CWE-126
CVEs classified under CWE-126, newest first.
167 CVEsRSS
CVE-2026-57185Medium· 6.5Asterisk: Buffer over-read in Asterisk PJSIP MWI body parser
Asterisk is an open source private branch exchange and telephony toolkit. Prior to Asterisk 20.20.1, 21.12.3, 22.10.1, 23.4.1 and Certified Asterisk 20.7-cert11, 22.8-cert3, an authenticated attacker may crash Asterisk through a buffer o…
CVE-2026-55606Medium· 6.5odhcpd: Stack buffer overread via DUID length endianness mismatch in memcmp()
odhcpd is the DHCPv6, DHCPv4, and router-advertisement server used by OpenWrt. In versions 25.12 and prior, odhcpd's DHCPv6 self-loop detection at dhcpv6.c:720 uses a network-byte-order DUID length value directly as the memcmp() size par…
CVE-2026-53920High· 8.7odhcpd DHCPv6 Short IA_NA/IA_PD Body Stack Disclosure
odhcpd is the DHCPv6, DHCPv4, and router-advertisement server used by OpenWrt. From version 17.01.0 to before version 25.12.3, odhcpd's DHCPv6 IA parser accepts an IA_NA or IA_PD option whose body is shorter than struct dhcpv6_ia_hdr, ca…
CVE-2026-112394Medium· 8.2PoCPillow: P;2L and P;4L decoders may read 1 to 3 bytes past the passed buffer size
Pillow: P;2L and P;4L decoders may read 1 to 3 bytes past the passed buffer size
CVE-2026-112404High· 8.2Pillow: OOB read in TiffDecode.c tile and RGBA paths leaks heap memory into pixels
Pillow: OOB read in TiffDecode.c tile and RGBA paths leaks heap memory into pixels
CVE-2026-85745Medium· 4.3MariaDB: Out-of-bound buffer read on in `ST_Area` of a multipolygon.
MariaDB server is a community developed fork of MySQL server. From 10.6.1 until 10.6.28, 10.11.19, 11.4.13, 11.8.9, 12.3.3, and 13.0.2, ST_Area reads beyond the allocated buffer when processing invalid WKB for a MultiPolygon because the …
CVE-2026-108454Medium· 6.5Microsoft Office PowerPoint Information Disclosure Vulnerability
Buffer over-read in Microsoft Office PowerPoint allows an unauthorized attacker to disclose information over a network.
CVE-2026-101310High· 7.0The HDA audio device model did not check for zero-length Buffer Descriptor List (BDL) entries when starting a stream
The HDA audio device model did not check for zero-length Buffer Descriptor List (BDL) entries when starting a stream. A zero-length entry caused an out-of-bounds read or write during DMA transfer processing. BDL fields were also subjec…
CVE-2026-107928Medium· 4.8curl: curl: info leak uploading over WebSockets with GnuTLS (CVE-2026-107928)
A flaw was found in curl. When curl is built with the GnuTLS library, a blocked transmission during communication with a malicious WebSocket server can trigger an out-of-bounds memory read. A malicious server can exploit this flaw to expos…
CVE-2026-97828Medium· 6.5Buffer over-read in DNS Server allows an authorized attacker to disclose information over a network.
Buffer over-read in DNS Server allows an authorized attacker to disclose information over a network.
CVE-2026-96851Medium· 5.5Buffer over-read in Windows Management Instrumentation allows an authorized attacker to disclose information locally.
Buffer over-read in Windows Management Instrumentation allows an authorized attacker to disclose information locally.
CVE-2026-96848Medium· 5.5Buffer over-read in Windows Win32 Kernel Subsystem allows an authorized attacker to disclose information locally.
Buffer over-read in Windows Win32 Kernel Subsystem allows an authorized attacker to disclose information locally.
CVE-2026-95904Medium· 5.5Buffer over-read in Windows Event Logging Service allows an authorized attacker to disclose information locally.
Buffer over-read in Windows Event Logging Service allows an authorized attacker to disclose information locally.
CVE-2026-88201Medium· 6.5Buffer over-read in Microsoft Office Excel allows an unauthorized attacker to disclose information over a network.
Buffer over-read in Microsoft Office Excel allows an unauthorized attacker to disclose information over a network.
CVE-2026-88195Medium· 6.5Buffer over-read in Microsoft Office Excel allows an unauthorized attacker to disclose information over a network.
Buffer over-read in Microsoft Office Excel allows an unauthorized attacker to disclose information over a network.
CVE-2026-88167Medium· 6.5Buffer over-read in Microsoft Office Word allows an unauthorized attacker to disclose information over a network.
Buffer over-read in Microsoft Office Word allows an unauthorized attacker to disclose information over a network.
CVE-2026-85935Medium· 5.5Buffer over-read in Windows USB Driver allows an authorized attacker to disclose information locally.
Buffer over-read in Windows USB Driver allows an authorized attacker to disclose information locally.
CVE-2026-85910Medium· 5.5Buffer over-read in Windows StateRepository API allows an authorized attacker to disclose information locally.
Buffer over-read in Windows StateRepository API allows an authorized attacker to disclose information locally.
CVE-2026-85835Medium· 5.5Buffer over-read in Servicing Stack Updates allows an authorized attacker to disclose information locally.
Buffer over-read in Servicing Stack Updates allows an authorized attacker to disclose information locally.
CVE-2026-83888Medium· 6.5Buffer over-read in Windows CD-ROM Driver allows an unauthorized attacker to elevate privileges over a network.
Buffer over-read in Windows CD-ROM Driver allows an unauthorized attacker to elevate privileges over a network.
CVE-2026-83835Medium· 5.5Buffer over-read in Windows Common Log File System Driver allows an authorized attacker to disclose information locally.
Buffer over-read in Windows Common Log File System Driver allows an authorized attacker to disclose information locally.
CVE-2026-83788Medium· 4.6Buffer over-read in Windows RNDIS allows an unauthorized attacker to disclose information with a physical attack.
Buffer over-read in Windows RNDIS allows an unauthorized attacker to disclose information with a physical attack.
CVE-2026-83727High· 7.8Buffer over-read in Windows Overlay Filter allows an authorized attacker to elevate privileges locally.
Buffer over-read in Windows Overlay Filter allows an authorized attacker to elevate privileges locally.
CVE-2026-83719Medium· 5.5Buffer over-read in Servicing Stack Updates allows an authorized attacker to disclose information locally.
Buffer over-read in Servicing Stack Updates allows an authorized attacker to disclose information locally.
CVE-2026-83685Medium· 6.5Buffer over-read in Windows IKE Extension allows an authorized attacker to deny service over a network.
Buffer over-read in Windows IKE Extension allows an authorized attacker to deny service over a network.
CVE-2026-83565Medium· 5.5Buffer over-read in Windows Encrypting File System (EFS) allows an authorized attacker to disclose information locally.
Buffer over-read in Windows Encrypting File System (EFS) allows an authorized attacker to disclose information locally.
CVE-2026-70234Medium· 5.5Buffer over-read in Desktop Window Manager allows an authorized attacker to disclose information locally.
Buffer over-read in Desktop Window Manager allows an authorized attacker to disclose information locally.
CVE-2026-70041Medium· 5.5Buffer over-read in Windows CD-ROM Driver allows an authorized attacker to disclose information locally.
Buffer over-read in Windows CD-ROM Driver allows an authorized attacker to disclose information locally.
CVE-2026-69957High· 7.8Integer overflow or wraparound in Windows Overlay Filter allows an authorized attacker to elevate privileges locally.
Integer overflow or wraparound in Windows Overlay Filter allows an authorized attacker to elevate privileges locally.
CVE-2026-69954Medium· 5.5Buffer over-read in Windows Overlay Filter allows an authorized attacker to disclose information locally.
Buffer over-read in Windows Overlay Filter allows an authorized attacker to disclose information locally.