CVE-2026-88145 is a heap-based buffer overflow vulnerability in Microsoft Office Excel within Microsoft 365 Apps for Enterprise. This flaw allows an unauthorized attacker to execute arbitrary code remotely over a network. The vulnerability has a high severity with a CVSS score of 8.8. Microsoft has issued official fixes in versions 16.114.26101123, 16.0.14334.20974, and 16.0.17932.21056. No known exploits in the wild have been reported as of the publication date.
CVE-2026-70257 is a heap-based buffer overflow vulnerability in Microsoft Office Outlook, part of Microsoft 365 Apps for Enterprise. This flaw allows an unauthorized attacker to execute code remotely over a network. The vulnerability affects specific versions prior to 16.0.14334.20974 and 16.0.17932.21056. Microsoft has issued official fixes for these versions. The vulnerability has a high severity rating with a CVSS score of 8.8. No known exploits are currently reported in the wild.
CVE-2026-70269 is a heap-based buffer overflow vulnerability in Microsoft Office Word within Microsoft 365 Apps for Enterprise. This flaw allows an unauthorized attacker to execute code remotely over a network. The vulnerability has a high severity score of 8.1 and affects multiple versions prior to specific fixed releases. Official patches have been released by Microsoft to address this issue.
CVE-2026-70149 is a heap-based buffer overflow vulnerability in the Windows Client Side Caching driver (csc.sys) affecting multiple versions of Microsoft Windows 10, including Version 1607. This flaw allows an authorized attacker to locally disclose sensitive information. The vulnerability has a high severity score of 8.8 and has been officially fixed in various Windows 10 builds.
CVE-2026-70008 is an integer overflow or wraparound vulnerability in the Windows IP Over USB Service on Microsoft Windows 10 Version 21H2. This flaw allows an authorized local attacker to elevate privileges. The vulnerability has a high severity with a CVSS score of 7.8. Official fixes have been released for multiple affected Windows 10 builds.
CVE-2026-70113 is an integer overflow or wraparound vulnerability in the Windows Client for NFS component of Microsoft Windows 10 Version 1607 and related builds. This flaw allows an authorized local attacker to elevate privileges on the affected system. The vulnerability has a high severity rating with a CVSS score of 7.8. Microsoft has released official fixes for all affected versions.
CVE-2026-88074 is an integer overflow or wraparound vulnerability in the Windows Virtualization-Based Security (VBS) Enclave component of Microsoft Windows 11 version 23H2. This flaw allows an authorized local attacker to elevate privileges. The vulnerability affects several builds of Windows 11 23H2 prior to specific fixed versions. Microsoft has released official fixes for the affected versions.
CVE-2026-70052 is an integer overflow or wraparound vulnerability in Windows PowerShell on Microsoft Windows 11 version 23H2. This flaw allows an authorized attacker with local access to execute code on the affected system. The vulnerability affects multiple builds of Windows 11 23H2 prior to specific fixed versions. A high-severity CVSS score of 7.8 reflects the potential for complete confidentiality, integrity, and availability compromise. Microsoft has released official fixes for all affected versions.
CVE-2026-69934 is an integer overflow or wraparound vulnerability in the Windows Spaceport.sys driver affecting Microsoft Windows 11 version 23H2. This flaw allows an authorized local attacker to elevate privileges. The vulnerability has a high severity score of 7.8 and has been officially fixed by Microsoft in specific Windows 11 builds.
CVE-2026-69916 is an integer overflow or wraparound vulnerability in the Windows NTFS component of Microsoft Windows 10 Version 1607 and related builds. This flaw allows an authorized local attacker to elevate privileges on the affected system. The vulnerability has been assigned a high severity rating with a CVSS score of 7.8. Microsoft has released official fixes for all affected versions.
CVE-2026-85820 is a heap-based buffer overflow vulnerability in the Windows Universal Disk Format File System Driver (UDFS) affecting multiple versions of Microsoft Windows 10, including Version 1607. This flaw allows an authorized local attacker to elevate privileges by exploiting a use-after-free condition. The vulnerability has a high severity rating with a CVSS score of 7.8. Microsoft has released official fixes for all affected versions.
CVE-2026-85807 is an integer overflow or wraparound vulnerability in the Windows USB Video Driver affecting multiple builds of Windows 10 Version 1607 and later. This flaw allows an authorized local attacker to elevate privileges. The vulnerability has a high severity score of 7.8 and has been officially fixed in specific Windows 10 builds.
CVE-2026-83847 is a heap-based buffer overflow vulnerability in Microsoft Account on Windows 10 Version 1607 and related builds. It allows an authorized local attacker to elevate privileges. The vulnerability has a high severity score of 7.8 and affects multiple Windows 10 builds prior to specific fixed versions. Microsoft has released official fixes for all affected versions.
CVE-2026-83828 is a heap-based buffer overflow vulnerability in the Windows MIDI Service Module of Microsoft Windows 11 Version 24H2. This flaw allows an authorized local attacker to elevate privileges on the affected system. The vulnerability has been assigned a high severity rating with a CVSS score of 7.8. Microsoft has released official fixes for affected versions.
CVE-2026-83688 is a heap-based buffer overflow vulnerability in the Remote Desktop Client component of Microsoft Windows 10 Version 1607 and related builds. This flaw allows an unauthorized attacker to execute arbitrary code remotely over a network. The vulnerability has a high severity with a CVSS score of 8.8. Microsoft has released official fixes for multiple affected versions.
CVE-2026-83578 is a critical integer underflow vulnerability in Windows PowerShell on Microsoft Windows 10 Version 1607 and related versions. This flaw allows an unauthorized attacker to execute code remotely over a network. The vulnerability affects multiple Windows 10 builds prior to specific fixed versions. Microsoft has released official patches to address this issue.
CVE-2026-69354 is a heap-based buffer overflow vulnerability in Windows Error Reporting affecting multiple versions of Microsoft Windows 10, including Version 1607. This flaw allows an authorized local attacker to elevate privileges. The vulnerability has been assigned a high severity score and has been officially fixed in specific Windows updates.
CVE-2026-69521 is an integer overflow or wraparound vulnerability in the Windows iSCSI component affecting multiple versions of Microsoft Windows 10, including Version 1607. This flaw allows an unauthorized attacker to execute code remotely over a network. The vulnerability has a high severity score of 8.8 and has been officially fixed in several Windows 10 builds.
CVE-2026-69966 is an integer overflow or wraparound vulnerability in the Microsoft Streaming Service component of Microsoft Windows 10 Version 1607. This flaw allows an authorized local attacker to elevate privileges on the affected system. The vulnerability affects multiple Windows 10 builds prior to specific fixed versions. Microsoft has released official fixes for this issue.
CVE-2026-69963 is a heap-based buffer overflow vulnerability in the Microsoft Streaming Service on Windows 10 Version 1607 and related builds. It allows an authorized local attacker to elevate privileges. The vulnerability has a high severity score of 7.8 and affects multiple Windows 10 builds prior to specific fixed versions. Microsoft has released official fixes for all affected versions.