CVE-2026-72950

CVE-2026-72950 is a Remote Code Execution vulnerability in Windows Routing and Remote Access Service (RRAS) that allows an attacker with low privileges over the network to gain unauthorized access to a victim's machine. The assigned CVSS 3.1 score is 8.8 (HIGH) , reflecting low attack complexity,...

EUVD-2026-73672

Remote Code Execution in Windows Routing and Remote Access Service RRAS allows attacker to gain an unauthorized access to victim's machine...

CVE-2026-64918

CVE-2026-64918 is a spoofing vulnerability in Microsoft Office caused by insufficiently protected credentials , allowing an unauthorized attacker to perform spoofing over a network. The attack requires user interaction but needs no prior privileges and has low complexity , with a high impact on c...

CVE-2026-69858

CVE-2026-69858 is a use-after-free vulnerability in Windows DNS that allows an unauthorized attacker to achieve remote code execution over a network . The CVSS v3.1 score is 8.1 (HIGH) with a vector of network access, high complexity, no required privileges, and no user interaction, leading to hi...

EUVD-2026-73631

Remote Code Execution in Windows Routing and Remote Access Service RRAS allows attacker to gain an unauthorized access to victim's machine...

CVE-2026-69852

CVE-2026-69852 is a Remote Code Execution vulnerability in Windows Routing and Remote Access Service (RRAS) , allowing a network-based attacker with low privileges to gain unauthorized access to a victim's machine. The CVSS v3.1 score is 7.5 (HIGH) with the vector AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/...

CVE-2026-69715

CVE-2026-69715 is an out-of-bounds read in Windows Direct Show that allows an unauthorized, unauthenticated attacker to achieve remote code execution over a network. The vulnerability is rated CVSS 9.8 (CRITICAL) (AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H), indicating high impact to confidentiality, in...

CVE-2026-69620

CVE-2026-69620 is a stack-based buffer overflow in Windows DHCP Server that allows an unauthorized attacker to achieve remote code execution over a network. The CVSS 3.1 score is 8.1 (HIGH) with a vector of AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H, indicating network-based exploitation with high compl...

EUVD-2026-73544

Heap-based buffer overflow in Windows NTFS allows an unauthorized attacker to execute code with a physical attack...

EUVD-2026-73523

Out-of-bounds read in Windows Event Logging Service allows an unauthorized attacker to execute code over a network...

CVE-2026-69493

CVE-2026-69493 is a critical (CVSS 9.8) out-of-bounds read vulnerability in Windows Event Logging Service , as assigned by Microsoft . The flaw allows an unauthorized, network-based attacker to achieve remote code execution without user interaction, with high impact to confidentiality, integrity,...

CVE-2026-68828

CVE-2026-68828 is a heap-based buffer overflow in the Microsoft Remote Desktop Client that allows an unauthorized attacker to execute arbitrary code over a network. The vulnerability is rated CVSS 3.1: 8.8 (HIGH) with the vector AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H, indicating network-based exploi...

EUVD-2026-73345

Windows hard link in Windows Compressed Folder allows an unauthorized attacker to disclose information over a network...

CVE-2026-70019

CVE-2026-70019 is an information disclosure vulnerability in Windows Compressed Folder caused by a hard link mechanism that allows an unauthorized attacker to disclose information over a network. The vulnerability requires user interaction and no prior privileges (CVSS 3.1: 6.5 MEDIUM , C:H). CIS...

CVE-2026-69827

CVE-2026-69827 affects Windows DNS Server and is caused by a race condition due to improper synchronization of a shared resource during concurrent execution. An unauthorized attacker can exploit this flaw to achieve remote code execution over the network. The Microsoft-assigned CVSS 3.1 score is ...

CVE-2026-70065

CVE-2026-70065 affects the Windows DHCP Server , where a missing release of memory after its effective lifetime allows an unauthorized, network-based attacker to cause a denial of service with no impact to confidentiality or integrity. The CVSS 3.1 score is 7.5 (HIGH) with low attack complexity a...

EUVD-2026-73333

Improper limitation of a pathname to a restricted directory 'path traversal' in Visual Studio Code allows an unauthorized attacker to perform tampering over a network...

EUVD-2026-73334

Interpretation conflict in Visual Studio Code allows an unauthorized attacker to bypass a security feature over a network...

EUVD-2026-73320

Improper neutralization of special elements in output used by a downstream component 'injection' in SQL Server allows an unauthorized attacker to elevate privileges over a network...

CVE-2026-78508

CVE-2026-78508 is an out-of-bounds read in the Windows CD-ROM Driver that allows an unauthorized attacker with physical access to disclose information. The CVSS 3.1 score is 4.6 (MEDIUM) , reflecting the physical attack vector, low complexity, no privileges required, and a high confidentiality im...