CWE-125: Out-of-bounds Read, page 19
Filter
The product reads data past the end, or before the beginning, of the intended buffer.
What the weakness is: CWE-125 at MITRE
Ask an AI about CWE-125
ChatGPTClaudePerplexityGoogle AI Mode
Show the prompt
Explain CWE-125: Out-of-bounds Read and how to prevent and detect it in code. Use https://cwe.mitre.org/data/definitions/125.html and https://cve.bz/cve/cwe/125?via=ask-ai-copy for recent CVEs with this weakness. Cite the sources.Opens a third-party assistant; its answer is its own, not cve.bz's. The prompt holds only this weakness's id and public links.
- 5.7CVE-2026-69572EPSS 0.9%
Out-of-bounds read in Windows SMB Client allows an authorized attacker to disclose information over a network.
- 5.5CVE-2026-69568EPSS 0.4%
Out-of-bounds read in Windows Storage Spaces Controller allows an authorized attacker to disclose information locally.
- 6.5CVE-2026-69562EPSS 0.9%
Out-of-bounds read in SQL Server allows an unauthorized attacker to disclose information over a network.
- 7.8CVE-2026-69561EPSS 0.3%
Out-of-bounds read in Windows CD-ROM Driver allows an authorized attacker to elevate privileges locally.
- 7.0CVE-2026-69549EPSS 0.3%
Out-of-bounds read in Virtual Hard Disk (VHD) Miniport Driver allows an authorized attacker to elevate privileges locally.
- 7.8CVE-2026-69538EPSS 0.3%
Out-of-bounds read in Windows Spaceport.sys allows an authorized attacker to execute code locally.
- 7.8CVE-2026-69532EPSS 0.3%
Out-of-bounds read in Windows NTFS allows an authorized attacker to elevate privileges locally.
- 5.5CVE-2026-69527EPSS 0.4%
Out-of-bounds read in Windows USB Mass Storage Class Driver allows an authorized attacker to disclose information locally.
- 7.8CVE-2026-69509EPSS 0.3%
Heap-based buffer overflow in Windows Fax Service allows an authorized attacker to elevate privileges locally.
- 8.0CVE-2026-69505EPSS 0.8%
Out-of-bounds read in Windows NTFS allows an authorized attacker to elevate privileges over a network.
- 5.5CVE-2026-69504EPSS 0.4%
Out-of-bounds read in Windows NTFS allows an authorized attacker to disclose information locally.
- 8.8CVE-2026-69494EPSS 0.8%
Out-of-bounds read in Windows Event Logging Service allows an unauthorized attacker to execute code over a network.
- 9.8CVE-2026-69493EPSS 1.0%
Out-of-bounds read in Windows Event Logging Service allows an unauthorized attacker to execute code over a network.
- 6.8CVE-2026-69490EPSS 0.4%
Out-of-bounds read in Windows USB Mass Storage Class Driver allows an unauthorized attacker to elevate privileges with a physical attack.
- 4.7CVE-2026-69483EPSS 0.3%
Out-of-bounds read in Windows Image Acquisition allows an authorized attacker to disclose information locally.
- 8.0CVE-2026-69458EPSS 0.8%
Out-of-bounds read in Windows BitLocker allows an authorized attacker to elevate privileges over a network.
- 5.5CVE-2026-69457EPSS 0.4%
Out-of-bounds read in Windows USB Driver allows an authorized attacker to disclose information locally.
- 7.8CVE-2026-69450EPSS 0.3%
Out-of-bounds read in Windows Error Reporting allows an authorized attacker to elevate privileges locally.
- 7.5CVE-2026-69443EPSS 1.0%
Out-of-bounds read in Microsoft Azure Attestation service and Device Health Attestation Service allows an unauthorized attacker to disclose information over a network.
- 7.5CVE-2026-69428EPSS 1.2%
Out-of-bounds read in Windows LDAP - Lightweight Directory Access Protocol allows an unauthorized attacker to deny service over a network.
- 8.0CVE-2026-69427EPSS 0.8%
Out-of-bounds read in Windows VOLSNAP.SYS allows an authorized attacker to elevate privileges over a network.
- 5.7CVE-2026-69393EPSS 0.9%
Out-of-bounds read in Windows Spaceport.sys allows an authorized attacker to disclose information over a network.
- 5.5CVE-2026-69390EPSS 0.4%
Out-of-bounds read in Windows Spaceport.sys allows an authorized attacker to disclose information locally.
- 4.6CVE-2026-69381EPSS 0.5%
Out-of-bounds read in Windows Storage Port Driver allows an unauthorized attacker to disclose information with a physical attack.
- 5.5CVE-2026-69376EPSS 0.4%
Out-of-bounds read in Microsoft Standard XPS allows an authorized attacker to disclose information locally.
- 6.7CVE-2026-69373EPSS 0.3%
Integer overflow or wraparound in Windows Overlay Filter allows an authorized attacker to elevate privileges locally.
- 5.7CVE-2026-69372EPSS 0.9%
Out-of-bounds read in Windows Network File System allows an authorized attacker to deny service over a network.
- 5.5CVE-2026-69369EPSS 0.4%
Out-of-bounds read in Windows DNS allows an authorized attacker to disclose information locally.
- 5.5CVE-2026-69367EPSS 0.4%
Out-of-bounds read in Microsoft Standard XPS allows an authorized attacker to disclose information locally.
- 8.0CVE-2026-69365EPSS 0.8%
Out-of-bounds read in Microsoft Local Security Authority Server (lsasrv) allows an authorized attacker to elevate privileges over a network.
- 5.5CVE-2026-69353EPSS 0.4%
Out-of-bounds read in Windows Text Shaping allows an authorized attacker to disclose information locally.
- 5.5CVE-2026-69345EPSS 0.4%
Out-of-bounds read in Microsoft Standard XPS allows an authorized attacker to disclose information locally.
- 5.5CVE-2026-69344EPSS 0.4%
Out-of-bounds read in Windows Print Spooler Components allows an authorized attacker to disclose information locally.
- 5.5CVE-2026-69343EPSS 0.4%
Out-of-bounds read in Windows Overlay Filter allows an authorized attacker to disclose information locally.
- 7.5CVE-2026-69342EPSS 1.2%
Out-of-bounds read in Windows DHCP Server allows an unauthorized attacker to deny service over a network.
- 7.1CVE-2026-69340EPSS 0.6%
Heap-based buffer overflow in Windows NTFS allows an authorized attacker to elevate privileges over a network.
- 8.8CVE-2026-69334EPSS 0.8%
Heap-based buffer overflow in Windows Volume Manager Extension Driver allows an unauthorized attacker to execute code over a network.
- 8.0CVE-2026-69332EPSS 0.8%
Out-of-bounds read in Windows NTFS allows an authorized attacker to elevate privileges over a network.
- 7.5CVE-2026-69329EPSS 1.2%
Out-of-bounds read in BranchCache allows an unauthorized attacker to deny service over a network.
- 7.8CVE-2026-69324EPSS 0.3%
Access of resource using incompatible type ('type confusion') in Windows Performance Monitor allows an authorized attacker to elevate privileges locally.
- 5.5CVE-2026-69318EPSS 0.4%
Out-of-bounds read in Windows Imaging Component allows an authorized attacker to disclose information locally.
- 5.7CVE-2026-69317EPSS 0.9%
Out-of-bounds read in Remote Desktop Client allows an authorized attacker to disclose information over a network.
- 7.8CVE-2026-69312EPSS 0.3%
Out-of-bounds read in Windows NTFS allows an authorized attacker to elevate privileges locally.
- 5.5CVE-2026-69308EPSS 0.4%
Out-of-bounds read in Microsoft Standard XPS allows an authorized attacker to disclose information locally.
- 5.5CVE-2026-69303EPSS 0.4%
Out-of-bounds read in Push Message Routing Service allows an authorized attacker to disclose information locally.
- 7.8CVE-2026-69295EPSS 0.3%
Out-of-bounds read in Windows USB Driver allows an authorized attacker to elevate privileges locally.
- 5.5CVE-2026-69286EPSS 0.4%
Out-of-bounds read in Windows USB Audio Class driver (usbaudio.sys) allows an authorized attacker to disclose information locally.
- 7.8CVE-2026-69265EPSS 0.3%
Out-of-bounds read in Windows NTFS allows an authorized attacker to elevate privileges locally.
- 6.5CVE-2026-68898EPSS 0.9%
Out-of-bounds read in Windows iSCSI allows an unauthorized attacker to deny service over a network.
- 4.7CVE-2026-68891EPSS 0.3%
Out-of-bounds read in Microsoft Standard XPS allows an authorized attacker to disclose information locally.