Out-of-bounds Read

The product reads data past the end, or before the beginning, of the intended buffer.

CVEs (9,118)

CVE VENDORS PRODUCTS UPDATED PUBLISHED CVSS
CVE-2025-49525 1Adobe 1Illustrator Jun 17, 2026 Jul 8, 2025 N/A· v4 5.5 MEDIUM· v3 N/A· v2 Illustrator versions 28.7.6, 29.5.1 and earlier are affected by an out-of-bounds read vulnerability that could lead to disclosure of sensitive memory. Exploitation of this issue requires user interaction in that a victim...Show more Illustrator versions 28.7.6, 29.5.1 and earlier are affected by an out-of-bounds read vulnerability that could lead to disclosure of sensitive memory. Exploitation of this issue requires user interaction in that a victim must open a malicious file.Show less
CVE-2025-30313 1Adobe 1Illustrator Jun 17, 2026 Jul 8, 2025 N/A· v4 5.5 MEDIUM· v3 N/A· v2 Illustrator versions 28.7.6, 29.5.1 and earlier are affected by an out-of-bounds read vulnerability that could lead to disclosure of sensitive memory. Exploitation of this issue requires user interaction in that a victim...Show more Illustrator versions 28.7.6, 29.5.1 and earlier are affected by an out-of-bounds read vulnerability that could lead to disclosure of sensitive memory. Exploitation of this issue requires user interaction in that a victim must open a malicious file.Show less
CVE-2025-27165 1Adobe 1Substance 3d Stager Jun 17, 2026 Jul 8, 2025 N/A· v4 5.5 MEDIUM· v3 N/A· v2 Substance3D - Stager versions 3.1.2 and earlier are affected by an out-of-bounds read vulnerability that could lead to disclosure of sensitive memory. Exploitation of this issue requires user interaction in that a victim...Show more Substance3D - Stager versions 3.1.2 and earlier are affected by an out-of-bounds read vulnerability that could lead to disclosure of sensitive memory. Exploitation of this issue requires user interaction in that a victim must open a malicious file.Show less
CVE-2025-43584 1Adobe 1Substance 3d Viewer Jun 17, 2026 Jul 8, 2025 N/A· v4 5.5 MEDIUM· v3 N/A· v2 Substance3D - Viewer versions 0.22 and earlier are affected by an out-of-bounds read vulnerability that could lead to disclosure of sensitive memory. Exploitation of this issue requires user interaction in that a victim...Show more Substance3D - Viewer versions 0.22 and earlier are affected by an out-of-bounds read vulnerability that could lead to disclosure of sensitive memory. Exploitation of this issue requires user interaction in that a victim must open a malicious file.Show less
CVE-2025-47135 1Adobe 1Dimension Jun 17, 2026 Jul 8, 2025 N/A· v4 5.5 MEDIUM· v3 N/A· v2 Dimension versions 4.1.2 and earlier are affected by an out-of-bounds read vulnerability that could lead to disclosure of sensitive memory. An attacker could leverage this vulnerability to bypass mitigations such as ASLR...Show more Dimension versions 4.1.2 and earlier are affected by an out-of-bounds read vulnerability that could lead to disclosure of sensitive memory. An attacker could leverage this vulnerability to bypass mitigations such as ASLR. Exploitation of this issue requires user interaction in that a victim must open a malicious file.Show less
CVE-2025-49696 1Microsoft 4365 Apps 365 CopilotOffice+1 more Jun 17, 2026 Jul 8, 2025 N/A· v4 8.4 HIGH· v3 N/A· v2 Out-of-bounds read in Microsoft Office allows an unauthorized attacker to execute code locally.
CVE-2025-49689 1Microsoft 15Windows 10 1507 Windows 10 1607Windows 10 1809+12 more Jun 17, 2026 Jul 8, 2025 N/A· v4 7.8 HIGH· v3 N/A· v2 Integer overflow or wraparound in Virtual Hard Disk (VHDX) allows an unauthorized attacker to elevate privileges locally.
CVE-2025-49687 1Microsoft 14Windows 10 1507 Windows 10 1607Windows 10 1809+11 more Jun 17, 2026 Jul 8, 2025 N/A· v4 8.8 HIGH· v3 N/A· v2 Out-of-bounds read in Microsoft Input Method Editor (IME) allows an authorized attacker to elevate privileges locally.
CVE-2025-49681 1Microsoft 7Windows Server 2008 Windows Server 2012Windows Server 2016+4 more Jun 17, 2026 Jul 8, 2025 N/A· v4 6.5 MEDIUM· v3 N/A· v2 Out-of-bounds read in Windows Routing and Remote Access Service (RRAS) allows an unauthorized attacker to disclose information over a network.
CVE-2025-49671 1Microsoft 7Windows Server 2008 Windows Server 2012Windows Server 2016+4 more Jun 17, 2026 Jul 8, 2025 N/A· v4 6.5 MEDIUM· v3 N/A· v2 Exposure of sensitive information to an unauthorized actor in Windows Routing and Remote Access Service (RRAS) allows an unauthorized attacker to disclose information over a network.
CVE-2025-49658 1Microsoft 15Windows 10 1507 Windows 10 1607Windows 10 1809+12 more Jun 17, 2026 Jul 8, 2025 N/A· v4 5.5 MEDIUM· v3 N/A· v2 Out-of-bounds read in Windows TDX.sys allows an authorized attacker to disclose information locally.
CVE-2025-49657 1Microsoft 7Windows Server 2008 Windows Server 2012Windows Server 2016+4 more Jun 17, 2026 Jul 8, 2025 N/A· v4 8.8 HIGH· v3 N/A· v2 Heap-based buffer overflow in Windows Routing and Remote Access Service (RRAS) allows an unauthorized attacker to execute code over a network.
CVE-2025-48822 1Microsoft 12Windows 10 1607 Windows 10 1809Windows 10 21h2+9 more Jun 17, 2026 Jul 8, 2025 N/A· v4 8.6 HIGH· v3 N/A· v2 Out-of-bounds read in Windows Hyper-V allows an unauthorized attacker to execute code locally.
CVE-2025-48816 1Microsoft 15Windows 10 1507 Windows 10 1607Windows 10 1809+12 more Jun 17, 2026 Jul 8, 2025 N/A· v4 7.8 HIGH· v3 N/A· v2 Integer overflow or wraparound in HID class driver allows an authorized attacker to elevate privileges locally.
CVE-2025-48812 1Microsoft 5365 Apps ExcelOffice+2 more Jun 17, 2026 Jul 8, 2025 N/A· v4 5.5 MEDIUM· v3 N/A· v2 Out-of-bounds read in Microsoft Office Excel allows an unauthorized attacker to disclose information locally.
CVE-2025-48002 1Microsoft 2Windows 11 24h2 Windows Server 2025 Jun 17, 2026 Jul 8, 2025 N/A· v4 5.7 MEDIUM· v3 N/A· v2 Integer overflow or wraparound in Windows Hyper-V allows an authorized attacker to disclose information over an adjacent network.
CVE-2025-47996 1Microsoft 15Windows 10 1507 Windows 10 1607Windows 10 1809+12 more Jun 17, 2026 Jul 8, 2025 N/A· v4 7.8 HIGH· v3 N/A· v2 Integer underflow (wrap or wraparound) in Windows MBT Transport driver allows an authorized attacker to elevate privileges locally.
CVE-2025-47978 1Microsoft 3Windows Server 2022 Windows Server 2022 23h2Windows Server 2025 Jun 17, 2026 Jul 8, 2025 N/A· v4 6.5 MEDIUM· v3 N/A· v2 Out-of-bounds read in Windows Kerberos allows an authorized attacker to deny service over a network.
CVE-2025-43587 1Adobe 1After Effects Jun 17, 2026 Jul 8, 2025 N/A· v4 5.5 MEDIUM· v3 N/A· v2 After Effects versions 25.2, 24.6.6 and earlier are affected by an out-of-bounds read vulnerability that could lead to disclosure of sensitive memory. An attacker could leverage this vulnerability to bypass mitigations s...Show more After Effects versions 25.2, 24.6.6 and earlier are affected by an out-of-bounds read vulnerability that could lead to disclosure of sensitive memory. An attacker could leverage this vulnerability to bypass mitigations such as ASLR. Exploitation of this issue requires user interaction in that a victim must open a malicious file.Show less
CVE-2025-21168 1Adobe 1Substance 3d Designer Jun 17, 2026 Jul 8, 2025 N/A· v4 5.5 MEDIUM· v3 N/A· v2 Substance3D - Designer versions 14.1 and earlier are affected by an out-of-bounds read vulnerability that could lead to disclosure of sensitive memory. An attacker could leverage this vulnerability to bypass mitigations...Show more Substance3D - Designer versions 14.1 and earlier are affected by an out-of-bounds read vulnerability that could lead to disclosure of sensitive memory. An attacker could leverage this vulnerability to bypass mitigations such as ASLR. Exploitation of this issue requires user interaction in that a victim must open a malicious file.Show less

Previous 1...777879...456 Next