CVE-2026-75998 ColdFusion | Improper Access Control (CWE-284)

ColdFusion is affected by an Improper Access Control vulnerability that could lead to arbitrary file system read. An attacker could exploit this vulnerability to access sensitive files and directories outside the intended access scope. Exploitation of this issue does not require user interaction...

CVE-2026-77774

Adobe Commerce is affected by an Incorrect Authorization vulnerability that could result in a Security feature bypass. An attacker could leverage this vulnerability to bypass security measures and gain unauthorized read access. Exploitation of this issue does not require user interaction. Scope i...

CVE-2026-66308

Out-of-bounds read in Skype for Business allows an authorized attacker to deny service over a network...

CVE-2026-55290

In setTo of ResourceTypes.cpp, there is a possible out-of-bounds heap read due to a missing bounds check. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation...

CVE-2026-45531

In readbootregion of fsck.c, there is a possible out of bounds read due to a heap buffer overflow. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation...

CVE-2026-49895

In getehtoperationchannelwidth of ieee80211common.c, there is a possible out of bounds read due to an incorrect bounds check. This could lead to remote proximal/adjacent information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation...

CVE-2026-28624

In multiple locations, there is a possible read/write access to files without the proper permissions due to a confused deputy. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation...

EUVD-2026-65224

GitPython: Incomplete unsafegitrevisionoptions denylist omits --contents/-S, enabling arbitrary file read via Repo.blame...

CVE-2026-66308

CVE-2026-66308 is an out-of-bounds read in Skype for Business Server (Subscription Edition, 2019, and 2015) that allows an authorized attacker to cause a denial of service over a network. The vulnerability is rated CVSS 3.1: 6.5 (MEDIUM) with a vector of AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H, meani...

EUVD-2026-73935

Out-of-bounds read in Skype for Business allows an authorized attacker to deny service over a network...

CVE-2026-85875

Out-of-bounds read in Microsoft Office Excel allows an unauthorized attacker to disclose information locally...

CVE-2026-84001

Out-of-bounds read in Windows Key Distribution Center allows an unauthorized attacker to deny service over a network...

CVE-2026-83989

Out-of-bounds read in Windows Services for NFS ONCRPC XDR Driver allows an unauthorized attacker to deny service over a network...

CVE-2026-83951

Buffer over-read in Microsoft Office Word allows an unauthorized attacker to disclose information locally...

CVE-2026-83949

Buffer over-read in Microsoft Office Word allows an unauthorized attacker to disclose information locally...

CVE-2026-83501

Out-of-bounds read in Windows Virtualization-Based Security VBS Enclave allows an authorized attacker to disclose information locally...

CVE-2026-81957

Out-of-bounds read in Microsoft Office Excel allows an unauthorized attacker to execute code locally...

CVE-2026-81956

Out-of-bounds read in Microsoft Office Excel allows an unauthorized attacker to execute code locally...

CVE-2026-81821

The vulnerability, if exploited, could allow a miscreant with read access to PIMBoards project files to decrypt and view sensitive information...

CVE-2026-81823

The vulnerability, if exploited, could allow an unauthenticated miscreant to perform read operations intended only for PIMBoards users, resulting in information disclosure. Write operations are not impacted...