# CWE-126. Every Advisory and CVE whose sources give the weakness CWE-126, newest first. ## Records, newest first (an older page) - [Windows Transport Driver Interface (TDI) Translation Driver Elevation of Privilege Vulnerability](https://agentprime.io/advisories/CVE-2025-49659.md) `CVE-2025-49659` · CVE record: Microsoft Windows 10 Version 1507 and 4 more · CVSS 7.8 High · Not analysed yet · Published 8 Jul 2025 · Tags: CWE-126 - [Microsoft Virtual Hard Disk Elevation of Privilege Vulnerability](https://agentprime.io/advisories/CVE-2025-47973.md) `CVE-2025-47973` · CVE record: Microsoft Windows 10 Version 1507 and 4 more · CVSS 7.8 High · Not analysed yet · Published 8 Jul 2025 · Tags: CWE-126 - [Microsoft Virtual Hard Disk Elevation of Privilege Vulnerability](https://agentprime.io/advisories/CVE-2025-47971.md) `CVE-2025-47971` · CVE record: Microsoft Windows 10 Version 1507 and 4 more · CVSS 7.8 High · Not analysed yet · Published 8 Jul 2025 · Tags: CWE-126 - [Buffer Over-read in WLAN Host](https://agentprime.io/advisories/CVE-2025-27057.md) `CVE-2025-27057` · CVE record: Qualcomm, Inc. Snapdragon · CVSS 7.5 High · Not analysed yet · Published 8 Jul 2025 · Tags: CWE-126 - [Buffer Over-read in Camera](https://agentprime.io/advisories/CVE-2025-27055.md) `CVE-2025-27055` · CVE record: Qualcomm, Inc. Snapdragon · CVSS 7.8 High · Not analysed yet · Published 8 Jul 2025 · Tags: CWE-126 - [Buffer Over-read in WLAN Embedded SW](https://agentprime.io/advisories/CVE-2025-21454.md) `CVE-2025-21454` · CVE record: Qualcomm, Inc. Snapdragon · CVSS 7.5 High · Not analysed yet · Published 8 Jul 2025 · Tags: CWE-126 - [Buffer Over-read in WLAN Embedded SW](https://agentprime.io/advisories/CVE-2025-21449.md) `CVE-2025-21449` · CVE record: Qualcomm, Inc. Snapdragon · CVSS 7.5 High · Not analysed yet · Published 8 Jul 2025 · Tags: CWE-126 - [Buffer Over-read in WLAN Firmware](https://agentprime.io/advisories/CVE-2025-21446.md) `CVE-2025-21446` · CVE record: Qualcomm, Inc. Snapdragon · CVSS 7.5 High · Not analysed yet · Published 8 Jul 2025 · Tags: CWE-126 - [Buffer Over-read in Data HLOS - LNX](https://agentprime.io/advisories/CVE-2025-21427.md) `CVE-2025-21427` · CVE record: Qualcomm, Inc. Snapdragon · CVSS 8.2 High · Not analysed yet · Published 8 Jul 2025 · Tags: CWE-126 - [Windows Storage Management Provider Information Disclosure Vulnerability](https://agentprime.io/advisories/CVE-2025-24068.md) `CVE-2025-24068` · CVE record: Microsoft Windows 10 Version 1507 and 4 more · CVSS 5.5 Medium · Not analysed yet · Published 10 Jun 2025 · Tags: CWE-126 - [Buffer Over-read in WLAN HAL](https://agentprime.io/advisories/CVE-2025-27029.md) `CVE-2025-27029` · CVE record: Qualcomm, Inc. Snapdragon · CVSS 7.5 High · Not analysed yet · Published 3 Jun 2025 · Tags: CWE-126 - [Buffer Over-read in WLAN Host Communication](https://agentprime.io/advisories/CVE-2025-21463.md) `CVE-2025-21463` · CVE record: Qualcomm, Inc. Snapdragon · CVSS 7.5 High · Not analysed yet · Published 3 Jun 2025 · Tags: CWE-126 - [Buffer Over-read in Data Network Stack & Connectivity](https://agentprime.io/advisories/CVE-2024-53026.md) `CVE-2024-53026` · CVE record: Qualcomm, Inc. Snapdragon · CVSS 8.2 High · Not analysed yet · Published 3 Jun 2025 · Tags: CWE-126 - [Buffer Over-read in Data Network Stack & Connectivity](https://agentprime.io/advisories/CVE-2024-53021.md) `CVE-2024-53021` · CVE record: Qualcomm, Inc. Snapdragon · CVSS 8.2 High · Not analysed yet · Published 3 Jun 2025 · Tags: CWE-126 - [Buffer Over-read in Data Network Stack & Connectivity](https://agentprime.io/advisories/CVE-2024-53020.md) `CVE-2024-53020` · CVE record: Qualcomm, Inc. Snapdragon · CVSS 8.2 High · Not analysed yet · Published 3 Jun 2025 · Tags: CWE-126 - [Buffer Over-read in Data Network Stack & Connectivity](https://agentprime.io/advisories/CVE-2024-53019.md) `CVE-2024-53019` · CVE record: Qualcomm, Inc. Snapdragon · CVSS 8.2 High · Not analysed yet · Published 3 Jun 2025 · Tags: CWE-126 - [Fortinet FortiOS: A buffer over-read in Fortinet FortiOS versions 7.4.0 through 7.4.3…](https://agentprime.io/advisories/CVE-2025-47295.md) `CVE-2025-47295` · CVE record: Fortinet FortiOS · CVSS 3.4 Low · Not analysed yet · Published 28 May 2025 · Tags: CWE-126 - [An issue was discovered in Insyde InsydeH2O kernel 5.2 before version 05.29.50, kernel 5.3 before version 05.38.50, kernel 5.4 before version 05.46.50, kernel 5.5 before version 05.54.50, kernel 5.6…](https://agentprime.io/advisories/CVE-2024-52879.md) `CVE-2024-52879` · CVE record · CVSS 7.5 High · Not analysed yet · Published 15 May 2025 · Tags: CWE-126 - [An issue was discovered in Insyde InsydeH2O kernel 5.2 before version 05.29.50, kernel 5.3 before version 05.38.50, kernel 5.4 before version 05.46.50, kernel 5.5 before version 05.54.50, kernel 5.6…](https://agentprime.io/advisories/CVE-2024-52878.md) `CVE-2024-52878` · CVE record · CVSS 7.5 High · Not analysed yet · Published 15 May 2025 · Tags: CWE-126 - [An issue was discovered in Insyde InsydeH2O kernel 5.2 before version 05.29.50, kernel 5.3 before version 05.38.50, kernel 5.4 before version 05.46.50, kernel 5.5 before version 05.54.50, kernel 5.6…](https://agentprime.io/advisories/CVE-2024-52877.md) `CVE-2024-52877` · CVE record · CVSS 7.5 High · Not analysed yet · Published 15 May 2025 · Tags: CWE-126 - [Microsoft Excel Remote Code Execution Vulnerability](https://agentprime.io/advisories/CVE-2025-32704.md) `CVE-2025-32704` · CVE record: Microsoft Microsoft 365 Apps for Enterprise and 4 more · CVSS 8.4 High · Not analysed yet · Published 13 May 2025 · Tags: CWE-126 - [Windows SMB Information Disclosure Vulnerability](https://agentprime.io/advisories/CVE-2025-29956.md) `CVE-2025-29956` · CVE record: Microsoft Windows 10 Version 1507 and 4 more · CVSS 5.4 Medium · Not analysed yet · Published 13 May 2025 · Tags: CWE-126 - [PostgreSQL GB18030 encoding validation can read one byte past end of allocation for text that fails validation](https://agentprime.io/advisories/CVE-2025-4207.md) `CVE-2025-4207` · CVE record: PostgreSQL · CVSS 5.9 Medium · Not analysed yet · Published 8 May 2025 · Tags: CWE-126 - [Buffer Over-read in Display](https://agentprime.io/advisories/CVE-2025-21475.md) `CVE-2025-21475` · CVE record: Qualcomm, Inc. Snapdragon · CVSS 7.8 High · Not analysed yet · Published 6 May 2025 · Tags: CWE-126 - [Buffer Over-read in WLAN Host Communication](https://agentprime.io/advisories/CVE-2025-21459.md) `CVE-2025-21459` · CVE record: Qualcomm, Inc. Snapdragon · CVSS 7.5 High · Not analysed yet · Published 6 May 2025 · Tags: CWE-126 - [Buffer Over-read in Multi-Mode Call Processor](https://agentprime.io/advisories/CVE-2024-49847.md) `CVE-2024-49847` · CVE record: Qualcomm, Inc. Snapdragon · CVSS 7.5 High · Not analysed yet · Published 6 May 2025 · Tags: CWE-126 - [Buffer Over-read in Multi-Mode Call Processor](https://agentprime.io/advisories/CVE-2024-49846.md) `CVE-2024-49846` · CVE record: Qualcomm, Inc. Snapdragon · CVSS 8.2 High · Not analysed yet · Published 6 May 2025 · Tags: CWE-126 - [Buffer Over-read in Camera Driver](https://agentprime.io/advisories/CVE-2024-45568.md) `CVE-2024-45568` · CVE record: Qualcomm, Inc. Snapdragon · CVSS 6.7 Medium · Not analysed yet · Published 6 May 2025 · Tags: CWE-126 - [Windows Routing and Remote Access Service (RRAS) Information Disclosure Vulnerability](https://agentprime.io/advisories/CVE-2025-26676.md) `CVE-2025-26676` · CVE record: Microsoft Windows Server 2008 R2 Service Pack 1 and 4 more · CVSS 6.5 Medium · Not analysed yet · Published 8 Apr 2025 · Tags: CWE-126 - [Windows Routing and Remote Access Service (RRAS) Information Disclosure Vulnerability](https://agentprime.io/advisories/CVE-2025-26672.md) `CVE-2025-26672` · CVE record: Microsoft Windows 10 Version 1507 and 4 more · CVSS 6.5 Medium · Not analysed yet · Published 8 Apr 2025 · Tags: CWE-126 - [Windows Routing and Remote Access Service (RRAS) Information Disclosure Vulnerability](https://agentprime.io/advisories/CVE-2025-21203.md) `CVE-2025-21203` · CVE record: Microsoft Windows Server 2008 R2 Service Pack 1 and 4 more · CVSS 6.5 Medium · Not analysed yet · Published 8 Apr 2025 · Tags: CWE-126 - [Windows Routing and Remote Access Service (RRAS) Information Disclosure Vulnerability](https://agentprime.io/advisories/CVE-2025-26664.md) `CVE-2025-26664` · CVE record: Microsoft Windows Server 2008 R2 Service Pack 1 and 4 more · CVSS 6.5 Medium · Not analysed yet · Published 8 Apr 2025 · Tags: CWE-126 - [Buffer Over-read in WLAN Firmware](https://agentprime.io/advisories/CVE-2025-21448.md) `CVE-2025-21448` · CVE record: Qualcomm, Inc. Snapdragon · CVSS 7.5 High · Not analysed yet · Published 7 Apr 2025 · Tags: CWE-126 - [Buffer Over-read in WLAN Host Communication](https://agentprime.io/advisories/CVE-2025-21435.md) `CVE-2025-21435` · CVE record: Qualcomm, Inc. Snapdragon · CVSS 7.5 High · Not analysed yet · Published 7 Apr 2025 · Tags: CWE-126 - [Buffer Over-read in WLAN Host](https://agentprime.io/advisories/CVE-2025-21434.md) `CVE-2025-21434` · CVE record: Qualcomm, Inc. Snapdragon · CVSS 7.5 High · Not analysed yet · Published 7 Apr 2025 · Tags: CWE-126 - [Buffer Over-read in WLAN Host](https://agentprime.io/advisories/CVE-2025-21430.md) `CVE-2025-21430` · CVE record: Qualcomm, Inc. Snapdragon · CVSS 7.5 High · Not analysed yet · Published 7 Apr 2025 · Tags: CWE-126 - [Buffer Over-read in WLAN Host](https://agentprime.io/advisories/CVE-2025-21429.md) `CVE-2025-21429` · CVE record: Qualcomm, Inc. Snapdragon · CVSS 7.5 High · Not analysed yet · Published 7 Apr 2025 · Tags: CWE-126 - [Buffer Over-read in WLAN Host](https://agentprime.io/advisories/CVE-2025-21428.md) `CVE-2025-21428` · CVE record: Qualcomm, Inc. Snapdragon · CVSS 7.5 High · Not analysed yet · Published 7 Apr 2025 · Tags: CWE-126 - [Buffer Over-read in Display](https://agentprime.io/advisories/CVE-2025-21421.md) `CVE-2025-21421` · CVE record: Qualcomm, Inc. Snapdragon · CVSS 7.8 High · Not analysed yet · Published 7 Apr 2025 · Tags: CWE-126 - [Buffer Over-read in Data Network Stack & Connectivity](https://agentprime.io/advisories/CVE-2024-45552.md) `CVE-2024-45552` · CVE record: Qualcomm, Inc. Snapdragon · CVSS 8.2 High · Not analysed yet · Published 7 Apr 2025 · Tags: CWE-126 - [Libsoup: heap buffer overflows in sniff_feed_or_html() and skip_insignificant_space()](https://agentprime.io/advisories/CVE-2025-32053.md) `CVE-2025-32053` · CVE record: Red Hat Red Hat Enterprise Linux 8 and 4 more · CVSS 6.5 Medium · Not analysed yet · Published 3 Apr 2025 · Tags: CWE-126 - [Libsoup: heap buffer overflow in sniff_unknown()](https://agentprime.io/advisories/CVE-2025-32052.md) `CVE-2025-32052` · CVE record: Red Hat Red Hat Enterprise Linux 8 and 4 more · CVSS 6.5 Medium · Not analysed yet · Published 3 Apr 2025 · Tags: CWE-126 - [Windows NTFS Information Disclosure Vulnerability](https://agentprime.io/advisories/CVE-2025-24992.md) `CVE-2025-24992` · CVE record: Microsoft Windows 10 Version 1507 and 4 more · CVSS 5.5 Medium · Not analysed yet · Published 11 Mar 2025 · Tags: CWE-126 - [Silicon Labs CPC can leak information in full duplex SPI](https://agentprime.io/advisories/CVE-2024-12975.md) `CVE-2024-12975` · CVE record: Silicon Labs Simplicity SDK · CVSS 1.0 Low · Not analysed yet · Published 7 Mar 2025 · Tags: CWE-126 - [Buffer Over-read in Hypervisor](https://agentprime.io/advisories/CVE-2024-43056.md) `CVE-2024-43056` · CVE record: Qualcomm, Inc. Snapdragon · CVSS 5.5 Medium · Not analysed yet · Published 3 Mar 2025 · Tags: CWE-126 - [libarchive: libarchive through 3.7.7 has a heap-based buffer over-read in header_gnu_longlink in…](https://agentprime.io/advisories/CVE-2024-57970.md) `CVE-2024-57970` · CVE record: libarchive libarchive · CVSS 4.0 Medium · Not analysed yet · Published 16 Feb 2025 · Tags: CWE-126 - [Zettler 130.8005: A CWE-126 “Buffer Over-read” was discovered affecting the 130.8005 TCP/IP Gateway running…](https://agentprime.io/advisories/CVE-2024-12011.md) `CVE-2024-12011` · CVE record: Zettler 130.8005 · CVSS 7.6 High · Not analysed yet · Published 13 Feb 2025 · Tags: CWE-126 - [Buffer Over-read in WLAN Host Cmn](https://agentprime.io/advisories/CVE-2024-49839.md) `CVE-2024-49839` · CVE record: Qualcomm, Inc. Snapdragon · CVSS 8.2 High · Not analysed yet · Published 3 Feb 2025 · Tags: CWE-126 - [Buffer Over-read in WLAN HOST](https://agentprime.io/advisories/CVE-2024-49838.md) `CVE-2024-49838` · CVE record: Qualcomm, Inc. Snapdragon · CVSS 8.2 High · Not analysed yet · Published 3 Feb 2025 · Tags: CWE-126 - [Use After Free in Windows WLAN Host](https://agentprime.io/advisories/CVE-2024-45561.md) `CVE-2024-45561` · CVE record: Qualcomm, Inc. Snapdragon · CVSS 7.8 High · Not analysed yet · Published 3 Feb 2025 · Tags: CWE-126 - [Buffer Over-read in Automotive Multimedia](https://agentprime.io/advisories/CVE-2024-38417.md) `CVE-2024-38417` · CVE record: Qualcomm, Inc. Snapdragon · CVSS 6.1 Medium · Not analysed yet · Published 3 Feb 2025 · Tags: CWE-126 - [Buffer Over-read in Audio](https://agentprime.io/advisories/CVE-2024-38416.md) `CVE-2024-38416` · CVE record: Qualcomm, Inc. Snapdragon · CVSS 6.1 Medium · Not analysed yet · Published 3 Feb 2025 · Tags: CWE-126 - [Buffer Over-read in Computer Vision](https://agentprime.io/advisories/CVE-2024-38414.md) `CVE-2024-38414` · CVE record: Qualcomm, Inc. Snapdragon · CVSS 6.1 Medium · Not analysed yet · Published 3 Feb 2025 · Tags: CWE-126 - [Buffer Over-read in Multi Mode Call Processor](https://agentprime.io/advisories/CVE-2024-38404.md) `CVE-2024-38404` · CVE record: Qualcomm, Inc. Snapdragon · CVSS 7.5 High · Not analysed yet · Published 3 Feb 2025 · Tags: CWE-126 - [Microsoft Security Advisory CVE-2025-21176 | .NET and Visual Studio Remote Code Execution Vulnerability](https://agentprime.io/advisories/GHSA-gjf6-3w4p-7xfh.md) `GHSA-gjf6-3w4p-7xfh`, `BIT-dotnet-2025-21176`, `BIT-dotnet-sdk-2025-21176`, `CVE-2025-21176` · NuGet `Microsoft.NetCore.App.Runtime.linux-arm` and 11 more: affected `>=8.0.0, <8.0.12 || >=9.0.0, <9.0.1`, fixed in `8.0.12`, `9.0.1` · CVSS 8.8 High · Not analysed yet · Published 14 Jan 2025 · Tags: CWE-126 - [Microsoft Message Queuing (MSMQ) Denial of Service Vulnerability](https://agentprime.io/advisories/CVE-2025-21277.md) `CVE-2025-21277` · CVE record: Microsoft Windows 10 Version 1507 and 4 more · CVSS 7.5 High · Critical (CVSS 7+ and EPSS) · EPSS 0.39 · Not analysed yet · Published 14 Jan 2025 · Tags: CWE-126 - [Windows Cloud Files Mini Filter Driver Elevation of Privilege Vulnerability](https://agentprime.io/advisories/CVE-2025-21271.md) `CVE-2025-21271` · CVE record: Microsoft Windows 10 Version 1809 and 4 more · CVSS 7.8 High · Not analysed yet · Published 14 Jan 2025 · Tags: CWE-126 - [Buffer Over-read in Automotive OS Platform](https://agentprime.io/advisories/CVE-2024-45559.md) `CVE-2024-45559` · CVE record: Qualcomm, Inc. Snapdragon · CVSS 5.5 Medium · Not analysed yet · Published 6 Jan 2025 · Tags: CWE-126 - [Buffer Over-read in WLAN Host Cmn](https://agentprime.io/advisories/CVE-2024-45558.md) `CVE-2024-45558` · CVE record: Qualcomm, Inc. Snapdragon · CVSS 7.5 High · Not analysed yet · Published 6 Jan 2025 · Tags: CWE-126 - [Buffer Over-read in WLAN Windows Host](https://agentprime.io/advisories/CVE-2024-45548.md) `CVE-2024-45548` · CVE record: Qualcomm, Inc. Snapdragon · CVSS 7.8 High · Not analysed yet · Published 6 Jan 2025 · Tags: CWE-126 Newest: Older: ## Filters and formats Filters are query parameters on this URL: `q` (words, as in a web search engine: `"a phrase"`, `OR`, `-word`; an id; a package or product name), `severity` (low, medium, high or critical), `critical=1`, `kev=1`, `ecosystem` (npm, pypi, packagist, go, maven, rubygems, crates, nuget, hex), `kind=package`, `assigner` (a CNA’s short name), `min_score` and `state`. Each record’s title links to its Markdown page. - The same list as JSON: - Every list: , critical: ; by weakness: and the other tags in ; by technology: `/advisories/technology/.md` (`fortinet-fortimail`) --- The web page: . Everything for agents: .