CVE-2026-70258 is a heap-based buffer overflow vulnerability in Microsoft Windows Media Foundation affecting multiple versions of Windows 10, including Version 1607. This flaw allows an unauthorized attacker to execute code remotely over a network. The vulnerability has a high severity with a CVSS score of 8.8. Official fixes have been released for all affected versions.
CVE-2026-70157 is a critical heap-based buffer overflow vulnerability in the Windows System Information Console affecting multiple versions of Microsoft Windows 10, including Version 1607. This flaw allows an unauthorized attacker to execute arbitrary code remotely over a network. The vulnerability has a CVSS score of 9.8, indicating high severity with full confidentiality, integrity, and availability impact. Official patches have been released for all affected versions.
CVE-2026-70207 is a heap-based buffer overflow vulnerability in the Network Policy Server component of Microsoft Windows 10 Version 1607 and related builds. This flaw allows an authorized attacker to execute code remotely over a network. The vulnerability has a high severity with a CVSS score of 7.5. Microsoft has released official fixes for affected versions.
CVE-2026-69985 is a heap-based buffer overflow vulnerability in the Windows Libarchive component of Microsoft Windows 10 Version 1809 and related builds. This flaw allows an unauthorized attacker to execute code remotely over a network. The vulnerability has a high severity score of 8.8 and affects multiple Windows 10 versions prior to their respective fixed releases. Microsoft has issued official fixes for all affected versions.
CVE-2026-97794 is a heap-based buffer overflow vulnerability in the Windows Container Isolation FS Filter Driver (unionfs.sys) affecting Windows 11 version 23H2. This flaw allows an authorized local attacker to elevate privileges. The vulnerability has a high severity score of 7.8 and has been officially fixed in multiple Windows 11 builds.
CVE-2026-96096 is a critical heap-based buffer overflow vulnerability in Windows Media Player on Microsoft Windows 10 Version 1607 and other specified versions. This flaw allows an unauthorized attacker to execute arbitrary code remotely over a network without user interaction. The vulnerability affects multiple Windows 10 builds and Windows 8.1 versions prior to their respective fixed updates.
CVE-2026-97739 is a high-severity integer underflow vulnerability in Microsoft Office Excel within Microsoft 365 Apps for Enterprise. This flaw allows an unauthorized attacker to execute code remotely over a network. The vulnerability is identified as CWE-191 (Integer Underflow). Official fixes have been released in multiple versions of the product.
CVE-2026-97765 is a heap-based buffer overflow vulnerability in Microsoft Office Excel within Microsoft 365 Apps for Enterprise. This flaw allows an unauthorized attacker to execute code remotely over a network. The vulnerability has a high severity score of 8.8 and affects multiple versions prior to the fixed releases. Official patches have been released by Microsoft to address this issue.
CVE-2026-97780 is a heap-based buffer overflow vulnerability in Microsoft Office Excel within Microsoft 365 Apps for Enterprise. This flaw allows an unauthorized attacker to execute code remotely over a network. The vulnerability has a high severity with a CVSS score of 8.8. Microsoft has issued official fixes in multiple versions to address this issue.
CVE-2026-97754 is a heap-based buffer overflow vulnerability in Microsoft Office Excel within Microsoft 365 Apps for Enterprise. This flaw allows an unauthorized attacker to execute code remotely over a network. The vulnerability has a high severity with a CVSS score of 8.8. Microsoft has released official fixes in multiple versions to address this issue.
CVE-2026-97758 is a heap-based buffer overflow vulnerability in Microsoft Office Excel within Microsoft 365 Apps for Enterprise. It allows an unauthorized attacker to execute code remotely over a network. The vulnerability has a high severity with a CVSS score of 8.8. Microsoft has released official fixes for multiple affected versions.
CVE-2026-97776 is a heap-based buffer overflow vulnerability in Microsoft Office Excel within Microsoft 365 Apps for Enterprise. This flaw allows an unauthorized attacker to execute code remotely over a network. The vulnerability has a high severity score of 8.8 and affects multiple versions of the software prior to specific fixed releases. Official patches are available and have been released by Microsoft.
CVE-2026-97751 is a heap-based buffer overflow vulnerability in Microsoft Office Excel within Microsoft 365 Apps for Enterprise. This flaw allows an unauthorized attacker to execute arbitrary code remotely over a network. The vulnerability has a high severity with a CVSS score of 8.8. Microsoft has released official fixes in multiple versions to address this issue.
CVE-2026-97003 is a heap-based buffer overflow vulnerability in Microsoft Office Excel within Microsoft 365 Apps for Enterprise. This flaw allows an unauthorized attacker to execute arbitrary code remotely over a network. The vulnerability affects multiple versions prior to fixed releases. Microsoft has issued official fixes for the affected versions. The vulnerability has a high severity rating with a CVSS score of 8.8.
CVE-2026-97766 is a heap-based buffer overflow vulnerability in Microsoft Office Excel within Microsoft 365 Apps for Enterprise. This flaw allows an unauthorized attacker to execute code remotely over a network. The vulnerability affects multiple versions prior to specific fixed releases. Microsoft has issued official fixes for this vulnerability.
CVE-2026-97753 is a heap-based buffer overflow vulnerability in Microsoft Office Excel within Microsoft 365 Apps for Enterprise. This flaw allows an unauthorized attacker to execute code remotely over a network. The vulnerability has a high severity with a CVSS score of 8.8. Microsoft has released official fixes for affected versions.
CVE-2026-97009 is a heap-based buffer overflow vulnerability in Microsoft Office Excel within Microsoft 365 Apps for Enterprise. This flaw allows an unauthorized attacker to execute code locally on the affected system. The vulnerability is rated high severity with a CVSS score of 7.8. Official patches addressing this issue are available in versions 16.0.14334.20974 and 16.0.17932.21056. No known exploits are reported in the wild at this time.
CVE-2026-97001 is a heap-based buffer overflow vulnerability in Microsoft Office Word within Microsoft 365 Apps for Enterprise. This flaw allows an unauthorized attacker to execute code locally on affected systems. The vulnerability has been assigned a high severity score of 7.8 and affects multiple versions of the software prior to specific fixed releases. Official patches addressing this issue have been released by Microsoft.
CVE-2026-96996 is a heap-based buffer overflow vulnerability in Microsoft Office Word within Microsoft 365 Apps for Enterprise. This flaw allows an unauthorized attacker to execute code locally on the affected system. The vulnerability affects specific versions prior to 16.0.14334.20974 and 16.0.17932.21056. Microsoft has released official fixes addressing this issue. The vulnerability has a high severity rating with a CVSS score of 7.8.
CVE-2026-97016 is a critical heap-based buffer overflow vulnerability in Microsoft Office Outlook, part of Microsoft 365 Apps for Enterprise. This flaw allows an unauthorized attacker to execute arbitrary code remotely over a network without user interaction or privileges. The vulnerability is addressed in official patches released by Microsoft in versions 16.0.14334.20974 and 16.0.17932.21056.