CWE-125 · Memory Corruption
Out-of-bounds Read
10,111CVEs
18exploited
5with a public check
184likely (EPSS 10%+)
SortMost likely exploited
10,111 CVEs with CWE-125 as their weakness · the first 2,000 are paged here; the Atlas names every one
| CVE · most likely exploited | CVSS | EPSS | Published |
|---|---|---|---|
| CVE-2014-0160In CISA KEVExploitedThe (1) TLS and (2) DTLS implementations in OpenSSL 1.0.1 before 1.0.1g do not properly handle Heartbeat Extension packets, which allows remote attackers to obtain sensitive infor…OpenSSL · OpenSSL · CVSS 7.5 · 2014-04-07 | 7.5 | 100% | 2014-04-07 |
| CVE-2025-5777In CISA KEVExploitedCitrix NetScaler Memory Disclosure - CitrixBleed 2NetScaler · ADC · CVSS 9.3 · 2025-06-17 | 9.3 | 100% | 2025-06-17 |
| CVE-2026-3055In CISA KEVExploitedCitrix NetScaler SAML IDP - Memory OverreadNetScaler · ADC · CVSS 9.3 · 2026-03-23 | 9.3 | 91% | 2026-03-23 |
| CVE-2016-1646In CISA KEVExploitedThe Array.prototype.concat implementation in builtins.cc in Google V8, as used in Google Chrome before 49.0.2623.108, does not properly consider element data types, which allows r…Google · Chromium V8 · CVSS 8.8 · 2016-03-29 | 8.8 | 48% | 2016-03-29 |
| CVE-2017-5030In CISA KEVExploitedIncorrect handling of complex species in V8 in Google Chrome prior to 57.0.2987.98 for Linux, Windows, and Mac and 57.0.2987.108 for Android allowed a remote attacker to execute a…Google · Google Chrome prior to 57.0.2987.98 for Linux, Windows and Mac, and 57.0.2987.1… · CVSS 8.8 · 2017-04-24 | 8.8 | 41% | 2017-04-24 |
| CVE-2016-4523In CISA KEVExploitedThe WAP interface in Trihedral VTScada (formerly VTS) 8.x through 11.x before 11.2.02 allows remote attackers to cause a denial of service (out-of-bounds read and application cras…Trihedral · VTScada (formerly VTS) · CVSS 7.5 · 2016-06-09 | 7.5 | 31% | 2016-06-09 |
| CVE-2020-11899In CISA KEVExploitedThe Treck TCP/IP stack before 6.0.1.66 has an IPv6 Out-of-bounds Read.Treck TCP/IP stack · IPv6 · CVSS 5.4 · 2020-06-17 | 5.4 | 18% | 2020-06-17 |
| CVE-2023-42916In CISA KEVExploitedAn out-of-bounds read was addressed with improved input validation. This issue is fixed in iOS 17.1.2 and iPadOS 17.1.2, macOS Sonoma 14.1.2, Safari 17.1.2. Processing web content…Apple · Safari · CVSS 6.5 · 2023-11-30 | 6.5 | 18% | 2023-11-30 |
| CVE-2023-28204In CISA KEVExploitedAn out-of-bounds read was addressed with improved input validation. This issue is fixed in watchOS 9.5, tvOS 16.5, macOS Ventura 13.4, iOS 15.7.6 and iPadOS 15.7.6, Safari 16.5, i…Apple · macOS · CVSS 6.5 · 2023-06-23 | 6.5 | 14% | 2023-06-23 |
| CVE-2023-36424In CISA KEVExploitedWindows Common Log File System Driver Elevation of Privilege VulnerabilityMicrosoft · Windows 11 version 22H3 · CVSS 7.8 · 2023-11-14 | 7.8 | 12% | 2023-11-14 |
| CVE-2025-5419In CISA KEVExploitedOut of bounds read and write in V8 in Google Chrome prior to 137.0.7151.68 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromium secu…Google · Chrome · CVSS 8.8 · 2025-06-02 | 8.8 | 7.6% | 2025-06-02 |
| CVE-2024-0519In CISA KEVExploitedOut of bounds memory access in V8 in Google Chrome prior to 120.0.6099.224 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromium secu…Google · Chrome · CVSS 8.8 · 2024-01-16 | 8.8 | 3.8% | 2024-01-16 |
| CVE-2026-11645In CISA KEVExploitedOut of bounds read and write in V8 in Google Chrome prior to 149.0.7827.103 allowed a remote attacker to execute arbitrary code inside a sandbox via a crafted HTML page. (Chromium…Google · Chrome · CVSS 8.8 · 2026-06-08 | 8.8 | 2.4% | 2026-06-08 |
| CVE-2025-24991In CISA KEVExploitedWindows NTFS Information Disclosure VulnerabilityMicrosoft · Windows 10 Version 1507 · CVSS 5.5 · 2025-03-11 | 5.5 | 2.0% | 2025-03-11 |
| CVE-2025-22226In CISA KEVExploitedVMware ESXi, Workstation, and Fusion contain an information disclosure vulnerability due to an out-of-bounds read in HGFS. A malicious actor with administrative privileges to a vi…VMware · ESXi · CVSS 7.1 · 2025-03-04 | 7.1 | 1.6% | 2025-03-04 |
| CVE-2024-53150In CISA KEVExploitedALSA: usb-audio: Fix out of bounds reads when finding clock sourcesLinux · Linux · CVSS 7.1 · 2024-12-24 | 7.1 | 1.4% | 2024-12-24 |
| CVE-2022-22674In CISA KEVExploitedAn out-of-bounds read issue existed that led to the disclosure of kernel memory. This was addressed with improved input validation. This issue is fixed in macOS Monterey 12.3.1, S…Apple · macOS · CVSS 5.5 · 2022-05-26 | 5.5 | 1.1% | 2022-05-26 |
| CVE-2021-25487In CISA KEVExploitedLack of boundary checking of a buffer in set_skb_priv() of modem interface driver prior to SMR Oct-2021 Release 1 allows OOB read and it results in arbitrary code execution by der…Samsung Mobile · Samsung Mobile Devices · CVSS 7.3 · 2021-10-06 | 7.3 | 0.6% | 2021-10-06 |
| CVE-2019-6443CheckNTPsec > 1.1.3 - 'ctl_getitem' Out-of-Bounds ReadNtpsec · Ntpsec · 2019-01-16 | – | 67% | 2019-01-16 |
| CVE-2020-9365CheckPure-FTPd 1.0.24 - Security VulnerabilityPureftpd · Pure-Ftpd · 2020-02-24 | – | 7.1% | 2020-02-24 |
| CVE-2026-7482CheckOllama < 0.17.1 - Information Disclosureollama · ollama · CVSS 9.1 · 2026-05-04 | 9.1 | 7.1% | 2026-05-04 |
| CVE-2023-51713CheckProFTPD < 1.3.8a - DoS via Out-of-Bounds ReadProftpd · Proftpd · 2023-12-22 | – | 4.2% | 2023-12-22 |
| CVE-2024-48208CheckPure-FTPd < 1.0.52 - Buffer OverflowPureftpd · Pure-Ftpd · CVSS 8.6 · 2024-10-24 | 8.6 | 1.6% | 2024-10-24 |
| CVE-2020-8794OpenSMTPD before 6.6.4 allows remote code execution because of an out-of-bounds read in mta_io in mta_session.c for multi-line replies. Although this vulnerability affects the cli…Opensmtpd · Opensmtpd · 2020-02-25 | – | 89% | 2020-02-25 |
| CVE-2023-21769Microsoft Message Queuing (MSMQ) Denial of Service VulnerabilityMicrosoft · Windows 10 Version 1809 · CVSS 7.5 · 2023-04-11 | 7.5 | 89% | 2023-04-11 |
| CVE-2024-49113Windows Lightweight Directory Access Protocol (LDAP) Denial of Service VulnerabilityMicrosoft · Windows 10 Version 1507 · CVSS 7.5 · 2024-12-10 | 7.5 | 84% | 2024-12-10 |
| CVE-2021-25216A second vulnerability in BIND's GSSAPI security policy negotiation can be targeted by a buffer overflow attackISC · BIND9 · CVSS 8.1 · 2021-04-29 | 8.1 | 83% | 2021-04-29 |
| CVE-2017-3737OpenSSL 1.0.2 (starting from version 1.0.2b) introduced an "error state" mechanism. The intent was that if a fatal error occurred during a handshake then OpenSSL would move into t…OpenSSL Software Foundation · OpenSSL · 2017-12-07 | – | 79% | 2017-12-07 |
| CVE-2021-44142The Samba vfs_fruit module uses extended file attributes (EA, xattr) to provide "...enhanced compatibility with Apple SMB clients and interoperability with a Netatalk 3 AFP filese…Samba · Samba · CVSS 8.8 · 2022-02-21 | 8.8 | 74% | 2022-02-21 |
| CVE-2018-1303A specially crafted HTTP request header could have crashed the Apache HTTP Server prior to version 2.4.30 due to an out of bound read while preparing data to be cached in shared m…Apache Software Foundation · Apache HTTP Server · 2018-03-26 | – | 70% | 2018-03-26 |
| CVE-2025-29971Web Threat Defense (WTD.sys) Denial of Service VulnerabilityMicrosoft · Windows 11 version 22H2 · CVSS 7.5 · 2025-05-13 | 7.5 | 68% | 2025-05-13 |
| CVE-2018-8139A remote code execution vulnerability exists in the way that the scripting engine handles objects in memory in Microsoft Edge, aka "Scripting Engine Memory Corruption Vulnerabilit…Microsoft · Microsoft Edge · 2018-05-09 | – | 66% | 2018-05-09 |
| CVE-2018-0767Microsoft Edge in Microsoft Windows 10 1511, 1607, 1703, 1709, and Windows Server 2016 allows an attacker to obtain information to further compromise the user's system, due to how…Microsoft Corporation · Microsoft Edge · 2018-01-04 | – | 65% | 2018-01-04 |
| CVE-2021-36160mod_proxy_uwsgi out of bound readApache Software Foundation · Apache HTTP Server · 2021-09-16 | – | 64% | 2021-09-16 |
| CVE-2004-0184Integer underflow in the isakmp_id_print for TCPDUMP 3.8.1 and earlier allows remote attackers to cause a denial of service (crash) via an ISAKMP packet with an Identification pay…Tcpdump · Tcpdump · 2004-04-06 | – | 60% | 2004-04-06 |
| CVE-2022-47938An issue was discovered in ksmbd in the Linux kernel 5.15 through 5.19 before 5.19.2. fs/ksmbd/smb2misc.c has an out-of-bounds read and OOPS for SMB2_TREE_CONNECT.Linux · Linux Kernel · CVSS 6.5 · 2022-12-23 | 6.5 | 60% | 2022-12-23 |
| CVE-2018-16855An issue has been found in PowerDNS Recursor before version 4.1.8 where a remote attacker sending a DNS query can trigger an out-of-bounds memory read while computing the hash of…Powerdns · pdns-recursor · CVSS 7.5 · 2018-12-03 | 7.5 | 59% | 2018-12-03 |
| CVE-2018-0780Microsoft Edge in Microsoft Windows 10 Gold, 1511, 1607, 1703, 1709, and Windows Server 2016 allows an attacker to obtain information to further compromise the user's system, due…Microsoft Corporation · Microsoft Edge · 2018-01-04 | – | 59% | 2018-01-04 |
| CVE-2017-3731Truncated packet could crash via OOB readOpenSSL · OpenSSL · 2017-05-04 | – | 57% | 2017-05-04 |
| CVE-2020-25110An issue was discovered in the DNS implementation in Ethernut in Nut/OS 5.1. The length byte of a domain name in a DNS query/response is not checked, and is used for internal memo…Ethernut · Nut/os · 2020-12-11 | – | 54% | 2020-12-11 |
| CVE-2020-25109An issue was discovered in the DNS implementation in Ethernut in Nut/OS 5.1. The number of DNS queries/responses (set in a DNS header) is not checked against the data present. Thi…Ethernut · Nut/os · 2020-12-11 | – | 54% | 2020-12-11 |
| CVE-2020-25107An issue was discovered in the DNS implementation in Ethernut in Nut/OS 5.1. There is no check on whether a domain name has '\0' termination. This may lead to successful Denial-of…Ethernut · Nut/os · 2020-12-11 | – | 54% | 2020-12-11 |
| CVE-2023-32029Microsoft Excel Remote Code Execution VulnerabilityMicrosoft · Microsoft Office 2019 · CVSS 7.8 · 2023-06-13 | 7.8 | 54% | 2023-06-13 |
| CVE-2024-26594ksmbd: validate mech token in session setupLinux · Linux · CVSS 9.1 · 2024-02-23 | 9.1 | 51% | 2024-02-23 |
| CVE-2023-4427Out of bounds memory access in V8 in Google Chrome prior to 116.0.5845.110 allowed a remote attacker to perform an out of bounds memory read via a crafted HTML page. (Chromium sec…Google · Chrome · 2023-08-22 | – | 48% | 2023-08-22 |
| CVE-2021-3712Read buffer overruns processing ASN.1 stringsOpenSSL · OpenSSL · CVSS 7.4 · 2021-08-24 | 7.4 | 48% | 2021-08-24 |
| CVE-2021-28554Adobe Acrobat Reader DC Path Parsing Out-Of-Bounds Read could lead to arbitrary code executionAdobe · Acrobat Reader · CVSS 7.8 · 2021-08-24 | 7.8 | 46% | 2021-08-24 |
| CVE-2018-3956An exploitable out-of-bounds read vulnerability exists in the handling of certain XFA element attributes of Foxit Software's PDF Reader version 9.1.0.5096. A specially crafted PDF…Foxit · Foxit · CVSS 6.8 · 2019-01-30 | 6.8 | 46% | 2019-01-30 |
| CVE-2019-6444An issue was discovered in NTPsec before 1.1.3. process_control() in ntp_control.c has a stack-based buffer over-read because attacker-controlled data is dereferenced by ntohl() i…Ntpsec · Ntpsec · 2019-01-16 | – | 46% | 2019-01-16 |
| CVE-2019-8457SQLite3 from 3.6.0 to and including 3.27.2 is vulnerable to heap out-of-bound read in the rtreenode() function when handling invalid rtree tables.Sqlite · SQLite · 2019-05-30 | – | 45% | 2019-05-30 |
EPSS is the probability of exploitation in the next 30 days (FIRST). Data as of 2026-11-14.