Advisories · Weakness

CWE-126.

Every Advisory and CVE whose sources give the weakness CWE-126, newest first.

CVE-2026-83951 CVE record

CVSS 5.5 Medium

Microsoft Office Word Information Disclosure Vulnerability
- Microsoft 365 Apps for Enterprise
- Microsoft Office 2019
- CWE-126
Not analysed yet 8 Sept 2026
CVE-2026-81399 CVE record

CVSS 5.5 Medium

Microsoft Excel Information Disclosure Vulnerability
- Microsoft 365 Apps for Enterprise
- Microsoft Excel 2016
- CWE-126
Not analysed yet 8 Sept 2026
CVE-2026-78516 CVE record

CVSS 4.3 Medium

Windows Storage Information Disclosure Vulnerability
- Microsoft Windows 10 Version 1607
- Microsoft Windows 10 Version 1809
- CWE-126
Not analysed yet 8 Sept 2026
CVE-2026-72974 CVE record

CVSS 6.5 Medium

Microsoft Office Excel Information Disclosure Vulnerability
- Microsoft 365 Apps for Enterprise
- Microsoft Office 2016
- CWE-126
Not analysed yet 8 Sept 2026
CVE-2026-69626 CVE record

CVSS 6.5 Medium

Microsoft Office Information Disclosure Vulnerability
- Microsoft 365 Apps for Enterprise
- Microsoft Office 2016
- CWE-126
Not analysed yet 8 Sept 2026
CVE-2026-72932 CVE record

CVSS 7.5 High

Windows Message Queuing Queue Manager Information Disclosure Vulnerability
- Microsoft Windows 10 Version 1607
- Microsoft Windows 10 Version 1809
- CWE-126
Not analysed yet 8 Sept 2026
CVE-2026-69794 CVE record

CVSS 5.5 Medium

Windows Encrypting File System (EFS) Information Disclosure Vulnerability
- Microsoft Windows 10 Version 1607
- Microsoft Windows 10 Version 1809
- CWE-126
Not analysed yet 8 Sept 2026
CVE-2026-69610 CVE record

CVSS 7.0 High

Windows Win32k Elevation of Privilege Vulnerability
- Microsoft Office 365 for Mac
- Microsoft Office LTSC for Mac 2021
- CWE-126
Not analysed yet 8 Sept 2026
CVE-2026-69474 CVE record

CVSS 4.8 Medium

Windows Overlay Filter Information Disclosure Vulnerability
- Microsoft Windows 10 Version 1607
- Microsoft Windows 10 Version 1809
- Memory corruption
- CWE-126
Not analysed yet 8 Sept 2026
CVE-2026-69416 CVE record

CVSS 5.7 Medium

Windows DHCP Server Denial of Service Vulnerability
- Microsoft Windows 10 Version 1607
- Microsoft Windows 10 Version 1809
- CWE-126
Not analysed yet 8 Sept 2026
CVE-2026-69316 CVE record

CVSS 4.7 Medium

Windows Overlay Filter Information Disclosure Vulnerability
- Microsoft Windows 10 Version 1607
- Microsoft Windows 10 Version 1809
- CWE-126
Not analysed yet 8 Sept 2026
CVE-2026-67393 CVE record

CVSS 6.5 Medium

Microsoft SQL Server Information Disclosure Vulnerability
- Microsoft SQL Server 2017 (CU 31)
- Microsoft SQL Server 2017 (GDR)
- CWE-126
Not analysed yet 8 Sept 2026
CVE-2026-67390 CVE record

CVSS 6.5 Medium

Microsoft SQL Server Information Disclosure Vulnerability
- Microsoft SQL Server 2017 (CU 31)
- Microsoft SQL Server 2017 (GDR)
- CWE-126
Not analysed yet 8 Sept 2026
CVE-2026-73029 CVE record

CVSS 6.5 Medium

Microsoft SQL Server Information Disclosure Vulnerability
- Microsoft SQL Server 2019 (CU 32)
- Microsoft SQL Server 2019 (GDR)
- CWE-126
Not analysed yet 8 Sept 2026
CVE-2026-69719 CVE record

CVSS 6.5 Medium

Microsoft Office Word Information Disclosure Vulnerability
- Microsoft 365 Apps for Enterprise
- Microsoft Office 2019
- CWE-126
Not analysed yet 8 Sept 2026
CVE-2026-69582 CVE record

CVSS 7.8 High

Windows Volume Manager Extension Driver Elevation of Privilege Vulnerability
- Microsoft Windows 10 Version 1607
- Microsoft Windows 10 Version 1809
- CWE-126
Not analysed yet 8 Sept 2026
CVE-2026-68875 CVE record

CVSS 7.8 High

Windows NTFS Remote Code Execution Vulnerability
- Microsoft Windows 10 Version 1607
- Microsoft Windows 10 Version 1809
- CWE-126
Not analysed yet 8 Sept 2026
CVE-2026-68851 CVE record

CVSS 5.5 Medium

Windows NTFS Information Disclosure Vulnerability
- Microsoft Windows 10 Version 1607
- Microsoft Windows 10 Version 1809
- CWE-126
Not analysed yet 8 Sept 2026
CVE-2026-18238 CVE record

CVSS 5.0 Medium

OOBR in rpcap client in libpcap before 1.10.7
- The Tcpdump Group libpcap
- CWE-126
- CWE-1288
Not analysed yet 5 Sept 2026
CVE-2026-84640 CVE record

CVSS 7.5 High

One byte overflow read in mail parser
- Mozilla Thunderbird
- CWE-126
Not analysed yet 1 Sept 2026
CVE-2026-70652 CVE record

CVSS 2.0 Low

libvips: Possible heap-based buffer read overflow when resizing and re-encoding a JPEG with gain map
- libvips
- CWE-126
Not analysed yet 20 Aug 2026
CVE-2026-53587 CVE record

CVSS 7.5 High

libgit2 - Unauthenticated network-reachable heap out-of-bounds read in transports/smart_pkt.c:set_data
- libgit2
- Memory corruption
- CWE-20
Not analysed yet 20 Aug 2026
CVE-2026-76885 CVE record

CVSS 3.1 Low

Buffer Over-read in Wireshark
- Wireshark
- CWE-126
Not analysed yet 19 Aug 2026
CVE-2026-76884 CVE record

CVSS 3.1 Low

Buffer Over-read in Wireshark
- Wireshark
- CWE-126
Not analysed yet 19 Aug 2026
CVE-2026-69550 CVE record

CVSS 6.5 Medium

Windows App for Mac Information Disclosure Vulnerability
- Microsoft Windows App for Mac
- Memory corruption
- CWE-126
Not analysed yet 19 Aug 2026
CVE-2026-65936 CVE record

CVSS 5.3 Medium

RS9116W/SiWx917 malformed packet with increased length field causes memory leak
- silabs.com WiseConnect
- CWE-126
Not analysed yet 13 Aug 2026
CVE-2026-65933 CVE record

CVSS 5.3 Medium

BT122 malformed packet with increased length field causes memory leak
- silabs.com BT122
- CWE-126
Not analysed yet 13 Aug 2026
CVE-2026-18024 CVE record

CVSS 4.3 Medium

PostgreSQL ascii() function reads past end of buffer
- PostgreSQL
- CWE-126
Not analysed yet 13 Aug 2026
CVE-2026-14678 CVE record

CVSS 4.3 Medium

PostgreSQL pg_trgm picksplit reads past end of buffer
- PostgreSQL
- CWE-126
Not analysed yet 13 Aug 2026
CVE-2026-65794 CVE record

CVSS 6.5 Medium

Windows SMB Client Information Disclosure Vulnerability
- Microsoft Windows 10 Version 1607
- Microsoft Windows 10 Version 1809
- CWE-126
Not analysed yet 11 Aug 2026
CVE-2026-64905 CVE record

CVSS 7.8 High

Microsoft Office Word Remote Code Execution Vulnerability
- Microsoft 365 Apps for Enterprise
- Microsoft Office 2019
- CWE-126
Not analysed yet 11 Aug 2026
CVE-2026-62793 CVE record

CVSS 5.5 Medium

Windows NTFS Information Disclosure Vulnerability
- Microsoft Windows 10 Version 1607
- Microsoft Windows 10 Version 1809
- CWE-126
Not analysed yet 11 Aug 2026
CVE-2026-62730 CVE record

CVSS 5.5 Medium

Windows Wired AutoConfig Service Information Disclosure Vulnerability
- Microsoft Windows 10 Version 1607
- Microsoft Windows 10 Version 1809
- CWE-126
Not analysed yet 11 Aug 2026
CVE-2026-68819 CVE record

CVSS 5.9 Medium

Windows Network File System Denial of Service Vulnerability
- Microsoft Windows 10 Version 1607
- Microsoft Windows 10 Version 1809
- CWE-126
Not analysed yet 11 Aug 2026
CVE-2026-62746 CVE record

CVSS 5.5 Medium

Win32k Information Disclosure Vulnerability
- Microsoft Windows 10 Version 1607
- Microsoft Windows 10 Version 1809
- CWE-126
Not analysed yet 11 Aug 2026
CVE-2026-61350 CVE record

CVSS 4.6 Medium

Windows NTFS Information Disclosure Vulnerability
- Microsoft Windows 10 Version 1607
- Microsoft Windows 10 Version 1809
- CWE-126
Not analysed yet 11 Aug 2026
CVE-2026-61347 CVE record

CVSS 5.5 Medium

Windows Event Logging Service Information Disclosure Vulnerability
- Microsoft Windows 10 Version 1607
- Microsoft Windows 10 Version 1809
- CWE-126
Not analysed yet 11 Aug 2026
CVE-2026-53414 CVE record

CVSS 6.5 Medium

Zoom Clients - Buffer Over-read
- Zoom Communications Zoom Clients
- CWE-126
Not analysed yet 11 Aug 2026
CVE-2026-20311 CVE record

CVSS 6.3 Medium

Cisco IOS XE Software Web UI Denial of Service Vulnerability
- Cisco IOS XE Software
- CWE-126
Not analysed yet 5 Aug 2026
CVE-2026-25288 CVE record

CVSS 7.4 High

Buffer Over-read in WLAN Firmware
- Qualcomm, Inc. Snapdragon
- CWE-126
Not analysed yet 4 Aug 2026
CVE-2026-66312 CVE record

CVSS 6.5 Medium

Microsoft Edge (Chromium-based) Remote Code Execution Vulnerability
- Microsoft Edge (Chromium-based)
- CWE-126
Not analysed yet 3 Aug 2026
CVE-2026-55970 CVE record

CVSS 6.9 Medium

Apache Thrift: C++ heap out-of-bounds read in THeaderTransport::readHeaderFormat()
- Apache Software Foundation Apache Thrift
- CWE-126
Not analysed yet 27 Jul 2026
CVE-2026-55238 CVE record

CVSS 5.3 Medium

xrdp: Malformed Confirm Active capability sets cause out-of-bounds reads
- neutrinolabs xrdp
- CWE-126
Not analysed yet 20 Jul 2026
CVE-2026-63091 CVE record

CVSS 7.1 High

ProFTPD mod_sftp Signed Integer Overflow via SCP Size-Record Parser
- proftpd
- Memory corruption
- CWE-126
Not analysed yet 20 Jul 2026
CVE-2026-47088 CVE record

CVSS 3.1 Low

An issue was discovered in cyrus-imapd in Cyrus IMAP through 3.12.2.
- cyrusimap Cyrus IMAP
- CWE-126
Not analysed yet 16 Jul 2026
CVE-2026-62353 CVE record

CVSS 5.4 Medium

TDengine: Authenticated Out-of-Bounds Read in SQL Lexer tGetToken
- taosdata TDengine
- Memory corruption
- CWE-126
Not analysed yet 15 Jul 2026
CVE-2026-57968 CVE record

CVSS 7.8 High

Windows Subsystem for Linux (WSL2) Kernel Elevation of Privilege Vulnerability
- Microsoft Windows Subsystem for Linux (WSL2)
- CWE-126
Not analysed yet 14 Jul 2026
CVE-2026-50468 CVE record

CVSS 6.5 Medium

Microsoft SQL Server Information Disclosure Vulnerability
- Microsoft SQL Server 2025 (CU 6)
- Microsoft SQL Server 2025 for x64-based Systems (GDR)
- CWE-126
Not analysed yet 14 Jul 2026
CVE-2026-55036 CVE record

CVSS 7.8 High

Microsoft Excel Remote Code Execution Vulnerability
- Microsoft 365 Apps for Enterprise
- Microsoft Excel 2016
- CWE-126
Not analysed yet 14 Jul 2026
CVE-2026-50504 CVE record

CVSS 6.5 Medium

Windows Remote Desktop Client Information Disclosure Vulnerability
- Microsoft Windows 10 Version 1607
- Microsoft Windows 10 Version 1809
- CWE-126
Not analysed yet 14 Jul 2026
CVE-2026-50485 CVE record

CVSS 4.5 Medium

Windows Hyper-V Denial of Service Vulnerability
- Microsoft Windows 10 Version 1607
- Microsoft Windows 10 Version 1809
- CWE-126
Not analysed yet 14 Jul 2026
CVE-2026-50475 CVE record

CVSS 5.5 Medium

Windows Kernel Information Disclosure Vulnerability
- Microsoft Windows 10 Version 1607
- Microsoft Windows 10 Version 1809
- CWE-126
Not analysed yet 14 Jul 2026
CVE-2026-50435 CVE record

CVSS 7.8 High

Windows Overlay Filter Elevation of Privilege Vulnerability
- Microsoft Windows 10 Version 1607
- Microsoft Windows 10 Version 1809
- Memory corruption
- CWE-126
Not analysed yet 14 Jul 2026
CVE-2026-50402 CVE record

CVSS 7.8 High

NTFS Elevation of Privilege Vulnerability
- Microsoft Windows 10 Version 1607
- Microsoft Windows 10 Version 1809
- CWE-126
- CWE-681
Not analysed yet 14 Jul 2026
CVE-2026-50383 CVE record

CVSS 6.1 Medium

Windows Print Spooler Information Disclosure Vulnerability
- Microsoft Windows 10 Version 1809
- Microsoft Windows 10 Version 21H2
- CWE-126
Not analysed yet 14 Jul 2026
CVE-2026-50445 CVE record

CVSS 6.5 Medium

Windows Remote Desktop Protocol (RDP) Information Disclosure Vulnerability
- Microsoft Windows 10 Version 1607
- Microsoft Windows 10 Version 1809
- CWE-126
Not analysed yet 14 Jul 2026
CVE-2026-50341 CVE record

CVSS 5.5 Medium

Windows NTFS Information Disclosure Vulnerability
- Microsoft Windows 10 Version 1607
- Microsoft Windows 10 Version 1809
- CWE-126
Not analysed yet 14 Jul 2026
CVE-2026-50372 CVE record

CVSS 7.0 High

Windows Redirected Drive Buffering System Elevation of Privilege Vulnerability
- Microsoft Windows 10 Version 1607
- Microsoft Windows 10 Version 1809
- Memory corruption
- CWE-126
Not analysed yet 14 Jul 2026
CVE-2026-59840 CVE record

CVSS 4.1 Medium

Fortinet FortiOS: A buffer over-read vulnerability in Fortinet FortiOS 7.6.0 through 7.6.3…
- Fortinet FortiOS
- Fortinet FortiPAM
- CWE-126
Not analysed yet 14 Jul 2026
CVE-2025-43892 CVE record

CVSS 4.1 Medium

Fortinet FortiOS: A buffer over-read vulnerability in Fortinet FortiOS 7.6.0 through 7.6.3…
- Fortinet FortiOS
- CWE-126
Not analysed yet 14 Jul 2026