CVE-2026-88194

An out-of-bounds read vulnerability exists in the Windows DWM Core Library . This flaw allows an authorized attacker to perform a local privilege escalation . The vulnerability is categorized under CWE-125 and has been assigned a CVSS 3.1 score of 7.8 (High) . No specific exploit details or proof...

CVE-2026-88181

An out-of-bounds read vulnerability exists in the Windows DWM Core Library . This flaw allows an authorized attacker to perform a local privilege elevation attack. The vulnerability is categorized under CWE-125 . Specific details regarding the root cause, affected versions, or available exploits ...

CVE-2026-88115

An out-of-bounds read vulnerability exists in Windows Server for NFS , which may allow an unauthorized attacker to achieve remote code execution over a network. The CVSS 3.1 score is 8.8 (HIGH) , indicating significant impact on confidentiality, integrity, and availability. While the vulnerabilit...

CVE-2026-87698

A Windows Remote Access Service Infrastructure component is vulnerable to an out-of-bounds read (CWE-125). This flaw allows an authorized attacker to perform a local information disclosure on the affected system. The CVSS 3.1 score is 5.5, reflecting a medium severity with a local attack vector a...

CVE-2026-85910

A buffer over-read vulnerability exists in the Windows StateRepository API . This flaw allows an authorized attacker to perform a local information disclosure, potentially exposing sensitive data. The vulnerability is associated with CWE-126 . No specific exploit details or active in-the-wild exp...

CVE-2026-85909

An out-of-bounds read vulnerability exists in the Windows Universal Disk Format File System Driver (UDFS) . This flaw allows an authorized attacker to perform a local information disclosure . While specific exploit details are not provided, the vulnerability is associated with CWE-822 (Untrusted ...

CVE-2026-83904

An out-of-bounds read vulnerability exists in the HID Parser Library . This flaw allows an authorized attacker to perform a local information disclosure . The vulnerability is associated with CWE-125 and has a CVSS 3.1 base score of 5.5. No specific software versions or exploit details are provid...

CVE-2026-83898

An out-of-bounds read vulnerability exists in the HID Parser Library . This flaw allows an authorized attacker to perform a local information disclosure , potentially exposing sensitive data from the system. The vulnerability is associated with CWE-125 . While specific affected versions and remed...

CVE-2026-83884

An out-of-bounds read vulnerability exists in the HID Parser Library on Windows. This flaw allows an authorized attacker to perform a local information disclosure . No specific exploit details or information regarding in-the-wild exploitation are provided in the documents.

CVE-2026-83887

An out-of-bounds read vulnerability exists in the HID Parser Library . This flaw allows an authorized attacker to perform a local information disclosure . No specific versions, exploit details, or remediation steps are provided in the documents.

CVE-2026-83870

The Windows Aggregated Data Platform Service is susceptible to an out-of-bounds read vulnerability (CWE-125). This flaw allows an authorized attacker to perform a local information disclosure , potentially exposing sensitive data. The vulnerability has a CVSS 3.1 base score of 5.5 (Medium). No sp...

CVE-2026-83856

An out-of-bounds read vulnerability exists in the Windows Event Logging Service . This flaw allows an unauthorized attacker to achieve remote code execution over a network. The vulnerability is associated with CWE-125 and has a CVSS 3.1 base score of 7.5 . No specific exploit code or remediation ...

CVE-2026-83797

The Windows Partition Management Driver contains an out-of-bounds read vulnerability (CWE-125). This flaw could allow an unauthorized attacker to achieve remote code execution over a network. The vulnerability is rated as HIGH severity with a CVSS 3.1 score of 8.8. Official remediation is availab...

CVE-2026-83794

The Windows Portable Device MTP Driver contains an out-of-bounds read vulnerability. This flaw allows an authorized attacker to perform a local information disclosure , potentially exposing sensitive data. The vulnerability is associated with CWE-125 . While the risk is classified as MEDIUM , the...

CVE-2026-83835

A buffer over-read vulnerability exists in the Windows Common Log File System Driver . This flaw allows an authorized attacker to disclose information locally on the affected system. The vulnerability is associated with CWE-126 and CWE-497 . No specific exploit information or remediation details ...

CVE-2026-83788

A buffer over-read vulnerability exists in the Windows RNDIS component, specifically within rndismp6.sys . This flaw allows an unauthorized attacker to perform an information disclosure by conducting a physical attack . No specific exploit details or in-the-wild exploitation information are provi...

CVE-2026-83765

An out-of-bounds read vulnerability exists in the Windows DWM Core Library . This flaw allows an authorized attacker to perform a local information disclosure . The CVSS 3.1 score is 5.5 (Medium) , with a high impact on confidentiality. No specific exploit information or remediation details are p...

CVE-2026-83737

An out-of-bounds read vulnerability exists in the Windows NTFS file system. This flaw allows an authorized attacker to disclose information locally on the affected system. The vulnerability is associated with CWE-125 and has a CVSS 3.1 score of 5.5. No specific exploit details or remediation vers...

CVE-2026-83747

An out-of-bounds read vulnerability exists in Windows Error Reporting . This flaw allows an authorized attacker to perform a local information disclosure , potentially exposing sensitive data. No specific exploit information or patch versions are provided in the documents beyond the confirmation ...

CVE-2026-83686

The Microsoft Windows Search Component is susceptible to an out-of-bounds read vulnerability. This flaw allows an authorized attacker to disclose information locally. The severity is rated as MEDIUM with a CVSS 3.1 score of 5.5, characterized by a high confidentiality impact and low attack comple...