CVE-2026-70072
Allocation of resources without limits or throttling in Windows Netlogon allows an authorized attacker to deny service over a network.
- CVSS
- 6,5
- EPSS
- 1,23 %
- Publikacja
- Poprawka
- Status poprawki nieustalony
KATALOG PODATNOŚCI
Wyszukuj po identyfikatorze CVE, nazwie produktu lub opisie. Filtruj według sygnałów ryzyka.
Pełny dostępny katalog: publikacje z ostatnich 365 dni oraz całe dostępne KEV.
Allocation of resources without limits or throttling in Windows Netlogon allows an authorized attacker to deny service over a network.
Out-of-bounds read in Windows DNS allows an authorized attacker to disclose information locally.
Out-of-bounds read in Windows Kernel allows an authorized attacker to disclose information locally.
Exposure of sensitive system information to an unauthorized control sphere in Windows Cryptographic Services allows an authorized attacker to disclose information locally.
Incorrect authorization in Windows Routing and Remote Access Service (RRAS) allows an authorized attacker to bypass a security feature locally.
Out-of-bounds read in Microsoft Windows Media Foundation allows an unauthorized attacker to disclose information locally.
Buffer over-read in Windows CD-ROM Driver allows an authorized attacker to disclose information locally.
Access of resource using incompatible type ('type confusion') in Windows Secure Kernel Mode allows an authorized attacker to disclose information locally.
Use after free in Windows Netlogon allows an authorized attacker to deny service over a network.
Out-of-bounds read in Windows IP Over USB Service allows an authorized attacker to disclose information locally.
Out-of-bounds read in Windows Update allows an authorized attacker to disclose information locally.
Weak authentication in Active Directory Federation Services (AD FS) allows an unauthorized attacker to bypass a security feature over a network.
Out-of-bounds read in Desktop Window Manager allows an authorized attacker to disclose information locally.
Null pointer dereference in Windows VMSwitch allows an authorized attacker to deny service locally.
Improper protection of alternate path in Windows AppX Deployment Service allows an authorized attacker to bypass a security feature locally.
Weak authentication in Active Directory Federation Services (AD FS) allows an unauthorized attacker to bypass a security feature over a network.
Out-of-bounds read in Windows Overlay Filter allows an authorized attacker to disclose information locally.
Relative path traversal in Windows Libarchive allows an unauthorized attacker to perform tampering over a network.
Improper link resolution before file access ('link following') in Windows AppX Deployment Service allows an authorized attacker to disclose information locally.
Incorrect authorization in Windows Kernel-Mode Drivers allows an authorized attacker to disclose information locally.
Improper limitation of a pathname to a restricted directory ('path traversal') in Windows Libarchive allows an unauthorized attacker to perform tampering over a network.
Heap-based buffer overflow in Windows Overlay Filter allows an unauthorized attacker to execute code with a physical attack.
Buffer over-read in Windows Overlay Filter allows an authorized attacker to disclose information locally.
Out-of-bounds read in Windows Client for NFS allows an unauthorized attacker to disclose information over a network.
Out-of-bounds read in Windows Client for NFS allows an unauthorized attacker to disclose information over a network.
| CVE / produkt | Sygnały | Oceny | Publikacja | Zapisz |
|---|---|---|---|---|
| CVE-2026-70072 Allocation of resources without limits or throttling in Windows Netlogon allows an authorized attacker to deny service over a network. |
Pozostałe |
CVSS 6,5EPSS 1,23 % | ||
| CVE-2026-70074 Out-of-bounds read in Windows DNS allows an authorized attacker to disclose information locally. |
Pozostałe |
CVSS 5,5EPSS 0,4 % | ||
| CVE-2026-70063 Out-of-bounds read in Windows Kernel allows an authorized attacker to disclose information locally. |
Pozostałe |
CVSS 4,7EPSS 0,35 % | ||
| CVE-2026-70055 Exposure of sensitive system information to an unauthorized control sphere in Windows Cryptographic Services allows an authorized attacker to disclose information locally. |
Pozostałe |
CVSS 5,5EPSS 0,93 % | ||
| CVE-2026-70057 Incorrect authorization in Windows Routing and Remote Access Service (RRAS) allows an authorized attacker to bypass a security feature locally. |
Pozostałe |
CVSS 5,5EPSS 0,32 % | ||
| CVE-2026-70044 Out-of-bounds read in Microsoft Windows Media Foundation allows an unauthorized attacker to disclose information locally. |
Pozostałe |
CVSS 5,5EPSS 0,52 % | ||
| CVE-2026-70041 Buffer over-read in Windows CD-ROM Driver allows an authorized attacker to disclose information locally. |
Pozostałe |
CVSS 5,5EPSS 0,4 % | ||
| CVE-2026-70017 Access of resource using incompatible type ('type confusion') in Windows Secure Kernel Mode allows an authorized attacker to disclose information locally. |
Pozostałe |
CVSS 5,5EPSS 0,4 % | ||
| CVE-2026-70025 Use after free in Windows Netlogon allows an authorized attacker to deny service over a network. |
Pozostałe |
CVSS 6,5EPSS 0,95 % | ||
| CVE-2026-70011 Out-of-bounds read in Windows IP Over USB Service allows an authorized attacker to disclose information locally. |
Pozostałe |
CVSS 5,5EPSS 0,46 % | ||
| CVE-2026-69999 Out-of-bounds read in Windows Update allows an authorized attacker to disclose information locally. |
Pozostałe |
CVSS 5,5EPSS 0,4 % | ||
| CVE-2026-70005 Weak authentication in Active Directory Federation Services (AD FS) allows an unauthorized attacker to bypass a security feature over a network. |
Pozostałe |
CVSS 5,9EPSS 0,63 % | ||
| CVE-2026-69974 Out-of-bounds read in Desktop Window Manager allows an authorized attacker to disclose information locally. |
Pozostałe |
CVSS 4,7EPSS 0,33 % | ||
| CVE-2026-69978 Null pointer dereference in Windows VMSwitch allows an authorized attacker to deny service locally. |
Pozostałe |
CVSS 5,5EPSS 0,39 % | ||
| CVE-2026-69979 Improper protection of alternate path in Windows AppX Deployment Service allows an authorized attacker to bypass a security feature locally. |
Pozostałe |
CVSS 5,5EPSS 0,38 % | ||
| CVE-2026-69982 Weak authentication in Active Directory Federation Services (AD FS) allows an unauthorized attacker to bypass a security feature over a network. |
Pozostałe |
CVSS 5,9EPSS 0,65 % | ||
| CVE-2026-69967 Out-of-bounds read in Windows Overlay Filter allows an authorized attacker to disclose information locally. |
Pozostałe |
CVSS 5,5EPSS 0,46 % | ||
| CVE-2026-69968 Relative path traversal in Windows Libarchive allows an unauthorized attacker to perform tampering over a network. |
Pozostałe |
CVSS 6,5EPSS 0,86 % | ||
| CVE-2026-69969 Improper link resolution before file access ('link following') in Windows AppX Deployment Service allows an authorized attacker to disclose information locally. |
Pozostałe |
CVSS 4,7EPSS 0,37 % | ||
| CVE-2026-69971 Incorrect authorization in Windows Kernel-Mode Drivers allows an authorized attacker to disclose information locally. |
Pozostałe |
CVSS 5,5EPSS 0,4 % | ||
| CVE-2026-69973 Improper limitation of a pathname to a restricted directory ('path traversal') in Windows Libarchive allows an unauthorized attacker to perform tampering over a network. |
Pozostałe |
CVSS 6,5EPSS 0,78 % | ||
| CVE-2026-69958 Heap-based buffer overflow in Windows Overlay Filter allows an unauthorized attacker to execute code with a physical attack. |
Pozostałe |
CVSS 6,8EPSS 0,44 % | ||
| CVE-2026-69954 Buffer over-read in Windows Overlay Filter allows an authorized attacker to disclose information locally. |
Pozostałe |
CVSS 5,5EPSS 0,4 % | ||
| CVE-2026-69955 Out-of-bounds read in Windows Client for NFS allows an unauthorized attacker to disclose information over a network. |
Pozostałe |
CVSS 6,5EPSS 0,87 % | ||
| CVE-2026-69940 Out-of-bounds read in Windows Client for NFS allows an unauthorized attacker to disclose information over a network. |
Pozostałe |
CVSS 6,5EPSS 0,92 % |
Zakres katalogu: ostatnie 365 dni oraz wszystkie zachowane KEV.
Ostatnio zakończone okno publikacji NVD: 8.11.2026, 19:32 UTC – 8.11.2026, 21:02 UTC. To pojedyncze okno importu, nie granica pokrycia katalogu.