129310 matches found
EUVD-2026-73395
Out-of-bounds read in SQL Server allows an authorized attacker to disclose information over a network...
EUVD-2026-73394
Out-of-bounds read in SQL Server allows an authorized attacker to disclose information over a network...
CVE-2026-68779
CVE-2026-68779 is an out-of-bounds read in Microsoft SQL Server that allows an authorized (low-privilege) attacker to disclose information over a network. The CVSS 3.1 score is 6.5 (MEDIUM) with a vector of AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N , indicating a high confidentiality impact with no int...
CVE-2026-68778
CVE-2026-68778 is an out-of-bounds read vulnerability in Microsoft SQL Server that allows an authorized attacker (low privileges required) to disclose information over a network . The CVSS 3.1 score is 6.5 (Medium) with a vector of AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N, reflecting high confidential...
EUVD-2026-73393
Out-of-bounds read in SQL Server allows an authorized attacker to disclose information over a network...
CVE-2026-68777
CVE-2026-68777 is an out-of-bounds read vulnerability in Microsoft SQL Server that allows an authorized attacker to disclose information over a network. The CVSS 3.1 base score is 6.5 (Medium) with high confidentiality impact but no integrity or availability impact. CISA's SSVC assessment rates e...
CVE-2026-67393
CVE-2026-67393 is a buffer over-read vulnerability in Microsoft SQL Server that allows an authorized attacker to disclose information over a network. The vulnerability is classified as information disclosure with a CVSS 3.1 base score of 6.5 (Medium) , requiring low privileges and no user interac...
EUVD-2026-73385
Buffer over-read in SQL Server allows an authorized attacker to disclose information over a network...
EUVD-2026-73384
Buffer over-read in SQL Server allows an authorized attacker to disclose information over a network...
CVE-2026-67390
CVE-2026-67390 is a buffer over-read vulnerability in Microsoft SQL Server that allows an authorized attacker (low privileges required) to disclose information over a network with low attack complexity and no user interaction. The CVSS 3.1 score is 6.5 (Medium) , reflecting high confidentiality i...
EUVD-2026-73367
Out-of-bounds read in Microsoft Trace Data Helper allows an authorized attacker to elevate privileges locally...
CVE-2026-56198
CVE-2026-56198 is an out-of-bounds read in Microsoft Trace Data Helper that allows an authorized attacker to elevate privileges locally . The vulnerability is rated CVSS 7.8 (HIGH) with a local attack vector, low complexity, and low privileges required, resulting in high impact across confidentia...
EUVD-2026-73363
Out-of-bounds read in Windows Key Distribution Center allows an unauthorized attacker to deny service over a network...
CVE-2026-84001
An out-of-bounds read vulnerability in Windows Key Distribution Center allows an unauthorized, remote attacker to cause a denial of service over the network. The flaw requires no privileges, no user interaction, and has low attack complexity, yielding a CVSS 3.1 score of 7.5 (HIGH) with high avai...
CVE-2026-72937
This is an out-of-bounds read vulnerability in the Windows Storage Port Driver that allows an authorized local attacker to disclose information. The CVSS 3.1 score is 5.5 (MEDIUM) with a local attack vector, low complexity, and low privileges required, resulting in high confidentiality impact wit...
EUVD-2026-73348
Out-of-bounds read in Storage Port Driver allows an authorized attacker to disclose information locally...
EUVD-2026-73319
Buffer over-read in SQL Server allows an authorized attacker to disclose information over a network...
CVE-2026-73029
CVE-2026-73029 is a buffer over-read vulnerability in Microsoft SQL Server that allows an authorized attacker (low privileges required) to disclose information over a network. The CVSS 3.1 base score is 6.5 (MEDIUM) with high confidentiality impact but no integrity or availability impact. CISA's ...
CVE-2026-67636
CVE-2026-67636 is an out-of-bounds read vulnerability in Microsoft SQL Server that allows an unauthorized attacker to achieve remote code execution over a network. The CNA-assigned CVSS 3.1 score is 9.0 (CRITICAL) , with a network attack vector, high complexity, no required privileges, changed sc...