CVE-2026-88122

An out-of-bounds read vulnerability exists in the DNS Server , which allows an authorized attacker to perform a denial of service attack over a network. The vulnerability is associated with CWE-125 . While the documents confirm the impact and root cause, specific details regarding affected versio...

CVE-2026-88129

An out-of-bounds read vulnerability exists in the DNS Server , which could allow an authorized attacker to perform a denial of service over a network. The vulnerability is associated with CWE-125 . No specific software versions, root causes, or remediation details are provided in the documents be...

CVE-2026-88130

An out-of-bounds read vulnerability exists in the DNS Server , which allows an authorized attacker to perform a denial of service (DoS) over a network. The vulnerability is associated with CWE-125 . While the documents confirm the impact is a denial of service, no specific software versions, file...

CVE-2026-69919

An out-of-bounds read vulnerability exists in Windows Cryptographic Services . This flaw allows an authorized attacker to perform a local attack to disclose information . The vulnerability is associated with CWE-125 . No specific exploit details or remediation instructions are provided in the doc...

CVE-2026-88125

An out-of-bounds read vulnerability exists in the DNS Server , which could allow an authorized attacker to trigger a denial of service over a network. The vulnerability is associated with CWE-125 . While an official fix is noted in the remediation level, specific affected versions and detailed ro...

CVE-2026-70228

An out-of-bounds read vulnerability exists in the Desktop Window Manager component. This flaw allows an authorized attacker to perform a local privilege escalation . Exploitation details and specific affected versions are not provided in the documents. Remediation information is not explicitly de...

CVE-2026-70227

An out-of-bounds read vulnerability exists in the Windows Device Association Service . This flaw allows an authorized attacker to perform a local information disclosure, potentially revealing sensitive data. No specific exploit code or in-the-wild exploitation details are provided in the document...

CVE-2026-69884

A buffer over-read vulnerability exists in Windows GDI . This flaw allows an authorized attacker to perform a local privilege elevation . The vulnerability is associated with CWE-126 . While the documents confirm the impact is high for confidentiality, integrity, and availability, no specific exp...

CVE-2026-88179

An out-of-bounds read vulnerability exists in the Windows DWM Core Library . This flaw allows an authorized attacker to perform a local elevation of privilege . The vulnerability is associated with CWE-125 . No specific exploit details or in-the-wild exploitation information are provided in the d...

CVE-2026-88194

An out-of-bounds read vulnerability exists in the Windows DWM Core Library . This flaw allows an authorized attacker to perform a local privilege escalation . The vulnerability is categorized under CWE-125 and has been assigned a CVSS 3.1 score of 7.8 (High) . No specific exploit details or proof...

CVE-2026-88189

An out-of-bounds read vulnerability exists in the Windows DWM Core Library . This flaw allows an authorized attacker to achieve local privilege escalation . The vulnerability is assigned a High severity base score of 7.8. No specific exploit details or remediation steps are provided in the docume...

CVE-2026-88188

The Windows DWM Core Library is affected by an out-of-bounds read vulnerability (CWE-125). This flaw allows an authorized attacker to perform a local privilege escalation . The severity is rated as High with a CVSS 3.1 score of 7.8. Remediation is available via an official fix provided by Microso...

CVE-2026-88181

An out-of-bounds read vulnerability exists in the Windows DWM Core Library . This flaw allows an authorized attacker to perform a local privilege elevation attack. The vulnerability is categorized under CWE-125 . Specific details regarding the root cause, affected versions, or available exploits ...

CVE-2026-88180

An out-of-bounds read vulnerability exists in the Windows DWM Core Library . This flaw allows an authorized attacker to achieve local privilege elevation . The vulnerability is associated with CWE-125 and has a CVSS 3.1 base score of 7.8 (High). Remediation is available via an official fix from M...

CVE-2026-88177

The Windows DWM Core Library contains an out-of-bounds read vulnerability (CWE-125). This flaw allows an authorized attacker to achieve local privilege escalation . The vulnerability is rated as High severity with a CVSS 3.1 score of 7.8. Remediation is available via an official fix from Microsof...

CVE-2026-88115

An out-of-bounds read vulnerability exists in Windows Server for NFS , which may allow an unauthorized attacker to achieve remote code execution over a network. The CVSS 3.1 score is 8.8 (HIGH) , indicating significant impact on confidentiality, integrity, and availability. While the vulnerabilit...

CVE-2026-87698

A Windows Remote Access Service Infrastructure component is vulnerable to an out-of-bounds read (CWE-125). This flaw allows an authorized attacker to perform a local information disclosure on the affected system. The CVSS 3.1 score is 5.5, reflecting a medium severity with a local attack vector a...

CVE-2026-85909

An out-of-bounds read vulnerability exists in the Windows Universal Disk Format File System Driver (UDFS) . This flaw allows an authorized attacker to perform a local information disclosure . While specific exploit details are not provided, the vulnerability is associated with CWE-822 (Untrusted ...

CVE-2026-85910

A buffer over-read vulnerability exists in the Windows StateRepository API . This flaw allows an authorized attacker to perform a local information disclosure, potentially exposing sensitive data. The vulnerability is associated with CWE-126 . No specific exploit details or active in-the-wild exp...

CVE-2026-83904

An out-of-bounds read vulnerability exists in the HID Parser Library . This flaw allows an authorized attacker to perform a local information disclosure . The vulnerability is associated with CWE-125 and has a CVSS 3.1 base score of 5.5. No specific software versions or exploit details are provid...