CVE-2026-96866

An out-of-bounds read vulnerability exists in the Network Device Enrollment Service (NDES) . This flaw allows an unauthorized attacker to perform a Denial of Service (DoS) attack over a network. The vulnerability is characterized by a CVSS 3.1 score of 7.5 (High) with a network attack vector and ...

CVE-2026-96314

An out-of-bounds read vulnerability exists in the Windows Audio Service . This flaw allows an authorized attacker to perform a local information disclosure, potentially exposing sensitive data. The vulnerability is assigned CWE-125 . No specific exploit details or in-the-wild exploitation informa...

CVE-2026-96851

A buffer over-read vulnerability exists in Windows Management Instrumentation . This flaw allows an authorized attacker to disclose information locally on the affected system. The vulnerability is classified as an information disclosure issue with a CVSS 3.1 score of 5.5 (Medium) . While the docu...

CVE-2026-96848

A buffer over-read vulnerability exists in the Windows Win32 Kernel Subsystem . This flaw allows an authorized attacker to perform a local information disclosure , potentially exposing sensitive data. While the CVSS v3.1 score is 5.5 (Medium) , the vulnerability has a high confidentiality impact....

CVE-2026-96245

An out-of-bounds read vulnerability exists in the Windows Routing and Remote Access Service (RRAS) . This flaw allows an unauthorized attacker to disclose information over a network. While the root cause is identified as an out-of-bounds read (CWE-125), the specific component or file is not speci...

CVE-2026-96306

An out-of-bounds read vulnerability exists in the Windows Sysmain Service . This flaw allows an authorized attacker to achieve local privilege elevation . The vulnerability is associated with CWE-125 . No specific exploit details or in-the-wild exploitation information are provided in the documen...

CVE-2026-96246

An out-of-bounds read vulnerability exists in Network Policy Server (NPS) . This flaw allows an unauthorized attacker to disclose information over a network. The vulnerability is associated with CWE-125 and has a HIGH CVSSv3.1 severity score of 7.5 . No specific root cause, affected versions, or ...

CVE-2026-88201

A buffer over-read vulnerability in Microsoft Office Excel allows an unauthorized attacker to disclose sensitive information over a network. This vulnerability impacts the confidentiality of data within the victim's context. Microsoft has released official updates to address this issue; users are...

CVE-2026-88169

A vulnerability exists in Microsoft Office Word involving an out-of-bounds read , which allows an unauthorized attacker to disclose information over a network. The impact is categorized as Access to sensitive data . Microsoft has released updates to address this vulnerability, and users are encou...

CVE-2026-88175

An out-of-bounds read vulnerability exists in Microsoft Office Excel , which could allow an unauthorized attacker to disclose information over a network. The impact is categorized as access to sensitive data . Microsoft has released security updates to address this vulnerability; users are encour...

CVE-2026-88167

A buffer over-read vulnerability exists in Microsoft Office Word , which could allow an unauthorized attacker to disclose information over a network. The vulnerability is associated with CWE-126 and has been addressed by Microsoft in a released update. Details regarding specific affected versions...

CVE-2026-88151

Microsoft Office Excel is affected by an out-of-bounds read vulnerability (CVE-2026-88151 ), which may allow an unauthorized attacker to disclose information over a network. This vulnerability has been addressed by Microsoft with the release of security updates. Users are encouraged to install th...

CVE-2026-88153

An out-of-bounds read vulnerability exists in Microsoft Office Excel , which could allow an unauthorized attacker to disclose information over a network. This vulnerability is confirmed with a CVSS v3.1 score of 6.5 (Medium) . While specific technical root causes or exploit details are not provid...

CVE-2026-70263

An out-of-bounds read vulnerability in Microsoft Office Word allows an unauthorized attacker to disclose sensitive information over a network. This vulnerability affects the Microsoft Office Word application, where the flaw could lead to access to sensitive data . Microsoft has released updates t...

CVE-2026-70206

An out-of-bounds read vulnerability exists in Microsoft Office Word , which may allow an unauthorized attacker to disclose information over a network. This vulnerability is categorized as a security risk that could grant access to sensitive data. Microsoft has released official updates to address...

CVE-2026-70044

An out-of-bounds read vulnerability exists in Microsoft Windows Media Foundation . This flaw allows an unauthorized attacker to disclose information locally on an affected system. While the specific component or root cause is not detailed beyond the out-of-bounds read, the vulnerability has a MED...

CVE-2026-70011

The Windows IP Over USB Service is affected by an out-of-bounds read vulnerability (CWE-125). This flaw allows an authorized attacker to disclose information locally . The vulnerability has a CVSS 3.1 base score of 5.5 (Medium) , with a high impact on confidentiality. No specific exploit informat...

CVE-2026-69940

An out-of-bounds read vulnerability exists in the Windows Client for NFS . This flaw allows an unauthorized attacker to perform information disclosure over a network. The vulnerability is characterized by a Medium severity rating (CVSS 3.1: 6.5), with a network attack vector and low complexity. N...

CVE-2026-69955

An out-of-bounds read vulnerability exists in the Windows Client for NFS . This flaw allows an unauthorized attacker to disclose information over a network. The vulnerability is associated with CWE-125 and has a CVSS 3.1 score of 6.5 (Medium) . While the risk is categorized as information disclos...

CVE-2026-88140

An out-of-bounds read vulnerability exists in the Windows Key Storage Provider . This flaw allows an authorized attacker to perform a local information disclosure by reading data outside of the intended memory boundaries. The vulnerability is assigned a CVSS 3.1 base score of 5.5 (Medium) with a ...