PT-2026-58450

Name of the Vulnerable Software and Affected Versions Windows Kernel affected versions not specified Description A buffer over-read exists in the Windows Kernel, which allows an authorized attacker to locally disclose sensitive information and affect the system. A buffer over-read occurs when a...

PT-2026-58478

Name of the Vulnerable Software and Affected Versions Remote Desktop Client affected versions not specified Description A buffer over-read exists in the Remote Desktop Client, which allows an unauthorized attacker to disclose information over a network. This issue occurs when the client connects ...

PT-2026-58444

Buffer over-read in SQL Server allows an authorized attacker to disclose information over a network...

PT-2026-58636

Name of the Vulnerable Software and Affected Versions Windows Subsystem for Linux affected versions not specified Description A buffer over-read exists in the Windows Subsystem for Linux, which could allow an authorized attacker to elevate privileges locally. A buffer over-read occurs when a...

PT-2026-58423

Name of the Vulnerable Software and Affected Versions Windows RDP affected versions not specified Description A buffer over-read in Windows RDP allows an unauthorized attacker to disclose sensitive information over a network and affect the system. A buffer over-read occurs when a program reads mo...

CVE-2026-50468: Buffer Over-read

Buffer over-read in SQL Server allows an authorized attacker to disclose information over a network...

CVE-2026-50485: Buffer Over-read

Buffer over-read in Windows Hyper-V allows an authorized attacker to deny service over an adjacent network...

CVE-2026-50435: Buffer Over-read

Buffer over-read in Windows Overlay Filter allows an authorized attacker to elevate privileges locally...

CVE-2026-49854: Buffer Over-read

Tornado is a Python web framework and asynchronous networking library. Prior to 6.5.6, the optional native extension tornado.speedups implemented websocketmask without validating that the mask argument is exactly four bytes, allowing the C function to read up to three bytes beyond the provided...

CVE-2026-50445: Buffer Over-read

Buffer over-read in Windows RDP allows an unauthorized attacker to disclose information over a network...

CVE-2026-50341: Buffer Over-read

Buffer over-read in Windows NTFS allows an authorized attacker to disclose information locally...

CVE-2026-50372: Buffer Over-read

Buffer over-read in Windows Redirected Drive Buffering allows an authorized attacker to elevate privileges locally...

CVE-2026-59840: Buffer Over-read

A buffer over-read vulnerability in Fortinet FortiOS 7.6.0 through 7.6.3, FortiOS 7.4.0 through 7.4.8, FortiOS 7.2 all versions, FortiOS 7.0 all versions, FortiOS 6.4 all versions, FortiProxy 7.6.0 through 7.6.5, FortiProxy 7.4.0 through 7.4.13, FortiProxy 7.2 all versions, FortiProxy 7.0 all...

CVE-2025-43892: Buffer Over-read

A buffer over-read vulnerability in Fortinet FortiOS 7.6.0 through 7.6.3, FortiOS 7.4.0 through 7.4.8, FortiOS 7.2 all versions, FortiOS 7.0 all versions, FortiOS 6.4 all versions may allow an authenticated remote attacker to return a portion of device memory in the redirect response via submitti...

CVE-2026-50504: Buffer Over-read

Buffer over-read in Remote Desktop Client allows an unauthorized attacker to disclose information over a network...

CVE-2026-55036: Buffer Over-read

Buffer over-read in Microsoft Office Excel allows an unauthorized attacker to execute code locally...

CVE-2026-57968: Buffer Over-read

Buffer over-read in Windows Subsystem for Linux allows an authorized attacker to elevate privileges locally...

Microsoft Windows Subsystem for Linux (WSL2) < 2.7.8 EoP (CVE-2026-57968) (July 2026)

The version of Microsoft Windows Subsystem for Linux WSL2 on the remote Windows host is prior to 2.7.8. It is, therefore, affected by an elevation of privilege vulnerability: - Buffer over-read in Windows Subsystem for Linux allows an authorized attacker to elevate privileges locally...

PT-2026-59448

In OpenCV 3.3.1 corresponding with OpenCV-Python 3.3.1.11, a heap-based buffer over-read exists in the function cv::HdrDecoder::checkSignature in modules/imgcodecs/src/grfmt hdr.cpp...

CVE-2026-50813: Buffer Over-read

An issue in SQLite before Fossil check-in 869a51ae84df allows a local attacker to obtain sensitive information via the Session Extension changeset concat/changegroup merge path...