CVE-2026-69504

CVE-2026-69504 is an out-of-bounds read in Windows NTFS that allows a local, authenticated attacker to disclose information . The vulnerability scores CVSS 3.1 5.5 (MEDIUM) with a local attack vector, low complexity, low privileges required, no user interaction, and high confidentiality impact bu...

EUVD-2026-72998

Out-of-bounds read in Windows NTFS allows an authorized attacker to elevate privileges over a network...

CVE-2026-69505

An out-of-bounds read in the Windows NTFS component allows an authorized attacker (low privileges required) to elevate privileges over a network, with user interaction required . The CVSS 3.1 score is 8.0 (HIGH) , reflecting high impact on confidentiality, integrity, and availability. No known ex...

EUVD-2026-72992

Out-of-bounds read in Windows Event Logging Service allows an unauthorized attacker to execute code over a network...

CVE-2026-69494

CVE-2026-69494 is an out-of-bounds read vulnerability in the Windows Event Logging Service that allows an unauthorized attacker to achieve remote code execution over a network. The vulnerability requires user interaction (CVSS: UI:R) and no prior privileges (PR:N), yielding a CVSS 3.1 score of 8....

EUVD-2026-72982

Out-of-bounds read in Windows Error Reporting allows an authorized attacker to elevate privileges locally...

CVE-2026-69450

CVE-2026-69450 is a local privilege escalation vulnerability in Windows Error Reporting , caused by an out-of-bounds read . An authorized attacker with low privileges can exploit this locally without user interaction to gain high impact on confidentiality, integrity, and availability (CVSS 3.1 sc...

CVE-2026-69532

CVE-2026-69532 is an out-of-bounds read vulnerability in Windows NTFS that allows an authorized attacker to locally elevate privileges . The attack vector is local, complexity is low, and it requires low privileges with no user interaction. Microsoft rates it CVSS 3.1: 7.8 (HIGH) with high impact...

EUVD-2026-72980

Out-of-bounds read in Windows NTFS allows an authorized attacker to elevate privileges locally...

CVE-2026-69458

Windows BitLocker is affected by an out-of-bounds read vulnerability that allows an authorized attacker to elevate privileges over a network . Per the CNA, the attack requires low privileges (i.e., the attacker must already be authenticated) and user interaction . The CVSS 3.1 score is 8.0 (HIGH)...

EUVD-2026-72973

Out-of-bounds read in Windows BitLocker allows an authorized attacker to elevate privileges over a network...

CVE-2026-69457

An out-of-bounds read in the Windows USB Driver allows a local, authorized attacker with low privileges and no user interaction to disclose information (high confidentiality impact, no integrity or availability impact). The vulnerability is rated CVSS 3.1 5.5 (MEDIUM) with a vector of AV:L/AC:L/P...

EUVD-2026-72966

Out-of-bounds read in Windows USB Driver allows an authorized attacker to disclose information locally...

CVE-2026-69390

CVE-2026-69390 is an out-of-bounds read vulnerability in Windows Spaceport.sys that allows an authorized attacker to locally disclose information . The Microsoft CNA rates it CVSS 5.5 (MEDIUM) with a local attack vector, low complexity, low privileges required, and a high impact on confidentialit...

EUVD-2026-72960

Out-of-bounds read in Windows Spaceport.sys allows an authorized attacker to disclose information locally...

EUVD-2026-73232

Out-of-bounds read in Microsoft Standard XPS allows an authorized attacker to disclose information locally...

CVE-2026-69367

An out-of-bounds read in Microsoft Standard XPS allows an authorized local attacker to disclose information. The CVSS v3.1 score is 5.5 (Medium) , with a vector of AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N , indicating that exploitation requires local access, low privileges, no user interaction, and re...

EUVD-2026-73227

Out-of-bounds read in Microsoft Standard XPS allows an authorized attacker to disclose information locally...

CVE-2026-69345

CVE-2026-69345 is an out-of-bounds read in Microsoft Standard XPS that allows an authorized attacker (low privileges, no user interaction) to disclose information locally , with high confidentiality impact and no integrity or availability impact (CVSS 3.1: 5.5 MEDIUM ). CISA's SSVC assessment rat...

CVE-2026-68881

CVE-2026-68881 is an out-of-bounds read in Microsoft Standard XPS that allows an authorized local attacker to disclose information . The flaw carries a CVSS v3.1 score of 5.5 (Medium) — local attack vector, low complexity, low privileges required, no user interaction, with high confidentiality im...