CWE-170

66 published CVEs are weaknesses of this kind, as the records or NVD name it.

Critical 12High 22Medium 23Low 9Not scored 0

CVEs per yearBy the year they were published

CVE-2026-121943
Irontec sngrep through 1.9.0 Out-of-Bounds Stack Read via sip_check_packet
irontec · sngrep
Medium6.3
CVE-2026-57185
Asterisk: Buffer over-read in Asterisk PJSIP MWI body parser
asterisk · asterisk
Medium6.5
CVE-2026-114457
Mod_qos: missing nul termination in json value escaping permits out-of-bounds reads
pbuchbinder · mod_qos
Low3.7
CVE-2026-96850
Windows Modern Device Management (MDM) Information Disclosure Vulnerability
Microsoft · Windows 10 Version 1809
Medium5.5
CVE-2026-83781
Windows Program Compatibility Assistant Service Elevation of Privilege Vulnerability
Microsoft · Windows 11 version 23H2
High7.8
CVE-2026-96860
Windows USB Print Driver Information Disclosure Vulnerability
Microsoft · Windows 10 Version 1607
Medium5.5
CVE-2026-81882
radare2: Missing string termination causes heap out-of-bounds read in radare2 bplist parser
radareorg · radare2
Low3.3
CVE-2026-73324
VLC media player 3.0.0 through 3.0.23 information disclosure vulnerability
VideoLAN · VLC media player
Medium5.3
CVE-2026-78506
Microsoft Office Word Information Disclosure Vulnerability
Microsoft · Microsoft 365 Apps for Enterprise
Medium5.5
CVE-2026-70587
Windows Remote Desktop Protocol Information Disclosure Vulnerability
Microsoft · Windows 10 Version 1607
High7.5