KEV 2026.09.231,721 entries+8 in 7d8 open federal deadlinesas of / search ? keys
Telemetry

Weakness / #25

CWE-125: Out-of-bounds read in CISA KEV

Out-of-bounds Read

Catalog
2026.09.23
Rank
#25 of 185
MITRE
CWE-125 definition

Answer 17 KEV entries list CWE-125 (Out-of-bounds read) as of catalog 2026.09.23, 1% of the catalog and rank 25 of 185 weaknesses. The most affected vendor is Google (4).

KEV entries
171% of catalog
Vendors
9affected
Ransomware: known
15.9%
First added
2022-03-03
Latest added
2026-06-09

VVendors

Vendors with CWE-125 KEV entries
VendorEntriesShare
Google423.5%
Apple423.5%
Microsoft211.8%
Citrix211.8%
Linux15.9%
VMware15.9%
Samsung15.9%
OpenSSL15.9%
Treck TCP/IP stack15.9%

TAdditions by year

CWE-125 KEV additions per yearColumn chart of KEV additions per calendar year. 2021: 0; 2022: 6; 2023: 3; 2024: 0; 2025: 5; 2026: 3.02462021: 0 added20212022: 6 added620222023: 3 added320232024: 0 added20242025: 5 added520252026: 3 added (year to date)32026
CWE-125 KEV additions by year
YearAdded
20210
20226
20233
20240
20255
20263

PProducts

Products with CWE-125 KEV entries
ProductEntriesShare
Google Chromium V8423.5%
Microsoft Windows211.8%
Apple Multiple Products211.8%
Apple macOS211.8%
Citrix NetScaler15.9%
Citrix NetScaler ADC and Gateway15.9%
Linux Kernel15.9%
VMware ESXi, Workstation, and Fusion15.9%

EAll entries

KEV entries listing CWE-125
CVEVendorProductAddedRansomware
CVE-2026-11645GoogleChromium V8Unknown
CVE-2023-36424MicrosoftWindowsUnknown
CVE-2026-3055CitrixNetScalerUnknown
CVE-2025-5777CitrixNetScaler ADC and GatewayKnown
CVE-2025-5419GoogleChromium V8Unknown
CVE-2024-53150LinuxKernelUnknown
CVE-2025-24991MicrosoftWindowsUnknown
CVE-2025-22226VMwareESXi, Workstation, and FusionUnknown
CVE-2023-42916AppleMultiple ProductsUnknown
CVE-2021-25487SamsungMobile DevicesUnknown
CVE-2023-28204AppleMultiple ProductsUnknown
CVE-2017-5030GoogleChromium V8Unknown
CVE-2016-5198GoogleChromium V8Unknown
CVE-2014-0160OpenSSLOpenSSLUnknown
CVE-2022-22675ApplemacOSUnknown
CVE-2022-22674ApplemacOSUnknown
CVE-2020-11899Treck TCP/IP stackIPv6Unknown

Cite this

17 CISA KEV entries list CWE-125 (Out-of-bounds read), 1% of the catalog. Source: Telemetry analysis of the CISA Known Exploited Vulnerabilities catalog, version 2026.09.23 (released 2026-09-23). https://glide-telemetry.pages.dev/cwe/cwe-125/

Source: CISA KEV catalog v2026.09.23, released 2026-09-23. Windows end 2026-09-23.

Keyboard shortcuts

Keyboard shortcuts
/Focus search
?Show this panel
EscClose panel or clear search
g dGo to Dashboard
g kGo to KEV
g vGo to Vendors
g pGo to Products
g wGo to Weaknesses
g sGo to Stats
g rGo to Regulations
g bGo to Briefings
g aGo to API