cve.bz

CWE-125: Out-of-bounds Read, page 9

Filter

The product reads data past the end, or before the beginning, of the intended buffer.

What the weakness is: CWE-125 at MITRE

Ask an AI about CWE-125

ChatGPTClaudePerplexityGoogle AI Mode

Show the promptExplain CWE-125: Out-of-bounds Read and how to prevent and detect it in code. Use https://cwe.mitre.org/data/definitions/125.html and https://cve.bz/cve/cwe/125?via=ask-ai-copy for recent CVEs with this weakness. Cite the sources.

Opens a third-party assistant; its answer is its own, not cve.bz's. The prompt holds only this weakness's id and public links.

  1. 5.5CVE-2026-83733EPSS 0.5%

    Out-of-bounds read in Windows Print Spooler Components allows an authorized attacker to disclose information locally.

  2. 6.5CVE-2026-83703EPSS 0.7%

    Out-of-bounds read in Windows Wi-Fi Driver allows an unauthorized attacker to deny service over an adjacent network.

  3. 7.0CVE-2026-83694EPSS 0.3%

    Out-of-bounds read in Windows Volume Manager Extension Driver allows an authorized attacker to elevate privileges locally.

  4. 5.5CVE-2026-83686EPSS 0.5%

    Out-of-bounds read in Microsoft Windows Search Component allows an authorized attacker to disclose information locally.

  5. 6.5CVE-2026-83671EPSS 0.5%

    Out-of-bounds read in Windows Hyper-V allows an authorized attacker to disclose information locally.

  6. 7.5CVE-2026-83670EPSS 1.1%

    Out-of-bounds read in Function Discovery Service (fdwsd.dll) allows an unauthorized attacker to disclose information over a network.

  7. 5.5CVE-2026-83668EPSS 0.4%

    Out-of-bounds read in Windows WLAN Service allows an authorized attacker to disclose information locally.

  8. 6.5CVE-2026-83667EPSS 1.2%

    Out-of-bounds read in Active Directory Domain Services allows an authorized attacker to deny service over a network.

  9. 7.5CVE-2026-83655EPSS 1.3%

    Out-of-bounds read in Network Policy Server (NPS) allows an unauthorized attacker to deny service over a network.

  10. 7.5CVE-2026-83651EPSS 1.0%

    Out-of-bounds read in Windows GDI allows an unauthorized attacker to disclose information over a network.

  11. 6.5CVE-2026-83649EPSS 1.2%

    Out-of-bounds read in Windows Local Security Authority Subsystem Service (LSASS) allows an authorized attacker to deny service over a network.

  12. 7.5CVE-2026-83647EPSS 1.3%

    Out-of-bounds read in Active Directory Domain Services allows an unauthorized attacker to deny service over a network.

  13. 7.8CVE-2026-83637EPSS 0.4%

    Out-of-bounds read in Windows Kernel-Mode Drivers allows an authorized attacker to elevate privileges locally.

  14. 7.5CVE-2026-83635EPSS 1.3%

    Out-of-bounds read in DNS Server allows an unauthorized attacker to deny service over a network.

  15. 7.8CVE-2026-83567EPSS 0.4%

    Out-of-bounds read in Windows NTFS allows an authorized attacker to elevate privileges locally.

  16. 6.5CVE-2026-83521EPSS 1.1%

    Out-of-bounds read in Windows IKE Extension allows an authorized attacker to disclose information over a network.

  17. 7.5CVE-2026-83516EPSS 1.3%

    Out-of-bounds read in Windows Local Security Authority Subsystem Service (LSASS) allows an unauthorized attacker to deny service over a network.

  18. 7.8CVE-2026-83508EPSS 0.4%

    Out-of-bounds read in Windows NTFS allows an authorized attacker to elevate privileges locally.

  19. 5.5CVE-2026-70295EPSS 0.5%

    Out-of-bounds read in Windows Win32 Kernel Subsystem allows an authorized attacker to disclose information locally.

  20. 5.5CVE-2026-70294EPSS 0.5%

    Out-of-bounds read in Windows Win32 Kernel Subsystem allows an authorized attacker to disclose information locally.

  21. 5.5CVE-2026-70292EPSS 0.5%

    Out-of-bounds read in Windows Win32 Kernel Subsystem allows an authorized attacker to disclose information locally.

  22. 7.5CVE-2026-70281EPSS 1.1%

    Out-of-bounds read in Microsoft Office Outlook allows an unauthorized attacker to disclose information over a network.

  23. 5.5CVE-2026-70277EPSS 0.6%

    Out-of-bounds read in Windows Fast FAT Driver allows an unauthorized attacker to disclose information locally.

  24. 6.5CVE-2026-70263EPSS 1.0%

    Out-of-bounds read in Microsoft Office Word allows an unauthorized attacker to disclose information over a network.

  25. 8.8CVE-2026-70254EPSS 0.9%

    Out-of-bounds read in Microsoft Office Excel allows an unauthorized attacker to execute code over a network.

  26. 7.8CVE-2026-70247EPSS 0.3%

    Out-of-bounds read in Windows HTTP.sys allows an authorized attacker to execute code locally.

  27. 6.5CVE-2026-70244EPSS 1.0%

    Out-of-bounds read in DNS Server allows an unauthorized attacker to disclose information over a network.

  28. 7.8CVE-2026-70228EPSS 0.4%

    Out-of-bounds read in Desktop Window Manager allows an authorized attacker to elevate privileges locally.

  29. 5.5CVE-2026-70227EPSS 0.5%

    Out-of-bounds read in Windows Device Association Service allows an authorized attacker to disclose information locally.

  30. 6.5CVE-2026-70219EPSS 0.9%

    Out-of-bounds read in Microsoft Office Excel allows an unauthorized attacker to disclose information over a network.

  31. 5.5CVE-2026-70214EPSS 0.6%

    Out-of-bounds read in Microsoft Office Excel allows an unauthorized attacker to disclose information locally.

  32. 5.5CVE-2026-70211EPSS 0.5%

    Out-of-bounds read in Windows Win32 Kernel Subsystem allows an authorized attacker to disclose information locally.

  33. 8.8CVE-2026-70210EPSS 0.9%

    Heap-based buffer overflow in Windows OLE DB allows an unauthorized attacker to elevate privileges over a network.

  34. 5.5CVE-2026-70208EPSS 0.4%

    Out-of-bounds read in Windows HTTP.sys allows an authorized attacker to disclose information locally.

  35. 6.5CVE-2026-70206EPSS 1.0%

    Out-of-bounds read in Microsoft Office Word allows an unauthorized attacker to disclose information over a network.

  36. 5.5CVE-2026-70201EPSS 0.5%

    Out-of-bounds read in Windows DHCP Server allows an authorized attacker to deny service locally.

  37. 5.5CVE-2026-70173EPSS 0.4%

    Out-of-bounds read in Microsoft Windows Search Component allows an authorized attacker to disclose information locally.

  38. 6.5CVE-2026-70166EPSS 1.3%

    Out-of-bounds read in Windows DNS allows an authorized attacker to deny service over a network.

  39. 5.5CVE-2026-70141EPSS 0.4%

    Out-of-bounds read in Microsoft Windows Search Component allows an authorized attacker to disclose information locally.

  40. 5.5CVE-2026-70135EPSS 0.5%

    Out-of-bounds read in Windows Remote POS Driver allows an authorized attacker to disclose information locally.

  41. 5.5CVE-2026-70128EPSS 0.4%

    Out-of-bounds read in HID Parser Library allows an authorized attacker to disclose information locally.

  42. 7.1CVE-2026-70126EPSS 0.5%

    Out-of-bounds read in Windows Bluetooth Port Driver allows an unauthorized attacker to execute code over an adjacent network.

  43. 6.5CVE-2026-70119EPSS 1.3%

    Out-of-bounds read in Windows DNS allows an authorized attacker to execute code over a network.

  44. 5.5CVE-2026-70074EPSS 0.5%

    Out-of-bounds read in Windows DNS allows an authorized attacker to disclose information locally.

  45. 4.7CVE-2026-70063EPSS 0.4%

    Out-of-bounds read in Windows Kernel allows an authorized attacker to disclose information locally.

  46. 5.5CVE-2026-70044EPSS 0.6%

    Out-of-bounds read in Microsoft Windows Media Foundation allows an unauthorized attacker to disclose information locally.

  47. 5.5CVE-2026-70011EPSS 0.5%

    Out-of-bounds read in Windows IP Over USB Service allows an authorized attacker to disclose information locally.

  48. 5.5CVE-2026-69999EPSS 0.5%

    Out-of-bounds read in Windows Update allows an authorized attacker to disclose information locally.

  49. 4.7CVE-2026-69974EPSS 0.3%

    Out-of-bounds read in Desktop Window Manager allows an authorized attacker to disclose information locally.

  50. 5.5CVE-2026-69967EPSS 0.5%

    Out-of-bounds read in Windows Overlay Filter allows an authorized attacker to disclose information locally.