129214 matches found
CVE-2026-69286
CVE-2026-69286 is an out-of-bounds read in the Windows USB Audio Class driver (usbaudio.sys) that allows an authorized local attacker to disclose information . The vulnerability is rated CVSS 3.1: 5.5 (MEDIUM) with a local attack vector, low complexity, and high confidentiality impact but no inte...
EUVD-2026-73431
Out-of-bounds read in Windows USB Audio Class driver usbaudio.sys allows an authorized attacker to disclose information locally...
EUVD-2026-73419
Out-of-bounds read in Microsoft Standard XPS allows an authorized attacker to disclose information locally...
CVE-2026-68891
CVE-2026-68891 is an out-of-bounds read in Microsoft Standard XPS that allows an authorized attacker to disclose information locally. The CVSS v3.1 score is 4.7 (MEDIUM) , reflecting a local attack vector with high complexity and low privileges required, resulting in high confidentiality impact w...
CVE-2026-68898
Windows iSCSI is vulnerable to an out-of-bounds read that allows an unauthorized, remote attacker to cause a denial of service over a network. The CVSS 3.1 score is 6.5 (Medium) , with the attack requiring user interaction (e.g., opening a crafted file) but no prior privileges. CISA's SSVC assess...
EUVD-2026-73415
Out-of-bounds read in Windows iSCSI allows an unauthorized attacker to deny service over a network...
EUVD-2026-73412
Out-of-bounds read in Windows NTFS allows an authorized attacker to elevate privileges locally...
CVE-2026-69265
CVE-2026-69265 is an out-of-bounds read vulnerability in Windows NTFS that allows an authorized attacker with low privileges to perform local privilege escalation . The CVSS v3.1 score is 7.8 (High) , with low attack complexity, no user interaction, and high impact across confidentiality, integri...
EUVD-2026-73409
Out-of-bounds read in Windows Program Compatibility Assistant Service allows an authorized attacker to disclose information over a network...
CVE-2026-68874
CVE-2026-68874 is an out-of-bounds read vulnerability in the Windows Program Compatibility Assistant Service that allows an authorized attacker with low privileges to disclose information over a network. The vulnerability requires user interaction and results in a High confidentiality impact with...
CVE-2026-68780
CVE-2026-68780 is an out-of-bounds read in Microsoft SQL Server that allows an authorized attacker (low privileges required) to disclose information over a network. The CVSS 3.1 score is 6.5 (MEDIUM) with vector AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N , reflecting high confidentiality impact with no ...
EUVD-2026-73396
Out-of-bounds read in SQL Server allows an authorized attacker to disclose information over a network...
EUVD-2026-73395
Out-of-bounds read in SQL Server allows an authorized attacker to disclose information over a network...
EUVD-2026-73394
Out-of-bounds read in SQL Server allows an authorized attacker to disclose information over a network...
CVE-2026-68779
CVE-2026-68779 is an out-of-bounds read in Microsoft SQL Server that allows an authorized (low-privilege) attacker to disclose information over a network. The CVSS 3.1 score is 6.5 (MEDIUM) with a vector of AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N , indicating a high confidentiality impact with no int...
CVE-2026-68778
CVE-2026-68778 is an out-of-bounds read vulnerability in Microsoft SQL Server that allows an authorized attacker (low privileges required) to disclose information over a network . The CVSS 3.1 score is 6.5 (Medium) with a vector of AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N, reflecting high confidential...
EUVD-2026-73393
Out-of-bounds read in SQL Server allows an authorized attacker to disclose information over a network...
CVE-2026-68777
CVE-2026-68777 is an out-of-bounds read vulnerability in Microsoft SQL Server that allows an authorized attacker to disclose information over a network. The CVSS 3.1 base score is 6.5 (Medium) with high confidentiality impact but no integrity or availability impact. CISA's SSVC assessment rates e...
CVE-2026-67393
CVE-2026-67393 is a buffer over-read vulnerability in Microsoft SQL Server that allows an authorized attacker to disclose information over a network. The vulnerability is classified as information disclosure with a CVSS 3.1 base score of 6.5 (Medium) , requiring low privileges and no user interac...