CWE-122 · Heap-based Buffer Overflow (page 2)
Page 2 of 33 — CVEs classified under CWE-122, newest first, with CVSS severity and publication dates.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2026-79393 | High | 7.5 | 2026-09-11 | A heap-based buffer overflow vulnerability in the WS-Addressing Action transformation function in the Sofia IPC daemon in Xiongmai IP Camera XM530 firmware HMT… |
CVE-2026-18495 | Medium | 6.1 | 2026-09-11 | A flaw was found in libtiff. A heap-buffer overflow vulnerability exists in the `tiff2pdf` utility due to an integer truncation error when processing crafted B… |
CVE-2026-79591 | High | 7.8 | 2026-09-10 | A heap-buffer-overflow and use-after-free vulnerability exists in the xls_getCSS() function of libxls 1.6.3 due to insufficient validation of a file-controlled… |
CVE-2026-45761 | Low | 3.3 | 2026-09-10 | Suricata is a network Intrusion Detection System, Intrusion Prevention System and Network Security Monitoring engine. Prior to versions 7.0.16 and 8.0.5, a cra… |
CVE-2026-44950 | Critical | 9.0 | 2026-09-10 | fs_read_glyphs() in the libXfont2 font-server client (src/fc/fserve.c) copies each glyph's bitmap into a single buffer. Existing checks validates only that the… |
CVE-2026-42807 | High | 8.0 | 2026-09-10 | A heap-based buffer overflow vulnerability in the PC bridge protocol decoder of BoschSensortec COINES_SDK (versions 2.10 through 2.12.2) allows attackers to ca… |
CVE-2026-85103 | Critical | 9.8 | 2026-09-09 | A heap-based buffer overflow in VPN certificate ASN.1 decoding may allow an unauthenticated remote attacker to execute arbitrary code on Check Point Quantum Se… |
CVE-2026-21104 | Medium | 6.7 | 2026-09-09 | Heap-based buffer overflow in KnoxVault trustlet prior to SMR Sep-2026 Release 1 allows local privileged attackers to execute arbitrary code. |
CVE-2026-21096 | Critical | 9.8 | 2026-09-09 | Heap-based buffer overflow in JPEG decoder of libimagecodec.quram.so prior to SMR Sep-2026 Release 1 allows remote attackers to execute arbitrary code. |
CVE-2026-21095 | Critical | 9.8 | 2026-09-09 | Heap-based buffer overflow in DNG decoder of libimagecodec.quram.so prior to SMR Sep-2026 Release 1 allows remote attackers to execute arbitrary code. |
CVE-2026-87654 | Critical | 9.6 | 2026-09-09 | Buffer overflow in ANGLE in Google Chrome on on Windows prior to 153.0.8010.36 allowed a remote attacker to execute arbitrary code outside the sandbox via a cr… |
CVE-2026-87579 | High | 8.8 | 2026-09-09 | Buffer overflow in WebRTC in Google Chrome prior to 153.0.8010.36 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML pag… |
CVE-2026-87527 | Critical | 9.6 | 2026-09-09 | Buffer overflow in WebGL in Google Chrome prior to 153.0.8010.36 allowed a remote attacker to execute arbitrary code outside the sandbox via a crafted HTML pag… |
CVE-2026-87430 | High | 8.8 | 2026-09-09 | Buffer overflow in WebRTC in Google Chrome prior to 153.0.8010.36 allowed a remote attacker to potentially execute arbitrary code inside the sandbox via a craf… |
CVE-2026-53938 | High | 8.2 | 2026-09-09 | OpenIDC/cjose is a C library implementing the Javascript Object Signing and Encryption (JOSE). Prior to version 0.6.2.5, cjose's JWE decryption path for the AE… |
CVE-2026-81993 | Medium | 5.5 | 2026-09-08 | Acrobat Reader is affected by a Heap-based Buffer Overflow vulnerability that could lead to disclosure of sensitive memory. An attacker could leverage this vul… |
CVE-2026-81992 | High | 7.8 | 2026-09-08 | Acrobat Reader is affected by a Heap-based Buffer Overflow vulnerability that could result in arbitrary code execution in the context of the current user. Expl… |
CVE-2026-82006 | High | 7.8 | 2026-09-08 | Photoshop Desktop is affected by a Heap-based Buffer Overflow vulnerability that could result in arbitrary code execution in the context of the current user. E… |
CVE-2026-86716 | High | 7.3 | 2026-09-08 | A vulnerability was determined in Cesanta mJS up to 1.26. Affected is the function skip_spaces_and_comments of the file src/mjs_tok.c. Executing a manipulation… |
CVE-2026-58820 | High | 7.8 | 2026-09-08 | In multiple locations, there is a possible memory safety issue due to integer overflow. This could lead to local escalation of privilege with no additional exe… |
CVE-2026-55294 | High | 7.8 | 2026-09-08 | In ihevcd_get_tu_data_size of ihevcd_utils.c, there is a possible out of bounds write due to a heap buffer overflow. This could lead to local escalation of pri… |
CVE-2026-49932 | High | 7.8 | 2026-09-08 | In parseParts of PduParser.java, there is a possible out of bounds read due to a heap buffer overflow. This could lead to local escalation of privilege with no… |
CVE-2026-49921 | Critical | 9.8 | 2026-09-08 | In multiple locations, there is a possible memory safety issue due to a heap buffer overflow. This could lead to remote code execution with no additional execu… |
CVE-2026-49882 | High | 8.8 | 2026-09-08 | In rw_mfc_handle_read_op of rw_mfc.cc, there is a possible memory safety issue due to a heap buffer overflow. This could lead to remote code execution with no… |
CVE-2026-45531 | High | 7.8 | 2026-09-08 | In read_boot_region of fsck.c, there is a possible out of bounds read due to a heap buffer overflow. This could lead to local escalation of privilege with no a… |
CVE-2026-45515 | High | 7.8 | 2026-09-08 | In a2dp_vendor_opus_decoder_decode_packet of a2dp_vendor_opus_decoder.cc, there is a possible out of bounds write due to a heap buffer overflow. This could lea… |
CVE-2026-28662 | High | 8.0 | 2026-09-08 | In p2p_process_prov_disc_bootstrap_req of p2p_pd.c, there is a possible out of bounds write due to a heap buffer overflow. This could lead to remote (proximal/… |
CVE-2026-28618 | High | 8.8 | 2026-09-08 | In dec_frm_prepare of oapv.c, there is a possible OOB write due to a heap buffer overflow. This could lead to remote code execution with no additional executio… |
CVE-2026-85880 | High | 7.8 | 2026-09-08 | Heap-based buffer overflow in Windows ALPC allows an authorized attacker to elevate privileges locally. |
CVE-2026-85877 | High | 8.8 | 2026-09-08 | Heap-based buffer overflow in Windows Print Spooler Components allows an unauthorized attacker to execute code over a network. |
CVE-2026-84000 | High | 7.8 | 2026-09-08 | Heap-based buffer overflow in Microsoft Graphics Component allows an authorized attacker to execute code locally. |
CVE-2026-83998 | High | 8.8 | 2026-09-08 | Heap-based buffer overflow in Remote Desktop Client allows an unauthorized attacker to execute code over a network. |
CVE-2026-83996 | High | 8.8 | 2026-09-08 | Heap-based buffer overflow in Windows Error Reporting allows an authorized attacker to elevate privileges locally. |
CVE-2026-83995 | High | 7.8 | 2026-09-08 | Heap-based buffer overflow in Windows NTFS allows an authorized attacker to elevate privileges locally. |
CVE-2026-83992 | High | 8.8 | 2026-09-08 | Heap-based buffer overflow in Windows Imaging Component allows an unauthorized attacker to execute code over a network. |
CVE-2026-83988 | High | 7.8 | 2026-09-08 | Heap-based buffer overflow in Windows Biometric Service allows an authorized attacker to elevate privileges locally. |
CVE-2026-83987 | High | 7.8 | 2026-09-08 | Heap-based buffer overflow in Windows Biometric Service allows an authorized attacker to elevate privileges locally. |
CVE-2026-83986 | High | 7.8 | 2026-09-08 | Heap-based buffer overflow in Windows Biometric Service allows an authorized attacker to elevate privileges locally. |
CVE-2026-83985 | High | 7.8 | 2026-09-08 | Heap-based buffer overflow in Windows Biometric Service allows an authorized attacker to elevate privileges locally. |
CVE-2026-83983 | High | 7.8 | 2026-09-08 | Heap-based buffer overflow in Windows Biometric Service allows an authorized attacker to elevate privileges locally. |
CVE-2026-83982 | High | 7.8 | 2026-09-08 | Heap-based buffer overflow in Windows Biometric Service allows an authorized attacker to elevate privileges locally. |
CVE-2026-83981 | High | 7.8 | 2026-09-08 | Heap-based buffer overflow in Windows Biometric Service allows an authorized attacker to elevate privileges locally. |
CVE-2026-83980 | High | 7.8 | 2026-09-08 | Heap-based buffer overflow in Windows Biometric Service allows an authorized attacker to elevate privileges locally. |
CVE-2026-83978 | High | 7.8 | 2026-09-08 | Heap-based buffer overflow in Windows Biometric Service allows an authorized attacker to elevate privileges locally. |
CVE-2026-83977 | High | 7.8 | 2026-09-08 | Heap-based buffer overflow in Windows Biometric Service allows an authorized attacker to elevate privileges locally. |
CVE-2026-83976 | High | 7.8 | 2026-09-08 | Heap-based buffer overflow in Windows Biometric Service allows an authorized attacker to elevate privileges locally. |
CVE-2026-83975 | High | 7.8 | 2026-09-08 | Heap-based buffer overflow in Windows Biometric Service allows an authorized attacker to elevate privileges locally. |
CVE-2026-83974 | High | 7.8 | 2026-09-08 | Heap-based buffer overflow in Windows Biometric Service allows an authorized attacker to elevate privileges locally. |
CVE-2026-83973 | High | 7.8 | 2026-09-08 | Heap-based buffer overflow in Windows Biometric Service allows an authorized attacker to elevate privileges locally. |
CVE-2026-83972 | High | 7.8 | 2026-09-08 | Heap-based buffer overflow in Windows Biometric Service allows an authorized attacker to elevate privileges locally. |
CVE-2026-83971 | High | 7.8 | 2026-09-08 | Heap-based buffer overflow in Windows Biometric Service allows an authorized attacker to elevate privileges locally. |
CVE-2026-83970 | High | 7.8 | 2026-09-08 | Heap-based buffer overflow in Windows Biometric Service allows an authorized attacker to elevate privileges locally. |
CVE-2026-83969 | High | 7.8 | 2026-09-08 | Heap-based buffer overflow in Windows Biometric Service allows an authorized attacker to elevate privileges locally. |
CVE-2026-83967 | High | 7.8 | 2026-09-08 | Heap-based buffer overflow in Windows Biometric Service allows an authorized attacker to elevate privileges locally. |
CVE-2026-83955 | High | 7.8 | 2026-09-08 | Heap-based buffer overflow in Windows Biometric Service allows an authorized attacker to elevate privileges locally. |
CVE-2026-83954 | High | 7.8 | 2026-09-08 | Heap-based buffer overflow in Windows Biometric Service allows an authorized attacker to elevate privileges locally. |
CVE-2026-83952 | High | 7.8 | 2026-09-08 | Heap-based buffer overflow in Windows Resilient File System (ReFS) allows an authorized attacker to elevate privileges locally. |
CVE-2026-81960 | High | 7.8 | 2026-09-08 | Heap-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code locally. |
CVE-2026-81959 | High | 7.8 | 2026-09-08 | Heap-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code locally. |
CVE-2026-81955 | High | 8.8 | 2026-09-08 | Heap-based buffer overflow in Microsoft Graphics Component allows an unauthorized attacker to execute code over a network. |
CVE-2026-81952 | High | 8.8 | 2026-09-08 | Heap-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code over a network. |
CVE-2026-81951 | High | 7.8 | 2026-09-08 | Heap-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code locally. |
CVE-2026-81948 | High | 7.8 | 2026-09-08 | Heap-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code locally. |
CVE-2026-81947 | High | 7.8 | 2026-09-08 | Heap-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code locally. |
CVE-2026-81398 | High | 7.8 | 2026-09-08 | Heap-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code locally. |
CVE-2026-81397 | High | 7.8 | 2026-09-08 | Heap-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code locally. |
CVE-2026-81389 | High | 7.0 | 2026-09-08 | Heap-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code locally. |
CVE-2026-81386 | High | 7.8 | 2026-09-08 | Heap-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code locally. |
CVE-2026-81355 | High | 7.5 | 2026-09-08 | Heap-based buffer overflow in Virtual Hard Disk (VHD) Miniport Driver allows an authorized attacker to execute code locally. |
CVE-2026-81354 | High | 8.2 | 2026-09-08 | Heap-based buffer overflow in Windows Hello allows an authorized attacker to elevate privileges locally. |
CVE-2026-81353 | High | 7.8 | 2026-09-08 | Heap-based buffer overflow in Microsoft Windows Codecs Library allows an unauthorized attacker to execute code locally. |
CVE-2026-81352 | High | 8.8 | 2026-09-08 | Heap-based buffer overflow in Microsoft Windows Codecs Library allows an unauthorized attacker to execute code over a network. |
CVE-2026-80087 | Medium | 6.5 | 2026-09-08 | Heap-based buffer overflow in Microsoft Office allows an unauthorized attacker to disclose information over a network. |
CVE-2026-80085 | High | 8.8 | 2026-09-08 | Heap-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code over a network. |
CVE-2026-80077 | High | 8.8 | 2026-09-08 | Heap-based buffer overflow in Remote Desktop Client allows an unauthorized attacker to execute code over a network. |
CVE-2026-80075 | High | 7.8 | 2026-09-08 | Heap-based buffer overflow in Windows Work Folders allows an authorized attacker to elevate privileges locally. |
CVE-2026-80074 | High | 8.8 | 2026-09-08 | Heap-based buffer overflow in Remote Desktop Client allows an unauthorized attacker to execute code over a network. |
CVE-2026-78526 | High | 8.8 | 2026-09-08 | Heap-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code over a network. |
CVE-2026-78521 | High | 8.8 | 2026-09-08 | Heap-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code over a network. |
CVE-2026-78517 | High | 8.8 | 2026-09-08 | Heap-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code over a network. |
CVE-2026-78512 | High | 8.8 | 2026-09-08 | Numeric truncation error in Microsoft Office Word allows an unauthorized attacker to execute code over a network. |
CVE-2026-78511 | High | 8.8 | 2026-09-08 | Heap-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code over a network. |
CVE-2026-78510 | High | 8.4 | 2026-09-08 | Heap-based buffer overflow in Microsoft Office allows an unauthorized attacker to execute code locally. |
CVE-2026-78509 | Critical | 9.8 | 2026-09-08 | Heap-based buffer overflow in Microsoft Office Outlook allows an unauthorized attacker to execute code over a network. |
CVE-2026-78505 | High | 8.8 | 2026-09-08 | Heap-based buffer overflow in Microsoft Office allows an unauthorized attacker to execute code over a network. |
CVE-2026-78456 | High | 8.8 | 2026-09-08 | Heap-based buffer overflow in SQL Server allows an authorized attacker to execute code over a network. |
CVE-2026-78448 | High | 7.8 | 2026-09-08 | Heap-based buffer overflow in Windows Biometric Service allows an authorized attacker to elevate privileges locally. |
CVE-2026-78447 | High | 7.8 | 2026-09-08 | Heap-based buffer overflow in Windows Biometric Service allows an authorized attacker to elevate privileges locally. |
CVE-2026-78442 | High | 8.8 | 2026-09-08 | Heap-based buffer overflow in Windows OLE DB allows an unauthorized attacker to execute code over a network. |
CVE-2026-77907 | High | 8.8 | 2026-09-08 | Heap-based buffer overflow in Visual Studio allows an unauthorized attacker to execute code over a network. |
CVE-2026-77906 | High | 8.8 | 2026-09-08 | Heap-based buffer overflow in Visual Studio allows an unauthorized attacker to execute code over a network. |
CVE-2026-77904 | High | 7.8 | 2026-09-08 | Heap-based buffer overflow in Windows Volume Manager Extension Driver allows an authorized attacker to elevate privileges locally. |
CVE-2026-77898 | High | 7.5 | 2026-09-08 | Heap-based buffer overflow in Microsoft Office allows an unauthorized attacker to execute code over a network. |
CVE-2026-77495 | High | 8.8 | 2026-09-08 | Heap-based buffer overflow in Windows Imaging Component allows an unauthorized attacker to execute code over a network. |
CVE-2026-77486 | High | 8.8 | 2026-09-08 | Integer overflow or wraparound in SQL Server allows an unauthorized attacker to execute code over a network. |
CVE-2026-77482 | High | 8.8 | 2026-09-08 | Heap-based buffer overflow in SQL Server allows an unauthorized attacker to execute code over a network. |
CVE-2026-77481 | High | 8.8 | 2026-09-08 | Heap-based buffer overflow in SQL Server allows an authorized attacker to execute code over a network. |
CVE-2026-73026 | High | 7.8 | 2026-09-08 | Heap-based buffer overflow in Windows Biometric Service allows an authorized attacker to elevate privileges locally. |
CVE-2026-73024 | High | 7.8 | 2026-09-08 | Heap-based buffer overflow in Windows Services for NFS ONCRPC XDR Driver allows an authorized attacker to elevate privileges locally. |
CVE-2026-73023 | High | 8.8 | 2026-09-08 | Heap-based buffer overflow in Windows Imaging Component allows an unauthorized attacker to execute code over a network. |