Total
580 CVE
| CVE | Vendors | Products | Updated | CVSS v2 | CVSS v3 |
|---|---|---|---|---|---|
| CVE-2023-21697 | 1 Microsoft | 10 Windows 10, Windows 10 1607, Windows 10 1809 and 7 more | 2026-08-19 | N/A | 6.2 MEDIUM |
| Windows Internet Storage Name Service (iSNS) Server Information Disclosure Vulnerability | |||||
| CVE-2026-68819 | 1 Microsoft | 7 Windows 10 1607, Windows 10 1809, Windows Server 2012 and 4 more | 2026-08-16 | N/A | 5.9 MEDIUM |
| Buffer over-read in Windows Network File System allows an unauthorized attacker to deny service over a network. | |||||
| CVE-2026-65794 | 1 Microsoft | 13 Windows 10 1607, Windows 10 1809, Windows 10 21h2 and 10 more | 2026-08-16 | N/A | 6.5 MEDIUM |
| Buffer over-read in Windows SMB Client allows an unauthorized attacker to disclose information over a network. | |||||
| CVE-2026-62793 | 1 Microsoft | 13 Windows 10 1607, Windows 10 1809, Windows 10 21h2 and 10 more | 2026-08-16 | N/A | 5.5 MEDIUM |
| Buffer over-read in Windows NTFS allows an authorized attacker to disclose information locally. | |||||
| CVE-2026-62746 | 1 Microsoft | 13 Windows 10 1607, Windows 10 1809, Windows 10 21h2 and 10 more | 2026-08-16 | N/A | 5.5 MEDIUM |
| Buffer over-read in Windows Win32K allows an authorized attacker to disclose information locally. | |||||
| CVE-2026-62730 | 1 Microsoft | 13 Windows 10 1607, Windows 10 1809, Windows 10 21h2 and 10 more | 2026-08-16 | N/A | 5.5 MEDIUM |
| Buffer over-read in Windows Wired AutoConfig Service allows an authorized attacker to disclose information locally. | |||||
| CVE-2026-61350 | 1 Microsoft | 13 Windows 10 1607, Windows 10 1809, Windows 10 21h2 and 10 more | 2026-08-16 | N/A | 4.6 MEDIUM |
| Buffer over-read in Windows NTFS allows an unauthorized attacker to disclose information with a physical attack. | |||||
| CVE-2026-61347 | 1 Microsoft | 13 Windows 10 1607, Windows 10 1809, Windows 10 21h2 and 10 more | 2026-08-16 | N/A | 5.5 MEDIUM |
| Buffer over-read in Windows Event Logging Service allows an authorized attacker to disclose information locally. | |||||
| CVE-2026-64905 | 1 Microsoft | 6 365 Apps, Microsoft 365, Office 2019 and 3 more | 2026-08-14 | N/A | 7.8 HIGH |
| Buffer over-read in Microsoft Office Word allows an unauthorized attacker to execute code locally. | |||||
| CVE-2026-25646 | 1 Libpng | 1 Libpng | 2026-08-11 | N/A | 8.1 HIGH |
| LIBPNG is a reference library for use in applications that read, create, and manipulate PNG (Portable Network Graphics) raster image files. Prior to 1.6.55, an out-of-bounds read vulnerability exists in the png_set_quantize() API function. When the function is called with no histogram and the number of colors in the palette is more than twice the maximum supported by the user's display, certain palettes will cause the function to enter into an infinite loop that reads past the end of an internal heap-allocated buffer. The images that trigger this vulnerability are valid per the PNG specification. This vulnerability is fixed in 1.6.55. | |||||
| CVE-2024-43475 | 1 Microsoft | 1 Windows Server 2008 | 2026-08-10 | N/A | 7.3 HIGH |
| Microsoft Windows Admin Center Information Disclosure Vulnerability | |||||
| CVE-2024-38250 | 1 Microsoft | 17 365 Copilot, Office, Office Long Term Servicing Channel and 14 more | 2026-08-10 | N/A | 7.8 HIGH |
| Windows Graphics Component Elevation of Privilege Vulnerability | |||||
| CVE-2024-21340 | 1 Microsoft | 14 Windows 10 1507, Windows 10 1607, Windows 10 1809 and 11 more | 2026-08-10 | N/A | 4.6 MEDIUM |
| Windows Kernel Information Disclosure Vulnerability | |||||
| CVE-2023-38172 | 1 Microsoft | 12 Windows 10 1507, Windows 10 1607, Windows 10 1809 and 9 more | 2026-08-10 | N/A | 7.5 HIGH |
| Microsoft Message Queuing (MSMQ) Denial of Service Vulnerability | |||||
| CVE-2023-36904 | 1 Microsoft | 7 Windows 10 1809, Windows 10 21h2, Windows 10 22h2 and 4 more | 2026-08-10 | N/A | 7.8 HIGH |
| Windows Cloud Files Mini Filter Driver Elevation of Privilege Vulnerability | |||||
| CVE-2026-63091 | 1 Proftpd | 1 Proftpd | 2026-07-30 | N/A | 6.5 MEDIUM |
| ProFTPD before 1.3.9c and 1.3.10rc3 contains a signed integer overflow vulnerability in the mod_sftp module's SCP size-record parser that allows authenticated low-privilege attackers to bypass ASLR by sending a crafted file size value of UINT64_MAX, which results in a negative off_t value. Attackers can exploit the subsequent conversion to uint32_t, causing an approximately 4 GB requested read length and forcing the server to read beyond the end of the SSH channel data and write overread process memory into the uploaded file. In tested configurations, the disclosed data contains libc, libcrypto, and PIE pointers sufficient to derive their randomized base addresses, thereby bypassing ASLR and enabling reliable exploitation of memory corruption vulnerabilities in the same process. | |||||
| CVE-2026-24028 | 1 Powerdns | 1 Dnsdist | 2026-07-25 | N/A | 5.3 MEDIUM |
| An attacker might be able to trigger an out-of-bounds read by sending a crafted DNS response packet, when custom Lua code uses newDNSPacketOverlay to parse DNS packets. The out-of-bounds read might trigger a crash, leading to a denial of service, or access unrelated memory, leading to potential information disclosure. | |||||
| CVE-2026-45460 | 1 Microsoft | 6 365 Apps, 365 Copilot, Microsoft 365 and 3 more | 2026-07-23 | N/A | 4.7 MEDIUM |
| Buffer over-read in Microsoft Office allows an unauthorized attacker to disclose information locally. | |||||
| CVE-2026-42828 | 1 Microsoft | 10 Windows 10 1809, Windows 10 21h2, Windows 10 22h2 and 7 more | 2026-07-23 | N/A | 7.8 HIGH |
| Buffer over-read in Windows Projected File System Filter Driver allows an authorized attacker to elevate privileges locally. | |||||
| CVE-2026-11787 | 1 Redhat | 3 389 Directory Server, Directory Server, Enterprise Linux | 2026-07-23 | N/A | 5.0 MEDIUM |
| A flaw was found in 389 Directory Server. The ldap_utf8prev() function reads bytes before the start of a buffer without bounds checking, causing a heap buffer over-read in string filter parsing that may influence internal filter processing behavior. | |||||