CVE-2026-97819

An out-of-bounds read vulnerability in the DNS Server allows an authorized attacker to disclose information over a network. The vulnerability is associated with CWE-125 and has a CVSS v3.1 base score of 6.5 (Medium) . While an official fix is indicated, no specific version numbers or exploit deta...

CVE-2026-97820

A vulnerability exists in the DNS Server where an out-of-bounds read (CWE-125) allows an authorized attacker to disclose information over a network. The issue results in high confidentiality impact. Documentation indicates an official fix is available via Microsoft. No specific exploit code or in...

CVE-2026-97823

An out-of-bounds read vulnerability exists in the DNS Server , which allows an authorized attacker to disclose information over a network. The vulnerability is associated with CWE-125 . The CVSS 3.1 score is 6.5 (Medium) , indicating a network-based attack vector with low complexity requiring low...

CVE-2026-97822

An out-of-bounds read vulnerability exists in the DNS Server , which allows an authorized attacker to disclose information over a network. The vulnerability is associated with CWE-125 . Based on the provided metrics, the base score is 6.5 (MEDIUM) with a high impact on confidentiality. While a re...

EUVD-2026-100420

Out-of-bounds read in DNS Server allows an authorized attacker to disclose information over a network...

EUVD-2026-100421

Out-of-bounds read in DNS Server allows an authorized attacker to disclose information over a network...

EUVD-2026-100422

Out-of-bounds read in DNS Server allows an authorized attacker to disclose information over a network...

EUVD-2026-100425

Out-of-bounds read in DNS Server allows an authorized attacker to disclose information over a network...

EUVD-2026-100427

Out-of-bounds read in DNS Server allows an authorized attacker to disclose information over a network...

EUVD-2026-100426

Out-of-bounds read in DNS Server allows an authorized attacker to disclose information over a network...

EUVD-2026-100423

Out-of-bounds read in DNS Server allows an authorized attacker to disclose information over a network...

CVE-2026-96113

A Heap-based buffer overflow and Numeric Truncation Error (CWE-122, CWE-197) exist in the DNS Server on Windows . This vulnerability allows an unauthorized attacker to achieve Remote Code Execution over a network. The vulnerability has a critical CVSS 3.1 score of 9.8, indicating high impact on c...

CVE-2026-105009

A local privilege escalation vulnerability exists in the Windows Server Update Service due to incorrect default permissions (CWE-276). An authorized attacker can exploit this flaw to elevate privileges locally. While the CVSS 3.1 score reflects a High severity (7.5), the attack requires low privi...

CVE-2026-103560

The DNS Server is subject to an improper authorization vulnerability (CWE-862) that allows an authorized attacker to perform local tampering . The vulnerability results in a high integrity impact and is rated as MEDIUM severity with a CVSS3.1 score of 5.5. No specific exploit information or remed...

CVE-2026-100222

A heap-based buffer overflow vulnerability exists in the Network Policy Server (NPS) component of Microsoft Windows. This flaw allows an unauthorized attacker to execute arbitrary code over a network. The vulnerability is associated with a CVSS score of 9.8, indicating a critical risk level where...

CVE-2026-96934

A Use after free vulnerability in the Windows DHCP Server allows an unauthorized attacker to execute arbitrary code over a network. This vulnerability has a CRITICAL base score of 9.8 . While the specific root cause is identified as a use after free, detailed exploit information or specific patch...

CVE-2026-96926

A missing authorization vulnerability in the DNS Server allows an authorized attacker to perform tampering locally . The vulnerability is associated with CWE-862 . The CVSS 3.1 score is 5.5 (Medium) , with an attack vector of Local and a high impact on Integrity . Official remediation is availabl...

EUVD-2026-100259

Missing authorization in DNS Server allows an authorized attacker to perform tampering locally...

CVE-2026-96325

The Windows SMB Server is affected by a vulnerability caused by a missing reference to an active allocated resource (CWE-771). This flaw allows an unauthorized attacker to perform a denial of service (DoS) attack over the network. The vulnerability has a CVSS 3.1 base score of 7.5 and is categori...

CVE-2026-96320

A heap-based buffer overflow vulnerability exists in the Windows DHCP Server . This flaw allows an unauthorized attacker to achieve remote code execution over a network. The vulnerability is rated as CRITICAL with a CVSS score of 9.80 , as it can be exploited without prior authentication or user ...