CWE-121 · Stack-based Buffer Overflow (page 2)
Page 2 of 39 — CVEs classified under CWE-121, newest first, with CVSS severity and publication dates.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2026-85384 | | 2026-09-08 | A stack-based buffer overflow vulnerability exists in the httpd component of RE210 AC750 due to improper bounds checking in the splitString function when proce… | |
CVE-2026-9216 | Low | 3.5 | 2026-09-08 | An insufficient input validation vulnerability in the listed NETGEAR RAX series models allows a network-adjacent attacker having network access (such as WiFi c… |
CVE-2026-83990 | High | 7.8 | 2026-09-08 | Stack-based buffer overflow in Microsoft Graphics Component allows an authorized attacker to elevate privileges locally. |
CVE-2026-81953 | High | 7.8 | 2026-09-08 | Stack-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code locally. |
CVE-2026-81396 | High | 7.8 | 2026-09-08 | Stack-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code locally. |
CVE-2026-81388 | High | 7.8 | 2026-09-08 | Stack-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code locally. |
CVE-2026-78504 | High | 8.8 | 2026-09-08 | Stack-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code over a network. |
CVE-2026-78439 | High | 8.8 | 2026-09-08 | Stack-based buffer overflow in Microsoft Graphics Component allows an unauthorized attacker to execute code over a network. |
CVE-2026-73006 | High | 8.8 | 2026-09-08 | Stack-based buffer overflow in Microsoft Graphics Component allows an unauthorized attacker to execute code over a network. |
CVE-2026-72982 | Critical | 9.8 | 2026-09-08 | Stack-based buffer overflow in Windows Netlogon allows an unauthorized attacker to execute code over a network. |
CVE-2026-71337 | High | 7.8 | 2026-09-08 | Stack-based buffer overflow in Windows Storage Management Provider allows an authorized attacker to elevate privileges locally. |
CVE-2026-69910 | Critical | 9.8 | 2026-09-08 | Stack-based buffer overflow in Windows Hyper-V allows an unauthorized attacker to execute code over a network. |
CVE-2026-69762 | High | 8.0 | 2026-09-08 | Stack-based buffer overflow in Windows Win32K allows an authorized attacker to elevate privileges over a network. |
CVE-2026-69759 | High | 8.8 | 2026-09-08 | Stack-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code over a network. |
CVE-2026-69722 | High | 8.8 | 2026-09-08 | Stack-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code over a network. |
CVE-2026-69714 | High | 8.0 | 2026-09-08 | Stack-based buffer overflow in Windows Device Association Service allows an authorized attacker to elevate privileges over a network. |
CVE-2026-69689 | High | 8.0 | 2026-09-08 | Out-of-bounds read in Windows Win32K allows an authorized attacker to elevate privileges over a network. |
CVE-2026-69686 | High | 8.8 | 2026-09-08 | Stack-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code over a network. |
CVE-2026-69620 | High | 8.1 | 2026-09-08 | Stack-based buffer overflow in Windows DHCP Server allows an unauthorized attacker to execute code over a network. |
CVE-2026-69614 | High | 8.8 | 2026-09-08 | Stack-based buffer overflow in Microsoft Office Access allows an unauthorized attacker to execute code over a network. |
CVE-2026-69510 | High | 8.1 | 2026-09-08 | Stack-based buffer overflow in Windows DHCP Server allows an unauthorized attacker to execute code over a network. |
CVE-2026-69508 | High | 7.8 | 2026-09-08 | Stack-based buffer overflow in Windows MIDI Service Module allows an authorized attacker to elevate privileges locally. |
CVE-2026-69503 | High | 8.0 | 2026-09-08 | Stack-based buffer overflow in Windows USB Driver allows an authorized attacker to elevate privileges over a network. |
CVE-2026-69467 | High | 7.8 | 2026-09-08 | Stack-based buffer overflow in Microsoft Graphics Component allows an authorized attacker to elevate privileges locally. |
CVE-2026-69461 | High | 8.8 | 2026-09-08 | Stack-based buffer overflow in Windows NTFS allows an unauthorized attacker to execute code over a network. |
CVE-2026-69412 | High | 8.0 | 2026-09-08 | Stack-based buffer overflow in Windows DHCP Server allows an authorized attacker to execute code over an adjacent network. |
CVE-2026-69391 | High | 7.8 | 2026-09-08 | Stack-based buffer overflow in Windows Broker Infrastructure Service allows an authorized attacker to elevate privileges locally. |
CVE-2026-69301 | High | 8.0 | 2026-09-08 | Stack-based buffer overflow in Windows Win32K allows an authorized attacker to elevate privileges over a network. |
CVE-2026-69290 | High | 7.8 | 2026-09-08 | Stack-based buffer overflow in Windows Storage Spaces Controller allows an authorized attacker to elevate privileges locally. |
CVE-2026-69277 | High | 7.8 | 2026-09-08 | Stack-based buffer overflow in Microsoft Local Security Authority Server (lsasrv) allows an authorized attacker to elevate privileges locally. |
CVE-2026-68878 | High | 8.0 | 2026-09-08 | Stack-based buffer overflow in Windows Fast FAT Driver allows an authorized attacker to elevate privileges over a network. |
CVE-2026-68838 | High | 8.0 | 2026-09-08 | Stack-based buffer overflow in Windows NTFS allows an authorized attacker to elevate privileges over a network. |
CVE-2026-68834 | High | 8.0 | 2026-09-08 | Stack-based buffer overflow in Windows NTFS allows an authorized attacker to elevate privileges over a network. |
CVE-2026-67379 | High | 8.5 | 2026-09-08 | Stack-based buffer overflow in SQL Server allows an authorized attacker to execute code over a network. |
CVE-2026-62706 | High | 8.8 | 2026-09-08 | Out-of-bounds read in Microsoft Windows Media Foundation allows an unauthorized attacker to execute code over a network. |
CVE-2026-77101 | High | 7.5 | 2026-09-08 | CommServe contained a stack-based buffer overflow issue affecting service availability. Software customers upgrade to resolved maintenance release. Update Comm… |
CVE-2026-86514 | Medium | 6.3 | 2026-09-08 | A weakness has been identified in vgmstream up to r2117. This issue affects the function sscanf of the file src/meta/txth.c of the component txth-txtp. This ma… |
CVE-2026-86509 | Critical | 9.6 | 2026-09-08 | A flaw has been found in D-Link DIR-895L A1_102b07. This impacts the function sendOffer/sendACK of the file udhcpcd/serverpacket.c of the component udhcpcd. Th… |
CVE-2026-86318 | Medium | 5.3 | 2026-09-07 | A flaw has been found in java-json-tools json-patch up to 1.13. Affected is the function JsonMergePatch.fromJson of the file JsonMergePatchDeserializer.java. E… |
CVE-2026-86296 | Critical | 10.0 | 2026-09-07 | A vulnerability was determined in D-Link DIR-822A A_101. This vulnerability affects the function strcpy of the file udhcpcd/serverpacket.c of the component udh… |
CVE-2026-81738 | | 2026-09-07 | OpenVPN 2.5.0 through 2.7.6 on Windows using the tap-windows6 driver allows attackers to trigger an out-of-bounds write via crafted DOMAIN-SEARCH entries | |
CVE-2026-20509 | Medium | 6.7 | 2026-09-07 | In Power HAL, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege if a malicious actor has… |
CVE-2026-86140 | High | 8.0 | 2026-09-05 | In libxml2 before 2.15.4, xmlSnprintfElements in valid.c has a strcat stack-based buffer overflow. |
CVE-2026-57166 | Medium | 5.3 | 2026-09-04 | PJSIP is a free and open source multimedia communication library written in C. Prior to commit 4472a31, a stack buffer overflow exists in the PJLIB-UTIL telnet… |
CVE-2026-57165 | Medium | 5.3 | 2026-09-04 | PJSIP is a free and open source multimedia communication library written in C. Prior to commit 628b716, a stack buffer overflow exists in the PJLIB-UTIL telnet… |
CVE-2026-57163 | Critical | 9.1 | 2026-09-04 | PJSIP is a free and open source multimedia communication library written in C. Prior to commit c4a151a, a stack buffer overflow exists in the GnuTLS TLS backen… |
CVE-2026-57162 | Critical | 9.1 | 2026-09-04 | PJSIP is a free and open source multimedia communication library written in C. Prior to commit a1b707c, a stack buffer overflow exists in the SRTP/SDES media t… |
CVE-2026-57161 | High | 8.2 | 2026-09-04 | PJSIP is a free and open source multimedia communication library written in C. Prior to commit acc03b5, a stack buffer overflow exists in PJSUA when processing… |
CVE-2026-17270 | Medium | 4.3 | 2026-09-04 | IBM i 7.6, 7.5, 7.4, and 7.3 could allow a local attacker to cause a denial of service due to a stack-based buffer overflow. |
CVE-2026-17259 | Medium | 4.3 | 2026-09-04 | IBM i 7.6, 7.5, 7.4, and 7.3 could allow a remote authenticated attacker to cause a denial of service due to a stack-based buffer overflow. |
CVE-2026-85509 | Critical | 9.8 | 2026-09-04 | FreeIPMI before 1.6.19 has a stack-based buffer overflow in _read_fru_data in libfreeipmi/fru/ipmi-fru.c when a BMC returns more bytes than requested. |
CVE-2026-85508 | Critical | 9.8 | 2026-09-04 | ipmi-oem in FreeIPMI before 1.6.19 has a stack-based buffer overflow in _output_dell_system_info_cmc_ipv6_info in ipmi-oem/ipmi-oem-dell.c (cmc-ipv6-info subco… |
CVE-2026-85507 | Critical | 9.8 | 2026-09-04 | ipmi-oem in FreeIPMI before 1.6.19 has a stack-based buffer overflow in _output_dell_system_info_cmc_info in ipmi-oem/ipmi-oem-dell.c (cmc-info subcommand to d… |
CVE-2026-85506 | Critical | 9.8 | 2026-09-04 | ipmi-oem in FreeIPMI before 1.6.19 has a stack-based buffer overflow in _get_dell_system_info_idrac_info in ipmi-oem/ipmi-oem-dell.c (idrac-info subcommand to… |
CVE-2026-85504 | Critical | 9.8 | 2026-09-04 | FreeIPMI before 1.6.19 has a stack-based buffer overflow in _ipmi_sel_oem_fujitsu_get_sel_entry_long_text in libfreeipmi/sel/ipmi-sel-string-fujitsu-irmc-commo… |
CVE-2026-18167 | | 2026-09-03 | A stack-based buffer overflow vulnerability exists in the EasyMesh module of TP-Link Archer AX55 v4. When Mesh mode is enabled, a LAN attacker may submit craft… | |
CVE-2026-73600 | High | 7.8 | 2026-09-03 | Dell PowerProtect Data Manager, versions 20.2.0.0 and below, contain a stack buffer overflow vulnerability in file-level restore agent. A high privileged remot… |
CVE-2023-20577 | High | 7.4 | 2026-09-02 | A heap overflow in SMM module may allow an attacker with access to a second vulnerability that enables writing to SPI flash, potentially resulting in arbitrary… |
CVE-2026-84351 | High | 8.3 | 2026-09-02 | Buffer overflow in GPU in Google Chrome on on Windows prior to 152.0.7977.75 allowed a remote attacker who had compromised the renderer process to execute arbi… |
CVE-2026-73783 | Medium | 4.9 | 2026-09-01 | Stack overflow vulnerabilities exist in an API endpoint of AOS-CX. Successful exploitation could allow an authenticated malicious actor to cause a denial-of-se… |
CVE-2026-78012 | Critical | 9.8 | 2026-09-01 | An issue in the NetStaX EtherNet/IP Stack prior to v5.6.1 could allow a large Class 3 explicit-message request to exceed the application-side receive buffer wi… |
CVE-2026-12661 | | 2026-09-01 | A denial-of-service security issue exists within FactoryTalk® Historian Machine Edition. A network adjacent attacker who is authenticated could send crafted r… | |
CVE-2026-82616 | Critical | 9.9 | 2026-08-31 | A vulnerability was found in TOTOLINK NR1800X 9.1.0u.6681_B20230703. Impacted is the function setUploadSetting of the file /cgi-bin/cstecgi.cgi. The manipulati… |
CVE-2026-82593 | Critical | 9.9 | 2026-08-31 | A flaw has been found in D-Link DIR-825M 1.1.8. This impacts the function sub_41802C of the file /boafrm/formLtefotaUpgradeFibocom of the component LTE Module… |
CVE-2026-82592 | Critical | 9.9 | 2026-08-30 | A vulnerability was detected in D-Link DIR-825M 1.1.8. This affects the function sub_46725C of the file /boafrm/formDiskFormat of the component Disk Formatting… |
CVE-2026-82478 | High | 7.3 | 2026-08-30 | A vulnerability was determined in NASA Trick 19.6.0. This issue affects the function JSONVariableServerThread::parse_request of the file trick_source/sim_servi… |
CVE-2026-81533 | High | 7.1 | 2026-08-28 | An application using the MongoDB BI Connector ODBC Driver may encounter a memory-safety issue when a submitted SQL statement contains an unusually long run of… |
CVE-2026-81532 | High | 8.8 | 2026-08-28 | A user able to submit SQL through an application using the MongoDB Connector for BI ODBC driver can supply a positioned-cursor statement whose cursor name exce… |
CVE-2026-75118 | | 2026-08-28 | A pre-authentication stack-based buffer overflow vulnerability exists in the http_gdpr_decrypt function of TL-MR100 V3.20 due to insufficient bounds checking o… | |
CVE-2026-77218 | Medium | 4.9 | 2026-08-28 | PLANET GS-4210-16P2S V3 firmware before 3.441b260626 contains authenticated stack buffer overflow vulnerabilities in /cgi-bin/dispatcher.cgi. The web_login_fir… |
CVE-2026-77217 | Medium | 4.9 | 2026-08-28 | PLANET GS-4210-16P2S V3 firmware before 3.441b260626 contains authenticated stack buffer overflow and null pointer dereference vulnerabilities in /cgi-bin/disp… |
CVE-2026-75126 | Medium | 4.9 | 2026-08-28 | PLANET GS-4210-16P2S V3 firmware before 3.441b260626 contains multiple authenticated stack buffer overflow vulnerabilities in /cgi-bin/dispatcher.cgi. The foll… |
CVE-2026-78010 | | 2026-08-28 | A stack-based buffer overflow vulnerability in the WatchGuard Fireware OS iked process iallows a remote unauthenticated attacker to create a Denial of Service… | |
CVE-2026-19318 | | 2026-08-28 | A stack-based buffer overflow vulnerability in the WatchGuard Fireware OS iked process allows a remote unauthenticated attacker to execute arbitrary code by se… | |
CVE-2026-13086 | | 2026-08-28 | A stack-based buffer overflow in the epm (Endpoint Protection Manager) service used by the deprecated Mobile Security feature in WatchGuard Fireware OS allows… | |
CVE-2026-67560 | High | 7.5 | 2026-08-28 | Bendix EC80 Brake ECU is vulnerable to a stack-based buffer overflow, which may allow an attacker to crash the ECU. A crafted payload can then be used to re… |
CVE-2026-21807 | Low | 3.9 | 2026-08-26 | HCL BigFix Quantum Risk Analyzer binary lacks several critical, industry-standard hardening protections that could allow an attacker to cause a stack-based buf… |
CVE-2026-68863 | High | 7.5 | 2026-08-26 | Dell PowerProtect One, versions 20.1.0.0 and below, contain a Stack-based Buffer Overflow vulnerability. An unauthenticated attacker with remote access could p… |
CVE-2026-77658 | High | 7.8 | 2026-08-26 | A stack-based buffer overflow vulnerability exists in the Dia diagram editor when processing Network Bus objects from Dia XML project files. In objects/networ… |
CVE-2026-79911 | Critical | 10.0 | 2026-08-25 | A security vulnerability has been detected in TOTOLINK N600R 4.3.0cu.7647_B20210106. The affected element is the function setSystemConfig of the file /cgi-bin/… |
CVE-2026-78910 | High | 8.8 | 2026-08-25 | Buffer overflow in V8 in Google Chrome prior to 152.0.7977.65 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. (… |
CVE-2026-75421 | Medium | 4.0 | 2026-08-25 | aria2 <=1.37.0 has a stack-buffer-underflow vulnerability in the IOFile::getLine() function. |
CVE-2026-48417 | High | 7.8 | 2026-08-25 | Substance3D - Sampler is affected by a Stack-based Buffer Overflow vulnerability that could result in arbitrary code execution in the context of the current us… |
CVE-2026-68960 | High | 8.5 | 2026-08-25 | A stack-based buffer overflow vulnerability exists in SKYSEA Client View and SKYMEC IT Manager. If this vulnerability is exploited, an attacker who can log in… |
CVE-2026-68516 | Medium | 6.5 | 2026-08-24 | OpenEXR is the reference implementation and specification for the EXR image format, widely used in the motion picture industry. From version 3.4.0 through 3.4… |
CVE-2026-75368 | High | 7.5 | 2026-08-24 | A stack overflow in the loadRawData function of SpaceDot AcubeSAT OBC software commit eaf90ec allows attackers to cause a Denial of Service (DoS) via supplying… |
CVE-2025-36939 | Medium | 5.7 | 2026-08-24 | Multiple vulnerabilities exist in OpenThread's handling of MLE packets. An authenticated attacker on the same Thread network could send specially crafted packe… |
CVE-2026-76071 | Critical | 9.8 | 2026-08-24 | Netis NC63 firmware through V3.0.0.3327 contains a stack-based buffer overflow vulnerability that allows unauthenticated remote attackers to overwrite saved st… |
CVE-2026-76070 | Critical | 9.8 | 2026-08-24 | Netis NC63 firmware through V3.0.0.3327 contains a stack-based buffer overflow vulnerability that allows unauthenticated remote attackers to overwrite saved st… |
CVE-2026-78169 | Critical | 9.9 | 2026-08-24 | A vulnerability was detected in UTT HiPER 1250GW up to 3.2.7-210907-180535. This impacts the function strcpy of the file /goform/aspRemoteApConfTempSend of the… |
CVE-2026-78050 | Critical | 9.9 | 2026-08-23 | A vulnerability was found in Comfast CF-N1-S 2.6.0.1. The affected element is the function sub_41AD7C of the file /cgi-bin/mbox-config?method=SET§ion=ntp_t… |
CVE-2026-77946 | Critical | 10.0 | 2026-08-22 | A vulnerability was determined in TRENDnet TEW-821DAP 2.2.01b05. Affected by this vulnerability is the function uci_safe_get of the file /cgi-bin/apply_time.cg… |
CVE-2026-17250 | | 2026-08-21 | A stack-based buffer overflow vulnerability exists in the firmware update functionality of TL-MR6400 v7 due to unsafe processing of attacker-controlled metadat… | |
CVE-2026-17138 | High | 8.1 | 2026-08-20 | IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 could allow a remote attacker to execute arbitrary code due to a stack-based buffer overflow. |
CVE-2026-16945 | High | 7.8 | 2026-08-20 | IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 could allow a local attacker to execute arbitrary code due to a stack-based buffer overflow. |
CVE-2026-43798 | Critical | 9.8 | 2026-08-20 | A single crafted SSH message gives an unauthenticated network attacker an out-of-bounds stack write of attacker-controlled length and content against any appli… |
CVE-2026-77148 | Critical | 9.9 | 2026-08-20 | A vulnerability was found in Comfast CF-N1-S 2.6.0.1. This impacts the function sub_44B50C of the file /cgi-bin/mbox-config?method=SET§ion=ptest_channel of… |
CVE-2026-63387 | High | 7.0 | 2026-08-20 | Libevent is an event notification library. Prior to 2.1.13 and 2.2.2-alpha, libevent has an off-by-one stack buffer overflow in evdns.c when dnsname_to_labels… |
CVE-2026-77022 | Critical | 9.9 | 2026-08-20 | A security flaw has been discovered in Comfast CF-N1-S 2.6.0.1. Affected by this issue is the function sub_44B438 of the file /cgi-bin/mbox-config?method=SET&s… |
CVE-2026-18303 | High | 7.8 | 2026-08-20 | GIMP TIF File Parsing Stack-based Buffer Overflow Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on… |