177683 matches found
Microsoft Windows: CVE-2026-83832: Windows Spaceport.sys Elevation of Privilege Vulnerability
Out-of-bounds read in Windows Spaceport.sys allows an authorized attacker to elevate privileges locally...
Microsoft Windows: CVE-2026-85356: Windows Volume Manager Extension Driver Elevation of Privilege Vulnerability
Out-of-bounds read in Windows Volume Manager Extension Driver allows an authorized attacker to elevate privileges locally...
Microsoft Office: CVE-2026-97005: Microsoft Office PowerPoint Information Disclosure Vulnerability
Out-of-bounds read in Microsoft Office PowerPoint allows an unauthorized attacker to disclose information locally...
Microsoft Office: CVE-2026-97744: Microsoft Office PowerPoint Information Disclosure Vulnerability
Out-of-bounds read in Microsoft Office PowerPoint allows an unauthorized attacker to disclose information locally...
Microsoft Office: CVE-2026-97760: Microsoft Office Excel Information Disclosure Vulnerability
Out-of-bounds read in Microsoft Office Excel allows an unauthorized attacker to disclose information over a network...
Microsoft Windows: CVE-2026-69675: Windows Network File System Information Disclosure Vulnerability
Out-of-bounds read in Windows Network File System allows an authorized attacker to disclose information locally...
Microsoft Windows: CVE-2026-83567: Windows NTFS Elevation of Privilege Vulnerability
Out-of-bounds read in Windows NTFS allows an authorized attacker to elevate privileges locally...
Microsoft Windows: CVE-2026-83651: Windows GDI Information Disclosure Vulnerability
Out-of-bounds read in Windows GDI allows an unauthorized attacker to disclose information over a network...
Microsoft Windows: CVE-2026-83685: Windows Internet Key Exchange (IKE) Extension Denial of Service Vulnerability
Buffer over-read in Windows IKE Extension allows an authorized attacker to deny service over a network...
Microsoft Windows: CVE-2026-83727: Windows Overlay Filter Elevation of Privilege Vulnerability
Buffer over-read in Windows Overlay Filter allows an authorized attacker to elevate privileges locally...
Microsoft Windows: CVE-2026-83843: Windows Internet Key Exchange (IKE) Extension Denial of Service Vulnerability
Out-of-bounds read in Windows Internet Key Exchange IKE Protocol allows an unauthorized attacker to deny service over a network...
Microsoft SQL Server: CVE-2026-67628: Microsoft SQL Server Information Disclosure Vulnerability
Out-of-bounds read in SQL Server allows an authorized attacker to disclose information over a network...
Microsoft Windows: CVE-2026-83747: Windows Error Reporting Information Disclosure Vulnerability
Out-of-bounds read in Windows Error Reporting allows an authorized attacker to disclose information locally...
Microsoft Windows: CVE-2026-70211: Win32k Information Disclosure Vulnerability
Out-of-bounds read in Windows Win32 Kernel Subsystem allows an authorized attacker to disclose information locally...
Microsoft Office: CVE-2026-97014: Microsoft Office Excel Information Disclosure Vulnerability
Out-of-bounds read in Microsoft Office Excel allows an unauthorized attacker to disclose information locally...
PT-2026-112654
Name of the Vulnerable Software and Affected Versions Windows affected versions not specified Description An out-of-bounds read in the HID Parser Library allows an authorized attacker to disclose information locally. An out-of-bounds read occurs when the software reads data past the end of the...
Microsoft Windows: CVE-2026-70228: Desktop Window Manager Elevation of Privilege Vulnerability
Out-of-bounds read in Desktop Window Manager allows an authorized attacker to elevate privileges locally...
CVE-2026-103028: Incorrect Authorization
SFTPGo is an open source, event-driven file transfer solution. From 2.5.0 until 2.7.6, an authenticated user with copy permission can copy a source file denied by deniedpatterns or outside allowedpatterns to an allowed destination name because file-pattern filters are evaluated only on the...
CVE-2026-110123: Missing Authorization
Makunet maku-boot 4.3.0 through 5.0.0 contains a missing authorization vulnerability that allows authenticated users to read mail and SMS configurations by calling /sys/mail/config/list and /sys/sms/config/list without the required authority checks. Attackers can retrieve unmasked SMTP passwords...
UBUNTU-CVE-2026-106435
The MongoDB Python Driver's binary accelerator can read outside a buffer when an application decodes malformed BSON containing a truncated regular-expression element without a trailing NUL byte. An actor who can supply BSON to the documented decode or decodeall API can cause the application proce...