CVE-2026-108410
Buffer over-read in Windows Management Instrumentation allows an authorized attacker to disclose information locally.
CVSS
5.5
Medium
EPSS
—
KEV
—
Exploit Today
0
0-100
Published: Nov 10, 2026 · Last modified: Nov 10, 2026 · CWE-126
Not enough EPSS history yet.
Buffer over-read in Windows Management Instrumentation allows an authorized attacker to disclose information locally.
CVECVSSEPSSKEVRExploitTitleMod.
CVE-2026-958845.3 MED—
——0Buffer over-read in Windows Active Directory Certificate Services allows an authorized attacker to disclose information over a network.4hCVE-2026-882205.5 MED—
——0Buffer over-read in Windows Performance Counters allows an authorized attacker to disclose information locally.4hCVE-2026-836847.5 HIG—
——0Buffer over-read in Windows iSCSI Target Service allows an unauthorized attacker to disclose information over a network.4hCVE-2026-1242336.5 MED—
——0Buffer over-read in Microsoft Office Word allows an unauthorized attacker to disclose information over a network.4hCVE-2026-1241836.5 MED—
——0Buffer over-read in Microsoft Office Excel allows an unauthorized attacker to disclose information over a network.4hCVE-2026-1199437.8 HIG—
——0Buffer over-read in Microsoft Windows Search Component allows an authorized attacker to elevate privileges locally.4h