Vulnerabilities (CVE)

Filtered by CWE-122
Total 3693 CVE
CVE Vendors Products Updated CVSS v2 CVSS v3
CVE-2026-78521 1 Microsoft 6 365 Apps, Microsoft 365, Office 2019 and 3 more 2026-09-17 N/A 8.8 HIGH
Heap-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code over a network.
CVE-2026-78517 1 Microsoft 6 365 Apps, Microsoft 365, Office 2019 and 3 more 2026-09-17 N/A 8.8 HIGH
Heap-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code over a network.
CVE-2026-78511 1 Microsoft 6 365 Apps, Microsoft 365, Office 2019 and 3 more 2026-09-17 N/A 8.8 HIGH
Heap-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code over a network.
CVE-2026-78509 1 Microsoft 6 365 Apps, Microsoft 365, Office 2019 and 3 more 2026-09-17 N/A 9.8 CRITICAL
Heap-based buffer overflow in Microsoft Office Outlook allows an unauthorized attacker to execute code over a network.
CVE-2026-78505 1 Microsoft 6 365 Apps, Microsoft 365, Office 2016 and 3 more 2026-09-17 N/A 8.8 HIGH
Heap-based buffer overflow in Microsoft Office allows an unauthorized attacker to execute code over a network.
CVE-2026-77898 1 Microsoft 5 365 Apps, Microsoft 365, Office 2019 and 2 more 2026-09-17 N/A 7.5 HIGH
Heap-based buffer overflow in Microsoft Office allows an unauthorized attacker to execute code over a network.
CVE-2026-72973 1 Microsoft 6 365 Apps, Microsoft 365, Office 2019 and 3 more 2026-09-17 N/A 8.8 HIGH
Heap-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code over a network.
CVE-2026-72972 1 Microsoft 6 365 Apps, Microsoft 365, Office 2019 and 3 more 2026-09-17 N/A 8.8 HIGH
Heap-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code over a network.
CVE-2026-69671 1 Microsoft 6 365 Apps, Microsoft 365, Office 2019 and 3 more 2026-09-17 N/A 8.8 HIGH
Heap-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code over a network.
CVE-2026-67643 1 Microsoft 2 Sql Server 2022, Sql Server 2025 2026-09-17 N/A 9.8 CRITICAL
Heap-based buffer overflow in SQL Server allows an unauthorized attacker to execute code over a network.
CVE-2026-67631 1 Microsoft 4 Sql Server 2017, Sql Server 2019, Sql Server 2022 and 1 more 2026-09-17 N/A 9.8 CRITICAL
Heap-based buffer overflow in SQL Server allows an unauthorized attacker to execute code over a network.
CVE-2026-81353 1 Microsoft 1 Heif Image Extension 2026-09-17 N/A 7.8 HIGH
Heap-based buffer overflow in Microsoft Windows Codecs Library allows an unauthorized attacker to execute code locally.
CVE-2026-69348 1 Microsoft 4 Windows 11 24h2, Windows 11 25h2, Windows 11 26h1 and 1 more 2026-09-17 N/A 7.8 HIGH
Heap-based buffer overflow in Windows Win32K allows an authorized attacker to elevate privileges locally.
CVE-2023-4781 4 Apple, Debian, Neovim and 1 more 4 Macos, Debian Linux, Neovim and 1 more 2026-09-17 N/A 7.8 HIGH
Heap-based Buffer Overflow in GitHub repository vim/vim prior to 9.0.1873.
CVE-2023-4751 3 Apple, Neovim, Vim 3 Macos, Neovim, Vim 2026-09-17 N/A 7.8 HIGH
Heap-based Buffer Overflow in GitHub repository vim/vim prior to 9.0.1331.
CVE-2026-69820 1 Microsoft 6 Windows 10 21h2, Windows 10 22h2, Windows 11 23h2 and 3 more 2026-09-16 N/A 8.2 HIGH
Heap-based buffer overflow in Windows Hello allows an authorized attacker to elevate privileges locally.
CVE-2026-69822 1 Microsoft 10 Windows 10 1809, Windows 10 21h2, Windows 10 22h2 and 7 more 2026-09-16 N/A 7.8 HIGH
Numeric truncation error in Windows Kerberos allows an authorized attacker to elevate privileges locally.
CVE-2026-45761 1 Oisf 1 Suricata 2026-09-16 N/A 3.3 LOW
Suricata is a network Intrusion Detection System, Intrusion Prevention System and Network Security Monitoring engine. Prior to versions 7.0.16 and 8.0.5, a crafted rule using mixed-case frame syntax could trigger a heap buffer overflow while Suricata is loading signatures. The issue is reached during rule parsing/loading rather than by network traffic alone. Versions 7.0.16 and 8.0.5 contain a fix. As a workaround, preprocess rules to check that frames are all lowercase and/or only load trusted rulesets.
CVE-2026-69921 1 Microsoft 8 Windows 10 21h2, Windows 10 22h2, Windows 11 23h2 and 5 more 2026-09-16 N/A 7.8 HIGH
Heap-based buffer overflow in Windows Print Spooler Components allows an authorized attacker to elevate privileges locally.
CVE-2026-69469 1 Microsoft 10 Windows 10 1809, Windows 10 21h2, Windows 10 22h2 and 7 more 2026-09-16 N/A 6.6 MEDIUM
Integer overflow or wraparound in Windows USB Audio Class driver (usbaudio.sys) allows an unauthorized attacker to elevate privileges with a physical attack.