CVE-2026-69954

A buffer over-read vulnerability exists in the Windows Overlay Filter component. This flaw allows an authorized attacker to perform a local information disclosure, potentially exposing sensitive data. The vulnerability has a Medium severity (CVSS 3.1 score of 5.5) and requires low privileges for ...

SUSE CVE-2026-109265

ImageMagick 7.1.1-7 before 7.1.2-32 contains a heap buffer over-read vulnerability that allows attackers to read beyond allocated memory due to incorrect string termination in XMP profiles. Attackers can supply a crafted image containing a malformed XMP profile to trigger the over-read and crash...

SUSE CVE-2026-109281

ImageMagick 7.1.0-21 before 7.1.2-32 contains a heap buffer over-read in its handling of the -fx option, where a certain -fx operation reads beyond the bounds of an allocated heap buffer in specific situations. Attackers who can get a crafted -fx expression processed can read out-of-bounds heap...

CVE-2026-109951

FreeRDP 3.17.1 before 3.32.0 contains a heap buffer over-read vulnerability in DynvcTrackerHandleCreateBack of the freerdp-proxy DRDYNVC channel handler that allows malicious backend RDP servers to read heap memory out of bounds. Attackers can send a CREATEREQUESTPDU whose channel name lacks a NU...

DEBIAN-CVE-2026-109951

FreeRDP 3.17.1 before 3.32.0 contains a heap buffer over-read vulnerability in DynvcTrackerHandleCreateBack of the freerdp-proxy DRDYNVC channel handler that allows malicious backend RDP servers to read heap memory out of bounds. Attackers can send a CREATEREQUESTPDU whose channel name lacks a NU...

UBUNTU-CVE-2026-109951

FreeRDP 3.17.1 before 3.32.0 contains a heap buffer over-read vulnerability in DynvcTrackerHandleCreateBack of the freerdp-proxy DRDYNVC channel handler that allows malicious backend RDP servers to read heap memory out of bounds. Attackers can send a CREATEREQUESTPDU whose channel name lacks a NU...

CVE-2026-109951

FreeRDP 3.17.1 before 3.32.0 contains a heap buffer over-read vulnerability in DynvcTrackerHandleCreateBack of the freerdp-proxy DRDYNVC channel handler that allows malicious backend RDP servers to read heap memory out of bounds. Attackers can send a CREATEREQUESTPDU whose channel name lacks a NU...

Servicing Stack Updates Information Disclosure Vulnerability

Buffer over-read in Servicing Stack Updates allows an authorized attacker to disclose information locally...

Windows Overlay Filter Elevation of Privilege Vulnerability

Buffer over-read in Windows Overlay Filter allows an authorized attacker to elevate privileges locally...

Windows CD-ROM Driver Information Disclosure Vulnerability

Buffer over-read in Windows CD-ROM Driver allows an authorized attacker to disclose information locally...

Servicing Stack Updates Information Disclosure Vulnerability

Buffer over-read in Servicing Stack Updates allows an authorized attacker to disclose information locally...

Windows rndismp6.sys Information Disclosure Vulnerability

Buffer over-read in Windows RNDIS allows an unauthorized attacker to disclose information with a physical attack...

Windows Encrypting File System (EFS) Information Disclosure Vulnerability

Buffer over-read in Windows Encrypting File System EFS allows an authorized attacker to disclose information locally...

Windows USB Driver Information Disclosure Vulnerability

Buffer over-read in Windows USB Driver allows an authorized attacker to disclose information locally...

Microsoft Office Excel Information Disclosure Vulnerability

Buffer over-read in Microsoft Office Excel allows an unauthorized attacker to disclose information over a network...

Microsoft Office Word Information Disclosure Vulnerability

Buffer over-read in Microsoft Office Word allows an unauthorized attacker to disclose information over a network...

Windows CD-ROM Driver Elevation of Privilege Vulnerability

Buffer over-read in Windows CD-ROM Driver allows an unauthorized attacker to elevate privileges over a network...

Windows Overlay Filter Information Disclosure Vulnerability

Buffer over-read in Windows Overlay Filter allows an authorized attacker to disclose information locally...

Windows Overlay Filter Remote Code Execution Vulnerability

Buffer over-read in Windows Overlay Filter allows an authorized attacker to execute code locally...

Windows Broadcast DVR User Service Information Disclosure Vulnerability

Buffer over-read in Windows Broadcast DVR User Service allows an authorized attacker to disclose information locally...