Base de CVEs

CVE-2026-108454 Média · 6.5 CWE-126 15/10/2026

Microsoft Office PowerPoint Information Disclosure Vulnerability

Buffer over-read in Microsoft Office PowerPoint allows an unauthorized attacker to disclose information over a network.

CVE-2026-101310 Alta · 7.0 CWE-126 15/10/2026

Multiple vulnerabilities in bhyve device models

The HDA audio device model did not check for zero-length Buffer Descriptor List (BDL) entries when starting a stream. A zero-length entry caused an out-of-bounds read or write during DMA transfer processing. BDL fields were also subject to modification by the guest after validation. A malicious guest can crash the bhyve process or potentially execute arbitrary code in the host userspace context running the virtual machine, subject to bhyve's Capsicum sandbox.

CVE-2026-97828 Média · 6.5 CWE-126 13/10/2026

Role: DNS Server Information Disclosure Vulnerability

Buffer over-read in DNS Server allows an authorized attacker to disclose information over a network.

CVE-2026-96851 Média · 5.5 CWE-126 13/10/2026

Windows Management Instrumentation Information Disclosure Vulnerability

Buffer over-read in Windows Management Instrumentation allows an authorized attacker to disclose information locally.

CVE-2026-96848 Média · 5.5 CWE-126 13/10/2026

Windows Win32 Kernel Subsystem Information Disclosure Vulnerability

Buffer over-read in Windows Win32 Kernel Subsystem allows an authorized attacker to disclose information locally.

CVE-2026-95904 Média · 5.5 CWE-126 13/10/2026

Windows Event Logging Service Information Disclosure Vulnerability

Buffer over-read in Windows Event Logging Service allows an authorized attacker to disclose information locally.

CVE-2026-88201 Média · 6.5 CWE-126 13/10/2026

Microsoft Office Excel Information Disclosure Vulnerability

Buffer over-read in Microsoft Office Excel allows an unauthorized attacker to disclose information over a network.

CVE-2026-88195 Média · 6.5 CWE-126 13/10/2026

Microsoft Office Excel Information Disclosure Vulnerability

Buffer over-read in Microsoft Office Excel allows an unauthorized attacker to disclose information over a network.

CVE-2026-88167 Média · 6.5 CWE-126 13/10/2026

Microsoft Office Word Information Disclosure Vulnerability

Buffer over-read in Microsoft Office Word allows an unauthorized attacker to disclose information over a network.

CVE-2026-85935 Média · 5.5 CWE-126 13/10/2026

Windows USB Driver Information Disclosure Vulnerability

Buffer over-read in Windows USB Driver allows an authorized attacker to disclose information locally.

CVE-2026-85910 Média · 5.5 CWE-126 13/10/2026

Windows StateRepository API Information Disclosure Vulnerability

Buffer over-read in Windows StateRepository API allows an authorized attacker to disclose information locally.

CVE-2026-85835 Média · 5.5 CWE-126 13/10/2026

Servicing Stack Updates Information Disclosure Vulnerability

Buffer over-read in Servicing Stack Updates allows an authorized attacker to disclose information locally.

CVE-2026-83888 Média · 6.5 CWE-126 13/10/2026

Windows CD-ROM Driver Elevation of Privilege Vulnerability

Buffer over-read in Windows CD-ROM Driver allows an unauthorized attacker to elevate privileges over a network.

CVE-2026-83835 Média · 5.5 CWE-126 13/10/2026

Windows Common Log File System Driver Information Disclosure Vulnerability

Buffer over-read in Windows Common Log File System Driver allows an authorized attacker to disclose information locally.

CVE-2026-83788 Média · 4.6 CWE-126 13/10/2026

Windows rndismp6.sys Information Disclosure Vulnerability

Buffer over-read in Windows RNDIS allows an unauthorized attacker to disclose information with a physical attack.

CVE-2026-83727 Alta · 7.8 CWE-126 13/10/2026

Windows Overlay Filter Elevation of Privilege Vulnerability

Buffer over-read in Windows Overlay Filter allows an authorized attacker to elevate privileges locally.

CVE-2026-83719 Média · 5.5 CWE-126 13/10/2026

Servicing Stack Updates Information Disclosure Vulnerability

Buffer over-read in Servicing Stack Updates allows an authorized attacker to disclose information locally.

CVE-2026-83685 Média · 6.5 CWE-126 13/10/2026

Windows Internet Key Exchange (IKE) Extension Denial of Service Vulnerability

Buffer over-read in Windows IKE Extension allows an authorized attacker to deny service over a network.

CVE-2026-83565 Média · 5.5 CWE-126 13/10/2026

Windows Encrypting File System (EFS) Information Disclosure Vulnerability

Buffer over-read in Windows Encrypting File System (EFS) allows an authorized attacker to disclose information locally.

CVE-2026-70234 Média · 5.5 CWE-126 13/10/2026

Desktop Window Manager Information Disclosure Vulnerability

Buffer over-read in Desktop Window Manager allows an authorized attacker to disclose information locally.

CVE-2026-70041 Média · 5.5 CWE-126 13/10/2026

Windows CD-ROM Driver Information Disclosure Vulnerability

Buffer over-read in Windows CD-ROM Driver allows an authorized attacker to disclose information locally.

CVE-2026-69957 Alta · 7.8 CWE-126 13/10/2026

Windows Overlay Filter Elevation of Privilege Vulnerability

Integer overflow or wraparound in Windows Overlay Filter allows an authorized attacker to elevate privileges locally.

CVE-2026-69954 Média · 5.5 CWE-126 13/10/2026

Windows Overlay Filter Information Disclosure Vulnerability

Buffer over-read in Windows Overlay Filter allows an authorized attacker to disclose information locally.

CVE-2026-69953 Alta · 7.8 CWE-126 13/10/2026

Windows Overlay Filter Elevation of Privilege Vulnerability

Buffer over-read in Windows Overlay Filter allows an authorized attacker to elevate privileges locally.

CVE-2026-69950 Alta · 7.8 CWE-126 13/10/2026

Windows Overlay Filter Elevation of Privilege Vulnerability

Buffer over-read in Windows Overlay Filter allows an authorized attacker to elevate privileges locally.