CVE-2026-103569

Out-of-bounds read in Windows IKE Extension allows an unauthorized attacker to disclose information over a network...

CVE-2026-103567

Buffer over-read in Windows Broadcast DVR User Service allows an authorized attacker to disclose information locally...

CVE-2026-102867

Out-of-bounds read in Microsoft Office Word allows an unauthorized attacker to disclose information over a network...

CVE-2026-103553

Out-of-bounds read in Windows Partition Management Driver allows an authorized attacker to elevate privileges locally...

CVE-2026-102225

Out-of-bounds read in Windows Text Shaping allows an unauthorized attacker to execute code over a network...

CVE-2026-102198

Out-of-bounds read in Windows Remote Desktop Protocol allows an authorized attacker to disclose information over a network...

CVE-2026-86016

VNote, a note-taking platform, contains a Stored XSS vulnerability in versions prior to 4.3.0 . The root cause is located in src/data/extra/web/js/markdownit.js, where the application assigns p_metaData to preNode.innerHTML before the protectFromXss sanitization path executes. This allows an atta...

CVE-2026-86016 VNote: Stored XSS via YAML Frontmatter Leading to Local File Read and Remote Exfiltration

VNote is a note-taking platform. Prior to 4.3.0, VNote uses the assignment preNode.innerHTML = pmetaData in src/data/extra/web/js/markdownit.js to insert YAML frontmatter metadata into a pre element before the protectFromXss sanitization path runs. Opening an attacker-supplied Markdown note can...

CVE-2026-86016 VNote: Stored XSS via YAML Frontmatter Leading to Local File Read and Remote Exfiltration

VNote is a note-taking platform. Prior to 4.3.0, VNote uses the assignment preNode.innerHTML = pmetaData in src/data/extra/web/js/markdownit.js to insert YAML frontmatter metadata into a pre element before the protectFromXss sanitization path runs. Opening an attacker-supplied Markdown note can...

CVE-2026-108129

An out-of-bounds read vulnerability exists in the DNS Server , which allows an authorized attacker to disclose information over a network. The vulnerability is associated with CWE-125 and has a CVSS 3.1 base score of 6.5 (MEDIUM) . While the vulnerability is confirmed, specific details regarding ...

CVE-2026-108128

The DNS Server is impacted by an out-of-bounds read vulnerability (CWE-125), which allows an authorized attacker to disclose information over a network. While the vulnerability is confirmed to have a high confidentiality impact , specific details regarding the vulnerable component or function are...

CVE-2026-97842

An out-of-bounds read vulnerability exists in the DNS Server , which could allow an authorized attacker to disclose information over a network. The vulnerability is associated with CWE-125 . While the CVSS v3.1 score is 6.5 (Medium) , the base metrics indicate a High impact on confidentiality. No...

CVE-2026-97843

An out-of-bounds read vulnerability in the DNS Server allows an authorized attacker to disclose information over a network. The vulnerability is categorized under CWE-125 and has a CVSS 3.1 base score of 6.5 (Medium) . While the impact involves information disclosure, specific exploit details and...

EUVD-2026-100443

Out-of-bounds read in DNS Server allows an authorized attacker to disclose information over a network...

EUVD-2026-100445

Out-of-bounds read in DNS Server allows an authorized attacker to disclose information over a network...

EUVD-2026-100441

Out-of-bounds read in DNS Server allows an authorized attacker to disclose information over a network...

EUVD-2026-100442

Out-of-bounds read in DNS Server allows an authorized attacker to disclose information over a network...

EUVD-2026-100444

Out-of-bounds read in DNS Server allows an authorized attacker to disclose information over a network...

EUVD-2026-100440

Out-of-bounds read in DNS Server allows an authorized attacker to disclose information over a network...

CVE-2026-97840

An out-of-bounds read vulnerability exists in the DNS Server , which allows an authorized attacker to disclose information over a network. The vulnerability is associated with CWE-125 and has been assigned a CVSS 3.1 base score of 6.5 (Medium) . While the documents identify the root cause as an o...