CWE-125
CVEs classified under CWE-125, newest first.
2110 CVEsRSS
CVE-2026-83703Medium· 6.5Out-of-bounds read in Windows Wi-Fi Driver allows an unauthorized attacker to deny service over an adjacent network.
Out-of-bounds read in Windows Wi-Fi Driver allows an unauthorized attacker to deny service over an adjacent network.
CVE-2026-83694High· 7.0Out-of-bounds read in Windows Volume Manager Extension Driver allows an authorized attacker to elevate privileges locally.
Out-of-bounds read in Windows Volume Manager Extension Driver allows an authorized attacker to elevate privileges locally.
CVE-2026-83686Medium· 5.5Out-of-bounds read in Microsoft Windows Search Component allows an authorized attacker to disclose information locally.
Out-of-bounds read in Microsoft Windows Search Component allows an authorized attacker to disclose information locally.
CVE-2026-83671Medium· 6.5Out-of-bounds read in Windows Hyper-V allows an authorized attacker to disclose information locally.
Out-of-bounds read in Windows Hyper-V allows an authorized attacker to disclose information locally.
CVE-2026-83670High· 7.5Out-of-bounds read in Function Discovery Service (fdwsd.dll) allows an unauthorized attacker to disclose information over a network.
Out-of-bounds read in Function Discovery Service (fdwsd.dll) allows an unauthorized attacker to disclose information over a network.
CVE-2026-83668Medium· 5.5Out-of-bounds read in Windows WLAN Service allows an authorized attacker to disclose information locally.
Out-of-bounds read in Windows WLAN Service allows an authorized attacker to disclose information locally.
CVE-2026-83667Medium· 6.5Out-of-bounds read in Active Directory Domain Services allows an authorized attacker to deny service over a network.
Out-of-bounds read in Active Directory Domain Services allows an authorized attacker to deny service over a network.
CVE-2026-83655High· 7.5Out-of-bounds read in Network Policy Server (NPS) allows an unauthorized attacker to deny service over a network.
Out-of-bounds read in Network Policy Server (NPS) allows an unauthorized attacker to deny service over a network.
CVE-2026-83651Medium· 6.5Out-of-bounds read in Windows GDI allows an unauthorized attacker to disclose information over a network.
Out-of-bounds read in Windows GDI allows an unauthorized attacker to disclose information over a network.
CVE-2026-83649Medium· 6.5Out-of-bounds read in Windows Local Security Authority Subsystem Service (LSASS) allows an authorized attacker to deny service over a network.
Out-of-bounds read in Windows Local Security Authority Subsystem Service (LSASS) allows an authorized attacker to deny service over a network.
CVE-2026-83647High· 7.5Out-of-bounds read in Active Directory Domain Services allows an unauthorized attacker to deny service over a network.
Out-of-bounds read in Active Directory Domain Services allows an unauthorized attacker to deny service over a network.
CVE-2026-83637High· 7.8Out-of-bounds read in Windows Kernel-Mode Drivers allows an authorized attacker to elevate privileges locally.
Out-of-bounds read in Windows Kernel-Mode Drivers allows an authorized attacker to elevate privileges locally.
CVE-2026-83635High· 7.5Out-of-bounds read in DNS Server allows an unauthorized attacker to deny service over a network.
Out-of-bounds read in DNS Server allows an unauthorized attacker to deny service over a network.
CVE-2026-83567High· 7.8Out-of-bounds read in Windows NTFS allows an authorized attacker to elevate privileges locally.
Out-of-bounds read in Windows NTFS allows an authorized attacker to elevate privileges locally.
CVE-2026-83521Medium· 6.5Out-of-bounds read in Windows IKE Extension allows an authorized attacker to disclose information over a network.
Out-of-bounds read in Windows IKE Extension allows an authorized attacker to disclose information over a network.
CVE-2026-83516High· 7.5Out-of-bounds read in Windows Local Security Authority Subsystem Service (LSASS) allows an unauthorized attacker to deny service over a network.
Out-of-bounds read in Windows Local Security Authority Subsystem Service (LSASS) allows an unauthorized attacker to deny service over a network.
CVE-2026-83508High· 7.8Out-of-bounds read in Windows NTFS allows an authorized attacker to elevate privileges locally.
Out-of-bounds read in Windows NTFS allows an authorized attacker to elevate privileges locally.
CVE-2026-70295Medium· 5.5Out-of-bounds read in Windows Win32 Kernel Subsystem allows an authorized attacker to disclose information locally.
Out-of-bounds read in Windows Win32 Kernel Subsystem allows an authorized attacker to disclose information locally.
CVE-2026-70294Medium· 5.5Out-of-bounds read in Windows Win32 Kernel Subsystem allows an authorized attacker to disclose information locally.
Out-of-bounds read in Windows Win32 Kernel Subsystem allows an authorized attacker to disclose information locally.
CVE-2026-70292Medium· 5.5Out-of-bounds read in Windows Win32 Kernel Subsystem allows an authorized attacker to disclose information locally.
Out-of-bounds read in Windows Win32 Kernel Subsystem allows an authorized attacker to disclose information locally.
CVE-2026-70281High· 7.5Out-of-bounds read in Microsoft Office Outlook allows an unauthorized attacker to disclose information over a network.
Out-of-bounds read in Microsoft Office Outlook allows an unauthorized attacker to disclose information over a network.
CVE-2026-70277Medium· 5.5Out-of-bounds read in Windows Fast FAT Driver allows an unauthorized attacker to disclose information locally.
Out-of-bounds read in Windows Fast FAT Driver allows an unauthorized attacker to disclose information locally.
CVE-2026-70263Medium· 6.5Out-of-bounds read in Microsoft Office Word allows an unauthorized attacker to disclose information over a network.
Out-of-bounds read in Microsoft Office Word allows an unauthorized attacker to disclose information over a network.
CVE-2026-70254High· 8.8Out-of-bounds read in Microsoft Office Excel allows an unauthorized attacker to execute code over a network.
Out-of-bounds read in Microsoft Office Excel allows an unauthorized attacker to execute code over a network.
CVE-2026-70247High· 7.8Out-of-bounds read in Windows HTTP.sys allows an authorized attacker to execute code locally.
Out-of-bounds read in Windows HTTP.sys allows an authorized attacker to execute code locally.
CVE-2026-70244Medium· 6.5Out-of-bounds read in DNS Server allows an unauthorized attacker to disclose information over a network.
Out-of-bounds read in DNS Server allows an unauthorized attacker to disclose information over a network.
CVE-2026-70228High· 7.8Out-of-bounds read in Desktop Window Manager allows an authorized attacker to elevate privileges locally.
Out-of-bounds read in Desktop Window Manager allows an authorized attacker to elevate privileges locally.
CVE-2026-70227Medium· 5.5Out-of-bounds read in Windows Device Association Service allows an authorized attacker to disclose information locally.
Out-of-bounds read in Windows Device Association Service allows an authorized attacker to disclose information locally.
CVE-2026-70219Medium· 6.5Out-of-bounds read in Microsoft Office Excel allows an unauthorized attacker to disclose information over a network.
Out-of-bounds read in Microsoft Office Excel allows an unauthorized attacker to disclose information over a network.
CVE-2026-70214Medium· 5.5Out-of-bounds read in Microsoft Office Excel allows an unauthorized attacker to disclose information locally.
Out-of-bounds read in Microsoft Office Excel allows an unauthorized attacker to disclose information locally.