| CVE-2026-96314 | Out-of-bounds read in Windows Audio Service allows an authorized attacker to disclose information locally. | medium | |
| CVE-2026-70031 | Heap-based buffer overflow in Windows iSCSI allows an unauthorized attacker to deny service over a network. | high | |
| CVE-2026-97751 | Heap-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code over a network. | high | |
| CVE-2026-108127 | Out-of-bounds read in DNS Server allows an authorized attacker to disclose information over a network. | medium | |
| CVE-2026-97757 | Heap-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code over a network. | high | |
| CVE-2026-96915 | Integer overflow or wraparound in Windows Kernel-Mode Drivers allows an authorized attacker to elevate privileges locally. | high | |
| CVE-2026-70074 | Out-of-bounds read in Windows DNS allows an authorized attacker to disclose information locally. | medium | |
| CVE-2026-97769 | Heap-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code over a network. | high | |
| CVE-2026-96996 | Heap-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code locally. | high | |
| CVE-2026-70202 | Server-side request forgery (ssrf) in Microsoft Office SharePoint allows an authorized attacker to elevate privileges over a network. | high | |
| CVE-2026-97763 | Heap-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code over a network. | high | |
| CVE-2026-97773 | Heap-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code over a network. | high | |
| CVE-2026-70215 | Use after free in Microsoft Office PowerPoint allows an unauthorized attacker to execute code over a network. | high | |
| CVE-2026-97776 | Heap-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code over a network. | high | |
| CVE-2026-97826 | Out-of-bounds read in DNS Server allows an authorized attacker to disclose information over a network. | medium | |
| CVE-2026-97844 | Out-of-bounds read in DNS Server allows an authorized attacker to disclose information over a network. | medium | |
| CVE-2026-70301 | Heap-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code over a network. | high | |
| CVE-2026-69998 | Use after free in Remote Desktop Client allows an unauthorized attacker to execute code over a network. | high | |
| CVE-2026-83889 | Release of invalid pointer or reference in DNS Server allows an authorized attacker to execute code over a network. | high | |
| CVE-2026-84012 | Double free in Remote Desktop Gateway Service allows an unauthorized attacker to execute code over a network. | high | |
| CVE-2026-84018 | Use after free in Windows Print Spooler Components allows an authorized attacker to elevate privileges locally. | high | |
| CVE-2026-85328 | Weak authentication in Windows Projected File System allows an authorized attacker to elevate privileges locally. | high | |
| CVE-2026-85792 | Remote Code Execution in Windows Routing and Remote Access Service (RRAS) allows attacker to gain an unauthorized access to victim's machine | critical | |
| CVE-2026-70269 | Heap-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code over a network. | high | |
| CVE-2026-85793 | Exposure of sensitive system information to an unauthorized control sphere in Windows Sysmain Service allows an authorized attacker to disclose information locally. | medium | |
| CVE-2026-70266 | Improper neutralization of special elements used in an sql command ('sql injection') in Microsoft Office SharePoint allows an authorized attacker to elevate privileges over a network. | high | |
| CVE-2026-88098 | Untrusted pointer dereference in Windows Security Support Provider Interface allows an authorized attacker to elevate privileges locally. | high | |
| CVE-2026-88070 | Out-of-bounds read in Windows BitLocker allows an authorized attacker to elevate privileges locally. | high | |
| CVE-2026-88153 | Out-of-bounds read in Microsoft Office Excel allows an unauthorized attacker to disclose information over a network. | medium | |
| CVE-2026-88080 | Use after free in Windows Installer allows an authorized attacker to elevate privileges locally. | high | |
| CVE-2026-88154 | Out-of-bounds read in Microsoft Office Excel allows an unauthorized attacker to disclose information over a network. | medium | |
| CVE-2026-88203 | Untrusted pointer dereference in Microsoft Office PowerPoint allows an unauthorized attacker to disclose information over a network. | medium | |
| CVE-2026-88123 | Out-of-bounds read in DNS Server allows an authorized attacker to deny service over a network. | medium | |
| CVE-2026-96186 | Deserialization of untrusted data in Microsoft Windows Media Foundation allows an authorized attacker to elevate privileges locally. | high | |
| CVE-2026-96916 | Heap-based buffer overflow in Windows NTFS allows an authorized attacker to elevate privileges locally. | high | |
| CVE-2026-92539 | A service account with user-management permissions in one organization can read, modify, disable or delete users belonging to other organizations on the same Grafana instance through the SCIM API (insecure direct object reference). Only Grafana Enterprise instances with SCIM enabled are affected. | medium | |
| CVE-2026-100222 | Heap-based buffer overflow in Network Policy Server (NPS) allows an unauthorized attacker to execute code over a network. | critical | |
| CVE-2026-102197 | Use after free in Windows Broadcast DVR User Service allows an authorized attacker to elevate privileges locally. | high | |
| CVE-2026-102196 | Use after free in Windows Broadcast DVR User Service allows an authorized attacker to elevate privileges locally. | high | |
| CVE-2026-96851 | Buffer over-read in Windows Management Instrumentation allows an authorized attacker to disclose information locally. | medium | |
| CVE-2026-85817 | Reliance on untrusted inputs in a security decision in Windows PowerShell allows an unauthorized attacker to execute code over a network. | high | |
| CVE-2026-97010 | Use after free in Microsoft Office Excel allows an unauthorized attacker to execute code over a network. | high | |
| CVE-2026-96995 | Stack-based buffer overflow in Microsoft Office Word allows an authorized attacker to elevate privileges locally. | high | |
| CVE-2026-87716 | Heap-based buffer overflow in Windows Storage Spaces Controller allows an unauthorized attacker to deny service over a network. | high | |
| CVE-2026-97820 | Out-of-bounds read in DNS Server allows an authorized attacker to disclose information over a network. | medium | |
| CVE-2026-97842 | Out-of-bounds read in DNS Server allows an authorized attacker to disclose information over a network. | medium | |
| CVE-2026-88175 | Out-of-bounds read in Microsoft Office Excel allows an unauthorized attacker to disclose information over a network. | medium | |
| CVE-2026-85904 | Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Device Association Service allows an authorized attacker to elevate privileges locally. | high | |
| CVE-2026-96305 | Use after free in Windows Installer allows an authorized attacker to elevate privileges locally. | high | |
| CVE-2026-96071 | Heap-based buffer overflow in Windows Media allows an unauthorized attacker to execute code over a network. | high | |
