CVE-2026-70011
Out-of-bounds read in Windows IP Over USB Service allows an authorized attacker to disclose information locally.
- CVSS
- 5,5
- EPSS
- 0,46 %
- Publikacja
- Poprawka
- Status poprawki nieustalony
KATALOG PODATNOŚCI
Wyszukuj po identyfikatorze CVE, nazwie produktu lub opisie. Filtruj według sygnałów ryzyka.
Pełny dostępny katalog: publikacje z ostatnich 365 dni oraz całe dostępne KEV.
Out-of-bounds read in Windows IP Over USB Service allows an authorized attacker to disclose information locally.
Out-of-bounds read in Windows Update allows an authorized attacker to disclose information locally.
Weak authentication in Active Directory Federation Services (AD FS) allows an unauthorized attacker to bypass a security feature over a network.
Out-of-bounds read in Desktop Window Manager allows an authorized attacker to disclose information locally.
Null pointer dereference in Windows VMSwitch allows an authorized attacker to deny service locally.
Improper protection of alternate path in Windows AppX Deployment Service allows an authorized attacker to bypass a security feature locally.
Weak authentication in Active Directory Federation Services (AD FS) allows an unauthorized attacker to bypass a security feature over a network.
Out-of-bounds read in Windows Overlay Filter allows an authorized attacker to disclose information locally.
Relative path traversal in Windows Libarchive allows an unauthorized attacker to perform tampering over a network.
Improper link resolution before file access ('link following') in Windows AppX Deployment Service allows an authorized attacker to disclose information locally.
Incorrect authorization in Windows Kernel-Mode Drivers allows an authorized attacker to disclose information locally.
Improper limitation of a pathname to a restricted directory ('path traversal') in Windows Libarchive allows an unauthorized attacker to perform tampering over a network.
Heap-based buffer overflow in Windows Overlay Filter allows an unauthorized attacker to execute code with a physical attack.
Buffer over-read in Windows Overlay Filter allows an authorized attacker to disclose information locally.
Out-of-bounds read in Windows Client for NFS allows an unauthorized attacker to disclose information over a network.
Out-of-bounds read in Windows Client for NFS allows an unauthorized attacker to disclose information over a network.
Heap-based buffer overflow in Windows Overlay Filter allows an unauthorized attacker to execute code with a physical attack.
Out-of-bounds read in Windows Cryptographic Services allows an authorized attacker to disclose information locally.
Out-of-bounds read in Microsoft Office Excel allows an unauthorized attacker to disclose information over a network.
Missing authorization in Windows AppX Deployment Service allows an authorized attacker to perform tampering locally.
Out-of-bounds read in Windows AppX Deployment Service allows an authorized attacker to disclose information locally.
Untrusted pointer dereference in Windows NTFS allows an authorized attacker to execute code locally.
Origin validation error in Azure DevOps allows an unauthorized attacker to disclose information over a network.
Out-of-bounds read in Windows iSCSI allows an authorized attacker to disclose information locally.
Exposure of sensitive system information to an unauthorized control sphere in Windows iSCSI allows an authorized attacker to disclose information locally.
| CVE / produkt | Sygnały | Oceny | Publikacja | Zapisz |
|---|---|---|---|---|
| CVE-2026-70011 Out-of-bounds read in Windows IP Over USB Service allows an authorized attacker to disclose information locally. |
Pozostałe |
CVSS 5,5EPSS 0,46 % | ||
| CVE-2026-69999 Out-of-bounds read in Windows Update allows an authorized attacker to disclose information locally. |
Pozostałe |
CVSS 5,5EPSS 0,4 % | ||
| CVE-2026-70005 Weak authentication in Active Directory Federation Services (AD FS) allows an unauthorized attacker to bypass a security feature over a network. |
Pozostałe |
CVSS 5,9EPSS 0,63 % | ||
| CVE-2026-69974 Out-of-bounds read in Desktop Window Manager allows an authorized attacker to disclose information locally. |
Pozostałe |
CVSS 4,7EPSS 0,33 % | ||
| CVE-2026-69978 Null pointer dereference in Windows VMSwitch allows an authorized attacker to deny service locally. |
Pozostałe |
CVSS 5,5EPSS 0,39 % | ||
| CVE-2026-69979 Improper protection of alternate path in Windows AppX Deployment Service allows an authorized attacker to bypass a security feature locally. |
Pozostałe |
CVSS 5,5EPSS 0,38 % | ||
| CVE-2026-69982 Weak authentication in Active Directory Federation Services (AD FS) allows an unauthorized attacker to bypass a security feature over a network. |
Pozostałe |
CVSS 5,9EPSS 0,65 % | ||
| CVE-2026-69967 Out-of-bounds read in Windows Overlay Filter allows an authorized attacker to disclose information locally. |
Pozostałe |
CVSS 5,5EPSS 0,46 % | ||
| CVE-2026-69968 Relative path traversal in Windows Libarchive allows an unauthorized attacker to perform tampering over a network. |
Pozostałe |
CVSS 6,5EPSS 0,86 % | ||
| CVE-2026-69969 Improper link resolution before file access ('link following') in Windows AppX Deployment Service allows an authorized attacker to disclose information locally. |
Pozostałe |
CVSS 4,7EPSS 0,37 % | ||
| CVE-2026-69971 Incorrect authorization in Windows Kernel-Mode Drivers allows an authorized attacker to disclose information locally. |
Pozostałe |
CVSS 5,5EPSS 0,4 % | ||
| CVE-2026-69973 Improper limitation of a pathname to a restricted directory ('path traversal') in Windows Libarchive allows an unauthorized attacker to perform tampering over a network. |
Pozostałe |
CVSS 6,5EPSS 0,78 % | ||
| CVE-2026-69958 Heap-based buffer overflow in Windows Overlay Filter allows an unauthorized attacker to execute code with a physical attack. |
Pozostałe |
CVSS 6,8EPSS 0,44 % | ||
| CVE-2026-69954 Buffer over-read in Windows Overlay Filter allows an authorized attacker to disclose information locally. |
Pozostałe |
CVSS 5,5EPSS 0,4 % | ||
| CVE-2026-69955 Out-of-bounds read in Windows Client for NFS allows an unauthorized attacker to disclose information over a network. |
Pozostałe |
CVSS 6,5EPSS 0,87 % | ||
| CVE-2026-69940 Out-of-bounds read in Windows Client for NFS allows an unauthorized attacker to disclose information over a network. |
Pozostałe |
CVSS 6,5EPSS 0,92 % | ||
| CVE-2026-69947 Heap-based buffer overflow in Windows Overlay Filter allows an unauthorized attacker to execute code with a physical attack. |
Pozostałe |
CVSS 6,8EPSS 0,44 % | ||
| CVE-2026-69919 Out-of-bounds read in Windows Cryptographic Services allows an authorized attacker to disclose information locally. |
Pozostałe |
CVSS 5,5EPSS 0,4 % | ||
| CVE-2026-69922 Out-of-bounds read in Microsoft Office Excel allows an unauthorized attacker to disclose information over a network. |
Pozostałe |
CVSS 6,5EPSS 0,84 % | ||
| CVE-2026-69905 Missing authorization in Windows AppX Deployment Service allows an authorized attacker to perform tampering locally. |
Pozostałe |
CVSS 5,5EPSS 0,3 % | ||
| CVE-2026-69914 Out-of-bounds read in Windows AppX Deployment Service allows an authorized attacker to disclose information locally. |
Pozostałe |
CVSS 5,5EPSS 0,4 % | ||
| CVE-2026-69902 Untrusted pointer dereference in Windows NTFS allows an authorized attacker to execute code locally. |
Pozostałe |
CVSS 6,7EPSS 0,35 % | ||
| CVE-2026-69877 Origin validation error in Azure DevOps allows an unauthorized attacker to disclose information over a network. |
Pozostałe |
CVSS 6,5EPSS 0,4 % | ||
| CVE-2026-69721 Out-of-bounds read in Windows iSCSI allows an authorized attacker to disclose information locally. |
Pozostałe |
CVSS 5,5EPSS 0,47 % | ||
| CVE-2026-69644 Exposure of sensitive system information to an unauthorized control sphere in Windows iSCSI allows an authorized attacker to disclose information locally. |
Pozostałe |
CVSS 5,5EPSS 0,93 % |
Zakres katalogu: ostatnie 365 dni oraz wszystkie zachowane KEV.
Ostatnio zakończone okno publikacji NVD: 8.11.2026, 15:32 UTC – 8.11.2026, 17:02 UTC. To pojedyncze okno importu, nie granica pokrycia katalogu.