CWE-126— Buffer Over-read

Buffer over-read in Microsoft Edge (Chromium-based) allows an authorized attacker to execute code over a network.

Buffer over-read in SQL Server allows an authorized attacker to disclose information over a network.

Buffer over-read in SQL Server allows an authorized attacker to disclose information over a network.

Buffer over-read in Windows Network File System allows an unauthorized attacker to deny service over a network.

Buffer over-read in Windows NTFS allows an authorized attacker to disclose information locally.

Buffer over-read in Windows NTFS allows an authorized attacker to execute code locally.

Buffer over-read in Windows Overlay Filter allows an authorized attacker to disclose information locally.

Buffer over-read in Windows DHCP Server allows an authorized attacker to deny service over an adjacent network.

Use after free in Windows Overlay Filter allows an authorized attacker to disclose information over a network.

Out-of-bounds read in Remote Desktop Client allows an unauthorized attacker to disclose information over a network.

Buffer over-read in Windows Volume Manager Extension Driver allows an authorized attacker to elevate privileges locally.

Buffer over-read in Windows Win32K allows an authorized attacker to elevate privileges locally.

Buffer over-read in Microsoft Office allows an unauthorized attacker to disclose information over a network.

Buffer over-read in Microsoft Office Word allows an unauthorized attacker to disclose information over a network.

Buffer over-read in Windows Encrypting File System (EFS) allows an authorized attacker to disclose information locally.

libvips is a fast image processing library with low memory needs. Prior to version 8.18.3, libvips built with libultrahdr support can incorrectly size an output buffer in libvips/foreign/uhdrsave.c within vips_foreign_save_uhdr_set_raw_hdr…

Buffer over-read in Windows Message Queuing Queue Manager allows an unauthorized attacker to disclose information over a network.

Buffer over-read in Microsoft Office Excel allows an unauthorized attacker to disclose information over a network.

Buffer over-read in SQL Server allows an authorized attacker to disclose information over a network.

A missing authentication vulnerability in the VPN configuration management has been identified in Archer MR600 (v2, v3 & v5) and TL-MR6400 v8 due to improper access control; a remote unauthenticated attacker may be able to access and mod…

ERF file parser crash in 4.6.0 to 4.6.7 and 4.4.0 to 4.4.18 allows denial of service

Tektronix K12xx file parser crash in 4.6.0 to 4.6.7 and 4.4.0 to 4.4.18 allows denial of service

Buffer over-read in Windows Storage allows an unauthorized attacker to disclose information with a physical attack.

Buffer over-read in Microsoft Office Excel allows an unauthorized attacker to disclose information locally.

Buffer over-read in Microsoft Office Word allows an unauthorized attacker to disclose information locally.

Buffer over-read in Microsoft Office Word allows an unauthorized attacker to disclose information locally.

Crypt::Argon2 versions from 0.017 before 0.031 for Perl perform a heap out-of-bounds read in argon2_verify on empty encoded input. The auto-detect form of argon2_verify passes encoded_len - 1 as the length argument to memchr without check…

A maliciously constructed mail header could lead to a one byte read past the end of a buffer. This vulnerability was fixed in Thunderbird 155, Thunderbird 140.15, and Thunderbird 153.2.

A vulnerability was found in GPAC up to f1219cde. This affects the function gf_svg_attributes_copy of the file scenegraph/svg_attributes.c of the component MP4Box. Performing a manipulation results in buffer over-read. The attack is only p…