CWE-125: Out-of-bounds Read vulnerabilities

Adobe Dimension contains an out-of-bounds read vulnerability (CWE-125) that could allow an attacker to disclose sensitive memory information. Exploitation requires user interaction, specifically opening a malicious file. The vulnerability affects versions from 0 up to and including 4.1.8. The CVSS 3.1 base score is 5.5, indicating a medium severity level.

CVE-2026-108129 is an out-of-bounds read vulnerability in the DNS Server component of Microsoft Windows 10 Version 1607 and related versions. This flaw allows an authorized attacker to disclose information over a network. The vulnerability has been assigned a CVSS 3.1 score of 6.5, indicating a medium severity level. Official patches have been released to address this issue.

CVE-2026-108128 is an out-of-bounds read vulnerability in the DNS Server component of Microsoft Windows 10 Version 1607 and related builds. This flaw allows an authorized attacker to disclose information over a network. The vulnerability has been assigned a CVSS v3.1 score of 6.5 (medium severity). Official patches have been released by Microsoft to address this issue.

CVE-2026-108127 is an out-of-bounds read vulnerability in the DNS Server component of Microsoft Windows 10 Version 1607 and related versions. This flaw allows an authorized attacker to disclose information over a network. The vulnerability has been assigned a CVSS 3.1 score of 6.5, indicating a medium severity level. Microsoft has released official fixes for all affected versions.

CVE-2026-97844 is an out-of-bounds read vulnerability in the DNS Server component of Microsoft Windows 10 Version 1607 and related versions. This flaw allows an authorized attacker to disclose information over a network. The vulnerability affects multiple Windows 10 builds prior to specific fixed versions. A patch is available from Microsoft to address this issue.

CVE-2026-97843 is an out-of-bounds read vulnerability in the DNS Server component of Microsoft Windows 10 Version 1607 and related versions. This flaw allows an authorized attacker to disclose information over a network. The vulnerability has been assigned a CVSS v3.1 score of 6.5 (medium severity). Official fixes have been released for affected versions.

CVE-2026-97842 is an out-of-bounds read vulnerability in the DNS Server component of Microsoft Windows 10 Version 1607 and related versions. This flaw allows an authorized attacker to disclose information over a network. The vulnerability has been assigned a CVSS v3.1 score of 6.5 (medium severity). Official patches have been released to address this issue.

CVE-2026-97841 is an out-of-bounds read vulnerability in the DNS Server component of Microsoft Windows 10 Version 1607 and other specified versions. This flaw allows an authorized attacker to disclose information over a network. The vulnerability has a medium severity with a CVSS score of 6.5. Microsoft has released official fixes for all affected versions.

CVE-2026-97840 is an out-of-bounds read vulnerability in the DNS Server component of Microsoft Windows 10 Version 1607 and related builds. This flaw allows an authorized attacker to disclose information over a network. The vulnerability has a CVSS 3.1 base score of 6.5, indicating a medium severity level. Official patches have been released to address this issue in multiple Windows 10 builds.

CVE-2026-97839 is an out-of-bounds read vulnerability in the DNS Server component of Microsoft Windows 10 Version 1607 and related versions. This flaw allows an authorized attacker to disclose information over a network. The vulnerability has been assigned a CVSS 3.1 base score of 6.5, indicating a medium severity level. Microsoft has released official fixes for all affected versions.

CVE-2026-97838 is an out-of-bounds read vulnerability in the DNS Server component of Microsoft Windows 10 Version 1607 and related versions. This flaw allows an authorized attacker to disclose information over a network. The vulnerability has a CVSS score of 6.5 (medium severity) and affects multiple Windows 10 builds prior to their respective fixed versions. Microsoft has released official fixes for all affected versions.

CVE-2026-97837 is an out-of-bounds read vulnerability in the DNS Server component of Microsoft Windows 10 Version 1607 and related builds. This flaw allows an authorized attacker to disclose information over a network. The vulnerability has a CVSS 3.1 base score of 6.5, indicating medium severity. Official fixes have been released by Microsoft for multiple affected Windows 10 versions.

CVE-2026-97836 is an out-of-bounds read vulnerability in the DNS Server component of Microsoft Windows 10 Version 1607 and related builds. This flaw allows an authorized attacker to disclose information over a network. The vulnerability affects multiple Windows 10 builds prior to specific fixed versions. An official fix is available from Microsoft.

CVE-2026-97835 is an out-of-bounds read vulnerability in the DNS Server component of Microsoft Windows 10 Version 1607 and related versions. This flaw allows an authorized attacker to disclose information over a network. The vulnerability has been assigned a CVSS 3.1 base score of 6.5, indicating a medium severity level. Official patches are available for all affected versions.

CVE-2026-97834 is an out-of-bounds read vulnerability in the DNS Server component of Microsoft Windows 10 Version 1607 and related versions. This flaw allows an authorized attacker to disclose information over a network. The vulnerability has a CVSS score of 6.5 (medium severity) and affects multiple Windows 10 builds prior to specific fixed versions. Microsoft has issued official fixes for all affected versions.

CVE-2026-97833 is an out-of-bounds read vulnerability in the DNS Server component of Microsoft Windows 10 Version 1607 and related builds. This flaw allows an authorized attacker to disclose information over a network. The vulnerability has a CVSS v3.1 score of 6.5, indicating a medium severity impact focused on confidentiality. Official patches have been released to address this issue in multiple Windows 10 builds.

CVE-2026-97832 is an out-of-bounds read vulnerability in the DNS Server component of Microsoft Windows 10 Version 1607 and related versions. This flaw allows an authorized attacker to disclose information over a network. The vulnerability has a CVSS score of 6.5 (medium severity) and affects multiple Windows 10 builds prior to specific fixed versions. Microsoft has released official fixes for all affected versions.

CVE-2026-97831 is an out-of-bounds read vulnerability in the DNS Server component of Microsoft Windows 10 Version 1607 and related versions. This flaw allows an authorized attacker to disclose information over a network. The vulnerability has a CVSS score of 6.5, indicating a medium severity level. Microsoft has released official fixes for affected versions.

CVE-2026-97829 is an out-of-bounds read vulnerability in the DNS Server component of Microsoft Windows 10 Version 1607 and related versions. This flaw allows an authorized attacker to disclose information over a network. The vulnerability has a medium severity rating and has been officially fixed by Microsoft in multiple Windows 10 builds.

CVE-2026-97827 is an out-of-bounds read vulnerability in the DNS Server component of Microsoft Windows 10 Version 1607 and related versions. This flaw allows an authorized attacker to disclose information over a network. The vulnerability has a medium severity rating with a CVSS score of 6.5. Official fixes have been released by Microsoft for affected versions.