Vulnerabilities (CVE)

Filtered by CWE-122
Total 3693 CVE
CVE Vendors Products Updated CVSS v2 CVSS v3
CVE-2026-19970 2026-08-20 7.5 HIGH 6.3 MEDIUM
A vulnerability was detected in Open Asset Import Library Assimp 17c12da. This affects the function Assimp::MDLImporter::AddBonesToNodeGraph_3DGS_MDL7 of the file code/AssetLib/MDL/MDLLoader.cpp of the component Node Parser. The manipulation of the argument bones_num results in heap-based buffer overflow. The attack can be executed remotely. The exploit is now public and may be used. The project was informed of the problem early through an issue report but has not responded yet.
CVE-2026-19968 2026-08-20 5.0 MEDIUM 4.3 MEDIUM
A weakness has been identified in Open Asset Import Library Assimp 17c12da. The affected element is the function Assimp::MDLImporter::ReadFaces_3DGS_MDL7 in the library code/AssetLib/LWO/LWOLoader.h of the component 3DGS MDL7 Model Parser. Executing a manipulation can lead to heap-based buffer overflow. The attack may be launched remotely. The exploit has been made available to the public and could be used for attacks. This patch is called ee77bb09a42a49843ac85ef64c14d2328b251df1. Applying a patch is advised to resolve this issue.
CVE-2026-19967 2026-08-20 7.5 HIGH 6.3 MEDIUM
A security flaw has been discovered in Open Asset Import Library Assimp 17c12da. Impacted is the function Assimp::Compression::decompressBlock of the file code/Common/Compression.cpp of the component File Parser. Performing a manipulation results in heap-based buffer overflow. The attack may be initiated remotely. The exploit has been released to the public and may be used for attacks. The project was informed of the problem early through an issue report but has not responded yet.
CVE-2026-35590 1 Libvips 1 Libvips 2026-08-19 N/A 5.5 MEDIUM
libvips is a fast image processing library with low memory needs. The EXIF decoder within libvips versions before and including 8.18.1 was not verifying the range of EXIF tag groups before passing data to libexif, leading to a possible null pointer dereference and crash. This has been patched in version 8.18.2.
CVE-2026-35591 1 Libvips 1 Libvips 2026-08-19 N/A 7.8 HIGH
libvips is a fast image processing library with low memory needs. The `tiffload` operation in libvips versions before and including 8.18.1 could incorrectly determine the number of channels in a JPEG or JPEG2000-encoded tile within a TIFF image, leading to a possible buffer overflow. This has been patched in version 8.18.2.
CVE-2023-23390 1 Microsoft 1 3d Builder 2026-08-19 N/A 7.8 HIGH
3D Builder Remote Code Execution Vulnerability
CVE-2023-23381 1 Microsoft 3 Visual Studio 2017, Visual Studio 2019, Visual Studio 2022 2026-08-19 N/A 7.8 HIGH
Visual Studio Remote Code Execution Vulnerability
CVE-2023-23378 1 Microsoft 1 Print 3d 2026-08-19 N/A 7.8 HIGH
Print 3D Remote Code Execution Vulnerability
CVE-2023-23377 1 Microsoft 1 3d Builder 2026-08-19 N/A 7.8 HIGH
3D Builder Remote Code Execution Vulnerability
CVE-2023-23376 1 Microsoft 13 Windows 10 1507, Windows 10 1607, Windows 10 1809 and 10 more 2026-08-19 N/A 7.8 HIGH
Windows Common Log File System Driver Elevation of Privilege Vulnerability
CVE-2023-21812 1 Microsoft 13 Windows 10, Windows 10 1607, Windows 10 1809 and 10 more 2026-08-19 N/A 7.8 HIGH
Windows Common Log File System Driver Elevation of Privilege Vulnerability
CVE-2023-21804 1 Microsoft 12 Windows 10, Windows 10 1607, Windows 10 1809 and 9 more 2026-08-19 N/A 7.8 HIGH
Windows Graphics Component Elevation of Privilege Vulnerability
CVE-2023-21799 1 Microsoft 13 Windows 10 1507, Windows 10 1607, Windows 10 1809 and 10 more 2026-08-19 N/A 8.8 HIGH
Microsoft WDAC OLE DB provider for SQL Server Remote Code Execution Vulnerability
CVE-2023-21695 1 Microsoft 13 Windows 10, Windows 10 1607, Windows 10 1809 and 10 more 2026-08-19 N/A 7.5 HIGH
Microsoft Protected Extensible Authentication Protocol (PEAP) Remote Code Execution Vulnerability
CVE-2023-21694 1 Microsoft 13 Windows 10, Windows 10 1607, Windows 10 1809 and 10 more 2026-08-19 N/A 6.8 MEDIUM
Windows Fax Service Remote Code Execution Vulnerability
CVE-2023-21692 1 Microsoft 13 Windows 10 1507, Windows 10 1607, Windows 10 1809 and 10 more 2026-08-19 N/A 9.8 CRITICAL
Microsoft Protected Extensible Authentication Protocol (PEAP) Remote Code Execution Vulnerability
CVE-2023-21690 1 Microsoft 13 Windows 10 1507, Windows 10 1607, Windows 10 1809 and 10 more 2026-08-19 N/A 9.8 CRITICAL
Microsoft Protected Extensible Authentication Protocol (PEAP) Remote Code Execution Vulnerability
CVE-2023-21689 1 Microsoft 13 Windows 10 1507, Windows 10 1607, Windows 10 1809 and 10 more 2026-08-19 N/A 9.8 CRITICAL
Microsoft Protected Extensible Authentication Protocol (PEAP) Remote Code Execution Vulnerability
CVE-2023-21528 1 Microsoft 1 Sql Server 2026-08-19 N/A 7.8 HIGH
Microsoft SQL Server Remote Code Execution Vulnerability
CVE-2026-62732 1 Microsoft 13 Windows 10 1607, Windows 10 1809, Windows 10 21h2 and 10 more 2026-08-18 N/A 7.8 HIGH
Heap-based buffer overflow in Windows Telephony Service allows an authorized attacker to elevate privileges locally.