CVE-2026-14532 is an integer overflow or wraparound vulnerability in IBM WebSphere Application Server - Liberty versions 17.0.0.3 through 26.0.0.9. A user with Reader role privileges could exploit this flaw to obtain version information, which leads to an uncaught exception. The vulnerability has a medium severity rating with a CVSS score of 4.3. No information about available patches or vendor advisories is provided.
CVE-2026-96118 is an out-of-bounds read vulnerability in the Windows Graphics Kernel affecting multiple versions of Microsoft Windows 10, including Version 1607. This flaw allows an authorized local attacker to elevate privileges. The vulnerability has a high severity rating with a CVSS score of 7.8. Microsoft has issued official fixes for all affected versions.
CVE-2026-96914 is an integer overflow or wraparound vulnerability in the Windows Virtualization-Based Security (VBS) Enclave component of Microsoft Windows 10 Version 1607 and related builds. This flaw allows an authorized local attacker to elevate privileges. The vulnerability has been assigned a high severity score of 8.8 and has been officially fixed in multiple Windows 10 builds.
CVE-2026-96915 is an integer overflow or wraparound vulnerability in Windows Kernel-Mode Drivers affecting multiple versions of Microsoft Windows 10, including Version 1607. This flaw allows an authorized local attacker to elevate privileges on the affected system. The vulnerability has a high severity score and has been officially fixed in specific Windows updates.
CVE-2026-85363 is an integer overflow or wraparound vulnerability in Microsoft .NET runtime versions including 3.0.0.0, 3.5.0, 4.7.x, 4.8.x, 8.x, 9.x, 10.x, 11.x, 17.x, and 18.x. This flaw allows an unauthorized attacker to elevate privileges over a network. The vulnerability has a high severity score of 8.8 and has been officially fixed in multiple versions.
CVE-2026-88186 is a heap-based buffer overflow vulnerability in Microsoft Office Word within Microsoft 365 Apps for Enterprise. This flaw allows an unauthorized attacker to execute code remotely over a network. The vulnerability has a high severity score of 8.8 and affects multiple versions prior to fixed releases. Official patches have been released by Microsoft to address this issue.
CVE-2026-88166 is an integer overflow or wraparound vulnerability in Microsoft SharePoint Server Subscription Edition. It allows an authorized attacker to execute code remotely over a network. The vulnerability affects versions from 16.0.0 up to but not including 16.0.20326.20190. A fix is available in version 16.0.20326.20190. The vulnerability has a high severity with a CVSS score of 8.8.
CVE-2026-88163 is an integer overflow or wraparound vulnerability in Microsoft SharePoint Server Subscription Edition. It allows an authorized attacker to execute code remotely over a network. The vulnerability affects versions from 16.0.0 up to but not including 16.0.20326.20190. A patch is available in version 16.0.20326.20190. The vulnerability has a high severity with a CVSS score of 8.8.
CVE-2026-88118 is an integer overflow or wraparound vulnerability in the Windows Background Intelligent Transfer Service (BITS) affecting multiple versions of Microsoft Windows 10. This flaw allows an authorized local attacker to elevate privileges. The vulnerability has a high severity score of 7.8 and has been officially fixed in various Windows 10 builds.
CVE-2026-87702 is an integer overflow or wraparound vulnerability in Microsoft Windows 10 Version 1607's Windows Resource Management (MRM) component. This flaw allows an authorized local attacker to elevate privileges. The vulnerability has a high severity rating with a CVSS score of 7.8. Microsoft has released official fixes for affected versions.
CVE-2026-83918 is an integer overflow or wraparound vulnerability in the Windows Kernel affecting Windows 10 Version 1607 and other versions. This flaw allows an authorized local attacker to elevate privileges. The vulnerability has a high severity score of 7.8 and has been officially fixed by Microsoft in multiple Windows 10 builds.
CVE-2026-85908 is a heap-based buffer overflow vulnerability affecting Microsoft Office 365 for Mac. It allows an authorized local attacker to elevate privileges by exploiting a flaw in the Windows Win32K graphics subsystem. The vulnerability has a high severity score of 7.8 and impacts confidentiality, integrity, and availability. Official patches have been released to address this issue.
CVE-2026-83877 is an integer overflow or wraparound vulnerability in the HID Parser Library of Microsoft Windows 10 Version 1809. This flaw allows an authorized local attacker to elevate privileges. The issue affects multiple Windows 10 builds prior to their respective fixed versions. Microsoft has released official fixes for all affected versions.
CVE-2026-83725 is a heap-based buffer overflow vulnerability in the Microsoft Windows Search Component affecting Windows 10 Version 1607 and other versions. This flaw allows an unauthorized attacker to execute code remotely over a network. The vulnerability has a high severity with a CVSS score of 8.8. Official patches have been released to address this issue.
CVE-2026-83573 is an integer overflow or wraparound vulnerability in the Windows Kernel Mode Driver affecting multiple versions of Microsoft Windows 10, including Version 1607. This flaw allows an unauthorized attacker with physical access to elevate privileges on the affected system. The vulnerability has a medium severity rating with a CVSS score of 6.8. Microsoft has issued official fixes for all affected versions.
CVE-2026-70258 is a heap-based buffer overflow vulnerability in Microsoft Windows Media Foundation affecting multiple versions of Windows 10, including Version 1607. This flaw allows an unauthorized attacker to execute code remotely over a network. The vulnerability has a high severity with a CVSS score of 8.8. Official fixes have been released for all affected versions.
CVE-2026-97778 is an integer overflow or wraparound vulnerability in Microsoft Office Excel within Microsoft 365 Apps for Enterprise. This flaw allows an unauthorized attacker to execute code remotely over a network. The vulnerability has a high severity with a CVSS score of 8.8. Microsoft has issued official fixes in multiple versions to address this issue.
CVE-2026-97753 is a heap-based buffer overflow vulnerability in Microsoft Office Excel within Microsoft 365 Apps for Enterprise. This flaw allows an unauthorized attacker to execute code remotely over a network. The vulnerability has a high severity with a CVSS score of 8.8. Microsoft has released official fixes for affected versions.
CVE-2026-96943 is an integer overflow or wraparound vulnerability in the Microsoft Raw Image Extension. This flaw allows an unauthorized attacker to execute code remotely over a network. The vulnerability affects versions from 2.1.0.0 up to but not including 2.4.36.0. Microsoft has released an official fix in version 2.4.36.0 to address this issue. The vulnerability has a high severity rating with a CVSS score of 8.8.
CVE-2026-96217 is a heap-based buffer overflow vulnerability in the NTFS component of Microsoft Windows 10 Version 1607 and related builds. It allows an authorized local attacker to elevate privileges. The vulnerability has been assigned a high severity with a CVSS score of 7.8. Microsoft has released official fixes for affected versions.