130709 matches found
CVE-2026-69895
This information disclosure vulnerability exists in the Windows Spaceport.sys kernel driver, caused by an out-of-bounds read . A local, authorized attacker with low privileges can exploit it to disclose information , with no impact on integrity or availability. The CVSS 3.1 score is 4.7 (Medium) ...
EUVD-2026-73607
Out-of-bounds read in Windows Spaceport.sys allows an authorized attacker to disclose information locally...
EUVD-2026-73600
Buffer over-read in Windows Encrypting File System EFS allows an authorized attacker to disclose information locally...
CVE-2026-69794
CVE-2026-69794 is a buffer over-read in Windows Encrypting File System (EFS) that allows an authorized local attacker to disclose information . The flaw resides within the EFS component and results in a confidentiality impact with no integrity or availability impact. The CVSS 3.1 base score is 5....
CVE-2026-69679
Windows DHCP Server is affected by an out-of-bounds read vulnerability that allows an authorized attacker (low privileges) to cause a denial of service over an adjacent network . The CVSS 3.1 score is 5.7 (Medium) with high availability impact and no confidentiality or integrity impact. CISA's SS...
EUVD-2026-73585
Out-of-bounds read in Windows Win32K allows an authorized attacker to elevate privileges locally...
EUVD-2026-73586
Out-of-bounds read in Windows DHCP Server allows an authorized attacker to deny service over an adjacent network...
CVE-2026-69844
CVE-2026-69844 is an out-of-bounds read vulnerability in the Windows Win32K component (the kernel-mode driver that handles the graphical subsystem). An authorized local attacker with low privileges can exploit it to elevate privileges on the affected system. Microsoft rates the severity as HIGH (...
CVE-2026-69803
CVE-2026-69803 is an out-of-bounds read in Windows DHCP Server that allows an unauthorized, remote attacker to disclose information over the network. Microsoft rates it MEDIUM (CVSS 5.9, high attack complexity) while NVD scores it HIGH (CVSS 7.5, low attack complexity); both agree on high confide...
EUVD-2026-73574
Out-of-bounds read in Windows DHCP Server allows an unauthorized attacker to disclose information over a network...
CVE-2026-69637
CVE-2026-69637 is an out-of-bounds read vulnerability in Windows DHCP Server that allows an authorized attacker (low privileges) to trigger a denial of service over an adjacent network . The CVSS 3.1 base score is 5.7 (MEDIUM) with a vector of AV:A/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H, reflecting high ...
CVE-2026-69715
CVE-2026-69715 is an out-of-bounds read in Windows Direct Show that allows an unauthorized, unauthenticated attacker to achieve remote code execution over a network. The vulnerability is rated CVSS 9.8 (CRITICAL) (AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H), indicating high impact to confidentiality, in...
EUVD-2026-73570
Out-of-bounds read in Windows Direct Show allows an unauthorized attacker to execute code over a network...
EUVD-2026-73571
Out-of-bounds read in Windows DHCP Server allows an authorized attacker to deny service over an adjacent network...
EUVD-2026-73566
Out-of-bounds read in Windows exFAT File System allows an authorized attacker to elevate privileges over a network...
CVE-2026-69619
CVE-2026-69619 is an out-of-bounds read in the Windows exFAT File System that allows an authorized attacker to elevate privileges over a network . The CVSS 3.1 base score is 8.0 (HIGH) with a vector of AV:N/AC:L/PR:L/UI:R, requiring low privileges and user interaction, with high impact on confide...
CVE-2026-69610
A buffer over-read in Windows Win32K (the kernel-mode component handling graphical subsystem operations) allows an authorized attacker with low privileges to achieve local privilege escalation . The vulnerability requires local access , has high attack complexity , and does not require user inter...
EUVD-2026-73559
Buffer over-read in Windows Win32K allows an authorized attacker to elevate privileges locally...
CVE-2026-69616
Windows Remote Desktop Services is affected by an out-of-bounds read vulnerability that allows an authorized local attacker to disclose information (CVSS 3.1: 5.5 MEDIUM — local vector, low privileges required, high confidentiality impact, no integrity or availability impact). CISA's SSVC assessm...