CWE-126— Buffer Over-read
The product reads from a buffer using buffer access mechanisms such as indexes or pointers that reference memory locations after the targeted buffer.— MITRE CWE catalog
584 active CVEs classified under this weakness category. Sourced from NVD, GHSA, and vendor advisories. Full definition on MITRE →
CVEs classified under CWE-126page 3 of 12
- CVE-2026-34336HIGHCVSS 7.8EG 7.82026-05-12
Integer overflow or wraparound in Windows DWM Core Library allows an authorized attacker to elevate privileges locally.
- CVE-2026-26184HIGHCVSS 7.8EG 7.82026-04-14
Buffer over-read in Windows Projected File System allows an authorized attacker to elevate privileges locally.
- CVE-2026-21378HIGHCVSS 7.8EG 7.82026-04-06
Memory Corruption when accessing an output buffer without validating its size during IOCTL processing in a camera sensor driver.
- CVE-2026-21376HIGHCVSS 7.8EG 7.82026-04-06
Memory Corruption when accessing an output buffer without validating its size during IOCTL processing in a camera sensor driver.
- CVE-2026-21375HIGHCVSS 7.8EG 7.82026-04-06
Memory Corruption when accessing an output buffer without validating its size during IOCTL processing.
- CVE-2026-21374HIGHCVSS 7.8EG 7.82026-04-06
Memory Corruption when processing auxiliary sensor input/output control commands with insufficient buffer size validation.
- CVE-2026-21373HIGHCVSS 7.8EG 7.82026-04-06
Memory Corruption when accessing an output buffer without validating its size during IOCTL processing.
- CVE-2026-21371HIGHCVSS 7.8EG 7.82026-04-06
Memory Corruption when retrieving output buffer with insufficient size validation.
- CVE-2025-47390HIGHCVSS 7.8EG 7.82026-04-06
Memory corruption while preprocessing IOCTL request in JPEG driver.
- CVE-2025-59600HIGHCVSS 7.8EG 7.82026-03-02
Memory Corruption when adding user-supplied data without checking available buffer space.
- CVE-2025-62560HIGHCVSS 7.8EG 7.82025-12-09
Untrusted pointer dereference in Microsoft Office Excel allows an unauthorized attacker to execute code locally.
- CVE-2025-62467HIGHCVSS 7.8EG 7.82025-12-09
Integer overflow or wraparound in Windows Projected File System allows an authorized attacker to elevate privileges locally.
- CVE-2025-62464HIGHCVSS 7.8EG 7.82025-12-09
Buffer over-read in Windows Projected File System allows an authorized attacker to elevate privileges locally.
- CVE-2025-62462HIGHCVSS 7.8EG 7.82025-12-09
Buffer over-read in Windows Projected File System allows an authorized attacker to elevate privileges locally.
- CVE-2025-62461HIGHCVSS 7.8EG 7.82025-12-09
Buffer over-read in Windows Projected File System Filter Driver allows an authorized attacker to elevate privileges locally.
- CVE-2025-60720HIGHCVSS 7.8EG 7.82025-11-11
Buffer over-read in Windows TDX.sys allows an authorized attacker to elevate privileges locally.
- CVE-2025-12745HIGHCVSS 7.8EG 7.82025-11-05
A weakness has been identified in QuickJS up to eb2c89087def1829ed99630cb14b549d7a98408c. This affects the function js_array_buffer_slice of the file quickjs.c. This manipulation causes buffer over-read. The attack is restricted to local e…
- CVE-2025-47368HIGHCVSS 7.8EG 7.82025-11-04
Memory corruption when dereferencing an invalid userspace address in a user buffer during MCDM IOCTL processing.
- CVE-2025-59192HIGHCVSS 7.8EG 7.82025-10-14
Buffer over-read in Storport.sys Driver allows an authorized attacker to elevate privileges locally.
- CVE-2025-59933HIGHCVSS 7.8EG 7.82025-09-29
libvips is a demand-driven, horizontally threaded image processing library. For versions 8.17.1 and below, when libvips is compiled with support for PDF input via poppler, the pdfload operation is affected by a buffer read overflow when pa…
- CVE-2025-47317HIGHCVSS 7.8EG 7.82025-09-24
Memory corruption due to global buffer overflow when a test command uses an invalid payload type.
- CVE-2025-27068HIGHCVSS 7.8EG 7.82025-08-06
Memory corruption while processing an IOCTL command with an arbitrary address.
- CVE-2025-49659HIGHCVSS 7.8EG 7.82025-07-08
Buffer over-read in Windows TDX.sys allows an authorized attacker to elevate privileges locally.
- CVE-2025-47973HIGHCVSS 7.8EG 7.82025-07-08
Buffer over-read in Virtual Hard Disk (VHDX) allows an unauthorized attacker to elevate privileges locally.
- CVE-2025-47971HIGHCVSS 7.8EG 7.82025-07-08
Buffer over-read in Virtual Hard Disk (VHDX) allows an unauthorized attacker to elevate privileges locally.
- CVE-2025-27055HIGHCVSS 7.8EG 7.82025-07-08
Memory corruption during the image encoding process.
- CVE-2025-21475HIGHCVSS 7.8EG 7.82025-05-06
Memory corruption while processing escape code, when DisplayId is passed with large unsigned value.
- CVE-2025-21421HIGHCVSS 7.8EG 7.82025-04-07
Memory corruption while processing escape code in API.
- CVE-2024-45561HIGHCVSS 7.8EG 7.82025-02-03
Memory corruption while handling IOCTL call from user-space to set latency level.
- CVE-2025-21271HIGHCVSS 7.8EG 7.82025-01-14
Windows Cloud Files Mini Filter Driver Elevation of Privilege Vulnerability
- CVE-2024-45548HIGHCVSS 7.8EG 7.82025-01-06
Memory corruption while processing FIPS encryption or decryption validation functionality IOCTL call.
- CVE-2024-45546HIGHCVSS 7.8EG 7.82025-01-06
Memory corruption while processing FIPS encryption or decryption IOCTL call invoked from user-space.
- CVE-2024-49088HIGHCVSS 7.8EG 7.82024-12-12
Windows Common Log File System Driver Elevation of Privilege Vulnerability
- CVE-2024-49031HIGHCVSS 7.8EG 7.82024-11-12
Microsoft Office Graphics Remote Code Execution Vulnerability
- CVE-2024-38261HIGHCVSS 7.8EG 7.82024-10-08
Windows Routing and Remote Access Service (RRAS) Remote Code Execution Vulnerability
- CVE-2024-38250HIGHCVSS 7.8EG 7.82024-09-10
Windows Graphics Component Elevation of Privilege Vulnerability
- CVE-2024-38135HIGHCVSS 7.8EG 7.82024-08-13
Windows Resilient File System (ReFS) Elevation of Privilege Vulnerability
- CVE-2024-38127HIGHCVSS 7.8EG 7.82024-08-13
Windows Hyper-V Elevation of Privilege Vulnerability
- CVE-2024-30079HIGHCVSS 7.8EG 7.82024-07-09
Windows Remote Access Connection Manager Elevation of Privilege Vulnerability
- CVE-2024-21465HIGHCVSS 7.8EG 7.82024-07-01
Memory corruption while processing key blob passed by the user.
- CVE-2023-33115HIGHCVSS 7.8EG 7.82024-04-01
Memory corruption while processing buffer initialization, when trusted report for certain report types are generated.
- CVE-2024-26176HIGHCVSS 7.8EG 7.82024-03-12
Windows Kernel Elevation of Privilege Vulnerability
- CVE-2023-38144HIGHCVSS 7.8EG 7.82023-09-12
Windows Common Log File System Driver Elevation of Privilege Vulnerability
- CVE-2023-36773HIGHCVSS 7.8EG 7.82023-09-12
3D Builder Remote Code Execution Vulnerability
- CVE-2023-36904HIGHCVSS 7.8EG 7.82023-08-08
Windows Cloud Files Mini Filter Driver Elevation of Privilege Vulnerability
- CVE-2023-28542HIGHCVSS 7.8EG 7.82023-07-04
Memory Corruption in WLAN HOST while fetching TX status information.
- CVE-2023-28541HIGHCVSS 7.8EG 7.82023-07-04
Memory Corruption in Data Modem while processing DMA buffer release event about CFR data.
- CVE-2023-0817HIGHCVSS 7.8EG 7.82023-02-13
Buffer Over-read in GitHub repository gpac/gpac prior to v2.3.0-DEV.
- CVE-2022-3178HIGHCVSS 7.8EG 7.82022-09-12
Buffer Over-read in GitHub repository gpac/gpac prior to 2.1.0-DEV.
- CVE-2020-35511HIGHCVSS 7.8EG 7.82022-08-23
A global buffer overflow was discovered in pngcheck function in pngcheck-2.4.0(5 patches applied) via a crafted png file.
Map vulnerabilities like CWE-126 to your infrastructure
EchelonGraph correlates every CVE — across CWE-126 and 150+ other weakness categories — against the assets you actually run. See blast radius, fix versions, and remediation steps in one graph.
Book a Demo →