CVE-2026-68892 is a heap-based buffer overflow vulnerability in Microsoft Standard XPS on Windows 10 Version 1607 and related builds. It allows an authorized local attacker to elevate privileges. The flaw has been assigned a high severity with a CVSS score of 7.8. Official patches have been released to address this issue in multiple Windows 10 builds.
CVE-2026-69271 is a heap-based buffer overflow vulnerability in Microsoft Standard XPS on Windows 10 Version 1607 and related versions. It allows an authorized attacker to elevate privileges over a network. The vulnerability affects multiple Windows 10 builds prior to specific fixed versions. A high-severity official fix is available from Microsoft.
CVE-2026-68890 is a heap-based buffer overflow vulnerability in Microsoft Standard XPS on Windows 10 Version 1607 and other affected versions. An authorized local attacker can exploit this flaw to elevate privileges. The vulnerability has been assigned a high severity score of 7.8. Microsoft has issued official fixes for all affected versions.
CVE-2026-68884 is a heap-based buffer overflow vulnerability in the Windows Kernel affecting multiple builds of Windows 10 Version 1607 and related updates. This flaw allows an authorized local attacker to elevate privileges on the affected system. The vulnerability has a high severity rating and has been officially fixed by Microsoft in specific updates.
CVE-2026-68897 is a heap-based buffer overflow vulnerability in Microsoft Standard XPS on Windows 10 Version 1607 and other specified versions. It allows an authorized local attacker to elevate privileges. The vulnerability has a high severity score and has been officially fixed in multiple Windows 10 builds.
CVE-2026-68845 is a heap-based buffer overflow vulnerability in the Windows Program Compatibility Assistant Service affecting multiple versions of Microsoft Windows 10 and some earlier versions. This flaw allows an authorized local attacker to elevate privileges on the affected system. The vulnerability has a high severity score and has been officially fixed in multiple Windows updates.
CVE-2026-68841 is a heap-based buffer overflow vulnerability in the NTFS component of Microsoft Windows 10 Version 1607 and related builds. It allows an authorized local attacker to elevate privileges on the affected system. The vulnerability has been assigned a high severity score of 7.8 CVSS v3.1. Official fixes have been released by Microsoft for all affected versions.
CVE-2026-68833 is a heap-based buffer overflow vulnerability in the Windows NTFS component affecting multiple versions of Microsoft Windows 10, including Version 1607. This flaw allows an unauthorized attacker with physical access to execute arbitrary code. The vulnerability has a medium severity rating with a CVSS score of 6.8. An official fix is available from Microsoft.
CVE-2026-68787 is a heap-based buffer overflow vulnerability in Microsoft SQL Server 2017 (CU 31) that allows an authorized attacker to execute code locally. The flaw affects multiple versions of SQL Server 2017, 2019, 2022, and 2024 prior to specific fixed builds. This vulnerability has a high severity rating with a CVSS score of 7.8. Microsoft has released official fixes for all affected versions.
CVE-2026-68785 is a heap-based buffer overflow vulnerability in Microsoft SQL Server 2017 (CU 31) that allows an authorized attacker to execute code remotely over a network. The vulnerability affects multiple versions of SQL Server 2017 and later releases prior to specific fixed versions. Microsoft has released official patches to address this issue. The vulnerability has a medium severity rating with a CVSS score of 4.9 and does not require user interaction for exploitation. No known exploits are reported in the wild at this time.
CVE-2026-67631 is a critical heap-based buffer overflow vulnerability in Microsoft SQL Server 2017 (CU 31) and later versions up to specified fixed releases. This flaw allows an unauthorized attacker to execute code remotely over a network without user interaction. The vulnerability has a CVSS score of 9.8, indicating high impact on confidentiality, integrity, and availability. Official patches are available from Microsoft to address this issue.
CVE-2026-67373 is a heap-based buffer overflow vulnerability in Microsoft SQL Server 2025 (CU8) that allows an authorized attacker to execute code remotely over a network. The flaw affects specific versions prior to 17.0.4085.5 and 17.0.1135.8. Microsoft has released official fixes addressing this issue. The vulnerability is rated high severity with a CVSS score of 8.8.
CVE-2026-77482 is a heap-based buffer overflow vulnerability in Microsoft SQL Server 2017 (CU 31) that allows an unauthorized attacker to execute code remotely over a network. The vulnerability affects multiple versions prior to specific fixed releases. Microsoft has issued an official fix for this vulnerability.
CVE-2026-69522 is a heap-based buffer overflow vulnerability in Microsoft .NET 10.0 runtime and several other versions. It allows an unauthorized attacker to execute code remotely over a network. The vulnerability affects multiple versions across .NET 3.0.0.0 through 18.9.3 with specific affected version ranges. A high-severity fix is available and has been officially released by Microsoft.
CVE-2026-62744 is a heap-based buffer overflow vulnerability in Microsoft Windows Media Foundation on Windows 11 Version 24H2. It allows an unauthorized attacker to execute code remotely over a network. The vulnerability has a high severity with a CVSS score of 8.8. Official patches have been released to address this issue in specific Windows 11 builds.
CVE-2026-20502 is a heap-based buffer overflow vulnerability in MediaTek chipsets affecting multiple specific models. The flaw exists in the video decoder (vdec) component due to a missing bounds check, allowing out-of-bounds writes. Exploitation does not require user interaction or additional execution privileges and can lead to local privilege escalation. The vulnerability is rated high severity with a CVSS score of 8.4. No patch links are provided in the data, and the vendor advisory status is not explicitly stated.
CVE-2026-20501 is a heap-based buffer overflow vulnerability in the vdec component of MediaTek chipsets. It allows a local attacker to escalate privileges without requiring user interaction or additional execution privileges. The vulnerability affects multiple MediaTek chipset versions. The CVSS score is 8.4, indicating high severity.
A heap-based buffer overflow vulnerability exists in the PJLIB-UTIL HTTP client component of pjsip pjproject prior to commit 8d5956a. The flaw occurs when buffering an entire HTTP response body at once, due to incorrect size calculation based on the Content-Length header, potentially allowing memory corruption or application crashes. Applications that process response data incrementally or connect only to trusted servers are not affected. This issue has been patched in commit 8d5956a.