16521 matches found
EUVD-2026-73600
Buffer over-read in Windows Encrypting File System EFS allows an authorized attacker to disclose information locally...
CVE-2026-69794
CVE-2026-69794 is a buffer over-read in Windows Encrypting File System (EFS) that allows an authorized local attacker to disclose information . The flaw resides within the EFS component and results in a confidentiality impact with no integrity or availability impact. The CVSS 3.1 base score is 5....
CVE-2026-69610
A buffer over-read in Windows Win32K (the kernel-mode component handling graphical subsystem operations) allows an authorized attacker with low privileges to achieve local privilege escalation . The vulnerability requires local access , has high attack complexity , and does not require user inter...
EUVD-2026-73559
Buffer over-read in Windows Win32K allows an authorized attacker to elevate privileges locally...
EUVD-2026-73492
Buffer over-read in Windows DHCP Server allows an authorized attacker to deny service over an adjacent network...
CVE-2026-69416
CVE-2026-69416 is a buffer over-read in Windows DHCP Server that allows an authorized attacker with low privileges on an adjacent network to cause a denial of service , with high availability impact and no confidentiality or integrity impact (CVSS 3.1: 5.7 MEDIUM ). CISA assesses exploitation as ...
EUVD-2026-73452
Buffer over-read in Windows Overlay Filter allows an authorized attacker to disclose information locally...
CVE-2026-69316
CVE-2026-69316 is a buffer over-read vulnerability in the Windows Overlay Filter component. An authorized local attacker with low privileges can exploit it to disclose sensitive information . The attack requires high complexity and no user interaction, with a CVSS v3.1 base score of 4.7 (MEDIUM) ...
CVE-2026-67393
CVE-2026-67393 is a buffer over-read vulnerability in Microsoft SQL Server that allows an authorized attacker to disclose information over a network. The vulnerability is classified as information disclosure with a CVSS 3.1 base score of 6.5 (Medium) , requiring low privileges and no user interac...
EUVD-2026-73385
Buffer over-read in SQL Server allows an authorized attacker to disclose information over a network...
EUVD-2026-73384
Buffer over-read in SQL Server allows an authorized attacker to disclose information over a network...
CVE-2026-67390
CVE-2026-67390 is a buffer over-read vulnerability in Microsoft SQL Server that allows an authorized attacker (low privileges required) to disclose information over a network with low attack complexity and no user interaction. The CVSS 3.1 score is 6.5 (Medium) , reflecting high confidentiality i...
EUVD-2026-73319
Buffer over-read in SQL Server allows an authorized attacker to disclose information over a network...
CVE-2026-73029
CVE-2026-73029 is a buffer over-read vulnerability in Microsoft SQL Server that allows an authorized attacker (low privileges required) to disclose information over a network. The CVSS 3.1 base score is 6.5 (MEDIUM) with high confidentiality impact but no integrity or availability impact. CISA's ...
EUVD-2026-73156
Buffer over-read in Microsoft Office Word allows an unauthorized attacker to disclose information over a network...
CVE-2026-69719
CVE-2026-69719 is a buffer over-read vulnerability in Microsoft Office Word that allows an unauthorized attacker to disclose information over a network . The CVSS 3.1 score is 6.5 (MEDIUM) , with a network attack vector, low complexity, no privileges required, and user interaction required , resu...
EUVD-2026-73008
Buffer over-read in Windows Volume Manager Extension Driver allows an authorized attacker to elevate privileges locally...
CVE-2026-69582
CVE-2026-69582 is a buffer over-read vulnerability in the Windows Volume Manager Extension Driver , identified by Microsoft (CNA). An authorized local attacker with low privileges can exploit this flaw to elevate privileges locally, achieving high impact on confidentiality, integrity, and availab...
CVE-2026-68875
CVE-2026-68875 is a buffer over-read in Windows NTFS that allows an authorized local attacker to achieve code execution . The vulnerability is rated CVSS 3.1 7.8 (High) with a local attack vector, low complexity, low privileges required, and no user interaction needed. No exploitation details or ...