CWE-125: Out-of-bounds Read vulnerabilities

CVE-2026-69483 is an out-of-bounds read vulnerability in Windows Image Acquisition affecting multiple versions of Microsoft Windows 10, including version 1607. This flaw allows an authorized local attacker to disclose information. The vulnerability has a medium severity rating and has been officially fixed in specific Windows updates.

CVE-2026-69561 is an out-of-bounds read vulnerability in the Windows CD-ROM Driver affecting multiple versions of Microsoft Windows 10, including Version 1607. This flaw allows an authorized local attacker to elevate privileges on the affected system. The vulnerability has a high severity rating with a CVSS score of 7.8. Microsoft has released official fixes for all affected versions.

CVE-2026-69427 is a high-severity out-of-bounds read vulnerability in the Windows VOLSNAP.SYS driver affecting multiple versions of Microsoft Windows 10, including Version 1607. This flaw allows an authorized attacker to elevate privileges over a network. The vulnerability has been officially fixed in specific Windows updates.

CVE-2026-69428 is a high-severity vulnerability in Microsoft Windows 10 Version 1607 and related builds involving an out-of-bounds read in the Windows LDAP component. This flaw allows an unauthorized attacker to cause a denial of service over a network. The issue affects multiple Windows 10 builds prior to specific fixed versions. An official fix is available from Microsoft.

CVE-2026-69393 is an out-of-bounds read vulnerability in the Windows Spaceport.sys driver affecting multiple versions of Microsoft Windows 10, including Version 1607 and later builds. This flaw allows an authorized attacker to disclose information over a network. The vulnerability has a medium severity rating with a CVSS score of 5.7. Microsoft has released official fixes for all affected versions.

CVE-2026-69373 is an integer overflow or wraparound vulnerability in the Windows Overlay Filter component of Microsoft Windows 10 Version 1607 and later builds. This flaw allows an authorized local attacker with high privileges to elevate their privileges further. The vulnerability has been assigned a CVSS 3.1 score of 6.7 (medium severity). Microsoft has released official fixes for all affected versions.

CVE-2026-69369 is an out-of-bounds read vulnerability in the Windows DNS component affecting multiple versions of Microsoft Windows including Windows 10 Version 1607. An authorized attacker with local access can exploit this flaw to disclose sensitive information. The vulnerability has a medium severity rating and has been officially fixed in specific Windows updates.

CVE-2026-69365 is an out-of-bounds read vulnerability in the Microsoft Local Security Authority Server (lsasrv) component of Windows 10 Version 21H2. This flaw allows an authorized attacker to elevate privileges over a network. The vulnerability affects multiple builds of Windows 10 21H2 prior to specific fixed versions. A high-severity CVSS 3.1 score of 8.0 has been assigned. Microsoft has released official fixes for all affected versions.

CVE-2026-69372 is an out-of-bounds read vulnerability in the Windows Network File System component affecting Microsoft Windows 10 Version 1607 and related versions. An authorized attacker can exploit this flaw to cause a denial of service over a network. The vulnerability has a medium severity rating with a CVSS score of 5.7. Official patches have been released to address this issue.

CVE-2026-69376 is an out-of-bounds read vulnerability in Microsoft Standard XPS on Windows 10 Version 1607 and other versions. It allows an authorized local attacker to disclose information. The vulnerability has a medium severity score of 5.5 and affects multiple Windows 10 builds prior to specific fixed versions. An official fix is available from Microsoft.

CVE-2026-69353 is an out-of-bounds read vulnerability in the Windows Text Shaping component affecting multiple versions of Microsoft Windows 10, including Version 1607. This flaw allows an authorized local attacker to disclose information. The vulnerability has a medium severity rating with a CVSS score of 5.5. Official patches have been released to address this issue in the affected versions.

CVE-2026-69344 is an out-of-bounds read vulnerability in the Windows Print Spooler components affecting Microsoft Windows 10 Version 21H2 and related builds. This flaw allows an authorized local attacker to disclose sensitive information. The vulnerability has a medium severity rating with a CVSS score of 5.5. Official patches have been released to address this issue.

CVE-2026-69343 is an out-of-bounds read vulnerability in the Windows Overlay Filter component of Microsoft Windows 10 Version 1607 and related versions. This flaw allows an authorized local attacker to disclose information by reading memory outside the intended buffer boundaries. The vulnerability has a medium severity with a CVSS score of 5.5 and has been officially fixed in multiple Windows 10 builds.

CVE-2026-69342 is a high-severity out-of-bounds read vulnerability in the Windows DHCP Server component affecting multiple versions of Microsoft Windows including Windows 10 Version 1607. This flaw allows an unauthorized attacker to cause a denial of service over a network. The vulnerability has been officially fixed in specific Windows versions.

CVE-2026-69340 is a heap-based buffer overflow vulnerability in the NTFS component of Microsoft Windows 10 Version 1607 and other specified versions. It allows an authorized attacker to elevate privileges over a network. The vulnerability has a high severity score of 7.1 and has been officially fixed by Microsoft in multiple Windows 10 builds.

CVE-2026-69332 is an out-of-bounds read vulnerability in the Windows NTFS component affecting multiple versions of Microsoft Windows 10, including Version 1607. This flaw allows an authorized attacker to elevate privileges over a network. The vulnerability has a high severity rating and has been officially fixed in specific Windows updates.

CVE-2026-69329 is a high-severity vulnerability in Microsoft Windows 10 Version 1607 and related versions involving an out-of-bounds read in the BranchCache component. This flaw allows an unauthorized attacker to cause a denial of service over a network. The issue affects multiple Windows 10 builds prior to their respective fixed versions. Microsoft has released official fixes for all affected versions.

CVE-2026-69324 is a type confusion vulnerability in Windows Performance Monitor on Microsoft Windows 10 Version 1607 and other affected versions. It allows an authorized local attacker to elevate privileges by accessing resources using incompatible types. The vulnerability has a high severity score of 7.8 and has been officially fixed in multiple Windows 10 builds.

CVE-2026-69317 is an out-of-bounds read vulnerability in the Remote Desktop Client component of Microsoft Windows 10 Version 1607 and other versions. It allows an authorized attacker to disclose information over a network. The vulnerability has a medium severity with a CVSS score of 5.7 and has been officially fixed by Microsoft in specific updates.

CVE-2026-69318 is an out-of-bounds read vulnerability in the Windows Imaging Component of Microsoft Windows 10 Version 1607 and other specified versions. This flaw allows an authorized local attacker to disclose information. The vulnerability has a medium severity score of 5.5 and has been officially fixed by Microsoft in multiple updates.