CWE-118Class

Incorrect Access of Indexable Resource ('Range Error')

Incomplete in the CWE catalog · 13 CVEs mapped

13
CVEs mapped
7.7
Median CVSS
What it is

The product does not restrict or incorrectly restricts operations within the boundaries of a resource that is accessed using an index or pointer, such as memory or files.

Recent examples
8.8cvss
CVE-2026-113239

CVE-2026-113239 - HIGH Severity Vulnerability

Range error in SiteIsolation in Google Chrome on on Android prior to 156.0.8078.47 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: Medium)

HIGHno explanation yet
0%
epss
7.8cvss
CVE-2026-50367

Windows Sensor Data Service Elevation of Privilege Vulnerability

Incorrect access of indexable resource ('range error') in Windows Sensor Data Service allows an authorized attacker to elevate privileges locally.

HIGHno explanation yet
0%
epss
5.3cvss
CVE-2025-54628

Vulnerability of incomplete verification information in the communication module

Vulnerability of incomplete verification information in the communication module. Impact: Successful exploitation of this vulnerability may affect availability.

MEDIUMno explanation yet
0%
epss
The record
Technical detail
CWE ID
CWE-118
Abstraction
Class
Structure
Simple
Status
Incomplete