CWE-126 vulnerabilities

Buffer over-read in Windows Message Queuing Queue Manager allows an unauthorized attacker to disclose information over a network.

Buffer over-read in Windows Encrypting File System (EFS) allows an authorized attacker to disclose information locally.

Buffer over-read in Windows Win32K allows an authorized attacker to elevate privileges locally.

Use after free in Windows Overlay Filter allows an authorized attacker to disclose information over a network.

Buffer over-read in Windows DHCP Server allows an authorized attacker to deny service over an adjacent network.

Buffer over-read in Windows Overlay Filter allows an authorized attacker to disclose information locally.

Buffer over-read in SQL Server allows an authorized attacker to disclose information over a network.

Buffer over-read in SQL Server allows an authorized attacker to disclose information over a network.

Buffer over-read in SQL Server allows an authorized attacker to disclose information over a network.

Buffer over-read in Microsoft Office Word allows an unauthorized attacker to disclose information over a network.

Buffer over-read in Windows Volume Manager Extension Driver allows an authorized attacker to elevate privileges locally.

Buffer over-read in Windows NTFS allows an authorized attacker to execute code locally.

Buffer over-read in Windows NTFS allows an authorized attacker to disclose information locally.

CVE-2026-18238 is a medium severity vulnerability in the libpcap library used by The Tcpdump Group. The rpcap client code improperly validates headers in RPCAP_MSG_PACKET messages from the server. This flaw allows a malicious server to cause the client to treat up to 20 bytes of memory beyond the buffer as part of the captured packet, potentially exposing sensitive memory contents.

A buffer over-read vulnerability exists in libvips versions prior to 8.18.3 when built with libultrahdr support. The issue occurs in the function vips_foreign_save_uhdr_set_raw_hdr during processing of very large JPEG images with gain map encoding, leading to an undersized output buffer allocation. This can cause heap buffer over-read, potentially disclosing adjacent memory data or causing a crash. The vulnerability is fixed in libvips version 8.18.3.

CVE-2026-53587 is a high-severity vulnerability in libgit2 prior to versions 1.8.6 and 1.9.5. It involves improper input validation in the smart-protocol pkt-line capability buffer, leading to a heap out-of-bounds read that can crash clients during the first refs-advertisement packet over various Git protocols. The issue is fixed in libgit2 versions 1.8.6 and 1.9.5.

CVE-2026-76884 is a medium severity vulnerability in Wireshark affecting versions 4.4.0 through 4.4.18 and 4.6.0 through 4.6.7. It involves a buffer over-read in the ERF file parser that can cause the application to crash, resulting in a denial of service condition.

A buffer over-read vulnerability (CWE-126) exists in the Tektronix K12xx file parser of Wireshark versions 4.4.0 through 4.4.18 and 4.6.0 through 4.6.7. This flaw can cause the application to crash, resulting in a denial of service condition. The vulnerability has a medium severity with a CVSS score of 3.1, requiring network access with high attack complexity and user interaction.

Out-of-bounds read in Remote Desktop Client allows an unauthorized attacker to disclose information over a network.

Buffer over-read in PostgreSQL pg_trgm index picksplit function reads past end of a heap buffer. This might allow a table maintainer to infer limited memory values, via the lossy signal of index split choices. Versions before PostgreSQL 18.6, 17.11, 16.15, 15.19, and 14.24 are affected.