CVE-2026-100222

A heap-based buffer overflow vulnerability exists in the Network Policy Server (NPS) component of Microsoft Windows. This flaw allows an unauthorized attacker to execute arbitrary code over a network. The vulnerability is associated with a CVSS score of 9.8, indicating a critical risk level where...

EUVD-2026-100259

Missing authorization in DNS Server allows an authorized attacker to perform tampering locally...

CVE-2026-96934

A Use after free vulnerability in the Windows DHCP Server allows an unauthorized attacker to execute arbitrary code over a network. This vulnerability has a CRITICAL base score of 9.8 . While the specific root cause is identified as a use after free, detailed exploit information or specific patch...

CVE-2026-96926

A missing authorization vulnerability in the DNS Server allows an authorized attacker to perform tampering locally . The vulnerability is associated with CWE-862 . The CVSS 3.1 score is 5.5 (Medium) , with an attack vector of Local and a high impact on Integrity . Official remediation is availabl...

CVE-2026-96325

The Windows SMB Server is affected by a vulnerability caused by a missing reference to an active allocated resource (CWE-771). This flaw allows an unauthorized attacker to perform a denial of service (DoS) attack over the network. The vulnerability has a CVSS 3.1 base score of 7.5 and is categori...

CVE-2026-96320

A heap-based buffer overflow vulnerability exists in the Windows DHCP Server . This flaw allows an unauthorized attacker to achieve remote code execution over a network. The vulnerability is rated as CRITICAL with a CVSS score of 9.80 , as it can be exploited without prior authentication or user ...

CVE-2026-88125

An out-of-bounds read vulnerability exists in the DNS Server , which could allow an authorized attacker to trigger a denial of service over a network. The vulnerability is associated with CWE-125 . While an official fix is noted in the remediation level, specific affected versions and detailed ro...

CVE-2026-88122

An out-of-bounds read vulnerability exists in the DNS Server , which allows an authorized attacker to perform a denial of service attack over a network. The vulnerability is associated with CWE-125 . While the documents confirm the impact and root cause, specific details regarding affected versio...

CVE-2026-88120

A Use after free vulnerability in the Windows DHCP Server allows an unauthorized attacker to execute code over a network. The vulnerability has a CVSS 3.1 base score of 8.1 and is categorized as HIGH severity. While the root cause is identified as a memory management issue, specific component det...

CVE-2026-88130

An out-of-bounds read vulnerability exists in the DNS Server , which allows an authorized attacker to perform a denial of service (DoS) over a network. The vulnerability is associated with CWE-125 . While the documents confirm the impact is a denial of service, no specific software versions, file...

CVE-2026-88123

A DNS Server contains an out-of-bounds read vulnerability (CWE-125) that allows an authorized attacker to perform a denial of service over a network. The vulnerability has a Medium base severity score of 6.5. While the documents confirm the impact and root cause, no specific exploit code or in-th...

CVE-2026-88129

An out-of-bounds read vulnerability exists in the DNS Server , which could allow an authorized attacker to perform a denial of service over a network. The vulnerability is associated with CWE-125 . No specific software versions, root causes, or remediation details are provided in the documents be...

CVE-2026-88112

A DNS Server vulnerability exists due to an untrusted pointer dereference (CWE-822). This flaw allows an unauthorized attacker to achieve remote code execution over a network. The vulnerability has a CVSS 3.1 base score of 8.8 (High) . While the impact covers high levels of confidentiality, integ...

CVE-2026-88114

A vulnerability exists in the DNS Server (Windows Domain Name Service) where an untrusted pointer dereference allows an unauthorized attacker to achieve remote code execution over a network. This flaw has a CVSS v3.1 score of 8.8 (High) . While the impact includes high severity for confidentialit...

CVE-2026-88116

A DNS Server vulnerability (CVE-2026-88116) involves an untrusted pointer dereference , which could allow an unauthorized attacker to achieve remote code execution over a network. The vulnerability is associated with Windows systems. The CVSS 3.1 score is 8.8 (High) , indicating high impact on co...

CVE-2026-88119

A Use after free vulnerability exists in the Windows DHCP Server , which could allow an unauthorized attacker to execute code over a network . The vulnerability is associated with CWE-416 and has a CVSS 3.1 base score of 8.1 (High) . No specific exploit information or affected versions are provid...

CVE-2026-88117

A Use after free vulnerability in the Windows DHCP Server allows an unauthorized attacker to execute arbitrary code over a network. The vulnerability is categorized under CWE-416 and has a HIGH base severity score of 8.1. While the impact includes high confidentiality, integrity, and availability...

EUVD-2026-100140

Incorrect authorization in Microsoft Exchange Server allows an authorized attacker to elevate privileges over a network...

EUVD-2026-100144

Inclusion of functionality from untrusted control sphere in Microsoft Exchange Server allows an authorized attacker to elevate privileges locally...

CVE-2026-77910

A vulnerability in Microsoft Exchange Server involves incorrect authorization , which allows an authorized attacker to elevate privileges over a network. The impact includes the potential for an attacker to impersonate other users, gain elevated privileges, and execute arbitrary code with process...