177731 matches found
Microsoft Windows: CVE-2026-83832: Windows Spaceport.sys Elevation of Privilege Vulnerability
Out-of-bounds read in Windows Spaceport.sys allows an authorized attacker to elevate privileges locally...
Microsoft Windows: CVE-2026-85356: Windows Volume Manager Extension Driver Elevation of Privilege Vulnerability
Out-of-bounds read in Windows Volume Manager Extension Driver allows an authorized attacker to elevate privileges locally...
Microsoft Office: CVE-2026-97005: Microsoft Office PowerPoint Information Disclosure Vulnerability
Out-of-bounds read in Microsoft Office PowerPoint allows an unauthorized attacker to disclose information locally...
Microsoft Office: CVE-2026-97744: Microsoft Office PowerPoint Information Disclosure Vulnerability
Out-of-bounds read in Microsoft Office PowerPoint allows an unauthorized attacker to disclose information locally...
Microsoft Windows: CVE-2026-69675: Windows Network File System Information Disclosure Vulnerability
Out-of-bounds read in Windows Network File System allows an authorized attacker to disclose information locally...
Microsoft Windows: CVE-2026-83567: Windows NTFS Elevation of Privilege Vulnerability
Out-of-bounds read in Windows NTFS allows an authorized attacker to elevate privileges locally...
Microsoft Windows: CVE-2026-83651: Windows GDI Information Disclosure Vulnerability
Out-of-bounds read in Windows GDI allows an unauthorized attacker to disclose information over a network...
Microsoft Windows: CVE-2026-83685: Windows Internet Key Exchange (IKE) Extension Denial of Service Vulnerability
Buffer over-read in Windows IKE Extension allows an authorized attacker to deny service over a network...
Microsoft Windows: CVE-2026-83727: Windows Overlay Filter Elevation of Privilege Vulnerability
Buffer over-read in Windows Overlay Filter allows an authorized attacker to elevate privileges locally...
Microsoft Windows: CVE-2026-83843: Windows Internet Key Exchange (IKE) Extension Denial of Service Vulnerability
Out-of-bounds read in Windows Internet Key Exchange IKE Protocol allows an unauthorized attacker to deny service over a network...
Microsoft SQL Server: CVE-2026-67628: Microsoft SQL Server Information Disclosure Vulnerability
Out-of-bounds read in SQL Server allows an authorized attacker to disclose information over a network...
Microsoft Windows: CVE-2026-83747: Windows Error Reporting Information Disclosure Vulnerability
Out-of-bounds read in Windows Error Reporting allows an authorized attacker to disclose information locally...
Microsoft Windows: CVE-2026-70211: Win32k Information Disclosure Vulnerability
Out-of-bounds read in Windows Win32 Kernel Subsystem allows an authorized attacker to disclose information locally...
Microsoft Office: CVE-2026-97014: Microsoft Office Excel Information Disclosure Vulnerability
Out-of-bounds read in Microsoft Office Excel allows an unauthorized attacker to disclose information locally...
PT-2026-112654
Name of the Vulnerable Software and Affected Versions Windows affected versions not specified Description An out-of-bounds read in the HID Parser Library allows an authorized attacker to disclose information locally. An out-of-bounds read occurs when the software reads data past the end of the...
Microsoft Windows: CVE-2026-70228: Desktop Window Manager Elevation of Privilege Vulnerability
Out-of-bounds read in Desktop Window Manager allows an authorized attacker to elevate privileges locally...
CVE-2026-110123: Missing Authorization
Makunet maku-boot 4.3.0 through 5.0.0 contains a missing authorization vulnerability that allows authenticated users to read mail and SMS configurations by calling /sys/mail/config/list and /sys/sms/config/list without the required authority checks. Attackers can retrieve unmasked SMTP passwords...
CVE-2026-77361: Improper Link Resolution Before File Access
obsidian-tc is a governed, agent-ready Model Context Protocol server for Obsidian vaults. Prior to 1.3.1, read access-control list ACL checks use a lexical vault-relative path while containment checks use the resolved path. An in-vault symlink under an allowed glob that resolves into a denied...
PT-2026-112112
Name of the Vulnerable Software and Affected Versions Windows Client for NFS affected versions not specified Description An out-of-bounds read occurs in the Windows Client for NFS, which allows an unauthorized attacker to disclose sensitive information over a network and affect the system. An...
CVE-2026-95114
The libwebsockets library contains an out-of-bounds read vulnerability within the Lightweight Embedded JSON Parser (LEJP) incremental parser located in lib/misc/lejp.c. A remote attacker can trigger this flaw by submitting specially crafted JSON data , leading to an invalid memory read that cause...