CVE-2026-69277

Stack-based buffer overflow in Microsoft Local Security Authority Server lsasrv allows an authorized attacker to elevate privileges locally...

CVE-2026-68878

Stack-based buffer overflow in Windows Fast FAT Driver allows an authorized attacker to elevate privileges over a network...

CVE-2026-67379

Stack-based buffer overflow in SQL Server allows an authorized attacker to execute code over a network...

EUVD-2026-73874

Stack-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code locally...

CVE-2026-81396

CVE-2026-81396 is a stack-based buffer overflow in Microsoft Office Excel that allows an unauthorized attacker to execute code locally. The vulnerability requires user interaction (e.g., opening a malicious file) but does not require prior privileges, with a CVSS 3.1 score of 7.8 (HIGH) . The pri...

EUVD-2026-73714

Stack-based buffer overflow in Microsoft Office Access allows an unauthorized attacker to execute code over a network...

CVE-2026-69510

CVE-2026-69510 is a stack-based buffer overflow in Windows DHCP Server that allows an unauthorized, network-based attacker to achieve remote code execution without prior authentication. The vulnerability carries a CVSS 3.1 base score of 8.1 (HIGH) , with high attack complexity but no privileges r...

CVE-2026-69910

Windows Hyper-V is affected by a stack-based buffer overflow that allows an unauthorized attacker to achieve remote code execution over the network without any privileges or user interaction. The vulnerability is rated CVSS 9.8 (Critical) by Microsoft, with high impact to confidentiality, integri...

EUVD-2026-73443

Stack-based buffer overflow in Windows Win32K allows an authorized attacker to elevate privileges over a network...

CVE-2026-69301

A stack-based buffer overflow in the Windows Win32K component allows an authorized attacker to achieve privilege elevation over a network. The CVSS 3.1 score is 8.0 (HIGH) , with low attack complexity, low privileges required, and user interaction required. Exploitation details are not yet public...

EUVD-2026-73429

Stack-based buffer overflow in Microsoft Local Security Authority Server lsasrv allows an authorized attacker to elevate privileges locally...

EUVD-2026-73301

Stack-based buffer overflow in SQL Server allows an authorized attacker to execute code over a network...

EUVD-2026-73240

Stack-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code over a network...

CVE-2026-69686

Microsoft Office Word is affected by a stack-based buffer overflow that allows an unauthorized, network-based attacker to achieve remote code execution . The CVSS 3.1 base score is 8.8 (HIGH) , with a vector of AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H, indicating that user interaction is required (e.g...

EUVD-2026-73151

Stack-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code over a network...

CVE-2026-69391

CVE-2026-69391 is a stack-based buffer overflow in the Windows Broker Infrastructure Service that allows an authorized attacker to achieve local privilege escalation . The vulnerability requires low privileges and local access, with no user interaction needed. Microsoft rates it CVSS 7.8 (High) ,...

CVE-2026-68878

CVE-2026-68878 is a stack-based buffer overflow in the Windows Fast FAT Driver that allows an authorized attacker to elevate privileges over a network . The CNA (Microsoft) assigned a CVSS 3.1 score of 8.0 (HIGH) with the vector AV:N/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H , indicating network-reachable e...

Microsoft Office Word Remote Code Execution Vulnerability

Stack-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code over a network...

Microsoft Excel Remote Code Execution Vulnerability

Stack-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code locally...

CVE-2026-86714

PX4 Autopilot through 1.17.0 contains a stack buffer over-read vulnerability in the netman system command that fails to validate interface name length. Attackers can supply interface names of 74 bytes or more via the -i option to read beyond buffer boundaries, leaking stack memory to console outp...