← Back
CWE-125

9,090 CVEs • Abstraction: Base

Out-of-bounds Read

The product reads data past the end, or before the beginning, of the intended buffer.

JSON object

Loading...

CVEs (9,090)

CVE
VENDORS
PRODUCTS
UPDATED
PUBLISHED
CVSS
1Microsoft
11Windows 10 1607
Windows 10 1809Windows 10 21h2+8 more
Jul 22, 2026
Jul 14, 2026
N/A· v4
8.2 HIGH· v3
N/A· v2
Out-of-bounds read in Windows Kernel allows an unauthorized attacker to disclose information over a network.
1Microsoft
1Windows 11 26h1
Jul 22, 2026
Jul 14, 2026
N/A· v4
5.5 MEDIUM· v3
N/A· v2
Out-of-bounds read in Windows Container Isolation FS Filter Driver (unionfs.sys) allows an authorized attacker to disclose information locally.
1Microsoft
12Windows 10 1607
Windows 10 1809Windows 10 21h2+9 more
Jul 20, 2026
Jul 14, 2026
N/A· v4
7.8 HIGH· v3
N/A· v2
Out-of-bounds read in Windows NTFS allows an authorized attacker to elevate privileges locally.
1Microsoft
4Windows 11 24h2
Windows 11 25h2Windows 11 26h1+1 more
Jul 22, 2026
Jul 14, 2026
N/A· v4
5.5 MEDIUM· v3
N/A· v2
Out-of-bounds read in Windows HTTP.sys allows an unauthorized attacker to disclose information locally.
1Microsoft
7365 Apps
ExcelMicrosoft 365+4 more
Jul 16, 2026
Jul 14, 2026
N/A· v4
5.5 MEDIUM· v3
N/A· v2
Out-of-bounds read in Microsoft Office Excel allows an unauthorized attacker to disclose information locally.
1Microsoft
9Windows 10 1809
Windows 10 21h2Windows 10 22h2+6 more
Jul 22, 2026
Jul 14, 2026
N/A· v4
5.5 MEDIUM· v3
N/A· v2
Out-of-bounds read in Windows Cloud Files Mini Filter Driver allows an authorized attacker to disclose information locally.
1Microsoft
7Windows 10 21h2
Windows 10 22h2Windows 11 24h2+4 more
Jul 22, 2026
Jul 14, 2026
N/A· v4
7.8 HIGH· v3
N/A· v2
Out-of-bounds read in Windows Kernel allows an authorized attacker to elevate privileges locally.
1Microsoft
12Windows 10 1607
Windows 10 1809Windows 10 21h2+9 more
Jul 22, 2026
Jul 14, 2026
N/A· v4
7.8 HIGH· v3
N/A· v2
Out-of-bounds read in Windows NTFS allows an unauthorized attacker to execute code locally.
1Microsoft
11Windows 10 1607
Windows 10 1809Windows 10 21h2+8 more
Jul 21, 2026
Jul 14, 2026
N/A· v4
7.8 HIGH· v3
N/A· v2
Out-of-bounds read in Windows Kernel allows an authorized attacker to elevate privileges locally.
1Microsoft
12Windows 10 1607
Windows 10 1809Windows 10 21h2+9 more
Jul 22, 2026
Jul 14, 2026
N/A· v4
5.5 MEDIUM· v3
N/A· v2
Out-of-bounds read in Windows TCP/IP allows an authorized attacker to disclose information locally.
1Adobe
1Audition
Jul 15, 2026
Jul 14, 2026
N/A· v4
5.5 MEDIUM· v3
N/A· v2
Audition is affected by an out-of-bounds read vulnerability that could lead to disclosure of sensitive memory. An attacker could leverage this vulnerability to disclose sensitive information. Exploitation of this issue r...Show more
Audition is affected by an out-of-bounds read vulnerability that could lead to disclosure of sensitive memory. An attacker could leverage this vulnerability to disclose sensitive information. Exploitation of this issue requires user interaction in that a victim must open a malicious file.Show less
1Microsoft
12Windows 10 1607
Windows 10 1809Windows 10 21h2+9 more
Jul 22, 2026
Jul 14, 2026
N/A· v4
5.5 MEDIUM· v3
N/A· v2
Out-of-bounds read in Windows Kernel allows an authorized attacker to bypass a security feature locally.
1Microsoft
12Windows 10 1607
Windows 10 1809Windows 10 21h2+9 more
Jul 22, 2026
Jul 14, 2026
N/A· v4
7.8 HIGH· v3
N/A· v2
Out-of-bounds read in Microsoft Graphics Component allows an unauthorized attacker to execute code locally.
1Microsoft
12Windows 10 1607
Windows 10 1809Windows 10 21h2+9 more
Jul 22, 2026
Jul 14, 2026
N/A· v4
7.5 HIGH· v3
N/A· v2
Out-of-bounds read in Windows RDP allows an unauthorized attacker to disclose information over a network.
1Microsoft
6365 Apps
Microsoft 365Office 2016+3 more
Jul 16, 2026
Jul 14, 2026
N/A· v4
3.3 LOW· v3
N/A· v2
Out-of-bounds read in Microsoft Office allows an unauthorized attacker to disclose information locally.
1Microsoft
4Windows 11 24h2
Windows 11 25h2Windows 11 26h1+1 more
Jul 20, 2026
Jul 14, 2026
N/A· v4
7.0 HIGH· v3
N/A· v2
Concurrent execution using shared resource with improper synchronization ('race condition') in Windows USB Print Driver allows an authorized attacker to elevate privileges locally.
1Microsoft
4Windows 11 24h2
Windows 11 25h2Windows 11 26h1+1 more
Jul 20, 2026
Jul 14, 2026
N/A· v4
7.0 HIGH· v3
N/A· v2
Concurrent execution using shared resource with improper synchronization ('race condition') in Windows USB Print Driver allows an authorized attacker to elevate privileges locally.
1Microsoft
7365 Apps
ExcelMicrosoft 365+4 more
Jul 16, 2026
Jul 14, 2026
N/A· v4
6.1 MEDIUM· v3
N/A· v2
Out-of-bounds read in Microsoft Office Excel allows an unauthorized attacker to disclose information locally.
1Microsoft
4Windows 11 24h2
Windows 11 25h2Windows 11 26h1+1 more
Jul 22, 2026
Jul 14, 2026
N/A· v4
7.0 HIGH· v3
N/A· v2
Concurrent execution using shared resource with improper synchronization ('race condition') in Windows USB Print Driver allows an authorized attacker to elevate privileges locally.
-
-
Jul 15, 2026
Jul 14, 2026
8.3 HIGH· v4
N/A· v3
N/A· v2
Pillow is a Python imaging library. Prior to 12.3.0, when Pillow loads an uncompressed McIdas AREA image from a filename through the mmap raw codec path, attacker-controlled header words can set a row stride smaller than...Show more
Pillow is a Python imaging library. Prior to 12.3.0, when Pillow loads an uncompressed McIdas AREA image from a filename through the mmap raw codec path, attacker-controlled header words can set a row stride smaller than the natural row width, causing pixel access such as Image.tobytes(), getpixel, convert, or save to read beyond the mapped region and disclose adjacent process memory or fault. This issue is fixed in version 12.3.0.Show less