CVE-2026-70290
Use of uninitialized resource in Windows Win32 Kernel Subsystem allows an authorized attacker to disclose information locally.
CVSS
5.5
Medio
EPSS
—
KEV
—
Exploit Today
—
0-100
Publicado: 8 sept 2026 · Última mod.: 8 sept 2026 · CWE-908
Sin historial EPSS suficiente todavía.
Use of uninitialized resource in Windows Win32 Kernel Subsystem allows an authorized attacker to disclose information locally.
CVECVSSEPSSKEVRExplotTítuloVis.
CVE-2026-858807.8 ALT—
———Heap-based buffer overflow in Windows ALPC allows an authorized attacker to elevate privileges locally.12hCVE-2026-819585.5 MED—
———Use of uninitialized resource in Microsoft Office Excel allows an unauthorized attacker to disclose information locally.11hCVE-2026-813915.5 MED—
———Use of uninitialized resource in Microsoft Office Excel allows an unauthorized attacker to disclose information locally.11hCVE-2026-800916.5 MED—
———Use of uninitialized resource in Microsoft Office allows an unauthorized attacker to disclose information over a network.11hCVE-2026-785198.8 ALT—
———Use of uninitialized resource in Microsoft Office Outlook allows an unauthorized attacker to execute code over a network.12hCVE-2026-729897.5 ALT—
———Use of uninitialized resource in Windows Failover Cluster allows an unauthorized attacker to disclose information over a network.11h