Vulnerabilities (CVE)

Filtered by CWE-122
Total 3693 CVE
CVE Vendors Products Updated CVSS v2 CVSS v3
CVE-2026-88197 1 Microsoft 4 365 Apps, Microsoft 365, Office 2021 and 1 more 2026-10-15 N/A 8.8 HIGH
Heap-based buffer overflow in Microsoft Office allows an unauthorized attacker to execute code over a network.
CVE-2026-88196 1 Microsoft 4 365 Apps, Microsoft 365, Office 2021 and 1 more 2026-10-15 N/A 8.8 HIGH
Heap-based buffer overflow in Microsoft Office allows an unauthorized attacker to execute code over a network.
CVE-2026-88186 1 Microsoft 4 365 Apps, Microsoft 365, Office 2021 and 1 more 2026-10-15 N/A 8.8 HIGH
Heap-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code over a network.
CVE-2026-88185 1 Microsoft 4 365 Apps, Microsoft 365, Office 2021 and 1 more 2026-10-15 N/A 8.1 HIGH
Heap-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code over a network.
CVE-2026-88145 1 Microsoft 4 365 Apps, Microsoft 365, Office 2021 and 1 more 2026-10-15 N/A 8.8 HIGH
Heap-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code over a network.
CVE-2026-77902 1 Microsoft 4 365 Apps, Microsoft 365, Office 2021 and 1 more 2026-10-15 N/A 8.8 HIGH
Heap-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code over a network.
CVE-2026-70302 1 Microsoft 4 365 Apps, Microsoft 365, Office 2021 and 1 more 2026-10-15 N/A 8.8 HIGH
Heap-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code over a network.
CVE-2026-70301 1 Microsoft 4 365 Apps, Microsoft 365, Office 2021 and 1 more 2026-10-15 N/A 8.8 HIGH
Heap-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code over a network.
CVE-2026-70291 1 Microsoft 4 365 Apps, Microsoft 365, Office 2021 and 1 more 2026-10-15 N/A 9.8 CRITICAL
Heap-based buffer overflow in Microsoft Office Outlook allows an unauthorized attacker to execute code over a network.
CVE-2026-70287 1 Microsoft 4 365 Apps, Microsoft 365, Office 2021 and 1 more 2026-10-15 N/A 8.8 HIGH
Heap-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code over a network.
CVE-2026-70269 1 Microsoft 4 365 Apps, Microsoft 365, Office 2021 and 1 more 2026-10-15 N/A 8.1 HIGH
Heap-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code over a network.
CVE-2026-70268 1 Microsoft 4 365 Apps, Microsoft 365, Office 2021 and 1 more 2026-10-15 N/A 8.8 HIGH
Heap-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code over a network.
CVE-2026-70220 1 Microsoft 4 365 Apps, Microsoft 365, Office 2021 and 1 more 2026-10-15 N/A 7.8 HIGH
Heap-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code locally.
CVE-2026-105599 1 Microsoft 4 365 Apps, Microsoft 365, Office 2021 and 1 more 2026-10-15 N/A 7.5 HIGH
Heap-based buffer overflow in Microsoft Office PowerPoint allows an unauthorized attacker to execute code over a network.
CVE-2026-102858 1 Microsoft 3 Microsoft 365, Office 2021, Office 2024 2026-10-15 N/A 8.8 HIGH
Heap-based buffer overflow in Microsoft Office OneNote allows an unauthorized attacker to execute code over a network.
CVE-2026-100210 1 Microsoft 5 365 Apps, Microsoft 365, Office 2021 and 2 more 2026-10-15 N/A 8.8 HIGH
Heap-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code over a network.
CVE-2026-21399 1 Intel 1 Open Vkl 2026-10-15 N/A 6.1 MEDIUM
Heap-based buffer overflow for the Intel(R) Open Volume Kernel Library (Intel(R) Open VKL) library maintained by intel(R) before version 2.0.2 within Ring 3: User Applications may allow a denial of service. System software adversary with an authenticated user combined with a low complexity attack may enable denial of service. This result may potentially occur via local access when attack requirements are not present without special internal knowledge and requires no user interaction. The potential vulnerability may impact the confidentiality (none), integrity (low) and availability (high) of the vulnerable system, resulting in subsequent system confidentiality (none), integrity (none) and availability (none) impacts.
CVE-2026-110958 2026-10-15 10.0 HIGH 10.0 CRITICAL
A vulnerability was found in Wavlink WN530HG4B M30HG4B_V260724. The impacted element is an unknown function of the file api.cgi. The manipulation results in heap-based buffer overflow. It is possible to launch the attack remotely. The exploit has been made public and could be used. Upgrading to version 2026-09-24-841a51c6d5_tclinux.bin is sufficient to resolve this issue. The affected component should be upgraded. The vendor confirms: "We confirm the finding, and it has already been addressed. In the current firmware the api=info&client=app handler no longer builds a shell command: the login script is now invoked through an argument vector (execvp) instead of system(), and the client address is length-limited and null-checked."
CVE-2026-96996 1 Microsoft 3 365 Apps, Office 2021, Office 2024 2026-10-15 N/A 7.8 HIGH
Heap-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code locally.
CVE-2026-102857 1 Microsoft 3 365 Apps, Office 2021, Office 2024 2026-10-15 N/A 8.8 HIGH
Heap-based buffer overflow in Microsoft Office Visio allows an unauthorized attacker to execute code over a network.