CVE-2026-96851

A buffer over-read vulnerability exists in Windows Management Instrumentation . This flaw allows an authorized attacker to disclose information locally on the affected system. The vulnerability is classified as an information disclosure issue with a CVSS 3.1 score of 5.5 (Medium) . While the docu...

CVE-2026-96247

A vulnerability exists in Windows Kernel-Mode Drivers due to the use of uninitialized resources (CWE-908). This flaw allows an authorized attacker to perform a local information disclosure . No specific versions or detailed remediation steps are provided in the documents beyond the existence of a...

CVE-2026-96246

An out-of-bounds read vulnerability exists in Network Policy Server (NPS) . This flaw allows an unauthorized attacker to disclose information over a network. The vulnerability is associated with CWE-125 and has a HIGH CVSSv3.1 severity score of 7.5 . No specific root cause, affected versions, or ...

CVE-2026-96245

An out-of-bounds read vulnerability exists in the Windows Routing and Remote Access Service (RRAS) . This flaw allows an unauthorized attacker to disclose information over a network. While the root cause is identified as an out-of-bounds read (CWE-125), the specific component or file is not speci...

CVE-2026-88201

A buffer over-read vulnerability in Microsoft Office Excel allows an unauthorized attacker to disclose sensitive information over a network. This vulnerability impacts the confidentiality of data within the victim's context. Microsoft has released official updates to address this issue; users are...

CVE-2026-88167

A buffer over-read vulnerability exists in Microsoft Office Word , which could allow an unauthorized attacker to disclose information over a network. The vulnerability is associated with CWE-126 and has been addressed by Microsoft in a released update. Details regarding specific affected versions...

CVE-2026-88169

A vulnerability exists in Microsoft Office Word involving an out-of-bounds read , which allows an unauthorized attacker to disclose information over a network. The impact is categorized as Access to sensitive data . Microsoft has released updates to address this vulnerability, and users are encou...

CVE-2026-88175

An out-of-bounds read vulnerability exists in Microsoft Office Excel , which could allow an unauthorized attacker to disclose information over a network. The impact is categorized as access to sensitive data . Microsoft has released security updates to address this vulnerability; users are encour...

CVE-2026-88151

Microsoft Office Excel is affected by an out-of-bounds read vulnerability (CVE-2026-88151 ), which may allow an unauthorized attacker to disclose information over a network. This vulnerability has been addressed by Microsoft with the release of security updates. Users are encouraged to install th...

CVE-2026-88153

An out-of-bounds read vulnerability exists in Microsoft Office Excel , which could allow an unauthorized attacker to disclose information over a network. This vulnerability is confirmed with a CVSS v3.1 score of 6.5 (Medium) . While specific technical root causes or exploit details are not provid...

CVE-2026-70298

A path traversal vulnerability in Microsoft Office SharePoint (CVE-2026-70298) allows an authorized attacker to disclose sensitive information over a network due to an improper limitation of a pathname to a restricted directory. Microsoft has released updates to address this issue; users are enco...

CVE-2026-70206

An out-of-bounds read vulnerability exists in Microsoft Office Word , which may allow an unauthorized attacker to disclose information over a network. This vulnerability is categorized as a security risk that could grant access to sensitive data. Microsoft has released official updates to address...

CVE-2026-70263

An out-of-bounds read vulnerability in Microsoft Office Word allows an unauthorized attacker to disclose sensitive information over a network. This vulnerability affects the Microsoft Office Word application, where the flaw could lead to access to sensitive data . Microsoft has released updates t...

CVE-2026-70259

A Server-Side Request Forgery (SSRF) vulnerability exists in Microsoft Office SharePoint , allowing an authorized attacker to disclose information over a network. The vulnerability is categorized under CWE-918 and has a CVSS 3.1 score of 6.5 (Medium) . Microsoft has released security updates to a...

CVE-2026-70149

The Windows Client Side Caching driver (csc.sys) is affected by a vulnerability that allows an authorized attacker to disclose sensitive information locally. The underlying cause is attributed to Heap-based Buffer Overflow and Integer Overflow or Wraparound issues. The impact includes high levels...

CVE-2026-70137

A vulnerability in Windows Remote Access Connection Manager involves improper access control , which allows an authorized attacker to perform a local information disclosure . The CVSS 3.1 score is 5.5 (Medium) , with a high impact on confidentiality. No specific exploit details or versions are pr...

CVE-2026-70011

The Windows IP Over USB Service is affected by an out-of-bounds read vulnerability (CWE-125). This flaw allows an authorized attacker to disclose information locally . The vulnerability has a CVSS 3.1 base score of 5.5 (Medium) , with a high impact on confidentiality. No specific exploit informat...

CVE-2026-70044

An out-of-bounds read vulnerability exists in Microsoft Windows Media Foundation . This flaw allows an unauthorized attacker to disclose information locally on an affected system. While the specific component or root cause is not detailed beyond the out-of-bounds read, the vulnerability has a MED...

CVE-2026-70024

A stack-based buffer overflow exists in Windows Internet Information Services (IIS), which could allow an unauthorized attacker to execute arbitrary code over a network. The vulnerability is characterized by improper input validation (CWE-20) and has a CRITICAL severity score of 9.80. This flaw a...

CVE-2026-69940

An out-of-bounds read vulnerability exists in the Windows Client for NFS . This flaw allows an unauthorized attacker to perform information disclosure over a network. The vulnerability is characterized by a Medium severity rating (CVSS 3.1: 6.5), with a network attack vector and low complexity. N...