EUVD-2026-73821

Buffer over-read in Windows Storage allows an unauthorized attacker to disclose information with a physical attack...

CVE-2026-78503

CVE-2026-78503 is an out-of-bounds read vulnerability in Microsoft Office Word that allows an unauthorized attacker to disclose information over a network . The assigned CVSS 3.1 base score is 6.5 (MEDIUM) with vector AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N, meaning exploitation requires user interac...

CVE-2026-78516

CVE-2026-78516 is a buffer over-read in Windows Storage that allows an unauthorized attacker with physical access to disclose sensitive information. The vulnerability requires user interaction and no prior privileges. Microsoft rates it CVSS 4.3 (Medium) with a High confidentiality impact but no ...

CVE-2026-67369

CVE-2026-67369 is an out-of-bounds read in Microsoft SQL Server that allows an authorized attacker to disclose information over a network. The vulnerability requires low privileges and has a CVSS 3.1 score of 6.5 (MEDIUM) with high confidentiality impact but no integrity or availability impact. C...

EUVD-2026-73815

Out-of-bounds read in SQL Server allows an authorized attacker to disclose information over a network...

CVE-2026-78452

Out-of-bounds read in the Microsoft Windows SCSI Class System File allows an unauthorized attacker with physical access to perform an information disclosure attack. The vulnerability requires no privileges and no user interaction , with a CVSS 3.1 base score of 4.6 (MEDIUM) . CISA's SSVC assessme...

CVE-2026-78454

An out-of-bounds read in the Windows CD-ROM Driver allows a local, low-privilege attacker to achieve information disclosure . The CVSS 3.1 score is 5.5 (Medium) , reflecting a local attack vector, low complexity, and high confidentiality impact with no integrity or availability impact. CISA's SSV...

EUVD-2026-73807

Out-of-bounds read in Microsoft Windows SCSI Class System File allows an unauthorized attacker to disclose information with a physical attack...

EUVD-2026-73808

Out-of-bounds read in Windows CD-ROM Driver allows an authorized attacker to disclose information locally...

EUVD-2026-73806

Out-of-bounds read in Xbox allows an unauthorized attacker to disclose information with a physical attack...

CVE-2026-78455

CVE-2026-78455 is an out-of-bounds read in Xbox that allows an unauthorized attacker with physical access to disclose information (high confidentiality impact). The attack requires user interaction but no prior privileges. CVSS v3.1 scores it 4.3 (MEDIUM) with a physical attack vector. CISA's SSV...

EUVD-2026-73796

Out-of-bounds read in Windows OLE DB allows an unauthorized attacker to disclose information over a network...

CVE-2026-78441

CVE-2026-78441 is an out-of-bounds read vulnerability in Windows OLE DB that allows an unauthorized attacker to disclose information over a network. The CVSS 3.1 score is 6.5 (Medium) , with a vector of AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N — indicating network reachability, low complexity, no priv...

CVE-2026-69562

CVE-2026-69562 is an out-of-bounds read vulnerability in Microsoft SQL Server that allows an unauthorized, remote attacker to disclose information over a network. The attack vector is network-based with low complexity, requires no prior privileges, but does require user interaction . The impact i...

CVE-2026-77911

CVE-2026-77911 is an out-of-bounds read vulnerability in Microsoft Office Word that allows an unauthorized attacker to disclose information over a network . The flaw requires user interaction and has a CVSS 3.1 score of 6.5 (MEDIUM) with high confidentiality impact but no integrity or availabilit...

EUVD-2026-73793

Out-of-bounds read in Microsoft Office Word allows an unauthorized attacker to disclose information over a network...

EUVD-2026-73794

Out-of-bounds read in SQL Server allows an unauthorized attacker to disclose information over a network...

CVE-2026-82066

A heap out-of-bounds read security issue exists in the query planning component of MongoDB Server. An authenticated user with database read and write privileges can trigger the security issue through crafted query operations, causing the server to read memory beyond allocated buffer boundaries. T...

EUVD-2026-73755

Out-of-bounds read in Windows USB Hub Driver allows an unauthorized attacker to elevate privileges with a physical attack...

CVE-2026-72999

CVE-2026-72999 is an out-of-bounds read in the Windows USB Hub Driver that allows an unauthorized attacker to escalate privileges via a physical attack . The CVSS 3.1 score is 6.8 (MEDIUM) with vector AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H, meaning the attacker requires physical access to the system...