CWE-126 vulnerabilities

Buffer over-read in SQL Server allows an unauthorized attacker to disclose information over a network.

Buffer over-read in SQL Server allows an authorized attacker to disclose information over a network.

Buffer over-read in Microsoft Windows Search Component allows an authorized attacker to elevate privileges locally.

Buffer over-read in Windows Kernel allows an authorized attacker to disclose information locally.

Buffer over-read in Windows COM+ Event System Service allows an authorized attacker to disclose information locally.

Buffer over-read in Microsoft Office Excel allows an unauthorized attacker to disclose information over a network.

Buffer over-read in Microsoft Office Word allows an unauthorized attacker to disclose information over a network.

Buffer over-read in Microsoft Office allows an unauthorized attacker to disclose information over a network.

Buffer over-read in Microsoft Office allows an unauthorized attacker to disclose information over a network.

Buffer over-read in Windows Message Queuing allows an unauthorized attacker to deny service over a network.

Buffer over-read in Windows Shell allows an authorized attacker to disclose information locally.

Buffer over-read in Windows Management Instrumentation allows an authorized attacker to disclose information locally.

Buffer over-read in Microsoft Windows SCSI Class System File allows an authorized attacker to disclose information locally.

Buffer over-read in Windows USB Video Driver allows an authorized attacker to elevate privileges locally.

Buffer over-read in Windows Active Directory Certificate Services allows an authorized attacker to disclose information over a network.

Buffer over-read in Windows Performance Counters allows an authorized attacker to disclose information locally.

Buffer over-read in Windows iSCSI Target Service allows an unauthorized attacker to disclose information over a network.

Buffer over-read in Windows Raw Image Extension allows an unauthorized attacker to disclose information locally.

A buffer overread in CheckKeySyms() in X.Org X Server before 21.1.25 and XWayland before 24.1.14 could be used by authenticated X clients to leak small amounts of information from X server memory or potentially crash the X server.

CVE-2026-57185 is a buffer over-read vulnerability in the PJSIP MWI body parser of Asterisk, an open source telephony toolkit. An authenticated attacker can cause a crash by sending a crafted SIP NOTIFY request. Authentication can be via username/password or source IP address matching. The issue affects multiple versions of Asterisk prior to fixed releases. The vulnerability has a medium severity with a CVSS score of 6.5 and is fixed in several recent versions.