CVE-2026-77481 is a heap-based buffer overflow vulnerability in Microsoft SQL Server 2017 (CU 31) that allows an authorized attacker to execute code remotely over a network. The vulnerability affects multiple versions of SQL Server 2017, 2019, 2022, and 2024 prior to specific fixed builds. Microsoft has released official patches to address this issue.
CVE-2026-78512 is a numeric truncation error vulnerability in Microsoft Office Word within Microsoft 365 Apps for Enterprise. This flaw allows an unauthorized attacker to execute code remotely over a network. The vulnerability affects multiple versions prior to specific fixed releases. Microsoft has issued official fixes for the affected versions. The CVSS v3.1 base score is 8.8, indicating high severity with high impact on confidentiality, integrity, and availability. No known exploits are reported in the wild at this time.
CVE-2026-78456 is a heap-based buffer overflow vulnerability in Microsoft SQL Server 2022 (CU 26) that allows an authorized attacker to execute code remotely over a network. The vulnerability affects certain versions prior to 16.0.4275.2 and 16.0.1200.5. Microsoft has released official fixes for this issue.
CVE-2026-78448 is a heap-based buffer overflow vulnerability in the Windows Biometric Service on Microsoft Windows 10 Version 1607 and later builds. This flaw allows an authorized local attacker to elevate privileges. The vulnerability affects multiple Windows 10 builds prior to specific fixed versions. Microsoft has released official patches to address this issue.
CVE-2026-78447 is a heap-based buffer overflow vulnerability in the Windows Biometric Service on Microsoft Windows 10 Version 1607 and later versions. This flaw allows an authorized local attacker to elevate privileges. The vulnerability has a high severity rating with a CVSS score of 7.8. Microsoft has released official fixes for all affected versions.
CVE-2026-78442 is a heap-based buffer overflow vulnerability in Windows OLE DB component of Microsoft SQL Server 2017 (CU 31). It allows an unauthorized attacker to execute code remotely over a network. The vulnerability affects multiple versions of Microsoft SQL Server 2017 and later builds prior to specific fixed versions. Microsoft has released official patches to address this issue.
CVE-2026-77486 is a high-severity integer overflow vulnerability in Microsoft SQL Server 2017 (CU 31) that allows an unauthorized attacker to execute code remotely over a network. The flaw affects multiple build versions prior to specific fixed releases. An official fix is available from Microsoft.
CVE-2026-71328 is a heap-based buffer overflow vulnerability in Microsoft .NET 10.0 runtime that allows an unauthorized attacker to execute code remotely over a network. The flaw affects multiple versions of the .NET runtime prior to their respective fixed releases. Microsoft has issued official patches to address this vulnerability.
CVE-2026-73017 is a heap-based buffer overflow vulnerability in the Windows Graphics Kernel affecting Windows 10 Version 1809 and related builds. It allows an authorized attacker with high privileges to execute code locally. The vulnerability has been assigned a high severity with a CVSS score of 7.5. Official patches are available for all affected versions.
CVE-2026-73013 is a heap-based buffer overflow vulnerability in Microsoft Office for Android's Windows Imaging Component. This flaw allows an unauthorized attacker to execute code remotely over a network. The vulnerability affects versions from 16.0.1 up to but not including 16.0.20430.20000. Microsoft has released an official fix in version 16.0.20430.20000. The vulnerability has a high severity with a CVSS score of 8.8, indicating critical impact on confidentiality, integrity, and availability.
CVE-2026-73023 is a heap-based buffer overflow vulnerability in the Windows Imaging Component of Microsoft Windows 10 Version 1607 and related builds. This flaw allows an unauthorized attacker to execute arbitrary code remotely over a network. The vulnerability affects multiple Windows 10 versions prior to specific fixed releases. Microsoft has issued official fixes for all affected versions.
CVE-2026-73012 is a heap-based buffer overflow vulnerability in Windows Management Services affecting multiple versions of Microsoft Windows 10, including Version 1607. This flaw allows an authorized attacker to elevate privileges over a network. The vulnerability has a high severity with a CVSS score of 8.8. Official patches have been released to address this issue.
CVE-2026-73026 is a heap-based buffer overflow vulnerability in the Windows Biometric Service on Windows 10 Version 1607 and later builds. This flaw allows an authorized local attacker to elevate privileges. The vulnerability affects multiple Windows 10 builds prior to specific fixed versions. Microsoft has released official patches to address this issue.
CVE-2026-73007 is a heap-based buffer overflow vulnerability in the Windows Biometric Service on Microsoft Windows 10 Version 1607 and related builds. This flaw allows an authorized local attacker to elevate privileges on the affected system. The vulnerability has been assigned a high severity with a CVSS score of 7.8. Microsoft has released official fixes for all affected versions.
CVE-2026-73024 is a heap-based buffer overflow vulnerability in the Windows Services for NFS ONCRPC XDR Driver affecting multiple versions of Microsoft Windows 10, including version 1607. An authorized local attacker can exploit this flaw to elevate privileges. The vulnerability has a high severity score of 7.8 and has been officially fixed in specific Windows 10 builds.
CVE-2026-73011 is a heap-based buffer overflow vulnerability in the Windows Biometric Service on Microsoft Windows 10 Version 1607 and related builds. This flaw allows an authorized local attacker to elevate privileges. The vulnerability has a high severity score of 7.8 and affects multiple Windows 10 versions prior to specific fixed builds. Microsoft has issued official fixes for all affected versions.
CVE-2026-73015 is a heap-based buffer overflow vulnerability in the Windows Biometric Service on Microsoft Windows 10 Version 1607 and later updates. This flaw allows an authorized local attacker to elevate privileges. The vulnerability has a high severity score of 7.8 and has been officially fixed in multiple Windows 10 builds.
CVE-2026-73021 is a heap-based buffer overflow vulnerability in the Windows Biometric Service on Microsoft Windows 10 Version 1607 and later builds. This flaw allows an authorized local attacker to elevate privileges. The vulnerability has been assigned a high severity score of 7.8 and has been officially fixed in multiple Windows 10 builds.
CVE-2026-73001 is a heap-based buffer overflow vulnerability in the Windows Biometric Service on Microsoft Windows 10 Version 1607 and related builds. This flaw allows an authorized local attacker to elevate privileges. The vulnerability has been assigned a high severity rating with a CVSS score of 7.8. Microsoft has released official fixes for affected versions.