Home / CVEs
CVE Database
Published vulnerabilities with severity, known exploitation and official sources.
CVE-2026-70277
Medium · 5.5
CWE-125 Oct 13, 2026
Windows Fast FAT File System Driver Information Disclosure Vulnerability
Out-of-bounds read in Windows Fast FAT Driver allows an unauthorized attacker to disclose information locally.
CVE-2026-70263
Medium · 6.5
CWE-125 Oct 13, 2026
Microsoft Office Word Information Disclosure Vulnerability
Out-of-bounds read in Microsoft Office Word allows an unauthorized attacker to disclose information over a network.
CVE-2026-70254
High · 8.8
CWE-125 Oct 13, 2026
Microsoft Office Excel Remote Code Execution Vulnerability
Out-of-bounds read in Microsoft Office Excel allows an unauthorized attacker to execute code over a network.
CVE-2026-70247
High · 7.8
CWE-125 Oct 13, 2026
HTTP.sys Remote Code Execution Vulnerability
Out-of-bounds read in Windows HTTP.sys allows an authorized attacker to execute code locally.
CVE-2026-70244
Medium · 6.5
CWE-125 Oct 13, 2026
Windows DNS Server Information Disclosure Vulnerability
Out-of-bounds read in DNS Server allows an unauthorized attacker to disclose information over a network.
CVE-2026-70228
High · 7.8
CWE-125 Oct 13, 2026
Desktop Window Manager Elevation of Privilege Vulnerability
Out-of-bounds read in Desktop Window Manager allows an authorized attacker to elevate privileges locally.
CVE-2026-70227
Medium · 5.5
CWE-125 Oct 13, 2026
Windows Device Association Service Information Disclosure Vulnerability
Out-of-bounds read in Windows Device Association Service allows an authorized attacker to disclose information locally.
CVE-2026-70219
Medium · 6.5
CWE-125 Oct 13, 2026
Microsoft Office Excel Information Disclosure Vulnerability
Out-of-bounds read in Microsoft Office Excel allows an unauthorized attacker to disclose information over a network.
CVE-2026-70214
Medium · 5.5
CWE-125 Oct 13, 2026
Microsoft Office Excel Information Disclosure Vulnerability
Out-of-bounds read in Microsoft Office Excel allows an unauthorized attacker to disclose information locally.
CVE-2026-70211
Medium · 5.5
CWE-125 Oct 13, 2026
Win32k Information Disclosure Vulnerability
Out-of-bounds read in Windows Win32 Kernel Subsystem allows an authorized attacker to disclose information locally.
CVE-2026-70208
Medium · 5.5
CWE-125 Oct 13, 2026
HTTP.sys Information Disclosure Vulnerability
Out-of-bounds read in Windows HTTP.sys allows an authorized attacker to disclose information locally.
CVE-2026-70206
Medium · 6.5
CWE-125 Oct 13, 2026
Microsoft Office Word Information Disclosure Vulnerability
Out-of-bounds read in Microsoft Office Word allows an unauthorized attacker to disclose information over a network.
CVE-2026-70201
Medium · 5.5
CWE-125 Oct 13, 2026
Windows DHCP Server Denial of Service Vulnerability
Out-of-bounds read in Windows DHCP Server allows an authorized attacker to deny service locally.
CVE-2026-70173
Medium · 5.5
CWE-125 Oct 13, 2026
Microsoft Windows Search Component Information Disclosure Vulnerability
Out-of-bounds read in Microsoft Windows Search Component allows an authorized attacker to disclose information locally.
CVE-2026-70166
Medium · 6.5
CWE-125 Oct 13, 2026
Windows DNS Denial of Service Vulnerability
Out-of-bounds read in Windows DNS allows an authorized attacker to deny service over a network.
CVE-2026-70141
Medium · 5.5
CWE-125 Oct 13, 2026
Microsoft Windows Search Component Information Disclosure Vulnerability
Out-of-bounds read in Microsoft Windows Search Component allows an authorized attacker to disclose information locally.
CVE-2026-70135
Medium · 5.5
CWE-125 Oct 13, 2026
Windows Remote POS Driver Information Disclosure Vulnerability
Out-of-bounds read in Windows Remote POS Driver allows an authorized attacker to disclose information locally.
CVE-2026-70128
Medium · 5.5
CWE-125 Oct 13, 2026
HID Parser Library Information Disclosure Vulnerability
Out-of-bounds read in HID Parser Library allows an authorized attacker to disclose information locally.
CVE-2026-70119
Medium · 6.5
CWE-125 Oct 13, 2026
Windows DNS Remote Code Execution Vulnerability
Out-of-bounds read in Windows DNS allows an authorized attacker to execute code over a network.
CVE-2026-70074
Medium · 5.5
CWE-125 Oct 13, 2026
Windows DNS Information Disclosure Vulnerability
Out-of-bounds read in Windows DNS allows an authorized attacker to disclose information locally.
CVE-2026-70063
Medium · 4.7
CWE-125 Oct 13, 2026
Windows Kernel Information Disclosure Vulnerability
Out-of-bounds read in Windows Kernel allows an authorized attacker to disclose information locally.
CVE-2026-70044
Medium · 5.5
CWE-125 Oct 13, 2026
Microsoft Windows Media Foundation Information Disclosure Vulnerability
Out-of-bounds read in Microsoft Windows Media Foundation allows an unauthorized attacker to disclose information locally.
CVE-2026-70011
Medium · 5.5
CWE-125 Oct 13, 2026
Windows IP Over USB Service Information Disclosure Vulnerability
Out-of-bounds read in Windows IP Over USB Service allows an authorized attacker to disclose information locally.
CVE-2026-69999
Medium · 5.5
CWE-125 Oct 13, 2026
Windows Update Information Disclosure Vulnerability
Out-of-bounds read in Windows Update allows an authorized attacker to disclose information locally.
CVE-2026-69974
Medium · 4.7
CWE-125 Oct 13, 2026
Desktop Window Manager Information Disclosure Vulnerability
Out-of-bounds read in Desktop Window Manager allows an authorized attacker to disclose information locally.