P1Exploit
DNS Server Flaw Allows Remote Code Execution
Heap-based buffer overflow · Microsoft advisory
Microsoft’s Security Update Guide describes a heap-based buffer overflow in DNS Server that allows an unauthorized attacker to execute code over a network.1
CVE-2026-81384: CVSS 8.1
- 1MICROSOFT SECURITY UPDATE GUIDE · CVE-2026-81384 Windows DNS Server Remote Code Execution Vulnerability
P1Exploit
SQL Server Flaw Allows Remote Code Execution
Heap-based buffer overflow · Microsoft advisory
Microsoft’s Security Update Guide describes a heap-based buffer overflow in SQL Server that allows an authorized attacker to execute code over a network.1
CVE-2026-94511: CVSS 8.8
- 1MICROSOFT SECURITY UPDATE GUIDE · CVE-2026-94511: SQL Server Remote Code Execution Vulnerability
P1Exploit
ODBC Driver Flaw Allows Remote Code Execution
Heap-based buffer overflow · Microsoft advisory
Microsoft’s Security Update Guide describes a heap-based buffer overflow in Windows ODBC Driver that allows an unauthorized attacker to execute code over a network.1
CVE-2026-108411: CVSS 8.8
- 1MICROSOFT SECURITY UPDATE GUIDE · CVE-2026-108411 Microsoft ODBC Driver Remote Code Execution Vulnerability
P2Exploit
Raw Image Extension Flaw Allows Remote Code Execution
Heap-based buffer overflow · Microsoft advisory
Microsoft’s Security Update Guide describes a heap-based buffer overflow in Windows Raw Image Extension that allows an unauthorized attacker to execute code over a network.1
CVE-2026-114169: CVSS 8.8
- 1MICROSOFT SECURITY UPDATE GUIDE · CVE-2026-114169 Windows Raw Image Extension Remote Code Execution
P2Exploit
DHCP Server Flaw Allows Remote Code Execution
Time-of-check time-of-use race condition · Microsoft advisory
Microsoft’s Security Update Guide describes a time-of-check time-of-use race condition in Windows DHCP Server that allows an authorized attacker to execute code over a network.1
CVE-2026-88216: CVSS 7.5
- 1MICROSOFT SECURITY UPDATE GUIDE · CVE-2026-88216 Windows DHCP Server Remote Code Execution Vulnerability