CVE-2026-97007 is a heap-based buffer overflow vulnerability in Microsoft Office Excel within Microsoft 365 Apps for Enterprise. This flaw allows an unauthorized attacker to execute arbitrary code remotely over a network. The vulnerability has a high severity with a CVSS score of 8.8 and affects multiple versions of the product prior to specific fixed releases. Official patches have been released by Microsoft to address this issue.
CVE-2026-97748 is a heap-based buffer overflow vulnerability in Microsoft Office Excel within Microsoft 365 Apps for Enterprise. This flaw allows an unauthorized attacker to execute arbitrary code remotely over a network. The vulnerability has a high severity score of 8.8 and affects multiple versions of the software prior to specific fixed releases. Microsoft has issued official patches to address this issue.
CVE-2026-96952 is a heap-based buffer overflow vulnerability in Microsoft Windows Media Foundation affecting Windows 10 Version 1809 and later builds up to specified fixed versions. This flaw allows an unauthorized attacker to execute code remotely over a network. The vulnerability has a high severity with a CVSS score of 8.8. Official patches have been released to address this issue.
CVE-2026-96202 is a heap-based buffer overflow vulnerability in the Microsoft Raw Image Extension. This flaw allows an unauthorized attacker to execute code remotely over a network. The vulnerability affects versions of the Raw Image Extension from 1.0.0.0 up to but not including 154.0.4258.37 and from 2.1.0.0 up to but not including 2.4.36.0. An official fix is available from Microsoft.
CVE-2026-96938 is a heap-based buffer overflow vulnerability in the Windows Distributed File System (DFS) affecting multiple versions of Microsoft Windows 10, including Version 1607. This flaw allows an authorized local attacker to elevate privileges. The vulnerability has been assigned a CVSS 3.1 base score of 6.7, indicating a medium severity level. Official patches have been released by Microsoft to address this issue.
CVE-2026-96929 is a heap-based buffer overflow vulnerability in the Windows Kernel affecting multiple versions of Microsoft Windows 10, including Version 1607. This flaw allows an authorized local attacker to elevate privileges. The vulnerability has a high severity score of 7.8 and has been officially fixed in several Windows 10 builds.
CVE-2026-96917 is a heap-based buffer overflow vulnerability in the Windows PCI Bus Driver affecting multiple builds of Microsoft Windows 10 Version 1809 and later. This flaw allows an authorized local attacker to elevate privileges. The vulnerability has a high severity score of 8.8 and has been officially fixed in specific Windows 10 builds.
CVE-2026-96914 is an integer overflow or wraparound vulnerability in the Windows Virtualization-Based Security (VBS) Enclave component of Microsoft Windows 10 Version 1607 and related builds. This flaw allows an authorized local attacker to elevate privileges. The vulnerability has been assigned a high severity score of 8.8 and has been officially fixed in multiple Windows 10 builds.
CVE-2026-96913 is a heap-based buffer overflow vulnerability in the Windows Kernel affecting Windows 10 Version 1809 and related builds. It allows an authorized local attacker to elevate privileges. The vulnerability has a high severity score of 8.8 and has been officially fixed in multiple Windows 10 builds.
CVE-2026-96916 is a heap-based buffer overflow vulnerability in the Windows NTFS component affecting multiple versions of Microsoft Windows 10, including Version 1607. This flaw allows an authorized local attacker to elevate privileges on the affected system. The vulnerability has been assigned a high severity rating with a CVSS score of 7.8. Official patches have been released to address this issue.
CVE-2026-96909 is a critical heap-based buffer overflow vulnerability in Microsoft Windows 11 version 23H2 affecting the BitLocker component. This flaw allows an unauthorized attacker to execute code remotely over a network without user interaction or privileges. Multiple affected Windows 11 builds prior to specific fixed versions are vulnerable. Microsoft has released official patches to address this issue.
CVE-2026-96843 is a heap-based buffer overflow vulnerability in the WebDAV component of Microsoft Windows 10 Version 1607 and related builds. It allows an authorized local attacker to elevate privileges. The vulnerability has been assigned a high severity score of 7.8 and affects multiple Windows 10 builds prior to specific fixed versions. Microsoft has released official fixes for this issue.
CVE-2026-96320 is a critical heap-based buffer overflow vulnerability in the Windows DHCP Server component affecting multiple versions of Microsoft Windows 10 and earlier Windows versions. This flaw allows an unauthorized attacker to execute arbitrary code remotely over a network without user interaction or privileges. Microsoft has released official fixes for all affected versions.
CVE-2026-70343 is a heap-based buffer overflow vulnerability in the Microsoft MPEG-2 Video Extension. This flaw allows an unauthorized attacker to execute code remotely over a network. The vulnerability affects versions from 1.0.0.0 up to but not including 1.2.32.0. Microsoft has released an official fix in version 1.2.32.0. The vulnerability has a high severity with a CVSS score of 8.8, indicating significant impact on confidentiality, integrity, and availability. No known exploits are currently reported in the wild.
CVE-2026-88207 is a heap-based buffer overflow vulnerability in Microsoft Office PowerPoint, part of Microsoft 365 Apps for Enterprise. This flaw allows an unauthorized attacker to execute code remotely over a network. The vulnerability has a high severity score of 7.5 and affects multiple versions prior to fixed releases. Official patches have been released by Microsoft to address this issue.
CVE-2026-88186 is a heap-based buffer overflow vulnerability in Microsoft Office Word within Microsoft 365 Apps for Enterprise. This flaw allows an unauthorized attacker to execute code remotely over a network. The vulnerability has a high severity score of 8.8 and affects multiple versions prior to fixed releases. Official patches have been released by Microsoft to address this issue.
CVE-2026-88185 is a heap-based buffer overflow vulnerability in Microsoft Office Word, part of Microsoft 365 Apps for Enterprise. This flaw allows an unauthorized attacker to execute code remotely over a network. The vulnerability has a high severity score of 8.1 and affects multiple versions prior to specific fixed releases. Official patches have been released by Microsoft to address this issue.
CVE-2026-88163 is an integer overflow or wraparound vulnerability in Microsoft SharePoint Server Subscription Edition. It allows an authorized attacker to execute code remotely over a network. The vulnerability affects versions from 16.0.0 up to but not including 16.0.20326.20190. A patch is available in version 16.0.20326.20190. The vulnerability has a high severity with a CVSS score of 8.8.
CVE-2026-70242 is a critical heap-based buffer overflow vulnerability in Microsoft Office Outlook, part of Microsoft 365 Apps for Enterprise. This flaw allows an unauthorized attacker to execute code remotely over a network without user interaction or privileges. The vulnerability affects specific versions prior to 16.0.14334.20974 and 16.0.17932.21056, where official fixes have been released. The CVSS score of 9.8 reflects the high impact on confidentiality, integrity, and availability.
CVE-2026-70153 is a critical heap-based buffer overflow vulnerability in the Microsoft PostScript Printer Driver affecting multiple versions of Windows 10, including Version 1607. This flaw allows an unauthorized attacker to execute arbitrary code remotely over a network without user interaction. The vulnerability has a CVSS 3.1 score of 9.8, indicating high impact on confidentiality, integrity, and availability. Microsoft has released official fixes for all affected versions.