EUVD-2026-73611

Use of uninitialized resource in Windows Win32K allows an authorized attacker to disclose information locally...

EUVD-2026-73608

Use of uninitialized resource in Windows DNS allows an authorized attacker to disclose information locally...

CVE-2026-69672

Windows DNS contains an information disclosure vulnerability caused by a use of uninitialized resource . An authenticated attacker with local access and low privileges can exploit it to disclose information, with no user interaction required. The CVSS 3.1 score is 5.5 (MEDIUM) , reflecting high c...

EUVD-2026-73470

Use of uninitialized resource in Remote Desktop Client allows an authorized attacker to execute code over a network...

CVE-2026-69358

Microsoft Remote Desktop Client is affected by a use of uninitialized resource flaw that allows an authorized attacker to achieve remote code execution over a network. The vulnerability requires user interaction and carries a CVSS 3.1 score of 7.1 (HIGH) with high impact on confidentiality, integ...

EUVD-2026-73422

Use of uninitialized resource in Windows GDI+ allows an authorized attacker to disclose information locally...

CVE-2026-69288

CVE-2026-69288 is a use of uninitialized resource vulnerability in Windows GDI+ that allows a locally authenticated attacker with low privileges to disclose information . The attack vector is local , requires no user interaction , and has no impact on integrity or availability , with a high confi...

CVE-2026-68852

Microsoft Account is affected by a use of uninitialized resource vulnerability that allows an authorized attacker with low privileges to locally disclose information (CVSS 3.1: 5.5, MEDIUM). The vulnerability requires local access and no user interaction, with a high impact on confidentiality but...

EUVD-2026-73411

Use of uninitialized resource in Microsoft Account allows an authorized attacker to disclose information locally...

CVE-2026-68776

CVE-2026-68776 is an information disclosure vulnerability in Microsoft SQL Server caused by a use of uninitialized resource . An authorized attacker can exploit this over a network to disclose sensitive information. The CNA-assigned CVSS 3.1 score is 6.5 (Medium) with the vector AV:N/AC:L/PR:L/UI...

EUVD-2026-73392

Use of uninitialized resource in SQL Server allows an authorized attacker to disclose information over a network...

EUVD-2026-73390

Use of uninitialized resource in SQL Server allows an authorized attacker to disclose information over a network...

CVE-2026-67648

Microsoft SQL Server is affected by a use of uninitialized resource vulnerability that allows an authorized attacker (low privileges) to disclose information over a network . The CVSS 3.1 base score is 6.5 (Medium) with a vector of AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N, indicating high confidential...

CVE-2026-67386

Microsoft SQL Server is affected by a use of uninitialized resource flaw that allows an authorized attacker (low privileges) to disclose information over a network. The vulnerability carries a CVSS 3.1 score of 6.5 (Medium) with a vector of AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N, indicating high con...

EUVD-2026-73382

Use of uninitialized resource in SQL Server allows an authorized attacker to disclose information over a network...

EUVD-2026-73358

Use of uninitialized resource in Windows Win32 Kernel Subsystem allows an authorized attacker to disclose information locally...

CVE-2026-70290

CVE-2026-70290 is an information disclosure vulnerability in the Windows Win32 Kernel Subsystem (Win32k) caused by the use of an uninitialized resource . An authorized local attacker with low privileges can leverage this to read sensitive kernel information, with no user interaction required. The...

EUVD-2026-73113

Use of uninitialized resource in Windows Task Scheduler allows an authorized attacker to disclose information locally...

CVE-2026-72945

CVE-2026-72945 is an information disclosure vulnerability in Windows Task Scheduler , caused by the use of an uninitialized resource . An authorized local attacker with low privileges can exploit this to disclose information, with high confidentiality impact and no integrity or availability impac...

CVE-2026-69770

CVE-2026-69770 is an information disclosure vulnerability in the Windows Spaceport.sys kernel driver, caused by the use of an uninitialized resource . An authorized attacker with local access and low privileges can exploit it to disclose sensitive information (high confidentiality impact, no inte...