CVE-2026-109951: Out-of-bounds Read

FreeRDP 3.17.1 before 3.32.0 contains a heap buffer over-read vulnerability in DynvcTrackerHandleCreateBack of the freerdp-proxy DRDYNVC channel handler that allows malicious backend RDP servers to read heap memory out of bounds. Attackers can send a CREATEREQUESTPDU whose channel name lacks a NU...

Microsoft Windows: CVE-2026-85910: Windows StateRepository API Information Disclosure Vulnerability

Buffer over-read in Windows StateRepository API allows an authorized attacker to disclose information locally...

Microsoft Windows: CVE-2026-83685: Windows Internet Key Exchange (IKE) Extension Denial of Service Vulnerability

Buffer over-read in Windows IKE Extension allows an authorized attacker to deny service over a network...

Microsoft Windows: CVE-2026-83565: Windows Encrypting File System (EFS) Information Disclosure Vulnerability

Buffer over-read in Windows Encrypting File System EFS allows an authorized attacker to disclose information locally...

Microsoft Windows: CVE-2026-85935: Windows USB Driver Information Disclosure Vulnerability

Buffer over-read in Windows USB Driver allows an authorized attacker to disclose information locally...

Microsoft Windows: CVE-2026-83888: Windows CD-ROM Driver Elevation of Privilege Vulnerability

Buffer over-read in Windows CD-ROM Driver allows an unauthorized attacker to elevate privileges over a network...

Microsoft Windows: CVE-2026-85835: Servicing Stack Updates Information Disclosure Vulnerability

Buffer over-read in Servicing Stack Updates allows an authorized attacker to disclose information locally...

Microsoft Windows: CVE-2026-83727: Windows Overlay Filter Elevation of Privilege Vulnerability

Buffer over-read in Windows Overlay Filter allows an authorized attacker to elevate privileges locally...

Microsoft Windows: CVE-2026-83719: Servicing Stack Updates Information Disclosure Vulnerability

Buffer over-read in Servicing Stack Updates allows an authorized attacker to disclose information locally...

Microsoft Windows: CVE-2026-70234: Desktop Window Manager Information Disclosure Vulnerability

Buffer over-read in Desktop Window Manager allows an authorized attacker to disclose information locally...

Microsoft Windows: CVE-2026-83835: Windows Common Log File System Driver Information Disclosure Vulnerability

Buffer over-read in Windows Common Log File System Driver allows an authorized attacker to disclose information locally...

Microsoft Windows: CVE-2026-83788: Windows rndismp6.sys Information Disclosure Vulnerability

Buffer over-read in Windows RNDIS allows an unauthorized attacker to disclose information with a physical attack...

CVE-2026-97828: Buffer Over-read

Buffer over-read in DNS Server allows an authorized attacker to disclose information over a network...

CVE-2026-88201: Buffer Over-read

Buffer over-read in Microsoft Office Excel allows an unauthorized attacker to disclose information over a network...

CVE-2026-88167: Buffer Over-read

Buffer over-read in Microsoft Office Word allows an unauthorized attacker to disclose information over a network...

Microsoft Windows: CVE-2026-69884: Windows GDI Elevation of Privilege Vulnerability

Buffer over-read in Windows GDI allows an authorized attacker to elevate privileges locally...

CVE-2026-85935: Buffer Over-read

Buffer over-read in Windows USB Driver allows an authorized attacker to disclose information locally...

CVE-2026-83888: Buffer Over-read

Buffer over-read in Windows CD-ROM Driver allows an unauthorized attacker to elevate privileges over a network...

CVE-2026-83727: Buffer Over-read

Buffer over-read in Windows Overlay Filter allows an authorized attacker to elevate privileges locally...

CVE-2026-83719: Buffer Over-read

Buffer over-read in Servicing Stack Updates allows an authorized attacker to disclose information locally...