← Back
CWE-125

10,480 CVEs • Abstraction: Base

Out-of-bounds Read

The product reads data past the end, or before the beginning, of the intended buffer.

JSON object

Loading...

CVEs (10,480)

CVE
VENDORS
PRODUCTS
UPDATED
PUBLISHED
CVSS
1Google
1Chrome
Jul 23, 2026
Jun 4, 2026
N/A· v4
6.5 MEDIUM· v3
N/A· v2
Out of bounds read in GWP-ASan in Google Chrome prior to 149.0.7827.53 allowed a local attacker to obtain potentially sensitive information from process memory via a malicious file. (Chromium security severity: Medium)
1Google
1Chrome
Jul 23, 2026
Jun 4, 2026
N/A· v4
6.5 MEDIUM· v3
N/A· v2
Out of bounds read in Input in Google Chrome on Linux prior to 149.0.7827.53 allowed a remote attacker to obtain potentially sensitive information from process memory via a crafted HTML page. (Chromium security severity:...Show more
Out of bounds read in Input in Google Chrome on Linux prior to 149.0.7827.53 allowed a remote attacker to obtain potentially sensitive information from process memory via a crafted HTML page. (Chromium security severity: Medium)Show less
1Google
1Chrome
Jul 23, 2026
Jun 4, 2026
N/A· v4
8.1 HIGH· v3
N/A· v2
Out of bounds read in ANGLE in Google Chrome prior to 149.0.7827.53 allowed a remote attacker to perform an out of bounds memory read via a crafted HTML page. (Chromium security severity: Medium)
1Google
1Chrome
Jul 23, 2026
Jun 4, 2026
N/A· v4
6.5 MEDIUM· v3
N/A· v2
Out of bounds read in WebRTC in Google Chrome prior to 149.0.7827.53 allowed a remote attacker to obtain potentially sensitive information from process memory via a crafted HTML page. (Chromium security severity: Medium)
1Google
1Chrome
Jul 23, 2026
Jun 4, 2026
N/A· v4
8.8 HIGH· v3
N/A· v2
Inappropriate implementation in Dawn in Google Chrome prior to 149.0.7827.53 allowed a remote attacker to potentially perform out of bounds memory access via a crafted HTML page. (Chromium security severity: Medium)
1Google
1Chrome
Jul 23, 2026
Jun 4, 2026
N/A· v4
6.5 MEDIUM· v3
N/A· v2
Uninitialized Use in ANGLE in Google Chrome prior to 149.0.7827.53 allowed a remote attacker to leak cross-origin data via a crafted HTML page. (Chromium security severity: Medium)
1Google
1Chrome
Jul 23, 2026
Jun 4, 2026
N/A· v4
8.8 HIGH· v3
N/A· v2
Bad cast in Dawn in Google Chrome prior to 149.0.7827.53 allowed a remote attacker to execute arbitrary code inside a sandbox via a crafted HTML page. (Chromium security severity: Medium)
1Google
1Chrome
Jul 23, 2026
Jun 4, 2026
N/A· v4
6.5 MEDIUM· v3
N/A· v2
Out of bounds read in V8 in Google Chrome prior to 149.0.7827.53 allowed a remote attacker to obtain potentially sensitive information from process memory via a crafted HTML page. (Chromium security severity: Medium)
1Google
1Chrome
Jul 23, 2026
Jun 4, 2026
N/A· v4
9.6 CRITICAL· v3
N/A· v2
Type Confusion in ANGLE in Google Chrome prior to 149.0.7827.53 allowed a remote attacker to potentially perform a sandbox escape via a crafted HTML page. (Chromium security severity: Medium)
1Google
1Chrome
Jul 23, 2026
Jun 4, 2026
N/A· v4
6.5 MEDIUM· v3
N/A· v2
Out of bounds read in ANGLE in Google Chrome on Linux prior to 149.0.7827.53 allowed a remote attacker to obtain potentially sensitive information from process memory via a crafted HTML page. (Chromium security severity:...Show more
Out of bounds read in ANGLE in Google Chrome on Linux prior to 149.0.7827.53 allowed a remote attacker to obtain potentially sensitive information from process memory via a crafted HTML page. (Chromium security severity: Medium)Show less
1Google
1Chrome
Jul 22, 2026
Jun 4, 2026
N/A· v4
8.1 HIGH· v3
N/A· v2
Out of bounds read in WebGPU in Google Chrome prior to 149.0.7827.53 allowed a remote attacker to perform an out of bounds memory read via a crafted HTML page. (Chromium security severity: Medium)
1Google
1Chrome
Jul 22, 2026
Jun 4, 2026
N/A· v4
6.5 MEDIUM· v3
N/A· v2
Out of bounds read in Dawn in Google Chrome prior to 149.0.7827.53 allowed a remote attacker to perform an out of bounds memory read via a crafted HTML page. (Chromium security severity: Medium)
1Google
1Chrome
Jul 22, 2026
Jun 4, 2026
N/A· v4
5.3 MEDIUM· v3
N/A· v2
Out of bounds read in ANGLE in Google Chrome on Windows prior to 149.0.7827.53 allowed a remote attacker who had compromised the renderer process to obtain potentially sensitive information from process memory via a craf...Show more
Out of bounds read in ANGLE in Google Chrome on Windows prior to 149.0.7827.53 allowed a remote attacker who had compromised the renderer process to obtain potentially sensitive information from process memory via a crafted HTML page. (Chromium security severity: Medium)Show less
1Google
1Chrome
Jul 22, 2026
Jun 4, 2026
N/A· v4
5.3 MEDIUM· v3
N/A· v2
Out of bounds read in ANGLE in Google Chrome prior to 149.0.7827.53 allowed a remote attacker who had compromised the renderer process to obtain potentially sensitive information from process memory via a crafted HTML pa...Show more
Out of bounds read in ANGLE in Google Chrome prior to 149.0.7827.53 allowed a remote attacker who had compromised the renderer process to obtain potentially sensitive information from process memory via a crafted HTML page. (Chromium security severity: Medium)Show less
1Google
1Chrome
Jul 22, 2026
Jun 4, 2026
N/A· v4
6.5 MEDIUM· v3
N/A· v2
Integer overflow in ANGLE in Google Chrome on Windows prior to 149.0.7827.53 allowed a remote attacker who had compromised the renderer process to obtain potentially sensitive information from process memory via a crafte...Show more
Integer overflow in ANGLE in Google Chrome on Windows prior to 149.0.7827.53 allowed a remote attacker who had compromised the renderer process to obtain potentially sensitive information from process memory via a crafted HTML page. (Chromium security severity: Medium)Show less
1Google
1Chrome
Jul 22, 2026
Jun 4, 2026
N/A· v4
4.0 MEDIUM· v3
N/A· v2
Out of bounds read in Media in Google Chrome prior to 149.0.7827.53 allowed an attacker on the local network segment to perform an out of bounds memory read via malicious network traffic. (Chromium security severity: Med...Show more
Out of bounds read in Media in Google Chrome prior to 149.0.7827.53 allowed an attacker on the local network segment to perform an out of bounds memory read via malicious network traffic. (Chromium security severity: Medium)Show less
1Google
1Chrome
Jul 22, 2026
Jun 4, 2026
N/A· v4
6.5 MEDIUM· v3
N/A· v2
Out of bounds read in Skia in Google Chrome prior to 149.0.7827.53 allowed a remote attacker to leak cross-origin data via a crafted HTML page. (Chromium security severity: High)
1Google
1Chrome
Jul 22, 2026
Jun 4, 2026
N/A· v4
6.5 MEDIUM· v3
N/A· v2
Out of bounds read in ANGLE in Google Chrome prior to 149.0.7827.53 allowed a remote attacker to obtain potentially sensitive information from process memory via a crafted HTML page. (Chromium security severity: High)
1Google
1Chrome
Jul 22, 2026
Jun 4, 2026
N/A· v4
8.8 HIGH· v3
N/A· v2
Out of bounds memory access in Skia in Google Chrome prior to 149.0.7827.53 allowed a remote attacker to execute arbitrary code inside a sandbox via a crafted HTML page. (Chromium security severity: High)
1Google
1Chrome
Jul 22, 2026
Jun 4, 2026
N/A· v4
8.1 HIGH· v3
N/A· v2
Out of bounds read in ANGLE in Google Chrome on Mac prior to 149.0.7827.53 allowed a remote attacker to perform an out of bounds memory read via a crafted HTML page. (Chromium security severity: High)