CWE-170

CWE-170 · 4 records · 1 with a public proof-of-concept

Records the NVD classes under CWE-170, highest CVSS first.

  1. HIGH 7.8CVE-2026-837812026-10-13

    Improper null termination in Windows Program Compatibility Assistant Service allows an authorized attacker to elevate privileges locally.

    AI risk analysis on Exploit-DB.ai →

  2. MEDIUM 5.5CVE-2026-968602026-10-13

    Out-of-bounds read in Windows USB Print Driver allows an authorized attacker to disclose information locally.

    AI risk analysis on Exploit-DB.ai →

  3. MEDIUM 5.5CVE-2026-968502026-10-13

    Use of uninitialized resource in Windows Modern Device Management (MDM) allows an authorized attacker to disclose information locally.

    AI risk analysis on Exploit-DB.ai →

  4. LOW 3.3CVE-2026-81882public PoC2026-09-22

    radare2 is a UNIX-like reverse engineering framework and command-line toolset. Prior to 6.2.0, radare2's binary property-list Unicode parser was vulnerable because the binary-property-list Unicode parser underallocated an uninitialized UTF-8 destination and di…

    radare2

    AI risk analysis on Exploit-DB.ai →