CVE-2026-96943 is an integer overflow or wraparound vulnerability in the Microsoft Raw Image Extension. This flaw allows an unauthorized attacker to execute code remotely over a network. The vulnerability affects versions from 2.1.0.0 up to but not including 2.4.36.0. Microsoft has released an official fix in version 2.4.36.0 to address this issue. The vulnerability has a high severity rating with a CVSS score of 8.8.
CVE-2026-96920 is a heap-based buffer overflow vulnerability in the Windows Program Compatibility Assistant Service affecting multiple builds of Windows 10 Version 1607 and later. This flaw allows an authorized local attacker to elevate privileges. The vulnerability has a high severity score of 7.8 and has been officially fixed in specific Windows 10 builds.
CVE-2026-96868 is a heap-based buffer overflow vulnerability in the Windows Kernel of Microsoft Windows 11 Version 24H2. It allows an authorized local attacker to elevate privileges. The vulnerability has a high severity rating and affects specific builds prior to fixed versions. Official patches have been released to address this issue.
CVE-2026-96863 is a heap-based buffer overflow vulnerability in the Windows Storage Port Driver affecting Windows 11 version 23H2. This flaw allows an unauthorized attacker with physical access to elevate privileges on the affected system. The vulnerability has a CVSS score of 6.8 (medium severity) and has been officially fixed in multiple Windows 11 builds.
CVE-2026-96856 is a heap-based buffer overflow vulnerability in Windows Management Instrumentation on Microsoft Windows 10 Version 1607 and related versions. It allows an authorized local attacker to elevate privileges. The vulnerability has been assigned a high severity score of 7.8 and has official patches available from Microsoft.
CVE-2026-96318 is a heap-based buffer overflow vulnerability in Windows Resume affecting multiple versions of Microsoft Windows 10, including Version 1607. It allows an authorized local attacker to elevate privileges. The vulnerability has been assigned a high severity score of 7.8 and has been officially fixed in multiple Windows 10 builds.
CVE-2026-96312 is a heap-based buffer overflow vulnerability in the Windows Kernel affecting multiple versions of Microsoft Windows 10, including Version 1607. This flaw allows a locally authorized attacker to elevate privileges on the affected system. The vulnerability has a high severity rating with a CVSS score of 7.8. Microsoft has released official fixes for all affected versions.
CVE-2026-96217 is a heap-based buffer overflow vulnerability in the NTFS component of Microsoft Windows 10 Version 1607 and related builds. It allows an authorized local attacker to elevate privileges. The vulnerability has been assigned a high severity with a CVSS score of 7.8. Microsoft has released official fixes for affected versions.
CVE-2026-88202 is a heap-based buffer overflow vulnerability in Microsoft Office Word within Microsoft 365 Apps for Enterprise. This flaw allows an unauthorized attacker to execute code remotely over a network. The vulnerability has a high severity score of 8.8 and affects multiple versions of the product prior to specific fixed releases. Microsoft has issued official fixes for this vulnerability.
CVE-2026-88196 is a heap-based buffer overflow vulnerability in Microsoft 365 Apps for Enterprise (Microsoft Office) that allows an unauthorized attacker to execute code remotely over a network. The vulnerability has a high severity with a CVSS score of 8.8. Microsoft has released official fixes in versions 16.114.26101123, 16.0.14334.20974, and 16.0.17932.21056. No known exploits are reported in the wild at this time.
CVE-2026-88197 is a heap-based buffer overflow vulnerability in Microsoft 365 Apps for Enterprise (Microsoft Office) that allows an unauthorized attacker to execute code remotely over a network. The vulnerability has a high severity with a CVSS score of 8.8. Microsoft has released official fixes in versions 16.114.26101123, 16.0.14334.20974, and 16.0.17932.21056. No known exploits are reported in the wild at this time.
CVE-2026-88155 is a heap-based buffer overflow vulnerability in Microsoft SharePoint Server Subscription Edition. It allows an authorized attacker to execute code remotely over a network. The vulnerability affects versions from 16.0.0 up to but not including 16.0.20326.20190. Microsoft has released an official fix in version 16.0.20326.20190. The vulnerability has a high severity rating with a CVSS score of 8.8.
CVE-2026-88145 is a heap-based buffer overflow vulnerability in Microsoft Office Excel within Microsoft 365 Apps for Enterprise. This flaw allows an unauthorized attacker to execute arbitrary code remotely over a network. The vulnerability has a high severity with a CVSS score of 8.8. Microsoft has issued official fixes in versions 16.114.26101123, 16.0.14334.20974, and 16.0.17932.21056. No known exploits in the wild have been reported as of the publication date.
CVE-2026-70301 is a heap-based buffer overflow vulnerability in Microsoft Office Word within Microsoft 365 Apps for Enterprise. This flaw allows an unauthorized attacker to execute code remotely over a network. The vulnerability has a high severity rating with a CVSS score of 8.8. Official patches have been released to address this issue in specific versions of the software.
CVE-2026-70302 is a heap-based buffer overflow vulnerability in Microsoft Office Word within Microsoft 365 Apps for Enterprise. This flaw allows an unauthorized attacker to execute code remotely over a network. The vulnerability has a high severity score of 8.8 and affects multiple versions prior to specific fixed releases. Official patches have been released by Microsoft to address this issue.
CVE-2026-70291 is a critical heap-based buffer overflow vulnerability in Microsoft Office Outlook, part of Microsoft 365 Apps for Enterprise. It allows an unauthorized attacker to execute code remotely over a network without user interaction or privileges. The vulnerability affects multiple versions prior to specific fixed releases. Microsoft has issued official fixes for this vulnerability.
CVE-2026-70287 is a heap-based buffer overflow vulnerability in Microsoft Office Word within Microsoft 365 Apps for Enterprise. This flaw allows an unauthorized attacker to execute arbitrary code remotely over a network. The vulnerability has a high severity with a CVSS score of 8.8. Official patches addressing this issue are available in versions 16.114.26101123, 16.0.14334.20974, and 16.0.17932.21056. No known exploits in the wild have been reported at this time.
CVE-2026-70282 is a heap-based buffer overflow vulnerability in Microsoft Office Outlook, part of Microsoft 365 Apps for Enterprise. This flaw allows an unauthorized attacker to execute code remotely over a network. The vulnerability affects specific versions prior to 16.0.14334.20974 and 16.0.17932.21056. Microsoft has released official fixes for the affected versions. The vulnerability has a high severity rating with a CVSS score of 8.8. No known exploits in the wild have been reported at this time.
CVE-2026-70257 is a heap-based buffer overflow vulnerability in Microsoft Office Outlook, part of Microsoft 365 Apps for Enterprise. This flaw allows an unauthorized attacker to execute code remotely over a network. The vulnerability affects specific versions prior to 16.0.14334.20974 and 16.0.17932.21056. Microsoft has issued official fixes for these versions. The vulnerability has a high severity rating with a CVSS score of 8.8. No known exploits are currently reported in the wild.
CVE-2026-70269 is a heap-based buffer overflow vulnerability in Microsoft Office Word within Microsoft 365 Apps for Enterprise. This flaw allows an unauthorized attacker to execute code remotely over a network. The vulnerability has a high severity score of 8.1 and affects multiple versions prior to specific fixed releases. Official patches have been released by Microsoft to address this issue.