CWE-125: Out-of-bounds Read
The product reads data past the end, or before the beginning, of the intended buffer.
Also known as OOB read.
A kind of CWE-119 Buffer Overflow.
From the CWE List. © The MITRE Corporation.
Newest
- microsoft windows 10 version 1809, windows 10 version 21h2, windows 10 version 22h2 +18 more +20 moreMicrosoft Graphics Component Elevation of Privilege Vulnerability7.8 High
- microsoft windows 10 version 1607, windows 10 version 1809, windows 10 version 21h2 +26 more +28 moreWindows Remote Desktop Client Information Disclosure Vulnerability6.5 Medium
- microsoft windows 10 version 1607, windows 10 version 1809, windows 10 version 21h2 +26 more +28 moreWindows Device Association Service Information Disclosure Vulnerability5.5 Medium
- microsoft windows 10 version 1607, windows 10 version 1809, windows 10 version 21h2 +26 more +28 moreWindows Message Queuing Queue Manager Information Disclosure Vulnerability7.5 High
- microsoft windows 10 version 1607, windows 10 version 1809, windows 10 version 21h2 +25 more +27 moreWindows Device Association Service Information Disclosure Vulnerability6.5 Medium
- microsoft windows server 2012, windows server 2012 (server core installation), windows server 2012 r2 +8 more +10 moreRemote Desktop Gateway Service Information Disclosure Vulnerability6.5 Medium
- microsoft windows 10 version 1809, windows 10 version 21h2, windows 10 version 22h2 +18 more +20 moreHID Parser Library Information Disclosure Vulnerability5.5 Medium
- microsoft windows 10 version 1809, windows 10 version 21h2, windows 10 version 22h2 +18 more +20 moreWindows Human Interface Device Information Disclosure Vulnerability5.5 Medium
- microsoft windows 10 version 1809, windows 10 version 21h2, windows 10 version 22h2 +18 more +20 moreWindows Human Interface Device Information Disclosure Vulnerability5.5 Medium
- microsoft windows 10 version 21h2, windows 10 version 22h2, windows 11 version 23h2 +11 more +13 moreWindows Hello Information Disclosure Vulnerability5.5 Medium
- microsoft paintWindows Paint Remote Code Execution Vulnerability7.0 High
- microsoft windows 10 version 1607, windows 10 version 1809, windows 10 version 21h2 +26 more +28 moreWindows Internet Key Exchange (IKE) Extension Denial of Service Vulnerability7.5 High
- microsoft windows 10 version 1809, windows 10 version 21h2, windows 10 version 22h2 +18 more +20 moreWindows Spaceport.sys Elevation of Privilege Vulnerability7.8 High
- microsoft windows 10 version 1607, windows 10 version 1809, windows 10 version 21h2 +13 more +15 moreWindows Bluetooth Driver Elevation of Privilege Vulnerability6.8 Medium
- microsoft windows 10 version 1607, windows 10 version 1809, windows 10 version 21h2 +22 more +24 moreMicrosoft Bluetooth Driver Information Disclosure Vulnerability5.5 Medium
- microsoft windows 10 version 1607, windows 10 version 1809, windows 10 version 21h2 +26 more +28 moreWindows Print Spooler Components Information Disclosure Vulnerability5.5 Medium
- microsoft windows 10 version 1607, windows 10 version 1809, windows 10 version 21h2 +26 more +28 moreWindows Volume Manager Extension Driver Elevation of Privilege Vulnerability7.0 High
- microsoft windows 10 version 1809, windows 10 version 21h2, windows 10 version 22h2 +18 more +20 moreWindows Hyper-V Information Disclosure Vulnerability6.5 Medium
- microsoft windows 10 version 1607, windows 10 version 1809, windows 10 version 21h2 +26 more +28 moreWindows Active Directory Domain Services Denial of Service Vulnerability6.5 Medium
- microsoft windows 10 version 1607, windows 10 version 1809, windows 10 version 21h2 +26 more +28 moreNetwork Policy Server (NPS) Denial of Service Vulnerability7.5 High
- microsoft windows 10 version 1607, windows 10 version 1809, windows 10 version 21h2 +22 more +24 moreWindows Local Security Authority Subsystem Service (LSASS) Denial of Service Vulnerability6.5 Medium
- microsoft windows server 2012, windows server 2012 (server core installation), windows server 2012 r2 +8 more +10 moreRole: DNS Server Denial of Service Vulnerability7.5 High
- microsoft windows 10 version 1607, windows 10 version 1809, windows 10 version 21h2 +26 more +28 moreWindows IKE Extension Information Disclosure Vulnerability6.5 Medium
- microsoft windows 10 version 1809, windows 11 version 24h2, windows 11 version 25h2 +12 more +14 moreWindows Local Security Authority Subsystem Service (LSASS) Denial of Service Vulnerability7.5 High
- microsoft windows 10 version 1607, windows 10 version 1809, windows 10 version 21h2 +26 more +28 moreWindows iSCSI Information Disclosure Vulnerability5.5 Medium
- microsoft windows 10 version 1607, windows 10 version 1809, windows 10 version 21h2 +26 more +28 moreHTTP.sys Remote Code Execution Vulnerability7.8 High
- microsoft windows 10 version 1607, windows 10 version 1809, windows 10 version 21h2 +26 more +28 moreMicrosoft Windows Search Component Information Disclosure Vulnerability5.5 Medium
- microsoft windows 10 version 1607, windows 10 version 1809, windows server 2012 +12 more +14 moreWindows DNS Denial of Service Vulnerability6.5 Medium
- microsoft windows 10 version 1607, windows 10 version 1809, windows 10 version 21h2 +26 more +28 moreMicrosoft Windows Search Component Information Disclosure Vulnerability5.5 Medium
- microsoft windows 10 version 1607, windows 10 version 1809, windows 10 version 21h2 +22 more +24 moreWindows Remote POS Driver Information Disclosure Vulnerability5.5 Medium
- microsoft windows 10 version 1607, windows 10 version 1809, windows 10 version 21h2 +25 more +27 moreWindows Bluetooth Port Driver Remote Code Execution7.1 High
- microsoft windows server 2022, windows server 2025, windows server 2025 (server core installation) +2 moreWindows DNS Remote Code Execution Vulnerability6.5 Medium
- microsoft windows 10 version 1607, windows 10 version 1809, windows 10 version 21h2 +26 more +28 moreWindows Kernel Information Disclosure Vulnerability4.7 Medium
- microsoft windows 10 version 1809, windows 10 version 21h2, windows 10 version 22h2 +18 more +20 moreDesktop Window Manager Information Disclosure Vulnerability4.7 Medium
- microsoft windows 10 version 1607, windows 10 version 1809, windows 10 version 21h2 +26 more +28 moreWindows Overlay Filter Information Disclosure Vulnerability5.5 Medium
- microsoft windows 10 version 1607, windows 10 version 1809, windows 10 version 21h2 +26 more +28 moreWindows Overlay Filter Remote Code Execution Vulnerability7.8 High
- microsoft windows 10 version 1607, windows 10 version 1809, windows 10 version 21h2 +26 more +28 moreWindows Overlay Filter Elevation of Privilege Vulnerability7.8 High
- microsoft windows 10 version 1809, windows 10 version 21h2, windows 10 version 22h2 +18 more +20 moreWindows AppX Deployment Service Information Disclosure Vulnerability5.5 Medium
- microsoft windows 10 version 1607, windows 10 version 1809, windows 10 version 21h2 +22 more +24 moreSQLite Elevation of Privilege Vulnerability7.8 High
- microsoft windows 10 version 1607, windows 10 version 1809, windows 10 version 21h2 +26 more +28 moreWindows Kernel Denial of Service Vulnerability5.3 Medium
- microsoft defender for endpoint for windowsMicrosoft Defender Information Disclosure Vulnerability5.5 Medium
- microsoft 365 apps, 365 apps for enterprise, office 365 for mac +8 more +10 moreMicrosoft Excel Remote Code Execution Vulnerability8.8 High
- microsoft 365 apps, 365 apps for enterprise, office ltsc 2021 +3 more +5 moreMicrosoft Office Access Information Disclosure Vulnerability6.5 Medium
- microsoft 365 apps, 365 apps for enterprise, office ltsc 2021 +3 more +5 moreMicrosoft Office Access Remote Code Execution Vulnerability8.8 High
- microsoft 365 apps, 365 apps for enterprise, office ltsc 2021 +3 more +5 moreMicrosoft Office Word Information Disclosure Vulnerability6.5 Medium
- adobe framemaker 2022, framemaker 2026 +1 moreAdobe Framemaker | Out-of-bounds Read (CWE-125)5.5 Medium
- adobe framemaker 2022, framemaker 2026 +1 moreAdobe Framemaker | Out-of-bounds Read (CWE-125)5.5 Medium
- red hat enterprise linux 10, enterprise linux 6, enterprise linux 7 +2 more +4 moreBluez: bluez: stack-based out-of-bounds read in btmon via unvalidated num_keys in return_link_keys_evt()5.5 Medium
- espressif esp-idfESF-IDF: Bluetooth Classic L2CAP Heap Memory Disclosure Allowing Unauthorized Access to Sensitive Data6.5 Medium
- freerdpFreeRDP 3.17.1 before 3.32.0 Heap Buffer Over-Read via Proxy DRDYNVC Channel Name6.9 Medium
- Show moreLoading…