CVE-2026-69282

This vulnerability in Microsoft Office SharePoint stems from improper access control , allowing an authorized attacker to achieve remote code execution over a network. The CVSS 3.1 score is 8.8 (HIGH) with a vector of AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H, indicating low attack complexity but requi...

CVE-2026-77898

CVE-2026-77898 is a heap-based buffer overflow in Microsoft Office that allows an unauthorized attacker to achieve remote code execution over a network. The vulnerability requires user interaction (e.g., opening a crafted file) and has a high attack complexity , reflected in its CVSS 3.1 score of...

CVE-2026-69285

A heap-based buffer overflow in Microsoft Office allows an unauthorized attacker to achieve remote code execution over a network. The vulnerability is rated CVSS 3.1: 8.8 (High) with a vector of AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H, meaning it requires user interaction but no prior authentication....

CVE-2026-69273

CVE-2026-69273 is an improper access control vulnerability in Microsoft Office SharePoint that allows an authorized attacker to execute code over a network. The CVSS 3.1 base score is 8.8 (HIGH) , with a network attack vector, low complexity, and low required privileges, resulting in high impact ...

CVE-2026-77896

CVE-2026-77896 is an integer overflow or wraparound in Windows Remote Desktop Client that allows an unauthorized attacker to deny service over a network . The underlying flaw is a classic integer overflow leading to a denial-of-service condition. The CVSS 3.1 score is 6.5 (Medium) with vector AV:...

CVE-2026-69268

CVE-2026-69268 is an improper access control vulnerability in Microsoft Office SharePoint that allows an authorized attacker to execute code over a network. The assigned CVSS 3.1 score is 8.8 (HIGH) , with a vector of network attack, low complexity, and low privileges required, leading to high im...

CVE-2026-77895

CVE-2026-77895 is an out-of-bounds read vulnerability in Windows DHCP Server that allows an unauthorized attacker to cause denial of service over a network . The CVSS 3.1 score is 7.5 (HIGH) with a vector of network access, low complexity, no privileges required, and no user interaction, resultin...

CVE-2026-77894

CVE-2026-77894 is a local privilege escalation vulnerability in Windows Installer caused by a race condition — specifically, concurrent execution of a shared resource with improper synchronization. An authorized attacker with low privileges can exploit this to gain high integrity over confidentia...

CVE-2026-77893

CVE-2026-77893 is an out-of-bounds read in Windows DHCP Server that allows an unauthorized, remote attacker to cause a denial of service over the network. The CVSS 3.1 base score is 7.5 (High) , with a vector of network attack, low complexity, no privileges required, no user interaction, and high...

CVE-2026-77891

CVE-2026-77891 is an out-of-bounds read vulnerability in Windows DHCP Server that allows an authorized attacker to achieve local code execution . The CVSS 3.1 score is 6.4 (MEDIUM) with a vector of AV:L/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H, indicating a local attack requiring high complexity and high p...

CVE-2026-77892

CVE-2026-77892 is a privilege escalation vulnerability in Windows Boot Manager . An unauthorized attacker with physical access to the system can elevate privileges, with high impact on confidentiality, integrity, and availability (CVSS 3.1: 6.8 MEDIUM ). The vulnerability requires no prior privil...

CVE-2026-77890

CVE-2026-77890 is a type confusion vulnerability in Windows DHCP Server that allows an unauthorized, remote attacker to trigger a denial of service over a network. The flaw stems from access of a resource using an incompatible type. Per the CVSS 3.1 score of 7.5 (HIGH) , the attack requires no pr...

CVE-2026-77889

CVE-2026-77889 is a type confusion vulnerability in Windows DHCP Server that allows an unauthorized, network-based attacker to cause a denial of service . The CVSS 3.1 score is 7.5 (High) , with no privileges or user interaction required. CISA's SSVC assessment rates exploitation as none , the vu...

CVE-2026-77888

CVE-2026-77888 is a type confusion vulnerability in Windows DHCP Server that allows an unauthorized attacker to cause denial of service over a network. The flaw arises from accessing a resource using an incompatible type. Per the CNA (Microsoft), the CVSS 3.1 base score is 7.5 (HIGH) , with a net...

CVE-2026-77886

CVE-2026-77886 is an out-of-bounds read in Windows DHCP Server that allows an unauthorized, network-based attacker to cause a denial of service . The vulnerability requires no user interaction or prior authentication, with a CVSS 3.1 score of 7.5 (HIGH) — driven entirely by the availability impac...

CVE-2026-77505

CVE-2026-77505 is a use after free vulnerability in Windows DNS Server that allows an unauthorized, unauthenticated attacker to execute code over a network. The flaw is scored 8.1 (HIGH) under CVSS 3.1, with a network attack vector, high attack complexity, no required privileges, and high impact ...

CVE-2026-77887

CVE-2026-77887 is an out-of-bounds read vulnerability in Windows DHCP Server that allows an authorized attacker to achieve local code execution . Per the CVSS 3.1 vector (6.4 MEDIUM), exploitation requires a local attack vector with high complexity and high privileges , no user interaction, and y...

CVE-2026-77504

CVE-2026-77504 is a double free flaw in Microsoft Office Word that allows an unauthorized attacker to achieve remote code execution over a network with user interaction required. The vulnerability carries a CVSS 3.1 score of 8.8 (HIGH) with full confidentiality, integrity, and availability impact...

CVE-2026-77503

CVE-2026-77503 is an out-of-bounds read vulnerability in Windows NTFS that allows an unauthorized attacker to achieve local privilege escalation . The vulnerability is rated HIGH (CVSS 8.4) with a vector of AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H, meaning it requires no prior privileges or user inter...

CVE-2026-77502

CVE-2026-77502 is an out-of-bounds read in Windows DHCP Server that allows an unauthorized attacker to cause denial of service over a network. The vulnerability requires no prior authentication or user interaction, and carries a CVSS 3.1 score of 7.5 (HIGH) with high impact to availability. No co...

CVE-2026-77499

CVE-2026-77499 is a type confusion vulnerability in Windows DHCP Server that allows an unauthorized, remote attacker to cause a denial of service over the network with no privileges or user interaction required. The CVSS 3.1 score is 7.5 (High) with a primary impact on availability . CISA's SSVC ...

CVE-2026-77501

CVE-2026-77501 is an out-of-bounds read vulnerability in Windows DHCP Server that allows an unauthorized, network-based attacker to cause a denial of service . The CVSS v3.1 base score is 7.5 (HIGH) with vector AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H, reflecting remote, unauthenticated exploitation w...

CVE-2026-77498

CVE-2026-77498 is an out-of-bounds read vulnerability in Windows DHCP Server that allows an unauthorized attacker to cause a denial of service over a network. The attack requires no privileges, no user interaction, and has low complexity, with a CVSS 3.1 score of 7.5 (HIGH) — the impact is limite...

CVE-2026-77500

A release of invalid pointer or reference vulnerability in the Windows Device Association Service allows an authorized attacker to escalate privileges locally. The flaw is rated CVSS 7.8 (High) with a vector of AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H, meaning an attacker with low local privileges and...

CVE-2026-77493

CVE-2026-77493 is a double free flaw in the Microsoft Windows Graphics Component that allows an unauthorized, remote attacker to achieve code execution over the network with no privileges or user interaction. The CNA-assigned CVSS 3.1 score is 9.8 (CRITICAL) , with high impact to confidentiality,...

CVE-2026-77494

Windows DHCP Server is affected by a type confusion vulnerability (access of resource using incompatible type), allowing an unauthenticated, remote attacker to trigger a denial of service over the network. The CVSS 3.1 score is 7.5 (HIGH) with a vector of AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H, indi...

CVE-2026-77492

CVE-2026-77492 is an out-of-bounds read vulnerability in the Windows Storage Port Driver that allows an authorized attacker to disclose information locally . The CVSS 3.1 score is 5.5 (MEDIUM) with the vector AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N, indicating a local attack requiring low privileges ...

CVE-2026-77491

CVE-2026-77491 is an out-of-bounds read in Windows GDI that allows an unauthorized local attacker to disclose information. The CVSS 3.1 base score is 5.5 (MEDIUM) with a local attack vector, no privileges required, user interaction required, and high confidentiality impact but no integrity or ava...

CVE-2026-77489

CVE-2026-77489 is a null pointer dereference in Windows Biometric Service that allows an authorized local attacker to elevate privileges. The flaw carries a CVSS 3.1 score of 7.8 (HIGH) with a vector of AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H, meaning exploitation requires only low privileges and no ...

CVE-2026-72986

CVE-2026-72986 is a heap-based buffer overflow in Graphic Fonts that allows an unauthorized attacker to achieve remote code execution over a network. The CNA (Microsoft) assigns a CVSS 3.1 score of 8.8 (HIGH) with a vector of AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H, indicating a network-reachable exp...

CVE-2026-69579

CVE-2026-69579 is a use-after-free vulnerability in Windows Message Queuing that allows an unauthorized attacker to execute code over a network . The CVSS 3.1 score is 9.8 (Critical) with a vector of AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H, indicating network-exploitable, low-complexity remote code e...

CVE-2026-69476

A heap-based buffer overflow in the Windows Biometric Service allows an authorized attacker to escalate privileges locally. The vulnerability is rated CVSS 7.8 (High) with low complexity and low privileges required, resulting in high impact to confidentiality, integrity, and availability. No spec...

CVE-2026-69787

CVE-2026-69787 is a heap-based buffer overflow in the Windows Biometric Service that allows an authorized local attacker to escalate privileges. The assigned CVSS 3.1 score is 7.8 (High) , with a vector of AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H, indicating low attack complexity and low privileges re...

CVE-2026-72982

This is a stack-based buffer overflow in Windows Netlogon that allows an unauthorized attacker to achieve remote code execution over a network. The vulnerability is rated CVSS 9.8 (CRITICAL) with a vector of AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H, indicating a low-complexity network attack requiring...

CVE-2026-72983

CVE-2026-72983 is a use-after-free vulnerability in Windows Internet Connection Sharing (ICS) that allows an unauthorized remote attacker to achieve remote code execution over the network. The CVSS 3.1 score is 9.8 (Critical) with no privileges or user interaction required. CISA's SSVC assessment...

CVE-2026-72980

CVE-2026-72980 affects Windows Hello on Microsoft Windows. The vulnerability is an uncontrolled search path element that allows an authorized, local attacker to bypass a security feature. The attack vector is local with low complexity and requires high privileges but no user interaction. The prim...

CVE-2026-72981

CVE-2026-72981 is a use-after-free vulnerability in Microsoft's IP Helper component that allows an unauthorized attacker to achieve remote code execution over a network. The Microsoft CNA assigns a CVSS 3.1 score of 8.1 (HIGH) with a vector of AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H, indicating that ...

CVE-2026-77495

CVE-2026-77495 is a heap-based buffer overflow in Windows Imaging Component that allows an unauthorized attacker to execute code over a network. The vulnerability is rated CVSS 3.1: 8.8 (HIGH) with vector AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H, meaning it is exploitable over the network with low com...

CVE-2026-72979

CVE-2026-72979 is a use after free vulnerability in Windows DHCP Server that allows an unauthorized attacker to execute code over a network . The flaw is rated CVSS 9.8 (Critical) with a network attack vector, low complexity, and no privileges or user interaction required, resulting in high impac...

CVE-2026-72978

CVE-2026-72978 is a Medium severity (CVSS 5.9) denial-of-service vulnerability in Active Directory Federation Services (AD FS) . The root cause is allocation of resources without limits or throttling , allowing an unauthorized, unauthenticated attacker to cause a remote denial of service . The at...

CVE-2026-70124

CVE-2026-70124 is an out-of-bounds read in Windows DHCP Server that allows an unauthorized, unprivileged network attacker to disclose information. NVD assigns CVSS 3.1: 7.5 (HIGH) with low attack complexity, while Microsoft's CNA scores it 5.9 (MEDIUM) citing high attack complexity. CISA SSVC ass...

CVE-2026-70283

CVE-2026-70283 affects Windows Win32K , the kernel-mode component handling window management. The root cause is an incorrect authorization flaw that allows a local attacker with low privileges to achieve local privilege escalation , resulting in full compromise of confidentiality, integrity, and ...

CVE-2026-69929

CVE-2026-69929 is an out-of-bounds read in Windows DHCP Server that allows an unauthorized, network-based attacker to disclose information. NVD assigns a CVSS 3.1 score of 7.5 (HIGH) with low attack complexity, while Microsoft (CNA) rates it 5.9 (MEDIUM) with high attack complexity. CISA's SSVC a...

CVE-2026-69930

CVE-2026-69930 is an out-of-bounds read in Windows DHCP Server that allows an unauthorized, unauthenticated attacker to disclose information over a network. NVD rates it CVSS 3.1: 7.5 (HIGH) with low attack complexity, while Microsoft's CNA scores it 5.9 (MEDIUM) due to high attack complexity. CI...

CVE-2026-69804

A time-of-check time-of-use (TOCTOU) race condition in Microsoft Office SharePoint allows an authorized attacker (low privileges required) to achieve remote code execution over the network. The vulnerability is rated CVSS 7.5 (HIGH) with high impact to confidentiality, integrity, and availability...

CVE-2026-69846

An integer overflow or wraparound in Windows Secure Kernel Mode allows an authorized attacker to elevate privileges locally. The flaw requires high privileges and low attack complexity with no user interaction, but changes scope to affect the full system with high impact on confidentiality, integ...

CVE-2026-69797

CVE-2026-69797 is a use-after-free vulnerability in Microsoft Office PowerPoint that allows an unauthorized attacker to achieve remote code execution over a network. The attacker must persuade a user to open a crafted file, as the CVSS vector includes user interaction required (CVSS 3.1: 8.8 HIGH...

CVE-2026-69778

CVE-2026-69778 is a heap-based buffer overflow in Microsoft Office Access that allows an unauthorized attacker to execute code over a network. The CVSS v3.1 score is 8.8 (HIGH) with a network vector, low complexity, no required privileges, but user interaction required . CISA's SSVC assessment in...

CVE-2026-69767

CVE-2026-69767 is a use after free vulnerability in Microsoft Office PowerPoint that allows an unauthorized attacker to achieve remote code execution over a network. The CVSS 3.1 score is 8.8 (HIGH) with a vector of AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H, meaning exploitation requires user interacti...

CVE-2026-69764

CVE-2026-69764 is a heap-based buffer overflow in Microsoft Office Word that allows an unauthorized, remote attacker to achieve code execution over a network , rated CVSS 8.8 (HIGH) with a vector of AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H. User interaction is required, and no known exploitation has b...