CVE-2026-68873

CVE-2026-68873 is an information disclosure vulnerability in the Windows Program Compatibility Assistant Service . The root cause is the insertion of sensitive information into a log file maintained by the service, allowing an authorized local attacker with low privileges to read and disclose tha...

CVE-2026-69723

CVE-2026-69723 is an information disclosure vulnerability in the Windows Kernel . The flaw exposes sensitive system information to an unauthorized control sphere, allowing an authorized attacker to disclose information over a network. The CVSS 3.1 score is 5.7 (MEDIUM) with high confidentiality i...

EUVD-2026-73045

Exposure of sensitive system information to an unauthorized control sphere in Windows Kernel allows an authorized attacker to disclose information over a network...

EUVD-2026-73030

Generation of error message containing sensitive information in Windows Error Reporting allows an authorized attacker to disclose information locally...

CVE-2026-69684

Windows Error Reporting in Windows contains an information disclosure vulnerability caused by the generation of an error message that includes sensitive information . An authorized local attacker with low privileges can exploit this to disclose sensitive data. The CVSS 3.1 score is 5.5 (Medium) ,...

EUVD-2026-73018

Generation of error message containing sensitive information in Windows Print Spooler Components allows an authorized attacker to disclose information over a network...

EUVD-2026-73000

Insertion of sensitive information into externally-accessible file or directory in Microsoft Windows Search Component allows an authorized attacker to disclose information over a network...

CVE-2026-26084

A improper access control vulnerability in Fortinet FortiSandbox 5.0.0 through 5.0.5, FortiSandbox 4.4.0 through 4.4.8, FortiSandbox Cloud 5.0.4 through 5.0.5, FortiSandbox PaaS 5.0.4 through 5.0.5 may allow attacker to access sensitive information via crafted HTTP requests...

Windows Error Reporting Information Disclosure Vulnerability

Generation of error message containing sensitive information in Windows Error Reporting allows an authorized attacker to disclose information locally...

Microsoft Windows Search Component Information Disclosure Vulnerability

Insertion of sensitive information into externally-accessible file or directory in Microsoft Windows Search Component allows an authorized attacker to disclose information over a network...

Microsoft SQL Server Information Disclosure Vulnerability

Generation of error message containing sensitive information in SQL Server allows an authorized attacker to disclose information over a network...

Windows MIDI Service Module Information Disclosure Vulnerability

Exposure of sensitive system information to an unauthorized control sphere in Windows MIDI Service Module allows an authorized attacker to disclose information locally...

Insertion of Sensitive Information into Log File

Overview snowflake-connector-python is a Snowflake Connector for Python Affected versions of this package are vulnerable to Insertion of Sensitive Information into Log File via the logging process. An attacker can obtain authentication tokens, encryption keys, pre-signed URLs, and SAML assertions...

PT-2026-87561

Generation of error message containing sensitive information in Windows Print Spooler Components allows an authorized attacker to disclose information over a network...

UBUNTU-CVE-2026-69806

Exposure of sensitive information to an unauthorized actor in .NET allows an authorized attacker to elevate privileges locally...

PT-2026-87655

Generation of error message containing sensitive information in Windows Error Reporting allows an authorized attacker to disclose information locally...

PT-2026-88271

Adobe Commerce is affected by an Incorrect Authorization vulnerability that could result in privilege escalation. An attacker could leverage this vulnerability to gain elevated access to sensitive information. Exploitation of this issue does not require user interaction...

PT-2026-88531

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 153.0.8010.36 Description Missing authorization in Extensions allows a remote attacker to obtain sensitive information through the use of a crafted Chrome extension. Recommendations Update Google Chrome to versi...

PT-2026-88550

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 153.0.8010.36 Description Incorrect authorization in Permissions allows a remote attacker to obtain sensitive information through the use of a crafted Chrome extension, provided they can leverage social...

PT-2026-88694

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 153.0.8010.36 Description Incorrect authorization in DataTransfer allows a remote attacker who has compromised the renderer process to obtain sensitive information through a crafted HTML page. Recommendations...