Medium-severity CVEs (page 38)
Page 38 of 100 — medium-severity CVEs, newest first, with CVSS scores and publication dates.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2026-28627 | Medium | 4.3 | 2026-09-08 | In btm_sec_encrypt_change of btm_sec.cc, there is a possible downgrade attack due to a logic error in the code. This could lead to remote information disclosur… |
CVE-2026-28617 | Medium | 5.5 | 2026-09-08 | In add of WifiNetworkSuggestionsManager.java, there is a possible persistent DOS due to resource exhaustion. This could lead to local denial of service with no… |
CVE-2026-28596 | Medium | 5.5 | 2026-09-08 | In parseInterventionFromXml of GameManagerService.java, there is a possible permanent denial of service due to resource exhaustion. This could lead to local de… |
CVE-2026-28584 | Medium | 5.5 | 2026-09-08 | In createSessionInternal of PackageInstallerService.java, there is a possible way to permanently DoS the device due to a logic error in the code. This could le… |
CVE-2026-9215 | Medium | 6.7 | 2026-09-08 | A cross site request forgery (CSRF) vulnerability in the listed NETGEAR models allows an attacker who can leverage social engineering techniques on a router ad… |
CVE-2026-86672 | Medium | 5.3 | 2026-09-08 | A vulnerability has been found in ningzichun Student Management System up to 98760f5711cf6dc8b4adca53a9e207ca49b02ebf. Affected is an unknown function of the f… |
CVE-2026-85875 | Medium | 5.5 | 2026-09-08 | Out-of-bounds read in Microsoft Office Excel allows an unauthorized attacker to disclose information locally. |
CVE-2026-83991 | Medium | 5.5 | 2026-09-08 | Missing authentication for critical function in Windows Cloud Files Mini Filter Driver allows an authorized attacker to perform tampering locally. |
CVE-2026-83951 | Medium | 5.5 | 2026-09-08 | Buffer over-read in Microsoft Office Word allows an unauthorized attacker to disclose information locally. |
CVE-2026-83949 | Medium | 5.5 | 2026-09-08 | Buffer over-read in Microsoft Office Word allows an unauthorized attacker to disclose information locally. |
CVE-2026-83501 | Medium | 5.5 | 2026-09-08 | Out-of-bounds read in Windows Virtualization-Based Security (VBS) Enclave allows an authorized attacker to disclose information locally. |
CVE-2026-81958 | Medium | 5.5 | 2026-09-08 | Use of uninitialized resource in Microsoft Office Excel allows an unauthorized attacker to disclose information locally. |
CVE-2026-81824 | Medium | 4.7 | 2026-09-08 | The vulnerability, if exploited, could allow a miscreant to run arbitrary JavaScript code in a browser session of a PIMBoards user who was socially engineered… |
CVE-2026-81823 | Medium | 5.3 | 2026-09-08 | The vulnerability, if exploited, could allow an unauthenticated miscreant to perform read operations intended only for PIMBoards users, resulting in informatio… |
CVE-2026-81401 | Medium | 5.5 | 2026-09-08 | Access of resource using incompatible type ('type confusion') in Microsoft Office Excel allows an unauthorized attacker to disclose information locally. |
CVE-2026-81400 | Medium | 5.5 | 2026-09-08 | Out-of-bounds read in Microsoft Office Excel allows an unauthorized attacker to disclose information locally. |
CVE-2026-81399 | Medium | 5.5 | 2026-09-08 | Buffer over-read in Microsoft Office Excel allows an unauthorized attacker to disclose information locally. |
CVE-2026-81395 | Medium | 5.5 | 2026-09-08 | Out-of-bounds read in Microsoft Office Excel allows an unauthorized attacker to disclose information locally. |
CVE-2026-81394 | Medium | 5.5 | 2026-09-08 | Exposure of sensitive system information to an unauthorized control sphere in Microsoft Office Excel allows an unauthorized attacker to disclose information lo… |
CVE-2026-81393 | Medium | 5.5 | 2026-09-08 | Out-of-bounds read in Microsoft Office Excel allows an unauthorized attacker to disclose information locally. |
CVE-2026-81392 | Medium | 5.5 | 2026-09-08 | Out-of-bounds read in Microsoft Office Excel allows an unauthorized attacker to disclose information locally. |
CVE-2026-81391 | Medium | 5.5 | 2026-09-08 | Use of uninitialized resource in Microsoft Office Excel allows an unauthorized attacker to disclose information locally. |
CVE-2026-81390 | Medium | 5.5 | 2026-09-08 | Out-of-bounds read in Microsoft Office Excel allows an unauthorized attacker to disclose information locally. |
CVE-2026-81387 | Medium | 5.5 | 2026-09-08 | Exposure of sensitive system information to an unauthorized control sphere in Microsoft Office Excel allows an unauthorized attacker to disclose information lo… |
CVE-2026-81381 | Medium | 6.5 | 2026-09-08 | Insufficiently protected credentials in GitHub Copilot and Visual Studio Code allows an unauthorized attacker to disclose information over a network. |
CVE-2026-81380 | Medium | 5.3 | 2026-09-08 | Improper neutralization of special elements used in a command ('command injection') in GitHub Copilot and Visual Studio Code allows an unauthorized attacker to… |
CVE-2026-81377 | Medium | 6.5 | 2026-09-08 | Improper limitation of a pathname to a restricted directory ('path traversal') in Visual Studio Code allows an unauthorized attacker to perform tampering over… |
CVE-2026-80091 | Medium | 6.5 | 2026-09-08 | Use of uninitialized resource in Microsoft Office allows an unauthorized attacker to disclose information over a network. |
CVE-2026-80090 | Medium | 6.5 | 2026-09-08 | Out-of-bounds read in Microsoft Office Word allows an unauthorized attacker to disclose information over a network. |
CVE-2026-80089 | Medium | 6.5 | 2026-09-08 | Out-of-bounds read in Microsoft Office allows an unauthorized attacker to disclose information over a network. |
CVE-2026-80088 | Medium | 6.5 | 2026-09-08 | Out-of-bounds read in Microsoft Office Word allows an unauthorized attacker to disclose information over a network. |
CVE-2026-80087 | Medium | 6.5 | 2026-09-08 | Heap-based buffer overflow in Microsoft Office allows an unauthorized attacker to disclose information over a network. |
CVE-2026-80086 | Medium | 6.5 | 2026-09-08 | Out-of-bounds read in Microsoft Office PowerPoint allows an unauthorized attacker to disclose information over a network. |
CVE-2026-80084 | Medium | 6.5 | 2026-09-08 | Out-of-bounds read in Microsoft Office Outlook allows an unauthorized attacker to disclose information over a network. |
CVE-2026-80082 | Medium | 6.5 | 2026-09-08 | Out-of-bounds read in Microsoft Office allows an unauthorized attacker to disclose information over a network. |
CVE-2026-80079 | Medium | 6.5 | 2026-09-08 | Out-of-bounds read in Microsoft Office Word allows an unauthorized attacker to disclose information over a network. |
CVE-2026-80078 | Medium | 6.5 | 2026-09-08 | Out-of-bounds read in Microsoft Office allows an unauthorized attacker to disclose information over a network. |
CVE-2026-80076 | Medium | 6.5 | 2026-09-08 | Out-of-bounds read in Microsoft Office allows an unauthorized attacker to disclose information over a network. |
CVE-2026-80073 | Medium | 6.5 | 2026-09-08 | Out-of-bounds read in Microsoft Office Outlook allows an unauthorized attacker to disclose information over a network. |
CVE-2026-79904 | Medium | 5.0 | 2026-09-08 | Photoshop Mobile is affected by an Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability that could result in a Security… |
CVE-2026-78523 | Medium | 5.9 | 2026-09-08 | Use after free in Windows DNS allows an unauthorized attacker to deny service over a network. |
CVE-2026-78522 | Medium | 6.5 | 2026-09-08 | Out-of-bounds read in Microsoft Office Word allows an unauthorized attacker to disclose information over a network. |
CVE-2026-78520 | Medium | 6.5 | 2026-09-08 | Out-of-bounds read in Microsoft Office Outlook allows an unauthorized attacker to execute code over a network. |
CVE-2026-78516 | Medium | 4.3 | 2026-09-08 | Insertion of sensitive information into externally-accessible file or directory in Windows Storage allows an authorized attacker to disclose information locall… |
CVE-2026-78515 | Medium | 6.5 | 2026-09-08 | Out-of-bounds read in Microsoft Office Excel allows an unauthorized attacker to disclose information over a network. |
CVE-2026-78513 | Medium | 5.5 | 2026-09-08 | Out-of-bounds read in Microsoft Office PowerPoint allows an unauthorized attacker to disclose information locally. |
CVE-2026-78508 | Medium | 4.6 | 2026-09-08 | Out-of-bounds read in Windows CD-ROM Driver allows an unauthorized attacker to disclose information with a physical attack. |
CVE-2026-78506 | Medium | 5.5 | 2026-09-08 | Improper null termination in Microsoft Office Word allows an unauthorized attacker to disclose information locally. |
CVE-2026-78503 | Medium | 6.5 | 2026-09-08 | Out-of-bounds read in Microsoft Office Word allows an unauthorized attacker to disclose information over a network. |
CVE-2026-78502 | Medium | 6.5 | 2026-09-08 | Out-of-bounds read in Microsoft Office Word allows an unauthorized attacker to disclose information over a network. |
CVE-2026-78455 | Medium | 4.3 | 2026-09-08 | Out-of-bounds read in Xbox allows an unauthorized attacker to disclose information with a physical attack. |
CVE-2026-78454 | Medium | 5.5 | 2026-09-08 | Out-of-bounds read in Windows CD-ROM Driver allows an authorized attacker to disclose information locally. |
CVE-2026-78453 | Medium | 6.5 | 2026-09-08 | Integer underflow (wrap or wraparound) in Microsoft Windows SCSI Class System File allows an unauthorized attacker to disclose information over a network. |
CVE-2026-78452 | Medium | 4.6 | 2026-09-08 | Out-of-bounds read in Microsoft Windows SCSI Class System File allows an unauthorized attacker to disclose information with a physical attack. |
CVE-2026-78451 | Medium | 6.8 | 2026-09-08 | Untrusted pointer dereference in Microsoft Windows SCSI Class System File allows an unauthorized attacker to elevate privileges with a physical attack. |
CVE-2026-78446 | Medium | 5.3 | 2026-09-08 | Use after free in Windows Distributed File System (DFS) allows an authorized attacker to deny service over a network. |
CVE-2026-78441 | Medium | 6.5 | 2026-09-08 | Out-of-bounds read in Windows OLE DB allows an unauthorized attacker to disclose information over a network. |
CVE-2026-77911 | Medium | 6.5 | 2026-09-08 | Out-of-bounds read in Microsoft Office Word allows an unauthorized attacker to disclose information over a network. |
CVE-2026-77896 | Medium | 6.5 | 2026-09-08 | Integer overflow or wraparound in Remote Desktop Client allows an unauthorized attacker to deny service over a network. |
CVE-2026-77892 | Medium | 6.8 | 2026-09-08 | No cwe for this issue in Windows Boot Manager allows an unauthorized attacker to elevate privileges with a physical attack. |
CVE-2026-77891 | Medium | 6.4 | 2026-09-08 | Out-of-bounds read in Windows DHCP Server allows an authorized attacker to execute code locally. |
CVE-2026-77887 | Medium | 6.4 | 2026-09-08 | Out-of-bounds read in Windows DHCP Server allows an authorized attacker to execute code locally. |
CVE-2026-77492 | Medium | 5.5 | 2026-09-08 | Out-of-bounds read in Storage Port Driver allows an authorized attacker to disclose information locally. |
CVE-2026-77491 | Medium | 5.5 | 2026-09-08 | Out-of-bounds read in Windows GDI allows an unauthorized attacker to disclose information locally. |
CVE-2026-77488 | Medium | 5.5 | 2026-09-08 | Integer underflow (wrap or wraparound) in SQL Server allows an authorized attacker to disclose information locally. |
CVE-2026-73029 | Medium | 6.5 | 2026-09-08 | Buffer over-read in SQL Server allows an authorized attacker to disclose information over a network. |
CVE-2026-73019 | Medium | 4.3 | 2026-09-08 | Improper resolution of path equivalence in Windows URL Moniker allows an unauthorized attacker to bypass a security feature over a network. |
CVE-2026-73008 | Medium | 5.5 | 2026-09-08 | Exposure of private personal information to an unauthorized actor in Windows Biometric Service allows an authorized attacker to disclose information locally. |
CVE-2026-73004 | Medium | 5.5 | 2026-09-08 | Missing authentication for critical function in Windows Autopilot allows an authorized attacker to perform tampering locally. |
CVE-2026-72999 | Medium | 6.8 | 2026-09-08 | Out-of-bounds read in Windows USB Hub Driver allows an unauthorized attacker to elevate privileges with a physical attack. |
CVE-2026-72985 | Medium | 6.8 | 2026-09-08 | Heap-based buffer overflow in Windows Volume Shadow Copy allows an unauthorized attacker to elevate privileges with a physical attack. |
CVE-2026-72980 | Medium | 4.4 | 2026-09-08 | Uncontrolled search path element in Windows Hello allows an authorized attacker to bypass a security feature locally. |
CVE-2026-72978 | Medium | 5.9 | 2026-09-08 | Allocation of resources without limits or throttling in Active Directory Federation Services (AD FS) allows an unauthorized attacker to deny service over a net… |
CVE-2026-72977 | Medium | 6.5 | 2026-09-08 | Out-of-bounds read in Microsoft Office PowerPoint allows an unauthorized attacker to disclose information over a network. |
CVE-2026-72976 | Medium | 5.0 | 2026-09-08 | Out-of-bounds read in Microsoft Office Word allows an authorized attacker to disclose information locally. |
CVE-2026-72975 | Medium | 6.5 | 2026-09-08 | Out-of-bounds read in Microsoft Office PowerPoint allows an unauthorized attacker to disclose information over a network. |
CVE-2026-72974 | Medium | 6.5 | 2026-09-08 | Buffer over-read in Microsoft Office Excel allows an unauthorized attacker to disclose information over a network. |
CVE-2026-72966 | Medium | 5.5 | 2026-09-08 | Missing authorization in Windows Remote Access Connection Manager allows an authorized attacker to perform tampering locally. |
CVE-2026-72964 | Medium | 5.5 | 2026-09-08 | Missing authentication for critical function in Windows Internet Connection Sharing (ICS) allows an authorized attacker to perform tampering locally. |
CVE-2026-72956 | Medium | 6.5 | 2026-09-08 | Untrusted pointer dereference in Microsoft Office PowerPoint allows an unauthorized attacker to disclose information over a network. |
CVE-2026-72948 | Medium | 6.7 | 2026-09-08 | Relative path traversal in Windows DNS allows an authorized attacker to elevate privileges locally. |
CVE-2026-72947 | Medium | 6.4 | 2026-09-08 | Integer underflow (wrap or wraparound) in Windows File History Service allows an authorized attacker to elevate privileges locally. |
CVE-2026-72945 | Medium | 5.5 | 2026-09-08 | Use of uninitialized resource in Windows Task Scheduler allows an authorized attacker to disclose information locally. |
CVE-2026-72942 | Medium | 6.5 | 2026-09-08 | Out-of-bounds read in Windows Spaceport.sys allows an unauthorized attacker to disclose information over a network. |
CVE-2026-72939 | Medium | 6.5 | 2026-09-08 | Null pointer dereference in Windows Routing and Remote Access Service (RRAS) allows an authorized attacker to deny service over a network. |
CVE-2026-72938 | Medium | 6.5 | 2026-09-08 | Access of resource using incompatible type ('type confusion') in Microsoft Office PowerPoint allows an unauthorized attacker to disclose information over a net… |
CVE-2026-72937 | Medium | 5.5 | 2026-09-08 | Out-of-bounds read in Storage Port Driver allows an authorized attacker to disclose information locally. |
CVE-2026-72935 | Medium | 6.7 | 2026-09-08 | Out-of-bounds read in Windows NTFS allows an authorized attacker to elevate privileges locally. |
CVE-2026-72931 | Medium | 4.7 | 2026-09-08 | Missing release of resource after effective lifetime in Windows Secure Socket Tunneling Protocol (SSTP) allows an authorized attacker to deny service locally. |
CVE-2026-72927 | Medium | 6.7 | 2026-09-08 | Heap-based buffer overflow in Winsock allows an authorized attacker to elevate privileges locally. |
CVE-2026-71350 | Medium | 6.8 | 2026-09-08 | Heap-based buffer overflow in Windows Spaceport.sys allows an unauthorized attacker to execute code with a physical attack. |
CVE-2026-71349 | Medium | 6.8 | 2026-09-08 | Heap-based buffer overflow in Windows Spaceport.sys allows an unauthorized attacker to execute code with a physical attack. |
CVE-2026-71348 | Medium | 6.8 | 2026-09-08 | Heap-based buffer overflow in Windows Spaceport.sys allows an unauthorized attacker to execute code with a physical attack. |
CVE-2026-71341 | Medium | 5.5 | 2026-09-08 | Out-of-bounds read in Windows Partition Management Driver allows an authorized attacker to disclose information locally. |
CVE-2026-71339 | Medium | 6.7 | 2026-09-08 | Heap-based buffer overflow in Windows Installer allows an authorized attacker to elevate privileges locally. |
CVE-2026-71338 | Medium | 6.4 | 2026-09-08 | Double free in Windows Failover Cluster allows an authorized attacker to elevate privileges locally. |
CVE-2026-71329 | Medium | 6.8 | 2026-09-08 | Heap-based buffer overflow in Windows NTFS allows an unauthorized attacker to execute code with a physical attack. |
CVE-2026-70582 | Medium | 6.4 | 2026-09-08 | Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Management Instrumentation allows an authorized attacker… |
CVE-2026-70575 | Medium | 5.3 | 2026-09-08 | Null pointer dereference in Windows Schannel allows an authorized attacker to deny service over a network. |
CVE-2026-70290 | Medium | 5.5 | 2026-09-08 | Use of uninitialized resource in Windows Win32 Kernel Subsystem allows an authorized attacker to disclose information locally. |