Out-of-bounds Read

The product reads data past the end, or before the beginning, of the intended buffer.

CVEs (10,624)

CVE VENDORS PRODUCTS UPDATED PUBLISHED CVSS
CVE-2024-20737 1Adobe 1After Effects Jun 17, 2026 Apr 10, 2024 N/A· v4 5.5 MEDIUM· v3 N/A· v2 After Effects versions 24.1, 23.6.2 and earlier are affected by an out-of-bounds read vulnerability that could lead to disclosure of sensitive memory. An attacker could leverage this vulnerability to bypass mitigations s...Show more After Effects versions 24.1, 23.6.2 and earlier are affected by an out-of-bounds read vulnerability that could lead to disclosure of sensitive memory. An attacker could leverage this vulnerability to bypass mitigations such as ASLR. Exploitation of this issue requires user interaction in that a victim must open a malicious file.Show less
CVE-2024-28938 1Microsoft 5Odbc Driver For Sql Server Sql Server 2019Sql Server 2022+2 more Jun 17, 2026 Apr 9, 2024 N/A· v4 8.8 HIGH· v3 N/A· v2 Microsoft ODBC Driver for SQL Server Remote Code Execution Vulnerability
CVE-2024-28902 1Microsoft 13Windows 10 1507 Windows 10 1607Windows 10 1809+10 more Jun 17, 2026 Apr 9, 2024 N/A· v4 5.5 MEDIUM· v3 N/A· v2 Windows Remote Access Connection Manager Information Disclosure Vulnerability
CVE-2024-28901 1Microsoft 13Windows 10 1507 Windows 10 1607Windows 10 1809+10 more Jun 17, 2026 Apr 9, 2024 N/A· v4 5.5 MEDIUM· v3 N/A· v2 Windows Remote Access Connection Manager Information Disclosure Vulnerability
CVE-2024-28900 1Microsoft 13Windows 10 1507 Windows 10 1607Windows 10 1809+10 more Jun 17, 2026 Apr 9, 2024 N/A· v4 5.5 MEDIUM· v3 N/A· v2 Windows Remote Access Connection Manager Information Disclosure Vulnerability
CVE-2024-26255 1Microsoft 9Windows 10 1809 Windows 10 21h2Windows 10 22h2+6 more Jun 17, 2026 Apr 9, 2024 N/A· v4 5.5 MEDIUM· v3 N/A· v2 Windows Remote Access Connection Manager Information Disclosure Vulnerability
CVE-2024-26245 1Microsoft 1Windows 10 1507 Jun 17, 2026 Apr 9, 2024 N/A· v4 7.8 HIGH· v3 N/A· v2 Windows SMB Elevation of Privilege Vulnerability
CVE-2024-26226 1Microsoft 6Windows Server 2008 Windows Server 2012Windows Server 2016+3 more Jun 17, 2026 Apr 9, 2024 N/A· v4 6.5 MEDIUM· v3 N/A· v2 Windows Distributed File System (DFS) Information Disclosure Vulnerability
CVE-2024-26217 1Microsoft 10Windows 10 1507 Windows 10 1607Windows 10 21h2+7 more Jun 17, 2026 Apr 9, 2024 N/A· v4 3.3 LOW· v3 N/A· v2 Windows Remote Access Connection Manager Information Disclosure Vulnerability
CVE-2024-26207 1Microsoft 13Windows 10 1507 Windows 10 1607Windows 10 1809+10 more Jun 17, 2026 Apr 9, 2024 N/A· v4 5.5 MEDIUM· v3 N/A· v2 Windows Remote Access Connection Manager Information Disclosure Vulnerability
CVE-2024-26175 1Microsoft 10Windows 10 1507 Windows 10 1607Windows 10 21h2+7 more Jun 17, 2026 Apr 9, 2024 N/A· v4 7.8 HIGH· v3 N/A· v2 Secure Boot Security Feature Bypass Vulnerability
CVE-2024-26172 1Microsoft 9Windows 10 1809 Windows 10 21h2Windows 10 22h2+6 more Jun 17, 2026 Apr 9, 2024 N/A· v4 5.5 MEDIUM· v3 N/A· v2 Windows DWM Core Library Information Disclosure Vulnerability
CVE-2024-26275 1Siemens 3Jt2go ParasolidTeamcenter Visualization Jun 17, 2026 Apr 9, 2024 7.3 HIGH· v4 7.8 HIGH· v3 N/A· v2 A vulnerability has been identified in JT2Go (All versions < V2312.0004), Parasolid V35.1 (All versions < V35.1.254), Parasolid V36.0 (All versions < V36.0.207), Parasolid V36.1 (All versions < V36.1.147), Teamcenter Vis...Show more A vulnerability has been identified in JT2Go (All versions < V2312.0004), Parasolid V35.1 (All versions < V35.1.254), Parasolid V36.0 (All versions < V36.0.207), Parasolid V36.1 (All versions < V36.1.147), Teamcenter Visualization V14.2 (All versions < V14.2.0.12), Teamcenter Visualization V14.3 (All versions < V14.3.0.9), Teamcenter Visualization V2312 (All versions < V2312.0004). The affected applications contain an out of bounds read past the end of an allocated structure while parsing specially crafted X_T files. This could allow an attacker to execute code in the context of the current process.Show less
CVE-2024-22949 1Jfree 1Jfreechart Jul 9, 2026 Apr 8, 2024 N/A· v4 9.1 CRITICAL· v3 N/A· v2 JFreeChart v1.5.4 was discovered to contain a NullPointerException via the component /chart/annotations/CategoryLineAnnotation. NOTE: this is disputed by multiple third parties who believe there was not reasonable eviden...Show more JFreeChart v1.5.4 was discovered to contain a NullPointerException via the component /chart/annotations/CategoryLineAnnotation. NOTE: this is disputed by multiple third parties who believe there was not reasonable evidence to determine the existence of a vulnerability. The submission may have been based on a tool that is not sufficiently robust for vulnerability identification.Show less
CVE-2024-23086 1Mikkotommila 1Apfloat Jul 9, 2026 Apr 8, 2024 N/A· v4 9.8 CRITICAL· v3 N/A· v2 Apfloat v1.10.1 was discovered to contain a stack overflow via the component org.apfloat.internal.DoubleModMath::modPow(double. NOTE: this is disputed by multiple third parties who believe there was not reasonable eviden...Show more Apfloat v1.10.1 was discovered to contain a stack overflow via the component org.apfloat.internal.DoubleModMath::modPow(double. NOTE: this is disputed by multiple third parties who believe there was not reasonable evidence to determine the existence of a vulnerability. The submission may have been based on a tool that is not sufficiently robust for vulnerability identification.Show less
CVE-2023-52536 1Google 1Android Jun 17, 2026 Apr 8, 2024 N/A· v4 4.4 MEDIUM· v3 N/A· v2 In faceid service, there is a possible out of bounds read due to a missing bounds check. This could lead to local denial of service with System execution privileges needed
CVE-2024-3159 1Google 1Chrome Jun 17, 2026 Apr 6, 2024 N/A· v4 8.8 HIGH· v3 N/A· v2 Out of bounds memory access in V8 in Google Chrome prior to 123.0.6312.105 allowed a remote attacker to perform arbitrary read/write via a crafted HTML page. (Chromium security severity: High)
CVE-2024-3156 1Google 1Chrome Jun 17, 2026 Apr 6, 2024 N/A· v4 8.8 HIGH· v3 N/A· v2 Inappropriate implementation in V8 in Google Chrome prior to 123.0.6312.105 allowed a remote attacker to potentially perform out of bounds memory access via a crafted HTML page. (Chromium security severity: High)
CVE-2023-25494 - - Jun 17, 2026 Apr 5, 2024 N/A· v4 6.7 MEDIUM· v3 N/A· v2 A potential vulnerability were reported in the BIOS of some Desktop, Smart Edge, and ThinkStation products that could allow a local attacker with elevated privileges to write to NVRAM variables.
CVE-2024-29783 1Google 1Android Jun 17, 2026 Apr 5, 2024 N/A· v4 6.7 MEDIUM· v3 N/A· v2 In tmu_get_tr_thresholds, there is a possible out of bounds read due to a missing bounds check. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not need...Show more In tmu_get_tr_thresholds, there is a possible out of bounds read due to a missing bounds check. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation.Show less

Previous 1...227228229...532 Next