CVE-2026-70318

Improper input validation in Microsoft Office Excel allows an unauthorized attacker to disclose information locally...

CVE-2026-59131

No cwe for this issue in AMD Zen allows an authorized attacker to disclose information locally...

CVE-2026-59136

Use of uninitialized resource in Microsoft COM for Windows allows an authorized attacker to disclose information locally...

PT-2026-70410

Name of the Vulnerable Software and Affected Versions AMD Zen affected versions not specified Description An issue in AMD Zen allows an authorized attacker to locally disclose sensitive information, which can affect the system. Recommendations At the moment, there is no information about a newer...

PT-2026-70620

Name of the Vulnerable Software and Affected Versions Microsoft Office affected versions not specified Description An out-of-bounds read allows an unauthorized attacker to locally disclose sensitive information, which can impact the system. Recommendations At the moment, there is no information...

PT-2026-70472

Name of the Vulnerable Software and Affected Versions Windows GDI+ affected versions not specified Description The use of an uninitialized resource in Windows GDI+ allows an authorized attacker to disclose information locally. Recommendations At the moment, there is no information about a newer...

PT-2026-70759

Improper input validation in Microsoft Office PowerPoint allows an unauthorized attacker to disclose information locally...

CVE-2025-26424

In multiple functions of VpnManager.java, there is a possible cross-user data leak due to a logic error in the code. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation...

CVE-2017-13309

In readEncryptedData of ConscryptEngine.java, there is a possible plaintext leak due to improperly used crypto. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation...

CVE-2024-32926

Technical details (affected products/versions/root cause/fix) are not publicly provided in the supplied documents; monitor for updates.

CVE-2024-29747

In dvfsgetlv of dvfs.c, there is a possible out of bounds read due to a missing null check. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation...

CVE-2024-20055

In imgsys, there is a possible information disclosure due to a missing bounds check. This could lead to local information disclosure with System execution privileges needed. User interaction is needed for exploitation Patch ID: ALPS08518692; Issue ID: MSV-1012...

CVE-2024-20041

In da, there is a possible out of bounds read due to a missing bounds check. This could lead to local information disclosure with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS08541746; Issue ID: ALPS08541746...

CVE-2024-27230

In ProtocolPsKeepAliveStatusAdapter::getCode of protocolpsadapter.cpp, there is a possible out of bounds read due to a missing bounds check. This could lead to local information disclosure with baseband firmware compromise required. User interaction is not needed for exploitation...

CVE-2024-22007

CVE-2024-22007 involves a bound-check omission in the constraint_check path of fvp.c, causing a possible out-of-bounds read and local information disclosure without requiring user interaction. The issue is documented across multiple sources (NVD/Red Hat/PRION/CVE lists) and is associated with Goo...

CVE-2024-20030

CVE-2024-20030 affects the MediaTek-related component “da” module. The root cause is improper input validation leading to local information disclosure; exploitation requires no user interaction, but local privileges are needed. The entry notes a patch/mitigation identified as Patch ID ALPS0854163...

CVE-2024-20020

In OPTEE, there is a possible out of bounds write due to an incorrect bounds check. This could lead to local information disclosure with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS08522504; Issue ID: ALPS08522504...

CVE-2024-0017

In shouldUseNoOpLocation of CameraActivity.java, there is a possible confused deputy due to a permissions bypass. This could lead to local information disclosure with no additional execution privileges needed. User interaction is needed for exploitation...

CVE-2023-40093

CVE-2023-40093 is an information-disclosure vulnerability in Google Android where trimmed content could be included in PDF output due to a logic error. It allows local information disclosure with no user interaction; confidentiality is impacted. Public sources cite this CVE in Android security bu...

Information disclosure

In keyInstall, there is a possible information disclosure due to a missing bounds check. This could lead to local information disclosure with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS08308612; Issue ID: ALPS08308612...