48504 matches found
EUVD-2026-73422
Use of uninitialized resource in Windows GDI+ allows an authorized attacker to disclose information locally...
CVE-2026-69288
CVE-2026-69288 is a use of uninitialized resource vulnerability in Windows GDI+ that allows a locally authenticated attacker with low privileges to disclose information . The attack vector is local , requires no user interaction , and has no impact on integrity or availability , with a high confi...
CVE-2026-68852
Microsoft Account is affected by a use of uninitialized resource vulnerability that allows an authorized attacker with low privileges to locally disclose information (CVSS 3.1: 5.5, MEDIUM). The vulnerability requires local access and no user interaction, with a high impact on confidentiality but...
EUVD-2026-73411
Use of uninitialized resource in Microsoft Account allows an authorized attacker to disclose information locally...
CVE-2026-68776
CVE-2026-68776 is an information disclosure vulnerability in Microsoft SQL Server caused by a use of uninitialized resource . An authorized attacker can exploit this over a network to disclose sensitive information. The CNA-assigned CVSS 3.1 score is 6.5 (Medium) with the vector AV:N/AC:L/PR:L/UI...
EUVD-2026-73392
Use of uninitialized resource in SQL Server allows an authorized attacker to disclose information over a network...
EUVD-2026-73390
Use of uninitialized resource in SQL Server allows an authorized attacker to disclose information over a network...
CVE-2026-67648
Microsoft SQL Server is affected by a use of uninitialized resource vulnerability that allows an authorized attacker (low privileges) to disclose information over a network . The CVSS 3.1 base score is 6.5 (Medium) with a vector of AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N, indicating high confidential...
CVE-2026-67386
Microsoft SQL Server is affected by a use of uninitialized resource flaw that allows an authorized attacker (low privileges) to disclose information over a network. The vulnerability carries a CVSS 3.1 score of 6.5 (Medium) with a vector of AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N, indicating high con...
EUVD-2026-73382
Use of uninitialized resource in SQL Server allows an authorized attacker to disclose information over a network...
EUVD-2026-73358
Use of uninitialized resource in Windows Win32 Kernel Subsystem allows an authorized attacker to disclose information locally...
CVE-2026-70290
CVE-2026-70290 is an information disclosure vulnerability in the Windows Win32 Kernel Subsystem (Win32k) caused by the use of an uninitialized resource . An authorized local attacker with low privileges can leverage this to read sensitive kernel information, with no user interaction required. The...
EUVD-2026-73251
Allocation of resources without limits or throttling in Active Directory Federation Services AD FS allows an unauthorized attacker to deny service over a network...
CVE-2026-72978
CVE-2026-72978 is a Medium severity (CVSS 5.9) denial-of-service vulnerability in Active Directory Federation Services (AD FS) . The root cause is allocation of resources without limits or throttling , allowing an unauthorized, unauthenticated attacker to cause a remote denial of service . The at...
EUVD-2026-73113
Use of uninitialized resource in Windows Task Scheduler allows an authorized attacker to disclose information locally...
CVE-2026-72945
CVE-2026-72945 is an information disclosure vulnerability in Windows Task Scheduler , caused by the use of an uninitialized resource . An authorized local attacker with low privileges can exploit this to disclose information, with high confidentiality impact and no integrity or availability impac...
CVE-2026-69770
CVE-2026-69770 is an information disclosure vulnerability in the Windows Spaceport.sys kernel driver, caused by the use of an uninitialized resource . An authorized attacker with local access and low privileges can exploit it to disclose sensitive information (high confidentiality impact, no inte...
EUVD-2026-73067
Use of uninitialized resource in Windows Spaceport.sys allows an authorized attacker to disclose information locally...
CVE-2026-69485
CVE-2026-69485 is a Remote Code Execution vulnerability in Microsoft Remote Desktop Client caused by use of an uninitialized resource . An authorized attacker with low privileges can exploit it remotely over a network without user interaction, achieving full compromise of confidentiality, integri...