CWE-126 · Memory Corruption
Buffer Over-read
592CVEs
SortMost likely exploited
592 CVEs with CWE-126 as their weakness
| CVE · most likely exploited | CVSS | EPSS | Published |
|---|---|---|---|
| CVE-2023-49285Denial of Service in HTTP Message Processing in Squidsquid-cache · squid · CVSS 8.6 · 2023-12-04 | 8.6 | 88% | 2023-12-04 |
| CVE-2017-7668The HTTP strict parsing changes added in Apache httpd 2.2.32 and 2.4.24 introduced a bug in token list parsing, which allows ap_find_token() to search past the end of its input st…Apache Software Foundation · Apache HTTP Server · 2017-06-20 | – | 57% | 2017-06-20 |
| CVE-2017-7679In Apache httpd 2.2.x before 2.2.33 and 2.4.x before 2.4.26, mod_mime can read one byte past the end of a buffer when sending a malicious Content-Type response header.Apache Software Foundation · Apache HTTP Server · 2017-06-20 | – | 39% | 2017-06-20 |
| CVE-2025-21277Microsoft Message Queuing (MSMQ) Denial of Service VulnerabilityMicrosoft · Windows 10 Version 1507 · CVSS 7.5 · 2025-01-14 | 7.5 | 39% | 2025-01-14 |
| CVE-2024-38071Windows Remote Desktop Licensing Service Denial of Service VulnerabilityMicrosoft · Windows Server 2019 · CVSS 7.5 · 2024-07-09 | 7.5 | 36% | 2024-07-09 |
| CVE-2009-2495The Active Template Library (ATL) in Microsoft Visual Studio .NET 2003 SP1, Visual Studio 2005 SP1 and 2008 Gold and SP1, and Visual C++ 2005 SP1 and 2008 Gold and SP1 does not pr…Microsoft · Visual C++ · CVSS 6.5 · 2009-07-29 | 6.5 | 34% | 2009-07-29 |
| CVE-2024-20290A vulnerability in the OLE2 file format parser of ClamAV could allow an unauthenticated, remote attacker to cause a denial of service (DoS) condition on an affected device. This v…Cisco · Cisco Secure Endpoint · CVSS 7.5 · 2024-02-07 | 7.5 | 33% | 2024-02-07 |
| CVE-2023-38152DHCP Server Service Information Disclosure VulnerabilityMicrosoft · Windows Server 2019 · CVSS 5.3 · 2023-09-12 | 5.3 | 24% | 2023-09-12 |
| CVE-2023-36397Windows Pragmatic General Multicast (PGM) Remote Code Execution VulnerabilityMicrosoft · Windows 10 Version 1809 · CVSS 9.8 · 2023-11-14 | 9.8 | 18% | 2023-11-14 |
| CVE-2024-26160Windows Cloud Files Mini Filter Driver Information Disclosure VulnerabilityMicrosoft · Windows 11 version 22H2 · CVSS 5.5 · 2024-03-12 | 5.5 | 11% | 2024-03-12 |
| CVE-2019-11036Heap over-read in PHP EXIF extensionPHP Group · PHP · CVSS 4.8 · 2019-05-03 | 4.8 | 7.0% | 2019-05-03 |
| CVE-2018-14790Fuji Electric FRENIC LOADER v3.3 v7.3.4.1a of FRENIC-Mini (C1), FRENIC-Mini (C2), FRENIC-Eco, FRENIC-Multi, FRENIC-MEGA, FRENIC-Ace. A buffer over-read vulnerability may allow rem…Fuji Electric · FRENIC LOADER of FRENIC-Mini (C1), FRENIC-Mini (C2), FRENIC-Eco, FRENIC-Multi,… · 2018-10-01 | – | 5.4% | 2018-10-01 |
| CVE-2018-8789FreeRDP prior to version 2.0.0-rc4 contains several Out-Of-Bounds Reads in the NTLM Authentication module that results in a Denial of Service (segfault).Check Point Software Technologies Ltd. · FreeRDP · 2018-11-29 | – | 5.2% | 2018-11-29 |
| CVE-2023-28266Windows Common Log File System Driver Information Disclosure VulnerabilityMicrosoft · Windows 10 Version 1809 · CVSS 5.5 · 2023-04-11 | 5.5 | 4.4% | 2023-04-11 |
| CVE-2018-8799rdesktop versions up to and including v1.8.3 contain an Out-Of-Bounds Read in function process_secondary_order() that results in a Denial of Service (segfault).Check Point Software Technologies Ltd. · rdesktop · 2019-02-05 | – | 4.1% | 2019-02-05 |
| CVE-2018-8796rdesktop versions up to and including v1.8.3 contain an Out-Of-Bounds Read in function process_bitmap_updates() that results in a Denial of Service (segfault).Check Point Software Technologies Ltd. · rdesktop · 2019-02-05 | – | 4.1% | 2019-02-05 |
| CVE-2018-8792rdesktop versions up to and including v1.8.3 contain an Out-Of-Bounds Read in function cssp_read_tsrequest() that results in a Denial of Service (segfault).Check Point Software Technologies Ltd. · rdesktop · 2019-02-05 | – | 4.1% | 2019-02-05 |
| CVE-2018-8798rdesktop versions up to and including v1.8.3 contain an Out-Of-Bounds Read in function rdpsnd_process_ping() that results in an information leak.Check Point Software Technologies Ltd. · rdesktop · 2019-02-05 | – | 3.8% | 2019-02-05 |
| CVE-2018-8791rdesktop versions up to and including v1.8.3 contain an Out-Of-Bounds Read in function rdpdr_process() that results in an information leak.Check Point Software Technologies Ltd. · rdesktop · 2019-02-05 | – | 3.8% | 2019-02-05 |
| CVE-2023-38144Windows Common Log File System Driver Elevation of Privilege VulnerabilityMicrosoft · Windows 10 Version 1809 · CVSS 7.8 · 2023-09-12 | 7.8 | 3.4% | 2023-09-12 |
| CVE-2023-35638DHCP Server Service Denial of Service VulnerabilityMicrosoft · Windows Server 2019 · CVSS 7.5 · 2023-12-12 | 7.5 | 3.3% | 2023-12-12 |
| CVE-2023-35643DHCP Server Service Information Disclosure VulnerabilityMicrosoft · Windows Server 2019 · CVSS 7.5 · 2023-12-12 | 7.5 | 2.6% | 2023-12-12 |
| CVE-2023-36581Microsoft Message Queuing (MSMQ) Denial of Service VulnerabilityMicrosoft · Windows 10 Version 1809 · CVSS 7.5 · 2023-10-10 | 7.5 | 2.5% | 2023-10-10 |
| CVE-2023-36392DHCP Server Service Denial of Service VulnerabilityMicrosoft · Windows Server 2019 · CVSS 7.5 · 2023-11-14 | 7.5 | 2.5% | 2023-11-14 |
| CVE-2026-26169Windows Kernel Memory Information Disclosure VulnerabilityMicrosoft · Windows 10 Version 1607 · CVSS 6.1 · 2026-04-14 | 6.1 | 2.4% | 2026-04-14 |
| CVE-2025-21176.NET, .NET Framework, and Visual Studio Remote Code Execution VulnerabilityMicrosoft · .NET 8.0 · CVSS 8.8 · 2025-01-14 | 8.8 | 2.4% | 2025-01-14 |
| CVE-2022-1720Buffer Over-read in function grab_file_name in vim/vimvim · vim/vim · CVSS 6.6 · 2022-05-16 | 6.6 | 2.2% | 2022-05-16 |
| CVE-2020-8244A buffer over-read vulnerability exists in bl <4.0.3, <3.0.1, <2.2.1, and <1.2.3 which could allow an attacker to supply user input (even typed) that if it ends up in consume() ar…Bufferlist Project · bl · 2020-08-30 | – | 2.1% | 2020-08-30 |
| CVE-2023-28267Remote Desktop Protocol Client Information Disclosure VulnerabilityMicrosoft · Windows 10 Version 1809 · CVSS 6.5 · 2023-04-11 | 6.5 | 2.1% | 2023-04-11 |
| CVE-2023-38172Microsoft Message Queuing (MSMQ) Denial of Service VulnerabilityMicrosoft · Windows 10 Version 1507 · CVSS 7.5 · 2023-08-08 | 7.5 | 2.0% | 2023-08-08 |
| CVE-2022-1629Buffer Over-read in function find_next_quote in vim/vimvim · vim/vim · CVSS 6.6 · 2022-05-10 | 6.6 | 1.9% | 2022-05-10 |
| CVE-2023-24942Remote Procedure Call Runtime Denial of Service VulnerabilityMicrosoft · Windows 10 Version 1809 · CVSS 7.5 · 2023-05-09 | 7.5 | 1.9% | 2023-05-09 |
| CVE-2023-35330Windows Extended Negotiation Denial of Service VulnerabilityMicrosoft · Windows 10 Version 1809 · CVSS 7.5 · 2023-07-11 | 7.5 | 1.9% | 2023-07-11 |
| CVE-2025-26672Windows Routing and Remote Access Service (RRAS) Information Disclosure VulnerabilityMicrosoft · Windows 10 Version 1507 · CVSS 6.5 · 2025-04-08 | 6.5 | 1.9% | 2025-04-08 |
| CVE-2025-26664Windows Routing and Remote Access Service (RRAS) Information Disclosure VulnerabilityMicrosoft · Windows Server 2008 R2 Service Pack 1 · CVSS 6.5 · 2025-04-08 | 6.5 | 1.9% | 2025-04-08 |
| CVE-2024-43475Microsoft Windows Admin Center Information Disclosure VulnerabilityMicrosoft · Windows Server 2008 Service Pack 2 · CVSS 7.3 · 2024-09-10 | 7.3 | 1.8% | 2024-09-10 |
| CVE-2019-5432A specifically malformed MQTT Subscribe packet crashes MQTT Brokers using the mqtt-packet module versions < 3.5.1, 4.0.0 - 4.1.3, 5.0.0 - 5.6.1, 6.0.0 - 6.1.2 for decoding.Mqtt-Packet Project · mqtt-packet · 2019-05-06 | – | 1.8% | 2019-05-06 |
| CVE-2019-3563Wangle's LineBasedFrameDecoder contains logic for identifying newlines which incorrectly advances a buffer, leading to a potential underflow. This affects versions of Wangle prior…Facebook · Wangle · 2019-04-29 | – | 1.7% | 2019-04-29 |
| CVE-2025-21203Windows Routing and Remote Access Service (RRAS) Information Disclosure VulnerabilityMicrosoft · Windows Server 2008 R2 Service Pack 1 · CVSS 6.5 · 2025-04-08 | 6.5 | 1.7% | 2025-04-08 |
| CVE-2022-22519Special HTTP(s) Requests can cause a buffer-read causing a crash of the webserver and the runtime system.CODESYS · CODESYS Control RTE (SL) · CVSS 7.5 · 2022-04-07 | 7.5 | 1.7% | 2022-04-07 |
| CVE-2025-26676Windows Routing and Remote Access Service (RRAS) Information Disclosure VulnerabilityMicrosoft · Windows Server 2008 R2 Service Pack 1 · CVSS 6.5 · 2025-04-08 | 6.5 | 1.7% | 2025-04-08 |
| CVE-2022-1927Buffer Over-read in vim/vimvim · vim/vim · CVSS 7.8 · 2022-05-29 | 7.8 | 1.7% | 2022-05-29 |
| CVE-2023-21813Windows Secure Channel Denial of Service VulnerabilityMicrosoft · Windows 10 Version 1507 · CVSS 7.5 · 2023-02-14 | 7.5 | 1.7% | 2023-02-14 |
| CVE-2023-21811Windows iSCSI Service Denial of Service VulnerabilityMicrosoft · Windows 10 Version 1507 · CVSS 7.5 · 2023-02-14 | 7.5 | 1.7% | 2023-02-14 |
| CVE-2023-21701Microsoft Protected Extensible Authentication Protocol (PEAP) Denial of Service VulnerabilityMicrosoft · Windows 10 Version 1507 · CVSS 7.5 · 2023-02-14 | 7.5 | 1.7% | 2023-02-14 |
| CVE-2023-36801DHCP Server Service Information Disclosure VulnerabilityMicrosoft · Windows Server 2019 · CVSS 5.3 · 2023-09-12 | 5.3 | 1.6% | 2023-09-12 |
| CVE-2023-33173Remote Procedure Call Runtime Denial of Service VulnerabilityMicrosoft · Windows 10 Version 1809 · CVSS 6.5 · 2023-07-11 | 6.5 | 1.6% | 2023-07-11 |
| CVE-2023-33172Remote Procedure Call Runtime Denial of Service VulnerabilityMicrosoft · Windows 10 Version 1809 · CVSS 6.5 · 2023-07-11 | 6.5 | 1.6% | 2023-07-11 |
| CVE-2023-33169Remote Procedure Call Runtime Denial of Service VulnerabilityMicrosoft · Windows 10 Version 1809 · CVSS 6.5 · 2023-07-11 | 6.5 | 1.6% | 2023-07-11 |
| CVE-2023-33168Remote Procedure Call Runtime Denial of Service VulnerabilityMicrosoft · Windows 10 Version 1809 · CVSS 6.5 · 2023-07-11 | 6.5 | 1.6% | 2023-07-11 |
EPSS is the probability of exploitation in the next 30 days (FIRST). Data as of 2026-11-14.