CVE-2026-65936 | | | 2026-08-13 | A malformed Bluetooth connection request message can cause the RS9116W/SiWx917 to leak potentially sensitive information.
See vulnerability B-E4 in the relate… |
CVE-2026-65933 | | | 2026-08-13 | A malformed Bluetooth connection request message can cause the BT122 to leak potentially sensitive information. See vulnerability B-E4 in the related paper bel… |
CVE-2026-18024 | Medium | 4.3 | 2026-08-13 | Buffer over-read in PostgreSQL ascii() SQL function allows a user to disclose up to 3 bytes after the end of a specific allocation, via a crafted text value… |
CVE-2026-14678 | Medium | 4.3 | 2026-08-13 | Buffer over-read in PostgreSQL pg_trgm index picksplit function reads past end of a heap buffer. This might allow a table maintainer to infer limited memory v… |
CVE-2026-68819 | Medium | 5.9 | 2026-08-11 | Buffer over-read in Windows Network File System allows an unauthorized attacker to deny service over a network. |
CVE-2026-65794 | Medium | 6.5 | 2026-08-11 | Buffer over-read in Windows SMB Client allows an unauthorized attacker to disclose information over a network. |
CVE-2026-64905 | High | 7.8 | 2026-08-11 | Buffer over-read in Microsoft Office Word allows an unauthorized attacker to execute code locally. |
CVE-2026-62793 | Medium | 5.5 | 2026-08-11 | Buffer over-read in Windows NTFS allows an authorized attacker to disclose information locally. |
CVE-2026-62746 | Medium | 5.5 | 2026-08-11 | Buffer over-read in Windows Win32K allows an authorized attacker to disclose information locally. |
CVE-2026-62730 | Medium | 5.5 | 2026-08-11 | Buffer over-read in Windows Wired AutoConfig Service allows an authorized attacker to disclose information locally. |
CVE-2026-61350 | Medium | 4.6 | 2026-08-11 | Buffer over-read in Windows NTFS allows an unauthorized attacker to disclose information with a physical attack. |
CVE-2026-61347 | Medium | 5.5 | 2026-08-11 | Buffer over-read in Windows Event Logging Service allows an authorized attacker to disclose information locally. |
CVE-2026-53414 | Medium | 6.5 | 2026-08-11 | Missing bounds check in the annotator function of Zoom Clients allows buffer over-read, which may allow a meeting participant to conduct a denial of service on… |
CVE-2026-20311 | Medium | 6.3 | 2026-08-05 | A vulnerability in the web-based management interface of Cisco IOS XE Software could allow an authenticated, remote attacker with low privileges to cause a den… |
CVE-2026-25288 | High | 7.4 | 2026-08-04 | Transient DOS when processing a short target wake time channel usage response frame with insufficient packet size. |
CVE-2026-66312 | Medium | 6.5 | 2026-08-04 | Buffer over-read in Microsoft Edge (Chromium-based) allows an authorized attacker to execute code over a network. |
CVE-2026-55970 | Medium | 6.5 | 2026-07-27 | Buffer Over-read vulnerability in Apache Thrift C++ bindings.
This issue affects Apache Thrift: before 0.24.0.
Users are recommended to upgrade to version 0… |
CVE-2026-55238 | Medium | 5.3 | 2026-07-20 | xrdp is an open source RDP server. Versions 0.10.6 and prior contain a vulnerability concerning the processing of RDP Confirm Active PDU, where during the capa… |
CVE-2026-63091 | Medium | 6.5 | 2026-07-20 | ProFTPD before 1.3.9c and 1.3.10rc3 contains a signed integer overflow vulnerability in the mod_sftp module's SCP size-record parser that allows authenticated… |
CVE-2026-47088 | Low | 3.1 | 2026-07-16 | An issue was discovered in cyrus-imapd in Cyrus IMAP through 3.12.2. There is heap exposure in nested MIME comment parsing. An authenticated IMAP user could cr… |
CVE-2026-62353 | Medium | 5.4 | 2026-07-15 | TDengine is a time-series database optimized for Internet of Things devices. Prior to 3.4.1.14, source/libs/parser/src/parTokenizer.c tGetToken() incremented p… |
CVE-2026-49854 | Medium | 5.3 | 2026-07-14 | Tornado is a Python web framework and asynchronous networking library. Prior to 6.5.6, the optional native extension tornado.speedups implemented websocket_mas… |
CVE-2026-57968 | High | 7.8 | 2026-07-14 | Buffer over-read in Windows Subsystem for Linux allows an authorized attacker to elevate privileges locally. |
CVE-2026-55036 | High | 7.8 | 2026-07-14 | Buffer over-read in Microsoft Office Excel allows an unauthorized attacker to execute code locally. |
CVE-2026-50504 | Medium | 6.5 | 2026-07-14 | Buffer over-read in Remote Desktop Client allows an unauthorized attacker to disclose information over a network. |
CVE-2026-50485 | Medium | 4.5 | 2026-07-14 | Buffer over-read in Windows Hyper-V allows an authorized attacker to deny service over an adjacent network. |
CVE-2026-50475 | Medium | 5.5 | 2026-07-14 | Buffer over-read in Windows Kernel allows an authorized attacker to disclose information locally. |
CVE-2026-50468 | Medium | 6.5 | 2026-07-14 | Buffer over-read in SQL Server allows an authorized attacker to disclose information over a network. |
CVE-2026-50445 | Medium | 6.5 | 2026-07-14 | Buffer over-read in Windows RDP allows an unauthorized attacker to disclose information over a network. |
CVE-2026-50435 | High | 7.8 | 2026-07-14 | Buffer over-read in Windows Overlay Filter allows an authorized attacker to elevate privileges locally. |
CVE-2026-50402 | High | 7.8 | 2026-07-14 | Incorrect conversion between numeric types in Windows NTFS allows an authorized attacker to elevate privileges locally. |
CVE-2026-50383 | Medium | 6.1 | 2026-07-14 | Buffer over-read in Windows Print Spooler Components allows an authorized attacker to disclose information locally. |
CVE-2026-50372 | High | 7.0 | 2026-07-14 | Buffer over-read in Windows Redirected Drive Buffering allows an authorized attacker to elevate privileges locally. |
CVE-2026-50341 | Medium | 5.5 | 2026-07-14 | Buffer over-read in Windows NTFS allows an authorized attacker to disclose information locally. |
CVE-2026-59840 | Medium | 4.3 | 2026-07-14 | A buffer over-read vulnerability in Fortinet FortiOS 7.6.0 through 7.6.3, FortiOS 7.4.0 through 7.4.8, FortiOS 7.2 all versions, FortiOS 7.0 all versions, Fort… |
CVE-2025-43892 | Medium | 4.3 | 2026-07-14 | A buffer over-read vulnerability in Fortinet FortiOS 7.6.0 through 7.6.3, FortiOS 7.4.0 through 7.4.8, FortiOS 7.2 all versions, FortiOS 7.0 all versions, Fort… |
CVE-2026-50813 | Medium | 6.1 | 2026-07-08 | An issue in SQLite before Fossil check-in 869a51ae84df allows a local attacker to obtain sensitive information via the Session Extension changeset concat/chang… |
CVE-2026-21379 | High | 7.8 | 2026-07-06 | Memory Corruption when allocating memory with sizes that exceed the maximum allowed value. |
CVE-2026-58013 | Medium | 6.5 | 2026-06-30 | A flaw was found in GLib. A buffer over-read can occur in g_io_channel_read_line_backend() in the giochannel.c file when a custom line terminator with a length… |
CVE-2026-58012 | Medium | 6.5 | 2026-06-30 | A flaw was found in GLib. A buffer over-read can occur in the g_regex_replace function when used with the `G_REGEX_RAW` compile flag and case-change replacemen… |
CVE-2026-58010 | Medium | 6.5 | 2026-06-30 | A flaw was found in GLib. An off-by-one error can occur in the gvs_tuple_is_normal function in the glib/gvariant-serialiser.c file when doing an alignment padd… |
CVE-2026-41992 | High | 7.5 | 2026-06-29 | GNU gzip contains a global buffer overflow vulnerability in the LZH decompression logic caused by improper reuse of shared global state between different decom… |
CVE-2026-40210 | Medium | 4.8 | 2026-06-25 | An out-of-bounds read might happen when SetMacAddrAction is used, potentially resulting in uninitialized memory being sent over the network or a crash. |
CVE-2026-45460 | Medium | 4.7 | 2026-06-09 | Buffer over-read in Microsoft Office allows an unauthorized attacker to disclose information locally. |
CVE-2026-42828 | High | 7.8 | 2026-06-09 | Buffer over-read in Windows Projected File System Filter Driver allows an authorized attacker to elevate privileges locally. |
CVE-2026-11787 | Medium | 5.0 | 2026-06-09 | A flaw was found in 389 Directory Server. The ldap_utf8prev() function reads bytes before the start of a buffer without bounds checking, causing a heap buffer… |
CVE-2026-44185 | High | 7.3 | 2026-06-08 | Buffer Over-read vulnerability in Apache HTTP Server via outbound OCSP requests to an attacker controlled OCSP server
This issue affects Apache HTTP Server: f… |
CVE-2026-45684 | Medium | 4.9 | 2026-06-02 | OpenTelemetry eBPF Instrumentation provides eBPF instrumentation based on the OpenTelemetry standard. From version 0.7.0 to before version 0.9.0, OBI's log enr… |
CVE-2025-59609 | Medium | 5.5 | 2026-06-01 | Information Disclosure when processing advertisement frames with malformed MBSSID elements of insufficient length. |
CVE-2026-5260 | High | 8.2 | 2026-05-26 | A flaw was found in libgnutls. A remote attacker, by sending an extremely short premaster secret during an RSA key exchange to a server using an RSA key backed… |
CVE-2026-6575 | Medium | 4.3 | 2026-05-14 | Buffer over-read in PostgreSQL function pg_restore_attribute_stats() accepts array values of unmatched length, which causes query planning to read past end of… |
CVE-2026-8463 | Medium | 5.3 | 2026-05-13 | Crypt::Argon2 versions from 0.017 before 0.031 for Perl perform a heap out-of-bounds read in argon2_verify on empty encoded input.
The auto-detect form of arg… |
CVE-2025-47406 | Medium | 6.1 | 2026-05-04 | Information Disclosure while processing IOCTL handler callbacks without verifying buffer size. |
CVE-2025-47403 | Medium | 6.5 | 2026-05-04 | Transient DOS when processing a malformed Fast Transition response frame with an invalid header structure during wireless roaming. |
CVE-2025-47401 | Medium | 6.5 | 2026-05-04 | Transient DOS when processing target power rate tables during channel configuration. |
CVE-2026-34059 | High | 7.5 | 2026-05-04 | Buffer Over-read vulnerability in Apache HTTP Server.
This issue affects Apache HTTP Server: through 2.4.66.
Users are recommended to upgrade to version 2.4… |
CVE-2026-37532 | High | 7.1 | 2026-05-01 | AGL agl-service-can-low-level thru 17.1.12 contains a heap buffer over-read in the isotp-c library. In isotp_continue_receive (receive.c:87-89), the payload_le… |
CVE-2026-6532 | Medium | 5.5 | 2026-04-30 | Kismet protocol dissector crash in Wireshark 4.6.0 to 4.6.4 and 4.4.0 to 4.4.14 allows denial of service |
CVE-2026-6238 | Medium | 6.5 | 2026-04-28 | The deprecated functions ns_printrrf, ns_printrr and fp_nquery in the GNU C Library version 2.0.1 to version 2.43 fail to validate the RDATA content against th… |
CVE-2026-41898 | Medium | 5.3 | 2026-04-24 | rust-openssl provides OpenSSL bindings for the Rust programming language. From 0.9.24 to before 0.10.78, the FFI trampolines behind SslContextBuilder::set_psk… |
CVE-2026-0930 | Medium | 4.3 | 2026-04-20 | Potential read out of bounds case with wolfSSHd on Windows while handling a terminal resize request. An authenticated user could trigger the out of bounds read… |
CVE-2026-40341 | Low | 3.5 | 2026-04-18 | libgphoto2 is a camera access and control library. In versions up to and including 2.5.33, an out of bound read in ptp_unpack_EOS_FocusInfoEx could be used to… |
CVE-2026-26184 | High | 7.8 | 2026-04-14 | Buffer over-read in Windows Projected File System allows an authorized attacker to elevate privileges locally. |
CVE-2026-26169 | Medium | 6.1 | 2026-04-14 | Buffer over-read in Windows Kernel Memory allows an authorized attacker to disclose information locally. |
CVE-2026-26155 | Medium | 6.5 | 2026-04-14 | Microsoft Local Security Authority Subsystem Service Information Disclosure Vulnerability |
CVE-2026-5772 | Medium | 5.3 | 2026-04-09 | A 1-byte stack buffer over-read was identified in the MatchDomainName function (src/internal.c) during wildcard hostname validation when the LEFT_MOST_WILDCARD… |
CVE-2026-21381 | High | 7.6 | 2026-04-06 | Transient DOS when receiving a service data frame with excessive length during device matching over a neighborhood awareness network protocol connection. |
CVE-2026-21378 | High | 7.8 | 2026-04-06 | Memory Corruption when accessing an output buffer without validating its size during IOCTL processing in a camera sensor driver. |
CVE-2026-21376 | High | 7.8 | 2026-04-06 | Memory Corruption when accessing an output buffer without validating its size during IOCTL processing in a camera sensor driver. |
CVE-2026-21375 | High | 7.8 | 2026-04-06 | Memory Corruption when accessing an output buffer without validating its size during IOCTL processing. |
CVE-2026-21374 | High | 7.8 | 2026-04-06 | Memory Corruption when processing auxiliary sensor input/output control commands with insufficient buffer size validation. |
CVE-2026-21373 | High | 7.8 | 2026-04-06 | Memory Corruption when accessing an output buffer without validating its size during IOCTL processing. |
CVE-2026-21371 | High | 7.8 | 2026-04-06 | Memory Corruption when retrieving output buffer with insufficient size validation. |
CVE-2026-21367 | High | 7.6 | 2026-04-06 | Transient DOS when processing nonstandard FILS Discovery Frames with out-of-range action sizes during initial scans. |
CVE-2025-47400 | High | 7.1 | 2026-04-06 | Cryptographic issue while copying data to a destination buffer without validating its size. |
CVE-2025-47390 | High | 7.8 | 2026-04-06 | Memory corruption while preprocessing IOCTL request in JPEG driver. |
CVE-2026-2394 | Medium | 6.5 | 2026-04-01 | Buffer Over-read vulnerability in RTI Connext Professional (Core Libraries) allows Overread Buffers.This issue affects Connext Professional: from 7.4.0 before… |
CVE-2026-24028 | Medium | 5.3 | 2026-03-31 | An attacker might be able to trigger an out-of-bounds read by sending a crafted DNS response packet, when custom Lua code uses newDNSPacketOverlay to parse DNS… |
CVE-2025-66038 | Low | 3.9 | 2026-03-30 | OpenSC is an open source smart card tools and middleware. Prior to version 0.27.0, sc_compacttlv_find_tag searches a compact-TLV buffer for a given tag. In com… |
CVE-2026-4371 | High | 7.4 | 2026-03-24 | A malicious mail server could send malformed strings with negative lengths, causing the parser to read memory outside the buffer. If a mail server or connectio… |
CVE-2025-59600 | High | 7.8 | 2026-03-02 | Memory Corruption when adding user-supplied data without checking available buffer space. |
CVE-2026-28364 | High | 7.9 | 2026-02-27 | In OCaml before 4.14.3 and 5.x before 5.4.1, a buffer over-read in Marshal deserialization (runtime/intern.c) enables remote code execution through a multi-pha… |
CVE-2026-27799 | Medium | 4.0 | 2026-02-26 | ImageMagick is free and open-source software used for editing and manipulating digital images. Prior to versions 7.1.2-15 and 6.9.13-40, a heap buffer over-rea… |
CVE-2026-27798 | Medium | 4.0 | 2026-02-26 | ImageMagick is free and open-source software used for editing and manipulating digital images. Prior to versions 7.1.2-15 and 6.9.13-40, a heap buffer over-rea… |
CVE-2026-26271 | Medium | 5.3 | 2026-02-25 | FreeRDP is a free implementation of the Remote Desktop Protocol. Prior to version 3.23.0, a buffer overread in `freerdp_image_copy_from_icon_data()` (libfreerd… |
CVE-2026-3203 | Medium | 5.5 | 2026-02-25 | RF4CE Profile protocol dissector crash in Wireshark 4.6.0 to 4.6.3 and 4.4.0 to 4.4.13 allows denial of service |
CVE-2026-26282 | Medium | 6.6 | 2026-02-19 | NanaZip is an open source file archive Starting in version 5.0.1252.0 and prior to version 6.0.1630.0, NanaZip has an out-of-bounds heap read in `.NET Single F… |
CVE-2026-25646 | High | 8.1 | 2026-02-10 | LIBPNG is a reference library for use in applications that read, create, and manipulate PNG (Portable Network Graphics) raster image files. Prior to 1.6.55, an… |
CVE-2026-20846 | High | 7.5 | 2026-02-10 | Buffer over-read in Windows GDI+ allows an unauthorized attacker to deny service over a network. |
CVE-2025-47402 | Medium | 6.5 | 2026-02-02 | Transient DOS when processing a received frame with an excessively large authentication information element. |
CVE-2025-66692 | High | 7.5 | 2026-01-20 | A buffer over-read in the PublicKey::verify() method of Binance - Trust Wallet Core before commit 5668c67 allows attackers to cause a Denial of Service (DoS) v… |
CVE-2025-60003 | High | 7.5 | 2026-01-15 | A Buffer Over-read vulnerability in the routing protocol daemon (rpd) of Juniper Networks Junos OS and Junos OS Evolved allows an unauthenticated, network-base… |
CVE-2025-47395 | Medium | 6.5 | 2026-01-07 | Transient DOS while parsing a WLAN management frame with a Vendor Specific Information Element. |
CVE-2025-47331 | Medium | 6.1 | 2026-01-07 | Information disclosure while processing a firmware event. |
CVE-2025-47330 | Medium | 5.5 | 2026-01-07 | Transient DOS while parsing video packets received from the video firmware. |
CVE-2025-11961 | Low | 1.9 | 2025-12-31 | pcap_ether_aton() is an auxiliary function in libpcap, it takes a string argument and returns a fixed-size allocated buffer. The string argument must be a wel… |
CVE-2025-62560 | High | 7.8 | 2025-12-09 | Untrusted pointer dereference in Microsoft Office Excel allows an unauthorized attacker to execute code locally. |
CVE-2025-62473 | Medium | 6.5 | 2025-12-09 | Buffer over-read in Windows Routing and Remote Access Service (RRAS) allows an unauthorized attacker to disclose information over a network. |
CVE-2025-62467 | High | 7.8 | 2025-12-09 | Integer overflow or wraparound in Windows Projected File System allows an authorized attacker to elevate privileges locally. |
CVE-2025-62464 | High | 7.8 | 2025-12-09 | Buffer over-read in Windows Projected File System allows an authorized attacker to elevate privileges locally. |