Oct 23, 2026 UTC
Out-of-bounds read in Windows NTFS allows an authorized attacker to disclose information locally.
Inspect record →Vulnerability intelligence / live index
A working index of published vulnerability records, ordered by latest update. Open a record to inspect its score, vector, and impact metrics.
CVE Program / CVE List®
Updated continuously
Oct 23, 2026 UTC
Out-of-bounds read in Windows NTFS allows an authorized attacker to disclose information locally.
Inspect record →Oct 23, 2026 UTC
Untrusted pointer dereference in Windows COM+ Event System Service allows an authorized attacker to elevate privileges locally.
Inspect record →Oct 23, 2026 UTC
Untrusted pointer dereference in Windows OLE allows an unauthorized attacker to execute code over a network.
Inspect record →Oct 23, 2026 UTC
Integer underflow (wrap or wraparound) in Windows NTFS allows an authorized attacker to disclose information locally.
Inspect record →Oct 23, 2026 UTC
Use after free in Windows Workstation Service allows an authorized attacker to elevate privileges locally.
Inspect record →Oct 23, 2026 UTC
Use after free in Windows Broadcast DVR User Service allows an authorized attacker to elevate privileges locally.
Inspect record →Oct 23, 2026 UTC
Improper access control in Windows NTFS allows an authorized attacker to elevate privileges locally.
Inspect record →Oct 23, 2026 UTC
Heap-based buffer overflow in Windows PCI Bus Driver allows an authorized attacker to elevate privileges locally.
Inspect record →Oct 23, 2026 UTC
Integer overflow or wraparound in Windows Virtualization-Based Security (VBS) Enclave allows an authorized attacker to elevate privileges locally.
Inspect record →Oct 23, 2026 UTC
Integer overflow or wraparound in Windows Kernel-Mode Drivers allows an authorized attacker to elevate privileges locally.
Inspect record →Oct 23, 2026 UTC
Heap-based buffer overflow in Windows Kernel allows an authorized attacker to elevate privileges locally.
Inspect record →Oct 23, 2026 UTC
Use after free in Windows Client License Service allows an authorized attacker to elevate privileges locally.
Inspect record →Oct 23, 2026 UTC
Untrusted pointer dereference in Microsoft Windows Search Component allows an authorized attacker to disclose information locally.
Inspect record →Oct 23, 2026 UTC
Improper link resolution before file access ('link following') in Microsoft Windows Search Component allows an authorized attacker to elevate privileges locally.
Inspect record →Oct 23, 2026 UTC
Heap-based buffer overflow in Windows NTFS allows an authorized attacker to elevate privileges locally.
Inspect record →