Falhas do tipo CWE-126

526 resultados

Leitura além dos limites do buffer em pilha

A aplicação lê dados além do tamanho alocado de um buffer armazenado na pilha (stack), acessando memória que não deveria. Diferente do overflow que escreve, aqui o problema é ler lixo de memória adjacente, expondo informações sensíveis ou causando crash se a memória for inacessível.

Exemplo

Uma função copia uma string para um buffer de 16 bytes, mas depois tenta processar 32 bytes do buffer sem validar o tamanho real. O código lê dados da pilha que pertencem a outras variáveis ou endereços de retorno, vazando informações ou provocando segfault.

Como mitigar

Sempre validar o tamanho dos dados antes de ler; usar funções seguras (strlen, strnlen) com limites explícitos; ativar canários de pilha (stack canaries) no compilador para detectar corrupção; fazer code review focado em loops e operações de memória sem bounds checking.

CVE-2026-67390MEDIUMMicrosoft SQL Server Information Disclosure VulnerabilityEPSS 1.0%CVE-2026-50504MEDIUMWindows Remote Desktop Client Information Disclosure VulnerabilityEPSS 0.9%CVE-2026-50445MEDIUMWindows Remote Desktop Protocol (RDP) Information Disclosure VulnerabilityEPSS 0.9%CVE-2026-72974MEDIUMMicrosoft Office Excel Information Disclosure VulnerabilityEPSS 0.9%CVE-2026-26155MEDIUMMicrosoft Local Security Authority Subsystem Service Information Disclosure VulnerabilityEPSS 0.9%CVE-2026-69719MEDIUMMicrosoft Office Word Information Disclosure VulnerabilityEPSS 0.9%CVE-2026-69626MEDIUMMicrosoft Office Information Disclosure VulnerabilityEPSS 0.9%CVE-2024-38261HIGHWindows Routing and Remote Access Service (RRAS) Remote Code Execution VulnerabilityEPSS 0.9%CVE-2022-1987LOWBuffer Over-read in bfabiszewski/libmobiEPSS 0.8%CVE-2024-26176HIGHWindows Kernel Elevation of Privilege VulnerabilityEPSS 0.8%CVE-2023-39540MEDIUMA denial of service vulnerability exists in the ICMP and ICMPv6 parsing functionality of Weston Embedded uC-TCP-IP v3.06.01. A specially craEPSS 0.8%CVE-2023-39541MEDIUMA denial of service vulnerability exists in the ICMP and ICMPv6 parsing functionality of Weston Embedded uC-TCP-IP v3.06.01. A specially craEPSS 0.8%CVE-2025-47295LOWA buffer over-read in Fortinet FortiOS versions 7.4.0 through 7.4.3, versions 7.2.0 through 7.2.7, and versions 7.0.0 through 7.0.14 may allEPSS 0.8%CVE-2025-36855HIGHEOL .NET 6.0 Runtime Remote Code Execution VulnerabilityEPSS 0.8%CVE-2024-49031HIGHMicrosoft Office Graphics Remote Code Execution VulnerabilityEPSS 0.8%CVE-2024-28902MEDIUMWindows Remote Access Connection Manager Information Disclosure VulnerabilityEPSS 0.8%CVE-2024-26255MEDIUMWindows Remote Access Connection Manager Information Disclosure VulnerabilityEPSS 0.8%CVE-2024-21340MEDIUMWindows Kernel Information Disclosure VulnerabilityEPSS 0.8%CVE-2026-73029MEDIUMMicrosoft SQL Server Information Disclosure VulnerabilityEPSS 0.7%CVE-2026-44185HIGHApache HTTP Server: Stack Buffer Over-Read in mod_ssl OCSP `send_request`EPSS 0.7%