CVE-2026-80077 Remote Desktop Client Remote Code Execution Vulnerability
Heap-based buffer overflow in Remote Desktop Client allows an unauthorized attacker to execute code over a network.
EPSS 0.01 CVE-2026-80077 US
Heap-based buffer overflow in Remote Desktop Client allows an unauthorized attacker to execute code over a network.
EPSS 0.01 CVE-2026-80077 US
Heap-based buffer overflow in Remote Desktop Client allows an unauthorized attacker to execute code over a network.
EPSS 0.01 CVE-2026-80074 US
Use after free in Windows DNS allows an unauthorized attacker to deny service over a network.
EPSS 0.01 CVE-2026-78523 US
Improper neutralization of special elements in output used by a downstream component ('injection') in SQL Server allows an unauthorized attacker to elevate privileges over a network.
EPSS 0.01 CVE-2026-65669 Microsoft US
Buffer over-read in SQL Server allows an authorized attacker to disclose information over a network.
EPSS 0.01 CVE-2026-73029 Microsoft US
Heap-based buffer overflow in SQL Server allows an authorized attacker to execute code over a network.
EPSS 0.01 CVE-2026-68786 Microsoft US
Heap-based buffer overflow in SQL Server allows an authorized attacker to execute code over a network.
EPSS 0.01 CVE-2026-67643 Microsoft US
Out-of-bounds read in SQL Server allows an authorized attacker to execute code over a network.
EPSS 0.01 CVE-2026-67636 Microsoft US
Out-of-bounds read in Microsoft Office Excel allows an unauthorized attacker to execute code over a network.
EPSS 0.01 CVE-2026-78518 Microsoft US
Out-of-bounds read in SQL Server allows an authorized attacker to disclose information over a network.
EPSS 0.01 CVE-2026-67389 Microsoft US
Heap-based buffer overflow in Microsoft Office Outlook allows an unauthorized attacker to execute code over a network.
EPSS 0.01 CVE-2026-78509 Microsoft US
Heap-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code over a network.
EPSS 0.01 CVE-2026-78517 Microsoft US
Stack-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code over a network.
EPSS 0.01 CVE-2026-78504 Microsoft US
Out-of-bounds read in Microsoft Office PowerPoint allows an unauthorized attacker to disclose information locally.
EPSS 0.01 CVE-2026-78513 Microsoft US
Out-of-bounds read in Windows CD-ROM Driver allows an unauthorized attacker to disclose information with a physical attack.
EPSS < 0.01 CVE-2026-78508 US
Heap-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code over a network.
EPSS < 0.01 CVE-2026-78510 Microsoft US
Heap-based buffer overflow in Microsoft Office allows an unauthorized attacker to execute code over a network.
EPSS 0.01 CVE-2026-78505 Microsoft US
Out-of-bounds read in Microsoft Office Excel allows an unauthorized attacker to disclose information over a network.
EPSS 0.01 CVE-2026-78515 Microsoft US
Out-of-bounds read in Microsoft Office Word allows an unauthorized attacker to disclose information over a network.
EPSS 0.01 CVE-2026-78502 Microsoft US
Heap-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code over a network.
EPSS 0.01 CVE-2026-78511 Microsoft US
Integer overflow or wraparound in SQL Server allows an authorized attacker to execute code over a network.
EPSS 0.01 CVE-2026-67384 Microsoft US
Generation of error message containing sensitive information in SQL Server allows an authorized attacker to disclose information over a network.
EPSS 0.01 CVE-2026-67383 Microsoft US
Stack-based buffer overflow in SQL Server allows an authorized attacker to execute code over a network.
EPSS 0.01 CVE-2026-67379 Microsoft US
Integer overflow or wraparound in SQL Server allows an unauthorized attacker to deny service over a network.
EPSS 0.01 CVE-2026-67376 Microsoft US
Improper control of generation of code ('code injection') in Remote Desktop Client allows an unauthorized attacker to execute code over a network.
EPSS 0.01 CVE-2026-78463 US
Untrusted pointer dereference in SQL Server allows an authorized attacker to execute code over a network.
EPSS 0.01 CVE-2026-67378 Microsoft US
Improper limitation of a pathname to a restricted directory ('path traversal') in Visual Studio Code allows an unauthorized attacker to bypass a security feature over a network.
EPSS 0.01 CVE-2026-78461 US
Stack-based buffer overflow in Microsoft Graphics Component allows an unauthorized attacker to execute code over a network.
EPSS 0.01 CVE-2026-78439 Microsoft US
Insufficiently protected credentials in Azure CycleCloud allows an authorized attacker to disclose information over a network.
EPSS 0.01 CVE-2026-77909 US
Improper control of generation of code ('code injection') in Microsoft Dynamics 365 allows an authorized attacker to execute code over a network.
EPSS 0.01 CVE-2026-77908 Microsoft US
Heap-based buffer overflow in Visual Studio allows an unauthorized attacker to execute code over a network.
EPSS 0.01 CVE-2026-77907 US
Heap-based buffer overflow in Windows Volume Manager Extension Driver allows an authorized attacker to elevate privileges locally.
EPSS < 0.01 CVE-2026-77904 US
Use after free in Windows Security Center allows an authorized attacker to elevate privileges locally.
EPSS < 0.01 CVE-2026-77899 US
Heap-based buffer overflow in Microsoft Office allows an unauthorized attacker to execute code over a network.
EPSS 0.01 CVE-2026-77898 Microsoft US
Improper access control in Microsoft Office SharePoint allows an authorized attacker to execute code over a network.
EPSS 0.01 CVE-2026-69282 Microsoft US
Improper access control in Microsoft Office SharePoint allows an authorized attacker to execute code over a network.
EPSS 0.01 CVE-2026-69273 Microsoft US
Heap-based buffer overflow in Microsoft Office allows an unauthorized attacker to execute code over a network.
EPSS 0.01 CVE-2026-69285 Microsoft US
Improper access control in Microsoft Office SharePoint allows an authorized attacker to execute code over a network.
EPSS 0.01 CVE-2026-69268 Microsoft US
Integer overflow or wraparound in Remote Desktop Client allows an unauthorized attacker to deny service over a network.
EPSS 0.01 CVE-2026-77896 US
Out-of-bounds read in Windows DHCP Server allows an unauthorized attacker to deny service over a network.
EPSS 0.01 CVE-2026-77895 US
Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Installer allows an authorized attacker to elevate privileges locally.
EPSS < 0.01 CVE-2026-77894 US
Out-of-bounds read in Windows DHCP Server allows an unauthorized attacker to deny service over a network.
EPSS 0.01 CVE-2026-77893 US
No cwe for this issue in Windows Boot Manager allows an unauthorized attacker to elevate privileges with a physical attack.
EPSS < 0.01 CVE-2026-77892 US
Out-of-bounds read in Windows DHCP Server allows an authorized attacker to execute code locally.
EPSS < 0.01 CVE-2026-77891 US
Access of resource using incompatible type ('type confusion') in Windows DHCP Server allows an unauthorized attacker to deny service over a network.
EPSS 0.01 CVE-2026-77889 US
Access of resource using incompatible type ('type confusion') in Windows DHCP Server allows an unauthorized attacker to deny service over a network.
EPSS 0.01 CVE-2026-77890 US
Out-of-bounds read in Windows DHCP Server allows an unauthorized attacker to deny service over a network.
EPSS 0.01 CVE-2026-77886 US
Access of resource using incompatible type ('type confusion') in Windows DHCP Server allows an unauthorized attacker to deny service over a network.
EPSS 0.01 CVE-2026-77888 US
Use after free in DNS Server allows an unauthorized attacker to execute code over a network.
EPSS 0.01 CVE-2026-77505 US
Double free in Microsoft Office Word allows an unauthorized attacker to execute code over a network.
EPSS 0.01 CVE-2026-77504 Microsoft US
Out-of-bounds read in Windows DHCP Server allows an authorized attacker to execute code locally.
EPSS < 0.01 CVE-2026-77887 US
Out-of-bounds read in Windows NTFS allows an unauthorized attacker to elevate privileges locally.
EPSS < 0.01 CVE-2026-77503 US
Out-of-bounds read in Windows DHCP Server allows an unauthorized attacker to deny service over a network.
EPSS 0.01 CVE-2026-77502 US
Out-of-bounds read in Windows DHCP Server allows an unauthorized attacker to deny service over a network.
EPSS 0.01 CVE-2026-77501 US
Access of resource using incompatible type ('type confusion') in Windows DHCP Server allows an unauthorized attacker to deny service over a network.
EPSS 0.01 CVE-2026-77499 US
Release of invalid pointer or reference in Windows Device Association Service allows an authorized attacker to elevate privileges locally.
EPSS < 0.01 CVE-2026-77500 US
Out-of-bounds read in Windows DHCP Server allows an unauthorized attacker to deny service over a network.
EPSS 0.01 CVE-2026-77498 US
Access of resource using incompatible type ('type confusion') in Windows DHCP Server allows an unauthorized attacker to deny service over a network.
EPSS 0.01 CVE-2026-77494 US
Double free in Microsoft Graphics Component allows an unauthorized attacker to execute code over a network.
EPSS 0.01 CVE-2026-77493 Microsoft US
Out-of-bounds read in Storage Port Driver allows an authorized attacker to disclose information locally.
EPSS < 0.01 CVE-2026-77492 US