CVE-2026-69620

CVE-2026-69620 is a stack-based buffer overflow in Windows DHCP Server that allows an unauthorized attacker to achieve remote code execution over a network. The CVSS 3.1 score is 8.1 (HIGH) with a vector of AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H, indicating network-based exploitation with high compl...

EUVD-2026-73544

Heap-based buffer overflow in Windows NTFS allows an unauthorized attacker to execute code with a physical attack...

EUVD-2026-73523

Out-of-bounds read in Windows Event Logging Service allows an unauthorized attacker to execute code over a network...

CVE-2026-69493

CVE-2026-69493 is a critical (CVSS 9.8) out-of-bounds read vulnerability in Windows Event Logging Service , as assigned by Microsoft . The flaw allows an unauthorized, network-based attacker to achieve remote code execution without user interaction, with high impact to confidentiality, integrity,...

CVE-2026-68828

CVE-2026-68828 is a heap-based buffer overflow in the Microsoft Remote Desktop Client that allows an unauthorized attacker to execute arbitrary code over a network. The vulnerability is rated CVSS 3.1: 8.8 (HIGH) with the vector AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H, indicating network-based exploi...

EUVD-2026-73345

Windows hard link in Windows Compressed Folder allows an unauthorized attacker to disclose information over a network...

CVE-2026-70019

CVE-2026-70019 is an information disclosure vulnerability in Windows Compressed Folder caused by a hard link mechanism that allows an unauthorized attacker to disclose information over a network. The vulnerability requires user interaction and no prior privileges (CVSS 3.1: 6.5 MEDIUM , C:H). CIS...

CVE-2026-69827

CVE-2026-69827 affects Windows DNS Server and is caused by a race condition due to improper synchronization of a shared resource during concurrent execution. An unauthorized attacker can exploit this flaw to achieve remote code execution over the network. The Microsoft-assigned CVSS 3.1 score is ...

CVE-2026-70065

CVE-2026-70065 affects the Windows DHCP Server , where a missing release of memory after its effective lifetime allows an unauthorized, network-based attacker to cause a denial of service with no impact to confidentiality or integrity. The CVSS 3.1 score is 7.5 (HIGH) with low attack complexity a...

EUVD-2026-73334

Interpretation conflict in Visual Studio Code allows an unauthorized attacker to bypass a security feature over a network...

EUVD-2026-73333

Improper limitation of a pathname to a restricted directory 'path traversal' in Visual Studio Code allows an unauthorized attacker to perform tampering over a network...

EUVD-2026-73320

Improper neutralization of special elements in output used by a downstream component 'injection' in SQL Server allows an unauthorized attacker to elevate privileges over a network...

CVE-2026-78508

CVE-2026-78508 is an out-of-bounds read in the Windows CD-ROM Driver that allows an unauthorized attacker with physical access to disclose information. The CVSS 3.1 score is 4.6 (MEDIUM) , reflecting the physical attack vector, low complexity, no privileges required, and a high confidentiality im...

CVE-2026-67376

CVE-2026-67376 is an integer overflow or wraparound flaw in Microsoft SQL Server that allows an unauthorized, remote attacker to trigger a denial of service over the network. The CVSS 3.1 score is 7.5 (HIGH) with a vector of AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H, indicating low attack complexity, n...

CVE-2026-78463

Microsoft Remote Desktop Client is affected by a code injection vulnerability (improper control of generation of code) that allows an unauthorized attacker to execute code over a network . The CNA (Microsoft) rates this as CVSS 8.8 (HIGH) with vector AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H, meaning e...

CVE-2026-78461

Visual Studio Code is affected by a path traversal vulnerability (improper limitation of a pathname to a restricted directory) that allows an unauthorized attacker to bypass a security feature over a network. The flaw requires user interaction but no prior authentication. Per the CNA (Microsoft),...

EUVD-2026-73281

No cwe for this issue in Windows Boot Manager allows an unauthorized attacker to elevate privileges with a physical attack...

CVE-2026-77892

CVE-2026-77892 is a privilege escalation vulnerability in Windows Boot Manager . An unauthorized attacker with physical access to the system can elevate privileges, with high impact on confidentiality, integrity, and availability (CVSS 3.1: 6.8 MEDIUM ). The vulnerability requires no prior privil...

EUVD-2026-73278

Access of resource using incompatible type 'type confusion' in Windows DHCP Server allows an unauthorized attacker to deny service over a network...

CVE-2026-77888

CVE-2026-77888 is a type confusion vulnerability in Windows DHCP Server that allows an unauthorized attacker to cause denial of service over a network. The flaw arises from accessing a resource using an incompatible type. Per the CNA (Microsoft), the CVSS 3.1 base score is 7.5 (HIGH) , with a net...