CWE-125: Out-of-bounds Read
The product reads data past the end, or before the beginning, of the intended buffer.
Also known as OOB read.
A kind of CWE-119 Buffer Overflow.
From the CWE List. © The MITRE Corporation.
Newest
- microsoft windows 10 version 1607, windows 10 version 1809, windows 10 version 21h2 +24 more +26 moreWindows Remote Desktop Client Information Disclosure Vulnerability6.5 Medium
- microsoft excel, 365 apps, 365 apps for enterprise +11 more +13 moreMicrosoft Excel Information Disclosure Vulnerability6.5 Medium
- microsoft excel, 365 apps, 365 apps for enterprise +11 more +13 moreMicrosoft Excel Information Disclosure Vulnerability6.5 Medium
- microsoft 365 apps, 365 apps for enterprise, office 2019 +8 more +10 moreMicrosoft Office Information Disclosure Vulnerability5.5 Medium
- microsoft word, 365 apps, 365 apps for enterprise +10 more +12 moreMicrosoft Word Information Disclosure Vulnerability5.5 Medium
- microsoft 365 apps, 365 apps for enterprise, office 2019 +8 more +10 moreMicrosoft Excel Information Disclosure Vulnerability5.5 Medium
- microsoft excel, 365 apps, 365 apps for enterprise +11 more +13 moreMicrosoft Excel Information Disclosure Vulnerability5.5 Medium
- microsoft excel, 365 apps, 365 apps for enterprise +11 more +13 moreMicrosoft Excel Information Disclosure Vulnerability5.5 Medium
- microsoft excel, 365 apps, 365 apps for enterprise +11 more +13 moreMicrosoft Excel Remote Code Execution Vulnerability7.8 High
- microsoft windows 10 version 1607, windows 10 version 1809, windows 10 version 21h2 +21 more +23 moreDesktop Window Manager Elevation of Privilege Vulnerability7.8 High
- microsoft windows 10 version 1607, windows 10 version 1809, windows 10 version 21h2 +20 more +22 moreDesktop Window Manager Elevation of Privilege Vulnerability7.8 High
- microsoft windows 10 version 1607, windows 10 version 1809, windows 10 version 21h2 +24 more +26 moreWindows NTFS Information Disclosure Vulnerability5.5 Medium
- microsoft windows 10 version 1607, windows 10 version 1809, windows 10 version 21h2 +24 more +26 moreWindows GDI Information Disclosure Vulnerability5.5 Medium
- microsoft word, 365 apps, 365 apps for enterprise +6 more +8 moreMicrosoft Office Word Information Disclosure Vulnerability5.5 Medium
- microsoft 365 apps, 365 apps for enterprise, office 2016 +9 more +11 moreMicrosoft Office Graphics Component Information Disclosure Vulnerability5.5 Medium
- microsoft 365 apps, 365 apps for enterprise, office 2016 +9 more +11 moreMicrosoft Office Remote Code Execution Vulnerability7.8 High
- microsoft windows 10 version 1607, windows 10 version 1809, windows 10 version 21h2 +24 more +26 moreWindows Win32k Elevation of Privilege Vulnerability7.8 High
- microsoft windows 10 version 1607, windows 10 version 1809, windows 10 version 21h2 +24 more +26 moreWindows NTFS Information Disclosure Vulnerability5.5 Medium
- microsoft windows server 2012, windows server 2012 (server core installation), windows server 2012 r2 +10 more +12 moreWindows DHCP Server Information Disclosure Vulnerability6.5 Medium
- microsoft windows server 2012, windows server 2012 (server core installation), windows server 2012 r2 +10 more +12 moreWindows DHCP Server Information Disclosure Vulnerability6.5 Medium
- microsoft windows server 2012, windows server 2012 (server core installation), windows server 2012 r2 +10 more +12 moreWindows DHCP Server Information Disclosure Vulnerability6.5 Medium
- microsoft windows server 2012 r2, windows server 2012 r2 (server core installation), windows server 2016 +9 more +11 moreWindows DHCP Server Information Disclosure Vulnerability6.5 Medium
- microsoft windows server 2012, windows server 2012 (server core installation), windows server 2012 r2 +10 more +12 moreWindows DHCP Server Information Disclosure Vulnerability6.5 Medium
- microsoft windows 10 version 1809, windows 10 version 21h2, windows 10 version 22h2 +16 more +18 moreWindows DWM Core Library Information Disclosure Vulnerability5.5 Medium
- microsoft windows 11 version 24h2, windows 11 version 25h2, windows 11 version 26h1 +5 more +7 moreWindows DWM Core Library Information Disclosure Vulnerability5.5 Medium
- microsoft windows 10 version 1607, windows 10 version 1809, windows 10 version 21h2 +24 more +26 moreWindows Remote Desktop Client Information Disclosure Vulnerability6.5 Medium
- microsoft windows 10 version 1607, windows 10 version 1809, windows 10 version 21h2 +24 more +26 moreWindows Encrypting File System (EFS) Information Disclosure Vulnerability5.5 Medium
- intel neural processing unit driverOut-of-bounds read for the Intel(R) NPU Driver for all versions within Ring 3: User Applications...6.9 Medium
- intel proset\/wireless wifiOut-of-bounds read for some Intel(R) PROSet/Wireless WiFi Software for Windows within Ring 0:...7.0 High
- intel corporation intel(r) proset/wireless wifi software, intel proset\/wireless wifi +1 moreOut-of-bounds read for some Intel(R) PROSet/Wireless WiFi Software within Ring 2: Device Drivers...7.2 High
- vimVim: Out-of-bounds Access in Popup Opacity Handling4.6 Medium
- tesseract-ocr tesseractTesseract: Heap OOB read in the DAWG loader6.7 Medium
- rapid7 velociraptorVelociraptor Multiple Crashes in NTFS Parser when applied to invalid NTFS Volumes6.2 Medium
- ivanti endpoint managerAn out-of-bounds read in the Agent of Ivanti Endpoint Manager before version 2024 SU7 allows a...7.5 High
- siemens parasolid v38.0, parasolid v38.1, simcenter femap +2 moreA vulnerability has been identified in Parasolid V38.0 (All versions < V38.0.235), Parasolid V38...7.3 High
- siemens simcenter femapA vulnerability has been identified in Simcenter Femap (All versions < V2606.0001). The affected...7.3 High
- siemens simcenter femapA vulnerability has been identified in Simcenter Femap (All versions < V2606.0001). The affected...7.3 High
- siemens solid edge se2025, solid edge se2026 +1 moreA vulnerability has been identified in Solid Edge SE2025 (All versions < V225.0 Update 15), Solid...7.3 High
- siemens solid edge se2025, solid edge se2026 +1 moreA vulnerability has been identified in Solid Edge SE2025 (All versions < V225.0 Update 15), Solid...7.3 High
- siemens solid edge se2025, solid edge se2026 +1 moreA vulnerability has been identified in Solid Edge SE2025 (All versions < V225.0 Update 15), Solid...7.3 High
- zephyrproject zephyrUpdateHub probe: uninitialized-heap out-of-bounds read of network-supplied metadata3.7 Low
- linuxwifi: cfg80211: bound element ID read when checking non-inheritance7.1 High
- linuxsmb/client: handle overlapping allocated ranges in fallocate9.8 Critical
- linuxwifi: ath6kl: fix OOB read from firmware num_msg in TX complete handler8.1 High
- linuxwifi: ath6kl: fix OOB read from firmware IE lengths in connect event8.3 High
- linuxASoC: tas2781: bound firmware description string parsing7.1 High
- linuxsmb: client: validate DFS referral PathConsumed9.1 Critical
- linuxwifi: mwifiex: bound uAP association event IEs to the event buffer8.8 High
- linuxdrm/xe/vm: Fix BO prefetch with CONSULT_MEM_ADVISE_PREF_LOC7.3 High
- linuxdrm/virtio: bound EDID block reads to the response buffer7.7 High
- Show moreLoading…