CVE-2026-70199

MediumCVSS 5.5/10Last modified Oct 22, 2026

Description

Exposure of sensitive system information to an unauthorized control sphere in Windows Kernel allows an authorized attacker to disclose information locally.

Metrics

CVSS 3.1 5.5/10CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N

Weakness enumeration

CWE-497

Affected software

No affected versions have been published.

Timeline

Published: Oct 13, 2026
Last modified: Oct 22, 2026
NVD status: Analyzed

Related CVEs from 2026

CVE-2026-70203.7A security flaw has been discovered in Ollama up to 0.20.2. This affects the function digestToPath of the file x/imagegen/transfer/transfer.CVE-2026-702009.8Improper limitation of a pathname to a restricted directory ('path traversal') in Azure Logic Apps allows an unauthorized attacker to elevat CVE-2026-702015.5Out-of-bounds read in Windows DHCP Server allows an authorized attacker to deny service locally.CVE-2026-702027.5Server-side request forgery (ssrf) in Microsoft Office SharePoint allows an authorized attacker to elevate privileges over a network.CVE-2026-702038.8Heap-based buffer overflow in Windows Media Player allows an unauthorized attacker to execute code over a network.CVE-2026-702057.0Access of resource using incompatible type ('type confusion') in Windows Ancillary Function Driver for WinSock allows an authorized attacker CVE-2026-702066.5Out-of-bounds read in Microsoft Office Word allows an unauthorized attacker to disclose information over a network.CVE-2026-702077.5Heap-based buffer overflow in Network Policy Server (NPS) allows an authorized attacker to execute code over a network.CVE-2026-702085.5Out-of-bounds read in Windows HTTP.sys allows an authorized attacker to disclose information locally.CVE-2026-702097.0Use after free in Windows Win32 Kernel Subsystem allows an authorized attacker to elevate privileges locally.CVE-2026-70213.5A weakness has been identified in SmythOS sre up to 0.0.15. This impacts an unknown function of the file packages/sdk/src/LLM/utils.ts of th CVE-2026-702108.8Heap-based buffer overflow in Windows OLE DB allows an unauthorized attacker to elevate privileges over a network.