CVE-2026-83925

A vulnerability exists in the Windows Kernel involving the use of uninitialized resource (CWE-908). This flaw allows an authorized attacker to perform a local information disclosure (CWE-497). The vulnerability has a Medium base severity score of 4.7, requiring local access and high complexity to...

CVE-2026-83933

The Windows Update Orchestrator Service is vulnerable to an improper link resolution before file access (link following) vulnerability. This flaw allows an authorized attacker to perform a local information disclosure . No specific software versions, exploit links, or remediation steps are provid...

CVE-2026-85910

A buffer over-read vulnerability exists in the Windows StateRepository API . This flaw allows an authorized attacker to perform a local information disclosure, potentially exposing sensitive data. The vulnerability is associated with CWE-126 . No specific exploit details or active in-the-wild exp...

CVE-2026-85909

An out-of-bounds read vulnerability exists in the Windows Universal Disk Format File System Driver (UDFS) . This flaw allows an authorized attacker to perform a local information disclosure . While specific exploit details are not provided, the vulnerability is associated with CWE-822 (Untrusted ...

CVE-2026-83905

The Windows Shell is affected by an information disclosure vulnerability where sensitive system information is exposed to an unauthorized control sphere. This allows an authorized attacker to disclose information locally . The vulnerability is associated with CWE-497 . No specific exploit details...

CVE-2026-83904

An out-of-bounds read vulnerability exists in the HID Parser Library . This flaw allows an authorized attacker to perform a local information disclosure . The vulnerability is associated with CWE-125 and has a CVSS 3.1 base score of 5.5. No specific software versions or exploit details are provid...

CVE-2026-83907

A vulnerability in Windows Hello allows an authorized attacker to disclose sensitive system information locally. The issue is categorized as an exposure of sensitive system information to an unauthorized control sphere (CWE-497). The impact involves a high level of confidentiality loss, with a CV...

CVE-2026-83897

The Windows Win32 Kernel Subsystem is vulnerable to an information disclosure flaw (CWE-497 ). An authorized attacker can exploit this vulnerability to disclose sensitive system information locally. The vulnerability has a MEDIUM base severity (4.7) with a LOCAL attack vector and HIGH attack comp...

CVE-2026-83898

An out-of-bounds read vulnerability exists in the HID Parser Library . This flaw allows an authorized attacker to perform a local information disclosure , potentially exposing sensitive data from the system. The vulnerability is associated with CWE-125 . While specific affected versions and remed...

CVE-2026-83884

An out-of-bounds read vulnerability exists in the HID Parser Library on Windows. This flaw allows an authorized attacker to perform a local information disclosure . No specific exploit details or information regarding in-the-wild exploitation are provided in the documents.

CVE-2026-83887

An out-of-bounds read vulnerability exists in the HID Parser Library . This flaw allows an authorized attacker to perform a local information disclosure . No specific versions, exploit details, or remediation steps are provided in the documents.

CVE-2026-83870

The Windows Aggregated Data Platform Service is susceptible to an out-of-bounds read vulnerability (CWE-125). This flaw allows an authorized attacker to perform a local information disclosure , potentially exposing sensitive data. The vulnerability has a CVSS 3.1 base score of 5.5 (Medium). No sp...

CVE-2026-83794

The Windows Portable Device MTP Driver contains an out-of-bounds read vulnerability. This flaw allows an authorized attacker to perform a local information disclosure , potentially exposing sensitive data. The vulnerability is associated with CWE-125 . While the risk is classified as MEDIUM , the...

CVE-2026-83835

A buffer over-read vulnerability exists in the Windows Common Log File System Driver . This flaw allows an authorized attacker to disclose information locally on the affected system. The vulnerability is associated with CWE-126 and CWE-497 . No specific exploit information or remediation details ...

CVE-2026-83786

A vulnerability in Windows NTFS allows an authorized attacker to disclose sensitive information locally through the generation of error messages. This issue is classified as an information disclosure vulnerability (CWE-209) with a Medium base severity score. While the vulnerability allows for loc...

CVE-2026-83788

A buffer over-read vulnerability exists in the Windows RNDIS component, specifically within rndismp6.sys . This flaw allows an unauthorized attacker to perform an information disclosure by conducting a physical attack . No specific exploit details or in-the-wild exploitation information are provi...

CVE-2026-83773

The Windows MIDI Service Module is vulnerable to an information disclosure flaw (CWE-497). This vulnerability allows an authorized attacker to disclose sensitive system information locally due to exposure to an unauthorized control sphere. No specific exploit details or patch versions are provide...

CVE-2026-83774

A vulnerability in the Windows Win32 Kernel Subsystem allows an authorized attacker to disclose sensitive system information locally. The root cause is the exposure of this information to an unauthorized control sphere (CWE-497). The impact is a high level of confidentiality loss, though integrit...

CVE-2026-83764

A vulnerability in the Windows Clipboard User Service stems from incorrect authorization , which allows an authorized attacker to perform a local information disclosure . The CVSS 3.1 score is 5.5, reflecting a MEDIUM severity with HIGH confidentiality impact. No specific exploit information or r...

CVE-2026-83765

An out-of-bounds read vulnerability exists in the Windows DWM Core Library . This flaw allows an authorized attacker to perform a local information disclosure . The CVSS 3.1 score is 5.5 (Medium) , with a high impact on confidentiality. No specific exploit information or remediation details are p...