CVE-2026-88140

An out-of-bounds read vulnerability exists in the Windows Key Storage Provider . This flaw allows an authorized attacker to perform a local information disclosure by reading data outside of the intended memory boundaries. The vulnerability is assigned a CVSS 3.1 base score of 5.5 (Medium) with a ...

CVE-2026-88070

An out-of-bounds read vulnerability in Windows BitLocker allows an authorized attacker to achieve local privilege elevation . The vulnerability impacts the BitLocker encryption feature, enabling an attacker with existing local access to increase their privileges on the system. Exploitation detail...

CVE-2026-85935

A buffer over-read vulnerability exists in the Windows USB Driver . This flaw allows an authorized attacker to disclose information locally on the affected system. The vulnerability is categorized under CWE-126 and has a CVSS 3.1 base score of 5.5, indicating a MEDIUM severity. Official remediati...

CVE-2026-83888

A buffer over-read vulnerability exists in the Windows CD-ROM Driver . This flaw allows an unauthorized attacker to elevate privileges over a network. The vulnerability is listed with a Medium severity (CVSS 3.1 score of 6.5), indicating that while it allows for privilege escalation, it requires ...

CVE-2026-70277

The Windows Fast FAT Driver is affected by an out-of-bounds read vulnerability. This flaw allows an unauthorized attacker to disclose information locally . No specific details regarding the root cause, affected versions, or a specific patch are provided in the documents beyond the general driver ...

CVE-2026-70244

The Windows DNS Server is affected by an out-of-bounds read vulnerability (CWE-125). This flaw allows an unauthorized attacker to disclose information over a network. The vulnerability has a CVSS 3.1 base score of 6.5 (Medium) , which requires user interaction and possesses a network attack vecto...

CVE-2026-70041

A buffer over-read vulnerability exists in the Windows CD-ROM Driver . This flaw allows an authorized attacker to disclose information locally on the affected system. The CVSS 3.1 score is 5.5 (Medium) , reflecting a local attack vector requiring low privileges. Specific details regarding the und...

CVE-2026-88158

An out-of-bounds read vulnerability exists in Microsoft Digest Authentication . This flaw allows an authorized attacker to disclose information locally . The vulnerability is characterized by a MEDIUM severity (CVSS 3.1 score of 5.5) and involves an attack vector originating from the local system...

CVE-2026-85852

An out-of-bounds read vulnerability exists in Windows Management Instrumentation . This flaw allows an authorized attacker to disclose information locally on the affected system. The vulnerability is categorized as a local information disclosure with a CVSS 3.1 score of 5.5 . No specific exploit ...

CVE-2026-85858

An out-of-bounds read vulnerability exists within the Windows Win32 Kernel Subsystem . This flaw allows an authorized attacker to achieve local privilege escalation . While the specific root cause is not detailed, the impact includes unauthorized access to elevated permissions. Remediation is ava...

CVE-2026-85853

An out-of-bounds read vulnerability exists in the Windows DWM Core Library . This flaw allows an authorized attacker to achieve local privilege elevation . The vulnerability has been confirmed with a HIGH severity rating (CVSS 3.1 score of 7.0). While the technical root cause is identified as an ...

CVE-2026-85837

A vulnerability exists in the Windows Kernel due to an out-of-bounds read (CWE-125). This flaw allows an authorized attacker to perform a local privilege escalation . While the severity is classified as High , specific details regarding the affected component, root cause, or exploit availability ...

CVE-2026-85847

An out-of-bounds read vulnerability exists in the Windows Print Spooler Components . This flaw allows an unauthorized attacker to disclose information over a network. The vulnerability is associated with CWE-125 and carries a Medium base severity (CVSS 3.1 score of 6.5). Exploitation details are ...

CVE-2026-85835

A buffer over-read vulnerability exists in Servicing Stack Updates . This flaw allows an authorized attacker to disclose information locally. The vulnerability has a Medium severity (CVSS 3.1 score of 5.5) and requires local access and low privileges. No specific exploit code or information on in...

CVE-2026-85830

An out-of-bounds read vulnerability exists in the Windows Installer component. This flaw allows an authorized attacker to perform a local information disclosure , potentially revealing sensitive data. Exploitation details or specific affected versions are not provided in the documents. Remediatio...

CVE-2026-85821

An out-of-bounds read vulnerability exists in the Windows Universal Disk Format File System Driver (UDFS) . This flaw allows an authorized attacker to disclose information locally . The vulnerability is associated with CWE-125 . Official remediation is available via Microsoft's security updates. ...

CVE-2026-85808

An out-of-bounds read vulnerability exists in the Windows Routing and Remote Access Service (RRAS) . This flaw allows an unauthorized attacker to perform a denial of service (DoS) over a network. The vulnerability has been assigned a high severity (CVSS 7.5) and an official fix is available throu...

CVE-2026-85816

An out-of-bounds read vulnerability exists in the Windows Wi-Fi Driver . This flaw allows an authorized attacker to disclose information over an adjacent network . No specific software versions, file paths, or remediation steps are provided in the documentation; however, an official fix is indica...

CVE-2026-85815

The Windows Device Association Service is affected by an out-of-bounds read vulnerability (CWE-125). This flaw allows an authorized attacker to disclose information locally . No specific exploitation details, exploit links, or remediations are provided in the documentation beyond the existence of...

CVE-2026-85797

An out-of-bounds read vulnerability exists in the Windows GDI component. This flaw allows an unauthorized attacker to disclose information over a network. While the technical root cause is identified as improper input validation (CWE-20) and an out-of-bounds read (CWE-125), specific exploit detai...