Vulnerability index

Browse CVEs

422 matching
Filters 2 Clear all
Severity

Filters apply as you choose them.

Filtering by weakness Out-of-bounds ReadCWE-125 × clear
365 Apps HIGH 7.8
CVE-2026-40360

Out-of-bounds read in Microsoft Office Excel allows an unauthorized attacker to disclose information locally.

Fix: 16.0.10417.20128+
Fix from $1,950 2026-05-12
Windows 10 1607 MEDIUM 5.4
CVE-2026-35423

Out-of-bounds read in Telnet Client allows an unauthorized attacker to disclose information over a network.

Fix: 10.0.14393.9140 / 10.0.17763.8755+
Fix from $1,600 2026-05-12
Windows 11 24h2 MEDIUM 5.5
CVE-2026-35419

Out-of-bounds read in Windows DWM Core Library allows an authorized attacker to disclose information locally.

Fix: 10.0.26100.8390 / 10.0.26100.32772+
Fix from $1,600 2026-05-12
365 Apps MEDIUM 6.1
CVE-2026-33822

Out-of-bounds read in Microsoft Office Word allows an unauthorized attacker to disclose information locally.

Mitigation only
Fix from $1,600 2026-04-14
Windows 11 23h2 HIGH 7.5
CVE-2026-33096

Out-of-bounds read in Windows HTTP.sys allows an unauthorized attacker to deny service over a network.

Fix: 10.0.20348.5020 / 10.0.22631.6936+
Fix from $1,950 2026-04-14
365 Apps HIGH 7.1
CVE-2026-32188

Out-of-bounds read in Microsoft Office Excel allows an unauthorized attacker to disclose information locally.

Mitigation only
Fix from $1,950 2026-04-14
Windows 11 23h2 HIGH 7.8
CVE-2026-32076

Out-of-bounds read in Windows Storage Spaces Controller allows an authorized attacker to elevate privileges locally.

Fix: 10.0.22631.6936 / 10.0.25398.2274+
Fix from $1,950 2026-04-14
Windows 10 21h2 MEDIUM 5.5
CVE-2026-27931

Out-of-bounds read in Windows GDI allows an unauthorized attacker to disclose information locally.

Fix: 10.0.19044.7184 / 10.0.19045.7184+
Fix from $1,600 2026-04-14
Windows 10 1607 MEDIUM 5.5
CVE-2026-27930

Out-of-bounds read in Windows GDI allows an unauthorized attacker to disclose information locally.

Fix: 10.0.14393.9060 / 10.0.17763.8644+
Fix from $1,600 2026-04-14
Windows 10 1607 HIGH 7.8
CVE-2026-26156

Heap-based buffer overflow in Windows Hyper-V allows an unauthorized attacker to execute code locally.

Fix: 10.0.14393.9060 / 10.0.17763.8644+
Fix from $1,950 2026-04-14
Windows 10 1809 HIGH 7.8
CVE-2026-26153

Out-of-bounds read in Windows Encrypting File System (EFS) allows an authorized attacker to elevate privileges locally.

Fix: 10.0.17763.8644 / 10.0.19044.7184+
Fix from $1,950 2026-04-14
.net HIGH 7.5
CVE-2026-26127

Out-of-bounds read in .NET allows an unauthorized attacker to deny service over a network.

Fix: 9.0.14 / 10.0.4+
Fix from $1,950 2026-03-10
365 Apps HIGH 7.8
CVE-2026-26109

Out-of-bounds read in Microsoft Office Excel allows an unauthorized attacker to execute code locally.

Fix: 16.0.10417.20102+
Fix from $1,950 2026-03-10
Windows 10 1607 HIGH 7.5
CVE-2026-25181

Out-of-bounds read in Windows GDI+ allows an unauthorized attacker to disclose information over a network.

Fix: 10.0.14393.8957 / 10.0.17763.8511+
Fix from $1,950 2026-03-10
365 Copilot MEDIUM 5.5
CVE-2026-25180

Out-of-bounds read in Microsoft Graphics Component allows an unauthorized attacker to disclose information locally.

Fix: 10.0.14393.8957 / 10.0.17763.8511+
Fix from $1,600 2026-03-10
Windows 10 1607 HIGH 7.8
CVE-2026-25174

Out-of-bounds read in Windows Extensible File Allocation allows an authorized attacker to elevate privileges locally.

Fix: 10.0.14393.8957 / 10.0.17763.8511+
Fix from $1,950 2026-03-10
Windows 10 1607 HIGH 7.8
CVE-2026-25175

Out-of-bounds read in Windows NTFS allows an authorized attacker to elevate privileges locally.

Fix: 10.0.14393.8957 / 10.0.17763.8511+
Fix from $1,950 2026-03-10
Windows 10 1607 MEDIUM 5.5
CVE-2026-24282

Out-of-bounds read in Push Message Routing Service allows an authorized attacker to disclose information locally.

Fix: 10.0.14393.8957 / 10.0.17763.8511+
Fix from $1,600 2026-03-10
Windows 10 1607 HIGH 7.8
CVE-2026-23673

Out-of-bounds read in Windows Resilient File System (ReFS) allows an authorized attacker to elevate privileges locally.

Fix: 10.0.14393.8957 / 10.0.17763.8511+
Fix from $1,950 2026-03-10
Windows 10 1607 HIGH 7.8
CVE-2026-23672

Windows Universal Disk Format File System Driver (UDFS) Elevation of Privilege Vulnerability

Fix: 10.0.14393.8957 / 10.0.17763.8511+
Fix from $1,950 2026-03-10
365 Apps MEDIUM 5.5
CVE-2026-21261

Out-of-bounds read in Microsoft Office Excel allows an unauthorized attacker to disclose information locally.

Fix: 16.0.10417.20097+
Fix from $1,600 2026-02-10
365 Apps MEDIUM 5.5
CVE-2026-21258

Improper input validation in Microsoft Office Excel allows an unauthorized attacker to disclose information locally.

Fix: 16.0.10417.20097+
Fix from $1,600 2026-02-10
Windows 10 1607 HIGH 7.3
CVE-2026-21247

Improper input validation in Windows Hyper-V allows an authorized attacker to execute code locally.

Fix: 10.0.14393.8868 / 10.0.17763.8389+
Fix from $1,950 2026-02-10
365 Apps HIGH 7.8
CVE-2026-20946

Out-of-bounds read in Microsoft Office Excel allows an unauthorized attacker to execute code locally.

Mitigation only
Fix from $1,950 2026-01-13
365 Apps HIGH 8.4
CVE-2026-20944

Out-of-bounds read in Microsoft Office Word allows an unauthorized attacker to execute code locally.

Mitigation only
Fix from $1,950 2026-01-13
Windows 11 24h2 MEDIUM 6.2
CVE-2026-20851

Out-of-bounds read in Capability Access Management Service (camsvc) allows an unauthorized attacker to disclose information locally.

Fix: 10.0.26100.7623 / 10.0.26100.32230+
Fix from $1,600 2026-01-13
Windows 11 24h2 MEDIUM 5.5
CVE-2026-20835

Out-of-bounds read in Capability Access Management Service (camsvc) allows an authorized attacker to disclose information locally.

Fix: 10.0.25398.2092 / 10.0.26100.7623+
Fix from $1,600 2026-01-13
Windows 10 1809 MEDIUM 5.5
CVE-2026-20829

Out-of-bounds read in Windows TPM allows an authorized attacker to disclose information locally.

Fix: 10.0.17763.8276 / 10.0.19044.6809+
Fix from $1,600 2026-01-13
Windows 11 24h2 HIGH 7.8
CVE-2025-62572

Out-of-bounds read in Application Information Services allows an authorized attacker to elevate privileges locally.

Fix: 10.0.26100.7392 / 10.0.26200.7392+
Fix from $1,950 2025-12-09
365 Apps HIGH 7.8
CVE-2025-62564

Out-of-bounds read in Microsoft Office Excel allows an unauthorized attacker to execute code locally.

Fix: 16.0.10417.20075+
Fix from $1,950 2025-12-09