CVE-2026-85331

An out-of-bounds read vulnerability exists in the Windows Device Association Service . This flaw allows an authorized attacker to disclose information over a network. While the base severity is rated as MEDIUM (CVSS 3.1: 6.5), the confidentiality impact is noted as HIGH . No specific exploit deta...

CVE-2026-84007

The Remote Desktop Gateway Service is vulnerable to an out-of-bounds read (CWE-125). This flaw allows an authorized attacker to disclose information over a network. The vulnerability has a MEDIUM base severity and requires low privileges to exploit. No specific exploit details or mitigation steps...

CVE-2026-70128

An out-of-bounds read vulnerability exists in the HID Parser Library , which allows an authorized attacker to disclose information locally . The vulnerability results in a high confidentiality impact as it enables local information disclosure. No specific exploitation details or exploit links are...

CVE-2026-83892

A vulnerability exists in the HID Parser Library component of Windows , where an out-of-bounds read allows an authorized attacker to disclose information locally . The severity is rated as MEDIUM with a CVSS 3.1 score of 5.5. No specific exploit details or in-the-wild exploitation data are provid...

CVE-2026-83875

A vulnerability exists in the HID Parser Library where an out-of-bounds read occurs. This flaw allows an authorized attacker to disclose information locally . The impact is categorized as a high confidentiality loss. No specific exploit information or remediation details are provided in the docum...

EUVD-2026-99382

Out-of-bounds read in Windows Paint allows an unauthorized attacker to execute code over a network...

CVE-2026-83844

An out-of-bounds read vulnerability exists in Windows Paint , which could allow an unauthorized attacker to achieve remote code execution over a network. The vulnerability is categorized under CWE-125 and has a CVSS 3.1 score of 8.1 . While the technical root cause is identified as an out-of-boun...

CVE-2026-83849

An out-of-bounds read vulnerability exists in Windows Hello , which allows an authorized attacker to disclose information locally . The vulnerability's confidentiality impact is rated as high, while integrity and availability are unaffected. No specific exploit code or in-the-wild exploitation de...

CVE-2026-83843

A vulnerability exists in the Windows Internet Key Exchange (IKE) Protocol caused by an out-of-bounds read (CWE-125). This flaw allows an unauthorized attacker to perform a denial of service (DoS) attack over a network. While the CVSS 3.1 score indicates a HIGH severity (7.5) with a NETWORK attac...

CVE-2026-83832

An out-of-bounds read vulnerability exists in Windows Spaceport.sys . This flaw allows an authorized attacker to achieve local privilege elevation . The vulnerability has a CVSS 3.1 base score of 7.8 (HIGH) , with impacts affecting confidentiality, integrity, and availability. Remediation is avai...

CVE-2026-83760

An out-of-bounds read vulnerability exists in the Microsoft Bluetooth Driver . This flaw allows an authorized attacker to perform a local information disclosure by reading data outside the intended memory boundaries. The vulnerability has a MEDIUM severity rating with a CVSS 3.1 score of 5.5, pri...

CVE-2026-83776

A vulnerability exists in the Microsoft Bluetooth Driver due to an out-of-bounds read (CWE-125). This flaw could allow an unauthorized attacker to elevate privileges by conducting a physical attack . Exploitation details and specific affected versions are not provided in the documents; however, a...

CVE-2026-83719

A buffer over-read vulnerability exists in Servicing Stack Updates , which allows an authorized attacker to disclose information locally . The vulnerability is associated with a MEDIUM severity rating (CVSS 3.1: 5.5) and is characterized by a LOCAL attack vector with LOW complexity. No specific e...

CVE-2026-83733

A vulnerability exists in the Windows Print Spooler Components due to an out-of-bounds read . This flaw allows an authorized attacker to perform a local information disclosure , potentially exposing sensitive data. The vulnerability is assigned a CVSS 3.1 score of 5.5 (Medium) , characterized by ...

CVE-2026-83713

An out-of-bounds read vulnerability exists in the Windows Universal Disk Format File System Driver (UDFS) . This flaw allows an authorized attacker to disclose information locally. The vulnerability is categorized under CWE-497 (Exposure of Sensitive System Information to an Unauthorized Control ...

CVE-2026-83727

A buffer over-read vulnerability exists in the Windows Overlay Filter component. This flaw allows an authorized attacker to achieve local privilege escalation . While the impact is categorized as High with potential effects on confidentiality, integrity, and availability, specific exploit details...

CVE-2026-83694

An out-of-bounds read vulnerability exists in the Windows Volume Manager Extension Driver . This flaw allows an authorized attacker to achieve local privilege escalation . The vulnerability is classified with a CVSS 3.1 base score of 7.0 (High) . Remediation involves applying the official fix pro...

CVE-2026-83667

An out-of-bounds read vulnerability exists in Active Directory Domain Services . This flaw allows an authorized attacker to perform a denial of service over a network. While the root cause is identified as an out-of-bounds read, specific internal file paths or functions are not detailed in the pr...

CVE-2026-83671

An out-of-bounds read vulnerability exists in Windows Hyper-V . This flaw allows an authorized attacker to perform a local information disclosure , potentially revealing sensitive data. No specific root cause, affected versions, or exploit details are provided in the documents; however, an offici...

CVE-2026-83649

The Windows Local Security Authority Subsystem Service (LSASS) is susceptible to an out-of-bounds read vulnerability (CWE-125). This flaw allows an authorized attacker to perform a denial of service attack over a network. No specific software versions, root causes, or exploit links are provided i...