Photoshop Desktop is affected by a Heap-based Buffer Overflow vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file.
CVE-2026-105016 is a critical heap-based buffer overflow vulnerability in the Microsoft .NET 10.0 runtime's QUIC implementation. This flaw allows an unauthorized attacker to execute arbitrary code remotely over a network. The vulnerability affects multiple versions of the .NET runtime prior to fixed releases. Microsoft has issued official patches to address this issue.
CVE-2026-108130 is a heap-based buffer overflow vulnerability in the Windows Virtualization-Based Security (VBS) Enclave component of Microsoft Windows 11 Version 24H2. This flaw allows an authorized local attacker to elevate privileges. The vulnerability has a high severity score of 7.8 and affects multiple builds of Windows 11 24H2 prior to specific fixed versions. Microsoft has released official fixes for the affected versions.
CVE-2026-97817 is a heap-based buffer overflow vulnerability in the DNS Server component of Microsoft Windows 10 Version 1607 and related versions. An authorized attacker can exploit this flaw over a network to disclose information. The vulnerability has a CVSS score of 6.5 (medium severity). Official patches have been released to address this issue.
CVE-2026-97815 is a critical heap-based buffer overflow vulnerability in Windows Error Reporting affecting multiple versions of Microsoft Windows 10, including Version 1607. This flaw allows an unauthorized attacker to execute code remotely over a network without user interaction. The vulnerability has a high CVSS score of 9.8, indicating severe impact on confidentiality, integrity, and availability. Microsoft has released official fixes for all affected versions.
CVE-2026-97814 is a critical heap-based buffer overflow vulnerability in the Windows Text Shaping component affecting multiple versions of Microsoft Windows 10, including Version 1607. This flaw allows an unauthorized attacker to execute arbitrary code remotely over a network without user interaction. The vulnerability has a CVSS score of 9.8, indicating high impact on confidentiality, integrity, and availability. Official patches have been released to address this issue.
CVE-2026-97813 is a heap-based buffer overflow vulnerability in Windows Hyper-V on Microsoft Windows 10 Version 1809 and related builds. It allows an authorized attacker with network access to disclose information. The vulnerability has a CVSS score of 6.5 (medium severity) and affects multiple Windows 10 versions prior to specific fixed releases. An official fix is available from Microsoft.
CVE-2026-97810 is a heap-based buffer overflow vulnerability in the Windows Container Isolation FS Filter Driver (unionfs.sys) affecting Microsoft Windows 11 Version 24H2. This flaw allows an authorized local attacker to elevate privileges. The vulnerability is rated high severity with a CVSS score of 7. A fix is available and has been officially released by Microsoft.
CVE-2026-97804 is a heap-based buffer overflow vulnerability in the HID class driver of Microsoft Windows 10 Version 1607 and later updates. This flaw allows an authorized local attacker to elevate privileges on the affected system. The vulnerability has a high severity rating with a CVSS score of 7.8. Microsoft has released official fixes for all affected versions.
CVE-2026-97803 is a heap-based buffer overflow vulnerability in the Windows Kernel of Microsoft Windows 11 version 26H1. It allows a locally authorized attacker to elevate privileges. The vulnerability affects Windows 11 versions from 10.0.28000.0 up to but not including 10.0.28000.3231. A patch is available and has been officially released by Microsoft.
CVE-2026-96113 is a critical heap-based buffer overflow vulnerability in the DNS Server component of Microsoft Windows 10 Version 1607 and related versions. This flaw allows an unauthorized attacker to execute arbitrary code remotely over a network. The vulnerability affects multiple Windows versions and has been officially fixed by Microsoft.
CVE-2026-105003 is a heap-based buffer overflow vulnerability in the HID class driver of Microsoft Windows 10 Version 1607 and related builds. This flaw allows an authorized local attacker to elevate privileges on the affected system. The vulnerability has been assigned a high severity with a CVSS score of 7.8. Microsoft has issued official fixes for all affected versions.
CVE-2026-103568 is a race condition vulnerability in Windows Credential Providers affecting multiple versions of Microsoft Windows 10, including version 1607 and later builds. This flaw allows an authorized local attacker to elevate privileges due to improper synchronization when accessing shared resources. The vulnerability has been assigned a high severity with a CVSS score of 7.8. Official fixes have been released for all affected versions.
CVE-2026-103555 is a heap-based buffer overflow vulnerability in the Virtual Hard Disk (VHD) Miniport Driver on Microsoft Windows 10 Version 1607 and related builds. This flaw allows an authorized local attacker to elevate privileges. The vulnerability has been assigned a high severity with a CVSS score of 7. A fix is available in specific updated Windows 10 builds.
CVE-2026-109453 is a heap-based buffer overflow vulnerability in the Virtual Hard Disk (VHD) Miniport Driver of Microsoft Windows 10 Version 1607 and related builds. This flaw allows an authorized local attacker to elevate privileges on the affected system. The vulnerability has been assigned a high severity score and has official fixes available in multiple Windows 10 builds.
CVE-2026-100215 is a heap-based buffer overflow vulnerability in the Microsoft Graphics Component affecting multiple versions of Windows 10, including Version 1607. This flaw allows an unauthorized attacker to execute code locally with high impact on confidentiality, integrity, and availability. The vulnerability has been assigned a high severity score of 7.8 and has been officially fixed in several Windows 10 builds.
CVE-2026-102215 is a heap-based buffer overflow vulnerability in the Windows Universal Disk Format File System Driver (UDFS) affecting multiple versions of Microsoft Windows 10, including Version 1607. This flaw allows an authorized local attacker to elevate privileges on the affected system. The vulnerability has a high severity rating and has been officially fixed in specific Windows 10 builds.
CVE-2026-102218 is a heap-based buffer overflow vulnerability in the Windows Universal Disk Format File System Driver (UDFS) affecting multiple versions of Microsoft Windows 10, including Version 1607. This flaw allows an authorized local attacker to elevate privileges on the affected system. The vulnerability has a high severity rating with a CVSS score of 7.8. Microsoft has released official fixes for all affected versions.
CVE-2026-102210 is a critical heap-based buffer overflow vulnerability in the Windows Text Shaping component of Microsoft Windows 10 Version 1809 and related builds. This flaw allows an unauthorized attacker to execute arbitrary code remotely over a network without user interaction. The vulnerability affects multiple Windows 10 versions prior to their respective fixed releases. Microsoft has issued official fixes for all affected versions.
CVE-2026-102209 is a heap-based buffer overflow vulnerability in the Microsoft Graphics Component of Windows 11 version 26H1. This flaw allows an authorized local attacker to elevate privileges. The vulnerability affects Windows 11 builds from 10.0.28000.0 up to but not including 10.0.28000.3231. Microsoft has released an official fix in version 10.0.28000.3231. The vulnerability has a high severity rating with a CVSS score of 7.0. No known exploits are currently reported in the wild.