CVE-2026-70145
MediumCVSS 5.5Exploitation Probability (EPSS)
Low risk32th percentile - higher than 32% of all known CVEs
Summary
Out-of-bounds read in Microsoft Windows Search Component allows an authorized attacker to disclose information locally.
Risk Assessment
An authorized attacker could access out-of-bounds data, compromising information confidentiality.
Recommendation
Apply Windows security updates that patch this vulnerability.
Other vulnerabilities in Microsoft Windows Search Component
See all- CVE-2026-69608High
Integer overflow or wraparound in Microsoft Windows Search Component allows an authorized attacker to elevate privileges locally.
- CVE-2026-69554Medium
Missing authentication for critical function in Microsoft Windows Search Component allows an authorized attacker to perform tampering locally.
- CVE-2026-69322High
Double free in Microsoft Windows Search Component allows an authorized attacker to elevate privileges over a network.
- CVE-2026-68896High
Absolute path traversal in Microsoft Windows Search Component allows an authorized attacker to elevate privileges locally.
- CVE-2026-59135Medium
Weak authentication in Microsoft Windows Search Component allows an authorized attacker to disclose information locally.
- CVE-2026-50679High
A heap-based buffer overflow vulnerability in the Microsoft Windows Search component allows an authorized attacker to elevate privileges locally.
- CVE-2026-50373High
Improper access control in Microsoft Windows Search Component allows an authorized attacker to elevate privileges locally.
Original NVD description (English source)
Out-of-bounds read in Microsoft Windows Search Component allows an authorized attacker to disclose information locally.
Vulnerability data from NVD (NIST) · CISA KEV · EPSS