CWE-125
CVEs classified under CWE-125, newest first.
2110 CVEsRSS
CVE-2026-70211Medium· 5.5Out-of-bounds read in Windows Win32 Kernel Subsystem allows an authorized attacker to disclose information locally.
Out-of-bounds read in Windows Win32 Kernel Subsystem allows an authorized attacker to disclose information locally.
CVE-2026-70210High· 8.8Heap-based buffer overflow in Windows OLE DB allows an unauthorized attacker to elevate privileges over a network.
Heap-based buffer overflow in Windows OLE DB allows an unauthorized attacker to elevate privileges over a network.
CVE-2026-70208Medium· 5.5Out-of-bounds read in Windows HTTP.sys allows an authorized attacker to disclose information locally.
Out-of-bounds read in Windows HTTP.sys allows an authorized attacker to disclose information locally.
CVE-2026-70206Medium· 6.5Out-of-bounds read in Microsoft Office Word allows an unauthorized attacker to disclose information over a network.
Out-of-bounds read in Microsoft Office Word allows an unauthorized attacker to disclose information over a network.
CVE-2026-70201Medium· 5.5Out-of-bounds read in Windows DHCP Server allows an authorized attacker to deny service locally.
Out-of-bounds read in Windows DHCP Server allows an authorized attacker to deny service locally.
CVE-2026-70173Medium· 5.5Out-of-bounds read in Microsoft Windows Search Component allows an authorized attacker to disclose information locally.
Out-of-bounds read in Microsoft Windows Search Component allows an authorized attacker to disclose information locally.
CVE-2026-70166Medium· 6.5Out-of-bounds read in Windows DNS allows an authorized attacker to deny service over a network.
Out-of-bounds read in Windows DNS allows an authorized attacker to deny service over a network.
CVE-2026-70141Medium· 5.5Out-of-bounds read in Microsoft Windows Search Component allows an authorized attacker to disclose information locally.
Out-of-bounds read in Microsoft Windows Search Component allows an authorized attacker to disclose information locally.
CVE-2026-70135Medium· 5.5Out-of-bounds read in Windows Remote POS Driver allows an authorized attacker to disclose information locally.
Out-of-bounds read in Windows Remote POS Driver allows an authorized attacker to disclose information locally.
CVE-2026-70128Medium· 5.5Out-of-bounds read in HID Parser Library allows an authorized attacker to disclose information locally.
Out-of-bounds read in HID Parser Library allows an authorized attacker to disclose information locally.
CVE-2026-70126High· 7.1Out-of-bounds read in Windows Bluetooth Port Driver allows an unauthorized attacker to execute code over an adjacent network.
Out-of-bounds read in Windows Bluetooth Port Driver allows an unauthorized attacker to execute code over an adjacent network.
CVE-2026-70119Medium· 6.5Out-of-bounds read in Windows DNS allows an authorized attacker to execute code over a network.
Out-of-bounds read in Windows DNS allows an authorized attacker to execute code over a network.
CVE-2026-70074Medium· 5.5Out-of-bounds read in Windows DNS allows an authorized attacker to disclose information locally.
Out-of-bounds read in Windows DNS allows an authorized attacker to disclose information locally.
CVE-2026-70063Medium· 4.7Out-of-bounds read in Windows Kernel allows an authorized attacker to disclose information locally.
Out-of-bounds read in Windows Kernel allows an authorized attacker to disclose information locally.
CVE-2026-70044Medium· 5.5Out-of-bounds read in Microsoft Windows Media Foundation allows an unauthorized attacker to disclose information locally.
Out-of-bounds read in Microsoft Windows Media Foundation allows an unauthorized attacker to disclose information locally.
CVE-2026-70011Medium· 5.5Out-of-bounds read in Windows IP Over USB Service allows an authorized attacker to disclose information locally.
Out-of-bounds read in Windows IP Over USB Service allows an authorized attacker to disclose information locally.
CVE-2026-69999Medium· 5.5Out-of-bounds read in Windows Update allows an authorized attacker to disclose information locally.
Out-of-bounds read in Windows Update allows an authorized attacker to disclose information locally.
CVE-2026-69974Medium· 4.7Out-of-bounds read in Desktop Window Manager allows an authorized attacker to disclose information locally.
Out-of-bounds read in Desktop Window Manager allows an authorized attacker to disclose information locally.
CVE-2026-69967Medium· 5.5Out-of-bounds read in Windows Overlay Filter allows an authorized attacker to disclose information locally.
Out-of-bounds read in Windows Overlay Filter allows an authorized attacker to disclose information locally.
CVE-2026-69959High· 7.8Out-of-bounds read in Windows Overlay Filter allows an authorized attacker to execute code locally.
Out-of-bounds read in Windows Overlay Filter allows an authorized attacker to execute code locally.
CVE-2026-69955Medium· 6.5Out-of-bounds read in Windows Client for NFS allows an unauthorized attacker to disclose information over a network.
Out-of-bounds read in Windows Client for NFS allows an unauthorized attacker to disclose information over a network.
CVE-2026-69952High· 7.8Out-of-bounds read in Windows Overlay Filter allows an authorized attacker to elevate privileges locally.
Out-of-bounds read in Windows Overlay Filter allows an authorized attacker to elevate privileges locally.
CVE-2026-69940Medium· 6.5Out-of-bounds read in Windows Client for NFS allows an unauthorized attacker to disclose information over a network.
Out-of-bounds read in Windows Client for NFS allows an unauthorized attacker to disclose information over a network.
CVE-2026-69922Medium· 6.5Out-of-bounds read in Microsoft Office Excel allows an unauthorized attacker to disclose information over a network.
Out-of-bounds read in Microsoft Office Excel allows an unauthorized attacker to disclose information over a network.
CVE-2026-69919Medium· 5.5Out-of-bounds read in Windows Cryptographic Services allows an authorized attacker to disclose information locally.
Out-of-bounds read in Windows Cryptographic Services allows an authorized attacker to disclose information locally.
CVE-2026-69914Medium· 5.5Out-of-bounds read in Windows AppX Deployment Service allows an authorized attacker to disclose information locally.
Out-of-bounds read in Windows AppX Deployment Service allows an authorized attacker to disclose information locally.
CVE-2026-69867High· 7.8Out-of-bounds read in SQLite allows an authorized attacker to elevate privileges locally.
Out-of-bounds read in SQLite allows an authorized attacker to elevate privileges locally.
CVE-2026-69721Medium· 5.5Out-of-bounds read in Windows iSCSI allows an authorized attacker to disclose information locally.
Out-of-bounds read in Windows iSCSI allows an authorized attacker to disclose information locally.
CVE-2026-69675Medium· 5.5Out-of-bounds read in Windows Network File System allows an authorized attacker to disclose information locally.
Out-of-bounds read in Windows Network File System allows an authorized attacker to disclose information locally.
CVE-2026-69577High· 7.5Out-of-bounds read in Microsoft Azure Attestation service and Device Health Attestation Service allows an unauthorized attacker to disclose information over a network.
Out-of-bounds read in Microsoft Azure Attestation service and Device Health Attestation Service allows an unauthorized attacker to disclose information over a network.