By weakness (CWE)

CWE-126: related vulnerabilities

CVEs classified under CWE-126. Understanding the weakness class helps prioritize systemic fixes over one-off patches.

13 published vulnerabilities

• CVE-2026-21379HIGH 7.8

  CVE-2026-21379 is a memory corruption vulnerability affecting Qualcomm wireless and compute platforms. The flaw occurs when the system attempts to allocate memory with sizes exceeding safe limits, potentially allowing a local attacker with basic user privileges to compromise system confidentiality, integrity, and availability. While exploitation requires local access and standard user rights, the impact scope is significant—an attacker can read sensitive data, modify system state, or crash the device.

• CVE-2026-42828HIGH 7.8

  A flaw in Windows' Projected File System Filter Driver can allow an authorized user to gain elevated privileges on a local machine. The vulnerability stems from the driver reading beyond intended buffer boundaries, which an attacker with standard user permissions can exploit to escalate to higher privilege levels. This is a local-only issue—an attacker must already have login access to the system.

• CVE-2026-41992HIGH 7.5

  GNU gzip contains a buffer overflow vulnerability in how it handles compressed files using the LZH format. The flaw arises because gzip reuses the same memory structures across different compression formats (LZ77, LZW, and LZH) without resetting them between files. An attacker can craft two specially designed compressed files—a LZW file followed by an LZH file—and have both decompressed in a single command. The first file poisons the shared memory with invalid data, causing the second file's decompression to read beyond allocated memory boundaries. This can leak sensitive information from the server or process memory.

• CVE-2026-44185HIGH 7.3

  Apache HTTP Server contains a buffer over-read vulnerability triggered when the server makes outbound OCSP (Online Certificate Status Protocol) requests to an attacker-controlled server. An attacker can craft a malicious OCSP response that causes the HTTP Server to read beyond allocated memory boundaries, potentially exposing sensitive data or causing service disruption. All versions from 2.4.0 through 2.4.67 are affected; upgrading to version 2.4.68 resolves the issue.

• CVE-2026-58010MEDIUM 6.5

  A flaw in GLib's variant serialization code contains an off-by-one error in boundary checking that allows reading one byte beyond intended memory limits. This can leak a small amount of sensitive data or crash applications when the out-of-bounds access crosses memory page boundaries. The vulnerability affects GLib across multiple Linux distributions and requires network access to exploit in most deployment scenarios.

• CVE-2026-58012MEDIUM 6.5

  GLib contains a buffer over-read vulnerability in its regex replacement function that occurs when specific compilation flags and string handling options interact. When the `g_regex_replace` function processes matched text with the `G_REGEX_RAW` flag enabled and case-change escape sequences, it attempts to interpret raw byte data as valid UTF-8, leading to reading beyond allocated buffer boundaries. The vulnerability can leak a small amount of adjacent memory and trigger application crashes if the overread crosses memory page boundaries, making it a moderate risk to availability and confidentiality.

• CVE-2026-58013MEDIUM 6.5

  GLib contains a buffer over-read vulnerability in its I/O channel line-reading function. When an application uses a custom line terminator longer than one character, the vulnerable code reads beyond the intended buffer boundary. This can leak a small amount of memory or crash the application if the read extends into unmapped memory. The issue is triggered when parsing input with unusual line terminators, which may or may not be common in typical deployments.

• CVE-2026-50813MEDIUM 6.1

  SQLite's Session Extension contains a vulnerability in how it merges changeset and changegroup data, allowing local attackers to read sensitive information from the database. The flaw affects versions before Fossil check-in 869a51ae84df and requires user interaction to trigger. While the vulnerability does not enable data modification or direct service disruption, the information disclosure risk is paired with a high availability impact potential, making it a moderate-severity issue requiring attention in environments where SQLite handles sensitive data.

• CVE-2025-59609MEDIUM 5.5

  CVE-2025-59609 is a medium-severity information disclosure vulnerability affecting multiple Qualcomm wireless and audio chipset products. The flaw occurs when devices process Wi-Fi advertisement frames containing malformed MBSSID (Multiple BSSID) elements that are shorter than expected. An attacker with network proximity and valid credentials can craft these frames to trigger uninitialized memory access, potentially exposing sensitive data. The attack requires user interaction and specific network conditions to succeed, limiting its practical exploitability but still warranting prompt patching given the breadth of affected components.

• CVE-2026-11787MEDIUM 5.0

  A vulnerability in Red Hat's 389 Directory Server allows a memory reading flaw when processing LDAP search filters. The issue occurs when the server parses certain filter strings, causing it to read data from memory locations it shouldn't access. This could potentially be exploited by an authenticated user to leak small amounts of sensitive information or disrupt normal filter processing. The vulnerability requires authentication and specific conditions to exploit, making it a moderate-risk issue that warrants patching but not immediate panic.

• CVE-2026-45684MEDIUM 4.9

  OpenTelemetry eBPF Instrumentation versions 0.7.0 through 0.8.x contain a buffer handling flaw in the log enricher component. When log injection is enabled, attackers can craft a multi-segment write operation that tricks the instrumentation into reading beyond the intended buffer boundary, potentially overwriting memory. This could lead to information disclosure, data corruption, or application instability on systems using the affected versions.

• CVE-2026-40210MEDIUM 4.8

  CVE-2026-40210 is a medium-severity vulnerability affecting the SetMacAddrAction function. When this action is invoked, a flaw in memory boundary checking can allow the software to read beyond allocated memory, potentially exposing uninitialized data that may be transmitted over the network or causing the application to crash. The vulnerability requires specific conditions to exploit but does not demand special privileges or user interaction.

• CVE-2026-45460MEDIUM 4.7

  A buffer over-read vulnerability in Microsoft Office could allow an attacker to read sensitive information from a user's computer. The attacker would need to trick a user into opening a specially crafted Office document, but once triggered, the flaw could expose data in memory that shouldn't be accessible. This is a local-only issue affecting the person using the Office application, not a remote attack vector.