CVE-2026-69493

CVE-2026-69493 is a critical (CVSS 9.8) out-of-bounds read vulnerability in Windows Event Logging Service , as assigned by Microsoft . The flaw allows an unauthorized, network-based attacker to achieve remote code execution without user interaction, with high impact to confidentiality, integrity,...

EUVD-2026-73520

Out-of-bounds read in Windows Image Acquisition allows an authorized attacker to disclose information locally...

CVE-2026-69483

CVE-2026-69483 is an out-of-bounds read vulnerability in Windows Image Acquisition (WIA) that allows an authorized, local attacker to achieve information disclosure with high confidentiality impact . The CVSS 3.1 score is 4.7 (Medium) , with a vector of AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N, indica...

EUVD-2026-73518

Out-of-bounds read in Windows CD-ROM Driver allows an authorized attacker to elevate privileges locally...

CVE-2026-69561

CVE-2026-69561 is an out-of-bounds read vulnerability in the Windows CD-ROM Driver that allows an authorized attacker to achieve local privilege escalation . The flaw resides in how the driver reads memory beyond its allocated bounds, potentially allowing an attacker with local low-privilege acce...

CVE-2026-69427

CVE-2026-69427 is an out-of-bounds read vulnerability in the Windows VOLSNAP.SYS driver (Volume Shadow Copy service). An authorized attacker can exploit it over a network to elevate privileges . The CVSS 3.1 base score is 8.0 (HIGH) with a vector of AV:N/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H , indicatin...

EUVD-2026-73498

Out-of-bounds read in Windows VOLSNAP.SYS allows an authorized attacker to elevate privileges over a network...

EUVD-2026-73494

Out-of-bounds read in Windows LDAP - Lightweight Directory Access Protocol allows an unauthorized attacker to deny service over a network...

CVE-2026-69428

Windows LDAP (Lightweight Directory Access Protocol) is vulnerable to an out-of-bounds read that allows an unauthorized, network-based attacker to cause a denial of service , with a CVSS 3.1 base score of 7.5 (HIGH) . The vulnerability requires no privileges and no user interaction, though it imp...

EUVD-2026-73492

Buffer over-read in Windows DHCP Server allows an authorized attacker to deny service over an adjacent network...

CVE-2026-69416

CVE-2026-69416 is a buffer over-read in Windows DHCP Server that allows an authorized attacker with low privileges on an adjacent network to cause a denial of service , with high availability impact and no confidentiality or integrity impact (CVSS 3.1: 5.7 MEDIUM ). CISA assesses exploitation as ...

EUVD-2026-73485

Out-of-bounds read in Windows Spaceport.sys allows an authorized attacker to disclose information over a network...

CVE-2026-69393

CVE-2026-69393 is an out-of-bounds read in the Windows Spaceport.sys kernel driver that allows an authorized attacker to disclose information over a network . The vulnerability is rated CVSS 3.1: 5.7 (MEDIUM) with a vector of AV:N/AC:L/PR:L/UI:R/S:U/C:H/I:N/A:N, reflecting that an attacker with l...

EUVD-2026-73478

Out-of-bounds read in Windows DNS allows an authorized attacker to disclose information locally...

CVE-2026-69369

CVE-2026-69369 is an out-of-bounds read in Windows DNS that allows an authorized local attacker to disclose information. The CVSS 3.1 score is 5.5 (Medium) with a local attack vector, low privileges required, and high impact to confidentiality only. CISA's SSVC assessment indicates no known explo...

EUVD-2026-73476

Out-of-bounds read in Microsoft Local Security Authority Server lsasrv allows an authorized attacker to elevate privileges over a network...

CVE-2026-69365

CVE-2026-69365 is an out-of-bounds read in Microsoft Local Security Authority Server (lsasrv) that allows an authorized attacker to escalate privileges over a network. The vulnerability carries a CVSS 3.1 score of 8.0 (High) with a vector of AV:N/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H, indicating that ex...

EUVD-2026-73474

Out-of-bounds read in Windows Network File System allows an authorized attacker to deny service over a network...

CVE-2026-69372

CVE-2026-69372 is an out-of-bounds read in Windows Network File System (NFS) that allows an authorized attacker (low privileges) to trigger a denial of service over a network. The attack vector is network-based with low complexity, but user interaction is required . CVSS v3.1 base score is 5.7 (M...

CVE-2026-69376

CVE-2026-69376 is an out-of-bounds read vulnerability in Microsoft Standard XPS that allows an authorized local attacker to disclose information . The CVSS 3.1 score is 5.5 (Medium) with a vector of AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N, indicating local attack, low complexity, low privileges requi...