Início / CVEs
Base de CVEs
Vulnerabilidades publicadas, com severidade, exploração conhecida e fontes oficiais.
CVE-2026-24081
Alta · 7.4
CWE-126 17/09/2026
Buffer Over-read in BT Controller
Transient DOS when processing a channel map with insufficient used channels and adaptive frequency hopping is fully enabled.
CVE-2026-24075
Alta · 7.0
CWE-126 17/09/2026
Buffer Over-read in Qualcomm IPC
Memory Corruption when multiple threads issue concurrent IOCTL requests to the device control handler due to improper synchronization and race conditions.
CVE-2026-76653
Média · 5.3
CWE-126 10/09/2026
Missing Authentication in VPN Configuration Management in TP-Link TL-MR6400 and Archer MR600
A missing
authentication vulnerability in the VPN configuration management has been
identified in Archer MR600 (v2, v3 & v5) and TL-MR6400 v8 due to improper access control; a remote unauthenticated attacker
may be able to access and modify VPN configuration information without valid
credentials.
Successful
exploitation may allow a remote unauthenticated attacker to disclose and modify
VPN configuration information.
CVE-2026-83951
Média · 5.5
CWE-126 08/09/2026
Microsoft Office Word Information Disclosure Vulnerability
Buffer over-read in Microsoft Office Word allows an unauthorized attacker to disclose information locally.
CVE-2026-83949
Média · 5.5
CWE-126 08/09/2026
Microsoft Office Word Information Disclosure Vulnerability
Buffer over-read in Microsoft Office Word allows an unauthorized attacker to disclose information locally.
CVE-2026-81399
Média · 5.5
CWE-126 08/09/2026
Microsoft Excel Information Disclosure Vulnerability
Buffer over-read in Microsoft Office Excel allows an unauthorized attacker to disclose information locally.
CVE-2026-78516
Média · 4.3
CWE-126 08/09/2026
Windows Storage Information Disclosure Vulnerability
Insertion of sensitive information into externally-accessible file or directory in Windows Storage allows an authorized attacker to disclose information locally.
CVE-2026-73029
Média · 6.5
CWE-126 08/09/2026
Microsoft SQL Server Information Disclosure Vulnerability
Buffer over-read in SQL Server allows an authorized attacker to disclose information over a network.
CVE-2026-72974
Média · 6.5
CWE-126 08/09/2026
Microsoft Office Excel Information Disclosure Vulnerability
Buffer over-read in Microsoft Office Excel allows an unauthorized attacker to disclose information over a network.
CVE-2026-72932
Alta · 7.5
CWE-126 08/09/2026
Windows Message Queuing Queue Manager Information Disclosure Vulnerability
Buffer over-read in Windows Message Queuing Queue Manager allows an unauthorized attacker to disclose information over a network.
CVE-2026-69794
Média · 5.5
CWE-126 08/09/2026
Windows Encrypting File System (EFS) Information Disclosure Vulnerability
Buffer over-read in Windows Encrypting File System (EFS) allows an authorized attacker to disclose information locally.
CVE-2026-69719
Média · 6.5
CWE-126 08/09/2026
Microsoft Office Word Information Disclosure Vulnerability
Buffer over-read in Microsoft Office Word allows an unauthorized attacker to disclose information over a network.
CVE-2026-69626
Média · 6.5
CWE-126 08/09/2026
Microsoft Office Information Disclosure Vulnerability
Buffer over-read in Microsoft Office allows an unauthorized attacker to disclose information over a network.
CVE-2026-69610
Alta · 7.0
CWE-126 08/09/2026
Windows Win32k Elevation of Privilege Vulnerability
Buffer over-read in Windows Win32K allows an authorized attacker to elevate privileges locally.
CVE-2026-69582
Alta · 7.8
CWE-126 08/09/2026
Windows Volume Manager Extension Driver Elevation of Privilege Vulnerability
Buffer over-read in Windows Volume Manager Extension Driver allows an authorized attacker to elevate privileges locally.
CVE-2026-69474
Média · 4.8
CWE-126 08/09/2026
Windows Overlay Filter Information Disclosure Vulnerability
Use after free in Windows Overlay Filter allows an authorized attacker to disclose information over a network.
CVE-2026-69416
Média · 5.7
CWE-126 08/09/2026
Windows DHCP Server Denial of Service Vulnerability
Buffer over-read in Windows DHCP Server allows an authorized attacker to deny service over an adjacent network.
CVE-2026-69316
Média · 4.7
CWE-126 08/09/2026
Windows Overlay Filter Information Disclosure Vulnerability
Buffer over-read in Windows Overlay Filter allows an authorized attacker to disclose information locally.
CVE-2026-68875
Alta · 7.8
CWE-126 08/09/2026
Windows NTFS Remote Code Execution Vulnerability
Buffer over-read in Windows NTFS allows an authorized attacker to execute code locally.
CVE-2026-68851
Média · 5.5
CWE-126 08/09/2026
Windows NTFS Information Disclosure Vulnerability
Buffer over-read in Windows NTFS allows an authorized attacker to disclose information locally.
CVE-2026-67393
Média · 6.5
CWE-126 08/09/2026
Microsoft SQL Server Information Disclosure Vulnerability
Buffer over-read in SQL Server allows an authorized attacker to disclose information over a network.
CVE-2026-67390
Média · 6.5
CWE-126 08/09/2026
Microsoft SQL Server Information Disclosure Vulnerability
Buffer over-read in SQL Server allows an authorized attacker to disclose information over a network.
CVE-2026-18238
Média · 5.0
CWE-126 05/09/2026
OOBR in rpcap client in libpcap before 1.10.7
The rpcap client code that processes a RPCAP_MSG_PACKET message received from the server incorrectly validates its headers. A malicious server can send a crafted message and cause the client to treat up to 20 bytes of the client process memory beyond the end of the buffer as if it was a part of the captured packet.
CVE-2026-84640
Alta · 7.5
CWE-126 01/09/2026
One byte overflow read in mail parser
A maliciously constructed mail header could lead to a one byte read past the end of a buffer. This vulnerability was fixed in Thunderbird 155, Thunderbird 140.15, and Thunderbird 153.2.
CVE-2026-70652
Baixa · 2.0
CWE-126 20/08/2026
libvips: Possible heap-based buffer read overflow when resizing and re-encoding a JPEG with gain map
libvips is a fast image processing library with low memory needs. Prior to version 8.18.3, libvips built with libultrahdr support can incorrectly size an output buffer in libvips/foreign/uhdrsave.c within vips_foreign_save_uhdr_set_raw_hdr when a pipeline enlarges an incoming JPEG to a very large output before encoding a gain map through VipsForeignSaveUhdr. The undersized allocation can cause a heap buffer over-read that may disclose adjacent data or crash the process. This issue is fixed in version 8.18.3.