CVE-2026-108462
Exposure of sensitive system information to an unauthorized control sphere in Windows Kernel allows an authorized attacker to disclose information locally.
- CVSS
- 5,5
- EPSS
- 0,89 %
- Publikacja
- Poprawka
- Status poprawki nieustalony
KATALOG PODATNOŚCI
Wyszukuj po identyfikatorze CVE, nazwie produktu lub opisie. Filtruj według sygnałów ryzyka.
Pełny dostępny katalog: publikacje z ostatnich 365 dni oraz całe dostępne KEV.
Exposure of sensitive system information to an unauthorized control sphere in Windows Kernel allows an authorized attacker to disclose information locally.
Out-of-bounds read in Windows Kernel allows an unauthorized attacker to deny service over a network.
SWIFI-SE2KIC firmware versions 2.0.22 and prior are vulnerable to a Missing Authentication for Critical Function vulnerability that could allow an attacker on the local network to retrieve a snapshot of the live feed without authentication.
SWIFI-SE2KIC firmware versions 2.0.22 and prior are vulnerable to a Missing Authentication for Critical Function vulnerability that could allow an attacker on the local network to access a real-time video stream without authentication.
Out-of-bounds read in DNS Server allows an authorized attacker to disclose information over a network.
Out-of-bounds read in DNS Server allows an authorized attacker to disclose information over a network.
Out-of-bounds read in DNS Server allows an authorized attacker to disclose information over a network.
Use of uninitialized resource in Microsoft Graphics Component allows an authorized attacker to disclose information locally.
SWIFI-SE2KIC firmware versions 2.0.22 and prior are vulnerable to a Missing Authentication for Critical Function vulnerability that could allow an attacker on the local network to view live video feed without authentication.
Incorrect authorization in Microsoft Office SharePoint allows an authorized attacker to elevate privileges over a network.
Out-of-bounds read in Microsoft Defender allows an authorized attacker to disclose information locally.
Server-side request forgery (ssrf) in Microsoft Office SharePoint allows an authorized attacker to perform spoofing over an adjacent network.
Improper input validation in Microsoft Office SharePoint allows an authorized attacker to disclose information over a network.
Use after free in HID class driver allows an unauthorized attacker to elevate privileges with a physical attack.
Adobe Framemaker is affected by a NULL Pointer Dereference vulnerability that could result in an application denial-of-service. An attacker could exploit this vulnerability to crash the application, leading to a denial-of-service condition. Exploitation of…
Adobe Framemaker is affected by an out-of-bounds read vulnerability that could lead to disclosure of sensitive memory. An attacker could leverage this vulnerability to disclose sensitive information. Exploitation of this issue requires user interaction in…
Adobe Framemaker is affected by an out-of-bounds read vulnerability that could lead to disclosure of sensitive memory. An attacker could leverage this vulnerability to disclose sensitive information. Exploitation of this issue requires user interaction in…
Url redirection to untrusted site ('open redirect') in Active Directory Federation Services (AD FS) allows an unauthorized attacker to perform spoofing over a network.
Untrusted pointer dereference in Windows Kernel allows an unauthorized attacker to elevate privileges with a physical attack.
Improper authorization in DNS Server allows an authorized attacker to perform tampering locally.
Buffer over-read in Windows Broadcast DVR User Service allows an authorized attacker to disclose information locally.
Incorrect authorization in Microsoft Office SharePoint allows an authorized attacker to disclose information over a network.
Out-of-bounds read in Microsoft Office Word allows an unauthorized attacker to disclose information over a network.
Improper neutralization of input during web page generation ('cross-site scripting') in Microsoft Office SharePoint allows an authorized attacker to perform spoofing over a network.
Improper neutralization of input during web page generation ('cross-site scripting') in Microsoft Office SharePoint allows an authorized attacker to perform spoofing over a network.
| CVE / produkt | Sygnały | Oceny | Publikacja | Zapisz |
|---|---|---|---|---|
| CVE-2026-108462 Exposure of sensitive system information to an unauthorized control sphere in Windows Kernel allows an authorized attacker to disclose information locally. |
Pozostałe |
CVSS 5,5EPSS 0,89 % | ||
| CVE-2026-108466 Out-of-bounds read in Windows Kernel allows an unauthorized attacker to deny service over a network. |
Pozostałe |
CVSS 5,3EPSS 0,7 % | ||
| CVE-2026-107606 SWIFI-SE2KIC firmware versions 2.0.22 and prior are vulnerable to a Missing Authentication for Critical Function vulnerability that could allow an attacker on the local network to retrieve… |
Pozostałe |
CVSS 6,9EPSS 0,19 % | ||
| CVE-2026-107607 SWIFI-SE2KIC firmware versions 2.0.22 and prior are vulnerable to a Missing Authentication for Critical Function vulnerability that could allow an attacker on the local network to access a… |
Pozostałe |
CVSS 6,9EPSS 0,19 % | ||
| CVE-2026-108127 Out-of-bounds read in DNS Server allows an authorized attacker to disclose information over a network. |
Pozostałe |
CVSS 6,5EPSS 0,95 % | ||
| CVE-2026-108128 Out-of-bounds read in DNS Server allows an authorized attacker to disclose information over a network. |
Pozostałe |
CVSS 6,5EPSS 0,95 % | ||
| CVE-2026-108129 Out-of-bounds read in DNS Server allows an authorized attacker to disclose information over a network. |
Pozostałe |
CVSS 6,5EPSS 0,95 % | ||
| CVE-2026-105731 Use of uninitialized resource in Microsoft Graphics Component allows an authorized attacker to disclose information locally. |
Pozostałe |
CVSS 5,5EPSS 0,38 % | ||
| CVE-2026-107605 SWIFI-SE2KIC firmware versions 2.0.22 and prior are vulnerable to a Missing Authentication for Critical Function vulnerability that could allow an attacker on the local network to view… |
Pozostałe |
CVSS 5,9EPSS 0,19 % | ||
| CVE-2026-105720 Incorrect authorization in Microsoft Office SharePoint allows an authorized attacker to elevate privileges over a network. |
Pozostałe |
CVSS 4,3EPSS 0,43 % | ||
| CVE-2026-105726 Out-of-bounds read in Microsoft Defender allows an authorized attacker to disclose information locally. |
Pozostałe |
CVSS 5,5EPSS 0,38 % | ||
| CVE-2026-105713 Server-side request forgery (ssrf) in Microsoft Office SharePoint allows an authorized attacker to perform spoofing over an adjacent network. |
Pozostałe |
CVSS 5,7EPSS 0,37 % | ||
| CVE-2026-105719 Improper input validation in Microsoft Office SharePoint allows an authorized attacker to disclose information over a network. |
Pozostałe |
CVSS 6,5EPSS 0,96 % | ||
| CVE-2026-105006 Use after free in HID class driver allows an unauthorized attacker to elevate privileges with a physical attack. |
Pozostałe |
CVSS 6,4EPSS 0,35 % | ||
| CVE-2026-104343 Adobe Framemaker is affected by a NULL Pointer Dereference vulnerability that could result in an application denial-of-service. An attacker could exploit this vulnerability to crash the… |
Pozostałe |
CVSS 5,5EPSS 0,19 % | ||
| CVE-2026-103856 Adobe Framemaker is affected by an out-of-bounds read vulnerability that could lead to disclosure of sensitive memory. An attacker could leverage this vulnerability to disclose sensitive… |
Pozostałe |
CVSS 5,5EPSS 0,26 % | ||
| CVE-2026-103857 Adobe Framemaker is affected by an out-of-bounds read vulnerability that could lead to disclosure of sensitive memory. An attacker could leverage this vulnerability to disclose sensitive… |
Pozostałe |
CVSS 5,5EPSS 0,2 % | ||
| CVE-2026-103576 Url redirection to untrusted site ('open redirect') in Active Directory Federation Services (AD FS) allows an unauthorized attacker to perform spoofing over a network. |
Pozostałe |
CVSS 6,5EPSS 0,86 % | ||
| CVE-2026-103578 Untrusted pointer dereference in Windows Kernel allows an unauthorized attacker to elevate privileges with a physical attack. |
Pozostałe |
CVSS 6,8EPSS 0,46 % | ||
| CVE-2026-103560 Improper authorization in DNS Server allows an authorized attacker to perform tampering locally. |
Pozostałe |
CVSS 5,5EPSS 0,28 % | ||
| CVE-2026-103567 Buffer over-read in Windows Broadcast DVR User Service allows an authorized attacker to disclose information locally. |
Pozostałe |
CVSS 5,5EPSS 0,44 % | ||
| CVE-2026-102865 Incorrect authorization in Microsoft Office SharePoint allows an authorized attacker to disclose information over a network. |
Pozostałe |
CVSS 6,5EPSS 0,77 % | ||
| CVE-2026-102867 Out-of-bounds read in Microsoft Office Word allows an unauthorized attacker to disclose information over a network. |
Pozostałe |
CVSS 6,5EPSS 0,88 % | ||
| CVE-2026-102859 Improper neutralization of input during web page generation ('cross-site scripting') in Microsoft Office SharePoint allows an authorized attacker to perform spoofing over a network. |
Pozostałe |
CVSS 4,6EPSS 0,36 % | ||
| CVE-2026-102864 Improper neutralization of input during web page generation ('cross-site scripting') in Microsoft Office SharePoint allows an authorized attacker to perform spoofing over a network. |
Pozostałe |
CVSS 4,6EPSS 0,36 % |
Zakres katalogu: ostatnie 365 dni oraz wszystkie zachowane KEV.
Ostatnio zakończone okno publikacji NVD: 5.11.2026, 07:32 UTC – 5.11.2026, 12:02 UTC. To pojedyncze okno importu, nie granica pokrycia katalogu.