EUVD-2026-73384

Buffer over-read in SQL Server allows an authorized attacker to disclose information over a network...

CVE-2026-67390

CVE-2026-67390 is a buffer over-read vulnerability in Microsoft SQL Server that allows an authorized attacker (low privileges required) to disclose information over a network with low attack complexity and no user interaction. The CVSS 3.1 score is 6.5 (Medium) , reflecting high confidentiality i...

EUVD-2026-73367

Out-of-bounds read in Microsoft Trace Data Helper allows an authorized attacker to elevate privileges locally...

CVE-2026-56198

CVE-2026-56198 is an out-of-bounds read in Microsoft Trace Data Helper that allows an authorized attacker to elevate privileges locally . The vulnerability is rated CVSS 7.8 (HIGH) with a local attack vector, low complexity, and low privileges required, resulting in high impact across confidentia...

EUVD-2026-73363

Out-of-bounds read in Windows Key Distribution Center allows an unauthorized attacker to deny service over a network...

CVE-2026-84001

An out-of-bounds read vulnerability in Windows Key Distribution Center allows an unauthorized, remote attacker to cause a denial of service over the network. The flaw requires no privileges, no user interaction, and has low attack complexity, yielding a CVSS 3.1 score of 7.5 (HIGH) with high avai...

CVE-2026-72937

This is an out-of-bounds read vulnerability in the Windows Storage Port Driver that allows an authorized local attacker to disclose information. The CVSS 3.1 score is 5.5 (MEDIUM) with a local attack vector, low complexity, and low privileges required, resulting in high confidentiality impact wit...

EUVD-2026-73348

Out-of-bounds read in Storage Port Driver allows an authorized attacker to disclose information locally...

EUVD-2026-73319

Buffer over-read in SQL Server allows an authorized attacker to disclose information over a network...

CVE-2026-73029

CVE-2026-73029 is a buffer over-read vulnerability in Microsoft SQL Server that allows an authorized attacker (low privileges required) to disclose information over a network. The CVSS 3.1 base score is 6.5 (MEDIUM) with high confidentiality impact but no integrity or availability impact. CISA's ...

CVE-2026-67636

CVE-2026-67636 is an out-of-bounds read vulnerability in Microsoft SQL Server that allows an unauthorized attacker to achieve remote code execution over a network. The CNA-assigned CVSS 3.1 score is 9.0 (CRITICAL) , with a network attack vector, high complexity, no required privileges, changed sc...

EUVD-2026-73316

Out-of-bounds read in SQL Server allows an authorized attacker to execute code over a network...

EUVD-2026-73314

Out-of-bounds read in SQL Server allows an authorized attacker to disclose information over a network...

EUVD-2026-73315

Out-of-bounds read in Microsoft Office Excel allows an unauthorized attacker to execute code over a network...

CVE-2026-67389

Microsoft SQL Server is affected by an out-of-bounds read vulnerability that allows an authorized attacker (low privileges required) to disclose information over a network . The CVSS v3.1 base score is 6.5 (Medium) with a vector of AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N, reflecting high confidential...

CVE-2026-78518

CVE-2026-78518 is an out-of-bounds read vulnerability in Microsoft Office Excel that allows an unauthorized attacker to achieve remote code execution over a network. The CVSS 3.1 score is 8.8 (HIGH) , with a network attack vector, low complexity, no privileges required, but user interaction requi...

EUVD-2026-73310

Out-of-bounds read in Microsoft Office PowerPoint allows an unauthorized attacker to disclose information locally...

CVE-2026-78513

CVE-2026-78513 is an out-of-bounds read in Microsoft Office PowerPoint that allows an unauthorized local attacker to disclose information . The vulnerability requires user interaction (e.g., opening a crafted file) but no prior privileges. CVSS 3.1 score is 5.5 (MEDIUM) with high confidentiality ...

EUVD-2026-73309

Out-of-bounds read in Windows CD-ROM Driver allows an unauthorized attacker to disclose information with a physical attack...

CVE-2026-78508

CVE-2026-78508 is an out-of-bounds read in the Windows CD-ROM Driver that allows an unauthorized attacker with physical access to disclose information. The CVSS 3.1 score is 4.6 (MEDIUM) , reflecting the physical attack vector, low complexity, no privileges required, and a high confidentiality im...