Medium-severity CVEs (page 39)
Page 39 of 100 — medium-severity CVEs, newest first, with CVSS scores and publication dates.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2026-70145 | Medium | 5.5 | 2026-09-08 | Out-of-bounds read in Microsoft Windows Search Component allows an authorized attacker to disclose information locally. |
CVE-2026-70124 | Medium | 5.9 | 2026-09-08 | Out-of-bounds read in Windows DHCP Server allows an unauthorized attacker to disclose information over a network. |
CVE-2026-70091 | Medium | 5.9 | 2026-09-08 | Concurrent execution using shared resource with improper synchronization ('race condition') in Windows DNS allows an unauthorized attacker to deny service over… |
CVE-2026-70019 | Medium | 6.5 | 2026-09-08 | Windows hard link in Windows Compressed Folder allows an unauthorized attacker to disclose information over a network. |
CVE-2026-69930 | Medium | 5.9 | 2026-09-08 | Out-of-bounds read in Windows DHCP Server allows an unauthorized attacker to disclose information over a network. |
CVE-2026-69929 | Medium | 5.9 | 2026-09-08 | Out-of-bounds read in Windows DHCP Server allows an unauthorized attacker to disclose information over a network. |
CVE-2026-69895 | Medium | 4.7 | 2026-09-08 | Out-of-bounds read in Windows Spaceport.sys allows an authorized attacker to disclose information locally. |
CVE-2026-69878 | Medium | 6.4 | 2026-09-08 | Heap-based buffer overflow in Windows DHCP Server allows an authorized attacker to execute code locally. |
CVE-2026-69862 | Medium | 5.5 | 2026-09-08 | Out-of-bounds read in Windows Wireless Wide Area Network Service allows an authorized attacker to disclose information locally. |
CVE-2026-69853 | Medium | 4.7 | 2026-09-08 | Use of uninitialized resource in Windows Win32K allows an authorized attacker to disclose information locally. |
CVE-2026-69839 | Medium | 6.5 | 2026-09-08 | Uncaught exception in Windows iSCSI Target Service allows an authorized attacker to deny service over a network. |
CVE-2026-69832 | Medium | 5.6 | 2026-09-08 | Exposure of sensitive system information to an unauthorized control sphere in Windows Win32K allows an authorized attacker to disclose information locally. |
CVE-2026-69808 | Medium | 5.5 | 2026-09-08 | Out-of-bounds read in Windows Win32K allows an authorized attacker to disclose information locally. |
CVE-2026-69803 | Medium | 5.9 | 2026-09-08 | Out-of-bounds read in Windows DHCP Server allows an unauthorized attacker to disclose information over a network. |
CVE-2026-69794 | Medium | 5.5 | 2026-09-08 | Buffer over-read in Windows Encrypting File System (EFS) allows an authorized attacker to disclose information locally. |
CVE-2026-69792 | Medium | 4.7 | 2026-09-08 | Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Win32K allows an authorized attacker to bypass a securit… |
CVE-2026-69781 | Medium | 6.5 | 2026-09-08 | Missing release of memory after effective lifetime in Windows DHCP Client allows an unauthorized attacker to deny service over an adjacent network. |
CVE-2026-69771 | Medium | 4.7 | 2026-09-08 | Improper link resolution before file access ('link following') in Windows Container Manager Service allows an authorized attacker to bypass a security feature… |
CVE-2026-69770 | Medium | 5.5 | 2026-09-08 | Use of uninitialized resource in Windows Spaceport.sys allows an authorized attacker to disclose information locally. |
CVE-2026-69741 | Medium | 5.5 | 2026-09-08 | Out-of-bounds read in Windows Spaceport.sys allows an authorized attacker to disclose information locally. |
CVE-2026-69739 | Medium | 6.5 | 2026-09-08 | Out-of-bounds read in Microsoft Office allows an unauthorized attacker to disclose information over a network. |
CVE-2026-69734 | Medium | 6.5 | 2026-09-08 | Integer overflow or wraparound in Microsoft Office Word allows an unauthorized attacker to disclose information over a network. |
CVE-2026-69723 | Medium | 5.7 | 2026-09-08 | Exposure of sensitive system information to an unauthorized control sphere in Windows Kernel allows an authorized attacker to disclose information over a netwo… |
CVE-2026-69719 | Medium | 6.5 | 2026-09-08 | Buffer over-read in Microsoft Office Word allows an unauthorized attacker to disclose information over a network. |
CVE-2026-69713 | Medium | 4.4 | 2026-09-08 | Dependency on vulnerable third-party component in Windows Secure Boot allows an authorized attacker to bypass a security feature locally. |
CVE-2026-69690 | Medium | 4.6 | 2026-09-08 | Improper neutralization of input during web page generation ('cross-site scripting') in Microsoft Office SharePoint allows an authorized attacker to perform sp… |
CVE-2026-69684 | Medium | 5.5 | 2026-09-08 | Generation of error message containing sensitive information in Windows Error Reporting allows an authorized attacker to disclose information locally. |
CVE-2026-69683 | Medium | 6.5 | 2026-09-08 | Server-side request forgery (ssrf) in Microsoft Office SharePoint allows an authorized attacker to disclose information over a network. |
CVE-2026-69679 | Medium | 5.7 | 2026-09-08 | Out-of-bounds read in Windows DHCP Server allows an authorized attacker to deny service over an adjacent network. |
CVE-2026-69674 | Medium | 5.5 | 2026-09-08 | Missing authentication for critical function in Windows Modern Device Management (MDM) allows an authorized attacker to bypass a security feature locally. |
CVE-2026-69672 | Medium | 5.5 | 2026-09-08 | Use of uninitialized resource in Windows DNS allows an authorized attacker to disclose information locally. |
CVE-2026-69637 | Medium | 5.7 | 2026-09-08 | Out-of-bounds read in Windows DHCP Server allows an authorized attacker to deny service over an adjacent network. |
CVE-2026-69636 | Medium | 6.5 | 2026-09-08 | Improper neutralization of special elements used in an sql command ('sql injection') in Microsoft Office SharePoint allows an authorized attacker to disclose i… |
CVE-2026-69627 | Medium | 5.5 | 2026-09-08 | Out-of-bounds read in Windows Remote Desktop Licensing Service allows an authorized attacker to disclose information locally. |
CVE-2026-69626 | Medium | 6.5 | 2026-09-08 | Buffer over-read in Microsoft Office allows an unauthorized attacker to disclose information over a network. |
CVE-2026-69624 | Medium | 6.5 | 2026-09-08 | Incomplete list of disallowed inputs in Active Directory Certificate Services (AD CS) allows an authorized attacker to perform tampering over a network. |
CVE-2026-69618 | Medium | 5.5 | 2026-09-08 | Out-of-bounds read in Windows SMB Client allows an authorized attacker to disclose information locally. |
CVE-2026-69616 | Medium | 5.5 | 2026-09-08 | Out-of-bounds read in Windows Remote Desktop Services allows an authorized attacker to disclose information locally. |
CVE-2026-69609 | Medium | 5.5 | 2026-09-08 | Out-of-bounds read in Windows Win32K allows an authorized attacker to disclose information locally. |
CVE-2026-69591 | Medium | 5.7 | 2026-09-08 | Out-of-bounds read in Windows NTFS allows an authorized attacker to disclose information over a network. |
CVE-2026-69572 | Medium | 5.7 | 2026-09-08 | Out-of-bounds read in Windows SMB Client allows an authorized attacker to disclose information over a network. |
CVE-2026-69569 | Medium | 5.7 | 2026-09-08 | Untrusted pointer dereference in Windows Print Spooler Components allows an authorized attacker to deny service over a network. |
CVE-2026-69568 | Medium | 5.5 | 2026-09-08 | Out-of-bounds read in Windows Storage Spaces Controller allows an authorized attacker to disclose information locally. |
CVE-2026-69566 | Medium | 6.8 | 2026-09-08 | Heap-based buffer overflow in Windows NTFS allows an unauthorized attacker to execute code with a physical attack. |
CVE-2026-69562 | Medium | 6.5 | 2026-09-08 | Out-of-bounds read in SQL Server allows an unauthorized attacker to disclose information over a network. |
CVE-2026-69559 | Medium | 5.8 | 2026-09-08 | Origin validation error in Microsoft Teams for Android allows an authorized attacker to disclose information over a network. |
CVE-2026-69554 | Medium | 5.5 | 2026-09-08 | Missing authentication for critical function in Microsoft Windows Search Component allows an authorized attacker to perform tampering locally. |
CVE-2026-69552 | Medium | 5.7 | 2026-09-08 | Generation of error message containing sensitive information in Windows Print Spooler Components allows an authorized attacker to disclose information over a n… |
CVE-2026-69548 | Medium | 4.6 | 2026-09-08 | Heap-based buffer overflow in Windows RNDIS allows an unauthorized attacker to disclose information with a physical attack. |
CVE-2026-69531 | Medium | 5.5 | 2026-09-08 | Unintended proxy or intermediary ('confused deputy') in Microsoft Windows Speech allows an authorized attacker to perform tampering locally. |
CVE-2026-69527 | Medium | 5.5 | 2026-09-08 | Out-of-bounds read in Windows USB Mass Storage Class Driver allows an authorized attacker to disclose information locally. |
CVE-2026-69507 | Medium | 5.7 | 2026-09-08 | Insertion of sensitive information into externally-accessible file or directory in Microsoft Windows Search Component allows an authorized attacker to disclose… |
CVE-2026-69504 | Medium | 5.5 | 2026-09-08 | Out-of-bounds read in Windows NTFS allows an authorized attacker to disclose information locally. |
CVE-2026-69497 | Medium | 6.5 | 2026-09-08 | Missing release of memory after effective lifetime in Windows DHCP Server allows an authorized attacker to deny service over a network. |
CVE-2026-69490 | Medium | 6.8 | 2026-09-08 | Out-of-bounds read in Windows USB Mass Storage Class Driver allows an unauthorized attacker to elevate privileges with a physical attack. |
CVE-2026-69483 | Medium | 4.7 | 2026-09-08 | Out-of-bounds read in Windows Image Acquisition allows an authorized attacker to disclose information locally. |
CVE-2026-69474 | Medium | 4.8 | 2026-09-08 | Use after free in Windows Overlay Filter allows an authorized attacker to disclose information over a network. |
CVE-2026-69469 | Medium | 6.6 | 2026-09-08 | Integer overflow or wraparound in Windows USB Audio Class driver (usbaudio.sys) allows an unauthorized attacker to elevate privileges with a physical attack. |
CVE-2026-69457 | Medium | 5.5 | 2026-09-08 | Out-of-bounds read in Windows USB Driver allows an authorized attacker to disclose information locally. |
CVE-2026-69453 | Medium | 5.5 | 2026-09-08 | Missing authorization in Microsoft Windows Search Component allows an authorized attacker to perform tampering locally. |
CVE-2026-69449 | Medium | 6.7 | 2026-09-08 | Heap-based buffer overflow in Windows BitLocker allows an authorized attacker to execute code locally. |
CVE-2026-69425 | Medium | 4.7 | 2026-09-08 | Improper link resolution before file access ('link following') in Windows NTFS allows an authorized attacker to perform tampering locally. |
CVE-2026-69416 | Medium | 5.7 | 2026-09-08 | Buffer over-read in Windows DHCP Server allows an authorized attacker to deny service over an adjacent network. |
CVE-2026-69415 | Medium | 6.8 | 2026-09-08 | Missing authentication for critical function in Windows DHCP Server allows an authorized attacker to elevate privileges over a network. |
CVE-2026-69409 | Medium | 6.5 | 2026-09-08 | Execution with unnecessary privileges in Microsoft Office SharePoint allows an authorized attacker to disclose information over a network. |
CVE-2026-69406 | Medium | 5.5 | 2026-09-08 | Exposure of sensitive system information to an unauthorized control sphere in Windows Kernel allows an authorized attacker to disclose information locally. |
CVE-2026-69405 | Medium | 5.7 | 2026-09-08 | Missing release of memory after effective lifetime in Windows DHCP Server allows an authorized attacker to deny service over an adjacent network. |
CVE-2026-69403 | Medium | 5.5 | 2026-09-08 | Missing authorization in Windows SMB Server allows an authorized attacker to disclose information locally. |
CVE-2026-69395 | Medium | 6.5 | 2026-09-08 | Use of externally-controlled format string in Active Directory Certificate Services (AD CS) allows an authorized attacker to disclose information over a networ… |
CVE-2026-69393 | Medium | 5.7 | 2026-09-08 | Out-of-bounds read in Windows Spaceport.sys allows an authorized attacker to disclose information over a network. |
CVE-2026-69390 | Medium | 5.5 | 2026-09-08 | Out-of-bounds read in Windows Spaceport.sys allows an authorized attacker to disclose information locally. |
CVE-2026-69382 | Medium | 5.9 | 2026-09-08 | Use of a broken or risky cryptographic algorithm in Microsoft Exchange Server allows an unauthorized attacker to disclose information over a network. |
CVE-2026-69381 | Medium | 4.6 | 2026-09-08 | Out-of-bounds read in Windows Storage Port Driver allows an unauthorized attacker to disclose information with a physical attack. |
CVE-2026-69376 | Medium | 5.5 | 2026-09-08 | Out-of-bounds read in Microsoft Standard XPS allows an authorized attacker to disclose information locally. |
CVE-2026-69375 | Medium | 6.5 | 2026-09-08 | Authorization bypass through user-controlled key in Microsoft Exchange Server allows an authorized attacker to perform tampering over a network. |
CVE-2026-69374 | Medium | 6.5 | 2026-09-08 | Allocation of resources without limits or throttling in Windows SMB Server allows an authorized attacker to deny service over a network. |
CVE-2026-69373 | Medium | 6.7 | 2026-09-08 | Integer overflow or wraparound in Windows Overlay Filter allows an authorized attacker to elevate privileges locally. |
CVE-2026-69372 | Medium | 5.7 | 2026-09-08 | Out-of-bounds read in Windows Network File System allows an authorized attacker to deny service over a network. |
CVE-2026-69369 | Medium | 5.5 | 2026-09-08 | Out-of-bounds read in Windows DNS allows an authorized attacker to disclose information locally. |
CVE-2026-69367 | Medium | 5.5 | 2026-09-08 | Out-of-bounds read in Microsoft Standard XPS allows an authorized attacker to disclose information locally. |
CVE-2026-69361 | Medium | 6.5 | 2026-09-08 | Server-side request forgery (ssrf) in Microsoft Exchange Server allows an authorized attacker to perform spoofing over a network. |
CVE-2026-69353 | Medium | 5.5 | 2026-09-08 | Out-of-bounds read in Windows Text Shaping allows an authorized attacker to disclose information locally. |
CVE-2026-69351 | Medium | 5.5 | 2026-09-08 | Exposure of private personal information to an unauthorized actor in Windows Universal Plug and Play (UPnP) Device Host allows an authorized attacker to disclo… |
CVE-2026-69350 | Medium | 6.7 | 2026-09-08 | Heap-based buffer overflow in Windows Overlay Filter allows an authorized attacker to elevate privileges locally. |
CVE-2026-69349 | Medium | 5.7 | 2026-09-08 | Use of uninitialized resource in Windows Management Instrumentation allows an authorized attacker to disclose information over a network. |
CVE-2026-69345 | Medium | 5.5 | 2026-09-08 | Out-of-bounds read in Microsoft Standard XPS allows an authorized attacker to disclose information locally. |
CVE-2026-69344 | Medium | 5.5 | 2026-09-08 | Out-of-bounds read in Windows Print Spooler Components allows an authorized attacker to disclose information locally. |
CVE-2026-69343 | Medium | 5.5 | 2026-09-08 | Out-of-bounds read in Windows Overlay Filter allows an authorized attacker to disclose information locally. |
CVE-2026-69339 | Medium | 5.5 | 2026-09-08 | Exposure of sensitive system information to an unauthorized control sphere in Windows MIDI Service Module allows an authorized attacker to disclose information… |
CVE-2026-69321 | Medium | 5.5 | 2026-09-08 | Missing authentication for critical function in Windows Power Dependency Coordinator allows an authorized attacker to perform tampering locally. |
CVE-2026-69318 | Medium | 5.5 | 2026-09-08 | Out-of-bounds read in Windows Imaging Component allows an authorized attacker to disclose information locally. |
CVE-2026-69317 | Medium | 5.7 | 2026-09-08 | Out-of-bounds read in Remote Desktop Client allows an authorized attacker to disclose information over a network. |
CVE-2026-69316 | Medium | 4.7 | 2026-09-08 | Buffer over-read in Windows Overlay Filter allows an authorized attacker to disclose information locally. |
CVE-2026-69315 | Medium | 5.5 | 2026-09-08 | Exposure of sensitive system information to an unauthorized control sphere in Windows License Manager allows an authorized attacker to disclose information loc… |
CVE-2026-69308 | Medium | 5.5 | 2026-09-08 | Out-of-bounds read in Microsoft Standard XPS allows an authorized attacker to disclose information locally. |
CVE-2026-69304 | Medium | 5.9 | 2026-09-08 | Improper handling of highly compressed data (data amplification) in ASP.NET Core allows an unauthorized attacker to deny service over a network. |
CVE-2026-69303 | Medium | 5.5 | 2026-09-08 | Out-of-bounds read in Push Message Routing Service allows an authorized attacker to disclose information locally. |
CVE-2026-69297 | Medium | 6.5 | 2026-09-08 | Storing passwords in a recoverable format in Windows DHCP Server allows an authorized attacker to disclose information over a network. |
CVE-2026-69294 | Medium | 5.5 | 2026-09-08 | Generation of error message containing sensitive information in Microsoft COM for Windows allows an authorized attacker to disclose information locally. |
CVE-2026-69288 | Medium | 5.5 | 2026-09-08 | Use of uninitialized resource in Windows GDI+ allows an authorized attacker to disclose information locally. |