CVE-2026-68775 is a heap-based buffer overflow vulnerability in Microsoft SQL Server 2017 (CU 31) and related versions. It allows an authorized attacker to execute arbitrary code remotely over a network. The vulnerability has a high severity with a CVSS score of 8.8. Official patches are available from Microsoft to address this issue.
CVE-2026-67642 is a heap-based buffer overflow vulnerability in Microsoft SQL Server 2025 (CU8) that allows an authorized attacker to execute code remotely over a network. The vulnerability affects specific versions prior to 17.0.4085.5 and 17.0.1135.8. Microsoft has released official fixes for these versions. The vulnerability has a high severity rating with a CVSS score of 8.8. No known exploits in the wild have been reported.
CVE-2026-67639 is a heap-based buffer overflow vulnerability in Microsoft SQL Server 2017 (CU 31) and later versions. It allows an authorized attacker to execute arbitrary code remotely over a network. The vulnerability affects multiple versions of SQL Server 2017, 2019, 2022, and 2024 branches prior to specific fixed releases. Microsoft has released official patches to address this issue.
CVE-2026-67638 is a heap-based buffer overflow vulnerability in Microsoft SQL Server 2025 (CU8) that allows an authorized attacker to execute code remotely over a network. The flaw affects specific versions prior to 17.0.4085.5 and 17.0.1135.8. Microsoft has released official fixes for this vulnerability. The issue has a high severity rating with a CVSS score of 8.8, indicating significant impact on confidentiality, integrity, and availability if exploited.
CVE-2026-67388 is a heap-based buffer overflow vulnerability in Microsoft SQL Server 2017 (CU 31) and later versions up to specified fixed releases. It allows an authorized attacker with network access to execute arbitrary code without user interaction. The vulnerability has a high severity with a CVSS score of 8.8. Official patches are available from Microsoft to address this issue.
CVE-2026-67381 is a heap-based buffer overflow vulnerability in Microsoft SQL Server 2017 (CU 31) and related versions. It allows an authorized attacker to elevate privileges over a network. The vulnerability has a high severity with a CVSS score of 8.8. Official fixes are available for all affected versions.
CVE-2026-67380 is a heap-based buffer overflow vulnerability in Microsoft SQL Server 2017 (CU 31) and related versions. It allows an authorized attacker to execute code remotely over a network. The vulnerability affects multiple versions of Microsoft SQL Server 2017, 2019, 2022, and 2024 branches prior to specific fixed releases. A high-severity CVSS 3.1 score of 8.8 reflects the critical impact on confidentiality, integrity, and availability. Official patches are available from Microsoft to remediate this issue.
CVE-2026-62810 is a heap-based buffer overflow vulnerability in Active Directory Certificate Services (AD CS) on Microsoft Windows 10 Version 1607 and related builds. This flaw allows an authorized local attacker to elevate privileges. The vulnerability affects multiple Windows 10 versions prior to specific fixed builds. Microsoft has released official fixes for all affected versions.
CVE-2026-85880 is a heap-based buffer overflow vulnerability in the Windows ALPC component affecting multiple versions of Microsoft Windows 10 and earlier Windows versions. An authorized local attacker can exploit this flaw to elevate privileges. The vulnerability has a high severity rating and is known to be exploited in the wild. Microsoft has released official patches to address this issue.
CVE-2026-85877 is a heap-based buffer overflow vulnerability in the Windows Print Spooler components of Microsoft Windows 11 Version 24H2. This flaw allows an unauthorized attacker to execute code remotely over a network. The vulnerability affects Windows 11 builds from 10.0.26100.0 up to but not including 10.0.26100.9445. Microsoft has released an official fix in version 10.0.26100.9445 to address this issue.
CVE-2026-83998 is a heap-based buffer overflow vulnerability in the Remote Desktop Client component of Microsoft Windows 10 Version 1607 and related builds. This flaw allows an unauthorized attacker to execute arbitrary code remotely over a network. The vulnerability has a high severity score of 8.8 and affects multiple Windows 10 versions prior to specific fixed builds. Official patches have been released by Microsoft to address this issue.
CVE-2026-83996 is a heap-based buffer overflow vulnerability in Windows Error Reporting affecting multiple versions of Microsoft Windows 10, including Version 1607. This flaw allows an authorized local attacker to elevate privileges. The vulnerability has a high severity score of 8.8 and has been officially fixed in several Windows 10 builds. No known exploits are reported in the wild.
CVE-2026-83976 is a heap-based buffer overflow vulnerability in the Windows Biometric Service on Microsoft Windows 10 Version 1607 and later builds. This flaw allows an authorized local attacker to elevate privileges on the affected system. The vulnerability has been assigned a high severity with a CVSS score of 7.8. Microsoft has released official fixes for all affected versions.
CVE-2026-83975 is a heap-based buffer overflow vulnerability in the Windows Biometric Service on Windows 10 Version 1607 and later builds. This flaw allows an authorized local attacker to elevate privileges. The vulnerability has been assigned a high severity score of 7.8 and affects multiple Windows 10 builds prior to specific fixed versions. Microsoft has released official fixes for all affected versions.
CVE-2026-83974 is a heap-based buffer overflow vulnerability in the Windows Biometric Service on Microsoft Windows 10 Version 1607 and later builds. This flaw allows an authorized local attacker to elevate privileges. The vulnerability has a high severity rating and has been officially fixed in multiple Windows 10 builds.
CVE-2026-83988 is a heap-based buffer overflow vulnerability in the Windows Biometric Service on Microsoft Windows 10 Version 1607 and later builds. This flaw allows an authorized local attacker to elevate privileges. The vulnerability affects multiple Windows 10 versions prior to specific fixed builds. Microsoft has released official patches to address this issue.
CVE-2026-83969 is a heap-based buffer overflow vulnerability in the Windows Biometric Service on Microsoft Windows 10 Version 1607 and later builds. It allows an authorized local attacker to elevate privileges. The vulnerability has been assigned a high severity with a CVSS score of 7.8. Official patches have been released to address this issue in multiple Windows 10 builds.
CVE-2026-83986 is a heap-based buffer overflow vulnerability in the Windows Biometric Service on Windows 10 Version 1607 and related builds. It allows an authorized local attacker to elevate privileges. The vulnerability has a high severity score of 7.8 and has been officially fixed in multiple Windows 10 versions.
CVE-2026-83955 is a heap-based buffer overflow vulnerability in the Windows Biometric Service on Microsoft Windows 10 Version 1607 and later versions. This flaw allows an authorized local attacker to elevate privileges on the affected system. The vulnerability has been assigned a high severity rating with a CVSS score of 7.8. Microsoft has released official fixes for all affected versions.
CVE-2026-69492 is a heap-based buffer overflow vulnerability in the Windows Partition Management Driver affecting multiple versions of Microsoft Windows 10, including Version 1607. This flaw allows an authorized local attacker to elevate privileges. The vulnerability has been assigned a high severity score of 7.0 and has official patches available from Microsoft.