Out-of-bounds Read

The product reads data past the end, or before the beginning, of the intended buffer.

CVEs (9,136)

CVE VENDORS PRODUCTS UPDATED PUBLISHED CVSS
CVE-2024-39387 1Adobe 1Bridge Jun 17, 2026 Aug 14, 2024 N/A· v4 5.5 MEDIUM· v3 N/A· v2 Bridge versions 13.0.8, 14.1.1 and earlier are affected by an out-of-bounds read vulnerability that could lead to disclosure of sensitive memory. An attacker could leverage this vulnerability to bypass mitigations such a...Show more Bridge versions 13.0.8, 14.1.1 and earlier are affected by an out-of-bounds read vulnerability that could lead to disclosure of sensitive memory. An attacker could leverage this vulnerability to bypass mitigations such as ASLR. Exploitation of this issue requires user interaction in that a victim must open a malicious file.Show less
CVE-2024-34135 1Adobe 1Illustrator Jun 17, 2026 Aug 14, 2024 N/A· v4 5.5 MEDIUM· v3 N/A· v2 Illustrator versions 28.5, 27.9.4 and earlier are affected by an out-of-bounds read vulnerability that could lead to disclosure of sensitive memory. An attacker could leverage this vulnerability to bypass mitigations suc...Show more Illustrator versions 28.5, 27.9.4 and earlier are affected by an out-of-bounds read vulnerability that could lead to disclosure of sensitive memory. An attacker could leverage this vulnerability to bypass mitigations such as ASLR. Exploitation of this issue requires user interaction in that a victim must open a malicious file.Show less
CVE-2024-34134 1Adobe 1Illustrator Jun 17, 2026 Aug 14, 2024 N/A· v4 5.5 MEDIUM· v3 N/A· v2 Illustrator versions 28.5, 27.9.4 and earlier are affected by an out-of-bounds read vulnerability that could lead to disclosure of sensitive memory. An attacker could leverage this vulnerability to bypass mitigations suc...Show more Illustrator versions 28.5, 27.9.4 and earlier are affected by an out-of-bounds read vulnerability that could lead to disclosure of sensitive memory. An attacker could leverage this vulnerability to bypass mitigations such as ASLR. Exploitation of this issue requires user interaction in that a victim must open a malicious file.Show less
CVE-2024-34127 1Adobe 1Indesign Jun 17, 2026 Aug 14, 2024 N/A· v4 5.5 MEDIUM· v3 N/A· v2 InDesign Desktop versions ID19.4, ID18.5.2 and earlier are affected by an out-of-bounds read vulnerability that could lead to disclosure of sensitive memory. An attacker could leverage this vulnerability to bypass mitiga...Show more InDesign Desktop versions ID19.4, ID18.5.2 and earlier are affected by an out-of-bounds read vulnerability that could lead to disclosure of sensitive memory. An attacker could leverage this vulnerability to bypass mitigations such as ASLR. Exploitation of this issue requires user interaction in that a victim must open a malicious file.Show less
CVE-2024-34126 1Adobe 1Dimension Jun 17, 2026 Aug 14, 2024 N/A· v4 5.5 MEDIUM· v3 N/A· v2 Dimension versions 3.4.11 and earlier are affected by an out-of-bounds read vulnerability that could lead to disclosure of sensitive memory. An attacker could leverage this vulnerability to bypass mitigations such as ASL...Show more Dimension versions 3.4.11 and earlier are affected by an out-of-bounds read vulnerability that could lead to disclosure of sensitive memory. An attacker could leverage this vulnerability to bypass mitigations such as ASLR. Exploitation of this issue requires user interaction in that a victim must open a malicious file.Show less
CVE-2024-34125 1Adobe 1Dimension Jun 17, 2026 Aug 14, 2024 N/A· v4 5.5 MEDIUM· v3 N/A· v2 Dimension versions 3.4.11 and earlier are affected by an out-of-bounds read vulnerability that could lead to disclosure of sensitive memory. An attacker could leverage this vulnerability to bypass mitigations such as ASL...Show more Dimension versions 3.4.11 and earlier are affected by an out-of-bounds read vulnerability that could lead to disclosure of sensitive memory. An attacker could leverage this vulnerability to bypass mitigations such as ASLR. Exploitation of this issue requires user interaction in that a victim must open a malicious file.Show less
CVE-2024-20790 1Adobe 1Dimension Jun 17, 2026 Aug 14, 2024 N/A· v4 5.5 MEDIUM· v3 N/A· v2 Dimension versions 3.4.11 and earlier are affected by an out-of-bounds read vulnerability that could lead to disclosure of sensitive memory. An attacker could leverage this vulnerability to bypass mitigations such as ASL...Show more Dimension versions 3.4.11 and earlier are affected by an out-of-bounds read vulnerability that could lead to disclosure of sensitive memory. An attacker could leverage this vulnerability to bypass mitigations such as ASLR. Exploitation of this issue requires user interaction in that a victim must open a malicious file.Show less
CVE-2023-49144 - - Jun 17, 2026 Aug 14, 2024 8.1 HIGH· v4 6.7 MEDIUM· v3 N/A· v2 Out of bounds read in OpenBMC Firmware for some Intel(R) Server Platforms before versions egs-1.15-0, bhs-0.27 may allow a privileged user to potentially enable information disclosure via local access.
CVE-2024-41863 1Adobe 1Substance 3d Sampler Jun 17, 2026 Aug 14, 2024 N/A· v4 5.5 MEDIUM· v3 N/A· v2 Substance3D - Sampler versions 4.5 and earlier are affected by an out-of-bounds read vulnerability that could lead to disclosure of sensitive memory. An attacker could leverage this vulnerability to bypass mitigations su...Show more Substance3D - Sampler versions 4.5 and earlier are affected by an out-of-bounds read vulnerability that could lead to disclosure of sensitive memory. An attacker could leverage this vulnerability to bypass mitigations such as ASLR. Exploitation of this issue requires user interaction in that a victim must open a malicious file.Show less
CVE-2024-41862 1Adobe 1Substance 3d Sampler Jun 17, 2026 Aug 14, 2024 N/A· v4 5.5 MEDIUM· v3 N/A· v2 Substance3D - Sampler versions 4.5 and earlier are affected by an out-of-bounds read vulnerability that could lead to disclosure of sensitive memory. An attacker could leverage this vulnerability to bypass mitigations su...Show more Substance3D - Sampler versions 4.5 and earlier are affected by an out-of-bounds read vulnerability that could lead to disclosure of sensitive memory. An attacker could leverage this vulnerability to bypass mitigations such as ASLR. Exploitation of this issue requires user interaction in that a victim must open a malicious file.Show less
CVE-2024-41861 1Adobe 1Substance 3d Sampler Jun 17, 2026 Aug 14, 2024 N/A· v4 5.5 MEDIUM· v3 N/A· v2 Substance3D - Sampler versions 4.5 and earlier are affected by an out-of-bounds read vulnerability that could lead to disclosure of sensitive memory. An attacker could leverage this vulnerability to bypass mitigations su...Show more Substance3D - Sampler versions 4.5 and earlier are affected by an out-of-bounds read vulnerability that could lead to disclosure of sensitive memory. An attacker could leverage this vulnerability to bypass mitigations such as ASLR. Exploitation of this issue requires user interaction in that a victim must open a malicious file.Show less
CVE-2024-41860 1Adobe 1Substance 3d Sampler Jun 17, 2026 Aug 14, 2024 N/A· v4 5.5 MEDIUM· v3 N/A· v2 Substance3D - Sampler versions 4.5 and earlier are affected by an out-of-bounds read vulnerability that could lead to disclosure of sensitive memory. An attacker could leverage this vulnerability to bypass mitigations su...Show more Substance3D - Sampler versions 4.5 and earlier are affected by an out-of-bounds read vulnerability that could lead to disclosure of sensitive memory. An attacker could leverage this vulnerability to bypass mitigations such as ASLR. Exploitation of this issue requires user interaction in that a victim must open a malicious file.Show less
CVE-2024-38214 1Microsoft 6Windows Server 2008 Windows Server 2012Windows Server 2016+3 more Jun 17, 2026 Aug 13, 2024 N/A· v4 6.5 MEDIUM· v3 N/A· v2 Windows Routing and Remote Access Service (RRAS) Information Disclosure Vulnerability
CVE-2024-38184 1Microsoft 12Windows 10 1607 Windows 10 1809Windows 10 21h2+9 more Jun 17, 2026 Aug 13, 2024 N/A· v4 7.8 HIGH· v3 N/A· v2 Windows Kernel-Mode Driver Elevation of Privilege Vulnerability
CVE-2024-38155 1Microsoft 7Windows 10 1809 Windows 10 21h2Windows 10 22h2+4 more Jun 17, 2026 Aug 13, 2024 N/A· v4 5.5 MEDIUM· v3 N/A· v2 Security Center Broker Information Disclosure Vulnerability
CVE-2024-38151 1Microsoft 15Windows 10 1507 Windows 10 1607Windows 10 1809+12 more Jun 17, 2026 Aug 13, 2024 N/A· v4 5.5 MEDIUM· v3 N/A· v2 Windows Kernel Information Disclosure Vulnerability
CVE-2024-38148 1Microsoft 6Windows 11 21h2 Windows 11 22h2Windows 11 23h2+3 more Jun 17, 2026 Aug 13, 2024 N/A· v4 7.5 HIGH· v3 N/A· v2 Windows Secure Channel Denial of Service Vulnerability
CVE-2024-38134 1Microsoft 15Windows 10 1507 Windows 10 1607Windows 10 1809+12 more Jun 17, 2026 Aug 13, 2024 N/A· v4 7.8 HIGH· v3 N/A· v2 Kernel Streaming WOW Thunk Service Driver Elevation of Privilege Vulnerability
CVE-2024-38132 1Microsoft 14Windows 10 1507 Windows 10 1607Windows 10 1809+11 more Jun 17, 2026 Aug 13, 2024 N/A· v4 7.5 HIGH· v3 N/A· v2 Windows Network Address Translation (NAT) Denial of Service Vulnerability
CVE-2024-38123 1Microsoft 1Windows 11 24h2 Jun 17, 2026 Aug 13, 2024 N/A· v4 4.4 MEDIUM· v3 N/A· v2 Windows Bluetooth Driver Information Disclosure Vulnerability

Previous 1...130131132...457 Next