CWE-126
578 CVEs • Abstraction: Variant
Buffer Over-read
The product reads from a buffer using buffer access mechanisms such as indexes or pointers that reference memory locations after the targeted buffer.
CVEs (578)
CVE VENDORS PRODUCTS UPDATED PUBLISHED CVSS |
|---|
Buffer over-read in Windows RNDIS allows an unauthorized attacker to disclose information with a physical attack. |
Buffer over-read in Windows Overlay Filter allows an authorized attacker to elevate privileges locally. |
Buffer over-read in Servicing Stack Updates allows an authorized attacker to disclose information locally. |
Buffer over-read in Windows IKE Extension allows an authorized attacker to deny service over a network. |
Buffer over-read in Windows Encrypting File System (EFS) allows an authorized attacker to disclose information locally. |
Buffer over-read in Desktop Window Manager allows an authorized attacker to disclose information locally. |
1Microsoft 14Windows 10 1607 Windows 10 1809Windows 10 21h2+11 moreOct 16, 2026 Oct 13, 2026 N/A· v4 5.5 MEDIUM· v3 N/A· v2 Buffer over-read in Windows CD-ROM Driver allows an authorized attacker to disclose information locally. |
1Microsoft 14Windows 10 1607 Windows 10 1809Windows 10 21h2+11 moreOct 16, 2026 Oct 13, 2026 N/A· v4 7.8 HIGH· v3 N/A· v2 Integer overflow or wraparound in Windows Overlay Filter allows an authorized attacker to elevate privileges locally. |
1Microsoft 14Windows 10 1607 Windows 10 1809Windows 10 21h2+11 moreOct 16, 2026 Oct 13, 2026 N/A· v4 5.5 MEDIUM· v3 N/A· v2 Buffer over-read in Windows Overlay Filter allows an authorized attacker to disclose information locally. |
1Microsoft 14Windows 10 1607 Windows 10 1809Windows 10 21h2+11 moreOct 16, 2026 Oct 13, 2026 N/A· v4 7.8 HIGH· v3 N/A· v2 Buffer over-read in Windows Overlay Filter allows an authorized attacker to elevate privileges locally. |
1Microsoft 14Windows 10 1607 Windows 10 1809Windows 10 21h2+11 moreOct 16, 2026 Oct 13, 2026 N/A· v4 7.8 HIGH· v3 N/A· v2 Buffer over-read in Windows Overlay Filter allows an authorized attacker to elevate privileges locally. |
1Microsoft 7Windows 11 23h2 Windows 11 24h2Windows 11 25h2+4 moreOct 16, 2026 Oct 13, 2026 N/A· v4 7.8 HIGH· v3 N/A· v2 Buffer over-read in Windows Overlay Filter allows an authorized attacker to execute code locally. |
Buffer over-read in Windows GDI allows an authorized attacker to elevate privileges locally. |
Buffer over-read in Windows Broadcast DVR User Service allows an authorized attacker to disclose information locally. |
The Affinity by Canva application for macOS before 3.3.1 (October 2026 release) did not validate image dimensions against the size of the pixel data when generating QuickLook thumbnails and previews of Affinity document...Show more |
The Affinity by Canva application before 3.3.1 (October 2026 release) did not perform adequate bounds checking when parsing arrays of strings in Affinity document files, leading to a heap buffer over-read. A threat actor...Show more |
The Affinity by Canva application before 3.3.1 (October 2026 release) did not correctly handle incomplete UTF-8 character sequences when parsing text in Affinity document files, leading to a heap buffer over-read. A thre...Show more |
1Qualcomm 14Congo Firmware Fastconnect 7800 FirmwareFastconnect 8800 Mobile Connectivity System Firmware+11 moreOct 9, 2026 Oct 6, 2026 N/A· v4 7.5 HIGH· v3 N/A· v2 Transient DOS when processing a continuous receive command with a zero-sized global configuration override. |
1Mediatek 83Mt2716 Firmware Mt2735 FirmwareMt2737 Firmware+80 moreOct 9, 2026 Oct 5, 2026 N/A· v4 5.3 MEDIUM· v3 N/A· v2 In Modem, there is a possible out of bounds read due to a missing permission check. This could lead to remote denial of service, if a UE has connected to a rogue base station controlled by the attacker, with no additiona...Show more |
1Mediatek 83Mt2716 Firmware Mt2735 FirmwareMt2737 Firmware+80 moreOct 9, 2026 Oct 5, 2026 N/A· v4 5.3 MEDIUM· v3 N/A· v2 In Modem, there is a possible out of bounds read due to a missing bounds check. This could lead to remote denial of service, if a UE has connected to a rogue base station controlled by the attacker, with no additional ex...Show more |