Out-of-bounds Read

The product reads data past the end, or before the beginning, of the intended buffer.

CVEs (9,140)

CVE VENDORS PRODUCTS UPDATED PUBLISHED CVSS
CVE-2023-48638 1Adobe 1Substance 3d Designer Jun 17, 2026 Dec 13, 2023 N/A· v4 5.5 MEDIUM· v3 N/A· v2 Adobe Substance 3D Designer versions 13.0.0 (and earlier) and 13.1.0 (and earlier) are affected by an out-of-bounds read vulnerability that could lead to disclosure of sensitive memory. An attacker could leverage this vu...Show more Adobe Substance 3D Designer versions 13.0.0 (and earlier) and 13.1.0 (and earlier) are affected by an out-of-bounds read vulnerability that could lead to disclosure of sensitive memory. An attacker could leverage this vulnerability to bypass mitigations such as ASLR. Exploitation of this issue requires user interaction in that a victim must open a malicious file.Show less
CVE-2023-48637 1Adobe 1Substance 3d Designer Jun 17, 2026 Dec 13, 2023 N/A· v4 5.5 MEDIUM· v3 N/A· v2 Adobe Substance 3D Designer versions 13.0.0 (and earlier) and 13.1.0 (and earlier) are affected by an out-of-bounds read vulnerability that could lead to disclosure of sensitive memory. An attacker could leverage this vu...Show more Adobe Substance 3D Designer versions 13.0.0 (and earlier) and 13.1.0 (and earlier) are affected by an out-of-bounds read vulnerability that could lead to disclosure of sensitive memory. An attacker could leverage this vulnerability to bypass mitigations such as ASLR. Exploitation of this issue requires user interaction in that a victim must open a malicious file.Show less
CVE-2023-48636 1Adobe 1Substance 3d Designer Jun 17, 2026 Dec 13, 2023 N/A· v4 5.5 MEDIUM· v3 N/A· v2 Adobe Substance 3D Designer versions 13.0.0 (and earlier) and 13.1.0 (and earlier) are affected by an out-of-bounds read vulnerability that could lead to disclosure of sensitive memory. An attacker could leverage this vu...Show more Adobe Substance 3D Designer versions 13.0.0 (and earlier) and 13.1.0 (and earlier) are affected by an out-of-bounds read vulnerability that could lead to disclosure of sensitive memory. An attacker could leverage this vulnerability to bypass mitigations such as ASLR. Exploitation of this issue requires user interaction in that a victim must open a malicious file.Show less
CVE-2023-48635 1Adobe 1After Effects Jun 17, 2026 Dec 13, 2023 N/A· v4 5.5 MEDIUM· v3 N/A· v2 Adobe After Effects versions 24.0.3 (and earlier) and 23.6.0 (and earlier) are affected by an out-of-bounds read vulnerability that could lead to disclosure of sensitive memory. An attacker could leverage this vulnerabil...Show more Adobe After Effects versions 24.0.3 (and earlier) and 23.6.0 (and earlier) are affected by an out-of-bounds read vulnerability that could lead to disclosure of sensitive memory. An attacker could leverage this vulnerability to bypass mitigations such as ASLR. Exploitation of this issue requires user interaction in that a victim must open a malicious file.Show less
CVE-2023-47081 1Adobe 1Substance 3d Stager Jun 17, 2026 Dec 13, 2023 N/A· v4 5.5 MEDIUM· v3 N/A· v2 Adobe Substance 3D Stager versions 2.1.1 and earlier are affected by an out-of-bounds read vulnerability that could lead to disclosure of sensitive memory. An attacker could leverage this vulnerability to bypass mitigati...Show more Adobe Substance 3D Stager versions 2.1.1 and earlier are affected by an out-of-bounds read vulnerability that could lead to disclosure of sensitive memory. An attacker could leverage this vulnerability to bypass mitigations such as ASLR. Exploitation of this issue requires user interaction in that a victim must open a malicious file.Show less
CVE-2023-47080 1Adobe 1Substance 3d Stager Jun 17, 2026 Dec 13, 2023 N/A· v4 5.5 MEDIUM· v3 N/A· v2 Adobe Substance 3D Stager versions 2.1.1 and earlier are affected by an out-of-bounds read vulnerability that could lead to disclosure of sensitive memory. An attacker could leverage this vulnerability to bypass mitigati...Show more Adobe Substance 3D Stager versions 2.1.1 and earlier are affected by an out-of-bounds read vulnerability that could lead to disclosure of sensitive memory. An attacker could leverage this vulnerability to bypass mitigations such as ASLR. Exploitation of this issue requires user interaction in that a victim must open a malicious file.Show less
CVE-2023-47079 1Adobe 1Dimension Jun 17, 2026 Dec 13, 2023 N/A· v4 5.5 MEDIUM· v3 N/A· v2 Adobe Dimension versions 3.4.10 and earlier are affected by an out-of-bounds read vulnerability that could lead to disclosure of sensitive memory. An attacker could leverage this vulnerability to bypass mitigations such...Show more Adobe Dimension versions 3.4.10 and earlier are affected by an out-of-bounds read vulnerability that could lead to disclosure of sensitive memory. An attacker could leverage this vulnerability to bypass mitigations such as ASLR. Exploitation of this issue requires user interaction in that a victim must open a malicious file.Show less
CVE-2023-47078 1Adobe 1Dimension Jun 17, 2026 Dec 13, 2023 N/A· v4 5.5 MEDIUM· v3 N/A· v2 Adobe Dimension versions 3.4.10 and earlier are affected by an out-of-bounds read vulnerability that could lead to disclosure of sensitive memory. An attacker could leverage this vulnerability to bypass mitigations such...Show more Adobe Dimension versions 3.4.10 and earlier are affected by an out-of-bounds read vulnerability that could lead to disclosure of sensitive memory. An attacker could leverage this vulnerability to bypass mitigations such as ASLR. Exploitation of this issue requires user interaction in that a victim must open a malicious file.Show less
CVE-2023-47062 1Adobe 1Dimension Jun 17, 2026 Dec 13, 2023 N/A· v4 5.5 MEDIUM· v3 N/A· v2 Adobe Dimension versions 3.4.10 and earlier are affected by an out-of-bounds read vulnerability that could lead to disclosure of sensitive memory. An attacker could leverage this vulnerability to bypass mitigations such...Show more Adobe Dimension versions 3.4.10 and earlier are affected by an out-of-bounds read vulnerability that could lead to disclosure of sensitive memory. An attacker could leverage this vulnerability to bypass mitigations such as ASLR. Exploitation of this issue requires user interaction in that a victim must open a malicious file.Show less
CVE-2023-47061 1Adobe 1Dimension Jun 17, 2026 Dec 13, 2023 N/A· v4 5.5 MEDIUM· v3 N/A· v2 Adobe Dimension versions 3.4.10 and earlier are affected by an out-of-bounds read vulnerability that could lead to disclosure of sensitive memory. An attacker could leverage this vulnerability to bypass mitigations such...Show more Adobe Dimension versions 3.4.10 and earlier are affected by an out-of-bounds read vulnerability that could lead to disclosure of sensitive memory. An attacker could leverage this vulnerability to bypass mitigations such as ASLR. Exploitation of this issue requires user interaction in that a victim must open a malicious file.Show less
CVE-2023-47077 1Adobe 1Indesign Jun 17, 2026 Dec 13, 2023 N/A· v4 5.5 MEDIUM· v3 N/A· v2 Adobe InDesign versions 19.0 (and earlier) and 17.4.2 (and earlier) are affected by an out-of-bounds read vulnerability that could lead to disclosure of sensitive memory. An attacker could leverage this vulnerability to...Show more Adobe InDesign versions 19.0 (and earlier) and 17.4.2 (and earlier) are affected by an out-of-bounds read vulnerability that could lead to disclosure of sensitive memory. An attacker could leverage this vulnerability to bypass mitigations such as ASLR. Exploitation of this issue requires user interaction in that a victim must open a malicious file.Show less
CVE-2023-47074 1Adobe 1Illustrator Jun 17, 2026 Dec 13, 2023 N/A· v4 7.8 HIGH· v3 N/A· v2 Adobe Illustrator versions 28.0 (and earlier) and 27.9 (and earlier) are affected by an out-of-bounds read vulnerability when parsing a crafted file, which could result in a read past the end of an allocated memory struc...Show more Adobe Illustrator versions 28.0 (and earlier) and 27.9 (and earlier) are affected by an out-of-bounds read vulnerability when parsing a crafted file, which could result in a read past the end of an allocated memory structure. An attacker could leverage this vulnerability to execute code in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file.Show less
CVE-2023-6377 4Debian RedhatTigervnc+1 more 5Debian Linux Enterprise Linux EusTigervnc+2 more Jun 23, 2026 Dec 13, 2023 N/A· v4 7.8 HIGH· v3 N/A· v2 A flaw was found in xorg-server. Querying or changing XKB button actions such as moving from a touchpad to a mouse can result in out-of-bounds memory reads and writes. This may allow local privilege escalation or possibl...Show more A flaw was found in xorg-server. Querying or changing XKB button actions such as moving from a touchpad to a mouse can result in out-of-bounds memory reads and writes. This may allow local privilege escalation or possible remote code execution in cases where X11 forwarding is involved.Show less
CVE-2023-36696 1Microsoft 9Windows 10 1809 Windows 10 21h2Windows 10 22h2+6 more Jun 17, 2026 Dec 12, 2023 N/A· v4 7.8 HIGH· v3 N/A· v2 Windows Cloud Files Mini Filter Driver Elevation of Privilege Vulnerability
CVE-2023-35635 1Microsoft 2Windows 11 22h2 Windows 11 23h2 Jun 17, 2026 Dec 12, 2023 N/A· v4 5.5 MEDIUM· v3 N/A· v2 Windows Kernel Denial of Service Vulnerability
CVE-2023-35629 1Microsoft 3Windows 10 1507 Windows Server 2008Windows Server 2012 Jun 17, 2026 Dec 12, 2023 N/A· v4 6.8 MEDIUM· v3 N/A· v2 Microsoft USBHUB 3.0 Device Driver Remote Code Execution Vulnerability
CVE-2023-42886 1Apple 1Macos Jun 17, 2026 Dec 12, 2023 N/A· v4 7.8 HIGH· v3 N/A· v2 An out-of-bounds read was addressed with improved bounds checking. This issue is fixed in macOS Sonoma 14.2, macOS Ventura 13.6.3, macOS Monterey 12.7.2. A user may be able to cause unexpected app termination or arbitrar...Show more An out-of-bounds read was addressed with improved bounds checking. This issue is fixed in macOS Sonoma 14.2, macOS Ventura 13.6.3, macOS Monterey 12.7.2. A user may be able to cause unexpected app termination or arbitrary code execution.Show less
CVE-2023-6610 2Linux Redhat 2Enterprise Linux Linux Kernel Jun 17, 2026 Dec 8, 2023 N/A· v4 7.1 HIGH· v3 N/A· v2 An out-of-bounds read vulnerability was found in smb2_dump_detail in fs/smb/client/smb2ops.c in the Linux Kernel. This issue could allow a local attacker to crash the system or leak internal kernel information.
CVE-2023-6606 2Linux Redhat 5Enterprise Linux Enterprise Linux EusEnterprise Linux Server Aus+2 more Jun 17, 2026 Dec 8, 2023 N/A· v4 7.1 HIGH· v3 N/A· v2 An out-of-bounds read vulnerability was found in smbCalcSize in fs/smb/client/netmisc.c in the Linux Kernel. This issue could allow a local attacker to crash the system or leak internal kernel information.
CVE-2023-48422 1Google 1Android Jun 17, 2026 Dec 8, 2023 N/A· v4 5.5 MEDIUM· v3 N/A· v2 In Init of protocolnetadapter.cpp, there is a possible out of bounds read due to a missing bounds check. This could lead to local information disclosure with no additional execution privileges needed. User interaction is...Show more In Init of protocolnetadapter.cpp, there is a possible out of bounds read due to a missing bounds check. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation.Show less

Previous 1...167168169...457 Next