CWE-126— Buffer Over-read
The product reads from a buffer using buffer access mechanisms such as indexes or pointers that reference memory locations after the targeted buffer.— MITRE CWE catalog
584 active CVEs classified under this weakness category. Sourced from NVD, GHSA, and vendor advisories. Full definition on MITRE →
CVEs classified under CWE-126page 10 of 12
- CVE-2026-68851MEDIUMCVSS 5.5EG 5.52026-09-08
Buffer over-read in Windows NTFS allows an authorized attacker to disclose information locally.
- CVE-2026-62793MEDIUMCVSS 5.5EG 5.52026-08-11
Buffer over-read in Windows NTFS allows an authorized attacker to disclose information locally.
- CVE-2026-62730MEDIUMCVSS 5.5EG 5.52026-08-11
Buffer over-read in Windows Wired AutoConfig Service allows an authorized attacker to disclose information locally.
- CVE-2026-62746MEDIUMCVSS 5.5EG 5.52026-08-11
Buffer over-read in Windows Win32K allows an authorized attacker to disclose information locally.
- CVE-2026-61347MEDIUMCVSS 5.5EG 5.52026-08-11
Buffer over-read in Windows Event Logging Service allows an authorized attacker to disclose information locally.
- CVE-2026-50475MEDIUMCVSS 5.5EG 5.52026-07-14
Buffer over-read in Windows Kernel allows an authorized attacker to disclose information locally.
- CVE-2026-50341MEDIUMCVSS 5.5EG 5.52026-07-14
Buffer over-read in Windows NTFS allows an authorized attacker to disclose information locally.
- CVE-2025-59609MEDIUMCVSS 5.5EG 5.52026-06-01
Information Disclosure when processing advertisement frames with malformed MBSSID elements of insufficient length.
- CVE-2026-6532MEDIUMCVSS 5.5EG 5.52026-04-30
Kismet protocol dissector crash in Wireshark 4.6.0 to 4.6.4 and 4.4.0 to 4.4.14 allows denial of service
- CVE-2025-47330MEDIUMCVSS 5.5EG 5.52026-01-07
Transient DOS while parsing video packets received from the video firmware.
- CVE-2025-55325MEDIUMCVSS 5.5EG 5.52025-10-14
Buffer over-read in Windows Storage Management Provider allows an authorized attacker to disclose information locally.
- CVE-2025-27049MEDIUMCVSS 5.5EG 5.52025-10-09
Transient DOS while processing IOCTL call for image encoding.
- CVE-2025-27041MEDIUMCVSS 5.5EG 5.52025-10-09
Transient DOS while processing video packets received from video firmware.
- CVE-2025-54901MEDIUMCVSS 5.5EG 5.52025-09-09
Buffer over-read in Microsoft Office Excel allows an unauthorized attacker to disclose information locally.
- CVE-2025-49684MEDIUMCVSS 5.5EG 5.52025-07-08
Buffer over-read in Storage Port Driver allows an authorized attacker to disclose information locally.
- CVE-2025-24068MEDIUMCVSS 5.5EG 5.52025-06-10
Buffer over-read in Windows Storage Management Provider allows an authorized attacker to disclose information locally.
- CVE-2025-24992MEDIUMCVSS 5.5EG 5.52025-03-11
Buffer over-read in Windows NTFS allows an unauthorized attacker to disclose information locally.
- CVE-2024-43056MEDIUMCVSS 5.5EG 5.52025-03-03
Transient DOS during hypervisor virtual I/O operation in a virtual machine.
- CVE-2024-45559MEDIUMCVSS 5.5EG 5.52025-01-06
Transient DOS can occur when GVM sends a specific message type to the Vdev-FastRPC backend.
- CVE-2024-43500MEDIUMCVSS 5.5EG 5.52024-10-08
Windows Resilient File System (ReFS) Information Disclosure Vulnerability
- CVE-2024-33043MEDIUMCVSS 5.5EG 5.52024-09-02
Transient DOS while handling PS event when Program Service name length offset value is set to 255.
- CVE-2024-30039MEDIUMCVSS 5.5EG 5.52024-05-14
Windows Remote Access Connection Manager Information Disclosure Vulnerability
- CVE-2024-28902MEDIUMCVSS 5.5EG 5.52024-04-09
Windows Remote Access Connection Manager Information Disclosure Vulnerability
- CVE-2024-28901MEDIUMCVSS 5.5EG 5.52024-04-09
Windows Remote Access Connection Manager Information Disclosure Vulnerability
- CVE-2024-28900MEDIUMCVSS 5.5EG 5.52024-04-09
Windows Remote Access Connection Manager Information Disclosure Vulnerability
- CVE-2024-26255MEDIUMCVSS 5.5EG 5.52024-04-09
Windows Remote Access Connection Manager Information Disclosure Vulnerability
- CVE-2024-26160MEDIUMCVSS 5.5EG 5.52024-03-12
Windows Cloud Files Mini Filter Driver Information Disclosure Vulnerability
- CVE-2023-33090MEDIUMCVSS 5.5EG 5.52024-03-04
Transient DOS while processing channel information for speaker protection v2 module in ADSP.
- CVE-2023-33064MEDIUMCVSS 5.5EG 5.52024-02-06
Transient DOS in Audio when invoking callback function of ASM driver.
- CVE-2023-6992MEDIUMCVSS 5.5EG 5.52024-01-04
Cloudflare version of zlib library was found to be vulnerable to memory corruption issues affecting the deflation algorithm implementation (deflate.c). The issues resulted from improper input validation and heap-based buffer overflow. A lo…
- CVE-2023-36803MEDIUMCVSS 5.5EG 5.52023-09-12
Windows Kernel Information Disclosure Vulnerability
- CVE-2023-35324MEDIUMCVSS 5.5EG 5.52023-07-11
Microsoft PostScript and PCL6 Class Printer Driver Information Disclosure Vulnerability
- CVE-2023-32085MEDIUMCVSS 5.5EG 5.52023-07-11
Microsoft PostScript and PCL6 Class Printer Driver Information Disclosure Vulnerability
- CVE-2023-28266MEDIUMCVSS 5.5EG 5.52023-04-11
Windows Common Log File System Driver Information Disclosure Vulnerability
- CVE-2022-44446MEDIUMCVSS 5.5EG 5.52023-01-04
In wlan driver, there is a possible missing bounds check. This could lead to local denial of service in wlan services.
- CVE-2022-44445MEDIUMCVSS 5.5EG 5.52023-01-04
In wlan driver, there is a possible missing bounds check. This could lead to local denial of service in wlan services.
- CVE-2022-44443MEDIUMCVSS 5.5EG 5.52023-01-04
In wlan driver, there is a possible missing bounds check. This could lead to local denial of service in wlan services.
- CVE-2022-42781MEDIUMCVSS 5.5EG 5.52022-12-06
In wlan driver, there is a possible missing bounds check, This could lead to local denial of service in wlan services.
- CVE-2022-42780MEDIUMCVSS 5.5EG 5.52022-12-06
In wlan driver, there is a possible missing bounds check, This could lead to local denial of service in wlan services.
- CVE-2022-42779MEDIUMCVSS 5.5EG 5.52022-12-06
In wlan driver, there is a possible missing bounds check, This could lead to local denial of service in wlan services.
- CVE-2022-42774MEDIUMCVSS 5.5EG 5.52022-12-06
In wlan driver, there is a possible missing bounds check, This could lead to local denial of service in wlan services.
- CVE-2022-42762MEDIUMCVSS 5.5EG 5.52022-12-06
In wlan driver, there is a possible missing bounds check, This could lead to local denial of service in wlan services.
- CVE-2022-42759MEDIUMCVSS 5.5EG 5.52022-12-06
In wlan driver, there is a possible missing bounds check, This could lead to local denial of service in wlan services.
- CVE-2022-39132MEDIUMCVSS 5.5EG 5.52022-12-06
In camera driver, there is a possible out of bounds write due to a missing bounds check. This could lead to local denial of service in kernel.
- CVE-2022-39130MEDIUMCVSS 5.5EG 5.52022-12-06
In face detect driver, there is a possible out of bounds write due to a missing bounds check. This could lead to local denial of service in kernel.
- CVE-2022-38673MEDIUMCVSS 5.5EG 5.52022-10-14
In face detect driver, there is a possible out of bounds write due to a missing bounds check. This could lead to local denial of service in kernel.
- CVE-2022-38671MEDIUMCVSS 5.5EG 5.52022-10-14
In camera driver, there is a possible out of bounds write due to a missing bounds check. This could lead to local denial of service in kernel.
- CVE-2022-2301MEDIUMCVSS 5.5EG 5.52022-07-04
Buffer Over-read in GitHub repository hpjansson/chafa prior to 1.10.3.
- CVE-2021-34325MEDIUMCVSS 5.5EG 5.52021-07-13
A vulnerability has been identified in JT2Go (All versions < V13.2), Teamcenter Visualization (All versions < V13.2). The Jt981.dll library in affected applications lacks proper validation of user-supplied data when parsing JT files. This …
- CVE-2021-34322MEDIUMCVSS 5.5EG 5.52021-07-13
A vulnerability has been identified in JT2Go (All versions < V13.2), Teamcenter Visualization (All versions < V13.2). The JPEG2K_Loader.dll library in affected applications lacks proper validation of user-supplied data when parsing J2K fil…
Map vulnerabilities like CWE-126 to your infrastructure
EchelonGraph correlates every CVE — across CWE-126 and 150+ other weakness categories — against the assets you actually run. See blast radius, fix versions, and remediation steps in one graph.
Book a Demo →