Out-of-bounds Read

The product reads data past the end, or before the beginning, of the intended buffer.

CVEs (9,134)

CVE VENDORS PRODUCTS UPDATED PUBLISHED CVSS
CVE-2024-47446 1Adobe 1After Effects Jun 17, 2026 Nov 12, 2024 N/A· v4 5.5 MEDIUM· v3 N/A· v2 After Effects versions 23.6.9, 24.6.2 and earlier are affected by an out-of-bounds read vulnerability that could lead to disclosure of sensitive memory. An attacker could leverage this vulnerability to bypass mitigations...Show more After Effects versions 23.6.9, 24.6.2 and earlier are affected by an out-of-bounds read vulnerability that could lead to disclosure of sensitive memory. An attacker could leverage this vulnerability to bypass mitigations such as ASLR. Exploitation of this issue requires user interaction in that a victim must open a malicious file.Show less
CVE-2024-47445 1Adobe 1After Effects Jun 17, 2026 Nov 12, 2024 N/A· v4 5.5 MEDIUM· v3 N/A· v2 After Effects versions 23.6.9, 24.6.2 and earlier are affected by an out-of-bounds read vulnerability that could lead to disclosure of sensitive memory. An attacker could leverage this vulnerability to bypass mitigations...Show more After Effects versions 23.6.9, 24.6.2 and earlier are affected by an out-of-bounds read vulnerability that could lead to disclosure of sensitive memory. An attacker could leverage this vulnerability to bypass mitigations such as ASLR. Exploitation of this issue requires user interaction in that a victim must open a malicious file.Show less
CVE-2024-47444 1Adobe 1After Effects Jun 17, 2026 Nov 12, 2024 N/A· v4 5.5 MEDIUM· v3 N/A· v2 After Effects versions 23.6.9, 24.6.2 and earlier are affected by an out-of-bounds read vulnerability that could lead to disclosure of sensitive memory. An attacker could leverage this vulnerability to bypass mitigations...Show more After Effects versions 23.6.9, 24.6.2 and earlier are affected by an out-of-bounds read vulnerability that could lead to disclosure of sensitive memory. An attacker could leverage this vulnerability to bypass mitigations such as ASLR. Exploitation of this issue requires user interaction in that a victim must open a malicious file.Show less
CVE-2024-45147 1Adobe 1Bridge Jun 17, 2026 Nov 12, 2024 N/A· v4 5.5 MEDIUM· v3 N/A· v2 Bridge versions 13.0.9, 14.1.2 and earlier are affected by an out-of-bounds read vulnerability that could lead to disclosure of sensitive memory. An attacker could leverage this vulnerability to bypass mitigations such a...Show more Bridge versions 13.0.9, 14.1.2 and earlier are affected by an out-of-bounds read vulnerability that could lead to disclosure of sensitive memory. An attacker could leverage this vulnerability to bypass mitigations such as ASLR. Exploitation of this issue requires user interaction in that a victim must open a malicious file.Show less
CVE-2024-49028 1Microsoft 4365 Apps ExcelOffice+1 more Jun 17, 2026 Nov 12, 2024 N/A· v4 7.8 HIGH· v3 N/A· v2 Microsoft Excel Remote Code Execution Vulnerability
CVE-2024-43644 1Microsoft 15Windows 10 1507 Windows 10 1607Windows 10 1809+12 more Jun 17, 2026 Nov 12, 2024 N/A· v4 7.8 HIGH· v3 N/A· v2 Windows Client-Side Caching Elevation of Privilege Vulnerability
CVE-2024-43643 1Microsoft 15Windows 10 1507 Windows 10 1607Windows 10 1809+12 more Jun 17, 2026 Nov 12, 2024 N/A· v4 6.8 MEDIUM· v3 N/A· v2 Windows USB Video Class System Driver Elevation of Privilege Vulnerability
CVE-2024-43638 1Microsoft 15Windows 10 1507 Windows 10 1607Windows 10 1809+12 more Jun 17, 2026 Nov 12, 2024 N/A· v4 6.8 MEDIUM· v3 N/A· v2 Windows USB Video Class System Driver Elevation of Privilege Vulnerability
CVE-2024-43637 1Microsoft 15Windows 10 1507 Windows 10 1607Windows 10 1809+12 more Jun 17, 2026 Nov 12, 2024 N/A· v4 6.8 MEDIUM· v3 N/A· v2 Windows USB Video Class System Driver Elevation of Privilege Vulnerability
CVE-2024-43634 1Microsoft 15Windows 10 1507 Windows 10 1607Windows 10 1809+12 more Jun 17, 2026 Nov 12, 2024 N/A· v4 6.8 MEDIUM· v3 N/A· v2 Windows USB Video Class System Driver Elevation of Privilege Vulnerability
CVE-2024-43449 1Microsoft 15Windows 10 1507 Windows 10 1607Windows 10 1809+12 more Jun 17, 2026 Nov 12, 2024 N/A· v4 6.8 MEDIUM· v3 N/A· v2 Windows USB Video Class System Driver Elevation of Privilege Vulnerability
CVE-2024-9843 1Ivanti 1Secure Access Client Jun 17, 2026 Nov 12, 2024 N/A· v4 5.5 MEDIUM· v3 N/A· v2 A buffer over-read in Ivanti Secure Access Client before 22.7R4 allows a local unauthenticated attacker to cause a denial of service.
CVE-2024-49527 1Adobe 1Animate Jun 17, 2026 Nov 12, 2024 N/A· v4 5.5 MEDIUM· v3 N/A· v2 Animate versions 23.0.7, 24.0.4 and earlier are affected by an out-of-bounds read vulnerability that could lead to disclosure of sensitive memory. An attacker could leverage this vulnerability to bypass mitigations such...Show more Animate versions 23.0.7, 24.0.4 and earlier are affected by an out-of-bounds read vulnerability that could lead to disclosure of sensitive memory. An attacker could leverage this vulnerability to bypass mitigations such as ASLR. Exploitation of this issue requires user interaction in that a victim must open a malicious file.Show less
CVE-2024-50331 1Ivanti 1Avalanche Jun 17, 2026 Nov 12, 2024 N/A· v4 7.5 HIGH· v3 N/A· v2 An out-of-bounds read vulnerability in Ivanti Avalanche before 6.4.6 allows a remote unauthenticated attacker to leak sensitive information in memory.
CVE-2024-51565 - - Jun 17, 2026 Nov 12, 2024 N/A· v4 6.5 MEDIUM· v3 N/A· v2 The hda driver is vulnerable to a buffer over-read from a guest-controlled value.
CVE-2024-51562 - - Jun 17, 2026 Nov 12, 2024 N/A· v4 6.5 MEDIUM· v3 N/A· v2 The NVMe driver function nvme_opc_get_log_page is vulnerable to a buffer over-read from a guest-controlled value.
CVE-2024-47941 1Siemens 1Solid Edge Se2024 Jun 17, 2026 Nov 12, 2024 7.3 HIGH· v4 7.8 HIGH· v3 N/A· v2 A vulnerability has been identified in Solid Edge SE2024 (All versions < V224.0 Update 9). The affected applications contain an out of bounds read past the end of an allocated structure while parsing specially crafted PA...Show more A vulnerability has been identified in Solid Edge SE2024 (All versions < V224.0 Update 9). The affected applications contain an out of bounds read past the end of an allocated structure while parsing specially crafted PAR files. This could allow an attacker to execute code in the context of the current process.Show less
CVE-2024-47940 1Siemens 1Solid Edge Se2024 Jun 17, 2026 Nov 12, 2024 7.3 HIGH· v4 7.8 HIGH· v3 N/A· v2 A vulnerability has been identified in Solid Edge SE2024 (All versions < V224.0 Update 9). The affected applications contain an out of bounds read past the end of an allocated structure while parsing specially crafted PS...Show more A vulnerability has been identified in Solid Edge SE2024 (All versions < V224.0 Update 9). The affected applications contain an out of bounds read past the end of an allocated structure while parsing specially crafted PSM files. This could allow an attacker to execute code in the context of the current process.Show less
CVE-2024-46891 1Siemens 1Sinec Ins Jun 17, 2026 Nov 12, 2024 6.9 MEDIUM· v4 7.5 HIGH· v3 N/A· v2 A vulnerability has been identified in SINEC INS (All versions < V1.0 SP2 Update 3). The affected application does not properly restrict the size of generated log files. This could allow an unauthenticated remote attacke...Show more A vulnerability has been identified in SINEC INS (All versions < V1.0 SP2 Update 3). The affected application does not properly restrict the size of generated log files. This could allow an unauthenticated remote attacker to trigger a large amount of logged events to exhaust the system's resources and create a denial of service condition.Show less
CVE-2024-46956 3Artifex DebianSuse 5Debian Linux GhostscriptLinux Enterprise High Performance Computing+2 more Jun 17, 2026 Nov 10, 2024 N/A· v4 7.8 HIGH· v3 N/A· v2 An issue was discovered in psi/zfile.c in Artifex Ghostscript before 10.04.0. Out-of-bounds data access in filenameforall can lead to arbitrary code execution.

Previous 1...118119120...457 Next