Total
3693 CVE
| CVE | Vendors | Products | Updated | CVSS v2 | CVSS v3 |
|---|---|---|---|---|---|
| CVE-2023-7104 | 2 Fedoraproject, Sqlite | 2 Fedora, Sqlite | 2026-10-14 | 5.2 MEDIUM | 5.5 MEDIUM |
| A vulnerability was found in SQLite SQLite3 up to 3.43.0 and classified as critical. This issue affects the function sessionReadRecord of the file ext/session/sqlite3session.c of the component make alltest Handler. The manipulation leads to heap-based buffer overflow. It is recommended to apply a patch to fix this issue. The associated identifier of this vulnerability is VDB-248999. | |||||
| CVE-2023-4911 | 7 Canonical, Debian, Fedoraproject and 4 more | 49 Ubuntu Linux, Debian Linux, Fedora and 46 more | 2026-10-14 | N/A | 7.8 HIGH |
| A buffer overflow was discovered in the GNU C Library's dynamic loader ld.so while processing the GLIBC_TUNABLES environment variable. This issue could allow a local attacker to use maliciously crafted GLIBC_TUNABLES environment variables when launching binaries with SUID permission to execute code with elevated privileges. | |||||
| CVE-2023-4016 | 2 Fedoraproject, Procps Project | 2 Fedora, Procps | 2026-10-14 | N/A | 2.5 LOW |
| Under some circumstances, this weakness allows a user who has access to run the “ps” utility on a machine, the ability to write almost unlimited amounts of unfiltered data into the process heap. | |||||
| CVE-2026-57090 | 1 Microsoft | 12 Windows 10 1607, Windows 10 1809, Windows 10 21h2 and 9 more | 2026-10-14 | N/A | 8.8 HIGH |
| Heap-based buffer overflow in Microsoft Windows Media Foundation allows an unauthorized attacker to execute code over a network. | |||||
| CVE-2026-49790 | 1 Microsoft | 12 Windows 10 1607, Windows 10 1809, Windows 10 21h2 and 9 more | 2026-10-14 | N/A | 7.3 HIGH |
| Windows Universal Disk Format File System Driver (UDFS) Elevation of Privilege Vulnerability | |||||
| CVE-2026-62769 | 1 Microsoft | 13 Windows 10 1607, Windows 10 1809, Windows 10 21h2 and 10 more | 2026-10-14 | N/A | 6.7 MEDIUM |
| Numeric truncation error in Windows DNS allows an authorized attacker to elevate privileges locally. | |||||
| CVE-2026-55005 | 1 Microsoft | 2 Exchange Server, Exchange Server Subscription Edition | 2026-10-14 | N/A | 8.8 HIGH |
| Heap-based buffer overflow in Microsoft Exchange Server allows an authorized attacker to execute code over a network. | |||||
| CVE-2026-64906 | 1 Microsoft | 5 365 Apps, Access, Office 2019 and 2 more | 2026-10-14 | N/A | 7.8 HIGH |
| Heap-based buffer overflow in Microsoft Office Access allows an unauthorized attacker to execute code locally. | |||||
| CVE-2026-62712 | 1 Microsoft | 13 Windows 10 1607, Windows 10 1809, Windows 10 21h2 and 10 more | 2026-10-14 | N/A | 7.8 HIGH |
| Heap-based buffer overflow in Windows Win32K allows an authorized attacker to elevate privileges locally. | |||||
| CVE-2026-63533 | 1 Microsoft | 6 365 Apps, Microsoft 365, Office 2016 and 3 more | 2026-10-14 | N/A | 7.8 HIGH |
| Heap-based buffer overflow in Microsoft Office allows an unauthorized attacker to execute code locally. | |||||
| CVE-2026-50480 | 1 Microsoft | 3 Windows 10 1607, Windows Server 2012, Windows Server 2016 | 2026-10-14 | N/A | 7.8 HIGH |
| Heap-based buffer overflow in Windows Web Proxy Auto-Discovery Protocol (WPAD) allows an authorized attacker to elevate privileges locally. | |||||
| CVE-2026-50461 | 1 Microsoft | 12 Windows 10 1607, Windows 10 1809, Windows 10 21h2 and 9 more | 2026-10-14 | N/A | 7.8 HIGH |
| Heap-based buffer overflow in Windows NTFS allows an unauthorized attacker to execute code locally. | |||||
| CVE-2026-55125 | 1 Microsoft | 7 365 Apps, Microsoft 365, Office 2016 and 4 more | 2026-10-14 | N/A | 7.8 HIGH |
| Heap-based buffer overflow in Microsoft Office allows an unauthorized attacker to execute code locally. | |||||
| CVE-2025-64784 | 3 Adobe, Apple, Microsoft | 3 Dng Software Development Kit, Macos, Windows | 2026-10-14 | N/A | 7.1 HIGH |
| DNG SDK versions 1.7.0 and earlier are affected by a Heap-based Buffer Overflow vulnerability that could lead to memory exposure or application denial of service. An attacker could leverage this vulnerability to disclose sensitive memory information. Exploitation of this issue requires user interaction in that a victim must open a malicious file. | |||||
| CVE-2026-14888 | 1 Ibm | 1 Datapower Gateway | 2026-10-14 | N/A | 8.1 HIGH |
| IBM DataPower Gateway 10.5.0.0 through 10.5.0.22, 10.6.1 through 10.6.6, 10.6.0.0 through 10.6.0.10, and 11.0.0.0 through 11.0.0.2 could allow a remote attacker to execute arbitrary code due to a heap-based buffer overflow. | |||||
| CVE-2026-88163 | 1 Microsoft | 1 Sharepoint Server | 2026-10-14 | N/A | 8.8 HIGH |
| Integer overflow or wraparound in Microsoft Office SharePoint allows an authorized attacker to execute code over a network. | |||||
| CVE-2026-88155 | 1 Microsoft | 1 Sharepoint Server | 2026-10-14 | N/A | 8.8 HIGH |
| Heap-based buffer overflow in Microsoft Office SharePoint allows an authorized attacker to execute code over a network. | |||||
| CVE-2025-64031 | 2026-10-14 | N/A | 2.5 LOW | ||
| libarchive 3.8.x before 3.8.2 has a strcpy heap-based buffer overflow in the gzip writer via the original-filename field to archive_compressor_gzip_open in archive_write_add_filter_gzip.c, aka GHSA-92wx-p669-8gr9. This relates to bsdtar. Exploitation envisions a marginally plausible scenario in which original-filename is obtained from an untrusted party. (original-filename is not derived from the input data.) | |||||
| CVE-2026-97009 | 1 Microsoft | 3 365 Apps, Office 2021, Office 2024 | 2026-10-14 | N/A | 7.8 HIGH |
| Heap-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code locally. | |||||
| CVE-2026-73791 | 2026-10-14 | N/A | 2.0 LOW | ||
| A security vulnerability in HPE NonStop Hpjmeter can cause stack and heap buffer overflow. | |||||