cve.bz

CWE-125: Out-of-bounds Read, page 7

Filter

The product reads data past the end, or before the beginning, of the intended buffer.

What the weakness is: CWE-125 at MITRE

Ask an AI about CWE-125

ChatGPTClaudePerplexityGoogle AI Mode

Show the promptExplain CWE-125: Out-of-bounds Read and how to prevent and detect it in code. Use https://cwe.mitre.org/data/definitions/125.html and https://cve.bz/cve/cwe/125?via=ask-ai-copy for recent CVEs with this weakness. Cite the sources.

Opens a third-party assistant; its answer is its own, not cve.bz's. The prompt holds only this weakness's id and public links.

  1. 6.5CVE-2026-97820EPSS 0.9%

    Out-of-bounds read in DNS Server allows an authorized attacker to disclose information over a network.

  2. 6.5CVE-2026-97819EPSS 1.1%

    Out-of-bounds read in DNS Server allows an authorized attacker to disclose information over a network.

  3. 9.8CVE-2026-97805EPSS 1.1%

    Out-of-bounds read in Windows Partition Management Driver allows an unauthorized attacker to execute code over a network.

  4. 6.5CVE-2026-97779EPSS 1.0%

    Out-of-bounds read in Microsoft Office Excel allows an unauthorized attacker to disclose information over a network.

  5. 6.5CVE-2026-97760EPSS 1.0%

    Out-of-bounds read in Microsoft Office Excel allows an unauthorized attacker to disclose information over a network.

  6. 8.8CVE-2026-97755EPSS 0.8%

    Out-of-bounds read in Microsoft Office Excel allows an unauthorized attacker to execute code over a network.

  7. 5.5CVE-2026-97744EPSS 0.5%

    Out-of-bounds read in Microsoft Office PowerPoint allows an unauthorized attacker to disclose information locally.

  8. 5.5CVE-2026-97014EPSS 0.5%

    Out-of-bounds read in Microsoft Office Excel allows an unauthorized attacker to disclose information locally.

  9. 5.5CVE-2026-97005EPSS 0.3%

    Out-of-bounds read in Microsoft Office PowerPoint allows an unauthorized attacker to disclose information locally.

  10. 5.5CVE-2026-96930EPSS 0.4%

    Out-of-bounds read in Windows Universal Disk Format File System Driver (UDFS) allows an authorized attacker to disclose information locally.

  11. 7.8CVE-2026-96928EPSS 0.3%

    Out-of-bounds read in Windows NTFS allows an authorized attacker to elevate privileges locally.

  12. 5.5CVE-2026-96927EPSS 0.4%

    Out-of-bounds read in Windows NTFS allows an authorized attacker to disclose information locally.

  13. 7.8CVE-2026-96867EPSS 0.3%

    Out-of-bounds read in Windows NTFS allows an authorized attacker to execute code locally.

  14. 7.5CVE-2026-96866EPSS 1.1%

    Out-of-bounds read in Network Device Enrollment Service (NDES) allows an unauthorized attacker to deny service over a network.

  15. 7.8CVE-2026-96862EPSS 0.3%

    Out-of-bounds read in Windows Spaceport.sys allows an authorized attacker to elevate privileges locally.

  16. 7.5CVE-2026-96861EPSS 1.1%

    Out-of-bounds read in Network Device Enrollment Service (NDES) allows an unauthorized attacker to deny service over a network.

  17. 5.5CVE-2026-96860EPSS 0.4%

    Out-of-bounds read in Windows USB Print Driver allows an authorized attacker to disclose information locally.

  18. 5.5CVE-2026-96859EPSS 0.4%

    Out-of-bounds read in Windows Imaging Component allows an authorized attacker to disclose information locally.

  19. 5.5CVE-2026-96846EPSS 0.4%

    Out-of-bounds read in WebDAV allows an authorized attacker to disclose information locally.

  20. 5.5CVE-2026-96321EPSS 0.4%

    Out-of-bounds read in Remote Desktop Display Driver allows an authorized attacker to disclose information locally.

  21. 5.5CVE-2026-96314EPSS 0.4%

    Out-of-bounds read in Windows Audio Service allows an authorized attacker to disclose information locally.

  22. 7.8CVE-2026-96306EPSS 0.2%

    Out-of-bounds read in Windows Sysmain Service allows an authorized attacker to elevate privileges locally.

  23. 7.5CVE-2026-96246EPSS 1.0%

    Out-of-bounds read in Network Policy Server (NPS) allows an unauthorized attacker to disclose information over a network.

  24. 7.5CVE-2026-96245EPSS 1.0%

    Out-of-bounds read in Windows Routing and Remote Access Service (RRAS) allows an unauthorized attacker to disclose information over a network.

  25. 7.5CVE-2026-96232EPSS 0.9%

    Out-of-bounds read in .NET allows an unauthorized attacker to disclose information over a network.

  26. 7.0CVE-2026-96209EPSS 0.3%

    Out-of-bounds read in Windows Network File System allows an authorized attacker to elevate privileges locally.

  27. 7.8CVE-2026-96118EPSS 0.4%

    Out-of-bounds read in Windows Graphics Kernel allows an authorized attacker to elevate privileges locally.

  28. 6.5CVE-2026-94506EPSS 0.9%

    Out-of-bounds read in Microsoft Office Access allows an unauthorized attacker to disclose information over a network.

  29. 4.6CVE-2026-88226EPSS 0.5%

    Out-of-bounds read in Windows Storage Port Driver allows an unauthorized attacker to disclose information with a physical attack.

  30. 7.8CVE-2026-88194EPSS 0.3%

    Out-of-bounds read in Windows DWM Core Library allows an authorized attacker to elevate privileges locally.

  31. 6.5CVE-2026-88192EPSS 0.9%

    Out-of-bounds read in Microsoft Office Excel allows an unauthorized attacker to disclose information over a network.

  32. 6.5CVE-2026-88190EPSS 0.9%

    Out-of-bounds read in Microsoft Office Excel allows an unauthorized attacker to disclose information over a network.

  33. 7.8CVE-2026-88189EPSS 0.2%

    Out-of-bounds read in Windows DWM Core Library allows an authorized attacker to elevate privileges locally.

  34. 7.8CVE-2026-88188EPSS 0.3%

    Out-of-bounds read in Windows DWM Core Library allows an authorized attacker to elevate privileges locally.

  35. 6.5CVE-2026-88184EPSS 0.8%

    Out-of-bounds read in Microsoft Office Excel allows an unauthorized attacker to disclose information over a network.

  36. 6.5CVE-2026-88183EPSS 0.9%

    Out-of-bounds read in Microsoft Office PowerPoint allows an unauthorized attacker to disclose information over a network.

  37. 7.8CVE-2026-88181EPSS 0.3%

    Out-of-bounds read in Windows DWM Core Library allows an authorized attacker to elevate privileges locally.

  38. 7.8CVE-2026-88180EPSS 0.2%

    Out-of-bounds read in Windows DWM Core Library allows an authorized attacker to elevate privileges locally.

  39. 7.8CVE-2026-88179EPSS 0.3%

    Out-of-bounds read in Windows DWM Core Library allows an authorized attacker to elevate privileges locally.

  40. 7.8CVE-2026-88177EPSS 0.2%

    Out-of-bounds read in Windows DWM Core Library allows an authorized attacker to elevate privileges locally.

  41. 6.5CVE-2026-88175EPSS 0.8%

    Out-of-bounds read in Microsoft Office Excel allows an unauthorized attacker to disclose information over a network.

  42. 6.5CVE-2026-88172EPSS 0.9%

    Out-of-bounds read in Microsoft Office Excel allows an unauthorized attacker to disclose information over a network.

  43. 6.5CVE-2026-88169EPSS 0.8%

    Out-of-bounds read in Microsoft Office Word allows an unauthorized attacker to disclose information over a network.

  44. 8.8CVE-2026-88159EPSS 1.4%

    Use after free in Windows Background Intelligent Transfer Service (BITS) allows an unauthorized attacker to execute code over a network.

  45. 5.5CVE-2026-88158EPSS 0.3%

    Out-of-bounds read in Microsoft Digest Authentication allows an authorized attacker to disclose information locally.

  46. 6.5CVE-2026-88154EPSS 0.9%

    Out-of-bounds read in Microsoft Office Excel allows an unauthorized attacker to disclose information over a network.

  47. 6.5CVE-2026-88153EPSS 0.8%

    Out-of-bounds read in Microsoft Office Excel allows an unauthorized attacker to disclose information over a network.

  48. 6.5CVE-2026-88151EPSS 0.8%

    Out-of-bounds read in Microsoft Office Excel allows an unauthorized attacker to disclose information over a network.

  49. 5.5CVE-2026-88140EPSS 0.4%

    Out-of-bounds read in Windows Key Storage Provider allows an authorized attacker to disclose information locally.

  50. 6.5CVE-2026-88130EPSS 1.2%

    Out-of-bounds read in DNS Server allows an authorized attacker to deny service over a network.