CVE-2026-83643 is a high-severity stack-based buffer overflow vulnerability in Windows Error Reporting affecting multiple versions of Microsoft Windows 10, including Version 1607. This flaw allows an unauthorized attacker to execute code remotely over a network. The vulnerability has been officially fixed in several Windows 10 builds.
CVE-2026-70069 is a high-severity stack-based buffer overflow vulnerability in the Windows DHCP Server component affecting multiple versions of Microsoft Windows 10 and related Windows versions. The flaw allows an authorized attacker with network access to execute arbitrary code remotely. Microsoft has released official fixes for all affected versions.
CVE-2026-97770 is a high-severity stack-based buffer overflow vulnerability in Microsoft Office Excel, part of Microsoft 365 Apps for Enterprise. It allows an unauthorized attacker to execute code remotely over a network. The vulnerability affects multiple versions prior to specific fixed releases. Microsoft has issued official fixes for this vulnerability.
CVE-2026-97761 is a high-severity stack-based buffer overflow vulnerability in Microsoft Office Excel within Microsoft 365 Apps for Enterprise. It allows an unauthorized attacker to execute code remotely over a network. The vulnerability affects multiple versions prior to 16.114.26101123 and 16.0.17932.21056. An official fix is available and has been released in these versions.
CVE-2026-97750 is a high-severity stack-based buffer overflow vulnerability in Microsoft Office Excel within Microsoft 365 Apps for Enterprise. It allows an unauthorized attacker to execute code remotely over a network. The vulnerability affects multiple versions prior to fixed releases. Official patches have been released by Microsoft to address this issue.
CVE-2026-96995 is a stack-based buffer overflow vulnerability in Microsoft Office Word within Microsoft 365 Apps for Enterprise. It allows an authorized local attacker to elevate privileges. The vulnerability has a high severity with a CVSS score of 7.8. Official patches have been released to address this issue in specific versions of the software.
CVE-2026-97012 is a high-severity stack-based buffer overflow vulnerability in Microsoft Office Outlook, part of Microsoft 365 Apps for Enterprise. This flaw allows an unauthorized attacker to execute arbitrary code remotely over a network. The vulnerability affects specific versions prior to 16.0.14334.20974 and 16.0.17932.21056, which contain the official fixes. No known exploits are currently reported in the wild.
CVE-2026-96248 is a stack-based buffer overflow vulnerability in the Windows Host Guardian Service affecting Windows 10 Version 1607 and related builds. This flaw allows an unauthorized attacker to cause a denial of service over a network. The vulnerability has a high severity score of 7.5 and has been officially fixed in specific Windows 10 builds.
CVE-2026-88156 is a critical stack-based buffer overflow vulnerability in Microsoft Office Outlook, part of Microsoft 365 Apps for Enterprise. This flaw allows an unauthorized attacker to execute arbitrary code remotely over a network without user interaction or privileges. The vulnerability affects multiple versions prior to fixed releases and has a CVSS score of 9.8, indicating high severity. Official patches have been released by Microsoft to address this issue.
CVE-2026-83891 is a high-severity stack-based buffer overflow vulnerability in Microsoft Office Word within Microsoft 365 Apps for Enterprise. This flaw allows an unauthorized attacker to execute code remotely over a network. The vulnerability affects multiple versions prior to fixed releases. Microsoft has issued official fixes for this vulnerability.
CVE-2026-70116 is a stack-based buffer overflow vulnerability in the Windows Resilient File System (ReFS) component of Microsoft Windows 11 Version 24H2. This flaw allows an unauthorized attacker with physical access to bypass a security feature. The vulnerability has a medium severity rating and has been officially fixed by Microsoft in specific builds of Windows 11 24H2.
CVE-2026-70110 is a stack-based buffer overflow vulnerability in the Microsoft PostScript Printer Driver on Windows 10 Version 1607 and other specified versions. This flaw allows an unauthorized local attacker to elevate privileges. The vulnerability has been assigned a high severity score of 7.8 and has been officially fixed by Microsoft in multiple Windows 10 builds.
CVE-2026-70024 is a critical stack-based buffer overflow vulnerability in Microsoft Windows 10 Version 1607 and other specified versions affecting Windows Internet Information Services. This flaw allows an unauthorized attacker to execute arbitrary code remotely over a network. The vulnerability has a high CVSS score of 9.8, indicating severe impact on confidentiality, integrity, and availability. Official patches have been released to address this issue.
CVE-2026-87711 is a stack-based buffer overflow vulnerability in Windows Installer affecting multiple versions of Microsoft Windows 10, including Version 1607 and later builds. This flaw allows an authorized local attacker to elevate privileges on the affected system. The vulnerability has been assigned a high severity rating with a CVSS score of 7.8. Official patches have been released by Microsoft to address this issue.
CVE-2026-85881 is a stack-based buffer overflow vulnerability in the Microsoft Graphics Component of Microsoft Office for Android. It allows an authorized attacker to elevate privileges over a network. The vulnerability affects versions from 16.0.1 up to but not including 16.0.20430.20000. An official fix is available in version 16.0.20430.20000. The vulnerability has a high severity score of 8.0 and requires user interaction with low attack complexity.
CVE-2026-85806 is a critical integer underflow vulnerability in the Network Policy Server (NPS) component of Microsoft Windows 10 Version 1607 and related builds. This flaw allows an unauthorized attacker to execute arbitrary code remotely over a network. The vulnerability affects multiple Windows 10 builds prior to specific fixed versions. Microsoft has released official patches to address this issue.
CVE-2026-85796 is a numeric truncation error vulnerability in the Windows Installer component of Microsoft Windows 10 Version 1607 and other versions. This flaw allows an authorized local attacker to elevate privileges on the affected system. The vulnerability has a high severity rating with a CVSS score of 7.8. Microsoft has released official fixes for all affected versions.
CVE-2026-83708 is a stack-based buffer overflow vulnerability in the Windows Installer component of Microsoft Windows 10 Version 1607 and related builds. This flaw allows an authorized local attacker to elevate privileges on the affected system. The vulnerability has been assigned a high severity rating with a CVSS score of 7. An official fix is available from Microsoft.
CVE-2026-83699 is a stack-based buffer overflow vulnerability in the Windows Client-Side Caching (CSC) Service affecting multiple versions of Microsoft Windows 10, including Version 1607. This flaw allows an authorized local attacker to elevate privileges on the affected system. The vulnerability has been assigned a high severity rating with a CVSS score of 7.8. Microsoft has released official fixes for all affected versions.
CVE-2026-105732 is a stack-based buffer overflow vulnerability in the Microsoft Sysinternals Suite that allows an authorized local attacker to elevate privileges. The vulnerability affects versions from 3.0.0 up to but not including 1.03. A fix is available in version 1.03. The vulnerability has a high severity with a CVSS score of 7.3.