CWE-126

Buffer Over-read

Parent: CWE-125 - Out-of-bounds Read

The product reads from a buffer using buffer access mechanisms such as indexes or pointers that reference memory locations after the targeted buffer.

477 vulnerabilities with CWE-126
CVE-2026-55970 MEDIUM
Apache Thrift: C++ heap out-of-bounds read in THeaderTransport::readHeaderFormat()
CVSS 6.5
CVE-2026-55238 MEDIUM
xrdp: Malformed Confirm Active capability sets cause out-of-bounds reads
CVSS 5.3
CVE-2026-63091 MEDIUM
ProFTPD mod_sftp Signed Integer Overflow via SCP Size-Record Parser
CVSS 6.5
CVE-2026-47088 LOW
Cyrusimap Cyrus Imap < 3.12.3 - Buffer Over-read
CVSS 3.1
CVE-2026-62353 MEDIUM
TDengine: Authenticated Out-of-Bounds Read in SQL Lexer tGetToken
CVSS 5.4
CVE-2026-49854 MEDIUM
Tornado: Out-of-bounds memory access in C extension
CVSS 5.3
CVE-2026-57968 HIGH
Windows Subsystem for Linux (WSL2) Kernel Elevation of Privilege Vulnerability
CVSS 7.8
CVE-2026-55036 HIGH
Microsoft Excel Remote Code Execution Vulnerability
CVSS 7.8
CVE-2026-50504 MEDIUM
Microsoft Windows 10 Version 1607 - Windows Remote Desktop Client Information Disclosure Vulnerability
CVSS 6.5
CVE-2026-50485 MEDIUM
Microsoft Windows 10 Version 1607 - Windows Hyper-V Denial of Service Vulnerability
CVSS 4.5
CVE-2026-50475 MEDIUM
Microsoft Windows 10 Version 1607 - Windows Kernel Information Disclosure Vulnerability
CVSS 5.5
CVE-2026-50468 MEDIUM
Microsoft SQL Server Information Disclosure Vulnerability
CVSS 6.5
CVE-2026-50445 MEDIUM
Microsoft Windows 10 Version 1607 - Windows Remote Desktop Protocol (RDP) Information Disclosure Vulnerability
CVSS 6.5
CVE-2026-50435 HIGH
Microsoft Windows 10 Version 1607 - Windows Overlay Filter Elevation of Privilege Vulnerability
CVSS 7.8
CVE-2026-50402 HIGH
Microsoft Windows 10 Version 1607 - NTFS Elevation of Privilege Vulnerability
CVSS 7.8
CVE-2026-50383 MEDIUM
Microsoft Windows 10 Version 1809 - Windows Print Spooler Information Disclosure Vulnerability
CVSS 6.1
CVE-2026-50372 HIGH
Windows Redirected Drive Buffering System Elevation of Privilege Vulnerability
CVSS 7.0
CVE-2026-50341 MEDIUM
Microsoft Windows 10 Version 1607 - Windows NTFS Information Disclosure Vulnerability
CVSS 5.5
CVE-2026-59840 MEDIUM
Fortinet FortiOS - Buffer Over-read
CVSS 4.3
CVE-2026-50813 MEDIUM
SQLite < 869a51ae84df - Information Disclosure via Session Extension Changegroup Merge Path
CVSS 6.1
CVE-2026-21379 HIGH
Qualcomm, Snapdragon - Buffer Over-Read in Windows Compute
CVSS 7.8
CVE-2026-58013 MEDIUM
Glib: buffer over-read in glib/giochannel.c via "g_io_channel_read_line_backend"
CVSS 6.5
CVE-2026-58012 MEDIUM
Glib: buffer over-read in g_regex_replace() via glib/gregex.c:string_append() and g_utf8_next_char()
CVSS 6.5
CVE-2026-58010 MEDIUM
Glib: buffer over-read in glib/gvariant-serialiser.c via gvs_tuple_is_normal()
CVSS 6.5
CVE-2026-41992 HIGH
Global Buffer Overflow in GNU gzip
CVSS 7.5
Details
Vulnerabilities 477