2026

Out-of-bounds read in Windows Kernel allows an authorized attacker to bypass a security feature locally.

Audition is affected by an out-of-bounds read vulnerability that could lead to disclosure of sensitive memory. An attack

Untrusted pointer dereference in Microsoft Office Excel allows an unauthorized attacker to disclose information locally.

Out-of-bounds read in Windows TCP/IP allows an authorized attacker to disclose information locally.

Exposure of sensitive information to an unauthorized actor in Windows Notification allows an authorized attacker to disc

Exposure of sensitive information to an unauthorized actor in Windows Push Notifications allows an authorized attacker t

Buffer over-read in Windows NTFS allows an authorized attacker to disclose information locally.

Exposure of sensitive information to an unauthorized actor in Windows Cryptographic Services allows an authorized attack

Out-of-bounds read in Windows Kernel allows an authorized attacker to elevate privileges locally.

Exposure of sensitive information to an unauthorized actor in Windows File Explorer allows an authorized attacker to dis

Exposure of sensitive information to an unauthorized actor in Windows Media allows an authorized attacker to disclose in

Out-of-bounds read in Windows Cloud Files Mini Filter Driver allows an authorized attacker to disclose information local

Out-of-bounds read in Microsoft Office Excel allows an unauthorized attacker to disclose information locally.

Exposure of sensitive information to an unauthorized actor in Windows Overlay Filter allows an authorized attacker to di

Exposure of sensitive information to an unauthorized actor in Windows Push Notifications allows an authorized attacker t

Windows Quality of Service (QoS) Packet Scheduler Information Disclosure Vulnerability

Exposure of sensitive information to an unauthorized actor in Windows Push Notifications allows an authorized attacker t

Out-of-bounds read in Windows DWM Core Library allows an authorized attacker to disclose information locally.

Exposure of sensitive information to an unauthorized actor in Windows File Explorer allows an authorized attacker to dis

Use of uninitialized resource in Universal Plug and Play (upnp.dll) allows an authorized attacker to disclose informatio

Exposure of sensitive information to an unauthorized actor in Windows File Explorer allows an authorized attacker to dis

Exposure of sensitive information to an unauthorized actor in Windows File Explorer allows an authorized attacker to dis

Buffer over-read in Windows Kernel allows an authorized attacker to disclose information locally.

Exposure of sensitive information to an unauthorized actor in Microsoft Graphics Component allows an authorized attacker

Exposure of sensitive information to an unauthorized actor in Windows Cryptographic Services allows an authorized attack

Use of uninitialized resource in Windows SMB allows an authorized attacker to disclose information locally.

Out-of-bounds read in Microsoft Office allows an unauthorized attacker to disclose information locally.

Out-of-bounds read in Microsoft Office allows an unauthorized attacker to disclose information locally.

Out-of-bounds read in Microsoft Office allows an unauthorized attacker to disclose information locally.

Out-of-bounds read in Microsoft Office allows an unauthorized attacker to disclose information locally.

Use of uninitialized resource in Microsoft Office allows an unauthorized attacker to disclose information locally.

Out-of-bounds read in Microsoft Office Excel allows an unauthorized attacker to disclose information locally.

Out-of-bounds read in Microsoft Office allows an unauthorized attacker to disclose information locally.

Out-of-bounds read in Microsoft Office Word allows an unauthorized attacker to disclose information locally.

Integer overflow or wraparound in Microsoft Office allows an unauthorized attacker to disclose information locally.

Out-of-bounds read in Microsoft Office allows an unauthorized attacker to disclose information locally.

Improper validation of specified type of input in Microsoft Office Word allows an unauthorized attacker to disclose info

Untrusted pointer dereference in Microsoft Office Excel allows an unauthorized attacker to disclose information locally.

Out-of-bounds read in Microsoft Office allows an unauthorized attacker to disclose information locally.

Numeric truncation error in Microsoft Office Word allows an unauthorized attacker to disclose information locally.

Time-of-check time-of-use (toctou) race condition in Microsoft Defender for Endpoint allows an authorized attacker to el

Exposure of sensitive information to an unauthorized actor in Windows Win32K allows an authorized attacker to disclose i

Out-of-bounds read in Microsoft Office allows an unauthorized attacker to disclose information locally.

Out-of-bounds read in Microsoft Office allows an unauthorized attacker to disclose information locally.

Use of uninitialized resource in Microsoft Windows Codecs Library allows an unauthorized attacker to disclose informatio

Use of uninitialized resource in Windows File Explorer allows an unauthorized attacker to disclose information locally.

Out-of-bounds read in Windows Print Spooler Components allows an authorized attacker to disclose information locally.

Improper access control in Windows Kernel allows an authorized attacker to bypass a security feature locally.

Heap-based buffer overflow in Universal Plug and Play (upnp.dll) allows an authorized attacker to elevate privileges loc

Media Encoder is affected by an out-of-bounds read vulnerability that could lead to disclosure of sensitive memory. An a