CWE-125

Out-of-bounds Read

BaseDraft

Description

The product reads data past the end, or before the beginning, of the intended buffer.

Hierarchy (View 1000)

Parents

CWE-119

Children

Related attack patterns (CAPEC)

CAPEC-540

CVEs mapped to this weakness (9,427)

page 283 of 472

CVE	Vendor / Product	Sev	Risk	CVSS	Published	Description
CVE-2026-68813	Microsoft Office	Med	0.36	5.5	Aug 11, 2026	Out-of-bounds read in Microsoft Office Excel allows an unauthorized attacker to disclose information locally.
CVE-2026-68808	Microsoft Office	Med	0.36	5.5	Aug 11, 2026	Out-of-bounds read in Microsoft Office Excel allows an unauthorized attacker to disclose information locally.
CVE-2026-68802	Microsoft Office	Med	0.36	5.5	Aug 11, 2026	Out-of-bounds read in Microsoft Office Excel allows an unauthorized attacker to disclose information locally.
CVE-2026-68797	Microsoft Office	Med	0.36	5.5	Aug 11, 2026	Out-of-bounds read in Microsoft Office Excel allows an unauthorized attacker to disclose information locally.
CVE-2026-66809	Microsoft Office	Med	0.36	5.5	Aug 11, 2026	Out-of-bounds read in Microsoft Office allows an unauthorized attacker to disclose information locally.
CVE-2026-66806	Microsoft Word	Med	0.36	5.5	Aug 11, 2026	Off-by-one error in Microsoft Office Word allows an unauthorized attacker to disclose information locally.
CVE-2026-65784	Microsoft Windows NTFS	Med	0.36	5.5	Aug 11, 2026	Out-of-bounds read in Windows NTFS allows an authorized attacker to disclose information locally.
CVE-2026-65662	Microsoft Windows Server 2003	Med	0.36	5.5	Aug 11, 2026	Out-of-bounds read in Windows GDI allows an authorized attacker to disclose information locally.
CVE-2026-64917	Microsoft Word	Med	0.36	5.5	Aug 11, 2026	Out-of-bounds read in Microsoft Office Word allows an unauthorized attacker to disclose information locally.
CVE-2026-64899	Microsoft Office	Med	0.36	5.5	Aug 11, 2026	Out-of-bounds read in Microsoft Office allows an unauthorized attacker to disclose information locally.
CVE-2026-63531	Microsoft Word	Med	0.36	5.5	Aug 11, 2026	Out-of-bounds read in Microsoft Office Word allows an unauthorized attacker to disclose information locally.
CVE-2026-63530	Microsoft Word	Med	0.36	5.5	Aug 11, 2026	Out-of-bounds read in Microsoft Office Word allows an unauthorized attacker to disclose information locally.
CVE-2026-63529	Microsoft Office	Med	0.36	5.5	Aug 11, 2026	Out-of-bounds read in Microsoft Office allows an unauthorized attacker to disclose information locally.
CVE-2026-63528	Microsoft Word	Med	0.36	5.5	Aug 11, 2026	Out-of-bounds read in Microsoft Office Word allows an unauthorized attacker to disclose information locally.
CVE-2026-63524	Microsoft Office	Med	0.36	5.5	Aug 11, 2026	Out-of-bounds read in Microsoft Office allows an unauthorized attacker to disclose information locally.
CVE-2026-63521	Microsoft Word	Med	0.36	5.5	Aug 11, 2026	Out-of-bounds read in Microsoft Office Word allows an unauthorized attacker to disclose information locally.
CVE-2026-63517	Microsoft Office	Med	0.36	5.5	Aug 11, 2026	Out-of-bounds read in Microsoft Office allows an unauthorized attacker to disclose information locally.
CVE-2026-62887	Microsoft Windows NTFS	Med	0.36	5.5	Aug 11, 2026	Out-of-bounds read in Windows NTFS allows an authorized attacker to disclose information locally.
CVE-2026-62842	Microsoft Office	Med	0.36	5.5	Aug 11, 2026	Out-of-bounds read in Microsoft Office allows an unauthorized attacker to disclose information locally.
CVE-2026-62796	Microsoft Windows NTFS	Med	0.36	5.5	Aug 11, 2026	Out-of-bounds read in Windows NTFS allows an authorized attacker to disclose information locally.

CVE-2026-68813MedAug 11, 2026
Microsoft
Office
risk 0.36cvss 5.5epss 0.00
Out-of-bounds read in Microsoft Office Excel allows an unauthorized attacker to disclose information locally.
CVE-2026-68808MedAug 11, 2026
Microsoft
Office
risk 0.36cvss 5.5epss 0.00
Out-of-bounds read in Microsoft Office Excel allows an unauthorized attacker to disclose information locally.
CVE-2026-68802MedAug 11, 2026
Microsoft
Office
risk 0.36cvss 5.5epss 0.00
Out-of-bounds read in Microsoft Office Excel allows an unauthorized attacker to disclose information locally.
CVE-2026-68797MedAug 11, 2026
Microsoft
Office
risk 0.36cvss 5.5epss 0.00
Out-of-bounds read in Microsoft Office Excel allows an unauthorized attacker to disclose information locally.
CVE-2026-66809MedAug 11, 2026
Microsoft
Office
risk 0.36cvss 5.5epss 0.00
Out-of-bounds read in Microsoft Office allows an unauthorized attacker to disclose information locally.
CVE-2026-66806MedAug 11, 2026
Microsoft
Word
risk 0.36cvss 5.5epss 0.00
Off-by-one error in Microsoft Office Word allows an unauthorized attacker to disclose information locally.
CVE-2026-65784MedAug 11, 2026
Microsoft
Windows NTFS
risk 0.36cvss 5.5epss 0.00
Out-of-bounds read in Windows NTFS allows an authorized attacker to disclose information locally.
CVE-2026-65662MedAug 11, 2026
Microsoft
Windows Server 2003
risk 0.36cvss 5.5epss 0.00
Out-of-bounds read in Windows GDI allows an authorized attacker to disclose information locally.
CVE-2026-64917MedAug 11, 2026
Microsoft
Word
risk 0.36cvss 5.5epss 0.00
Out-of-bounds read in Microsoft Office Word allows an unauthorized attacker to disclose information locally.
CVE-2026-64899MedAug 11, 2026
Microsoft
Office
risk 0.36cvss 5.5epss 0.00
Out-of-bounds read in Microsoft Office allows an unauthorized attacker to disclose information locally.
CVE-2026-63531MedAug 11, 2026
Microsoft
Word
risk 0.36cvss 5.5epss 0.00
Out-of-bounds read in Microsoft Office Word allows an unauthorized attacker to disclose information locally.
CVE-2026-63530MedAug 11, 2026
Microsoft
Word
risk 0.36cvss 5.5epss 0.00
Out-of-bounds read in Microsoft Office Word allows an unauthorized attacker to disclose information locally.
CVE-2026-63529MedAug 11, 2026
Microsoft
Office
risk 0.36cvss 5.5epss 0.00
Out-of-bounds read in Microsoft Office allows an unauthorized attacker to disclose information locally.
CVE-2026-63528MedAug 11, 2026
Microsoft
Word
risk 0.36cvss 5.5epss 0.00
Out-of-bounds read in Microsoft Office Word allows an unauthorized attacker to disclose information locally.
CVE-2026-63524MedAug 11, 2026
Microsoft
Office
risk 0.36cvss 5.5epss 0.00
Out-of-bounds read in Microsoft Office allows an unauthorized attacker to disclose information locally.
CVE-2026-63521MedAug 11, 2026
Microsoft
Word
risk 0.36cvss 5.5epss 0.00
Out-of-bounds read in Microsoft Office Word allows an unauthorized attacker to disclose information locally.
CVE-2026-63517MedAug 11, 2026
Microsoft
Office
risk 0.36cvss 5.5epss 0.00
Out-of-bounds read in Microsoft Office allows an unauthorized attacker to disclose information locally.
CVE-2026-62887MedAug 11, 2026
Microsoft
Windows NTFS
risk 0.36cvss 5.5epss 0.00
Out-of-bounds read in Windows NTFS allows an authorized attacker to disclose information locally.
CVE-2026-62842MedAug 11, 2026
Microsoft
Office
risk 0.36cvss 5.5epss 0.00
Out-of-bounds read in Microsoft Office allows an unauthorized attacker to disclose information locally.
CVE-2026-62796MedAug 11, 2026
Microsoft
Windows NTFS
risk 0.36cvss 5.5epss 0.00
Out-of-bounds read in Windows NTFS allows an authorized attacker to disclose information locally.