CVE-2026-77501

CVE-2026-77501 is an out-of-bounds read vulnerability in Windows DHCP Server that allows an unauthorized, network-based attacker to cause a denial of service . The CVSS v3.1 base score is 7.5 (HIGH) with vector AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H, reflecting remote, unauthenticated exploitation w...

CVE-2026-77498

CVE-2026-77498 is an out-of-bounds read vulnerability in Windows DHCP Server that allows an unauthorized attacker to cause a denial of service over a network. The attack requires no privileges, no user interaction, and has low complexity, with a CVSS 3.1 score of 7.5 (HIGH) — the impact is limite...

EUVD-2026-73267

Out-of-bounds read in Windows DHCP Server allows an unauthorized attacker to deny service over a network...

CVE-2026-77492

CVE-2026-77492 is an out-of-bounds read vulnerability in the Windows Storage Port Driver that allows an authorized attacker to disclose information locally . The CVSS 3.1 score is 5.5 (MEDIUM) with the vector AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N, indicating a local attack requiring low privileges ...

EUVD-2026-73264

Out-of-bounds read in Storage Port Driver allows an authorized attacker to disclose information locally...

CVE-2026-77491

CVE-2026-77491 is an out-of-bounds read in Windows GDI that allows an unauthorized local attacker to disclose information. The CVSS 3.1 base score is 5.5 (MEDIUM) with a local attack vector, no privileges required, user interaction required, and high confidentiality impact but no integrity or ava...

EUVD-2026-73263

Out-of-bounds read in Windows GDI allows an unauthorized attacker to disclose information locally...

EUVD-2026-73249

Out-of-bounds read in Windows DHCP Server allows an unauthorized attacker to disclose information over a network...

CVE-2026-70124

CVE-2026-70124 is an out-of-bounds read in Windows DHCP Server that allows an unauthorized, unprivileged network attacker to disclose information. NVD assigns CVSS 3.1: 7.5 (HIGH) with low attack complexity, while Microsoft's CNA scores it 5.9 (MEDIUM) citing high attack complexity. CISA SSVC ass...

EUVD-2026-73247

Out-of-bounds read in Windows DHCP Server allows an unauthorized attacker to disclose information over a network...

EUVD-2026-73248

Out-of-bounds read in Windows DHCP Server allows an unauthorized attacker to disclose information over a network...

CVE-2026-69929

CVE-2026-69929 is an out-of-bounds read in Windows DHCP Server that allows an unauthorized, network-based attacker to disclose information. NVD assigns a CVSS 3.1 score of 7.5 (HIGH) with low attack complexity, while Microsoft (CNA) rates it 5.9 (MEDIUM) with high attack complexity. CISA's SSVC a...

CVE-2026-69930

CVE-2026-69930 is an out-of-bounds read in Windows DHCP Server that allows an unauthorized, unauthenticated attacker to disclose information over a network. NVD rates it CVSS 3.1: 7.5 (HIGH) with low attack complexity, while Microsoft's CNA scores it 5.9 (MEDIUM) due to high attack complexity. CI...

EUVD-2026-73158

Out-of-bounds read in Microsoft Office allows an unauthorized attacker to disclose information over a network...

CVE-2026-69739

CVE-2026-69739 is an out-of-bounds read in Microsoft Office that allows an unauthorized attacker to disclose information over a network . NVD assigns a CVSS 3.1 score of 7.5 (HIGH) with no user interaction required, while Microsoft's CNA assessment rates it 6.5 (MEDIUM) with user interaction requ...

CVE-2026-69719

CVE-2026-69719 is a buffer over-read vulnerability in Microsoft Office Word that allows an unauthorized attacker to disclose information over a network . The CVSS 3.1 score is 6.5 (MEDIUM) , with a network attack vector, low complexity, no privileges required, and user interaction required , resu...

EUVD-2026-73156

Buffer over-read in Microsoft Office Word allows an unauthorized attacker to disclose information over a network...

EUVD-2026-73133

Out-of-bounds read in Windows Device Health Attestation DHA allows an unauthorized attacker to disclose information over a network...

CVE-2026-69443

CVE-2026-69443 is an out-of-bounds read in Windows Device Health Attestation (DHA) that allows an unauthorized attacker to disclose information over a network . The vulnerability is rated CVSS 7.5 (High) with a vector of AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N, meaning it is exploitable over the netw...

CVE-2026-68887

CVE-2026-68887 is an out-of-bounds read in Windows Message Queuing Queue Manager that allows an unauthorized, network-based attacker to trigger a denial of service . The vulnerability requires no prior authentication or user interaction and carries a CVSS 3.1 base score of 7.5 (HIGH) , with impac...