CVE-2026-18705

Summary: CVE-2026-18705 affects MongoDB Server’s Atlas Vector Search feature. An authenticated user with read access to one view can retrieve documents from a different, protected view on the same underlying collection. Root cause (as stated): Insufficient handling of certain user-supplied fields...

CVE-2026-68385

A flaw was found in the Linux kernel's s390 architecture checksumming mechanism. On systems without a vector facility, the csumpartial function incorrectly calculates checksums. This occurs because the csumcopy function, when called with specific parameters, falls back to calculating the checksum...

CVE-2026-62912

Deserialization of untrusted data in Microsoft Exchange Server allows an authorized attacker to deny service over a network...

CVE-2026-62878

Stack-based buffer overflow in Windows DNS allows an unauthorized attacker to execute code over a network...

CVE-2026-62790

Heap-based buffer overflow in Windows SMB Server allows an authorized attacker to execute code over a network...

CVE-2026-59113

Missing authorization in Visual Studio Code allows an unauthorized attacker to execute code over a network...

CVE-2026-32791

Untrusted search path for some IntelR Performance Counter Monitor IntelR PCM before version tag 202604 within Ring 3: User Applications may allow an escalation of privilege. Unprivileged software adversary with an authenticated user combined with a high complexity attack may enable escalation of...

CVE-2026-20776

Improper conditions check for some IntelR PROSet/Wireless WiFi Software within Ring 2: Device Drivers may allow a denial of service. Network adversary with an unauthenticated user combined with a low complexity attack may enable denial of service. This result may potentially occur via adjacent...

EUVD-2026-56760

Heap-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code locally...

CVE-2026-68804

CVE-2026-68804 : A numeric truncation error in Microsoft Office Excel allows an unauthorized attacker to execute code locally. The vulnerability is documented across multiple sources (NVD, CVE listings) with the impact described as local code execution and a high base score (CVSS 3.1: AV=L, AC=L,...

CVE-2026-68803

CVE-2026-68803: A type confusion in Microsoft Excel enables local code execution. Affects Microsoft Excel (Office). Exploitation details: requires user interaction and local access per CVSS, with high impact on confidentiality, integrity, and availability. Root cause: resource access using an inc...

CVE-2026-66802

CVE-2026-66802 describes a race condition in Microsoft Azure Attestation service and Device Health Attestation Service caused by improper synchronization of a shared resource. This concurrency issue allows an unauthenticated, network-based attacker to execute code on affected systems, with high i...

CVE-2026-64915 Microsoft Office Word Remote Code Execution Vulnerability

...

CVE-2026-64906 Microsoft Access Remote Code Execution Vulnerability

...

EUVD-2026-56665

Heap-based buffer overflow in RPC Runtime allows an unauthorized attacker to execute code over a network...

CVE-2026-69320

CVE-2026-69320 concerns Visual Studio Code. The issue is an improper neutralization of special elements used in an OS command (OS command injection) that could allow an unauthorized attacker to execute code remotely over a network. Affected product is Visual Studio Code; the root cause is imprope...

EUVD-2026-56419

Heap-based buffer overflow in Microsoft Office allows an unauthorized attacker to execute code locally...

CVE-2026-62690 Windows Push Notifications Elevation of Privilege Vulnerability

...

EUVD-2026-56318

Null pointer dereference in Microsoft Remote Registry Service allows an authorized attacker to deny service over a network...

CVE-2026-49179

Improper neutralization of special elements used in a command 'command injection' in Windows Active Directory allows an unauthorized attacker to execute code over a network...