EUVD-2026-73716

Heap-based buffer overflow in Microsoft Office Outlook allows an unauthorized attacker to execute code over a network...

CVE-2026-69342

Windows DHCP Server is affected by an out-of-bounds read vulnerability (CVE-2026-69342) that allows an unauthenticated, remote attacker to cause a denial of service . The CVSS v3.1 score is 7.5 (HIGH) with an attack vector of Network, low complexity, no privileges required, and high availability ...

EUVD-2026-73364

Heap-based buffer overflow in Windows Print Spooler Components allows an unauthorized attacker to execute code over a network...

EUVD-2026-73337

Insufficiently protected credentials in GitHub Copilot and Visual Studio Code allows an unauthorized attacker to disclose information over a network...

CVE-2026-78504

CVE-2026-78504 is a stack-based buffer overflow in Microsoft Office Word that allows an unauthorized attacker to achieve remote code execution over a network . The vulnerability is rated CVSS 3.1: 8.8 (High) with vector AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H, meaning exploitation requires user inter...

CVE-2026-78439

CVE-2026-78439 is a stack-based buffer overflow in the Microsoft Office Graphics Component that allows an unauthorized attacker to execute code over a network, rated CVSS 3.1: 8.8 (High) . The attack vector is network-based with low complexity and no privileges required , though user interaction ...

EUVD-2026-73290

Heap-based buffer overflow in Microsoft Office allows an unauthorized attacker to execute code over a network...

CVE-2026-77889

CVE-2026-77889 is a type confusion vulnerability in Windows DHCP Server that allows an unauthorized, network-based attacker to cause a denial of service . The CVSS 3.1 score is 7.5 (High) , with no privileges or user interaction required. CISA's SSVC assessment rates exploitation as none , the vu...

CVE-2026-69930

CVE-2026-69930 is an out-of-bounds read in Windows DHCP Server that allows an unauthorized, unauthenticated attacker to disclose information over a network. NVD rates it CVSS 3.1: 7.5 (HIGH) with low attack complexity, while Microsoft's CNA scores it 5.9 (MEDIUM) due to high attack complexity. CI...

CVE-2026-69671

A heap-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to achieve remote code execution over a network. The CVSS 3.1 score is 8.8 (HIGH) with a vector of AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H, indicating that user interaction is required (e.g., opening a crafted docum...

EUVD-2026-73139

Heap-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code over a network...

EUVD-2026-72854

WWBN AVideo through commit c3edcc274c389816d434acadac07ee78eaf330c1 contains a cross-site request forgery vulnerability in deleteHistory.json.php and finishAll.json.php that allows unauthenticated attackers to mutate live history by making GET requests without CSRF token validation. Attackers can...

CVE-2026-83527

CVE-2026-83527 is an Authentication Bypass vulnerability in Ivanti Sentry affecting versions before R10.8.2 , R10.7.3 , and R10.6.4 . A remote unauthenticated attacker can exploit it to gain administrative-level access , resulting in high impact to confidentiality, integrity, and availability (CV...

CVE-2026-86135 Dimension CSRF Vulnerability in Database Snapshot Creation Allows Denial of Service

A Cross-Site Request Forgery CSRF vulnerability in WatchGuard Dimension's database snapshot creation feature allows a remote attacker to trigger unauthorized snapshot creation by tricking an authenticated administrator into visiting a specially crafted web page...

Microsoft SQL Server Remote Code Execution Vulnerability

Integer overflow or wraparound in SQL Server allows an unauthorized attacker to execute code over a network...

Microsoft Office Excel Information Disclosure Vulnerability

Buffer over-read in Microsoft Office Excel allows an unauthorized attacker to disclose information over a network...

CVE-2026-73319

XenForo versions prior to 2.3.13 are affected by a cross-site scripting (XSS) vulnerability in the dynamic redirect handler . The root cause is that unauthenticated attackers can craft a malicious javascript: URI that embeds the board hostname in the authority component and uses percent-encoded n...

EUVD-2026-72786

XenForo before 2.3.13 contains a server-side request forgery vulnerability in the PayPal REST webhook handler that allows unauthenticated attackers to cause the server to make outbound HTTP requests to arbitrary destinations by supplying a crafted certificate URL in webhook headers without scheme...

EUVD-2026-72785

XenForo before 2.3.13 contains a signature verification logic error in the PayPal REST webhook handler that allows unauthenticated attackers to bypass payment signature validation by submitting a webhook request with an unsupported authalgo header value. When the algorithm cannot be mapped to a...

CVE-2026-86206, CVE-2026-86207: N-able N-central Authentication Bypass (FIXED)

Overview While conducting research into a recent N-able N-central authentication bypass vulnerability CVE-2026-18577, Rapid7 Labs discovered two new vulnerabilities affecting the latest version of N-central. When chained together, these two vulnerabilities allow a remote unauthenticated attacker ...