Total
3692 CVE
| CVE | Vendors | Products | Updated | CVSS v2 | CVSS v3 |
|---|---|---|---|---|---|
| CVE-2026-102212 | 2026-10-31 | N/A | N/A | ||
| Heap-based buffer overflow in Opengear IM72XX, CM71XX, and ACM70XX firmware versions 4.8.0 through 5.5.2 on console server appliances allows an unauthenticated remote attacker to crash the index.cgi process via a crafted multipart/form-data POST request containing an overlong Content-Disposition name field. | |||||
| CVE-2026-116488 | 2026-10-31 | N/A | 6.8 MEDIUM | ||
| NXP MCUXpresso SDK USB middleware (mcuxsdk-middleware-usb) before 2.13.0 contains a heap buffer overflow in host audio, video and CDC class drivers that trust device-supplied bNumEndpoints and bLength values. A malicious USB device can supply crafted descriptors that write endpoint entries past the fixed-size epList array, corrupting heap memory for code execution or denial of service. | |||||
| CVE-2026-119124 | 1 Imagemagick | 1 Imagemagick | 2026-10-31 | N/A | 3.3 LOW |
| ImageMagick before 7.1.2-34 contains a heap-based buffer overflow in its -morph processing, where crafted images cause writes beyond the bounds of a heap buffer. An attacker can supply a crafted image that, when processed by a user with the -morph option, corrupts heap memory and crashes the application. | |||||
| CVE-2026-73013 | 1 Microsoft | 13 Windows 10 1607, Windows 10 1809, Windows 10 21h2 and 10 more | 2026-10-30 | N/A | 8.8 HIGH |
| Heap-based buffer overflow in Windows Imaging Component allows an unauthorized attacker to execute code over a network. | |||||
| CVE-2026-71328 | 1 Microsoft | 4 .net, Visual Studio 2022, Visual Studio 2026 and 1 more | 2026-10-30 | N/A | 8.8 HIGH |
| Heap-based buffer overflow in Visual Studio allows an unauthorized attacker to execute code over a network. | |||||
| CVE-2026-70125 | 1 Microsoft | 3 365 Apps, Office 2021, Office 2024 | 2026-10-30 | N/A | 7.8 HIGH |
| Heap-based buffer overflow in Microsoft Office Outlook allows an unauthorized attacker to execute code locally. | |||||
| CVE-2026-69556 | 1 Microsoft | 6 365 Apps, Microsoft 365, Office 2019 and 3 more | 2026-10-30 | N/A | 8.8 HIGH |
| Heap-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code over a network. | |||||
| CVE-2026-69522 | 2026-10-30 | N/A | 8.8 HIGH | ||
| Heap-based buffer overflow in Visual Studio allows an unauthorized attacker to execute code over a network. | |||||
| CVE-2026-69439 | 1 Microsoft | 4 .net, Visual Studio 2022, Visual Studio 2026 and 1 more | 2026-10-30 | N/A | 8.8 HIGH |
| Heap-based buffer overflow in .NET and Visual Studio allows an unauthorized attacker to elevate privileges over a network. | |||||
| CVE-2026-68880 | 1 Microsoft | 13 Windows 10 1607, Windows 10 1809, Windows 10 21h2 and 10 more | 2026-10-30 | N/A | 8.0 HIGH |
| Heap-based buffer overflow in Windows Win32K allows an authorized attacker to elevate privileges over a network. | |||||
| CVE-2026-107161 | 2026-10-30 | N/A | 7.5 HIGH | ||
| A heap-based buffer overflow flaw was found in Cyrus SASL. The add_to_challenge() function in the DIGEST-MD5 plugin computes the size of the buffer needed for a challenge/response field before DIGEST-MD5 quoting is applied, but does not recompute that size when quoting (escaping special characters) makes the value longer. The under-sized buffer is then passed to strcat(), causing a heap-based out-of-bounds write whose size depends on attacker-controlled input. A malicious or on-path DIGEST-MD5 (or HTTP Digest) server can trigger this flaw in a connecting client by supplying a crafted challenge field, such as realm or nonce, most likely resulting in a crash of the client application. | |||||
| CVE-2026-88089 | 2026-10-30 | N/A | 6.7 MEDIUM | ||
| Heap-based buffer overflow in SQL Server allows an authorized attacker to execute code locally. | |||||
| CVE-2026-88085 | 2026-10-30 | N/A | 6.4 MEDIUM | ||
| Heap-based buffer overflow in SQL Server allows an authorized attacker to elevate privileges locally. | |||||
| CVE-2026-88082 | 2026-10-30 | N/A | 7.0 HIGH | ||
| Heap-based buffer overflow in SQL Server allows an authorized attacker to elevate privileges locally. | |||||
| CVE-2026-85919 | 2026-10-30 | N/A | 7.0 HIGH | ||
| Heap-based buffer overflow in SQL Server allows an authorized attacker to elevate privileges locally. | |||||
| CVE-2026-83945 | 2026-10-30 | N/A | 6.6 MEDIUM | ||
| Heap-based buffer overflow in SQL Server allows an authorized attacker to execute code over a network. | |||||
| CVE-2026-70189 | 2026-10-30 | N/A | 6.7 MEDIUM | ||
| Heap-based buffer overflow in SQL Server allows an authorized attacker to execute code locally. | |||||
| CVE-2026-68883 | 2026-10-30 | N/A | 8.5 HIGH | ||
| Heap-based buffer overflow in SQL Server allows an authorized attacker to elevate privileges over a network. | |||||
| CVE-2026-119727 | 2026-10-30 | N/A | 6.5 MEDIUM | ||
| A flaw was found in GStreamer's gst-plugins-bad H.265 video parser. When parsing a specially crafted H.265 bitstream containing a Screen Content Coding (SCC) extension with certain palette predictor initializer settings, an integer underflow in the upper-bound computation allows the parser to accept an out-of-range value for the number of palette predictor entries. This causes the parser to write beyond the end of a fixed-size array, resulting in memory corruption and an application crash. Successful exploitation requires an attacker to provide a malformed H.265 media file to a vulnerable application, and is limited to a denial-of-service impact. | |||||
| CVE-2026-9536 | 2026-10-30 | N/A | 7.5 HIGH | ||
| A heap-based buffer overflow vulnerability exists in the vtkWindBladeReader FindVariableOffsets functionality of vtk (version(s): 9.6.1). A specially crafted .wind can lead to a buffer overflow. An attacker can provide a malicious file to trigger this vulnerability. | |||||