CVE-2026-102205 is a heap-based buffer overflow vulnerability in the Windows Universal Disk Format File System Driver (UDFS) affecting multiple versions of Microsoft Windows 10, including Version 1607. This flaw allows an authorized local attacker to elevate privileges on the affected system. The vulnerability has a high severity rating with a CVSS score of 7.8. Microsoft has issued official fixes for all affected versions.
CVE-2026-102206 is a heap-based buffer overflow vulnerability in the Windows Portable Device MTP Driver affecting multiple versions of Microsoft Windows 10, including Version 1607. This flaw allows an unauthorized attacker with physical access to the device to elevate privileges. The vulnerability has been assigned a CVSS v3.1 score of 6.8, indicating a medium severity level. Official fixes have been released for all affected versions.
CVE-2026-102191 is a heap-based buffer overflow vulnerability in Windows Storage on Microsoft Windows 11 version 23H2. This flaw allows a locally authorized attacker to elevate privileges. The vulnerability affects multiple builds of Windows 11 23H2 prior to specific fixed versions. An official fix is available from Microsoft.
CVE-2026-102189 is a heap-based buffer overflow vulnerability in the Windows Storage component of Microsoft Windows 11 version 23H2. It allows an authorized local attacker to elevate privileges. The vulnerability has been assigned a high severity rating with a CVSS score of 7. A fix has been officially released by Microsoft for affected versions.
CVE-2026-100225 is a heap-based buffer overflow vulnerability in Windows Storage affecting multiple versions of Microsoft Windows 10, including version 1607. This flaw allows an authorized local attacker to elevate privileges. The vulnerability has been assigned a high severity rating with a CVSS score of 7. An official fix is available from Microsoft.
CVE-2026-100222 is a critical heap-based buffer overflow vulnerability in the Network Policy Server component of Microsoft Windows 10 Version 1607 and related builds. This flaw allows an unauthenticated attacker to execute arbitrary code remotely over a network. The vulnerability affects multiple Windows 10 versions prior to specific fixed builds. Microsoft has released official patches to address this issue.
CVE-2026-100220 is a heap-based buffer overflow vulnerability in the Windows Media Video Decoder component of Microsoft Windows 10 Version 1607 and related builds. This flaw allows an unauthorized attacker to execute arbitrary code remotely over a network. The vulnerability affects multiple Windows 10 builds prior to their respective fixed versions. Microsoft has released official fixes for all affected versions.
CVE-2026-100210 is a heap-based buffer overflow vulnerability in Microsoft Office Excel within Microsoft 365 Apps for Enterprise. This flaw allows an unauthorized attacker to execute arbitrary code remotely over a network. The vulnerability affects multiple versions prior to specific fixed releases. Microsoft has issued official fixes for the affected versions. The vulnerability has a high severity score of 8.8 and requires user interaction to exploit.
CVE-2026-100203 is a heap-based buffer overflow vulnerability in the Windows Update Service on Microsoft Windows 10 Version 1607 and related builds. It allows an authorized local attacker to elevate privileges. The flaw affects multiple Windows 10 versions prior to specific fixed builds. Microsoft has released official patches to address this issue.
CVE-2026-100201 is a heap-based buffer overflow vulnerability in the Windows Client License Service on Microsoft Windows 10 Version 1809 and related builds. This flaw allows an authorized local attacker to elevate privileges. The vulnerability has been assigned a high severity score and has been officially fixed in multiple Windows 10 versions.
CVE-2026-96071 is a heap-based buffer overflow vulnerability in Windows Media on Microsoft Windows 10 Version 1607 and other specified versions. This flaw allows an unauthorized attacker to execute code remotely over a network. The vulnerability has been assigned a high severity rating with a CVSS score of 7.5. Official patches have been released to address this issue in multiple Windows 10 builds.
CVE-2026-97768 is a heap-based buffer overflow vulnerability in Microsoft Office Excel within Microsoft 365 Apps for Enterprise. This flaw allows an unauthorized attacker to execute code remotely over a network. The vulnerability affects multiple versions prior to fixed releases. Microsoft has issued official fixes for this vulnerability.
CVE-2026-97763 is a heap-based buffer overflow vulnerability in Microsoft Office Excel within Microsoft 365 Apps for Enterprise. This flaw allows an unauthorized attacker to execute code remotely over a network. The vulnerability has a high severity score of 8.8 and affects multiple versions prior to specific fixed releases. Microsoft has issued official fixes for this vulnerability.
CVE-2026-97741 is a heap-based buffer overflow vulnerability in Microsoft Office Excel, part of Microsoft 365 Apps for Enterprise. This flaw allows an unauthorized attacker to execute code remotely over a network. The vulnerability affects multiple versions prior to 16.114.26101123. Microsoft has released an official fix in version 16.114.26101123. The vulnerability has a high severity rating with a CVSS score of 8.8. No known exploits are reported in the wild at this time.
CVE-2026-97004 is a heap-based buffer overflow vulnerability in Microsoft Office Excel within Microsoft 365 Apps for Enterprise. This flaw allows an unauthorized attacker to execute code remotely over a network. The vulnerability has a high severity with a CVSS score of 8.8. Microsoft has released official fixes in multiple versions to address this issue.
CVE-2026-97757 is a heap-based buffer overflow vulnerability in Microsoft Office Excel within Microsoft 365 Apps for Enterprise. This flaw allows an unauthorized attacker to execute arbitrary code remotely over a network. The vulnerability affects multiple versions prior to specific fixed releases. Microsoft has issued official fixes for this vulnerability.
CVE-2026-97777 is a heap-based buffer overflow vulnerability in Microsoft Office Excel within Microsoft 365 Apps for Enterprise. This flaw allows an unauthorized attacker to execute code remotely over a network. The vulnerability has a high severity with a CVSS score of 8.8. Microsoft has released official fixes addressing this issue in multiple versions of the software.
CVE-2026-97773 is a heap-based buffer overflow vulnerability in Microsoft Office Excel within Microsoft 365 Apps for Enterprise. This flaw allows an unauthorized attacker to execute arbitrary code remotely over a network. The vulnerability has a high severity rating with a CVSS score of 8.8. Microsoft has released official fixes addressing this issue in multiple versions of the software.
CVE-2026-97769 is a heap-based buffer overflow vulnerability in Microsoft Office Excel within Microsoft 365 Apps for Enterprise. This flaw allows an unauthorized attacker to execute code remotely over a network. The vulnerability has a high severity score of 8.8 and affects multiple versions of Microsoft 365 Apps for Enterprise prior to specific fixed releases. Official patches have been released by Microsoft to address this issue.
CVE-2026-97756 is a heap-based buffer overflow vulnerability in Microsoft Office Excel within Microsoft 365 Apps for Enterprise. This flaw allows an unauthorized attacker to execute arbitrary code remotely over a network. The vulnerability affects multiple versions of Microsoft 365 Apps for Enterprise prior to specific fixed builds. Microsoft has released official patches to address this issue. The vulnerability has a high severity rating with a CVSS score of 8.8. There are no known exploits in the wild at this time.