CVE-2026-83670

An out-of-bounds read vulnerability exists in the Function Discovery Service (fdwsd.dll) . This flaw allows an unauthorized attacker to disclose information over a network. While the specific root cause is not detailed in the provided documents, the impact is classified as a high-severity confide...

CVE-2026-83637

An out-of-bounds read vulnerability exists in Windows Kernel-Mode Drivers . This flaw allows an authorized attacker to achieve local privilege escalation . The vulnerability is assigned a HIGH severity score of 7.8. No specific exploit details or in-the-wild exploitation information are provided ...

CVE-2026-83651

A vulnerability exists in Windows GDI caused by an out-of-bounds read (CWE-125). This flaw allows an unauthorized attacker to disclose information over a network. The vulnerability has a MEDIUM base severity (CVSS 3.1 score of 6.5) and requires user interaction . While the vulnerability is confir...

CVE-2026-83647

An out-of-bounds read vulnerability exists in Active Directory Domain Services . This flaw allows an unauthorized attacker to perform a denial of service (DoS) attack over a network. The vulnerability is categorized under CWE-125 . Official remediation is available via Microsoft, but specific pat...

CVE-2026-83567

A vulnerability exists in Windows NTFS where an out-of-bounds read (CWE-125) allows an authorized attacker to achieve local privilege escalation . The vulnerability has a CVSS 3.1 score of 7.8 (High) . While the documents confirm the existence of an official fix , no specific patch versions or wo...

CVE-2026-83565

A buffer over-read vulnerability exists in the Windows Encrypting File System (EFS) . This flaw allows an authorized attacker to perform a local information disclosure , potentially exposing sensitive data. The vulnerability is associated with CWE-126 . While the documents confirm the existence o...

CVE-2026-83508

Windows NTFS is affected by an out-of-bounds read vulnerability. This flaw allows an authorized attacker to achieve local privilege elevation . While the CVSS v3.1 score indicates a High severity (7.8), specific technical details regarding the affected component, root cause, or exploitability are...

CVE-2026-69454

The Microsoft Azure Attestation service and Device Health Attestation Service are affected by an out-of-bounds read vulnerability (CWE-125). This flaw allows an unauthorized attacker to disclose information over a network. The vulnerability has a CVSS 3.1 score of 7.5 (High) and is mitigated by a...

CVE-2026-69577

The Microsoft Azure Attestation service and Device Health Attestation Service are affected by an out-of-bounds read vulnerability (CWE-125). This flaw allows an unauthorized attacker to disclose information over a network . The vulnerability has a HIGH base severity score of 7.5, as it is remotel...

CVE-2026-70292

An out-of-bounds read vulnerability exists in the Windows Win32 Kernel Subsystem . This flaw allows an authorized attacker to disclose information locally. The vulnerability is categorized under CWE-125 and carries a medium severity score of 5.5. No specific exploit details or remediation version...

CVE-2026-70295

A vulnerability in the Windows Win32 Kernel Subsystem allows an authorized attacker to perform an out-of-bounds read to disclose information locally. The vulnerability is categorized as an information disclosure issue. No specific exploit details or in-the-wild exploitation records are provided i...

CVE-2026-70294

An out-of-bounds read vulnerability exists in the Windows Win32 Kernel Subsystem . This flaw allows an authorized attacker to perform a local information disclosure , potentially exposing sensitive data. The vulnerability is associated with CWE-125 (Out-of-bounds Read) and CWE-20 (Improper Input ...

CVE-2026-70208

An out-of-bounds read vulnerability exists in Windows HTTP.sys . This flaw allows an authorized attacker to perform a local information disclosure. The vulnerability is rated as MEDIUM severity (CVSS 3.1 score of 5.5) with a focus on high confidentiality impact. Remediation involves an official f...

CVE-2026-70211

An out-of-bounds read vulnerability exists in the Windows Win32 Kernel Subsystem . This flaw allows an authorized attacker to perform a local information disclosure . The vulnerability is classified as CWE-125 and has a CVSS 3.1 base score of 5.5 (Medium) . No specific exploit details or in-the-w...

CVE-2026-70201

An out-of-bounds read vulnerability exists in the Windows DHCP Server . This flaw allows an authorized attacker to perform a local denial of service (DoS). The vulnerability is associated with CWE-125 (Out-of-bounds Read) and CWE-416 (Use After Free). Official remediation is available through a M...

CVE-2026-70074

A vulnerability in Windows DNS involves an out-of-bounds read (CWE-125) that allows an authorized attacker to disclose information locally. The impact is characterized as a local information disclosure with a Medium severity rating (CVSS 3.1 score of 5.5). An official fix is available, and no spe...

CVE-2026-69999

An out-of-bounds read vulnerability exists in Windows Update (CWE-125). This flaw allows an authorized attacker to perform a local information disclosure , potentially exposing sensitive data. The vulnerability has a CVSS 3.1 base score of 5.5 (Medium) . No specific exploit details or evidence of...

CVE-2026-97755

An out-of-bounds read vulnerability in Microsoft Office Excel allows an unauthorized attacker to execute arbitrary code over a network. The vulnerability has a High severity (CVSS 3.1 score of 8.8 ) and requires user interaction, such as the victim opening a malicious file or clicking a malicious...

CVE-2026-97744

A vulnerability exists in Microsoft Office PowerPoint due to an out-of-bounds read condition. This flaw allows an unauthorized attacker to disclose information locally . Microsoft has released updates to address this vulnerability, and users are advised to install them. Exploitation details are n...

CVE-2026-97005

An out-of-bounds read vulnerability in Microsoft Office PowerPoint allows an unauthorized attacker to disclose information locally. The vulnerability results in access to sensitive data with a CVSSv3.1 base score of 5.5 . Microsoft has released updates to address this issue, and users are advised...