CWE-126
CVEs classified under CWE-126, newest first.
168 CVEsRSS
CVE-2026-81399Medium· 5.5Buffer over-read in Microsoft Office Excel allows an unauthorized attacker to disclose information locally.
Buffer over-read in Microsoft Office Excel allows an unauthorized attacker to disclose information locally.
CVE-2026-78516Medium· 4.3Insertion of sensitive information into externally-accessible file or directory in Windows Storage allows an authorized attacker to disclose information locally.
Insertion of sensitive information into externally-accessible file or directory in Windows Storage allows an authorized attacker to disclose information locally.
CVE-2026-73029Medium· 6.5Buffer over-read in SQL Server allows an authorized attacker to disclose information over a network.
Buffer over-read in SQL Server allows an authorized attacker to disclose information over a network.
CVE-2026-72974Medium· 6.5Buffer over-read in Microsoft Office Excel allows an unauthorized attacker to disclose information over a network.
Buffer over-read in Microsoft Office Excel allows an unauthorized attacker to disclose information over a network.
CVE-2026-72932High· 7.5Buffer over-read in Windows Message Queuing Queue Manager allows an unauthorized attacker to disclose information over a network.
Buffer over-read in Windows Message Queuing Queue Manager allows an unauthorized attacker to disclose information over a network.
CVE-2026-69794Medium· 5.5Buffer over-read in Windows Encrypting File System (EFS) allows an authorized attacker to disclose information locally.
Buffer over-read in Windows Encrypting File System (EFS) allows an authorized attacker to disclose information locally.
CVE-2026-69719Medium· 6.5Buffer over-read in Microsoft Office Word allows an unauthorized attacker to disclose information over a network.
Buffer over-read in Microsoft Office Word allows an unauthorized attacker to disclose information over a network.
CVE-2026-69626Medium· 6.5Buffer over-read in Microsoft Office allows an unauthorized attacker to disclose information over a network.
Buffer over-read in Microsoft Office allows an unauthorized attacker to disclose information over a network.
CVE-2026-69610High· 7.0Buffer over-read in Windows Win32K allows an authorized attacker to elevate privileges locally.
Buffer over-read in Windows Win32K allows an authorized attacker to elevate privileges locally.
CVE-2026-69582High· 7.8Buffer over-read in Windows Volume Manager Extension Driver allows an authorized attacker to elevate privileges locally.
Buffer over-read in Windows Volume Manager Extension Driver allows an authorized attacker to elevate privileges locally.
CVE-2026-69474Medium· 4.8Use after free in Windows Overlay Filter allows an authorized attacker to disclose information over a network.
Use after free in Windows Overlay Filter allows an authorized attacker to disclose information over a network.
CVE-2026-69416Medium· 5.7Buffer over-read in Windows DHCP Server allows an authorized attacker to deny service over an adjacent network.
Buffer over-read in Windows DHCP Server allows an authorized attacker to deny service over an adjacent network.
CVE-2026-69316Medium· 4.7Buffer over-read in Windows Overlay Filter allows an authorized attacker to disclose information locally.
Buffer over-read in Windows Overlay Filter allows an authorized attacker to disclose information locally.
CVE-2026-68875High· 7.8Buffer over-read in Windows NTFS allows an authorized attacker to execute code locally.
Buffer over-read in Windows NTFS allows an authorized attacker to execute code locally.
CVE-2026-68851Medium· 5.5Buffer over-read in Windows NTFS allows an authorized attacker to disclose information locally.
Buffer over-read in Windows NTFS allows an authorized attacker to disclose information locally.
CVE-2026-67393Medium· 6.5Buffer over-read in SQL Server allows an authorized attacker to disclose information over a network.
Buffer over-read in SQL Server allows an authorized attacker to disclose information over a network.
CVE-2026-67390Medium· 6.5Buffer over-read in SQL Server allows an authorized attacker to disclose information over a network.
Buffer over-read in SQL Server allows an authorized attacker to disclose information over a network.
CVE-2026-18238Medium· 5.0The rpcap client code that processes a RPCAP_MSG_PACKET message received from the server incorrectly validates its headers
The rpcap client code that processes a RPCAP_MSG_PACKET message received from the server incorrectly validates its headers. A malicious server can send a crafted message and cause the client to treat up to 20 bytes of the client process…
CVE-2026-70652Nonelibvips is a fast image processing library with low memory needs
libvips is a fast image processing library with low memory needs. Prior to version 8.18.3, libvips built with libultrahdr support can incorrectly size an output buffer in libvips/foreign/uhdrsave.c within vips_foreign_save_uhdr_set_raw_h…
CVE-2026-53587High· 7.5PoClibgit2 is a portable C implementation of the Git core methods provided as a linkable library with a solid API, allowing to build Git functionality into your application
libgit2 is a portable C implementation of the Git core methods provided as a linkable library with a solid API, allowing to build Git functionality into your application. Prior to 1.8.6 and 1.9.5, libgit2 performs a fixed-size strncmp in…
CVE-2026-76885Low· 3.1Buffer Over-read in Wireshark
Tektronix K12xx file parser crash in 4.6.0 to 4.6.7 and 4.4.0 to 4.4.18 allows denial of service
CVE-2026-76884Low· 3.1PoCBuffer Over-read in Wireshark
ERF file parser crash in 4.6.0 to 4.6.7 and 4.4.0 to 4.4.18 allows denial of service
CVE-2026-69550Medium· 6.5Windows App for Mac Information Disclosure Vulnerability
Out-of-bounds read in Remote Desktop Client allows an unauthorized attacker to disclose information over a network.
CVE-2026-65936NoneA malformed Bluetooth connection request message can cause the RS9116W/SiWx917 to leak potentially sensitive information. See vulnerability B-E4 in the related paper below.
A malformed Bluetooth connection request message can cause the RS9116W/SiWx917 to leak potentially sensitive information. See vulnerability B-E4 in the related paper below.
CVE-2026-65933NoneA malformed Bluetooth connection request message can cause the BT122 to leak potentially sensitive information
A malformed Bluetooth connection request message can cause the BT122 to leak potentially sensitive information. See vulnerability B-E4 in the related paper below.
CVE-2026-18024Medium· 4.3Buffer over-read in PostgreSQL ascii() SQL function allows a user to disclose up to 3 bytes after the end of a specific allocation, via a crafted text value
Buffer over-read in PostgreSQL ascii() SQL function allows a user to disclose up to 3 bytes after the end of a specific allocation, via a crafted text value. This is the same class of defect that CVE-2026-2006 fixed, though this instanc…
CVE-2026-14678Medium· 4.3Buffer over-read in PostgreSQL pg_trgm index picksplit function reads past end of a heap buffer
Buffer over-read in PostgreSQL pg_trgm index picksplit function reads past end of a heap buffer. This might allow a table maintainer to infer limited memory values, via the lossy signal of index split choices. Versions before PostgreSQ…
CVE-2026-62746Medium· 5.5Win32k Information Disclosure Vulnerability
Buffer over-read in Windows Win32K allows an authorized attacker to disclose information locally.
CVE-2026-68819Medium· 5.9Windows Network File System Denial of Service Vulnerability
Buffer over-read in Windows Network File System allows an unauthorized attacker to deny service over a network.
CVE-2026-62793Medium· 5.5Windows NTFS Information Disclosure Vulnerability
Buffer over-read in Windows NTFS allows an authorized attacker to disclose information locally.