CVE-2026-105552
An information disclosure vulnerability exists when the Windows kernel improperly initializes objects in memory. To exploit this vulnerabili
CVSS
5.5
Medium
EPSS
—
KEV
—
Exploit Today
0
0-100
Published: Nov 10, 2026 · Last modified: Nov 10, 2026 · CWE-125
Not enough EPSS history yet.
An information disclosure vulnerability exists when the Windows kernel improperly initializes objects in memory. To exploit this vulnerability, an authenticated attacker could run a specially crafted application. An attacker who successfully exploited this vulnerability could obtain information to further compromise the user’s system. The update addresses the vulnerability by correcting how the Windows kernel initializes objects in memory.
CVECVSSEPSSKEVRExploitTitleMod.
CVE-2026-500784.4 MED—
——0Out-Of-Bounds Read in the MSI-X table in the QVM could allow an attacker in the guest to cause an information disclosure or a crash of the QVM.3hCVE-2026-1212928.2 HIG—
——0A malformed Error Report can cause EOS to read beyond packet boundaries, potentially terminating the RPKI agent or exposing unintended memory contents through logging.3hCVE-2026-970064.9 MED—
——0Out-of-bounds read in Windows DNS allows an authorized attacker to disclose information over a network.4hCVE-2026-970027.5 HIG—
——0Out-of-bounds read in Windows VMSwitch allows an authorized attacker to elevate privileges locally.4hCVE-2026-969895.5 MED—
——0Out-of-bounds read in Secondary Logon allows an authorized attacker to disclose information locally.4hCVE-2026-969884.9 MED—
——0Out-of-bounds read in Windows DNS allows an authorized attacker to disclose information over a network.4h