cve.bz

CWE-125: Out-of-bounds Read, page 17

Filter

The product reads data past the end, or before the beginning, of the intended buffer.

What the weakness is: CWE-125 at MITRE

Ask an AI about CWE-125

ChatGPTClaudePerplexityGoogle AI Mode

Show the promptExplain CWE-125: Out-of-bounds Read and how to prevent and detect it in code. Use https://cwe.mitre.org/data/definitions/125.html and https://cve.bz/cve/cwe/125?via=ask-ai-copy for recent CVEs with this weakness. Cite the sources.

Opens a third-party assistant; its answer is its own, not cve.bz's. The prompt holds only this weakness's id and public links.

  1. 4.3CVE-2026-87596EPSS 0.2%

    Out of bounds read in ANGLE in Google Chrome prior to 153.0.8010.36 allowed a remote attacker to read memory outside the sandbox via a crafted HTML page. (Chromium security severity: High)

  2. 4.3CVE-2026-87592EPSS 0.3%

    Out of bounds read in Tint in Google Chrome prior to 153.0.8010.36 allowed a remote attacker to potentially read memory inside the sandbox via a crafted HTML page. (Chromium security severity: Low)

  3. 4.3CVE-2026-87586EPSS 0.2%

    Out of bounds read in ANGLE in Google Chrome prior to 153.0.8010.36 allowed a remote attacker to read memory outside the sandbox via a crafted HTML page. (Chromium security severity: Medium)

  4. 2.7CVE-2026-87525EPSS 0.1%

    Out of bounds read in Chromoting in Google Chrome on on Windows prior to 153.0.8010.36 allowed a local attacker to read memory outside the sandbox via a local program. (Chromium security severity: High)

  5. 8.8CVE-2026-87440EPSS 0.4%

    Out of bounds read in Media in Google Chrome prior to 153.0.8010.36 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: High)

  6. 3.3CVE-2026-86564EPSS 0.1%

    A flaw was found in DPDK lib/vhost. Missing length validation before reading command_data in the virtio-net control-queue handler can cause an out-of-bounds read and a host process crash.

  7. 6.1CVE-2026-18090EPSS 0.2%

    A flaw was found in gdk-pixbuf. This vulnerability allows a remote attacker to cause a heap out-of-bounds read by providing a specially crafted Apple Icon Image (.icns) file. The uncompress() function, which handles RLE-encoded ICNS icon d…

  8. 5.5CVE-2026-81991EPSS 0.3%

    Acrobat Reader is affected by an out-of-bounds read vulnerability that could lead to disclosure of sensitive memory. An attacker could leverage this vulnerability to disclose sensitive information. Exploitation of this issue requires user …

  9. 5.5CVE-2026-81982EPSS 0.3%

    Acrobat Reader is affected by an out-of-bounds read vulnerability that could lead to disclosure of sensitive memory. An attacker could leverage this vulnerability to disclose sensitive information. Exploitation of this issue requires user …

  10. 5.5CVE-2026-81978EPSS 0.3%

    Acrobat Reader is affected by an out-of-bounds read vulnerability that could lead to disclosure of sensitive memory. An attacker could leverage this vulnerability to disclose sensitive information. Exploitation of this issue requires user …

  11. 5.5CVE-2026-80160EPSS 0.3%

    Acrobat Reader is affected by an out-of-bounds read vulnerability that could lead to disclosure of sensitive memory. An attacker could leverage this vulnerability to disclose sensitive information. Exploitation of this issue requires user …

  12. 5.5CVE-2026-79910EPSS 0.3%

    Acrobat Reader is affected by an out-of-bounds read vulnerability that could lead to disclosure of sensitive memory. An attacker could leverage this vulnerability to disclose sensitive information. Exploitation of this issue requires user …

  13. 6.5CVE-2026-66308EPSS 1.1%

    Out-of-bounds read in Skype for Business allows an authorized attacker to deny service over a network.

  14. 5.5CVE-2026-85875EPSS 0.5%

    Out-of-bounds read in Microsoft Office Excel allows an unauthorized attacker to disclose information locally.

  15. 7.5CVE-2026-84001EPSS 1.2%

    Out-of-bounds read in Windows Key Distribution Center allows an unauthorized attacker to deny service over a network.

  16. 7.5CVE-2026-83989EPSS 1.2%

    Out-of-bounds read in Windows Services for NFS ONCRPC XDR Driver allows an unauthorized attacker to deny service over a network.

  17. 5.5CVE-2026-83501EPSS 0.4%

    Out-of-bounds read in Windows Virtualization-Based Security (VBS) Enclave allows an authorized attacker to disclose information locally.

  18. 7.8CVE-2026-81957EPSS 0.5%

    Out-of-bounds read in Microsoft Office Excel allows an unauthorized attacker to execute code locally.

  19. 7.8CVE-2026-81956EPSS 0.5%

    Out-of-bounds read in Microsoft Office Excel allows an unauthorized attacker to execute code locally.

  20. 5.5CVE-2026-81400EPSS 0.5%

    Out-of-bounds read in Microsoft Office Excel allows an unauthorized attacker to disclose information locally.

  21. 5.5CVE-2026-81395EPSS 0.5%

    Out-of-bounds read in Microsoft Office Excel allows an unauthorized attacker to disclose information locally.

  22. 5.5CVE-2026-81393EPSS 0.5%

    Out-of-bounds read in Microsoft Office Excel allows an unauthorized attacker to disclose information locally.

  23. 5.5CVE-2026-81392EPSS 0.5%

    Out-of-bounds read in Microsoft Office Excel allows an unauthorized attacker to disclose information locally.

  24. 5.5CVE-2026-81390EPSS 0.5%

    Out-of-bounds read in Microsoft Office Excel allows an unauthorized attacker to disclose information locally.

  25. 8.8CVE-2026-80096EPSS 0.9%

    Out-of-bounds read in Windows Remote Desktop Services allows an authorized attacker to elevate privileges over a network.

  26. 6.5CVE-2026-80090EPSS 0.9%

    Out-of-bounds read in Microsoft Office Word allows an unauthorized attacker to disclose information over a network.

  27. 6.5CVE-2026-80089EPSS 0.9%

    Out-of-bounds read in Microsoft Office allows an unauthorized attacker to disclose information over a network.

  28. 6.5CVE-2026-80088EPSS 0.9%

    Out-of-bounds read in Microsoft Office Word allows an unauthorized attacker to disclose information over a network.

  29. 6.5CVE-2026-80086EPSS 0.9%

    Out-of-bounds read in Microsoft Office PowerPoint allows an unauthorized attacker to disclose information over a network.

  30. 6.5CVE-2026-80084EPSS 0.9%

    Out-of-bounds read in Microsoft Office Outlook allows an unauthorized attacker to disclose information over a network.

  31. 6.5CVE-2026-80082EPSS 0.9%

    Out-of-bounds read in Microsoft Office allows an unauthorized attacker to disclose information over a network.

  32. 6.5CVE-2026-80079EPSS 0.9%

    Out-of-bounds read in Microsoft Office Word allows an unauthorized attacker to disclose information over a network.

  33. 6.5CVE-2026-80078EPSS 0.9%

    Out-of-bounds read in Microsoft Office allows an unauthorized attacker to disclose information over a network.

  34. 6.5CVE-2026-80076EPSS 0.9%

    Out-of-bounds read in Microsoft Office allows an unauthorized attacker to disclose information over a network.

  35. 6.5CVE-2026-80073EPSS 0.9%

    Out-of-bounds read in Microsoft Office Outlook allows an unauthorized attacker to disclose information over a network.

  36. 6.5CVE-2026-78522EPSS 0.9%

    Out-of-bounds read in Microsoft Office Word allows an unauthorized attacker to disclose information over a network.

  37. 6.5CVE-2026-78520EPSS 0.9%

    Out-of-bounds read in Microsoft Office Outlook allows an unauthorized attacker to execute code over a network.

  38. 8.8CVE-2026-78518EPSS 0.9%

    Out-of-bounds read in Microsoft Office Excel allows an unauthorized attacker to execute code over a network.

  39. 6.5CVE-2026-78515EPSS 0.9%

    Out-of-bounds read in Microsoft Office Excel allows an unauthorized attacker to disclose information over a network.

  40. 5.5CVE-2026-78513EPSS 0.5%

    Out-of-bounds read in Microsoft Office PowerPoint allows an unauthorized attacker to disclose information locally.

  41. 4.6CVE-2026-78508EPSS 0.5%

    Out-of-bounds read in Windows CD-ROM Driver allows an unauthorized attacker to disclose information with a physical attack.

  42. 6.5CVE-2026-78503EPSS 0.9%

    Out-of-bounds read in Microsoft Office Word allows an unauthorized attacker to disclose information over a network.

  43. 6.5CVE-2026-78502EPSS 0.9%

    Out-of-bounds read in Microsoft Office Word allows an unauthorized attacker to disclose information over a network.

  44. 4.3CVE-2026-78455EPSS 0.5%

    Out-of-bounds read in Xbox allows an unauthorized attacker to disclose information with a physical attack.

  45. 5.5CVE-2026-78454EPSS 0.4%

    Out-of-bounds read in Windows CD-ROM Driver allows an authorized attacker to disclose information locally.

  46. 4.6CVE-2026-78452EPSS 0.5%

    Out-of-bounds read in Microsoft Windows SCSI Class System File allows an unauthorized attacker to disclose information with a physical attack.

  47. 6.5CVE-2026-78441EPSS 0.9%

    Out-of-bounds read in Windows OLE DB allows an unauthorized attacker to disclose information over a network.

  48. 6.5CVE-2026-77911EPSS 0.9%

    Out-of-bounds read in Microsoft Office Word allows an unauthorized attacker to disclose information over a network.

  49. 7.5CVE-2026-77895EPSS 1.2%

    Out-of-bounds read in Windows DHCP Server allows an unauthorized attacker to deny service over a network.

  50. 7.5CVE-2026-77893EPSS 1.2%

    Out-of-bounds read in Windows DHCP Server allows an unauthorized attacker to deny service over a network.