CVE-2026-69832

CVE-2026-69832 is an information disclosure vulnerability in Windows Win32K , a kernel-mode component handling graphics and input processing. Exposure of sensitive system information to an unauthorized control sphere allows a low-privilege local attacker to read sensitive data. The CVSS 3.1 score...

CVE-2026-69507

CVE-2026-69507 affects the Microsoft Windows Search Component . The vulnerability stems from insertion of sensitive information into an externally-accessible file or directory, allowing an authorized attacker to disclose information over a network. The CNA-assigned CVSS 3.1 score is 5.7 (MEDIUM) ...

CVE-2026-69406

CVE-2026-69406 is a Windows Kernel information disclosure vulnerability. It stems from the exposure of sensitive system information to an unauthorized control sphere, allowing an authorized attacker to disclose information locally. The assigned CVSS 3.1 score is 5.5 (Medium) with a local attack v...

CVE-2026-69339

CVE-2026-69339 is an information disclosure vulnerability in the Windows MIDI Service Module . It allows an attacker with low local privileges to expose sensitive system information to an unauthorized control sphere, resulting in high confidentiality impact with no integrity or availability impac...

EUVD-2026-73224

Exposure of sensitive system information to an unauthorized control sphere in Windows MIDI Service Module allows an authorized attacker to disclose information locally...

EEF-CVE-2026-78216 AshLua eval read operations can read field-policy-protected fields via aggregates

Summary AshLua exposes Ash read actions to Lua scripts run through an eval action. A read call accepts an operation list, min, max, first, sum, avg that builds an ad-hoc Ash.Query.Aggregate over a named field and returns its raw value. Ash field policies redact forbidden fields on returned record...

EUVD-2026-72926

A improper access control vulnerability in Fortinet FortiSandbox 5.0.0 through 5.0.5, FortiSandbox 4.4.0 through 4.4.8, FortiSandbox Cloud 5.0.4 through 5.0.5, FortiSandbox PaaS 5.0.4 through 5.0.5 may allow attacker to access sensitive information via crafted HTTP requests...

Windows Print Spooler Components Information Disclosure Vulnerability

Generation of error message containing sensitive information in Windows Print Spooler Components allows an authorized attacker to disclose information over a network...

Windows MIDI Service Module Information Disclosure Vulnerability

Exposure of sensitive system information to an unauthorized control sphere in Windows MIDI Service Module allows an authorized attacker to disclose information locally...

Skype for Business Information Disclosure Vulnerability

Generation of error message containing sensitive information in Skype for Business allows an unauthorized attacker to disclose information over a network...

Microsoft Excel Information Disclosure Vulnerability

Exposure of sensitive system information to an unauthorized control sphere in Microsoft Office Excel allows an unauthorized attacker to disclose information locally...

Windows Program Compatibility Assistant Service Information Disclosure Vulnerability

Insertion of sensitive information into log file in Windows Program Compatibility Assistant Service allows an authorized attacker to disclose information locally...

Windows Kernel Information Disclosure Vulnerability

Exposure of sensitive system information to an unauthorized control sphere in Windows Kernel allows an authorized attacker to disclose information locally...

Microsoft Teams for Android Information Disclosure Vulnerability

Insertion of sensitive information into sent data in Microsoft Teams for Android allows an authorized attacker to disclose information over a network...

Microsoft COM for Windows Information Disclosure Vulnerability

Generation of error message containing sensitive information in Microsoft COM for Windows allows an authorized attacker to disclose information locally...

Atarim < 4.2.2 - Sensitive Information Exposure

Vito Peleg Atarim = 4.2 contains an insertion of sensitive information into sent data vulnerability caused by improper handling of embedded sensitive data, letting attackers retrieve embedded sensitive data remotely, exploit requires no special privileges. id: CVE-2025-60188 info: name: Atarim...

CVE-2026-86597

Insertion of sensitive information into log files in the Snowflake Python, Go, JDBC, Node.js, PHP PDO, and ODBC drivers allowed authentication tokens, query-result encryption keys, pre-signed cloud-storage URLs, and SAML assertions to be written to diagnostic logs in circumstances where the...

Sensitive Data Exposure

org.springframework.cloud, spring-cloud-function-adapter-aws is vulnerable to sensitive data exposure. The vulnerability is due to sensitive information being included in application logs, which allows an attacker with access to the logs to obtain potentially confidential data...

CVE-2026-86597 Sensitive information written to logs by Snowflake drivers

Insertion of sensitive information into log files in the Snowflake Python, Go, JDBC, Node.js, PHP PDO, and ODBC drivers allowed authentication tokens, query-result encryption keys, pre-signed cloud-storage URLs, and SAML assertions to be written to diagnostic logs in circumstances where the...

PT-2026-87527

Insertion of sensitive information into externally-accessible file or directory in Microsoft Windows Search Component allows an authorized attacker to disclose information over a network...