CVE-2026-105552
An information disclosure vulnerability exists when the Windows kernel improperly initializes objects in memory. To exploit this vulnerabili
CVSS
5.5
Média
EPSS
—
KEV
—
Exploit Today
0
0-100
Publicado: 10 de nov. de 2026 · Última mod.: 10 de nov. de 2026 · CWE-125
Ainda não há histórico EPSS suficiente.
An information disclosure vulnerability exists when the Windows kernel improperly initializes objects in memory. To exploit this vulnerability, an authenticated attacker could run a specially crafted application. An attacker who successfully exploited this vulnerability could obtain information to further compromise the user’s system. The update addresses the vulnerability by correcting how the Windows kernel initializes objects in memory.
CVECVSSEPSSKEVRExploitTítuloMod.
CVE-2026-500784.4 MÉD—
——0Out-Of-Bounds Read in the MSI-X table in the QVM could allow an attacker in the guest to cause an information disclosure or a crash of the QVM.2hCVE-2026-1212928.2 ALT—
——0A malformed Error Report can cause EOS to read beyond packet boundaries, potentially terminating the RPKI agent or exposing unintended memory contents through logging.2hCVE-2026-970064.9 MÉD—
——0Out-of-bounds read in Windows DNS allows an authorized attacker to disclose information over a network.3hCVE-2026-970027.5 ALT—
——0Out-of-bounds read in Windows VMSwitch allows an authorized attacker to elevate privileges locally.3hCVE-2026-969895.5 MÉD—
——0Out-of-bounds read in Secondary Logon allows an authorized attacker to disclose information locally.3hCVE-2026-969884.9 MÉD—
——0Out-of-bounds read in Windows DNS allows an authorized attacker to disclose information over a network.3h