Vulnerabilities (CVE)

Filtered by CWE-122
Total 3693 CVE
CVE Vendors Products Updated CVSS v2 CVSS v3
CVE-2026-102856 1 Microsoft 3 365 Apps, Office 2021, Office 2024 2026-10-15 N/A 8.8 HIGH
Heap-based buffer overflow in Microsoft Office Visio allows an unauthorized attacker to execute code over a network.
CVE-2026-103994 2026-10-15 N/A 8.8 HIGH
A Heap-based Buffer Overflow vulnerability in the VXLAN Gateway Daemon (vgd) of Juniper Networks Junos OS allows a malicious or compromised SDN-controller to cause a complete outage of the OVSDB control plane and possibly remote code execution.
CVE-2026-79827 2026-10-15 N/A 7.1 HIGH
A heap buffer overflow in HPE NonStop Inspect Subsystem could corrupt resume-execution address and may potentially redirect execution flow.
CVE-2026-79831 2026-10-15 N/A 6.6 MEDIUM
A heap buffer overflow in HPE NonStop Posix User Threads may allow arbitrary code execution.
CVE-2026-79822 2026-10-15 N/A 7.1 HIGH
A security vulnerability in HPE NonStop TNS/X Native Inspect may cause corruption of address and potentially redirect execution flow.
CVE-2026-79825 2026-10-15 N/A 7.1 HIGH
A heap buffer overflow in HPE NonStop NDSREST could corrupt resume-execution address and may potentially redirect execution flow.
CVE-2026-79826 2026-10-15 N/A 7.1 HIGH
A heap buffer overflow in HPE NonStop OCAX could corrupt address space and may potentially redirect execution flow.
CVE-2026-79828 2026-10-15 N/A 7.1 HIGH
A heap buffer overflow in HPE NonStop Debug Utilities could corrupt resume-execution address and may potentially redirect execution flow.
CVE-2026-70242 1 Microsoft 3 365 Apps, Office 2021, Office 2024 2026-10-15 N/A 9.8 CRITICAL
Heap-based buffer overflow in Microsoft Office Outlook allows an unauthorized attacker to execute code over a network.
CVE-2026-70256 1 Microsoft 2 365 Apps, Office 2024 2026-10-15 N/A 8.8 HIGH
Heap-based buffer overflow in Microsoft Office Outlook allows an unauthorized attacker to execute code over a network.
CVE-2026-70257 1 Microsoft 3 365 Apps, Office 2021, Office 2024 2026-10-15 N/A 8.8 HIGH
Heap-based buffer overflow in Microsoft Office Outlook allows an unauthorized attacker to execute code over a network.
CVE-2026-70282 1 Microsoft 3 365 Apps, Office 2021, Office 2024 2026-10-15 N/A 8.8 HIGH
Heap-based buffer overflow in Microsoft Office Outlook allows an unauthorized attacker to execute code over a network.
CVE-2026-97016 1 Microsoft 3 365 Apps, Office 2021, Office 2024 2026-10-15 N/A 9.8 CRITICAL
Heap-based buffer overflow in Microsoft Office Outlook allows an unauthorized attacker to execute code over a network.
CVE-2026-102849 1 Microsoft 3 365 Apps, Office 2021, Office 2024 2026-10-15 N/A 8.8 HIGH
Heap-based buffer overflow in Microsoft Office Access allows an unauthorized attacker to execute code over a network.
CVE-2026-102850 1 Microsoft 3 365 Apps, Office 2021, Office 2024 2026-10-15 N/A 8.8 HIGH
Heap-based buffer overflow in Microsoft Office Access allows an unauthorized attacker to execute code over a network.
CVE-2026-105591 1 Microsoft 3 365 Apps, Office 2021, Office 2024 2026-10-15 N/A 8.8 HIGH
Heap-based buffer overflow in Microsoft Office Access allows an unauthorized attacker to execute code over a network.
CVE-2026-105592 1 Microsoft 3 365 Apps, Office 2021, Office 2024 2026-10-15 N/A 7.5 HIGH
Heap-based buffer overflow in Microsoft Office Access allows an unauthorized attacker to execute code over a network.
CVE-2026-105593 1 Microsoft 3 365 Apps, Office 2021, Office 2024 2026-10-15 N/A 8.8 HIGH
Heap-based buffer overflow in Microsoft Office Access allows an unauthorized attacker to execute code over a network.
CVE-2026-109255 2026-10-15 N/A 6.8 MEDIUM
FreeRDP 3.0.0 before 3.32.0 contains an integer truncation vulnerability in license_check_stream_length that allows a malicious RDP server to trigger a heap buffer overflow on 32-bit clients. Attackers can send a crafted SERVER_LICENSE_REQUEST with a large scopeCount that bypasses length checks, causing out-of-bounds writes leading to denial of service or remote code execution.
CVE-2026-74045 2026-10-15 N/A 7.1 HIGH
Wazuh from 3.12.0 before 4.14.8 contains a heap buffer overflow in fim_generate_alert() where full_log is sized from input but written bounded by OS_MAXSTR. An enrolled agent can send a crafted FIM syscheck event to corrupt manager heap memory and deterministically crash wazuh-analysisd, causing a fleet-wide detection outage.