VulnSea

CWE-125

CVEs classified under CWE-125, newest first.

2121 CVEsRSS

CVE-2026-69308Medium· 5.5
2mo ago

Out-of-bounds read in Microsoft Standard XPS allows an authorized attacker to disclose information locally.

Out-of-bounds read in Microsoft Standard XPS allows an authorized attacker to disclose information locally.

▾ Sunlitmicrosoft · windows_10_1607EPSS 0.40%via NVD
CVE-2026-69303Medium· 5.5
2mo ago

Out-of-bounds read in Push Message Routing Service allows an authorized attacker to disclose information locally.

Out-of-bounds read in Push Message Routing Service allows an authorized attacker to disclose information locally.

▾ Sunlitmicrosoft · windows_10_1607EPSS 0.40%via NVD
CVE-2026-69295High· 7.8
2mo ago

Out-of-bounds read in Windows USB Driver allows an authorized attacker to elevate privileges locally.

Out-of-bounds read in Windows USB Driver allows an authorized attacker to elevate privileges locally.

▾ Twilightmicrosoft · windows_10_1607EPSS 0.33%via NVD
CVE-2026-69286Medium· 5.5
2mo ago

Out-of-bounds read in Windows USB Audio Class driver (usbaudio.sys) allows an authorized attacker to disclose information locally.

Out-of-bounds read in Windows USB Audio Class driver (usbaudio.sys) allows an authorized attacker to disclose information locally.

▾ Sunlitmicrosoft · windows_10_1607EPSS 0.40%via NVD
CVE-2026-69265High· 7.8
2mo ago

Out-of-bounds read in Windows NTFS allows an authorized attacker to elevate privileges locally.

Out-of-bounds read in Windows NTFS allows an authorized attacker to elevate privileges locally.

▾ Twilightmicrosoft · windows_10_1607EPSS 0.33%via NVD
CVE-2026-68898Medium· 6.5
2mo ago

Out-of-bounds read in Windows iSCSI allows an unauthorized attacker to deny service over a network.

Out-of-bounds read in Windows iSCSI allows an unauthorized attacker to deny service over a network.

▾ Sunlitmicrosoft · windows_10_1607EPSS 0.89%via NVD
CVE-2026-68891Medium· 4.7
2mo ago

Out-of-bounds read in Microsoft Standard XPS allows an authorized attacker to disclose information locally.

Out-of-bounds read in Microsoft Standard XPS allows an authorized attacker to disclose information locally.

▾ Sunlitmicrosoft · windows_10_1607EPSS 0.31%via NVD
CVE-2026-68887High· 7.5
2mo ago

Out-of-bounds read in Windows Message Queuing Queue Manager allows an unauthorized attacker to deny service over a network.

Out-of-bounds read in Windows Message Queuing Queue Manager allows an unauthorized attacker to deny service over a network.

▾ Twilightmicrosoft · windows_10_1607EPSS 1.2%via NVD
CVE-2026-68881Medium· 5.5
2mo ago

Out-of-bounds read in Microsoft Standard XPS allows an authorized attacker to disclose information locally.

Out-of-bounds read in Microsoft Standard XPS allows an authorized attacker to disclose information locally.

▾ Sunlitmicrosoft · windows_10_1607EPSS 0.40%via NVD
CVE-2026-68874Medium· 5.7
2mo ago

Out-of-bounds read in Windows Program Compatibility Assistant Service allows an authorized attacker to disclose information over a network.

Out-of-bounds read in Windows Program Compatibility Assistant Service allows an authorized attacker to disclose information over a network.

▾ Sunlitmicrosoft · windows_10_1607EPSS 0.89%via NVD
CVE-2026-68849Medium· 4.7
2mo ago

Out-of-bounds read in Windows Bluetooth Port Driver allows an authorized attacker to disclose information locally.

Out-of-bounds read in Windows Bluetooth Port Driver allows an authorized attacker to disclose information locally.

▾ Sunlitmicrosoft · windows_10_21h2EPSS 0.31%via NVD
CVE-2026-68784Medium· 6.5
2mo ago

Out-of-bounds read in SQL Server allows an authorized attacker to disclose information over a network.

Out-of-bounds read in SQL Server allows an authorized attacker to disclose information over a network.

▾ Sunlitmicrosoft · sql_server_2017EPSS 1.00%via NVD
CVE-2026-68781Medium· 6.5
2mo ago

Out-of-bounds read in SQL Server allows an authorized attacker to disclose information over a network.

Out-of-bounds read in SQL Server allows an authorized attacker to disclose information over a network.

▾ Sunlitmicrosoft · sql_server_2017EPSS 1.00%via NVD
CVE-2026-68780Medium· 6.5
2mo ago

Out-of-bounds read in SQL Server allows an authorized attacker to disclose information over a network.

Out-of-bounds read in SQL Server allows an authorized attacker to disclose information over a network.

▾ Sunlitmicrosoft · sql_server_2017EPSS 1.00%via NVD
CVE-2026-68779Medium· 6.5
2mo ago

Out-of-bounds read in SQL Server allows an authorized attacker to disclose information over a network.

Out-of-bounds read in SQL Server allows an authorized attacker to disclose information over a network.

▾ Sunlitmicrosoft · sql_server_2017EPSS 1.00%via NVD
CVE-2026-68778Medium· 6.5
2mo ago

Out-of-bounds read in SQL Server allows an authorized attacker to disclose information over a network.

Out-of-bounds read in SQL Server allows an authorized attacker to disclose information over a network.

▾ Sunlitmicrosoft · sql_server_2017EPSS 1.00%via NVD
CVE-2026-68777Medium· 6.5
2mo ago

Out-of-bounds read in SQL Server allows an authorized attacker to disclose information over a network.

Out-of-bounds read in SQL Server allows an authorized attacker to disclose information over a network.

▾ Sunlitmicrosoft · sql_server_2017EPSS 1.00%via NVD
CVE-2026-67645Medium· 6.5
2mo ago

Out-of-bounds read in SQL Server allows an authorized attacker to disclose information over a network.

Out-of-bounds read in SQL Server allows an authorized attacker to disclose information over a network.

▾ Sunlitmicrosoft · sql_server_2017EPSS 1.00%via NVD
CVE-2026-67636Critical· 9.0
2mo ago

Out-of-bounds read in SQL Server allows an unauthorized attacker to execute code over a network.

Out-of-bounds read in SQL Server allows an unauthorized attacker to execute code over a network.

▾ Midnightmicrosoft · sql_server_2019EPSS 0.71%via NVD
CVE-2026-67633Medium· 6.5
2mo ago

Out-of-bounds read in SQL Server allows an authorized attacker to deny service over a network.

Out-of-bounds read in SQL Server allows an authorized attacker to deny service over a network.

▾ Sunlitmicrosoft · sql_server_2017EPSS 1.1%via NVD
CVE-2026-67630Medium· 6.5
2mo ago

Out-of-bounds read in SQL Server allows an authorized attacker to disclose information over a network.

Out-of-bounds read in SQL Server allows an authorized attacker to disclose information over a network.

▾ Sunlitmicrosoft · sql_server_2017EPSS 1.00%via NVD
CVE-2026-67629Medium· 6.5
2mo ago

Out-of-bounds read in SQL Server allows an authorized attacker to disclose information over a network.

Out-of-bounds read in SQL Server allows an authorized attacker to disclose information over a network.

▾ Sunlitmicrosoft · sql_server_2017EPSS 1.00%via NVD
CVE-2026-67624Medium· 6.5
2mo ago

Out-of-bounds read in SQL Server allows an authorized attacker to disclose information over a network.

Out-of-bounds read in SQL Server allows an authorized attacker to disclose information over a network.

▾ Sunlitmicrosoft · sql_server_2019EPSS 1.00%via NVD
CVE-2026-67389Medium· 6.5
2mo ago

Out-of-bounds read in SQL Server allows an authorized attacker to disclose information over a network.

Out-of-bounds read in SQL Server allows an authorized attacker to disclose information over a network.

▾ Sunlitmicrosoft · sql_server_2022EPSS 1.00%via NVD
CVE-2026-67369Medium· 6.5
2mo ago

Out-of-bounds read in SQL Server allows an authorized attacker to disclose information over a network.

Out-of-bounds read in SQL Server allows an authorized attacker to disclose information over a network.

▾ Sunlitmicrosoft · sql_server_2025EPSS 1.00%via NVD
CVE-2026-62706High· 8.8
2mo ago

Out-of-bounds read in Microsoft Windows Media Foundation allows an unauthorized attacker to execute code over a network.

Out-of-bounds read in Microsoft Windows Media Foundation allows an unauthorized attacker to execute code over a network.

▾ Twilightmicrosoft · windows_10_1607EPSS 0.82%via NVD
CVE-2026-56198High· 7.8
2mo ago

Out-of-bounds read in Microsoft Trace Data Helper allows an authorized attacker to elevate privileges locally.

Out-of-bounds read in Microsoft Trace Data Helper allows an authorized attacker to elevate privileges locally.

▾ Twilightmicrosoft · windows_11_24h2EPSS 0.33%via NVD
CVE-2026-82066Medium· 4.3
2mo ago

A heap out-of-bounds read security issue exists in the query planning component of MongoDB Server

A heap out-of-bounds read security issue exists in the query planning component of MongoDB Server. An authenticated user with database read and write privileges can trigger the security issue through crafted query operations, causing the…

▾ Sunlitmongodb · mongodbEPSS 0.39%via NVD
CVE-2026-86714Medium· 5.4
2mo ago

PX4 Autopilot through 1.17.0 contains a stack buffer over-read vulnerability in the netman system command that fails to validate interface name length

PX4 Autopilot through 1.17.0 contains a stack buffer over-read vulnerability in the netman system command that fails to validate interface name length. Attackers can supply interface names of 74 bytes or more via the -i option to read be…

▾ SunlitPX4 · PX4-AutopilotEPSS 0.33%via NVD
CVE-2026-86303High· 7.3PoC
2mo ago

A vulnerability was determined in 92181 markdown up to 058cab0cb7fb245a0ccc6b8446963ff8d573558f

A vulnerability was determined in 92181 markdown up to 058cab0cb7fb245a0ccc6b8446963ff8d573558f. Affected by this issue is the function lds of the file md.c. Executing a manipulation can lead to out-of-bounds read. The attack can be exec…

▾ Midnight92181 · markdownEPSS 0.54%via NVD
CWE-125 vulnerabilities (CVEs) — page 40 · VulnSea