CVE-2026-83776

A vulnerability exists in the Microsoft Bluetooth Driver due to an out-of-bounds read (CWE-125). This flaw could allow an unauthorized attacker to elevate privileges by conducting a physical attack . Exploitation details and specific affected versions are not provided in the documents; however, a...

CVE-2026-83719

A buffer over-read vulnerability exists in Servicing Stack Updates , which allows an authorized attacker to disclose information locally . The vulnerability is associated with a MEDIUM severity rating (CVSS 3.1: 5.5) and is characterized by a LOCAL attack vector with LOW complexity. No specific e...

CVE-2026-83733

A vulnerability exists in the Windows Print Spooler Components due to an out-of-bounds read . This flaw allows an authorized attacker to perform a local information disclosure , potentially exposing sensitive data. The vulnerability is assigned a CVSS 3.1 score of 5.5 (Medium) , characterized by ...

CVE-2026-83713

An out-of-bounds read vulnerability exists in the Windows Universal Disk Format File System Driver (UDFS) . This flaw allows an authorized attacker to disclose information locally. The vulnerability is categorized under CWE-497 (Exposure of Sensitive System Information to an Unauthorized Control ...

CVE-2026-83727

A buffer over-read vulnerability exists in the Windows Overlay Filter component. This flaw allows an authorized attacker to achieve local privilege escalation . While the impact is categorized as High with potential effects on confidentiality, integrity, and availability, specific exploit details...

CVE-2026-83694

An out-of-bounds read vulnerability exists in the Windows Volume Manager Extension Driver . This flaw allows an authorized attacker to achieve local privilege escalation . The vulnerability is classified with a CVSS 3.1 base score of 7.0 (High) . Remediation involves applying the official fix pro...

CVE-2026-83667

An out-of-bounds read vulnerability exists in Active Directory Domain Services . This flaw allows an authorized attacker to perform a denial of service over a network. While the root cause is identified as an out-of-bounds read, specific internal file paths or functions are not detailed in the pr...

CVE-2026-83671

An out-of-bounds read vulnerability exists in Windows Hyper-V . This flaw allows an authorized attacker to perform a local information disclosure , potentially revealing sensitive data. No specific root cause, affected versions, or exploit details are provided in the documents; however, an offici...

CVE-2026-83649

The Windows Local Security Authority Subsystem Service (LSASS) is susceptible to an out-of-bounds read vulnerability (CWE-125). This flaw allows an authorized attacker to perform a denial of service attack over a network. No specific software versions, root causes, or exploit links are provided i...

CVE-2026-83655

The Network Policy Server (NPS) is affected by an out-of-bounds read vulnerability (CWE-125). This flaw allows an unauthorized attacker to cause a denial of service (DoS) over a network. The vulnerability has a High severity rating with a CVSS 3.1 score of 7.5 . No specific exploit details or inf...

CVE-2026-83516

An out-of-bounds read vulnerability exists in the Windows Local Security Authority Subsystem Service (LSASS) . This flaw allows an unauthorized attacker to perform a denial of service attack over a network. While the specific root cause and affected versions are not detailed in the provided docum...

CVE-2026-83521

The Windows IKE Extension is affected by an out-of-bounds read vulnerability (CVE-2026-83521 ). This flaw allows an authorized attacker to perform an information disclosure over a network. The vulnerability is associated with CWE-125 . While the specific component or file is not detailed in the p...

CVE-2026-83635

A vulnerability exists in the DNS Server caused by an out-of-bounds read (CWE-125). This flaw allows an unauthorized attacker to perform a denial of service (DoS) over the network. The vulnerability has a HIGH base severity score of 7.5 (CVSS 3.1). While specific affected versions or internal com...

CVE-2026-69721

An out-of-bounds read vulnerability exists in Windows iSCSI , which could allow an authorized attacker to disclose information locally . The vulnerability is associated with CWE-125 and has been assigned a CVSS v3.1 base score of 5.5 (Medium), reflecting high confidentiality impact with low compl...

CVE-2026-70234

A buffer over-read vulnerability exists in the Desktop Window Manager component. This flaw allows an authorized attacker to perform a local information disclosure , potentially exposing sensitive data. No specific exploit details or in-the-wild exploitation information are provided in the documen...

CVE-2026-70247

An out-of-bounds read vulnerability exists in the Windows HTTP.sys component. This flaw allows an authorized attacker to achieve local code execution . The vulnerability is assigned a High base severity score of 7.8. No specific exploit links or detailed remediation versions are provided in the d...

CVE-2026-70173

The Microsoft Windows Search Component contains an out-of-bounds read vulnerability. This flaw allows an authorized attacker to perform a local information disclosure , potentially accessing data they are not normally permitted to view. While the vulnerability is confirmed with a CVSS 3.1 base sc...

CVE-2026-70119

An out-of-bounds read vulnerability exists in Windows DNS . This flaw allows an authorized attacker to achieve remote code execution over a network. While the specific affected versions or internal components are not detailed in the provided documents, the vulnerability is confirmed to impact the...

CVE-2026-70126

The Windows Bluetooth Port Driver contains an out-of-bounds read vulnerability (CWE-125) caused by improper input validation (CWE-20). This flaw allows an unauthorized attacker to achieve remote code execution over an adjacent network . The vulnerability has a high base severity score of 7.1. Off...

CVE-2026-70135

An out-of-bounds read vulnerability exists in the Windows Remote POS Driver . This flaw allows an authorized attacker to perform a local information disclosure. The root cause is categorized as CWE-125 (Out-of-bounds Read). While the vulnerability is confirmed, no specific exploit details or proo...