CVE-2026-78441

MediumCVSS 6.5/10Last modified Sep 23, 2026

Description

Out-of-bounds read in Windows OLE DB allows an unauthorized attacker to disclose information over a network.

Metrics

CVSS 3.1 6.5/10CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N

Weakness enumeration

CWE-125

Affected software

Source: the vendor's advisory (CNA). NVD analysis pending.

No affected versions have been published.

Timeline

Published
Sep 8, 2026
Last modified
Sep 23, 2026
NVD status
Undergoing Analysis

Related CVEs from 2026

CVE-2026-784428.8Heap-based buffer overflow in Windows OLE DB allows an unauthorized attacker to execute code over a network.CVE-2026-784448.1Untrusted pointer dereference in Windows Failover Cluster allows an unauthorized attacker to execute code over a network.CVE-2026-784459.8Use after free in Windows Services for NFS ONCRPC XDR Driver allows an unauthorized attacker to execute code over a network.CVE-2026-784467.5Use after free in Windows Distributed File System (DFS) allows an authorized attacker to execute code over a network.CVE-2026-784477.8Heap-based buffer overflow in Windows Biometric Service allows an authorized attacker to elevate privileges locally.CVE-2026-784487.8Heap-based buffer overflow in Windows Biometric Service allows an authorized attacker to elevate privileges locally.CVE-2026-784498.1Use after free in Reliable Multicast Transport Driver (RMCAST) allows an unauthorized attacker to execute code over a network.CVE-2026-78452.6A flaw has been found in chatchat-space Langchain-Chatchat up to 0.3.1.3. This issue affects the function PIL.Image.tobytes of the file libsCVE-2026-784508.1Use after free in Reliable Multicast Transport Driver (RMCAST) allows an unauthorized attacker to execute code over a network.CVE-2026-784516.8Untrusted pointer dereference in Microsoft Windows SCSI Class System File allows an unauthorized attacker to elevate privileges with a physiCVE-2026-784524.6Out-of-bounds read in Microsoft Windows SCSI Class System File allows an unauthorized attacker to disclose information with a physical attacCVE-2026-784536.5Integer underflow (wrap or wraparound) in Microsoft Windows SCSI Class System File allows an unauthorized attacker to disclose information o
CVE-2026-78441: Medium severity, CVSS 6.5 | Vulnix