CVE-2026-83898
Out-of-bounds read in HID Parser Library allows an authorized attacker to disclose information locally.
- CVSS
- 5,5
- EPSS
- 0,42 %
- Publikacja
- Poprawka
- Status poprawki nieustalony
KATALOG PODATNOŚCI
Wyszukuj po identyfikatorze CVE, nazwie produktu lub opisie. Filtruj według sygnałów ryzyka.
Pełny dostępny katalog: publikacje z ostatnich 365 dni oraz całe dostępne KEV.
Out-of-bounds read in HID Parser Library allows an authorized attacker to disclose information locally.
Exposure of sensitive system information to an unauthorized control sphere in Windows Win32 Kernel Subsystem allows an authorized attacker to disclose information locally.
Out-of-bounds read in HID Parser Library allows an authorized attacker to disclose information locally.
Exposure of sensitive system information to an unauthorized control sphere in Windows Clipboard User Service allows an authorized attacker to disclose information locally.
Heap-based buffer overflow in Windows Win32 Kernel Subsystem allows an unauthorized attacker to elevate privileges with a physical attack.
Out-of-bounds read in HID Parser Library allows an authorized attacker to disclose information locally.
Inadequate encryption strength in Windows Virtualization-Based Security (VBS) Enclave allows an authorized attacker to perform spoofing locally.
Out-of-bounds read in HID Parser Library allows an authorized attacker to disclose information locally.
Out-of-bounds read in HID Parser Library allows an authorized attacker to disclose information locally.
Relative path traversal in Windows Internet (wininet.dll) allows an authorized attacker to perform tampering locally.
Out-of-bounds read in Windows Aggregated Data Platform Service allows an authorized attacker to disclose information locally.
Improper access control in Windows NTFS allows an authorized attacker to disclose information locally.
Improper access control in Windows Notification allows an authorized attacker to disclose information locally.
Out-of-bounds read in Windows Hello allows an authorized attacker to disclose information locally.
Buffer over-read in Windows Common Log File System Driver allows an authorized attacker to disclose information locally.
Out-of-bounds read in Windows Portable Device MTP Driver allows an authorized attacker to disclose information locally.
Improper verification of cryptographic signature in Windows Update Stack allows an authorized attacker to perform spoofing locally.
Generation of error message containing sensitive information in Windows NTFS allows an authorized attacker to disclose information locally.
Insufficient verification of data authenticity in Windows DHCP Server allows an authorized attacker to bypass a security feature locally.
Buffer over-read in Windows RNDIS allows an unauthorized attacker to disclose information with a physical attack.
Out-of-bounds read in Microsoft Bluetooth Driver allows an unauthorized attacker to elevate privileges with a physical attack.
Exposure of sensitive system information to an unauthorized control sphere in Windows MIDI Service Module allows an authorized attacker to disclose information locally.
Exposure of sensitive system information to an unauthorized control sphere in Windows Win32 Kernel Subsystem allows an authorized attacker to disclose information locally.
Incorrect authorization in Windows Clipboard User Service allows an authorized attacker to disclose information locally.
Out-of-bounds read in Windows DWM Core Library allows an authorized attacker to disclose information locally.
| CVE / produkt | Sygnały | Oceny | Publikacja | Zapisz |
|---|---|---|---|---|
| CVE-2026-83898 Out-of-bounds read in HID Parser Library allows an authorized attacker to disclose information locally. |
Pozostałe |
CVSS 5,5EPSS 0,42 % | ||
| CVE-2026-83897 Exposure of sensitive system information to an unauthorized control sphere in Windows Win32 Kernel Subsystem allows an authorized attacker to disclose information locally. |
Pozostałe |
CVSS 4,7EPSS 0,69 % | ||
| CVE-2026-83892 Out-of-bounds read in HID Parser Library allows an authorized attacker to disclose information locally. |
Pozostałe |
CVSS 5,5EPSS 0,44 % | ||
| CVE-2026-83893 Exposure of sensitive system information to an unauthorized control sphere in Windows Clipboard User Service allows an authorized attacker to disclose information locally. |
Pozostałe |
CVSS 5,5EPSS 0,54 % | ||
| CVE-2026-83895 Heap-based buffer overflow in Windows Win32 Kernel Subsystem allows an unauthorized attacker to elevate privileges with a physical attack. |
Pozostałe |
CVSS 6,8EPSS 0,5 % | ||
| CVE-2026-83884 Out-of-bounds read in HID Parser Library allows an authorized attacker to disclose information locally. |
Pozostałe |
CVSS 5,5EPSS 0,44 % | ||
| CVE-2026-83885 Inadequate encryption strength in Windows Virtualization-Based Security (VBS) Enclave allows an authorized attacker to perform spoofing locally. |
Pozostałe |
CVSS 5,6EPSS 0,21 % | ||
| CVE-2026-83887 Out-of-bounds read in HID Parser Library allows an authorized attacker to disclose information locally. |
Pozostałe |
CVSS 5,5EPSS 0,42 % | ||
| CVE-2026-83875 Out-of-bounds read in HID Parser Library allows an authorized attacker to disclose information locally. |
Pozostałe |
CVSS 5,5EPSS 0,36 % | ||
| CVE-2026-83865 Relative path traversal in Windows Internet (wininet.dll) allows an authorized attacker to perform tampering locally. |
Pozostałe |
CVSS 4,7EPSS 0,3 % | ||
| CVE-2026-83870 Out-of-bounds read in Windows Aggregated Data Platform Service allows an authorized attacker to disclose information locally. |
Pozostałe |
CVSS 5,5EPSS 0,44 % | ||
| CVE-2026-83864 Improper access control in Windows NTFS allows an authorized attacker to disclose information locally. |
Pozostałe |
CVSS 5,5EPSS 0,38 % | ||
| CVE-2026-83854 Improper access control in Windows Notification allows an authorized attacker to disclose information locally. |
Pozostałe |
CVSS 5,5EPSS 0,33 % | ||
| CVE-2026-83849 Out-of-bounds read in Windows Hello allows an authorized attacker to disclose information locally. |
Pozostałe |
CVSS 5,5EPSS 0,44 % | ||
| CVE-2026-83835 Buffer over-read in Windows Common Log File System Driver allows an authorized attacker to disclose information locally. |
Pozostałe |
CVSS 5,5EPSS 0,89 % | ||
| CVE-2026-83794 Out-of-bounds read in Windows Portable Device MTP Driver allows an authorized attacker to disclose information locally. |
Pozostałe |
CVSS 5,5EPSS 0,44 % | ||
| CVE-2026-83798 Improper verification of cryptographic signature in Windows Update Stack allows an authorized attacker to perform spoofing locally. |
Pozostałe |
CVSS 5,5EPSS 0,24 % | ||
| CVE-2026-83786 Generation of error message containing sensitive information in Windows NTFS allows an authorized attacker to disclose information locally. |
Pozostałe |
CVSS 4,7EPSS 0,69 % | ||
| CVE-2026-83787 Insufficient verification of data authenticity in Windows DHCP Server allows an authorized attacker to bypass a security feature locally. |
Pozostałe |
CVSS 5,5EPSS 0,32 % | ||
| CVE-2026-83788 Buffer over-read in Windows RNDIS allows an unauthorized attacker to disclose information with a physical attack. |
Pozostałe |
CVSS 4,6EPSS 0,51 % | ||
| CVE-2026-83776 Out-of-bounds read in Microsoft Bluetooth Driver allows an unauthorized attacker to elevate privileges with a physical attack. |
Pozostałe |
CVSS 6,8EPSS 0,45 % | ||
| CVE-2026-83773 Exposure of sensitive system information to an unauthorized control sphere in Windows MIDI Service Module allows an authorized attacker to disclose information locally. |
Pozostałe |
CVSS 5,5EPSS 0,95 % | ||
| CVE-2026-83774 Exposure of sensitive system information to an unauthorized control sphere in Windows Win32 Kernel Subsystem allows an authorized attacker to disclose information locally. |
Pozostałe |
CVSS 4,7EPSS 0,72 % | ||
| CVE-2026-83764 Incorrect authorization in Windows Clipboard User Service allows an authorized attacker to disclose information locally. |
Pozostałe |
CVSS 5,5EPSS 0,34 % | ||
| CVE-2026-83765 Out-of-bounds read in Windows DWM Core Library allows an authorized attacker to disclose information locally. |
Pozostałe |
CVSS 5,5EPSS 0,39 % |
Zakres katalogu: ostatnie 365 dni oraz wszystkie zachowane KEV.
Ostatnio zakończone okno publikacji NVD: 4.11.2026, 23:02 UTC – 5.11.2026, 04:02 UTC. To pojedyncze okno importu, nie granica pokrycia katalogu.