Month: August 2026

Deserialization of untrusted data in Microsoft Dynamics 365 (on-premises) allows an authorized attacker to execute code over a network. Continue reading CVE-2026-65815 Microsoft Dynamics 365 On-Premises Remote Code Execution Vulnerability→

Integer overflow or wraparound in Windows GDI+ allows an unauthorized attacker to execute code over a network. Continue reading CVE-2026-62822 Windows GDI+ Remote Code Execution Vulnerability→

Heap-based buffer overflow in Windows Storage Port Driver allows an authorized attacker to elevate privileges locally. Continue reading CVE-2026-65814 Microsoft Windows Storage Port Driver Elevation of Privilege Vulnerability→

Heap-based buffer overflow in Windows DHCP Server allows an unauthorized attacker to execute code over an adjacent network. Continue reading CVE-2026-62823 Windows DHCP Server Remote Code Execution Vulnerability→

Server-side request forgery (ssrf) in Microsoft Exchange Server allows an authorized attacker to elevate privileges over a network. Continue reading CVE-2026-65813 Microsoft Exchange Server Elevation of Privilege Vulnerability→

Heap-based buffer overflow in Windows HTTP.sys allows an authorized attacker to elevate privileges locally. Continue reading CVE-2026-62811 Windows HTTP.sys Elevation of Privilege Vulnerability→

Improper input validation in Power BI allows an authorized attacker to execute code over a network. Continue reading CVE-2026-65811 Power BI Remote Code Execution Vulnerability→

Improper link resolution before file access (‘link following’) in Windows DHCP Server allows an authorized attacker to elevate privileges locally. Continue reading CVE-2026-62803 Windows DHCP Server Elevation of Privilege Vulnerability→