CWE-125: Out-of-bounds Read vulnerabilities

CVE-2026-68887 is an out-of-bounds read vulnerability in the Windows Message Queuing Queue Manager component of Microsoft Windows 10 Version 1607 and related versions. This flaw allows an unauthorized attacker to cause a denial of service (DoS) over a network. The vulnerability has a high severity rating with a CVSS score of 7.5. Microsoft has released official fixes for affected versions.

CVE-2026-72935 is an out-of-bounds read vulnerability in the Windows NTFS component affecting multiple versions of Microsoft Windows 10, including Version 1607. This flaw allows an authorized local attacker to elevate privileges on the affected system. The vulnerability has a CVSS 3.1 base score of 6.7, indicating a medium severity level. Microsoft has released official fixes for all affected versions.

CVE-2026-71341 is an out-of-bounds read vulnerability in the Windows Partition Management Driver affecting multiple versions of Microsoft Windows 10, including version 1607. This flaw allows an authorized local attacker to disclose sensitive information. The vulnerability has a medium severity rating with a CVSS score of 5.5. Microsoft has released official fixes for all affected versions.

CVE-2026-69808 is an out-of-bounds read vulnerability in the Windows Win32K component affecting multiple versions of Microsoft Windows 10, including Version 1607. This flaw allows an authorized local attacker with low privileges to disclose sensitive information. The vulnerability has a medium severity rating and has been officially fixed in specific Windows 10 builds.

CVE-2026-69862 is an out-of-bounds read vulnerability in the Windows Wireless Wide Area Network Service affecting multiple versions of Microsoft Windows 10. This flaw allows an authorized local attacker to disclose information. The vulnerability has a medium severity rating with a CVSS score of 5.5. Official patches have been released to address this issue in the affected Windows 10 versions.

CVE-2026-69741 is an out-of-bounds read vulnerability in the Windows Spaceport.sys driver affecting Windows 10 Version 21H2 and related builds. It allows an authorized local attacker to disclose information. The vulnerability has a medium severity score of 5.5 and has been officially fixed by Microsoft in specific Windows 10 builds.

CVE-2026-69875 is a heap-based buffer overflow vulnerability in the Windows NTFS component of Microsoft Windows 10 Version 1809 and related builds. This flaw allows an authorized attacker to elevate privileges over a network. The vulnerability has been assigned a high severity with a CVSS score of 8.0. Microsoft has released official patches that fix this issue in multiple Windows 10 builds.

CVE-2026-69717 is a high-severity vulnerability in Microsoft Windows 10 Version 1607 and related versions involving an untrusted pointer dereference in the Windows Group Policy component. This flaw allows an authorized attacker to elevate privileges over a network. The issue affects multiple Windows 10 builds prior to specific fixed versions. Microsoft has released official fixes for all affected versions.

CVE-2026-69627 is an out-of-bounds read vulnerability in the Windows Remote Desktop Licensing Service affecting multiple versions of Microsoft Windows 10, including Version 1607. This flaw allows an authorized local attacker to disclose information. The vulnerability has a medium severity rating with a CVSS score of 5.5. Official patches have been released to address this issue.

CVE-2026-69689 is an out-of-bounds read vulnerability in the Windows Win32K component affecting multiple builds of Windows 10 Version 1809 and related versions. This flaw allows an authorized attacker to elevate privileges over a network. The vulnerability has a high severity rating with a CVSS score of 8. An official fix is available and has been released in specific Windows 10 builds.

CVE-2026-69609 is a medium-severity vulnerability in Microsoft Office 365 for Mac involving an out-of-bounds read in Windows Win32K. This flaw allows an authorized local attacker to disclose sensitive information. The issue affects multiple versions of Office 365 for Mac prior to fixed releases. Microsoft has issued official fixes for the vulnerability.

CVE-2026-69572 is an out-of-bounds read vulnerability in the Windows SMB Client affecting multiple versions of Microsoft Windows 10, including version 1607. This flaw allows an authorized attacker to disclose information over a network. The vulnerability has a medium severity rating and has been officially fixed by Microsoft in specific updates.

CVE-2026-69549 is an out-of-bounds read vulnerability in the Virtual Hard Disk (VHD) Miniport Driver of Microsoft Windows 10 Version 1809 and related builds. This flaw allows an authorized local attacker to elevate privileges on the affected system. The vulnerability has a high severity rating and has been officially fixed in multiple Windows 10 builds.

CVE-2026-69527 is an out-of-bounds read vulnerability in the Windows USB Mass Storage Class Driver affecting multiple versions of Microsoft Windows 10, including version 1607. This flaw allows an authorized local attacker to disclose information. The vulnerability has a medium severity rating with a CVSS score of 5.5. Official patches have been released to address this issue.

CVE-2026-69504 is an out-of-bounds read vulnerability in the Windows NTFS component affecting multiple versions of Microsoft Windows 10, including Version 1607. This flaw allows an authorized local attacker to disclose information by reading memory outside the intended bounds. The vulnerability has a medium severity rating with a CVSS score of 5.5 and has been officially fixed in specific Windows 10 builds.

CVE-2026-69505 is an out-of-bounds read vulnerability in the Windows NTFS component affecting multiple versions of Microsoft Windows 10, including Version 1607 and later builds. This flaw allows an authorized attacker to elevate privileges over a network. The vulnerability has a high severity rating and has been officially fixed in specific Windows updates.

CVE-2026-69494 is a high-severity out-of-bounds read vulnerability in the Windows Event Logging Service affecting multiple versions of Microsoft Windows 10, including Version 1607. This flaw allows an unauthorized attacker to execute code remotely over a network. Microsoft has released official fixes for all affected versions.

CVE-2026-69450 is an out-of-bounds read vulnerability in Windows Error Reporting affecting multiple versions of Microsoft Windows 10, including Version 1607. This flaw allows an authorized local attacker to elevate privileges. The vulnerability has a high severity score and has been officially fixed in specific Windows 10 builds.

CVE-2026-69532 is an out-of-bounds read vulnerability in the Windows NTFS component affecting multiple versions of Microsoft Windows 10, including version 1607. This flaw allows an authorized local attacker to elevate privileges on the affected system. The vulnerability has a high severity rating with a CVSS score of 7.8. Microsoft has released official fixes for all affected versions.

CVE-2026-69458 is an out-of-bounds read vulnerability in Windows BitLocker affecting multiple versions of Microsoft Windows 10, including Version 1607. This flaw allows an authorized attacker to elevate privileges over a network. The vulnerability has a high severity rating with a CVSS score of 8. A fix is officially available in specific patched versions.