Out-of-bounds Read

The product reads data past the end, or before the beginning, of the intended buffer.

CVEs (10,436)

CVE VENDORS PRODUCTS UPDATED PUBLISHED CVSS
CVE-2026-88081 - - Oct 15, 2026 Oct 13, 2026 N/A· v4 7.7 HIGH· v3 N/A· v2 Out-of-bounds read in SQL Server allows an authorized attacker to disclose information over a network.
CVE-2026-85888 - - Oct 15, 2026 Oct 13, 2026 N/A· v4 7.7 HIGH· v3 N/A· v2 Out-of-bounds read in SQL Server allows an authorized attacker to disclose information over a network.
CVE-2026-78628 - - Oct 15, 2026 Oct 13, 2026 N/A· v4 6.0 MEDIUM· v3 N/A· v2 The Okta Credential Provider for Windows does not validate a serialized credential buffer before interpreting it as a Kerberos logon structure. The buffer size and packed string offsets are not checked. Processing a malf...Show more The Okta Credential Provider for Windows does not validate a serialized credential buffer before interpreting it as a Kerberos logon structure. The buffer size and packed string offsets are not checked. Processing a malformed buffer can cause the credential provider process to terminate unexpectedly or lead to out-of-bounds memory reads and writes, which may result in the disclosure of adjacent process memory into local system logs.Show less
CVE-2026-67628 - - Oct 15, 2026 Oct 13, 2026 N/A· v4 4.9 MEDIUM· v3 N/A· v2 Out-of-bounds read in SQL Server allows an authorized attacker to disclose information over a network.
CVE-2026-103825 1Adobe 1Substance 3d Designer Oct 15, 2026 Oct 13, 2026 N/A· v4 5.5 MEDIUM· v3 N/A· v2 Substance3D - Designer is affected by an out-of-bounds read vulnerability that could lead to disclosure of sensitive memory. An attacker could leverage this vulnerability to disclose sensitive information. Exploitation o...Show more Substance3D - Designer is affected by an out-of-bounds read vulnerability that could lead to disclosure of sensitive memory. An attacker could leverage this vulnerability to disclose sensitive information. Exploitation of this issue requires user interaction in that a victim must open a malicious file.Show less
CVE-2026-103822 1Adobe 1Substance 3d Designer Oct 15, 2026 Oct 13, 2026 N/A· v4 5.5 MEDIUM· v3 N/A· v2 Substance3D - Designer is affected by an out-of-bounds read vulnerability that could lead to disclosure of sensitive memory. An attacker could leverage this vulnerability to disclose sensitive information. Exploitation o...Show more Substance3D - Designer is affected by an out-of-bounds read vulnerability that could lead to disclosure of sensitive memory. An attacker could leverage this vulnerability to disclose sensitive information. Exploitation of this issue requires user interaction in that a victim must open a malicious file.Show less
CVE-2026-100131 - - Oct 14, 2026 Oct 13, 2026 N/A· v4 5.5 MEDIUM· v3 N/A· v2 Substance3D - Sampler is affected by an out-of-bounds read vulnerability that could lead to disclosure of sensitive memory. An attacker could leverage this vulnerability to disclose sensitive information. Exploitation of...Show more Substance3D - Sampler is affected by an out-of-bounds read vulnerability that could lead to disclosure of sensitive memory. An attacker could leverage this vulnerability to disclose sensitive information. Exploitation of this issue requires user interaction in that a victim must open a malicious file.Show less
CVE-2026-100130 - - Oct 14, 2026 Oct 13, 2026 N/A· v4 5.5 MEDIUM· v3 N/A· v2 Substance3D - Sampler is affected by an out-of-bounds read vulnerability that could lead to disclosure of sensitive memory. An attacker could leverage this vulnerability to disclose sensitive information. Exploitation of...Show more Substance3D - Sampler is affected by an out-of-bounds read vulnerability that could lead to disclosure of sensitive memory. An attacker could leverage this vulnerability to disclose sensitive information. Exploitation of this issue requires user interaction in that a victim must open a malicious file.Show less
CVE-2026-100126 - - Oct 14, 2026 Oct 13, 2026 N/A· v4 5.5 MEDIUM· v3 N/A· v2 Bridge is affected by an out-of-bounds read vulnerability that could lead to disclosure of sensitive memory. An attacker could leverage this vulnerability to disclose sensitive information. Exploitation of this issue req...Show more Bridge is affected by an out-of-bounds read vulnerability that could lead to disclosure of sensitive memory. An attacker could leverage this vulnerability to disclose sensitive information. Exploitation of this issue requires user interaction in that a victim must open a malicious file.Show less
CVE-2026-103853 - - Oct 14, 2026 Oct 13, 2026 N/A· v4 5.5 MEDIUM· v3 N/A· v2 Dimension is affected by an out-of-bounds read vulnerability that could lead to disclosure of sensitive memory. An attacker could leverage this vulnerability to disclose sensitive information. Exploitation of this issue...Show more Dimension is affected by an out-of-bounds read vulnerability that could lead to disclosure of sensitive memory. An attacker could leverage this vulnerability to disclose sensitive information. Exploitation of this issue requires user interaction in that a victim must open a malicious file.Show less
CVE-2026-103850 - - Oct 14, 2026 Oct 13, 2026 N/A· v4 5.5 MEDIUM· v3 N/A· v2 Substance3D - Stager is affected by an out-of-bounds read vulnerability that could lead to disclosure of sensitive memory. An attacker could leverage this vulnerability to disclose sensitive information. Exploitation of...Show more Substance3D - Stager is affected by an out-of-bounds read vulnerability that could lead to disclosure of sensitive memory. An attacker could leverage this vulnerability to disclose sensitive information. Exploitation of this issue requires user interaction in that a victim must open a malicious file.Show less
CVE-2026-103842 1Adobe 1Substance 3d Stager Oct 20, 2026 Oct 13, 2026 N/A· v4 7.8 HIGH· v3 N/A· v2 Substance3D - Stager is affected by an out-of-bounds read vulnerability when parsing a crafted file, which could result in a read past the end of an allocated memory structure. An attacker could leverage this vulnerabili...Show more Substance3D - Stager is affected by an out-of-bounds read vulnerability when parsing a crafted file, which could result in a read past the end of an allocated memory structure. An attacker could leverage this vulnerability to execute code in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file.Show less
CVE-2026-103841 1Adobe 1Substance 3d Stager Oct 20, 2026 Oct 13, 2026 N/A· v4 7.8 HIGH· v3 N/A· v2 Substance3D - Stager is affected by an out-of-bounds read vulnerability when parsing a crafted file, which could result in a read past the end of an allocated memory structure. An attacker could leverage this vulnerabili...Show more Substance3D - Stager is affected by an out-of-bounds read vulnerability when parsing a crafted file, which could result in a read past the end of an allocated memory structure. An attacker could leverage this vulnerability to execute code in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file.Show less
CVE-2026-103840 1Adobe 1Substance 3d Stager Oct 20, 2026 Oct 13, 2026 N/A· v4 7.8 HIGH· v3 N/A· v2 Substance3D - Stager is affected by an out-of-bounds read vulnerability when parsing a crafted file, which could result in a read past the end of an allocated memory structure. An attacker could leverage this vulnerabili...Show more Substance3D - Stager is affected by an out-of-bounds read vulnerability when parsing a crafted file, which could result in a read past the end of an allocated memory structure. An attacker could leverage this vulnerability to execute code in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file.Show less
CVE-2026-97844 1Microsoft 14Windows 10 1607 Windows 10 1809Windows 10 21h2+11 more Oct 16, 2026 Oct 13, 2026 N/A· v4 6.5 MEDIUM· v3 N/A· v2 Out-of-bounds read in DNS Server allows an authorized attacker to disclose information over a network.
CVE-2026-97843 1Microsoft 14Windows 10 1607 Windows 10 1809Windows 10 21h2+11 more Oct 16, 2026 Oct 13, 2026 N/A· v4 6.5 MEDIUM· v3 N/A· v2 Out-of-bounds read in DNS Server allows an authorized attacker to disclose information over a network.
CVE-2026-97842 1Microsoft 14Windows 10 1607 Windows 10 1809Windows 10 21h2+11 more Oct 16, 2026 Oct 13, 2026 N/A· v4 6.5 MEDIUM· v3 N/A· v2 Out-of-bounds read in DNS Server allows an authorized attacker to disclose information over a network.
CVE-2026-97841 1Microsoft 14Windows 10 1607 Windows 10 1809Windows 10 21h2+11 more Oct 16, 2026 Oct 13, 2026 N/A· v4 6.5 MEDIUM· v3 N/A· v2 Out-of-bounds read in DNS Server allows an authorized attacker to disclose information over a network.
CVE-2026-97840 1Microsoft 14Windows 10 1607 Windows 10 1809Windows 10 21h2+11 more Oct 16, 2026 Oct 13, 2026 N/A· v4 6.5 MEDIUM· v3 N/A· v2 Out-of-bounds read in DNS Server allows an authorized attacker to disclose information over a network.
CVE-2026-97839 1Microsoft 14Windows 10 1607 Windows 10 1809Windows 10 21h2+11 more Oct 16, 2026 Oct 13, 2026 N/A· v4 6.5 MEDIUM· v3 N/A· v2 Out-of-bounds read in DNS Server allows an authorized attacker to disclose information over a network.

Previous 1...91011...522 Next