CVE-2026-70256 is a heap-based buffer overflow vulnerability in Microsoft Office Outlook within Microsoft 365 Apps for Enterprise. This flaw allows an unauthorized attacker to execute code remotely over a network. The vulnerability affects versions 16.0.0 up to but not including 16.0.17932.21056 and has been assigned a high severity with a CVSS score of 8.8. An official fix is available in version 16.0.17932.21056. There are no known exploits in the wild at this time.
CVE-2026-70220 is a heap-based buffer overflow vulnerability in Microsoft Office Word within Microsoft 365 Apps for Enterprise. This flaw allows an unauthorized attacker to execute code locally on the affected system. The vulnerability has a high severity rating with a CVSS score of 7.8. Microsoft has released official fixes in versions 16.114.26101123, 16.0.14334.20974, and 16.0.17932.21056. No known exploits are reported in the wild at this time.
CVE-2026-70268 is a heap-based buffer overflow vulnerability in Microsoft Office Word within Microsoft 365 Apps for Enterprise. This flaw allows an unauthorized attacker to execute code remotely over a network. The vulnerability has a high severity with a CVSS score of 8.8. Official patches have been released to address this issue in specific versions of the software.
CVE-2026-70149 is a heap-based buffer overflow vulnerability in the Windows Client Side Caching driver (csc.sys) affecting multiple versions of Microsoft Windows 10, including Version 1607. This flaw allows an authorized attacker to locally disclose sensitive information. The vulnerability has a high severity score of 8.8 and has been officially fixed in various Windows 10 builds.
CVE-2026-70147 is a critical heap-based buffer overflow vulnerability in the Microsoft PostScript Printer Driver affecting multiple versions of Windows 10, including Version 1607. This flaw allows an unauthorized attacker to execute arbitrary code remotely over a network. The vulnerability has been officially fixed in specific Windows 10 updates.
CVE-2026-70109 is a heap-based buffer overflow vulnerability in the Microsoft PostScript Printer Driver on Windows 10 Version 1607 and related builds. This flaw allows a local unauthorized attacker to elevate privileges. The vulnerability has been assigned a high severity with a CVSS score of 7.8. Microsoft has issued official fixes for affected versions.
CVE-2026-70092 is a heap-based buffer overflow vulnerability in the Microsoft PostScript Printer Driver on Windows 10 Version 1607 and related builds. This flaw allows a local unauthorized attacker to elevate privileges on the affected system. The vulnerability has been assigned a high severity rating with a CVSS score of 7.8. Microsoft has issued official fixes for all affected versions.
CVE-2026-70068 is a heap-based buffer overflow vulnerability in the Windows Client-Side Caching (CSC) Service affecting multiple versions of Microsoft Windows 10, including Version 1607. This flaw allows an unauthorized attacker to elevate privileges over a network. The vulnerability has a high severity rating with a CVSS score of 8.8. Official patches have been released by Microsoft to address this issue.
CVE-2026-70131 is a heap-based buffer overflow vulnerability in Microsoft Windows Media Foundation affecting Windows 10 Version 1607 and other versions. This flaw allows a local unauthorized attacker to elevate privileges. The vulnerability has a high severity score of 7.8 and has been officially fixed by Microsoft in multiple Windows 10 updates.
CVE-2026-70031 is a heap-based buffer overflow vulnerability in the Windows iSCSI component affecting multiple versions of Microsoft Windows 10, including Version 1607 and later builds. This vulnerability allows an unauthorized attacker to cause a denial of service over a network. The issue has been assigned a high severity rating with a CVSS score of 7.5. Microsoft has released official fixes for all affected versions.
CVE-2026-70038 is a use-after-free vulnerability in the Windows iSCSI component affecting multiple versions of Microsoft Windows 10, including version 1607 and others. This flaw allows an unauthorized attacker to execute code remotely over a network. The vulnerability has a high severity with a CVSS score of 8.1. Official patches have been released to address this issue.
CVE-2026-69949 is a heap-based buffer overflow vulnerability in the Windows Client for NFS component of Microsoft Windows 10 Version 1607 and related builds. This flaw allows an authorized local attacker to elevate privileges on the affected system. The vulnerability has been assigned a high severity with a CVSS score of 7.8. Microsoft has released official patches that address this issue in multiple Windows 10 builds.
CVE-2026-88143 is a heap-based buffer overflow vulnerability in the Windows Storage Spaces Controller component of Microsoft Windows 10 Version 1607 and later builds. This flaw allows an authorized local attacker with high privileges to elevate their privileges further on the affected system. The vulnerability has been assigned a CVSS v3.1 score of 6.7, indicating a medium severity level. Microsoft has released official fixes for all affected versions.
CVE-2026-87716 is a heap-based buffer overflow vulnerability in the Windows Storage Spaces Controller affecting multiple builds of Windows 10 Version 1809 and related versions. This flaw allows an unauthorized attacker to cause a denial of service over a network. The vulnerability has a high severity score and has been officially fixed in specific Windows 10 builds.
CVE-2026-87707 is a heap-based buffer overflow vulnerability in the Windows Fax and Scan Service on Microsoft Windows 10 Version 1607 and related builds. This flaw allows an authorized local attacker to elevate privileges. The vulnerability has been assigned a high severity score of 7.8 and has been officially fixed in multiple Windows 10 builds.
CVE-2026-87706 is a heap-based buffer overflow vulnerability in the Windows Storage Spaces Controller affecting multiple versions of Microsoft Windows 10, including Version 1607. This flaw allows an authorized local attacker to elevate privileges. The vulnerability has been assigned a high severity score of 7.8 and has been officially fixed in several Windows updates.
CVE-2026-85936 is a high-severity double free vulnerability in the Windows Shell component of Microsoft Windows 10 Version 1607 and related builds. This flaw allows an unauthorized attacker to execute arbitrary code remotely over a network. The vulnerability affects multiple Windows 10 versions prior to specific fixed releases. An official fix is available from Microsoft.
CVE-2026-85931 is a heap-based buffer overflow vulnerability in the Windows Distributed File System (DFS) component of Microsoft Windows 10 Version 1607 and other specified versions. This flaw allows an authorized attacker to execute arbitrary code remotely over a network. The vulnerability has a high severity rating with a CVSS score of 8.8 and affects multiple Windows 10 builds prior to their respective fixed versions.
CVE-2026-85928 is a critical heap-based buffer overflow vulnerability in the Windows Volume Manager Extension Driver affecting multiple versions of Microsoft Windows 10, including Version 1607. This flaw allows an unauthorized attacker to execute code remotely over a network without user interaction or privileges. Microsoft has released official fixes for all affected versions.
CVE-2026-85867 is a heap-based buffer overflow vulnerability in the Windows Remote Access Connection Manager component of Microsoft Windows 10 Version 1607 and related builds. This flaw allows an authorized local attacker to elevate privileges. The vulnerability has been assigned a high severity rating with a CVSS score of 7.8. Microsoft has released official fixes for affected versions.