CWE-126 · weakness in Memory Corruption
Buffer Over-read
592 CVEs
Out of date: the sync last ran 3 hours ago. Newer CVEs and scores may be missing from the map.
Every dot is a CVE; the named ones are the most at risk. Red is exploited in the wild.
- likely to be exploited
- 10
Every one of the 592 is a mark on the map. Named now: 1 to 26, most at risk first.
- Denial of Service in HTTP Message Processing in Squid
- The HTTP strict parsing changes added in Apache httpd 2.2.32 and 2.4.24 introduced a bug in token list parsing, which allows ap_find_token() to search past the end of its input st…
- In Apache httpd 2.2.x before 2.2.33 and 2.4.x before 2.4.26, mod_mime can read one byte past the end of a buffer when sending a malicious Content-Type response header.
- Microsoft Message Queuing (MSMQ) Denial of Service Vulnerability
- Windows Remote Desktop Licensing Service Denial of Service Vulnerability
- The Active Template Library (ATL) in Microsoft Visual Studio .NET 2003 SP1, Visual Studio 2005 SP1 and 2008 Gold and SP1, and Visual C++ 2005 SP1 and 2008 Gold and SP1 does not pr…
- A vulnerability in the OLE2 file format parser of ClamAV could allow an unauthenticated, remote attacker to cause a denial of service (DoS) condition on an affected device. This v…
- DHCP Server Service Information Disclosure Vulnerability
- Windows Pragmatic General Multicast (PGM) Remote Code Execution Vulnerability
- Windows Cloud Files Mini Filter Driver Information Disclosure Vulnerability
- Heap over-read in PHP EXIF extension
- Fuji Electric FRENIC LOADER v3.3 v7.3.4.1a of FRENIC-Mini (C1), FRENIC-Mini (C2), FRENIC-Eco, FRENIC-Multi, FRENIC-MEGA, FRENIC-Ace. A buffer over-read vulnerability may allow rem…
- FreeRDP prior to version 2.0.0-rc4 contains several Out-Of-Bounds Reads in the NTLM Authentication module that results in a Denial of Service (segfault).
- Windows Common Log File System Driver Information Disclosure Vulnerability
- rdesktop versions up to and including v1.8.3 contain an Out-Of-Bounds Read in function process_secondary_order() that results in a Denial of Service (segfault).
- rdesktop versions up to and including v1.8.3 contain an Out-Of-Bounds Read in function process_bitmap_updates() that results in a Denial of Service (segfault).
- rdesktop versions up to and including v1.8.3 contain an Out-Of-Bounds Read in function cssp_read_tsrequest() that results in a Denial of Service (segfault).
- rdesktop versions up to and including v1.8.3 contain an Out-Of-Bounds Read in function rdpsnd_process_ping() that results in an information leak.
- rdesktop versions up to and including v1.8.3 contain an Out-Of-Bounds Read in function rdpdr_process() that results in an information leak.
- Windows Common Log File System Driver Elevation of Privilege Vulnerability
- DHCP Server Service Denial of Service Vulnerability
- DHCP Server Service Information Disclosure Vulnerability
- Microsoft Message Queuing (MSMQ) Denial of Service Vulnerability
- DHCP Server Service Denial of Service Vulnerability
- Windows Kernel Memory Information Disclosure Vulnerability
- .NET, .NET Framework, and Visual Studio Remote Code Execution Vulnerability
exploited in the wildcheck availableringed, named or not: CyberSIXT has reported on it
Zoom in on the map and the dots under the middle of it are named where they are.
Data as of 2026-11-14. CVE List through 2026-11-14 · EPSS of 2026-11-13 · CISA KEV checked 2026-11-14. Sources: the CVE List, CISA KEV, EPSS, NVD, nuclei templates and public bug bounty data.