← Back
CWE-126

519 CVEs • Abstraction: Variant

Buffer Over-read

The product reads from a buffer using buffer access mechanisms such as indexes or pointers that reference memory locations after the targeted buffer.

JSON object

Loading...

CVEs (519)

CVE
VENDORS
PRODUCTS
UPDATED
PUBLISHED
CVSS
1Microsoft
5365 Apps
Office 2019Office 2021+2 more
Sep 8, 2026
Sep 8, 2026
N/A· v4
5.5 MEDIUM· v3
N/A· v2
Buffer over-read in Microsoft Office Word allows an unauthorized attacker to disclose information locally.
1Microsoft
5365 Apps
Office 2019Office 2021+2 more
Sep 8, 2026
Sep 8, 2026
N/A· v4
5.5 MEDIUM· v3
N/A· v2
Buffer over-read in Microsoft Office Word allows an unauthorized attacker to disclose information locally.
-
-
Sep 8, 2026
Sep 8, 2026
N/A· v4
5.5 MEDIUM· v3
N/A· v2
Buffer over-read in Microsoft Office Excel allows an unauthorized attacker to disclose information locally.
-
-
Sep 8, 2026
Sep 8, 2026
N/A· v4
4.3 MEDIUM· v3
N/A· v2
Buffer over-read in Windows Storage allows an unauthorized attacker to disclose information with a physical attack.
-
-
Sep 8, 2026
Sep 8, 2026
N/A· v4
6.5 MEDIUM· v3
N/A· v2
Buffer over-read in SQL Server allows an authorized attacker to disclose information over a network.
-
-
Sep 8, 2026
Sep 8, 2026
N/A· v4
6.5 MEDIUM· v3
N/A· v2
Buffer over-read in Microsoft Office Excel allows an unauthorized attacker to disclose information over a network.
-
-
Sep 8, 2026
Sep 8, 2026
N/A· v4
7.5 HIGH· v3
N/A· v2
Buffer over-read in Windows Message Queuing Queue Manager allows an unauthorized attacker to disclose information over a network.
-
-
Sep 8, 2026
Sep 8, 2026
N/A· v4
5.5 MEDIUM· v3
N/A· v2
Buffer over-read in Windows Encrypting File System (EFS) allows an authorized attacker to disclose information locally.
1Microsoft
6365 Apps
Microsoft 365Office 2019+3 more
Sep 8, 2026
Sep 8, 2026
N/A· v4
6.5 MEDIUM· v3
N/A· v2
Buffer over-read in Microsoft Office Word allows an unauthorized attacker to disclose information over a network.
-
-
Sep 8, 2026
Sep 8, 2026
N/A· v4
6.5 MEDIUM· v3
N/A· v2
Buffer over-read in Microsoft Office allows an unauthorized attacker to disclose information over a network.
-
-
Sep 8, 2026
Sep 8, 2026
N/A· v4
7.0 HIGH· v3
N/A· v2
Buffer over-read in Windows Win32K allows an authorized attacker to elevate privileges locally.
-
-
Sep 8, 2026
Sep 8, 2026
N/A· v4
7.8 HIGH· v3
N/A· v2
Buffer over-read in Windows Volume Manager Extension Driver allows an authorized attacker to elevate privileges locally.
-
-
Sep 8, 2026
Sep 8, 2026
N/A· v4
4.8 MEDIUM· v3
N/A· v2
Use after free in Windows Overlay Filter allows an authorized attacker to disclose information over a network.
-
-
Sep 8, 2026
Sep 8, 2026
N/A· v4
5.7 MEDIUM· v3
N/A· v2
Buffer over-read in Windows DHCP Server allows an authorized attacker to deny service over an adjacent network.
-
-
Sep 8, 2026
Sep 8, 2026
N/A· v4
4.7 MEDIUM· v3
N/A· v2
Buffer over-read in Windows Overlay Filter allows an authorized attacker to disclose information locally.
-
-
Sep 8, 2026
Sep 8, 2026
N/A· v4
7.8 HIGH· v3
N/A· v2
Buffer over-read in Windows NTFS allows an authorized attacker to execute code locally.
-
-
Sep 8, 2026
Sep 8, 2026
N/A· v4
5.5 MEDIUM· v3
N/A· v2
Buffer over-read in Windows NTFS allows an authorized attacker to disclose information locally.
-
-
Sep 8, 2026
Sep 8, 2026
N/A· v4
6.5 MEDIUM· v3
N/A· v2
Buffer over-read in SQL Server allows an authorized attacker to disclose information over a network.
-
-
Sep 8, 2026
Sep 8, 2026
N/A· v4
6.5 MEDIUM· v3
N/A· v2
Buffer over-read in SQL Server allows an authorized attacker to disclose information over a network.
-
-
Sep 8, 2026
Sep 5, 2026
N/A· v4
5.0 MEDIUM· v3
N/A· v2
The rpcap client code that processes a RPCAP_MSG_PACKET message received from the server incorrectly validates its headers. A malicious server can send a crafted message and cause the client to treat up to 20 bytes of t...Show more
The rpcap client code that processes a RPCAP_MSG_PACKET message received from the server incorrectly validates its headers. A malicious server can send a crafted message and cause the client to treat up to 20 bytes of the client process memory beyond the end of the buffer as if it was a part of the captured packet.Show less