CVE-2026-69950

A buffer over-read vulnerability exists in the Windows Overlay Filter . This flaw allows an authorized attacker to perform a local privilege escalation . The vulnerability is confirmed with a CVSS 3.1 base score of 7.8 (High) . No specific exploit details or mitigation versions are provided in th...

CVE-2026-69952

The Windows Overlay Filter component is vulnerable to an out-of-bounds read (CWE-125). This flaw allows an authorized attacker to perform a local privilege elevation . The severity is rated as HIGH with a CVSS 3.1 score of 7.8. No specific exploit details or in-the-wild exploitation information a...

CVE-2026-69942

A buffer over-read vulnerability exists in the Windows Overlay Filter component. This flaw allows an authorized attacker to achieve local code execution . The vulnerability is associated with CWE-126 and has been assigned a high severity score. Specific exploitation details and remediation steps ...

CVE-2026-69867

An out-of-bounds read vulnerability exists in SQLite , which could allow an authorized attacker to achieve local privilege escalation . The vulnerability is documented as having a High severity base score of 7.8. No specific affected versions, underlying root causes, or remediation steps are prov...

CVE-2026-69914

The Windows AppX Deployment Service is vulnerable to an out-of-bounds read vulnerability. This flaw allows an authorized attacker to disclose information locally , potentially leading to access to sensitive data . While the root cause is identified as an out-of-bounds read, specific details regar...

CVE-2026-108466

An out-of-bounds read vulnerability exists in the Windows Kernel . This flaw allows an unauthorized attacker to cause a denial of service over a network. The vulnerability is associated with CWE-125 and has a CVSS 3.1 base score of 5.3 (Medium), where the attack complexity is high and user intera...

EUVD-2026-99076

Out-of-bounds read in Microsoft Defender allows an authorized attacker to disclose information locally...

CVE-2026-105718

An out-of-bounds read vulnerability in Microsoft Office Excel allows an unauthorized attacker to execute code over a network. This flaw is associated with CWE-125 and CWE-20 , indicating issues with memory handling and input validation. The vulnerability has a High severity rating (CVSS 3.1: 8.8)...

CVE-2026-105726

A vulnerability exists in Microsoft Defender involving an out-of-bounds read (CWE-125). This flaw allows an authorized attacker to perform a local information disclosure , potentially exposing sensitive data. The impact is categorized as high confidentiality with a Medium base severity score. Off...

CVE-2026-94506

An out-of-bounds read vulnerability in Microsoft Office Access allows an unauthorized attacker to disclose information over a network. The vulnerability results in access to sensitive data with a CVSS3.1 base score of 6.5. Microsoft has released updates to address this issue; users are encouraged...

EUVD-2026-99050

Out-of-bounds read in Microsoft Office Word allows an unauthorized attacker to disclose information over a network...

CVE-2026-102867

An out-of-bounds read vulnerability exists in Microsoft Office Word , which could allow an unauthorized attacker to disclose information over a network. The vulnerability is associated with CWE-125 and CWE-20 , indicating improper input validation. While the NCSC listing identifies the impact as ...

CVE-2026-105595

An out-of-bounds read vulnerability in Microsoft Office Access allows an unauthorized attacker to achieve remote code execution over a network. The vulnerability impacts the software's ability to securely handle data, potentially leading to the execution of arbitrary code in the context of the us...

EUVD-2026-99055

Out-of-bounds read in Microsoft Office Access allows an unauthorized attacker to execute code over a network...

CVE-2026-110213 ai-fusion-video through 1.2.0 Insecure Direct Object Reference in Generation Task Item Endpoints

Stonewuu ai-fusion-video through 1.2.0 contains an insecure direct object reference vulnerability that allows authenticated users to read other users' generation results by supplying arbitrary task ids. Attackers can enumerate auto-increment task ids on the image and video /items endpoints to...

CVE-2026-110209

Stonewuu ai-fusion-video through 1.2.0 contains a missing authorization vulnerability that allows authenticated non-admin users to read stored secrets through unprotected ApiConfigController and SystemConfigController endpoints. Attackers can query the api-config get/list and system config...

RLSA-2026:82280 Moderate: tftp security update

The Trivial File Transfer Protocol TFTP is typically used only for booting diskless workstations. The tftp packages include the tftp and tftp-server subpackages. The tftp subpackage provides the user interface for TFTP and the tftp-server subpackage provides the server. This allows users to...

tftp security update

An update is available for tftp. This update affects Rocky Linux 10. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list The Trivial File Transfer Protocol TFTP is typically used only for booting...

CVE-2026-103856

Adobe Framemaker is affected by an out-of-bounds read vulnerability (CWE-125) that could lead to the disclosure of sensitive memory information. An attacker can leverage this flaw to access sensitive data, but exploitation requires user interaction to open a malicious file . No specific patch ver...

CVE-2026-103857

Adobe Framemaker is affected by an out-of-bounds read vulnerability (CWE-125) that could lead to the disclosure of sensitive memory . An attacker could leverage this flaw to access sensitive information, but exploitation requires user interaction where a victim must open a malicious file. No spec...