CWE-125: Out-of-bounds Read, page 24
Filter
The product reads data past the end, or before the beginning, of the intended buffer.
What the weakness is: CWE-125 at MITRE
Ask an AI about CWE-125
ChatGPTClaudePerplexityGoogle AI Mode
Show the prompt
Explain CWE-125: Out-of-bounds Read and how to prevent and detect it in code. Use https://cwe.mitre.org/data/definitions/125.html and https://cve.bz/cve/cwe/125?via=ask-ai-copy for recent CVEs with this weakness. Cite the sources.Opens a third-party assistant; its answer is its own, not cve.bz's. The prompt holds only this weakness's id and public links.
- 5.5CVE-2026-68797EPSS 0.5%
Out-of-bounds read in Microsoft Office Excel allows an unauthorized attacker to disclose information locally.
- 7.8CVE-2026-68793EPSS 0.5%
Out-of-bounds read in Microsoft Office Excel allows an unauthorized attacker to execute code locally.
- 5.5CVE-2026-66809EPSS 0.4%
Out-of-bounds read in Microsoft Office allows an unauthorized attacker to disclose information locally.
- 5.5CVE-2026-66806EPSS 0.4%
Off-by-one error in Microsoft Office Word allows an unauthorized attacker to disclose information locally.
- 7.8CVE-2026-65787EPSS 0.3%
Heap-based buffer overflow in Desktop Window Manager allows an authorized attacker to elevate privileges locally.
- 7.8CVE-2026-65786EPSS 0.3%
Heap-based buffer overflow in Desktop Window Manager allows an authorized attacker to elevate privileges locally.
- 5.5CVE-2026-65784EPSS 0.4%
Out-of-bounds read in Windows NTFS allows an authorized attacker to disclose information locally.
- 5.5CVE-2026-65662EPSS 0.4%
Out-of-bounds read in Windows GDI allows an authorized attacker to disclose information locally.
- 5.5CVE-2026-64917EPSS 0.5%
Out-of-bounds read in Microsoft Office Word allows an unauthorized attacker to disclose information locally.
- 7.8CVE-2026-64909EPSS 0.5%
Integer underflow (wrap or wraparound) in Microsoft Office allows an unauthorized attacker to execute code locally.
- 5.5CVE-2026-64899EPSS 0.5%
Out-of-bounds read in Microsoft Office allows an unauthorized attacker to disclose information locally.
- 5.5CVE-2026-63531EPSS 0.5%
Out-of-bounds read in Microsoft Office Word allows an unauthorized attacker to disclose information locally.
- 5.5CVE-2026-63530EPSS 0.5%
Out-of-bounds read in Microsoft Office Word allows an unauthorized attacker to disclose information locally.
- 5.5CVE-2026-63529EPSS 0.5%
Out-of-bounds read in Microsoft Office allows an unauthorized attacker to disclose information locally.
- 5.5CVE-2026-63528EPSS 0.5%
Out-of-bounds read in Microsoft Office Word allows an unauthorized attacker to disclose information locally.
- 5.5CVE-2026-63524EPSS 0.5%
Out-of-bounds read in Microsoft Office allows an unauthorized attacker to disclose information locally.
- 5.5CVE-2026-63521EPSS 0.4%
Out-of-bounds read in Microsoft Office Word allows an unauthorized attacker to disclose information locally.
- 5.5CVE-2026-63517EPSS 0.5%
Out-of-bounds read in Microsoft Office allows an unauthorized attacker to disclose information locally.
- 7.8CVE-2026-63515EPSS 0.5%
Out-of-bounds read in Microsoft Office allows an unauthorized attacker to execute code locally.
- 5.5CVE-2026-62887EPSS 0.4%
Out-of-bounds read in Windows NTFS allows an authorized attacker to disclose information locally.
- 7.8CVE-2026-62880EPSS 0.3%
Out-of-bounds read in Windows NTFS allows an authorized attacker to elevate privileges locally.
- 7.8CVE-2026-62876EPSS 0.3%
Out-of-bounds read in Windows Win32K allows an authorized attacker to elevate privileges locally.
- 5.5CVE-2026-62842EPSS 0.5%
Out-of-bounds read in Microsoft Office allows an unauthorized attacker to disclose information locally.
- 6.5CVE-2026-62814EPSS 0.5%
Integer underflow (wrap or wraparound) in Windows DHCP Server allows an unauthorized attacker to disclose information over an adjacent network.
- 5.5CVE-2026-62796EPSS 0.4%
Out-of-bounds read in Windows NTFS allows an authorized attacker to disclose information locally.
- 5.5CVE-2026-62786EPSS 0.4%
Out-of-bounds read in Windows Win32K allows an authorized attacker to disclose information locally.
- 7.5CVE-2026-62782EPSS 0.9%
Out-of-bounds read in Windows SMB Client allows an unauthorized attacker to disclose information over a network.
- 6.5CVE-2026-62745EPSS 0.5%
Integer underflow (wrap or wraparound) in Windows DHCP Server allows an unauthorized attacker to disclose information over an adjacent network.
- 5.5CVE-2026-62743EPSS 0.4%
Out-of-bounds read in Windows Win32K allows an authorized attacker to disclose information locally.
- 6.5CVE-2026-62742EPSS 0.5%
Integer underflow (wrap or wraparound) in Windows DHCP Server allows an unauthorized attacker to disclose information over an adjacent network.
- 5.5CVE-2026-62738EPSS 0.4%
Out-of-bounds read in Windows Management Instrumentation allows an authorized attacker to disclose information locally.
- 7.8CVE-2026-62733EPSS 0.3%
Out-of-bounds read in Windows Win32K allows an authorized attacker to elevate privileges locally.
- 7.0CVE-2026-62728EPSS 0.2%
Time-of-check time-of-use (toctou) race condition in Windows Common Log File System Driver allows an authorized attacker to elevate privileges locally.
- 6.5CVE-2026-62720EPSS 0.5%
Integer underflow (wrap or wraparound) in Windows DHCP Server allows an unauthorized attacker to disclose information over an adjacent network.
- 6.5CVE-2026-62718EPSS 0.5%
Integer underflow (wrap or wraparound) in Windows DHCP Server allows an unauthorized attacker to disclose information over an adjacent network.
- 6.5CVE-2026-62716EPSS 0.5%
Integer underflow (wrap or wraparound) in Windows DHCP Server allows an unauthorized attacker to disclose information over an adjacent network.
- 6.5CVE-2026-62715EPSS 0.5%
Integer underflow (wrap or wraparound) in Windows DHCP Server allows an unauthorized attacker to disclose information over an adjacent network.
- 6.5CVE-2026-62714EPSS 0.5%
Integer underflow (wrap or wraparound) in Windows DHCP Server allows an unauthorized attacker to disclose information over an adjacent network.
- 5.5CVE-2026-62703EPSS 0.4%
Out-of-bounds read in Windows DWM Core Library allows an authorized attacker to disclose information locally.
- 5.5CVE-2026-61933EPSS 0.4%
Out-of-bounds read in Windows DWM Core Library allows an authorized attacker to disclose information locally.
- 7.5CVE-2026-61924EPSS 0.9%
Out-of-bounds read in Remote Desktop Client allows an unauthorized attacker to disclose information over a network.
- 6.5CVE-2026-61921EPSS 0.9%
Out-of-bounds read in Remote Desktop Client allows an unauthorized attacker to disclose information over a network.
- 7.5CVE-2026-61918EPSS 0.9%
Out-of-bounds read in Remote Desktop Client allows an unauthorized attacker to disclose information over a network.
- 5.5CVE-2026-59128EPSS 0.4%
Out-of-bounds read in Windows Encrypting File System (EFS) allows an authorized attacker to disclose information locally.
- 6.9CVE-2026-20786EPSS 0.1%
Out-of-bounds read for the Intel(R) NPU Driver for all versions within Ring 3: User Applications may allow a denial of service. Unprivileged software adversary with an authenticated user combined with a low complexity attack may enable den…
- 7.0CVE-2026-20778EPSS 0.4%
Out-of-bounds read for some Intel(R) PROSet/Wireless WiFi Software for Windows within Ring 0: Kernel may allow a denial of service. Unprivileged software adversary with an unauthenticated user combined with a high complexity attack may ena…
- 7.2CVE-2026-20749EPSS 0.3%
Out-of-bounds read for some Intel(R) PROSet/Wireless WiFi Software within Ring 2: Device Drivers may allow an escalation of privilege. Network adversary with an unauthenticated user combined with a low complexity attack may enable escalati…
- 4.6CVE-2026-73075EPSS 0.09%
Vim is an open source, command line text editor. From 9.2.0469 until 9.2.0843, popup_mark_opacity_zindex() in src/popupwin.c can use a negative w_winrow for a text-property-anchored popup with clipwindow and opacity, indexing before the sc…
- 6.7CVE-2026-73067EPSS 0.1%
Tesseract is an open source OCR engine. Prior to 5.5.3, a crafted .traineddata model loaded through TessBaseAPI::Init can cause SquishedDawg::read_squished_dawg in src/dict/dawg.cpp to accept an unterminated forward-edge run, after which S…
- 7.5CVE-2026-18125EPSS 1.6%
An out-of-bounds read in the Agent of Ivanti Endpoint Manager before version 2024 SU7 allows a remote unauthenticated attacker to crash an agent service.