CWE-125: Out-of-bounds Read vulnerabilities

CVE-2026-84007 is an out-of-bounds read vulnerability in the Remote Desktop Gateway Service of Microsoft Windows Server 2012 and related versions. This flaw allows an authorized attacker to disclose information over a network. The vulnerability has a CVSS score of 6.5, indicating a medium severity level. Official patches have been released to address this issue in multiple affected versions.

CVE-2026-70128 is an out-of-bounds read vulnerability in the HID Parser Library of Microsoft Windows 10 Version 1809 and related builds. This flaw allows an authorized local attacker to disclose sensitive information. The vulnerability has a medium severity rating and has been officially fixed by Microsoft in multiple Windows 10 builds.

CVE-2026-83892 is an out-of-bounds read vulnerability in the HID Parser Library of Microsoft Windows 10 Version 1809 and related builds. This flaw allows an authorized local attacker to disclose information. The vulnerability has a medium severity score of 5.5 and affects multiple Windows 10 versions prior to specific fixed builds. An official fix is available from Microsoft.

CVE-2026-83875 is an out-of-bounds read vulnerability in the HID Parser Library of Microsoft Windows 10 Version 1809 and related builds. This flaw allows an authorized local attacker to disclose information. The vulnerability has a medium severity rating with a CVSS score of 5.5. Official patches have been released to address this issue.

CVE-2026-83849 is an out-of-bounds read vulnerability in Windows Hello on Microsoft Windows 10 Version 21H2. It allows an authorized local attacker to disclose information. The vulnerability has a medium severity with a CVSS score of 5.5. Official patches have been released to address this issue in multiple Windows 10 builds.

Out-of-bounds read in Windows Paint allows an unauthorized attacker to execute code over a network.

CVE-2026-83843 is an out-of-bounds read vulnerability in the Windows Internet Key Exchange (IKE) Protocol affecting multiple versions of Microsoft Windows 10, including Version 1607. This flaw allows an unauthorized attacker to cause a denial of service over a network. The vulnerability has a high severity rating with a CVSS score of 7.5. Official patches are available for all affected versions.

CVE-2026-83832 is a high-severity vulnerability in Microsoft Windows 10 Version 1809 and related builds involving an out-of-bounds read in the Windows Spaceport.sys driver. This flaw allows an authorized local attacker to elevate privileges on the affected system. The vulnerability has been officially fixed in multiple Windows 10 builds as listed by Microsoft.

CVE-2026-83776 is an out-of-bounds read vulnerability in the Microsoft Bluetooth Driver affecting Windows 10 Version 1607 and later builds up to specific patched versions. This flaw allows an unauthorized attacker with physical access to elevate privileges on the affected system. The vulnerability has a CVSS score of 6.8, indicating a medium severity level. Official patches have been released by Microsoft to address this issue.

CVE-2026-83760 is an out-of-bounds read vulnerability in the Microsoft Bluetooth Driver affecting Windows 10 Version 1607 and related builds. It allows an authorized local attacker to disclose information. The vulnerability has a medium severity rating with a CVSS score of 5.5. Official fixes have been released for all affected versions.

CVE-2026-83733 is an out-of-bounds read vulnerability in the Windows Print Spooler components affecting multiple versions of Microsoft Windows 10, including Version 1607. This flaw allows an authorized local attacker to disclose information by reading memory outside the intended bounds. The vulnerability has been assigned a medium severity with a CVSS score of 5.5. Microsoft has released official fixes for all affected versions.

CVE-2026-83694 is an out-of-bounds read vulnerability in the Windows Volume Manager Extension Driver affecting multiple versions of Microsoft Windows 10, including Version 1607. This flaw allows an authorized local attacker to elevate privileges. The vulnerability has a high severity rating and has been officially fixed by Microsoft in specific updates.

CVE-2026-83671 is an out-of-bounds read vulnerability in Windows Hyper-V on Microsoft Windows 10 Version 1809 and related builds. It allows an authorized local attacker to disclose sensitive information. The vulnerability has a medium severity rating and has been officially fixed in multiple Windows 10 builds.

CVE-2026-83667 is an out-of-bounds read vulnerability in Active Directory Domain Services on Microsoft Windows 10 Version 1607 and related builds. This flaw allows an authorized attacker to cause a denial of service over a network. The vulnerability affects multiple Windows 10 builds prior to specific fixed versions. A patch is officially available from Microsoft to address this issue.

CVE-2026-83655 is an out-of-bounds read vulnerability in the Network Policy Server component of Microsoft Windows 10 Version 1607 and related builds. This flaw allows an unauthorized attacker to cause a denial of service over a network. The vulnerability has been assigned a high severity rating with a CVSS score of 7.5. Official patches have been released to address this issue.

CVE-2026-83649 is an out-of-bounds read vulnerability in the Windows Local Security Authority Subsystem Service (LSASS) affecting multiple builds of Windows 10 Version 1607 and related versions. This flaw allows an authorized attacker to cause a denial of service over a network. The vulnerability has a medium severity rating with a CVSS score of 6.5. Official patches have been released to address this issue.

CVE-2026-83635 is an out-of-bounds read vulnerability in the DNS Server component of Microsoft Windows Server 2012 and related versions. This flaw allows an unauthorized attacker to cause a denial of service over the network. The vulnerability has a high severity rating with a CVSS score of 7.5. Official patches have been released to address this issue in multiple affected versions.

CVE-2026-83521 is an out-of-bounds read vulnerability in the Windows IKE Extension affecting multiple versions of Microsoft Windows 10, including Version 1607. This flaw allows an authorized attacker to disclose information over a network. The vulnerability has a CVSS score of 6.5 (medium severity) and has been officially fixed in specific Windows updates.

CVE-2026-83516 is a high-severity out-of-bounds read vulnerability in the Windows Local Security Authority Subsystem Service (LSASS) affecting Windows 10 Version 1809 and related builds. This flaw allows an unauthorized attacker to cause a denial of service over a network. The vulnerability has been officially fixed in multiple Windows 10 builds.

CVE-2026-69721 is an out-of-bounds read vulnerability in the Windows iSCSI component affecting multiple versions of Microsoft Windows 10, including Version 1607. This flaw allows an authorized local attacker to disclose sensitive information. The vulnerability has a medium severity score and has been officially fixed in specific Windows 10 builds.