Windows Management Instrumentation Information Disclosure Vulnerability

Buffer over-read in Windows Management Instrumentation allows an authorized attacker to disclose information locally...

Windows Common Log File System Driver Information Disclosure Vulnerability

Buffer over-read in Windows Common Log File System Driver allows an authorized attacker to disclose information locally...

Windows rndismp6.sys Information Disclosure Vulnerability

Buffer over-read in Windows RNDIS allows an unauthorized attacker to disclose information with a physical attack...

Servicing Stack Updates Information Disclosure Vulnerability

Buffer over-read in Servicing Stack Updates allows an authorized attacker to disclose information locally...

Windows Overlay Filter Elevation of Privilege Vulnerability

Buffer over-read in Windows Overlay Filter allows an authorized attacker to elevate privileges locally...

Desktop Window Manager Information Disclosure Vulnerability

Buffer over-read in Desktop Window Manager allows an authorized attacker to disclose information locally...

Windows Overlay Filter Elevation of Privilege Vulnerability

Buffer over-read in Windows Overlay Filter allows an authorized attacker to elevate privileges locally...

Windows Overlay Filter Remote Code Execution Vulnerability

Buffer over-read in Windows Overlay Filter allows an authorized attacker to execute code locally...

Windows Overlay Filter Elevation of Privilege Vulnerability

Buffer over-read in Windows Overlay Filter allows an authorized attacker to elevate privileges locally...

Windows CD-ROM Driver Elevation of Privilege Vulnerability

Buffer over-read in Windows CD-ROM Driver allows an unauthorized attacker to elevate privileges over a network...

Windows USB Driver Information Disclosure Vulnerability

Buffer over-read in Windows USB Driver allows an authorized attacker to disclose information locally...

Windows CD-ROM Driver Information Disclosure Vulnerability

Buffer over-read in Windows CD-ROM Driver allows an authorized attacker to disclose information locally...

Windows Event Logging Service Information Disclosure Vulnerability

Buffer over-read in Windows Event Logging Service allows an authorized attacker to disclose information locally...

CVE-2026-109951 FreeRDP 3.17.1 before 3.32.0 Heap Buffer Over-Read via Proxy DRDYNVC Channel Name

FreeRDP 3.17.1 before 3.32.0 contains a heap buffer over-read vulnerability in DynvcTrackerHandleCreateBack of the freerdp-proxy DRDYNVC channel handler that allows malicious backend RDP servers to read heap memory out of bounds. Attackers can send a CREATEREQUESTPDU whose channel name lacks a NU...

CVE-2026-109951 FreeRDP 3.17.1 before 3.32.0 Heap Buffer Over-Read via Proxy DRDYNVC Channel Name

FreeRDP 3.17.1 before 3.32.0 contains a heap buffer over-read vulnerability in DynvcTrackerHandleCreateBack of the freerdp-proxy DRDYNVC channel handler that allows malicious backend RDP servers to read heap memory out of bounds. Attackers can send a CREATEREQUESTPDU whose channel name lacks a NU...

CVE-2026-109951

FreeRDP 3.17.1 before 3.32.0 contains a heap buffer over-read vulnerability in DynvcTrackerHandleCreateBack of the freerdp-proxy DRDYNVC channel handler that allows malicious backend RDP servers to read heap memory out of bounds. Attackers can send a CREATEREQUESTPDU whose channel name lacks a NU...

CVE-2026-109951

The FreeRDP application (versions 3.17.1 before 3.32.0 ) is vulnerable to a heap buffer over-read in the DynvcTrackerHandleCreateBack function of the freerdp-proxy DRDYNVC channel handler. The root cause is an unbounded snprintf read triggered when a malicious backend RDP server sends a CREATE_RE...

Microsoft Windows: CVE-2026-96848: Windows Win32 Kernel Subsystem Information Disclosure Vulnerability

Buffer over-read in Windows Win32 Kernel Subsystem allows an authorized attacker to disclose information locally...

Microsoft Office: CVE-2026-88167: Microsoft Office Word Information Disclosure Vulnerability

Buffer over-read in Microsoft Office Word allows an unauthorized attacker to disclose information over a network...

Microsoft Windows: CVE-2026-83685: Windows Internet Key Exchange (IKE) Extension Denial of Service Vulnerability

Buffer over-read in Windows IKE Extension allows an authorized attacker to deny service over a network...