CWE-125
CVEs classified under CWE-125, newest first.
2110 CVEsRSS
CVE-2026-69506Medium· 4.7Out-of-bounds read in Windows Key Storage Provider allows an authorized attacker to disclose information locally.
Out-of-bounds read in Windows Key Storage Provider allows an authorized attacker to disclose information locally.
CVE-2026-69471High· 7.8Heap-based buffer overflow in Windows Installer allows an authorized attacker to elevate privileges locally.
Heap-based buffer overflow in Windows Installer allows an authorized attacker to elevate privileges locally.
CVE-2026-69454High· 7.5Out-of-bounds read in Microsoft Azure Attestation service and Device Health Attestation Service allows an unauthorized attacker to disclose information over a network.
Out-of-bounds read in Microsoft Azure Attestation service and Device Health Attestation Service allows an unauthorized attacker to disclose information over a network.
CVE-2026-108466Medium· 5.3Out-of-bounds read in Windows Kernel allows an unauthorized attacker to deny service over a network.
Out-of-bounds read in Windows Kernel allows an unauthorized attacker to deny service over a network.
CVE-2026-108129Medium· 6.5Out-of-bounds read in DNS Server allows an authorized attacker to disclose information over a network.
Out-of-bounds read in DNS Server allows an authorized attacker to disclose information over a network.
CVE-2026-108128Medium· 6.5Out-of-bounds read in DNS Server allows an authorized attacker to disclose information over a network.
Out-of-bounds read in DNS Server allows an authorized attacker to disclose information over a network.
CVE-2026-108127Medium· 6.5Out-of-bounds read in DNS Server allows an authorized attacker to disclose information over a network.
Out-of-bounds read in DNS Server allows an authorized attacker to disclose information over a network.
CVE-2026-105726Medium· 5.5Out-of-bounds read in Microsoft Defender allows an authorized attacker to disclose information locally.
Out-of-bounds read in Microsoft Defender allows an authorized attacker to disclose information locally.
CVE-2026-105718High· 8.8Out-of-bounds read in Microsoft Office Excel allows an unauthorized attacker to execute code over a network.
Out-of-bounds read in Microsoft Office Excel allows an unauthorized attacker to execute code over a network.
CVE-2026-105595High· 8.8Out-of-bounds read in Microsoft Office Access allows an unauthorized attacker to execute code over a network.
Out-of-bounds read in Microsoft Office Access allows an unauthorized attacker to execute code over a network.
CVE-2026-105007High· 8.8An elevation of privilege vulnerability exists in the Network Driver Interface Specification (NDIS) when ndis.sys fails to check the length of a buffer prior to copying memory to it. To exploit the vulnerability, in a local attack scenar…
An elevation of privilege vulnerability exists in the Network Driver Interface Specification (NDIS) when ndis.sys fails to check the length of a buffer prior to copying memory to it. To exploit the vulnerability, in a local attack scenar…
CVE-2026-105004High· 7.8Out-of-bounds read in Windows Overlay Filter allows an authorized attacker to elevate privileges locally.
Out-of-bounds read in Windows Overlay Filter allows an authorized attacker to elevate privileges locally.
CVE-2026-103857Medium· 5.5Adobe Framemaker is affected by an out-of-bounds read vulnerability that could lead to disclosure of sensitive memory
Adobe Framemaker is affected by an out-of-bounds read vulnerability that could lead to disclosure of sensitive memory. An attacker could leverage this vulnerability to disclose sensitive information. Exploitation of this issue requires u…
CVE-2026-103856Medium· 5.5Adobe Framemaker is affected by an out-of-bounds read vulnerability that could lead to disclosure of sensitive memory
Adobe Framemaker is affected by an out-of-bounds read vulnerability that could lead to disclosure of sensitive memory. An attacker could leverage this vulnerability to disclose sensitive information. Exploitation of this issue requires u…
CVE-2026-103569High· 7.5Out-of-bounds read in Windows IKE Extension allows an unauthorized attacker to disclose information over a network.
Out-of-bounds read in Windows IKE Extension allows an unauthorized attacker to disclose information over a network.
CVE-2026-103553High· 7.8Out-of-bounds read in Windows Partition Management Driver allows an authorized attacker to elevate privileges locally.
Out-of-bounds read in Windows Partition Management Driver allows an authorized attacker to elevate privileges locally.
CVE-2026-102867Medium· 6.5Out-of-bounds read in Microsoft Office Word allows an unauthorized attacker to disclose information over a network.
Out-of-bounds read in Microsoft Office Word allows an unauthorized attacker to disclose information over a network.
CVE-2026-102225High· 8.8Out-of-bounds read in Windows Text Shaping allows an unauthorized attacker to execute code over a network.
Out-of-bounds read in Windows Text Shaping allows an unauthorized attacker to execute code over a network.
CVE-2026-102198Medium· 5.3Out-of-bounds read in Windows Remote Desktop Protocol allows an authorized attacker to disclose information over a network.
Out-of-bounds read in Windows Remote Desktop Protocol allows an authorized attacker to disclose information over a network.
CVE-2026-81507Medium· 6.5ESF-IDF is the Espressif Internet of Things (IOT) Development Framework
ESF-IDF is the Espressif Internet of Things (IOT) Development Framework. Prior to 5.2.8, 5.3.6, 5.5.5, 6.0.3, and 6.1-rc1, ESP-IDF BlueDroid L2CAP configuration-option processing in l2c_main.c and l2c_utils.c does not consistently valida…
CVE-2026-105460Medium· 5.5A flaw was found in BlueZ
A flaw was found in BlueZ. An out-of-bounds read vulnerability exists in the btmon Bluetooth monitor tool when processing crafted HCI Return Link Keys events. A maliciously crafted btsnoop capture file can specify a large number of link …
CVE-2026-95114High· 7.5PoClibwebsockets contains an out-of-bounds read vulnerability in the LEJP incremental parser in lib/misc/lejp.c
libwebsockets contains an out-of-bounds read vulnerability in the LEJP incremental parser in lib/misc/lejp.c. This allows a remote attacker to cause a denial of service
CVE-2026-109951Medium· 5.3PoCFreeRDP 3.17.1 before 3.32.0 contains a heap buffer over-read vulnerability in DynvcTrackerHandleCreateBack of the freerdp-proxy DRDYNVC channel handler that allows malicious backend RDP servers to read heap memory out of bounds
FreeRDP 3.17.1 before 3.32.0 contains a heap buffer over-read vulnerability in DynvcTrackerHandleCreateBack of the freerdp-proxy DRDYNVC channel handler that allows malicious backend RDP servers to read heap memory out of bounds. Attacke…
CVE-2026-109950Medium· 4.3PoCFreeRDP from 3.0.0 before 3.32.0 contains a heap out-of-bounds read vulnerability that allows a malicious RD Gateway to crash clients by sending mismatched message lengths
FreeRDP from 3.0.0 before 3.32.0 contains a heap out-of-bounds read vulnerability that allows a malicious RD Gateway to crash clients by sending mismatched message lengths. Attackers controlling the gateway can set MsgBytes far larger th…
CVE-2026-109677Medium· 6.5FreeRDP from 2.0.0-beta1 before 3.28.0 contains an out-of-bounds read vulnerability in smartcard_LocateCardsByATRA_Call because the ATR pattern cbAtr byte count is not capped
FreeRDP from 2.0.0-beta1 before 3.28.0 contains an out-of-bounds read vulnerability in smartcard_LocateCardsByATRA_Call because the ATR pattern cbAtr byte count is not capped. Malicious RDP servers can send crafted ATR mask arrays to use…
CVE-2026-65150High· 7.3NVIDIA DALI contains a vulnerability where an attacker could cause an uncontrolled out-of-bounds read
NVIDIA DALI contains a vulnerability where an attacker could cause an uncontrolled out-of-bounds read. A successful exploit of this vulnerability mighty lead to information disclosure, data tampering, and denial of service.
CVE-2026-65147High· 7.3NVIDIA DALI contains a vulnerability where an attacker could cause an uncontrolled out-of-bounds read
NVIDIA DALI contains a vulnerability where an attacker could cause an uncontrolled out-of-bounds read. A successful exploit of this vulnerability might lead to information disclosure and denial of service.
CVE-2026-89208Medium· 5.3A vulnerability has been identified in Capital Embedded AR Classic 431-422 (All versions), Capital Embedded AR Classic R20-11 (All versions < V2303), Desigo PXC00-E.D (All versions >= V2.3), Desigo PXC00-U (All versions >= V2.3), Desigo …
A vulnerability has been identified in Capital Embedded AR Classic 431-422 (All versions), Capital Embedded AR Classic R20-11 (All versions < V2303), Desigo PXC00-E.D (All versions >= V2.3), Desigo PXC00-U (All versions >= V2.3), Desigo …
CVE-2026-108960Medium· 5.3PoCA vulnerability was detected in Tiiny-AI PowerInfer up to 8bd56d69906c9d2dba4d3bf6899763401e01a9a4
A vulnerability was detected in Tiiny-AI PowerInfer up to 8bd56d69906c9d2dba4d3bf6899763401e01a9a4. Affected is the function create_striped_mat_to_gpu of the file smallthinker/ggml/src/ggml-cuda/ggml-cuda.cu of the component FFN GPU-spli…
CVE-2026-108955Medium· 5.3PoCA vulnerability was determined in Tiiny-AI PowerInfer up to 8bd56d69906c9d2dba4d3bf6899763401e01a9a4
A vulnerability was determined in Tiiny-AI PowerInfer up to 8bd56d69906c9d2dba4d3bf6899763401e01a9a4. Impacted is the function gguf_init_from_file of the file ggml.c of the component GGUF Parser. This manipulation of the argument data_of…