CWE-125: Out-of-bounds Read vulnerabilities

CVE-2026-88129 is an out-of-bounds read vulnerability in the DNS Server component of Microsoft Windows Server 2012 and related versions. This flaw allows an authorized attacker to cause a denial of service over the network. The vulnerability has a CVSS score of 6.5, indicating a medium severity level. Official patches have been released to address this issue.

CVE-2026-88125 is an out-of-bounds read vulnerability in the DNS Server component of Microsoft Windows Server 2012 and related versions. This flaw allows an authorized attacker to cause a denial of service over the network. The vulnerability has been assigned a medium severity with a CVSS score of 6.5. Official patches have been released to address this issue.

CVE-2026-88123 is an out-of-bounds read vulnerability in the DNS Server component of Microsoft Windows Server 2012 and related versions. It allows an authorized attacker to cause a denial of service over a network. The vulnerability has a CVSS score of 6.5 (medium severity) and has been officially fixed in specific updates. No known exploits are reported in the wild.

CVE-2026-88122 is an out-of-bounds read vulnerability in the DNS Server component of Microsoft Windows Server 2012 and related versions. This flaw allows an authorized attacker to cause a denial of service over a network. The vulnerability has been assigned a CVSS v3.1 score of 6.5, indicating a medium severity level. Official patches have been released to address this issue in multiple Windows Server versions.

CVE-2026-70228 is an out-of-bounds read vulnerability in the Desktop Window Manager component of Microsoft Windows 10 Version 1809 and related builds. This flaw allows an authorized local attacker to elevate privileges. The vulnerability has a high severity score of 7.8 and affects multiple Windows 10 versions prior to their respective fixed releases. Microsoft has issued official fixes for all affected versions.

CVE-2026-70227 is an out-of-bounds read vulnerability in the Windows Device Association Service affecting Microsoft Windows 11 version 23H2. This flaw allows an authorized local attacker to disclose information. The vulnerability has a medium severity rating with a CVSS score of 5.5. Official patches have been released by Microsoft to address this issue.

CVE-2026-88188 is an out-of-bounds read vulnerability in the Windows Desktop Window Manager (DWM) Core Library affecting multiple builds of Windows 10 Version 1607 and related updates. This flaw allows an authorized local attacker to elevate privileges on the affected system. The vulnerability has a high severity rating with a CVSS score of 7.8 and has been officially fixed by Microsoft in specific updated versions.

CVE-2026-88189 is an out-of-bounds read vulnerability in the Windows Desktop Window Manager (DWM) Core Library affecting Microsoft Windows 10 Version 1809 and related builds. This flaw allows an authorized local attacker to elevate privileges. The vulnerability has been assigned a high severity rating with a CVSS score of 7.8. Microsoft has released official fixes for all affected versions.

CVE-2026-88194 is a high-severity out-of-bounds read vulnerability in the Windows DWM Core Library affecting multiple builds of Windows 10 Version 1607 and related updates. It allows an authorized local attacker to elevate privileges. Microsoft has released official fixes for all affected versions.

CVE-2026-88181 is an out-of-bounds read vulnerability in the Windows Desktop Window Manager (DWM) Core Library affecting multiple builds of Windows 10 Version 1809 and later. This flaw allows an authorized local attacker to elevate privileges. The vulnerability has a high severity score of 7.8 and has been officially fixed in several Windows 10 builds.

CVE-2026-88180 is an out-of-bounds read vulnerability in the Windows Desktop Window Manager (DWM) Core Library affecting Microsoft Windows 10 Version 1809 and related builds. This flaw allows an authorized local attacker to elevate privileges. The vulnerability has been assigned a high severity with a CVSS score of 7.8. Microsoft has released official fixes for all affected versions.

CVE-2026-88179 is an out-of-bounds read vulnerability in the Windows DWM Core Library affecting Windows 10 Version 1607 and related builds. This flaw allows an authorized local attacker to elevate privileges. The vulnerability has a high severity rating with a CVSS score of 7.8. Official patches have been released to address this issue in multiple Windows 10 builds.

CVE-2026-88177 is a high-severity vulnerability in the Windows DWM Core Library affecting multiple builds of Windows 10 Version 1607 and related versions. It allows an authorized local attacker to perform an out-of-bounds read, which can lead to privilege escalation. The vulnerability has been officially fixed in specific Windows 10 builds.

CVE-2026-88115 is an out-of-bounds read vulnerability in Windows Server for NFS on Microsoft Windows 10 Version 1607 and related versions. This flaw allows an unauthorized attacker to execute code remotely over a network. The vulnerability has a high severity with a CVSS score of 8.8. Official patches have been released to address this issue.

CVE-2026-87698 is an out-of-bounds read vulnerability in the Windows Remote Access Service Infrastructure affecting multiple versions of Microsoft Windows 10, including Version 1607. This flaw allows an authorized attacker to locally disclose information. The vulnerability has been assigned a medium severity with a CVSS score of 5.5. Official patches have been released to address this issue.

CVE-2026-83904 is an out-of-bounds read vulnerability in the HID Parser Library of Microsoft Windows 10 Version 1809 and related builds. It allows an authorized local attacker to disclose information. The vulnerability has a medium severity with a CVSS score of 5.5 and has been officially fixed in multiple Windows 10 versions.

CVE-2026-83870 is an out-of-bounds read vulnerability in the Windows Aggregated Data Platform Service affecting Microsoft Windows 11 Version 24H2. It allows an authorized local attacker to disclose information. The vulnerability has a medium severity rating with a CVSS score of 5.5. Official fixes have been released in specific Windows 11 builds to address this issue.

CVE-2026-83898 is an out-of-bounds read vulnerability in the HID Parser Library of Microsoft Windows 10 Version 1809 and related builds. This flaw allows an authorized local attacker to disclose information. The vulnerability has a medium severity score of 5.5 and has been officially fixed in multiple Windows 10 versions.

CVE-2026-83884 is an out-of-bounds read vulnerability in the HID Parser Library of Microsoft Windows 10 Version 1809 and related builds. It allows an authorized local attacker to disclose information. The vulnerability has been assigned a medium severity with a CVSS score of 5.5. Official patches have been released to address this issue in multiple Windows 10 versions.

CVE-2026-83887 is an out-of-bounds read vulnerability in the HID Parser Library of Microsoft Windows 10 Version 1809 and related builds. This flaw allows an authorized local attacker to disclose information. The vulnerability has a medium severity score of 5.5 and affects multiple Windows 10 versions prior to specific fixed releases. An official fix is available from Microsoft.