← Back
CWE-125

9,119 CVEs • Abstraction: Base

Out-of-bounds Read

The product reads data past the end, or before the beginning, of the intended buffer.

JSON object

Loading...

CVEs (9,119)

CVE
VENDORS
PRODUCTS
UPDATED
PUBLISHED
CVSS
CVE-2025-20026
1Intel
1Proset/wireless Wifi
Jun 17, 2026
May 13, 2025
7.0 HIGH· v4
6.1 MEDIUM· v3
N/A· v2
Out-of-bounds read for some Intel(R) PROSet/Wireless WiFi Software for Windows before version 23.100 may allow an unauthenticated user to potentially enable denial of service via adjacent access.
CVE-2024-31150
-
-
Jun 17, 2026
May 13, 2025
4.8 MEDIUM· v4
3.8 LOW· v3
N/A· v2
Out-of-bounds read for some Intel(R) Graphics Driver software may allow an authenticated user to potentially enable information disclosure via local access.
CVE-2025-32707
1Microsoft
7Windows 10 1507
Windows 10 1607Windows 10 1809+4 more
Jun 17, 2026
May 13, 2025
N/A· v4
7.8 HIGH· v3
N/A· v2
Out-of-bounds read in Windows NTFS allows an unauthorized attacker to elevate privileges locally.
CVE-2025-32705
1Microsoft
2365 Apps
Office Long Term Servicing Channel
Jun 17, 2026
May 13, 2025
N/A· v4
7.8 HIGH· v3
N/A· v2
Out-of-bounds read in Microsoft Office Outlook allows an unauthorized attacker to execute code locally.
CVE-2025-32704
1Microsoft
4365 Apps
ExcelOffice+1 more
Jun 17, 2026
May 13, 2025
N/A· v4
7.8 HIGH· v3
N/A· v2
Buffer over-read in Microsoft Office Excel allows an unauthorized attacker to execute code locally.
CVE-2025-30381
1Microsoft
5365 Apps
ExcelOffice+2 more
Jun 17, 2026
May 13, 2025
N/A· v4
7.8 HIGH· v3
N/A· v2
Out-of-bounds read in Microsoft Office Excel allows an unauthorized attacker to execute code locally.
CVE-2025-30376
1Microsoft
5365 Apps
ExcelOffice+2 more
Jun 17, 2026
May 13, 2025
N/A· v4
7.8 HIGH· v3
N/A· v2
Heap-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code locally.
CVE-2025-29974
1Microsoft
15Windows 10 1507
Windows 10 1607Windows 10 1809+12 more
Jun 17, 2026
May 13, 2025
N/A· v4
5.7 MEDIUM· v3
N/A· v2
Integer underflow (wrap or wraparound) in Windows Kernel allows an unauthorized attacker to disclose information over an adjacent network.
CVE-2025-29971
1Microsoft
3Windows 11 22h2
Windows 11 23h2Windows 11 24h2
Jun 17, 2026
May 13, 2025
N/A· v4
7.5 HIGH· v3
N/A· v2
Out-of-bounds read in Web Threat Defense (WTD.sys) allows an unauthorized attacker to deny service over a network.
CVE-2025-29961
1Microsoft
15Windows 10 1507
Windows 10 1607Windows 10 1809+12 more
Jun 17, 2026
May 13, 2025
N/A· v4
6.5 MEDIUM· v3
N/A· v2
Out-of-bounds read in Windows Routing and Remote Access Service (RRAS) allows an unauthorized attacker to disclose information over a network.
CVE-2025-29960
1Microsoft
15Windows 10 1507
Windows 10 1607Windows 10 1809+12 more
Jun 17, 2026
May 13, 2025
N/A· v4
6.5 MEDIUM· v3
N/A· v2
Out-of-bounds read in Windows Routing and Remote Access Service (RRAS) allows an unauthorized attacker to disclose information over a network.
CVE-2025-29956
1Microsoft
15Windows 10 1507
Windows 10 1607Windows 10 1809+12 more
Jun 17, 2026
May 13, 2025
N/A· v4
5.4 MEDIUM· v3
N/A· v2
Buffer over-read in Windows SMB allows an authorized attacker to disclose information over a network.
CVE-2025-29839
1Microsoft
15Windows 10 1507
Windows 10 1607Windows 10 1809+12 more
Jun 17, 2026
May 13, 2025
N/A· v4
4.0 MEDIUM· v3
N/A· v2
Out-of-bounds read in Windows File Server allows an unauthorized attacker to disclose information locally.
CVE-2025-29836
1Microsoft
15Windows 10 1507
Windows 10 1607Windows 10 1809+12 more
Jun 17, 2026
May 13, 2025
N/A· v4
6.5 MEDIUM· v3
N/A· v2
Out-of-bounds read in Windows Routing and Remote Access Service (RRAS) allows an unauthorized attacker to disclose information over a network.
CVE-2025-29835
1Microsoft
15Windows 10 1507
Windows 10 1607Windows 10 1809+12 more
Jun 17, 2026
May 13, 2025
N/A· v4
6.5 MEDIUM· v3
N/A· v2
Out-of-bounds read in Windows Routing and Remote Access Service (RRAS) allows an unauthorized attacker to disclose information over a network.
CVE-2025-29832
1Microsoft
15Windows 10 1507
Windows 10 1607Windows 10 1809+12 more
Jun 17, 2026
May 13, 2025
N/A· v4
6.5 MEDIUM· v3
N/A· v2
Out-of-bounds read in Windows Routing and Remote Access Service (RRAS) allows an unauthorized attacker to disclose information over a network.
CVE-2025-40578
1Siemens
1Scalance Lpe9403 Firmware
Jun 17, 2026
May 13, 2025
5.3 MEDIUM· v4
4.3 MEDIUM· v3
N/A· v2
A vulnerability has been identified in SCALANCE LPE9403 (6GK5998-3GS00-2AC2) (All versions). Affected devices do not properly handle multiple incoming Profinet packets received in rapid succession. An unauthenticated re...Show more
A vulnerability has been identified in SCALANCE LPE9403 (6GK5998-3GS00-2AC2) (All versions). Affected devices do not properly handle multiple incoming Profinet packets received in rapid succession. An unauthenticated remote attacker can exploit this flaw by sending multiple packets in a very short time frame, which leads to a crash of the dcpd process.Show less
CVE-2025-40577
1Siemens
1Scalance Lpe9403 Firmware
Jun 17, 2026
May 13, 2025
5.3 MEDIUM· v4
4.3 MEDIUM· v3
N/A· v2
A vulnerability has been identified in SCALANCE LPE9403 (6GK5998-3GS00-2AC2) (All versions < V4.0 HF0). Affected devices do not properly validate incoming Profinet packets. An unauthenticated remote attacker can exploit...Show more
A vulnerability has been identified in SCALANCE LPE9403 (6GK5998-3GS00-2AC2) (All versions < V4.0 HF0). Affected devices do not properly validate incoming Profinet packets. An unauthenticated remote attacker can exploit this flaw by sending a specially crafted malicious packet, which leads to a crash of the dcpd process.Show less
CVE-2025-32454
1Siemens
2Teamcenter Visualization
Tecnomatix Plant Simulation
Jun 17, 2026
May 13, 2025
7.3 HIGH· v4
7.8 HIGH· v3
N/A· v2
A vulnerability has been identified in Teamcenter Visualization V14.3 (All versions < V14.3.0.14), Teamcenter Visualization V2312 (All versions < V2312.0010), Teamcenter Visualization V2406 (All versions < V2406.0008), T...Show more
A vulnerability has been identified in Teamcenter Visualization V14.3 (All versions < V14.3.0.14), Teamcenter Visualization V2312 (All versions < V2312.0010), Teamcenter Visualization V2406 (All versions < V2406.0008), Teamcenter Visualization V2412 (All versions < V2412.0004), Tecnomatix Plant Simulation V2404 (All versions < V2404.0013). The affected applications contain an out of bounds read past the end of an allocated structure while parsing specially crafted WRL files. This could allow an attacker to execute code in the context of the current process.Show less
CVE-2025-30176
1Siemens
5Simatic Pcs Neo
Sinec NmsSinema Remote Connect+2 more
Jun 17, 2026
May 13, 2025
8.7 HIGH· v4
7.5 HIGH· v3
N/A· v2
A vulnerability has been identified in SIMATIC PCS neo V4.1 (All versions), SIMATIC PCS neo V5.0 (All versions), SINEC NMS (All versions < V4.0), SINEMA Remote Connect (All versions), Totally Integrated Automation Portal...Show more
A vulnerability has been identified in SIMATIC PCS neo V4.1 (All versions), SIMATIC PCS neo V5.0 (All versions), SINEC NMS (All versions < V4.0), SINEMA Remote Connect (All versions), Totally Integrated Automation Portal (TIA Portal) V17 (All versions), Totally Integrated Automation Portal (TIA Portal) V18 (All versions), Totally Integrated Automation Portal (TIA Portal) V19 (All versions), Totally Integrated Automation Portal (TIA Portal) V20 (All versions), User Management Component (UMC) (All versions < V2.15.1.1). Affected products contain a out of bound read buffer overflow vulnerability in the integrated UMC component. This could allow an unauthenticated remote attacker to cause a denial of service condition.Show less