CVE-2026-83835
Buffer over-read in Windows Common Log File System Driver allows an authorized attacker to disclose information locally.
CVSS
5.5
Média
EPSS
0.9%
p60
KEV
—
Exploit Today
18
0-100
Publicado: 13 de out. de 2026 · Última mod.: 27 de out. de 2026 · CWE-126 · CWE-497
0.5%EPSS · 30 dias0.9%
2026-10-142026-11-06
Buffer over-read in Windows Common Log File System Driver allows an authorized attacker to disclose information locally.
CVECVSSEPSSKEVRExploitTítuloMod.
CVE-2026-1080186.3 MÉD5.8%
——2The BigFix MCM admin portal is directly accessible from the internet without VPN or network restriction. A client-side configuration file discloses non-sensitive environment details. Exposing the configuration file publicly increases the attack surface and the risk of unauthorized access attempts.21hCVE-2026-110390—35.3%
——11Missing authentication in the FlexNet Beacon component of Flexera One and FlexNet Manager Suite allows unauthenticated remote attackers to obtain Beacon policy and targeting information when anonymous web server access is enabled (the default).1dCVE-2026-93524—7.3%
——2A buffer overread in CheckKeySyms() in X.Org X Server before 21.1.25 and XWayland before 24.1.14 could be used by authenticated X clients to leak small amounts of information from X server memory or potentially crash the X server.11hCVE-2026-571856.5 MÉD41.4%
——12Asterisk is an open source private branch exchange and telephony toolkit. Prior to Asterisk 20.20.1, 21.12.3, 22.10.1, 23.4.1 and Certified Asterisk 20.7-cert11, 22.8-cert3, an authenticated attacker may crash Asterisk through a buffer over-read in the `PJSIP MWI body parser` by sending a carefully crafted `SIP NOTIFY` request. The attacker must pass SIP authentication using either a username/password or `source IP address matching`. This issue is fixed in Asterisk 20.20.1, 21.12.3, 22.10.1, 23.4.1 and Certified Asterisk 20.7-cert11, 22.8-cert3.7dCVE-2026-109823—30.8%
——9An attacker can read the name of filesystem paths of your application present via Tidewave configuration via /tidewave/connect or via the rendered toolbar.
Neither response checks the Host header. A web page that rebinds its own domain to the loopback address can therefore read the tag with a same-origin request, which carries no Origin header. The paths usually reveal the local username and the project layout.
This issue affects tidewave: from 0.8.0 before 0.9.2.2dCVE-2026-556066.5 MÉD40.5%
——12odhcpd is the DHCPv6, DHCPv4, and router-advertisement server used by OpenWrt. In versions 25.12 and prior, odhcpd's DHCPv6 self-loop detection at dhcpv6.c:720 uses a network-byte-order DUID length value directly as the memcmp() size parameter. On little-endian hosts, this causes memcmp() to read far beyond the stack buffer — a single unauthenticated DHCPv6 packet triggers a 2560-byte overread from a 128-byte buffer. At time of publication, there are no publicly available patches.9d