CWE-125
CVEs classified under CWE-125, newest first.
2103 CVEsRSS
CVE-2026-88169Medium· 6.5Out-of-bounds read in Microsoft Office Word allows an unauthorized attacker to disclose information over a network.
Out-of-bounds read in Microsoft Office Word allows an unauthorized attacker to disclose information over a network.
CVE-2026-88159High· 8.8Use after free in Windows Background Intelligent Transfer Service (BITS) allows an unauthorized attacker to execute code over a network.
Use after free in Windows Background Intelligent Transfer Service (BITS) allows an unauthorized attacker to execute code over a network.
CVE-2026-88158Medium· 5.5Out-of-bounds read in Microsoft Digest Authentication allows an authorized attacker to disclose information locally.
Out-of-bounds read in Microsoft Digest Authentication allows an authorized attacker to disclose information locally.
CVE-2026-88154Medium· 6.5Out-of-bounds read in Microsoft Office Excel allows an unauthorized attacker to disclose information over a network.
Out-of-bounds read in Microsoft Office Excel allows an unauthorized attacker to disclose information over a network.
CVE-2026-88153Medium· 6.5Out-of-bounds read in Microsoft Office Excel allows an unauthorized attacker to disclose information over a network.
Out-of-bounds read in Microsoft Office Excel allows an unauthorized attacker to disclose information over a network.
CVE-2026-88151Medium· 6.5Out-of-bounds read in Microsoft Office Excel allows an unauthorized attacker to disclose information over a network.
Out-of-bounds read in Microsoft Office Excel allows an unauthorized attacker to disclose information over a network.
CVE-2026-88140Medium· 5.5Out-of-bounds read in Windows Key Storage Provider allows an authorized attacker to disclose information locally.
Out-of-bounds read in Windows Key Storage Provider allows an authorized attacker to disclose information locally.
CVE-2026-88130Medium· 6.5Out-of-bounds read in DNS Server allows an authorized attacker to deny service over a network.
Out-of-bounds read in DNS Server allows an authorized attacker to deny service over a network.
CVE-2026-88129Medium· 6.5Out-of-bounds read in DNS Server allows an authorized attacker to deny service over a network.
Out-of-bounds read in DNS Server allows an authorized attacker to deny service over a network.
CVE-2026-88125Medium· 6.5Out-of-bounds read in DNS Server allows an authorized attacker to deny service over a network.
Out-of-bounds read in DNS Server allows an authorized attacker to deny service over a network.
CVE-2026-88123Medium· 6.5Out-of-bounds read in DNS Server allows an authorized attacker to deny service over a network.
Out-of-bounds read in DNS Server allows an authorized attacker to deny service over a network.
CVE-2026-88122Medium· 6.5Out-of-bounds read in DNS Server allows an authorized attacker to deny service over a network.
Out-of-bounds read in DNS Server allows an authorized attacker to deny service over a network.
CVE-2026-88115High· 8.8Out-of-bounds read in Windows Server for NFS allows an unauthorized attacker to execute code over a network.
Out-of-bounds read in Windows Server for NFS allows an unauthorized attacker to execute code over a network.
CVE-2026-88070High· 7.8Out-of-bounds read in Windows BitLocker allows an authorized attacker to elevate privileges locally.
Out-of-bounds read in Windows BitLocker allows an authorized attacker to elevate privileges locally.
CVE-2026-87698Medium· 5.5Out-of-bounds read in Windows Remote Access Service Infrastructure allows an authorized attacker to disclose information locally.
Out-of-bounds read in Windows Remote Access Service Infrastructure allows an authorized attacker to disclose information locally.
CVE-2026-85858High· 7.8Out-of-bounds read in Windows Win32 Kernel Subsystem allows an authorized attacker to elevate privileges locally.
Out-of-bounds read in Windows Win32 Kernel Subsystem allows an authorized attacker to elevate privileges locally.
CVE-2026-85853High· 7.0Out-of-bounds read in Windows DWM Core Library allows an authorized attacker to elevate privileges locally.
Out-of-bounds read in Windows DWM Core Library allows an authorized attacker to elevate privileges locally.
CVE-2026-85852Medium· 5.5Out-of-bounds read in Windows Management Instrumentation allows an authorized attacker to disclose information locally.
Out-of-bounds read in Windows Management Instrumentation allows an authorized attacker to disclose information locally.
CVE-2026-85847Medium· 6.5Out-of-bounds read in Windows Print Spooler Components allows an unauthorized attacker to disclose information over a network.
Out-of-bounds read in Windows Print Spooler Components allows an unauthorized attacker to disclose information over a network.
CVE-2026-85837High· 7.8Out-of-bounds read in Windows Kernel allows an authorized attacker to elevate privileges locally.
Out-of-bounds read in Windows Kernel allows an authorized attacker to elevate privileges locally.
CVE-2026-85830Medium· 5.5Out-of-bounds read in Windows Installer allows an authorized attacker to disclose information locally.
Out-of-bounds read in Windows Installer allows an authorized attacker to disclose information locally.
CVE-2026-85821Medium· 6.5Out-of-bounds read in Windows Universal Disk Format File System Driver (UDFS) allows an authorized attacker to disclose information locally.
Out-of-bounds read in Windows Universal Disk Format File System Driver (UDFS) allows an authorized attacker to disclose information locally.
CVE-2026-85816Medium· 5.7Out-of-bounds read in Windows Wi-Fi Driver allows an authorized attacker to disclose information over an adjacent network.
Out-of-bounds read in Windows Wi-Fi Driver allows an authorized attacker to disclose information over an adjacent network.
CVE-2026-85815Medium· 5.5Out-of-bounds read in Windows Device Association Service allows an authorized attacker to disclose information locally.
Out-of-bounds read in Windows Device Association Service allows an authorized attacker to disclose information locally.
CVE-2026-85808High· 7.5Out-of-bounds read in Windows Routing and Remote Access Service (RRAS) allows an unauthorized attacker to deny service over a network.
Out-of-bounds read in Windows Routing and Remote Access Service (RRAS) allows an unauthorized attacker to deny service over a network.
CVE-2026-85797Medium· 6.5Out-of-bounds read in Windows GDI allows an unauthorized attacker to disclose information over a network.
Out-of-bounds read in Windows GDI allows an unauthorized attacker to disclose information over a network.
CVE-2026-85794Medium· 5.5Out-of-bounds read in Windows Routing and Remote Access Service (RRAS) allows an authorized attacker to disclose information locally.
Out-of-bounds read in Windows Routing and Remote Access Service (RRAS) allows an authorized attacker to disclose information locally.
CVE-2026-85374Medium· 5.5Out-of-bounds read in Windows Installer allows an authorized attacker to disclose information locally.
Out-of-bounds read in Windows Installer allows an authorized attacker to disclose information locally.
CVE-2026-85369High· 8.2Out-of-bounds read in Windows Hyper-V allows an authorized attacker to elevate privileges locally.
Out-of-bounds read in Windows Hyper-V allows an authorized attacker to elevate privileges locally.
CVE-2026-85356High· 7.8Out-of-bounds read in Windows Volume Manager Extension Driver allows an authorized attacker to elevate privileges locally.
Out-of-bounds read in Windows Volume Manager Extension Driver allows an authorized attacker to elevate privileges locally.