Microsoft Windows: CVE-2026-83832: Windows Spaceport.sys Elevation of Privilege Vulnerability

Out-of-bounds read in Windows Spaceport.sys allows an authorized attacker to elevate privileges locally...

Microsoft Windows: CVE-2026-83843: Windows Internet Key Exchange (IKE) Extension Denial of Service Vulnerability

Out-of-bounds read in Windows Internet Key Exchange IKE Protocol allows an unauthorized attacker to deny service over a network...

Microsoft Office: CVE-2026-97014: Microsoft Office Excel Information Disclosure Vulnerability

Out-of-bounds read in Microsoft Office Excel allows an unauthorized attacker to disclose information locally...

CVE-2026-103825: Out-of-bounds Read

Substance3D - Designer is affected by an out-of-bounds read vulnerability that could lead to disclosure of sensitive memory. An attacker could leverage this vulnerability to disclose sensitive information. Exploitation of this issue requires user interaction in that a victim must open a malicious...

PT-2026-112734

Name of the Vulnerable Software and Affected Versions Windows Print Spooler Components affected versions not specified Description An out-of-bounds read in Windows Print Spooler Components allows an unauthorized attacker to disclose information over a network. An out-of-bounds read occurs when th...

Microsoft Office: CVE-2026-88151: Microsoft Office Excel Information Disclosure Vulnerability

Out-of-bounds read in Microsoft Office Excel allows an unauthorized attacker to disclose information over a network...

PT-2026-112935

Name of the Vulnerable Software and Affected Versions DNS Server affected versions not specified Description An out-of-bounds read occurs in the DNS Server, which allows an authorized attacker to cause a denial of service over a network. An out-of-bounds read is a condition where the software rea...

PT-2026-113434

Name of the Vulnerable Software and Affected Versions SQL Server affected versions not specified Description An out-of-bounds read allows an authorized attacker to disclose sensitive information over a network. Recommendations At the moment, there is no information about a newer version that...

ROS-20261013-73-0372

The vulnerability in the kernel-lt is related to reading beyond the buffer boundaries in memory. Exploiting this vulnerability can allow an attacker to cause a service failure...

CVE-2026-77361: Improper Link Resolution Before File Access

obsidian-tc is a governed, agent-ready Model Context Protocol server for Obsidian vaults. Prior to 1.3.1, read access-control list ACL checks use a lexical vault-relative path while containment checks use the resolved path. An in-vault symlink under an allowed glob that resolves into a denied...

Microsoft Office: CVE-2026-97744: Microsoft Office PowerPoint Information Disclosure Vulnerability

Out-of-bounds read in Microsoft Office PowerPoint allows an unauthorized attacker to disclose information locally...

PT-2026-112533

Name of the Vulnerable Software and Affected Versions Windows Print Spooler Components affected versions not specified Description An out-of-bounds read in Windows Print Spooler Components allows an authorized attacker to disclose sensitive information locally and affect the system. An...

Microsoft Office: CVE-2026-97005: Microsoft Office PowerPoint Information Disclosure Vulnerability

Out-of-bounds read in Microsoft Office PowerPoint allows an unauthorized attacker to disclose information locally...

PT-2026-113234

Name of the Vulnerable Software and Affected Versions Windows Partition Management Driver affected versions not specified Description An out-of-bounds read in the Windows Partition Management Driver allows an unauthorized remote attacker to execute arbitrary code over a network and affect the...

PT-2026-113249

Out-of-bounds read in DNS Server allows an authorized attacker to disclose information over a network...

CVE-2026-88115: Out-of-bounds Read

Out-of-bounds read in Windows Server for NFS allows an unauthorized attacker to execute code over a network...

CVE-2026-70234: Buffer Over-read

Buffer over-read in Desktop Window Manager allows an authorized attacker to disclose information locally...

PT-2026-113259

Out-of-bounds read in DNS Server allows an authorized attacker to disclose information over a network...

CVE-2026-103028: Incorrect Authorization

SFTPGo is an open source, event-driven file transfer solution. From 2.5.0 until 2.7.6, an authenticated user with copy permission can copy a source file denied by deniedpatterns or outside allowedpatterns to an allowed destination name because file-pattern filters are evaluated only on the...

PT-2026-112727

Name of the Vulnerable Software and Affected Versions Microsoft Graphics Component affected versions not specified Description An out-of-bounds read in the Microsoft Graphics Component allows an authorized attacker to elevate privileges locally. An out-of-bounds read occurs when the software read...