CWE-119 · Improper Restriction of Operations within the Bounds of a Memory Buffer (page 73)
Page 73 of 100 — CVEs classified under CWE-119, newest first, with CVSS severity and publication dates.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2016-3638 | Medium | 5.5 | 2016-10-13 | SAP SLD Registration Program (aka SLDREG) allows local users to cause a denial of service (memory corruption and process termination) via a crafted HOST parame… |
CVE-2016-6695 | Critical | 9.8 | 2016-10-10 | sound/soc/msm/qdsp6v2/msm-ds2-dap-config.c in a Qualcomm QDSP6v2 driver in Android before 2016-10-05 allows attackers to cause a denial of service or possibly… |
CVE-2016-6676 | High | 7.8 | 2016-10-10 | Off-by-one error in CORE/HDD/src/wlan_hdd_cfg.c in the Qualcomm Wi-Fi driver in Android before 2016-10-05 on Nexus 5X and Android One devices allows attackers… |
CVE-2016-6675 | High | 7.8 | 2016-10-10 | Off-by-one error in CORE/HDD/src/wlan_hdd_hostapd.c in the Qualcomm Wi-Fi driver in Android before 2016-10-05 on Nexus 5X and Android One devices allows attack… |
CVE-2016-3934 | High | 7.8 | 2016-10-10 | drivers/media/platform/msm/camera_v2/sensor/io/msm_camera_cci_i2c.c in the Qualcomm camera driver in Android before 2016-10-05 on Nexus 5, Nexus 5X, Nexus 6, N… |
CVE-2016-3916 | High | 7.8 | 2016-10-10 | camera/src/camera_metadata.c in the Camera service in Android 4.x before 4.4.4, 5.0.x before 5.0.2, 5.1.x before 5.1.1, 6.x before 2016-10-01, and 7.0 before 2… |
CVE-2016-1453 | Critical | 9.8 | 2016-10-06 | Buffer overflow in the Overlay Transport Virtualization (OTV) GRE feature in Cisco NX-OS 5.0 through 7.3 on Nexus 7000 and 7700 devices allows remote attackers… |
CVE-2016-6416 | Medium | 5.9 | 2016-10-05 | The FTP service in Cisco AsyncOS on Email Security Appliance (ESA) devices 9.6.0-000 through 9.9.6-026, Web Security Appliance (WSA) devices 9.0.0-162 through… |
CVE-2016-1246 | High | 7.5 | 2016-10-05 | Buffer overflow in the DBD::mysql module before 4.037 for Perl allows context-dependent attackers to cause a denial of service (crash) via vectors related to a… |
CVE-2016-8276 | Critical | 9.8 | 2016-10-03 | Buffer overflow in the Point-to-Point Protocol over Ethernet (PPPoE) module in Huawei USG2100, USG2200, USG5100, and USG5500 unified security gateways with sof… |
CVE-2016-1243 | Critical | 9.8 | 2016-10-03 | Stack-based buffer overflow in the extractTree function in unADF allows remote attackers to execute arbitrary code via a long pathname. |
CVE-2016-7045 | High | 7.5 | 2016-09-27 | The format_send_to_gui function in the format parsing code in Irssi before 0.8.20 allows remote attackers to cause a denial of service (heap corruption and cra… |
CVE-2016-7044 | High | 7.5 | 2016-09-27 | The unformat_24bit_color function in the format parsing code in Irssi before 0.8.20, when compiled with true-color enabled, allows remote attackers to cause a… |
CVE-2016-4779 | High | 7.8 | 2016-09-25 | Apple Type Services (ATS) in Apple OS X before 10.12 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a c… |
CVE-2016-4775 | High | 7.8 | 2016-09-25 | The kernel in Apple OS X before 10.12, tvOS before 10, and watchOS before 3 allows local users to gain privileges or cause a denial of service (memory corrupti… |
CVE-2016-4769 | High | 8.8 | 2016-09-25 | WebKit in Apple iTunes before 12.5.1 on Windows and Safari before 10 allows remote attackers to execute arbitrary code or cause a denial of service (memory cor… |
CVE-2016-4768 | High | 8.8 | 2016-09-25 | WebKit in Apple iOS before 10, tvOS before 10, iTunes before 12.5.1 on Windows, and Safari before 10 allows remote attackers to execute arbitrary code or cause… |
CVE-2016-4767 | High | 8.8 | 2016-09-25 | WebKit in Apple iOS before 10, tvOS before 10, iTunes before 12.5.1 on Windows, and Safari before 10 allows remote attackers to execute arbitrary code or cause… |
CVE-2016-4766 | High | 8.8 | 2016-09-25 | WebKit in Apple iOS before 10, tvOS before 10, iTunes before 12.5.1 on Windows, and Safari before 10 allows remote attackers to execute arbitrary code or cause… |
CVE-2016-4765 | High | 8.8 | 2016-09-25 | WebKit in Apple iOS before 10, tvOS before 10, iTunes before 12.5.1 on Windows, and Safari before 10 allows remote attackers to execute arbitrary code or cause… |
CVE-2016-4762 | High | 8.8 | 2016-09-25 | WebKit in Apple iOS before 10, iTunes before 12.5.1 on Windows, iCloud before 6.0 on Windows, and Safari before 10 allows remote attackers to execute arbitrary… |
CVE-2016-4759 | High | 8.8 | 2016-09-25 | WebKit in Apple iOS before 10, tvOS before 10, iTunes before 12.5.1 on Windows, and Safari before 10 allows remote attackers to execute arbitrary code or cause… |
CVE-2016-4750 | High | 7.8 | 2016-09-25 | S2 Camera in Apple iOS before 10 and OS X before 10.12 allows attackers to execute arbitrary code in a privileged context or cause a denial of service (memory… |
CVE-2016-4738 | High | 8.8 | 2016-09-25 | libxslt in Apple iOS before 10, OS X before 10.12, tvOS before 10, and watchOS before 3 allows remote attackers to execute arbitrary code or cause a denial of… |
CVE-2016-4737 | High | 8.8 | 2016-09-25 | WebKit in Apple iOS before 10, Safari before 10, tvOS before 10, and watchOS before 3 allows remote attackers to execute arbitrary code or cause a denial of se… |
CVE-2016-4736 | High | 8.8 | 2016-09-25 | libarchive in Apple OS X before 10.12 allows remote attackers to cause a denial of service (memory corruption) or possibly have unspecified other impact via a… |
CVE-2016-4735 | High | 8.8 | 2016-09-25 | WebKit in Apple iOS before 10, Safari before 10, and tvOS before 10 allows remote attackers to execute arbitrary code or cause a denial of service (memory corr… |
CVE-2016-4734 | Critical | 9.6 | 2016-09-25 | WebKit in Apple iOS before 10, Safari before 10, and tvOS before 10 allows remote attackers to execute arbitrary code or cause a denial of service (memory corr… |
CVE-2016-4733 | High | 7.8 | 2016-09-25 | WebKit in Apple iOS before 10, Safari before 10, and tvOS before 10 allows remote attackers to execute arbitrary code or cause a denial of service (memory corr… |
CVE-2016-4731 | High | 8.8 | 2016-09-25 | WebKit in Apple iOS before 10 and Safari before 10 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a cra… |
CVE-2016-4730 | High | 8.8 | 2016-09-25 | WebKit in Apple iOS before 10, Safari before 10, and tvOS before 10 allows remote attackers to execute arbitrary code or cause a denial of service (memory corr… |
CVE-2016-4729 | High | 8.8 | 2016-09-25 | WebKit in Apple iOS before 10 and Safari before 10 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a cra… |
CVE-2016-4727 | High | 7.8 | 2016-09-25 | IOThunderboltFamily in Apple OS X before 10.12 allows attackers to execute arbitrary code in a privileged context or cause a denial of service (memory corrupti… |
CVE-2016-4726 | High | 7.8 | 2016-09-25 | IOAcceleratorFamily in Apple iOS before 10, OS X before 10.12, tvOS before 10, and watchOS before 3 allows attackers to execute arbitrary code in a privileged… |
CVE-2016-4725 | High | 8.1 | 2016-09-25 | IOAcceleratorFamily in Apple iOS before 10, OS X before 10.12, tvOS before 10, and watchOS before 3 allows remote attackers to obtain sensitive information fro… |
CVE-2016-4723 | High | 7.8 | 2016-09-25 | Intel Graphics Driver in Apple OS X before 10.12 allows attackers to execute arbitrary code in a privileged context or cause a denial of service (memory corrup… |
CVE-2016-4718 | Medium | 6.5 | 2016-09-25 | Buffer overflow in FontParser in Apple iOS before 10, OS X before 10.12, tvOS before 10, and watchOS before 3 allows remote attackers to obtain sensitive infor… |
CVE-2016-4703 | High | 7.8 | 2016-09-25 | Bluetooth in Apple OS X before 10.12 allows attackers to execute arbitrary code in a privileged context or cause a denial of service (memory corruption) via a… |
CVE-2016-4702 | Critical | 9.8 | 2016-09-25 | Audio in Apple iOS before 10, OS X before 10.12, tvOS before 10, and watchOS before 3 allows remote attackers to execute arbitrary code or cause a denial of se… |
CVE-2016-4700 | High | 7.8 | 2016-09-25 | AppleUUC in Apple OS X before 10.12 allows attackers to execute arbitrary code in a privileged context or cause a denial of service (memory corruption) via a c… |
CVE-2016-4699 | High | 7.8 | 2016-09-25 | AppleUUC in Apple OS X before 10.12 allows attackers to execute arbitrary code in a privileged context or cause a denial of service (memory corruption) via a c… |
CVE-2016-4697 | High | 7.8 | 2016-09-25 | Apple HSSPI Support in Apple OS X before 10.12 allows attackers to execute arbitrary code in a privileged context or cause a denial of service (memory corrupti… |
CVE-2016-4658 | Critical | 9.8 | 2016-09-25 | xpointer.c in libxml2 before 2.9.5 (as used in Apple iOS before 10, OS X before 10.12, tvOS before 10, and watchOS before 3, and other products) does not forbi… |
CVE-2016-4611 | High | 8.8 | 2016-09-25 | WebKit in Apple iOS before 10, Safari before 10, and tvOS before 10 allows remote attackers to execute arbitrary code or cause a denial of service (memory corr… |
CVE-2016-5278 | High | 8.8 | 2016-09-22 | Heap-based buffer overflow in the nsBMPEncoder::AddImageFrame function in Mozilla Firefox before 49.0, Firefox ESR 45.x before 45.4, and Thunderbird < 45.4 all… |
CVE-2016-5275 | High | 8.8 | 2016-09-22 | Buffer overflow in the mozilla::gfx::FilterSupport::ComputeSourceNeededRegions function in Mozilla Firefox before 49.0 allows remote attackers to execute arbit… |
CVE-2016-5270 | Critical | 9.8 | 2016-09-22 | Heap-based buffer overflow in the nsCaseTransformTextRunFactory::TransformString function in Mozilla Firefox before 49.0, Firefox ESR 45.x before 45.4, and Thu… |
CVE-2016-5257 | Critical | 9.8 | 2016-09-22 | Multiple unspecified vulnerabilities in the browser engine in Mozilla Firefox before 49.0, Firefox ESR 45.x before 45.4 and Thunderbird < 45.4 allow remote att… |
CVE-2016-5256 | Critical | 9.8 | 2016-09-22 | Multiple unspecified vulnerabilities in the browser engine in Mozilla Firefox before 49.0 allow remote attackers to cause a denial of service (memory corruptio… |
CVE-2016-6669 | High | 7.5 | 2016-09-22 | Buffer overflow in the Authentication, Authorization and Accounting (AAA) module in Huawei USG2100, USG2200, USG5100, and USG5500 unified security gateways wit… |
CVE-2016-6525 | Critical | 9.8 | 2016-09-22 | Heap-based buffer overflow in the pdf_load_mesh_params function in pdf/pdf-shade.c in MuPDF allows remote attackers to cause a denial of service (crash) or exe… |
CVE-2016-3991 | High | 7.8 | 2016-09-21 | Heap-based buffer overflow in the loadImage function in the tiffcrop tool in LibTIFF 4.0.6 and earlier allows remote attackers to cause a denial of service (ou… |
CVE-2016-3990 | High | 7.8 | 2016-09-21 | Heap-based buffer overflow in the horizontalDifference8 function in tif_pixarlog.c in LibTIFF 4.0.6 and earlier allows remote attackers to cause a denial of se… |
CVE-2016-7094 | Medium | 4.1 | 2016-09-21 | Buffer overflow in Xen 4.7.x and earlier allows local x86 HVM guest OS administrators on guests running with shadow paging to cause a denial of service via a p… |
CVE-2016-6354 | Critical | 9.8 | 2016-09-21 | Heap-based buffer overflow in the yy_get_next_buffer function in Flex before 2.6.1 might allow context-dependent attackers to cause a denial of service or poss… |
CVE-2016-5017 | High | 8.1 | 2016-09-21 | Buffer overflow in the C cli shell in Apache Zookeeper before 3.4.9 and 3.5.x before 3.5.3, when using the "cmd:" batch mode syntax, allows attackers to have u… |
CVE-2016-4302 | High | 7.8 | 2016-09-21 | Heap-based buffer overflow in the parse_codes function in archive_read_support_format_rar.c in libarchive before 3.2.1 allows remote attackers to execute arbit… |
CVE-2016-4301 | High | 7.8 | 2016-09-21 | Stack-based buffer overflow in the parse_device function in archive_read_support_format_mtree.c in libarchive before 3.2.1 allows remote attackers to execute a… |
CVE-2015-8929 | Medium | 5.5 | 2016-09-20 | Memory leak in the __archive_read_get_extract function in archive_read_extract2.c in libarchive before 3.2.0 allows remote attackers to cause a denial of servi… |
CVE-2015-8919 | High | 7.5 | 2016-09-20 | The lha_read_file_extended_header function in archive_read_support_format_lha.c in libarchive before 3.2.0 allows remote attackers to cause a denial of service… |
CVE-2015-8918 | High | 7.5 | 2016-09-20 | The archive_string_append function in archive_string.c in libarchive before 3.2.0 allows remote attackers to cause a denial of service (crash) via a crafted ca… |
CVE-2016-5814 | High | 8.6 | 2016-09-19 | Buffer overflow in Rockwell Automation RSLogix Micro Starter Lite, RSLogix Micro Developer, RSLogix 500 Starter Edition, RSLogix 500 Standard Edition, and RSLo… |
CVE-2016-4705 | High | 7.8 | 2016-09-18 | otool in Apple Xcode before 8 allows local users to gain privileges or cause a denial of service (memory corruption and application crash) via unspecified vect… |
CVE-2016-4704 | High | 7.8 | 2016-09-18 | otool in Apple Xcode before 8 allows local users to gain privileges or cause a denial of service (memory corruption and application crash) via unspecified vect… |
CVE-2016-7418 | High | 7.5 | 2016-09-17 | The php_wddx_push_element function in ext/wddx/wddx.c in PHP before 5.6.26 and 7.x before 7.0.11 allows remote attackers to cause a denial of service (invalid… |
CVE-2016-7416 | High | 7.5 | 2016-09-17 | ext/intl/msgformat/msgformat_format.c in PHP before 5.6.26 and 7.x before 7.0.11 does not properly restrict the locale length provided to the Locale class in t… |
CVE-2016-7415 | Critical | 9.8 | 2016-09-17 | Stack-based buffer overflow in the Locale class in common/locid.cpp in International Components for Unicode (ICU) through 57.1 for C/C++ allows remote attacker… |
CVE-2016-7414 | Critical | 9.8 | 2016-09-17 | The ZIP signature-verification feature in PHP before 5.6.26 and 7.x before 7.0.11 does not ensure that the uncompressed_filesize field is large enough, which a… |
CVE-2016-7412 | High | 8.1 | 2016-09-17 | ext/mysqlnd/mysqlnd_wireprotocol.c in PHP before 5.6.26 and 7.x before 7.0.11 does not verify that a BIT field has the UNSIGNED_FLAG flag, which allows remote… |
CVE-2016-7411 | Critical | 9.8 | 2016-09-17 | ext/standard/var_unserializer.re in PHP before 5.6.26 mishandles object-deserialization failures, which allows remote attackers to cause a denial of service (m… |
CVE-2016-6937 | Critical | 9.8 | 2016-09-17 | Adobe Reader and Acrobat before 11.0.17, Acrobat and Acrobat Reader DC Classic before 15.006.30198, and Acrobat and Acrobat Reader DC Continuous before 15.017… |
CVE-2016-4262 | Critical | 9.8 | 2016-09-16 | Adobe Digital Editions before 4.5.2 allows attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors, a diff… |
CVE-2016-4261 | Critical | 9.8 | 2016-09-16 | Adobe Digital Editions before 4.5.2 allows attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors, a diff… |
CVE-2016-4260 | Critical | 9.8 | 2016-09-16 | Adobe Digital Editions before 4.5.2 allows attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors, a diff… |
CVE-2016-4259 | Critical | 9.8 | 2016-09-16 | Adobe Digital Editions before 4.5.2 allows attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors, a diff… |
CVE-2016-4258 | Critical | 9.8 | 2016-09-16 | Adobe Digital Editions before 4.5.2 allows attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors, a diff… |
CVE-2016-4257 | Critical | 9.8 | 2016-09-16 | Adobe Digital Editions before 4.5.2 allows attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors, a diff… |
CVE-2016-4256 | Critical | 9.8 | 2016-09-16 | Adobe Digital Editions before 4.5.2 allows attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors, a diff… |
CVE-2016-3381 | High | 7.8 | 2016-09-14 | Microsoft Excel 2007 SP3, Excel 2010 SP2, Excel 2013 SP1, Excel 2013 RT SP1, Excel 2016, Office Compatibility Pack SP3, and Excel Viewer allow remote attackers… |
CVE-2016-3377 | High | 7.5 | 2016-09-14 | The Chakra JavaScript engine in Microsoft Edge allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted… |
CVE-2016-3375 | High | 7.5 | 2016-09-14 | The OLE Automation mechanism and VBScript scripting engine in Microsoft Internet Explorer 9 through 11, Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1… |
CVE-2016-3369 | High | 7.5 | 2016-09-14 | Microsoft Windows 10 Gold and 1511 allows attackers to cause a denial of service via unspecified vectors, aka "Windows Denial of Service Vulnerability." |
CVE-2016-3368 | High | 8.8 | 2016-09-14 | Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2012 Gold and R2, Windows RT 8.1, and Windows 10 Go… |
CVE-2016-3367 | High | 8.8 | 2016-09-14 | StringBuilder in Microsoft Silverlight 5 before 5.1.50709.0 does not properly allocate memory for string-insert and string-append operations, which allows remo… |
CVE-2016-3365 | High | 7.8 | 2016-09-14 | Microsoft Excel 2007 SP3, Excel 2010 SP2, Excel 2013 SP1, Excel 2013 RT SP1, Excel 2016, Office Compatibility Pack SP3, Excel Viewer, Excel Services on SharePo… |
CVE-2016-3364 | High | 7.8 | 2016-09-14 | Microsoft Visio 2016 allows remote attackers to execute arbitrary code via a crafted document, aka "Microsoft Office Memory Corruption Vulnerability." |
CVE-2016-3363 | High | 7.8 | 2016-09-14 | Microsoft Excel 2007 SP3, Excel 2010 SP2, Excel 2013 SP1, Excel 2013 RT SP1, Excel 2016, Office Compatibility Pack SP3, and Excel Viewer allow remote attackers… |
CVE-2016-3362 | High | 7.8 | 2016-09-14 | Microsoft Excel 2007 SP3, Excel 2010 SP2, Excel 2013 SP1, Excel 2013 RT SP1, Excel 2016, Office Compatibility Pack SP3, Excel Viewer, Excel Services on SharePo… |
CVE-2016-3361 | High | 7.8 | 2016-09-14 | Microsoft Excel 2010 SP2 allows remote attackers to execute arbitrary code via a crafted document, aka "Microsoft Office Memory Corruption Vulnerability." |
CVE-2016-3360 | High | 7.8 | 2016-09-14 | Microsoft PowerPoint 2007 SP3, PowerPoint 2010 SP2, PowerPoint 2013 SP1, PowerPoint 2013 RT SP1, PowerPoint 2016 for Mac, Office Compatibility Pack SP3, PowerP… |
CVE-2016-3359 | High | 7.8 | 2016-09-14 | Microsoft Excel 2007 SP3, Excel 2010 SP2, Office Compatibility Pack SP3, and Excel Viewer allow remote attackers to execute arbitrary code via a crafted docume… |
CVE-2016-3358 | High | 7.8 | 2016-09-14 | Microsoft Excel 2007 SP3, Excel 2010 SP2, Excel 2013 SP1, Excel 2013 RT SP1, Excel 2016, Excel 2016 for Mac, Office Compatibility Pack SP3, Excel Viewer, Excel… |
CVE-2016-3357 | High | 7.8 | 2016-09-14 | Microsoft Office 2007 SP3, Office 2010 SP2, Office 2013 SP1, Office 2013 RT SP1, Office 2016, Word for Mac 2011, Word 2016 for Mac, Word Viewer, Word Automatio… |
CVE-2016-3356 | High | 7.8 | 2016-09-14 | The Graphics Device Interface (GDI) in Microsoft Windows 10 1607 allows remote attackers to execute arbitrary code via a crafted document, aka "GDI Remote Code… |
CVE-2016-3350 | High | 7.5 | 2016-09-14 | The Chakra JavaScript engine in Microsoft Edge allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted… |
CVE-2016-3330 | High | 7.5 | 2016-09-14 | Microsoft Edge allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web site, aka "Microsoft Edge M… |
CVE-2016-3295 | High | 7.5 | 2016-09-14 | Microsoft Internet Explorer 10 and 11 and Microsoft Edge allow remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via… |
CVE-2016-3294 | High | 7.5 | 2016-09-14 | Microsoft Edge allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web site, aka "Microsoft Edge M… |
CVE-2016-7134 | Critical | 9.8 | 2016-09-12 | ext/curl/interface.c in PHP 7.x before 7.0.10 does not work around a libcurl integer overflow, which allows remote attackers to cause a denial of service (allo… |
CVE-2016-3881 | Medium | 5.5 | 2016-09-11 | The decoder_peek_si_internal function in vp9/vp9_dx_iface.c in libvpx in mediaserver in Android 4.x before 4.4.4, 5.0.x before 5.0.2, 5.1.x before 5.1.1, 6.x b… |