a CVSS 3.1 base score of 7.5 (High) , indicating significant impact on confidentiality, ...

CVE-2026-70069

A stack-based buffer overflow vulnerability exists in the Windows DHCP Server . This flaw allows an authorized attacker to achieve remote code execution over a network. The vulnerability carries a CVSS 3.1 base score of 8.8 (High) , indicating significant impact on confidentiality, integrity, and...

CVE-2026-70071

The DNS Server is affected by a vulnerability involving the improper verification of cryptographic signatures . This flaw allows an authorized attacker to perform tampering locally . The vulnerability is categorized under CWE-347 . While the documents confirm the root cause and impact, specific d...

CVE-2026-70066

A use after free vulnerability exists in the Windows DHCP Server . This flaw allows an authorized attacker to perform a local elevation of privilege . The vulnerability is classified with a CVSS 3.1 score of 7.0, indicating a high impact on confidentiality, integrity, and availability. No specifi...