CWE-125: Out-of-bounds Read, page 8
Filter
The product reads data past the end, or before the beginning, of the intended buffer.
What the weakness is: CWE-125 at MITRE
Ask an AI about CWE-125
ChatGPTClaudePerplexityGoogle AI Mode
Show the prompt
Explain CWE-125: Out-of-bounds Read and how to prevent and detect it in code. Use https://cwe.mitre.org/data/definitions/125.html and https://cve.bz/cve/cwe/125?via=ask-ai-copy for recent CVEs with this weakness. Cite the sources.Opens a third-party assistant; its answer is its own, not cve.bz's. The prompt holds only this weakness's id and public links.
- 6.5CVE-2026-88130EPSS 1.2%
Out-of-bounds read in DNS Server allows an authorized attacker to deny service over a network.
- 6.5CVE-2026-88129EPSS 1.2%
Out-of-bounds read in DNS Server allows an authorized attacker to deny service over a network.
- 6.5CVE-2026-88125EPSS 1.2%
Out-of-bounds read in DNS Server allows an authorized attacker to deny service over a network.
- 6.5CVE-2026-88123EPSS 1.2%
Out-of-bounds read in DNS Server allows an authorized attacker to deny service over a network.
- 6.5CVE-2026-88122EPSS 1.0%
Out-of-bounds read in DNS Server allows an authorized attacker to deny service over a network.
- 8.8CVE-2026-88115EPSS 0.7%
Out-of-bounds read in Windows Server for NFS allows an unauthorized attacker to execute code over a network.
- 7.8CVE-2026-88070EPSS 0.3%
Out-of-bounds read in Windows BitLocker allows an authorized attacker to elevate privileges locally.
- 5.5CVE-2026-87698EPSS 0.4%
Out-of-bounds read in Windows Remote Access Service Infrastructure allows an authorized attacker to disclose information locally.
- 7.8CVE-2026-85858EPSS 0.2%
Out-of-bounds read in Windows Win32 Kernel Subsystem allows an authorized attacker to elevate privileges locally.
- 7.0CVE-2026-85853EPSS 0.2%
Out-of-bounds read in Windows DWM Core Library allows an authorized attacker to elevate privileges locally.
- 5.5CVE-2026-85852EPSS 0.4%
Out-of-bounds read in Windows Management Instrumentation allows an authorized attacker to disclose information locally.
- 6.5CVE-2026-85847EPSS 0.7%
Out-of-bounds read in Windows Print Spooler Components allows an unauthorized attacker to disclose information over a network.
- 7.8CVE-2026-85837EPSS 0.3%
Out-of-bounds read in Windows Kernel allows an authorized attacker to elevate privileges locally.
- 5.5CVE-2026-85830EPSS 0.4%
Out-of-bounds read in Windows Installer allows an authorized attacker to disclose information locally.
- 6.5CVE-2026-85821EPSS 1.0%
Out-of-bounds read in Windows Universal Disk Format File System Driver (UDFS) allows an authorized attacker to disclose information locally.
- 5.7CVE-2026-85816EPSS 0.5%
Out-of-bounds read in Windows Wi-Fi Driver allows an authorized attacker to disclose information over an adjacent network.
- 5.5CVE-2026-85815EPSS 0.4%
Out-of-bounds read in Windows Device Association Service allows an authorized attacker to disclose information locally.
- 7.5CVE-2026-85808EPSS 1.1%
Out-of-bounds read in Windows Routing and Remote Access Service (RRAS) allows an unauthorized attacker to deny service over a network.
- 7.5CVE-2026-85797EPSS 0.9%
Out-of-bounds read in Windows GDI allows an unauthorized attacker to disclose information over a network.
- 5.5CVE-2026-85794EPSS 0.4%
Out-of-bounds read in Windows Routing and Remote Access Service (RRAS) allows an authorized attacker to disclose information locally.
- 5.5CVE-2026-85374EPSS 0.4%
Out-of-bounds read in Windows Installer allows an authorized attacker to disclose information locally.
- 8.8CVE-2026-85369EPSS 0.4%
Out-of-bounds read in Windows Hyper-V allows an authorized attacker to elevate privileges locally.
- 7.8CVE-2026-85356EPSS 0.3%
Out-of-bounds read in Windows Volume Manager Extension Driver allows an authorized attacker to elevate privileges locally.
- 7.5CVE-2026-85353EPSS 1.0%
Out-of-bounds read in Windows Print Spooler Components allows an unauthorized attacker to disclose information over a network.
- 7.8CVE-2026-85338EPSS 0.3%
Out-of-bounds read in Microsoft Graphics Component allows an authorized attacker to elevate privileges locally.
- 6.5CVE-2026-85337EPSS 0.9%
Out-of-bounds read in Remote Desktop Client allows an unauthorized attacker to disclose information over a network.
- 5.5CVE-2026-85336EPSS 0.4%
Out-of-bounds read in Windows Device Association Service allows an authorized attacker to disclose information locally.
- 7.5CVE-2026-85334EPSS 1.0%
Out-of-bounds read in Windows Message Queuing Queue Manager allows an unauthorized attacker to disclose information over a network.
- 6.5CVE-2026-85331EPSS 1.0%
Out-of-bounds read in Windows Device Association Service allows an authorized attacker to disclose information over a network.
- 6.5CVE-2026-84007EPSS 1.0%
Out-of-bounds read in Remote Desktop Gateway Service allows an authorized attacker to disclose information over a network.
- 5.5CVE-2026-83904EPSS 0.4%
Out-of-bounds read in HID Parser Library allows an authorized attacker to disclose information locally.
- 5.5CVE-2026-83898EPSS 0.4%
Out-of-bounds read in HID Parser Library allows an authorized attacker to disclose information locally.
- 5.5CVE-2026-83892EPSS 0.4%
Out-of-bounds read in HID Parser Library allows an authorized attacker to disclose information locally.
- 5.5CVE-2026-83887EPSS 0.4%
Out-of-bounds read in HID Parser Library allows an authorized attacker to disclose information locally.
- 5.5CVE-2026-83884EPSS 0.4%
Out-of-bounds read in HID Parser Library allows an authorized attacker to disclose information locally.
- 5.5CVE-2026-83875EPSS 0.4%
Out-of-bounds read in HID Parser Library allows an authorized attacker to disclose information locally.
- 5.5CVE-2026-83870EPSS 0.4%
Out-of-bounds read in Windows Aggregated Data Platform Service allows an authorized attacker to disclose information locally.
- 8.1CVE-2026-83856EPSS 0.6%
Out-of-bounds read in Windows Event Logging Service allows an unauthorized attacker to execute code over a network.
- 5.5CVE-2026-83849EPSS 0.4%
Out-of-bounds read in Windows Hello allows an authorized attacker to disclose information locally.
- 8.1CVE-2026-83844EPSS 0.7%
Out-of-bounds read in Windows Paint allows an unauthorized attacker to execute code over a network.
- 7.5CVE-2026-83843EPSS 1.3%
Out-of-bounds read in Windows Internet Key Exchange (IKE) Protocol allows an unauthorized attacker to deny service over a network.
- 7.8CVE-2026-83832EPSS 0.4%
Out-of-bounds read in Windows Spaceport.sys allows an authorized attacker to elevate privileges locally.
- 8.8CVE-2026-83797EPSS 0.9%
Out-of-bounds read in Windows Partition Management Driver allows an unauthorized attacker to execute code over a network.
- 7.5CVE-2026-83795EPSS 1.3%
Heap-based buffer overflow in Windows IKE Extension allows an unauthorized attacker to deny service over a network.
- 5.5CVE-2026-83794EPSS 0.4%
Out-of-bounds read in Windows Portable Device MTP Driver allows an authorized attacker to disclose information locally.
- 6.8CVE-2026-83776EPSS 0.5%
Out-of-bounds read in Microsoft Bluetooth Driver allows an unauthorized attacker to elevate privileges with a physical attack.
- 5.5CVE-2026-83765EPSS 0.4%
Out-of-bounds read in Windows DWM Core Library allows an authorized attacker to disclose information locally.
- 5.5CVE-2026-83760EPSS 0.4%
Out-of-bounds read in Microsoft Bluetooth Driver allows an authorized attacker to disclose information locally.
- 5.5CVE-2026-83747EPSS 0.5%
Out-of-bounds read in Windows Error Reporting allows an authorized attacker to disclose information locally.
- 5.5CVE-2026-83737EPSS 0.5%
Out-of-bounds read in Windows NTFS allows an authorized attacker to disclose information locally.