CVE-2026-88190

An out-of-bounds read vulnerability exists in Microsoft Office Excel , which could allow an unauthorized attacker to disclose sensitive information over a network. The vulnerability is classified as a Medium severity issue with a CVSS score of 6.5. Microsoft has released security updates to addre...

CVE-2026-88195

A buffer over-read vulnerability in Microsoft Office Excel allows an unauthorized attacker to disclose sensitive information over a network. The vulnerability is associated with CWE-126 (Buffer Over-read) and CWE-191 (Integer Underflow). The impact is categorized as high confidentiality with a CV...

CVE-2026-88172

A vulnerability exists in Microsoft Office Excel involving an out-of-bounds read (CWE-125). This flaw allows an unauthorized attacker to disclose information over a network. The impact is classified as Access to sensitive data with a CVSS v3.1 base score of 6.5. Microsoft has released official up...

CVE-2026-88154

An out-of-bounds read vulnerability exists in Microsoft Office Excel , which could allow an unauthorized attacker to disclose sensitive information over a network. The issue is categorized under CWE-125 and has a CVSS 3.1 score of 6.5 (Medium) . Microsoft has released official updates to address ...

CVE-2026-70219

An out-of-bounds read vulnerability exists in Microsoft Office Excel , which could allow an unauthorized attacker to disclose information over a network. Microsoft has released updates to address this vulnerability, and users are recommended to install them. Detailed information regarding specifi...

CVE-2026-70281

A vulnerability exists in Microsoft Office Outlook involving an out-of-bounds read (CWE-125). This flaw allows an unauthorized attacker to disclose sensitive information over a network. The impact is classified as high, with a CVSSv3.1 base score of 7.5 . Microsoft has released official updates t...

CVE-2026-70217

A vulnerability in Microsoft Office SharePoint allows an authorized attacker to disclose information over a network due to improper access control (CWE-284). The impact is classified as access to sensitive data with a CVSSv3.1 base score of 4.9 . Microsoft has released updates to address this vul...

CVE-2026-85932

A path traversal vulnerability exists in Microsoft Office SharePoint due to an improper limitation of a pathname to a restricted directory. This flaw allows an authorized attacker to disclose sensitive information over a network. Microsoft has released security updates to address this issue, and ...

CVE-2026-70214

A vulnerability in Microsoft Office Excel allows an unauthorized attacker to perform an out-of-bounds read , which can result in the disclosure of sensitive information locally. The issue has a CVSS v3.1 score of 5.5 (Medium) . Microsoft has released official updates to address this vulnerability...

CVE-2026-69919

An out-of-bounds read vulnerability exists in Windows Cryptographic Services . This flaw allows an authorized attacker to perform a local attack to disclose information . The vulnerability is associated with CWE-125 . No specific exploit details or remediation instructions are provided in the doc...

EUVD-2026-100136

Improper link resolution before file access 'link following' in Microsoft Defender allows an authorized attacker to disclose information locally...

CVE-2026-70264

The Microsoft Defender software is affected by an improper link resolution (link following) vulnerability. This flaw allows an authorized attacker to perform a local attack to disclose information or access sensitive data . Microsoft has released updates to address this vulnerability; users are e...

CVE-2026-70261

The Microsoft Trace Data Helper component is affected by a vulnerability that allows an authorized attacker to disclose sensitive system information locally. This issue is categorized as CWE-497 (Exposure of Sensitive System Information to an Unauthorized Control Sphere). The vulnerability has a ...

CVE-2026-70260

The Microsoft Trace Data Helper component is vulnerable to an information disclosure flaw (CWE-497) that allows an authorized attacker to disclose sensitive system information locally. The vulnerability results from exposure to an unauthorized control sphere. The CVSS 3.1 score is 5.5 (Medium) , ...

CVE-2026-70227

An out-of-bounds read vulnerability exists in the Windows Device Association Service . This flaw allows an authorized attacker to perform a local information disclosure, potentially revealing sensitive data. No specific exploit code or in-the-wild exploitation details are provided in the document...

CVE-2026-70084

An improper access control vulnerability exists in the Windows Projected File System . This flaw allows an authorized attacker to perform a local information disclosure . The root cause is categorized under CWE-22 (Path Traversal). No specific details regarding affected versions, exploit code, or...

CVE-2026-70148

The Windows Broadcast DVR User Service is susceptible to an improper authorization vulnerability (CWE-441). This flaw allows an authorized attacker to perform a local information disclosure . The vulnerability has a CVSS 3.1 base score of 6.5 and is categorized as a MEDIUM severity issue. No spec...

CVE-2026-87698

A Windows Remote Access Service Infrastructure component is vulnerable to an out-of-bounds read (CWE-125). This flaw allows an authorized attacker to perform a local information disclosure on the affected system. The CVSS 3.1 score is 5.5, reflecting a medium severity with a local attack vector a...

CVE-2026-83933

The Windows Update Orchestrator Service is vulnerable to an improper link resolution before file access (link following) vulnerability. This flaw allows an authorized attacker to perform a local information disclosure . No specific software versions, exploit links, or remediation steps are provid...

CVE-2026-83925

A vulnerability exists in the Windows Kernel involving the use of uninitialized resource (CWE-908). This flaw allows an authorized attacker to perform a local information disclosure (CWE-497). The vulnerability has a Medium base severity score of 4.7, requiring local access and high complexity to...