Vulnerabilities (CVE)

Filtered by CWE-126
Total 580 CVE
CVE Vendors Products Updated CVSS v2 CVSS v3
CVE-2025-53797 1 Microsoft 7 Windows Server 2008, Windows Server 2012, Windows Server 2016 and 4 more 2026-06-17 N/A 6.5 MEDIUM
Buffer over-read in Windows Routing and Remote Access Service (RRAS) allows an unauthorized attacker to disclose information over a network.
CVE-2025-53796 1 Microsoft 7 Windows Server 2008, Windows Server 2012, Windows Server 2016 and 4 more 2026-06-17 N/A 6.5 MEDIUM
Buffer over-read in Windows Routing and Remote Access Service (RRAS) allows an unauthorized attacker to disclose information over a network.
CVE-2025-53736 1 Microsoft 6 365 Apps, Office, Office Long Term Servicing Channel and 3 more 2026-06-17 N/A 6.8 MEDIUM
Buffer over-read in Microsoft Office Word allows an unauthorized attacker to disclose information locally.
CVE-2025-4207 2026-06-17 N/A 5.9 MEDIUM
Buffer over-read in PostgreSQL GB18030 encoding validation allows a database input provider to achieve temporary denial of service on platforms where a 1-byte over-read can elicit process termination. This affects the database server and also libpq. Versions before PostgreSQL 17.5, 16.9, 15.13, 14.18, and 13.21 are affected.
CVE-2025-49684 1 Microsoft 14 Windows 10 1507, Windows 10 1607, Windows 10 1809 and 11 more 2026-06-17 N/A 5.5 MEDIUM
Buffer over-read in Storage Port Driver allows an authorized attacker to disclose information locally.
CVE-2025-49659 1 Microsoft 15 Windows 10 1507, Windows 10 1607, Windows 10 1809 and 12 more 2026-06-17 N/A 7.8 HIGH
Buffer over-read in Windows TDX.sys allows an authorized attacker to elevate privileges locally.
CVE-2025-47973 1 Microsoft 15 Windows 10 1507, Windows 10 1607, Windows 10 1809 and 12 more 2026-06-17 N/A 7.8 HIGH
Buffer over-read in Virtual Hard Disk (VHDX) allows an unauthorized attacker to elevate privileges locally.
CVE-2025-47971 1 Microsoft 15 Windows 10 1507, Windows 10 1607, Windows 10 1809 and 12 more 2026-06-17 N/A 7.8 HIGH
Buffer over-read in Virtual Hard Disk (VHDX) allows an unauthorized attacker to elevate privileges locally.
CVE-2025-47402 1 Qualcomm 188 Ar8035, Ar8035 Firmware, Cologne and 185 more 2026-06-17 N/A 6.5 MEDIUM
Transient DOS when processing a received frame with an excessively large authentication information element.
CVE-2025-47328 1 Qualcomm 134 Fastconnect 7800, Fastconnect 7800 Firmware, Immersive Home 3210 Platform and 131 more 2026-06-17 N/A 7.5 HIGH
Transient DOS while processing power control requests with invalid antenna or stream values.
CVE-2025-47326 1 Qualcomm 240 Ar8035, Ar8035 Firmware, Csr8811 and 237 more 2026-06-17 N/A 7.5 HIGH
Transient DOS while handling command data during power control processing.
CVE-2025-47318 1 Qualcomm 406 Apq8017, Apq8017 Firmware, Apq8064au and 403 more 2026-06-17 N/A 7.5 HIGH
Transient DOS while parsing the EPTM test control message to get the test pattern.
CVE-2025-47317 1 Qualcomm 106 Fastconnect 6200, Fastconnect 6200 Firmware, Fastconnect 6700 and 103 more 2026-06-17 N/A 7.8 HIGH
Memory corruption due to global buffer overflow when a test command uses an invalid payload type.
CVE-2025-47295 1 Fortinet 1 Fortios 2026-06-17 N/A 3.7 LOW
A buffer over-read in Fortinet FortiOS versions 7.4.0 through 7.4.3, versions 7.2.0 through 7.2.7, and versions 7.0.0 through 7.0.14 may allow a remote unauthenticated attacker to crash the FGFM daemon via a specially crafted request, under rare conditions that are outside of the attacker's control.
CVE-2025-36855 2026-06-17 N/A 8.8 HIGH
A vulnerability ( CVE-2025-21176 https://www.cve.org/CVERecord ) exists in DiaSymReader.dll due to buffer over-read. Per CWE-126: Buffer Over-read https://cwe.mitre.org/data/definitions/126.html , Buffer Over-read is when a product reads from a buffer using buffer access mechanisms such as indexes or pointers that reference memory locations after the targeted buffer. This issue affects EOL ASP.NET 6.0.0 <= 6.0.36 as represented in this CVE, as well as 8.0.0 <= 8.0.11 & <= 9.0.0 as represented in CVE-2025-21176. Additionally, if you've deployed self-contained applications https://docs.microsoft.com/dotnet/core/deploying/#self-contained-deployments-scd  targeting any of the impacted versions, these applications are also vulnerable and must be recompiled and redeployed. NOTE: This CVE affects only End Of Life (EOL) software components. The vendor, Microsoft, has indicated there will be no future updates nor support provided upon inquiry.
CVE-2025-32704 1 Microsoft 4 365 Apps, Excel, Office and 1 more 2026-06-17 N/A 8.4 HIGH
Buffer over-read in Microsoft Office Excel allows an unauthorized attacker to execute code locally.
CVE-2025-29956 1 Microsoft 15 Windows 10 1507, Windows 10 1607, Windows 10 1809 and 12 more 2026-06-17 N/A 5.4 MEDIUM
Buffer over-read in Windows SMB allows an authorized attacker to disclose information over a network.
CVE-2025-27068 1 Qualcomm 32 Fastconnect 6200, Fastconnect 6200 Firmware, Fastconnect 6900 and 29 more 2026-06-17 N/A 7.8 HIGH
Memory corruption while processing an IOCTL command with an arbitrary address.
CVE-2025-27065 1 Qualcomm 300 Ar8035, Ar8035 Firmware, Fastconnect 6800 and 297 more 2026-06-17 N/A 7.5 HIGH
Transient DOS while processing a frame with malformed shared-key descriptor.
CVE-2025-27057 1 Qualcomm 422 Ar8035, Ar8035 Firmware, Csr8811 and 419 more 2026-06-17 N/A 7.5 HIGH
Transient DOS while handling beacon frames with invalid IE header length.