1254990 matches found
EUVD-2026-73794
Out-of-bounds read in SQL Server allows an unauthorized attacker to disclose information over a network...
CVE-2026-77488
Microsoft SQL Server is affected by an integer underflow (wrap or wraparound) that allows an authorized local attacker to disclose information. The flaw requires low privileges and no user interaction, with a CVSS 3.1 score of 5.5 (MEDIUM) — high confidentiality impact but no integrity or availab...
EUVD-2026-73789
Integer underflow wrap or wraparound in SQL Server allows an authorized attacker to disclose information locally...
EUVD-2026-73766
Exposure of private personal information to an unauthorized actor in Windows Biometric Service allows an authorized attacker to disclose information locally...
CVE-2026-73008
CVE-2026-73008 is an information disclosure vulnerability in Windows Biometric Service . It allows a locally authenticated attacker with low privileges to expose private personal information to an unauthorized actor, resulting in high confidentiality impact with no integrity or availability impac...
EUVD-2026-73742
Use of uninitialized resource in Windows Failover Cluster allows an unauthorized attacker to disclose information over a network...
CVE-2026-72989
CVE-2026-72989 affects Windows Failover Cluster due to a use of uninitialized resource , allowing an unauthorized attacker to disclose information over a network . The vulnerability carries a CVSS 3.1 score of 7.5 (High) with a vector of AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N, indicating a network-e...
CVE-2026-65812
Microsoft Teams for Android is affected by an information disclosure vulnerability caused by the insertion of sensitive information into sent data, allowing an authorized attacker to disclose information over a network. The CVSS 3.1 score is 6.8 (Medium) , with a network attack vector, low comple...
EUVD-2026-73739
Insertion of sensitive information into sent data in Microsoft Teams for Android allows an authorized attacker to disclose information over a network...
CVE-2026-72976
CVE-2026-72976 is an out-of-bounds read in Microsoft Office Word that allows an authorized attacker with low privileges to disclose information locally. Exploitation requires user interaction, with no integrity or availability impact. The CVSS 3.1 base score is 5.0 (MEDIUM) (AV:L/AC:L/PR:L/UI:R/S...
EUVD-2026-73735
Out-of-bounds read in Microsoft Office PowerPoint allows an unauthorized attacker to disclose information over a network...
EUVD-2026-73736
Out-of-bounds read in Microsoft Office Word allows an authorized attacker to disclose information locally...
CVE-2026-72975
CVE-2026-72975 is an out-of-bounds read in Microsoft Office PowerPoint that allows an unauthenticated remote attacker to disclose information over a network. The vulnerability requires user interaction (e.g., opening a crafted file) but no prior privileges. CVSS 3.1 scores it 6.5 (Medium) , with ...
CVE-2026-72977
CVE-2026-72977 is an out-of-bounds read vulnerability in Microsoft Office PowerPoint that allows an unauthorized, network-based attacker to disclose information . The attack requires user interaction (e.g., opening a crafted file) but no prior authentication. CVSS 3.1 base score is 6.5 (MEDIUM) w...
EUVD-2026-73733
Buffer over-read in Microsoft Office Excel allows an unauthorized attacker to disclose information over a network...
CVE-2026-72974
Microsoft Office Excel is affected by a buffer over-read vulnerability that allows an unauthorized attacker to disclose information over a network . The CVSS 3.1 score is 6.5 (MEDIUM) with vector AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N , meaning exploitation requires user interaction (likely opening ...
EUVD-2026-73734
Out-of-bounds read in Microsoft Office PowerPoint allows an unauthorized attacker to disclose information over a network...
CVE-2026-72938
CVE-2026-72938 is an information disclosure vulnerability in Microsoft Office PowerPoint caused by a type confusion flaw (accessing a resource using an incompatible type). An unauthorized attacker can exploit this over a network with low complexity and no privileges , though user interaction is r...