Desktop Window Manager Information Disclosure Vulnerability

Buffer over-read in Desktop Window Manager allows an authorized attacker to disclose information locally...

Windows Overlay Filter Elevation of Privilege Vulnerability

Buffer over-read in Windows Overlay Filter allows an authorized attacker to elevate privileges locally...

Windows Overlay Filter Remote Code Execution Vulnerability

Buffer over-read in Windows Overlay Filter allows an authorized attacker to execute code locally...

Windows GDI Elevation of Privilege Vulnerability

Buffer over-read in Windows GDI allows an authorized attacker to elevate privileges locally...

Windows rndismp6.sys Information Disclosure Vulnerability

Buffer over-read in Windows RNDIS allows an unauthorized attacker to disclose information with a physical attack...

Windows Internet Key Exchange (IKE) Extension Denial of Service Vulnerability

Buffer over-read in Windows IKE Extension allows an authorized attacker to deny service over a network...

Windows Encrypting File System (EFS) Information Disclosure Vulnerability

Buffer over-read in Windows Encrypting File System EFS allows an authorized attacker to disclose information locally...

Windows Event Logging Service Information Disclosure Vulnerability

Buffer over-read in Windows Event Logging Service allows an authorized attacker to disclose information locally...

Windows Management Instrumentation Information Disclosure Vulnerability

Buffer over-read in Windows Management Instrumentation allows an authorized attacker to disclose information locally...

Windows Common Log File System Driver Information Disclosure Vulnerability

Buffer over-read in Windows Common Log File System Driver allows an authorized attacker to disclose information locally...

Microsoft Office Excel Information Disclosure Vulnerability

Buffer over-read in Microsoft Office Excel allows an unauthorized attacker to disclose information over a network...

Windows Win32 Kernel Subsystem Information Disclosure Vulnerability

Buffer over-read in Windows Win32 Kernel Subsystem allows an authorized attacker to disclose information locally...

Microsoft Office Word Information Disclosure Vulnerability

Buffer over-read in Microsoft Office Word allows an unauthorized attacker to disclose information over a network...

Windows CD-ROM Driver Information Disclosure Vulnerability

Buffer over-read in Windows CD-ROM Driver allows an authorized attacker to disclose information locally...

CVE-2026-109951

FreeRDP 3.17.1 before 3.32.0 contains a heap buffer over-read vulnerability in DynvcTrackerHandleCreateBack of the freerdp-proxy DRDYNVC channel handler that allows malicious backend RDP servers to read heap memory out of bounds. Attackers can send a CREATEREQUESTPDU whose channel name lacks a NU...

CVE-2026-109951 FreeRDP 3.17.1 before 3.32.0 Heap Buffer Over-Read via Proxy DRDYNVC Channel Name

FreeRDP 3.17.1 before 3.32.0 contains a heap buffer over-read vulnerability in DynvcTrackerHandleCreateBack of the freerdp-proxy DRDYNVC channel handler that allows malicious backend RDP servers to read heap memory out of bounds. Attackers can send a CREATEREQUESTPDU whose channel name lacks a NU...

CVE-2026-109951 FreeRDP 3.17.1 before 3.32.0 Heap Buffer Over-Read via Proxy DRDYNVC Channel Name

FreeRDP 3.17.1 before 3.32.0 contains a heap buffer over-read vulnerability in DynvcTrackerHandleCreateBack of the freerdp-proxy DRDYNVC channel handler that allows malicious backend RDP servers to read heap memory out of bounds. Attackers can send a CREATEREQUESTPDU whose channel name lacks a NU...

CVE-2026-109951

The FreeRDP application (versions 3.17.1 before 3.32.0 ) is vulnerable to a heap buffer over-read in the DynvcTrackerHandleCreateBack function of the freerdp-proxy DRDYNVC channel handler. The root cause is an unbounded snprintf read triggered when a malicious backend RDP server sends a CREATE_RE...

CVE-2026-109951: Out-of-bounds Read

FreeRDP 3.17.1 before 3.32.0 contains a heap buffer over-read vulnerability in DynvcTrackerHandleCreateBack of the freerdp-proxy DRDYNVC channel handler that allows malicious backend RDP servers to read heap memory out of bounds. Attackers can send a CREATEREQUESTPDU whose channel name lacks a NU...

PT-2026-112651

Name of the Vulnerable Software and Affected Versions Windows CD-ROM Driver affected versions not specified Description A buffer over-read in the Windows CD-ROM Driver allows an unauthorized attacker to elevate privileges over a network. A buffer over-read occurs when a program reads more data fr...