CVE-2026-96854

Access of resource using incompatible type 'type confusion' in Windows Device Association Service allows an authorized attacker to disclose information locally...

CVE-2026-88140

Out-of-bounds read in Windows Key Storage Provider allows an authorized attacker to disclose information locally...

CVE-2026-85910

Buffer over-read in Windows StateRepository API allows an authorized attacker to disclose information locally...

CVE-2026-69506

The Windows Key Storage Provider is vulnerable to an out-of-bounds read (CWE-125). This vulnerability allows an authorized attacker to disclose information locally . The vulnerability is assigned a CVSS 3.1 base score of 4.7 (Medium) , characterized by a LOCAL attack vector and HIGH confidentiali...

CVE-2026-70227

An out-of-bounds read vulnerability exists in the Windows Device Association Service . This flaw allows an authorized attacker to perform a local information disclosure, potentially revealing sensitive data. No specific exploit code or in-the-wild exploitation details are provided in the document...

CVE-2026-83664

The Windows Portable Device File System Driver is vulnerable to a type confusion issue (CWE-843). This flaw allows an authorized attacker to perform a local information disclosure , potentially exposing sensitive data. No specific exploit details or in-the-wild exploitation instances are provided...

CVE-2026-96849

A use of uninitialized resource vulnerability in Windows Kernel-Mode Drivers allows an authorized attacker to perform a local information disclosure . The vulnerability is associated with CWE-904 . No specific software versions, root cause details, or exploit links are provided in the documentati...

CVE-2026-85938

The Windows Broadcast DVR User Service is impacted by an improper access control vulnerability (CWE-862). This flaw allows an authorized attacker to perform a local information disclosure attack. The vulnerability has been assigned a CVSS 3.1 base score of 5.5 (Medium) , with a high impact on con...

CVE-2026-83713

An out-of-bounds read vulnerability exists in the Windows Universal Disk Format File System Driver (UDFS) . This flaw allows an authorized attacker to disclose information locally. The vulnerability is categorized under CWE-497 (Exposure of Sensitive System Information to an Unauthorized Control ...

CVE-2026-70017

A type confusion vulnerability exists in Windows Secure Kernel Mode , where accessing a resource using an incompatible type allows an authorized attacker to perform a local information disclosure . The vulnerability is assigned CWE-843 . No specific patch versions, exploit links, or additional te...

CVE-2026-69969

The Windows AppX Deployment Service is vulnerable to an information disclosure vulnerability (CVE-2026-69969) due to improper link resolution before file access (link following). An authorized attacker can exploit this flaw to disclose information locally. Exploitation details and specific remedi...

CVE-2026-105726

A vulnerability exists in Microsoft Defender involving an out-of-bounds read (CWE-125). This flaw allows an authorized attacker to perform a local information disclosure , potentially exposing sensitive data. The impact is categorized as high confidentiality with a Medium base severity score. Off...

CVE-2026-96183

A vulnerability exists in the Windows Health and Optimized Experiences Service due to missing authentication for a critical function. This flaw allows an authorized attacker to perform a local information disclosure . The vulnerability is assigned CWE-306 and has an official fix available. No spe...

Microsoft Windows Search Component Information Disclosure Vulnerability

Out-of-bounds read in Microsoft Windows Search Component allows an authorized attacker to disclose information locally...

PT-2026-113131

Integer underflow wrap or wraparound in Windows NTFS allows an authorized attacker to disclose information locally...

CVE-2012-5519

cups-root-file-read.sh ⭐ a bash implementation of the metasploit 'cupsrootfileread.rb' module designed for pentesting and CTFs. mainly a short exercise in bash scripting. intended to be a self-contained program that exploits CVE-2012-5519 on linux systems; it provides the user with an interactive...

CVE-2026-108505

ZTE Z80 Ultra has a local information disclosure vulnerability. Third-party applications can capture data returned by system interfaces to obtain device-related information...

CVE-2026-0198

In ispdallowed of gemmsg.c, there is a possible permission bypass due to a missing permission check. This could lead to local information disclosure with System execution privileges needed. User interaction is not needed for exploitation...

CVE-2026-55307

In kdnsetsysregsprot of hwcrypto-kdn.c, there is a possible information disclosure due to a logic error in the code. This could lead to local information disclosure with System execution privileges needed. User interaction is not needed for exploitation...

CVE-2026-0198

In ispdallowed of gemmsg.c, there is a possible permission bypass due to a missing permission check. This could lead to local information disclosure with System execution privileges needed. User interaction is not needed for exploitation...