12490 matches found
CVE-2026-69626
CVE-2026-69626 is a buffer over-read in Microsoft Office that allows an unauthorized attacker to disclose information over a network . The vulnerability requires user interaction but no prior privileges, and its primary impact is on confidentiality (high), with no effect on integrity or availabil...
EUVD-2026-73666
Buffer over-read in Windows Message Queuing Queue Manager allows an unauthorized attacker to disclose information over a network...
CVE-2026-72932
CVE-2026-72932 is a buffer over-read in the Windows Message Queuing Queue Manager that allows an unauthorized, unauthenticated attacker to disclose information over a network . The CVSS 3.1 score is 7.5 (HIGH) , with a network attack vector, low complexity, and high confidentiality impact but no ...
EUVD-2026-73600
Buffer over-read in Windows Encrypting File System EFS allows an authorized attacker to disclose information locally...
CVE-2026-69794
CVE-2026-69794 is a buffer over-read in Windows Encrypting File System (EFS) that allows an authorized local attacker to disclose information . The flaw resides within the EFS component and results in a confidentiality impact with no integrity or availability impact. The CVSS 3.1 base score is 5....
CVE-2026-69610
A buffer over-read in Windows Win32K (the kernel-mode component handling graphical subsystem operations) allows an authorized attacker with low privileges to achieve local privilege escalation . The vulnerability requires local access , has high attack complexity , and does not require user inter...
EUVD-2026-73559
Buffer over-read in Windows Win32K allows an authorized attacker to elevate privileges locally...
EUVD-2026-73492
Buffer over-read in Windows DHCP Server allows an authorized attacker to deny service over an adjacent network...
CVE-2026-69416
CVE-2026-69416 is a buffer over-read in Windows DHCP Server that allows an authorized attacker with low privileges on an adjacent network to cause a denial of service , with high availability impact and no confidentiality or integrity impact (CVSS 3.1: 5.7 MEDIUM ). CISA assesses exploitation as ...
EUVD-2026-73452
Buffer over-read in Windows Overlay Filter allows an authorized attacker to disclose information locally...
CVE-2026-69316
CVE-2026-69316 is a buffer over-read vulnerability in the Windows Overlay Filter component. An authorized local attacker with low privileges can exploit it to disclose sensitive information . The attack requires high complexity and no user interaction, with a CVSS v3.1 base score of 4.7 (MEDIUM) ...
CVE-2026-67393
CVE-2026-67393 is a buffer over-read vulnerability in Microsoft SQL Server that allows an authorized attacker to disclose information over a network. The vulnerability is classified as information disclosure with a CVSS 3.1 base score of 6.5 (Medium) , requiring low privileges and no user interac...
EUVD-2026-73385
Buffer over-read in SQL Server allows an authorized attacker to disclose information over a network...
CVE-2026-67390
CVE-2026-67390 is a buffer over-read vulnerability in Microsoft SQL Server that allows an authorized attacker (low privileges required) to disclose information over a network with low attack complexity and no user interaction. The CVSS 3.1 score is 6.5 (Medium) , reflecting high confidentiality i...
EUVD-2026-73384
Buffer over-read in SQL Server allows an authorized attacker to disclose information over a network...
EUVD-2026-73319
Buffer over-read in SQL Server allows an authorized attacker to disclose information over a network...
CVE-2026-73029
CVE-2026-73029 is a buffer over-read vulnerability in Microsoft SQL Server that allows an authorized attacker (low privileges required) to disclose information over a network. The CVSS 3.1 base score is 6.5 (MEDIUM) with high confidentiality impact but no integrity or availability impact. CISA's ...
EUVD-2026-73156
Buffer over-read in Microsoft Office Word allows an unauthorized attacker to disclose information over a network...
CVE-2026-69719
CVE-2026-69719 is a buffer over-read vulnerability in Microsoft Office Word that allows an unauthorized attacker to disclose information over a network . The CVSS 3.1 score is 6.5 (MEDIUM) , with a network attack vector, low complexity, no privileges required, and user interaction required , resu...