CVE-2026-49882

In rwmfchandlereadop of rwmfc.cc, there is a possible memory safety issue due to a heap buffer overflow. This could lead to remote code execution with no additional execution privileges needed. User interaction is not needed for exploitation...

EUVD-2026-74004

In readbootregion of fsck.c, there is a possible out of bounds read due to a heap buffer overflow. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation...

CVE-2026-45531

In readbootregion of fsck.c, there is a possible out of bounds read due to a heap buffer overflow. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation...

CVE-2026-45531

CVE-2026-45531 affects Android and is located in the read_boot_region function of fsck.c . The root cause is an out-of-bounds read resulting from a heap buffer overflow , which can lead to local privilege escalation without requiring additional execution privileges or user interaction. The vulner...

CVE-2026-28624

CVE-2026-28624 is a confused deputy vulnerability in the Android platform that allows read/write access to files without proper permissions , enabling local escalation of privilege with no additional execution privileges and no user interaction. It carries a CVSS 3.1 score of 7.8 (HIGH) with high...

CVE-2026-81823 AVEVA Pipeline Integrity Monitor Missing Authorization

The vulnerability, if exploited, could allow an unauthenticated miscreant to perform read operations intended only for PIMBoards users, resulting in information disclosure. Write operations are not impacted...

CVE-2026-81823

CVE-2026-81823 affects AVEVA Pipeline Integrity Monitor , specifically its PIMBoards component. A missing authorization flaw allows an unauthenticated attacker to perform read operations intended only for PIMBoards users, resulting in information disclosure . Write operations are not impacted. Th...

CVE-2026-81823 AVEVA Pipeline Integrity Monitor Missing Authorization

The vulnerability, if exploited, could allow an unauthenticated miscreant to perform read operations intended only for PIMBoards users, resulting in information disclosure. Write operations are not impacted...

EUVD-2026-73920

Out-of-bounds read in Windows Virtualization-Based Security VBS Enclave allows an authorized attacker to disclose information locally...

CVE-2026-83501

CVE-2026-83501 is an out-of-bounds read vulnerability in Windows Virtualization-Based Security (VBS) Enclave that allows a local, authorized attacker (low privileges) to disclose information without user interaction. The CVSS 3.1 score is 5.5 (Medium) , with high confidentiality impact but no int...

EUVD-2026-73919

Out-of-bounds read in Microsoft Office Excel allows an unauthorized attacker to disclose information locally...

CVE-2026-85875

An out-of-bounds read vulnerability in Microsoft Office Excel allows an unauthorized local attacker to disclose information. The CVSS 3.1 score is 5.5 (Medium) , with a local attack vector, low complexity, no privileges required, and user interaction required. Impact is limited to confidentiality...

EUVD-2026-73912

Out-of-bounds read in Windows Services for NFS ONCRPC XDR Driver allows an unauthorized attacker to deny service over a network...

CVE-2026-83989

CVE-2026-83989 is an out-of-bounds read in the Windows Services for NFS ONCRPC XDR Driver that allows an unauthenticated, remote attacker to cause a denial of service over a network. The vulnerability is rated CVSS 7.5 (HIGH) with a network attack vector, low complexity, no privileges or user int...

EUVD-2026-73902

Out-of-bounds read in Microsoft Windows Search Component allows an authorized attacker to disclose information locally...

CVE-2026-70145

CVE-2026-70145 is an out-of-bounds read in the Microsoft Windows Search Component that allows an authorized attacker to disclose information locally. The vulnerability is rated CVSS 5.5 (MEDIUM) with a local attack vector, low complexity, low privileges required, and no user interaction. The prim...

CVE-2026-69381

CVE-2026-69381 is an out-of-bounds read in the Windows Storage Port Driver that allows an unauthorized attacker with physical access to disclose information. The vulnerability requires no prior privileges or user interaction, but the physical attack vector limits its practical exploitability. The...

EUVD-2026-73893

Out-of-bounds read in Windows Storage Port Driver allows an unauthorized attacker to disclose information with a physical attack...

EUVD-2026-73891

Buffer over-read in Microsoft Office Word allows an unauthorized attacker to disclose information locally...

CVE-2026-83949

CVE-2026-83949 is a buffer over-read vulnerability in Microsoft Office Word that allows an unauthorized local attacker to disclose information. The attack requires local access and user interaction , with no privileges needed. The impact is limited to confidentiality (high), with no integrity or ...