CVE-2026-68875

CVE-2026-68875 is a buffer over-read in Windows NTFS that allows an authorized local attacker to achieve code execution . The vulnerability is rated CVSS 3.1 7.8 (High) with a local attack vector, low complexity, low privileges required, and no user interaction needed. No exploitation details or ...

EUVD-2026-73201

Buffer over-read in Windows NTFS allows an authorized attacker to disclose information locally...

CVE-2026-68851

CVE-2026-68851 is a buffer over-read vulnerability in Windows NTFS that allows an authorized local attacker to disclose information . The CVSS 3.1 score is 5.5 (Medium) with a local attack vector, low complexity, low privileges required, and no user interaction; impact is limited to high confiden...

CVE-2026-68849

CVE-2026-68849 is an out-of-bounds read vulnerability in the Windows Bluetooth Port Driver that allows an authorized local attacker to disclose information . The attack requires low privileges and high complexity , with no user interaction needed. The impact is limited to confidentiality (high), ...

EUVD-2026-73198

Out-of-bounds read in Windows Bluetooth Port Driver allows an authorized attacker to disclose information locally...

CVE-2026-68784

CVE-2026-68784 is an out-of-bounds read vulnerability in Microsoft SQL Server that allows an authorized attacker to disclose information over a network . The CVSS v3.1 score is 6.5 (Medium) with the vector AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N, indicating a high confidentiality impact with low priv...

EUVD-2026-73188

Out-of-bounds read in SQL Server allows an authorized attacker to disclose information over a network...

EUVD-2026-73186

Out-of-bounds read in SQL Server allows an authorized attacker to deny service over a network...

CVE-2026-68781

CVE-2026-68781 is an out-of-bounds read vulnerability in Microsoft SQL Server that allows an authorized attacker to disclose information over a network. The flaw requires low privileges and no user interaction , with low attack complexity . The CVSS 3.1 base score is 6.5 (MEDIUM) , reflecting a h...

EUVD-2026-73187

Out-of-bounds read in SQL Server allows an authorized attacker to disclose information over a network...

CVE-2026-67633

Microsoft SQL Server is affected by an out-of-bounds read vulnerability that allows an authorized attacker (low privileges) to trigger a denial of service over the network. The CNA-assigned CVSS 3.1 score is 6.5 (MEDIUM) , reflecting network attack vector, low complexity, and high availability im...

EUVD-2026-73184

Out-of-bounds read in SQL Server allows an authorized attacker to disclose information over a network...

CVE-2026-67630

CVE-2026-67630 is an out-of-bounds read vulnerability in Microsoft SQL Server that allows an authorized attacker to disclose information over a network . The CVSS 3.1 score is 6.5 (MEDIUM) , with low attack complexity, low privileges required, no user interaction, and high impact on confidentiali...

EUVD-2026-73183

Out-of-bounds read in SQL Server allows an authorized attacker to disclose information over a network...

CVE-2026-67629

CVE-2026-67629 is an out-of-bounds read vulnerability in Microsoft SQL Server that allows an authorized attacker (low privileges) to disclose information over a network . The CVSS 3.1 score is 6.5 (Medium) with a vector of AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N, reflecting high confidentiality impac...

EUVD-2026-73165

Out-of-bounds read in Microsoft Windows Media Foundation allows an unauthorized attacker to execute code over a network...

CVE-2026-62706

CVE-2026-62706 is an out-of-bounds read in Microsoft Windows Media Foundation that allows an unauthorized attacker to execute code over a network. The CVSS 3.1 score is 8.8 (HIGH) with a vector of AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H , meaning exploitation requires user interaction but no prior au...

CVE-2024-34693

CVE-2024-34693: Apache Superset におけるサーバー任意ファイル読み取り Apache Superset の不適切な入力検証の脆弱性により、認証済みの攻撃者が localinfile を有効にした MariaDB 接続を作成できる可能性があります。Superset の MySQL/MariaDB クライアントで localinfile を有効にし、そのクライアントを悪意のある MySQL サーバーに向けることで、攻撃者は "LOAD DATA LOCAL INFILE"（Rogue MySQL Server）攻撃を仕掛け、サーバーからファイルを読み取り、その内...

CVE-2022-20818

CVE-2022-20818: 部分的なファイル読み取りによる Cisco SD-WAN のローカル権限昇格 Viptela SSH シェルの「config - load」機能は、「wget」を使用してリモートの「command」ファイルを FTP 経由で取得します。悪意のある FTP サーバーをホストし、wget によって作成されたローカルファイルをシンボリックリンクに置き換えることで、攻撃者はコマンドが実行される「root」権限を悪用して、任意のファイルの最初の行を読み取ることができます。...

CVE-2024-38819-POC

CVE-2024-38819: 概念実証 PoC これは、私が報告した CVE-2024-38819 脆弱性の概念実証であり、パストラバーサル（ディレクトリトラバーサル）のエクスプロイトを示しています。 実行手順 1. Docker イメージをビルドします（Spring Boot 3.3.4、Spring Framework 6.1.13 ベース） root@kitploit: cd vuln docker build -t cve-2024-38819-poc . 2. コンテナを実行し、ポート 8080 をホストマシンに公開します root@kitploit: docker run ...