# CWE-126.

Every Advisory and CVE whose sources give the weakness CWE-126, newest first.

## Records, newest first (an older page)

- [Microsoft Office Word Information Disclosure Vulnerability](https://agentprime.io/advisories/CVE-2026-83951.md)
  `CVE-2026-83951` · CVE record: Microsoft Microsoft 365 Apps for Enterprise and 4 more · CVSS 5.5 Medium · Not analysed yet · Published 8 Sept 2026 · Tags: CWE-126
- [Microsoft Excel Information Disclosure Vulnerability](https://agentprime.io/advisories/CVE-2026-81399.md)
  `CVE-2026-81399` · CVE record: Microsoft Microsoft 365 Apps for Enterprise and 4 more · CVSS 5.5 Medium · Not analysed yet · Published 8 Sept 2026 · Tags: CWE-126
- [Windows Storage Information Disclosure Vulnerability](https://agentprime.io/advisories/CVE-2026-78516.md)
  `CVE-2026-78516` · CVE record: Microsoft Windows 10 Version 1607 and 4 more · CVSS 4.3 Medium · Not analysed yet · Published 8 Sept 2026 · Tags: CWE-126
- [Microsoft Office Excel Information Disclosure Vulnerability](https://agentprime.io/advisories/CVE-2026-72974.md)
  `CVE-2026-72974` · CVE record: Microsoft Microsoft 365 Apps for Enterprise and 4 more · CVSS 6.5 Medium · Not analysed yet · Published 8 Sept 2026 · Tags: CWE-126
- [Microsoft Office Information Disclosure Vulnerability](https://agentprime.io/advisories/CVE-2026-69626.md)
  `CVE-2026-69626` · CVE record: Microsoft Microsoft 365 Apps for Enterprise and 4 more · CVSS 6.5 Medium · Not analysed yet · Published 8 Sept 2026 · Tags: CWE-126
- [Windows Message Queuing Queue Manager Information Disclosure Vulnerability](https://agentprime.io/advisories/CVE-2026-72932.md)
  `CVE-2026-72932` · CVE record: Microsoft Windows 10 Version 1607 and 4 more · CVSS 7.5 High · Not analysed yet · Published 8 Sept 2026 · Tags: CWE-126
- [Windows Encrypting File System (EFS) Information Disclosure Vulnerability](https://agentprime.io/advisories/CVE-2026-69794.md)
  `CVE-2026-69794` · CVE record: Microsoft Windows 10 Version 1607 and 4 more · CVSS 5.5 Medium · Not analysed yet · Published 8 Sept 2026 · Tags: CWE-126
- [Windows Win32k Elevation of Privilege Vulnerability](https://agentprime.io/advisories/CVE-2026-69610.md)
  `CVE-2026-69610` · CVE record: Microsoft Microsoft Office 365 for Mac and 2 more · CVSS 7.0 High · Not analysed yet · Published 8 Sept 2026 · Tags: CWE-126
- [Windows Overlay Filter Information Disclosure Vulnerability](https://agentprime.io/advisories/CVE-2026-69474.md)
  `CVE-2026-69474` · CVE record: Microsoft Windows 10 Version 1607 and 4 more · CVSS 4.8 Medium · Not analysed yet · Published 8 Sept 2026 · Tags: Memory corruption, CWE-126
- [Windows DHCP Server Denial of Service Vulnerability](https://agentprime.io/advisories/CVE-2026-69416.md)
  `CVE-2026-69416` · CVE record: Microsoft Windows 10 Version 1607 and 4 more · CVSS 5.7 Medium · Not analysed yet · Published 8 Sept 2026 · Tags: CWE-126
- [Windows Overlay Filter Information Disclosure Vulnerability](https://agentprime.io/advisories/CVE-2026-69316.md)
  `CVE-2026-69316` · CVE record: Microsoft Windows 10 Version 1607 and 4 more · CVSS 4.7 Medium · Not analysed yet · Published 8 Sept 2026 · Tags: CWE-126
- [Microsoft SQL Server Information Disclosure Vulnerability](https://agentprime.io/advisories/CVE-2026-67393.md)
  `CVE-2026-67393` · CVE record: Microsoft Microsoft SQL Server 2017 (CU 31) and 4 more · CVSS 6.5 Medium · Not analysed yet · Published 8 Sept 2026 · Tags: CWE-126
- [Microsoft SQL Server Information Disclosure Vulnerability](https://agentprime.io/advisories/CVE-2026-67390.md)
  `CVE-2026-67390` · CVE record: Microsoft Microsoft SQL Server 2017 (CU 31) and 4 more · CVSS 6.5 Medium · Not analysed yet · Published 8 Sept 2026 · Tags: CWE-126
- [Microsoft SQL Server Information Disclosure Vulnerability](https://agentprime.io/advisories/CVE-2026-73029.md)
  `CVE-2026-73029` · CVE record: Microsoft Microsoft SQL Server 2019 (CU 32) and 4 more · CVSS 6.5 Medium · Not analysed yet · Published 8 Sept 2026 · Tags: CWE-126
- [Microsoft Office Word Information Disclosure Vulnerability](https://agentprime.io/advisories/CVE-2026-69719.md)
  `CVE-2026-69719` · CVE record: Microsoft Microsoft 365 Apps for Enterprise and 4 more · CVSS 6.5 Medium · Not analysed yet · Published 8 Sept 2026 · Tags: CWE-126
- [Windows Volume Manager Extension Driver Elevation of Privilege Vulnerability](https://agentprime.io/advisories/CVE-2026-69582.md)
  `CVE-2026-69582` · CVE record: Microsoft Windows 10 Version 1607 and 4 more · CVSS 7.8 High · Not analysed yet · Published 8 Sept 2026 · Tags: CWE-126
- [Windows NTFS Remote Code Execution Vulnerability](https://agentprime.io/advisories/CVE-2026-68875.md)
  `CVE-2026-68875` · CVE record: Microsoft Windows 10 Version 1607 and 4 more · CVSS 7.8 High · Not analysed yet · Published 8 Sept 2026 · Tags: CWE-126
- [Windows NTFS Information Disclosure Vulnerability](https://agentprime.io/advisories/CVE-2026-68851.md)
  `CVE-2026-68851` · CVE record: Microsoft Windows 10 Version 1607 and 4 more · CVSS 5.5 Medium · Not analysed yet · Published 8 Sept 2026 · Tags: CWE-126
- [OOBR in rpcap client in libpcap before 1.10.7](https://agentprime.io/advisories/CVE-2026-18238.md)
  `CVE-2026-18238` · CVE record: The Tcpdump Group libpcap · CVSS 5.0 Medium · Not analysed yet · Published 5 Sept 2026 · Tags: CWE-126, CWE-1288
- [One byte overflow read in mail parser](https://agentprime.io/advisories/CVE-2026-84640.md)
  `CVE-2026-84640` · CVE record: Mozilla Thunderbird · CVSS 7.5 High · Not analysed yet · Published 1 Sept 2026 · Tags: CWE-126
- [libvips: Possible heap-based buffer read overflow when resizing and re-encoding a JPEG with gain map](https://agentprime.io/advisories/CVE-2026-70652.md)
  `CVE-2026-70652` · CVE record: libvips libvips · CVSS 2.0 Low · Not analysed yet · Published 20 Aug 2026 · Tags: CWE-126
- [libgit2 - Unauthenticated network-reachable heap out-of-bounds read in transports/smart_pkt.c:set_data](https://agentprime.io/advisories/CVE-2026-53587.md)
  `CVE-2026-53587` · CVE record: libgit2 libgit2 · CVSS 7.5 High · Not analysed yet · Published 20 Aug 2026 · Tags: Memory corruption, CWE-20, CWE-126, CWE-1284
- [Buffer Over-read in Wireshark](https://agentprime.io/advisories/CVE-2026-76885.md)
  `CVE-2026-76885` · CVE record: Wireshark Foundation Wireshark · CVSS 3.1 Low · Not analysed yet · Published 19 Aug 2026 · Tags: CWE-126
- [Buffer Over-read in Wireshark](https://agentprime.io/advisories/CVE-2026-76884.md)
  `CVE-2026-76884` · CVE record: Wireshark Foundation Wireshark · CVSS 3.1 Low · Not analysed yet · Published 19 Aug 2026 · Tags: CWE-126
- [Windows App for Mac Information Disclosure Vulnerability](https://agentprime.io/advisories/CVE-2026-69550.md)
  `CVE-2026-69550` · CVE record: Microsoft Windows App for Mac · CVSS 6.5 Medium · Not analysed yet · Published 19 Aug 2026 · Tags: Memory corruption, CWE-126
- [RS9116W/SiWx917 malformed packet with increased length field causes memory leak](https://agentprime.io/advisories/CVE-2026-65936.md)
  `CVE-2026-65936` · CVE record: silabs.com WiseConnect · CVSS 5.3 Medium · Not analysed yet · Published 13 Aug 2026 · Tags: CWE-126
- [BT122 malformed packet with increased length field causes memory leak](https://agentprime.io/advisories/CVE-2026-65933.md)
  `CVE-2026-65933` · CVE record: silabs.com BT122 · CVSS 5.3 Medium · Not analysed yet · Published 13 Aug 2026 · Tags: CWE-126
- [PostgreSQL ascii() function reads past end of buffer](https://agentprime.io/advisories/CVE-2026-18024.md)
  `CVE-2026-18024` · CVE record: PostgreSQL · CVSS 4.3 Medium · Not analysed yet · Published 13 Aug 2026 · Tags: CWE-126
- [PostgreSQL pg_trgm picksplit reads past end of buffer](https://agentprime.io/advisories/CVE-2026-14678.md)
  `CVE-2026-14678` · CVE record: PostgreSQL · CVSS 4.3 Medium · Not analysed yet · Published 13 Aug 2026 · Tags: CWE-126
- [Windows SMB Client Information Disclosure Vulnerability](https://agentprime.io/advisories/CVE-2026-65794.md)
  `CVE-2026-65794` · CVE record: Microsoft Windows 10 Version 1607 and 4 more · CVSS 6.5 Medium · Not analysed yet · Published 11 Aug 2026 · Tags: CWE-126
- [Microsoft Office Word Remote Code Execution Vulnerability](https://agentprime.io/advisories/CVE-2026-64905.md)
  `CVE-2026-64905` · CVE record: Microsoft Microsoft 365 Apps for Enterprise and 4 more · CVSS 7.8 High · Not analysed yet · Published 11 Aug 2026 · Tags: CWE-126
- [Windows NTFS Information Disclosure Vulnerability](https://agentprime.io/advisories/CVE-2026-62793.md)
  `CVE-2026-62793` · CVE record: Microsoft Windows 10 Version 1607 and 4 more · CVSS 5.5 Medium · Not analysed yet · Published 11 Aug 2026 · Tags: CWE-126
- [Windows Wired AutoConfig Service Information Disclosure Vulnerability](https://agentprime.io/advisories/CVE-2026-62730.md)
  `CVE-2026-62730` · CVE record: Microsoft Windows 10 Version 1607 and 4 more · CVSS 5.5 Medium · Not analysed yet · Published 11 Aug 2026 · Tags: CWE-126
- [Windows Network File System Denial of Service Vulnerability](https://agentprime.io/advisories/CVE-2026-68819.md)
  `CVE-2026-68819` · CVE record: Microsoft Windows 10 Version 1607 and 4 more · CVSS 5.9 Medium · Not analysed yet · Published 11 Aug 2026 · Tags: CWE-126
- [Win32k Information Disclosure Vulnerability](https://agentprime.io/advisories/CVE-2026-62746.md)
  `CVE-2026-62746` · CVE record: Microsoft Windows 10 Version 1607 and 4 more · CVSS 5.5 Medium · Not analysed yet · Published 11 Aug 2026 · Tags: CWE-126
- [Windows NTFS Information Disclosure Vulnerability](https://agentprime.io/advisories/CVE-2026-61350.md)
  `CVE-2026-61350` · CVE record: Microsoft Windows 10 Version 1607 and 4 more · CVSS 4.6 Medium · Not analysed yet · Published 11 Aug 2026 · Tags: CWE-126
- [Windows Event Logging Service Information Disclosure Vulnerability](https://agentprime.io/advisories/CVE-2026-61347.md)
  `CVE-2026-61347` · CVE record: Microsoft Windows 10 Version 1607 and 4 more · CVSS 5.5 Medium · Not analysed yet · Published 11 Aug 2026 · Tags: CWE-126
- [Zoom Clients - Buffer Over-read](https://agentprime.io/advisories/CVE-2026-53414.md)
  `CVE-2026-53414` · CVE record: Zoom Communications Zoom Clients · CVSS 6.5 Medium · Not analysed yet · Published 11 Aug 2026 · Tags: CWE-126
- [Cisco IOS XE Software Web UI Denial of Service Vulnerability](https://agentprime.io/advisories/CVE-2026-20311.md)
  `CVE-2026-20311` · CVE record: Cisco Cisco IOS XE Software · CVSS 6.3 Medium · Not analysed yet · Published 5 Aug 2026 · Tags: CWE-126
- [Buffer Over-read in WLAN Firmware](https://agentprime.io/advisories/CVE-2026-25288.md)
  `CVE-2026-25288` · CVE record: Qualcomm, Inc. Snapdragon · CVSS 7.4 High · Not analysed yet · Published 4 Aug 2026 · Tags: CWE-126
- [Microsoft Edge (Chromium-based) Remote Code Execution Vulnerability](https://agentprime.io/advisories/CVE-2026-66312.md)
  `CVE-2026-66312` · CVE record: Microsoft Microsoft Edge (Chromium-based) · CVSS 6.5 Medium · Not analysed yet · Published 3 Aug 2026 · Tags: CWE-126
- [Apache Thrift: C++ heap out-of-bounds read in THeaderTransport::readHeaderFormat()](https://agentprime.io/advisories/CVE-2026-55970.md)
  `CVE-2026-55970` · CVE record: Apache Software Foundation Apache Thrift · CVSS 6.9 Medium · Not analysed yet · Published 27 Jul 2026 · Tags: CWE-126
- [xrdp: Malformed Confirm Active capability sets cause out-of-bounds reads](https://agentprime.io/advisories/CVE-2026-55238.md)
  `CVE-2026-55238` · CVE record: neutrinolabs xrdp · CVSS 5.3 Medium · Not analysed yet · Published 20 Jul 2026 · Tags: CWE-126
- [ProFTPD mod_sftp Signed Integer Overflow via SCP Size-Record Parser](https://agentprime.io/advisories/CVE-2026-63091.md)
  `CVE-2026-63091` · CVE record: proftpd proftpd · CVSS 7.1 High · Not analysed yet · Published 20 Jul 2026 · Tags: Memory corruption, CWE-126
- [An issue was discovered in cyrus-imapd in Cyrus IMAP through 3.12.2.](https://agentprime.io/advisories/CVE-2026-47088.md)
  `CVE-2026-47088` · CVE record: cyrusimap Cyrus IMAP · CVSS 3.1 Low · Not analysed yet · Published 16 Jul 2026 · Tags: CWE-126
- [TDengine: Authenticated Out-of-Bounds Read in SQL Lexer tGetToken](https://agentprime.io/advisories/CVE-2026-62353.md)
  `CVE-2026-62353` · CVE record: taosdata TDengine · CVSS 5.4 Medium · Not analysed yet · Published 15 Jul 2026 · Tags: Memory corruption, CWE-126
- [Windows Subsystem for Linux (WSL2) Kernel Elevation of Privilege Vulnerability](https://agentprime.io/advisories/CVE-2026-57968.md)
  `CVE-2026-57968` · CVE record: Microsoft Windows Subsystem for Linux (WSL2) · CVSS 7.8 High · Not analysed yet · Published 14 Jul 2026 · Tags: CWE-126
- [Microsoft SQL Server Information Disclosure Vulnerability](https://agentprime.io/advisories/CVE-2026-50468.md)
  `CVE-2026-50468` · CVE record: Microsoft Microsoft SQL Server 2025 (CU 6) and 1 more · CVSS 6.5 Medium · Not analysed yet · Published 14 Jul 2026 · Tags: CWE-126
- [Microsoft Excel Remote Code Execution Vulnerability](https://agentprime.io/advisories/CVE-2026-55036.md)
  `CVE-2026-55036` · CVE record: Microsoft Microsoft 365 Apps for Enterprise and 4 more · CVSS 7.8 High · Not analysed yet · Published 14 Jul 2026 · Tags: CWE-126
- [Windows Remote Desktop Client Information Disclosure Vulnerability](https://agentprime.io/advisories/CVE-2026-50504.md)
  `CVE-2026-50504` · CVE record: Microsoft Windows 10 Version 1607 and 4 more · CVSS 6.5 Medium · Not analysed yet · Published 14 Jul 2026 · Tags: CWE-126
- [Windows Hyper-V Denial of Service Vulnerability](https://agentprime.io/advisories/CVE-2026-50485.md)
  `CVE-2026-50485` · CVE record: Microsoft Windows 10 Version 1607 and 4 more · CVSS 4.5 Medium · Not analysed yet · Published 14 Jul 2026 · Tags: CWE-126
- [Windows Kernel Information Disclosure Vulnerability](https://agentprime.io/advisories/CVE-2026-50475.md)
  `CVE-2026-50475` · CVE record: Microsoft Windows 10 Version 1607 and 4 more · CVSS 5.5 Medium · Not analysed yet · Published 14 Jul 2026 · Tags: CWE-126
- [Windows Overlay Filter Elevation of Privilege Vulnerability](https://agentprime.io/advisories/CVE-2026-50435.md)
  `CVE-2026-50435` · CVE record: Microsoft Windows 10 Version 1607 and 4 more · CVSS 7.8 High · Not analysed yet · Published 14 Jul 2026 · Tags: Memory corruption, CWE-126
- [NTFS Elevation of Privilege Vulnerability](https://agentprime.io/advisories/CVE-2026-50402.md)
  `CVE-2026-50402` · CVE record: Microsoft Windows 10 Version 1607 and 4 more · CVSS 7.8 High · Not analysed yet · Published 14 Jul 2026 · Tags: CWE-126, CWE-681
- [Windows Print Spooler Information Disclosure Vulnerability](https://agentprime.io/advisories/CVE-2026-50383.md)
  `CVE-2026-50383` · CVE record: Microsoft Windows 10 Version 1809 and 4 more · CVSS 6.1 Medium · Not analysed yet · Published 14 Jul 2026 · Tags: CWE-126
- [Windows Remote Desktop Protocol (RDP) Information Disclosure Vulnerability](https://agentprime.io/advisories/CVE-2026-50445.md)
  `CVE-2026-50445` · CVE record: Microsoft Windows 10 Version 1607 and 4 more · CVSS 6.5 Medium · Not analysed yet · Published 14 Jul 2026 · Tags: CWE-126
- [Windows NTFS Information Disclosure Vulnerability](https://agentprime.io/advisories/CVE-2026-50341.md)
  `CVE-2026-50341` · CVE record: Microsoft Windows 10 Version 1607 and 4 more · CVSS 5.5 Medium · Not analysed yet · Published 14 Jul 2026 · Tags: CWE-126
- [Windows Redirected Drive Buffering System Elevation of Privilege Vulnerability](https://agentprime.io/advisories/CVE-2026-50372.md)
  `CVE-2026-50372` · CVE record: Microsoft Windows 10 Version 1607 and 4 more · CVSS 7.0 High · Not analysed yet · Published 14 Jul 2026 · Tags: Memory corruption, CWE-126
- [Fortinet FortiOS: A buffer over-read vulnerability in Fortinet FortiOS 7.6.0 through 7.6.3…](https://agentprime.io/advisories/CVE-2026-59840.md)
  `CVE-2026-59840` · CVE record: Fortinet FortiOS and 3 more · CVSS 4.1 Medium · Not analysed yet · Published 14 Jul 2026 · Tags: CWE-126
- [Fortinet FortiOS: A buffer over-read vulnerability in Fortinet FortiOS 7.6.0 through 7.6.3…](https://agentprime.io/advisories/CVE-2025-43892.md)
  `CVE-2025-43892` · CVE record: Fortinet FortiOS · CVSS 4.1 Medium · Not analysed yet · Published 14 Jul 2026 · Tags: CWE-126

Newest: <https://agentprime.io/advisories/tag/cwe-126.md>
Older: <https://agentprime.io/advisories/tag/cwe-126.md?cursor=WyIyMDI2LTA3LTE0VDE1OjE5OjUxLjA4MDAwMFoiLCJDVkUtMjAyNS00Mzg5MiJd>

## Filters and formats

Filters are query parameters on this URL: `q` (words, as in a web search engine: `"a phrase"`, `OR`, `-word`; an id; a package or product name), `severity` (low, medium, high or critical), `critical=1`, `kev=1`, `ecosystem` (npm, pypi, packagist, go, maven, rubygems, crates, nuget, hex), `kind=package`, `assigner` (a CNA’s short name), `min_score` and `state`. Each record’s title links to its Markdown page.

- The same list as JSON: <https://api.agentprime.io/v1/advisories?tag=cwe-126&cursor=WyIyMDI2LTA5LTA4VDE3OjE5OjE0LjI0ODAwMFoiLCJDVkUtMjAyNi04Mzk0OSJd>
- Every list: <https://agentprime.io/advisories.md>, critical: <https://agentprime.io/advisories/critical.md>; by weakness: <https://agentprime.io/advisories/tag/sql-injection.md> and the other tags in <https://agentprime.io/llms.txt>; by technology: `/advisories/technology/<slug>.md` (`fortinet-fortimail`)

---

The web page: <https://agentprime.io/advisories/tag/cwe-126/?cursor=WyIyMDI2LTA5LTA4VDE3OjE5OjE0LjI0ODAwMFoiLCJDVkUtMjAyNi04Mzk0OSJd>. Everything for agents: <https://agentprime.io/llms.txt>.