CWE-122 · Heap-based Buffer Overflow (page 3)

Page 3 of 27 — CVEs classified under CWE-122, newest first, with CVSS severity and publication dates.

All CVEs classified under CWE-122 — newest first (page 3 of 27)
CVE	Severity	Score	Published	Summary
`CVE-2026-57094`	High	`8.8`	2026-07-14	Heap-based buffer overflow in Microsoft Windows Media Foundation allows an unauthorized attacker to execute code over a network.
`CVE-2026-57090`	High	`8.8`	2026-07-14	Heap-based buffer overflow in Microsoft Windows Media Foundation allows an unauthorized attacker to execute code over a network.
`CVE-2026-57087`	High	`8.8`	2026-07-14	Heap-based buffer overflow in Microsoft Windows Media Foundation allows an unauthorized attacker to execute code over a network.
`CVE-2026-56650`	High	`7.8`	2026-07-14	Heap-based buffer overflow in Windows Network File System allows an authorized attacker to elevate privileges locally.
`CVE-2026-56194`	High	`8.8`	2026-07-14	Heap-based buffer overflow in Windows Network File System allows an authorized attacker to elevate privileges over a network.
`CVE-2026-56189`	High	`7.8`	2026-07-14	Heap-based buffer overflow in Microsoft Windows Media Foundation allows an unauthorized attacker to execute code locally.
`CVE-2026-56182`	High	`7.8`	2026-07-14	Integer overflow or wraparound in Windows NTFS allows an authorized attacker to elevate privileges locally.
`CVE-2026-56175`	High	`7.8`	2026-07-14	Heap-based buffer overflow in Windows NTFS allows an authorized attacker to elevate privileges locally.
`CVE-2026-56159`	Critical	`9.8`	2026-07-14	Heap-based buffer overflow in Windows DHCP Server allows an unauthorized attacker to execute code over a network.
`CVE-2026-56156`	High	`7.8`	2026-07-14	Heap-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code locally.
`CVE-2026-55947`	High	`7.8`	2026-07-14	Heap-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code locally.
`CVE-2026-55140`	High	`7.8`	2026-07-14	Heap-based buffer overflow in Microsoft Office allows an unauthorized attacker to execute code locally.
`CVE-2026-55137`	High	`7.8`	2026-07-14	Heap-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code locally.
`CVE-2026-55133`	High	`7.8`	2026-07-14	Heap-based buffer overflow in Microsoft Office OneNote allows an unauthorized attacker to execute code locally.
`CVE-2026-55131`	High	`7.8`	2026-07-14	Heap-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code locally.
`CVE-2026-55130`	High	`7.8`	2026-07-14	Heap-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code locally.
`CVE-2026-55129`	High	`7.8`	2026-07-14	Heap-based buffer overflow in Microsoft Office allows an unauthorized attacker to execute code locally.
`CVE-2026-55127`	High	`7.8`	2026-07-14	Heap-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code locally.
`CVE-2026-55125`	High	`7.8`	2026-07-14	Heap-based buffer overflow in Microsoft Office allows an unauthorized attacker to execute code locally.
`CVE-2026-55123`	High	`7.8`	2026-07-14	Heap-based buffer overflow in Microsoft Office PowerPoint allows an unauthorized attacker to execute code locally.
`CVE-2026-55120`	High	`7.8`	2026-07-14	Heap-based buffer overflow in Microsoft Office PowerPoint allows an unauthorized attacker to execute code locally.
`CVE-2026-55056`	High	`7.8`	2026-07-14	Heap-based buffer overflow in Microsoft Office allows an unauthorized attacker to execute code locally.
`CVE-2026-55053`	High	`7.8`	2026-07-14	Heap-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code locally.
`CVE-2026-55049`	High	`7.8`	2026-07-14	Heap-based buffer overflow in Microsoft Office allows an unauthorized attacker to execute code locally.
`CVE-2026-55048`	High	`7.8`	2026-07-14	Integer overflow or wraparound in Microsoft Office Excel allows an unauthorized attacker to execute code locally.
`CVE-2026-55043`	High	`7.8`	2026-07-14	Heap-based buffer overflow in Microsoft Office PowerPoint allows an unauthorized attacker to execute code locally.
`CVE-2026-55041`	High	`7.8`	2026-07-14	Heap-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code locally.
`CVE-2026-55039`	High	`7.8`	2026-07-14	Integer underflow (wrap or wraparound) in Microsoft Office Excel allows an unauthorized attacker to execute code locally.
`CVE-2026-55037`	High	`7.8`	2026-07-14	Heap-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code locally.
`CVE-2026-55033`	High	`7.8`	2026-07-14	Integer overflow or wraparound in Microsoft Office Word allows an unauthorized attacker to execute code locally.
`CVE-2026-55029`	High	`7.8`	2026-07-14	Heap-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code locally.
`CVE-2026-55017`	High	`7.8`	2026-07-14	Heap-based buffer overflow in Microsoft Office allows an unauthorized attacker to execute code locally.
`CVE-2026-55010`	Critical	`9.8`	2026-07-14	Heap-based buffer overflow in Minecraft Bedrock Dedicated Server allows an unauthorized attacker to execute code over a network.
`CVE-2026-54124`	High	`7.8`	2026-07-14	Integer overflow or wraparound in Windows Terminal allows an unauthorized attacker to execute code locally.
`CVE-2026-54115`	High	`7.8`	2026-07-14	Integer overflow or wraparound in Windows Active Directory allows an authorized attacker to elevate privileges locally.
`CVE-2026-50692`	High	`8.8`	2026-07-14	Heap-based buffer overflow in Desktop Window Manager allows an authorized attacker to elevate privileges locally.
`CVE-2026-50683`	High	`8.0`	2026-07-14	Heap-based buffer overflow in Windows DHCP Server allows an authorized attacker to elevate privileges over an adjacent network.
`CVE-2026-50680`	High	`8.2`	2026-07-14	Heap-based buffer overflow in Windows Hyper-V allows an authorized attacker to elevate privileges locally.
`CVE-2026-50679`	High	`7.8`	2026-07-14	Heap-based buffer overflow in Microsoft Windows Search Component allows an authorized attacker to elevate privileges locally.
`CVE-2026-50670`	High	`8.8`	2026-07-14	Out-of-bounds read in Windows Kernel allows an authorized attacker to elevate privileges locally.
`CVE-2026-50668`	Medium	`6.8`	2026-07-14	Heap-based buffer overflow in Windows NTFS allows an unauthorized attacker to elevate privileges with a physical attack.
`CVE-2026-50655`	High	`7.8`	2026-07-14	Heap-based buffer overflow in Windows Media allows an unauthorized attacker to execute code locally.
`CVE-2026-50518`	Critical	`9.8`	2026-07-14	Heap-based buffer overflow in Windows DHCP Server allows an unauthorized attacker to execute code over a network.
`CVE-2026-50499`	High	`7.8`	2026-07-14	Heap-based buffer overflow in Windows Print Spooler Components allows an authorized attacker to elevate privileges locally.
`CVE-2026-50494`	High	`7.8`	2026-07-14	Heap-based buffer overflow in Windows NTFS allows an authorized attacker to execute code locally.
`CVE-2026-50492`	Medium	`6.8`	2026-07-14	Heap-based buffer overflow in Windows Resilient File System (ReFS) allows an unauthorized attacker to execute code with a physical attack.
`CVE-2026-50489`	High	`8.8`	2026-07-14	Heap-based buffer overflow in Windows Win32K allows an authorized attacker to elevate privileges locally.
`CVE-2026-50484`	High	`7.8`	2026-07-14	Heap-based buffer overflow in Windows Kernel allows an authorized attacker to elevate privileges locally.
`CVE-2026-50482`	High	`7.3`	2026-07-14	Heap-based buffer overflow in Windows NTFS allows an authorized attacker to execute code locally.
`CVE-2026-50480`	High	`7.8`	2026-07-14	Heap-based buffer overflow in Windows Web Proxy Auto-Discovery Protocol (WPAD) allows an authorized attacker to elevate privileges locally.
`CVE-2026-50477`	High	`8.8`	2026-07-14	Heap-based buffer overflow in Windows Kernel allows an authorized attacker to elevate privileges locally.
`CVE-2026-50471`	High	`7.8`	2026-07-14	Heap-based buffer overflow in Windows NTFS allows an unauthorized attacker to execute code locally.
`CVE-2026-50461`	High	`7.8`	2026-07-14	Heap-based buffer overflow in Windows NTFS allows an unauthorized attacker to execute code locally.
`CVE-2026-50448`	High	`7.8`	2026-07-14	Heap-based buffer overflow in Windows NTFS allows an unauthorized attacker to execute code locally.
`CVE-2026-50447`	Critical	`9.8`	2026-07-14	Heap-based buffer overflow in Windows Message Queuing allows an unauthorized attacker to execute code over a network.
`CVE-2026-50417`	High	`7.8`	2026-07-14	Heap-based buffer overflow in Windows NTFS allows an authorized attacker to execute code locally.
`CVE-2026-50407`	High	`7.8`	2026-07-14	Heap-based buffer overflow in Windows Resilient File System (ReFS) allows an authorized attacker to elevate privileges locally.
`CVE-2026-50386`	High	`7.8`	2026-07-14	Heap-based buffer overflow in Windows NTFS allows an unauthorized attacker to execute code locally.
`CVE-2026-50380`	Critical	`9.6`	2026-07-14	Heap-based buffer overflow in Windows GDI+ allows an unauthorized attacker to execute code over a network.
`CVE-2026-50375`	Medium	`6.3`	2026-07-14	Heap-based buffer overflow in Windows DirectX allows an authorized attacker to elevate privileges locally.
`CVE-2026-50372`	High	`7.0`	2026-07-14	Buffer over-read in Windows Redirected Drive Buffering allows an authorized attacker to elevate privileges locally.
`CVE-2026-50370`	High	`8.8`	2026-07-14	Heap-based buffer overflow in Windows DHCP Server allows an unauthorized attacker to execute code over an adjacent network.
`CVE-2026-50363`	High	`7.8`	2026-07-14	Heap-based buffer overflow in Windows Push Notifications allows an authorized attacker to elevate privileges locally.
`CVE-2026-50362`	High	`7.8`	2026-07-14	Heap-based buffer overflow in Windows Resilient File System (ReFS) allows an unauthorized attacker to execute code locally.
`CVE-2026-50347`	High	`7.8`	2026-07-14	Heap-based buffer overflow in Windows Data dll allows an unauthorized attacker to execute code locally.
`CVE-2026-50336`	High	`7.8`	2026-07-14	Heap-based buffer overflow in Windows Media allows an authorized attacker to elevate privileges locally.
`CVE-2026-50332`	High	`7.8`	2026-07-14	Heap-based buffer overflow in Windows Kernel allows an authorized attacker to elevate privileges locally.
`CVE-2026-50330`	High	`7.5`	2026-07-14	Heap-based buffer overflow in Remote Desktop Client allows an unauthorized attacker to elevate privileges over a network.
`CVE-2026-50327`	High	`7.8`	2026-07-14	Heap-based buffer overflow in Windows Media allows an authorized attacker to execute code locally.
`CVE-2026-50313`	High	`7.8`	2026-07-14	Heap-based buffer overflow in Windows NTFS allows an unauthorized attacker to execute code locally.
`CVE-2026-50309`	High	`7.8`	2026-07-14	Heap-based buffer overflow in Windows NTFS allows an authorized attacker to execute code locally.
`CVE-2026-50301`	High	`7.8`	2026-07-14	Heap-based buffer overflow in Microsoft Office allows an unauthorized attacker to execute code locally.
`CVE-2026-58640`	High	`7.3`	2026-07-14	Heap-based buffer overflow in Windows NTFS allows an authorized attacker to execute code locally.
`CVE-2026-58618`	High	`7.8`	2026-07-14	Heap-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code locally.
`CVE-2026-58610`	High	`7.8`	2026-07-14	Heap-based buffer overflow in Microsoft Windows Media Foundation allows an unauthorized attacker to execute code locally.
`CVE-2026-58601`	High	`7.8`	2026-07-14	Heap-based buffer overflow in Virtual Hard Disk (VHD) Miniport Driver allows an authorized attacker to elevate privileges locally.
`CVE-2026-55012`	High	`7.8`	2026-07-14	Integer overflow or wraparound in Microsoft Defender allows an unauthorized attacker to execute code locally.
`CVE-2026-55005`	High	`8.8`	2026-07-14	Heap-based buffer overflow in Microsoft Exchange Server allows an authorized attacker to execute code over a network.
`CVE-2026-54993`	High	`7.8`	2026-07-14	Heap-based buffer overflow in Microsoft Windows Media Foundation allows an unauthorized attacker to execute code locally.
`CVE-2026-54992`	High	`8.4`	2026-07-14	Heap-based buffer overflow in Windows Message Queuing Queue Manager allows an unauthorized attacker to execute code locally.
`CVE-2026-54990`	Critical	`9.8`	2026-07-14	Heap-based buffer overflow in Remote Desktop Client allows an unauthorized attacker to execute code over a network.
`CVE-2026-54987`	High	`7.8`	2026-07-14	Heap-based buffer overflow in Windows Overlay Filter allows an authorized attacker to elevate privileges locally.
`CVE-2026-54986`	High	`7.8`	2026-07-14	Heap-based buffer overflow in Windows Win32K allows an authorized attacker to elevate privileges locally.
`CVE-2026-54132`	Medium	`6.8`	2026-07-14	Heap-based buffer overflow in Windows Kernel allows an unauthorized attacker to elevate privileges with a physical attack.
`CVE-2026-54122`	High	`8.4`	2026-07-14	Heap-based buffer overflow in Windows GDI+ allows an unauthorized attacker to execute code locally.
`CVE-2026-54109`	High	`7.8`	2026-07-14	Integer overflow or wraparound in Windows Resilient File System (ReFS) allows an authorized attacker to execute code locally.
`CVE-2026-50696`	High	`7.5`	2026-07-14	Heap-based buffer overflow in Windows Internet Key Exchange (IKE) Protocol allows an unauthorized attacker to deny service over a network.
`CVE-2026-50678`	Medium	`6.6`	2026-07-14	Heap-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to disclose information locally.
`CVE-2026-50675`	High	`7.8`	2026-07-14	Heap-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code locally.
`CVE-2026-50308`	High	`7.8`	2026-07-14	Integer underflow (wrap or wraparound) in Windows NTFS allows an unauthorized attacker to execute code locally.
`CVE-2026-50299`	Medium	`6.8`	2026-07-14	Integer overflow or wraparound in Windows Storage Spaces Direct allows an unauthorized attacker to execute code with a physical attack.
`CVE-2026-49804`	Medium	`6.6`	2026-07-14	Heap-based buffer overflow in Windows USB Video Driver allows an unauthorized attacker to elevate privileges with a physical attack.
`CVE-2026-49800`	High	`7.8`	2026-07-14	Integer overflow or wraparound in Windows Web Proxy Auto-Discovery Protocol (WPAD) allows an authorized attacker to elevate privileges locally.
`CVE-2026-49797`	High	`7.8`	2026-07-14	Heap-based buffer overflow in Windows NTFS allows an unauthorized attacker to execute code locally.
`CVE-2026-49796`	High	`7.8`	2026-07-14	Heap-based buffer overflow in Windows GDI+ allows an unauthorized attacker to execute code locally.
`CVE-2026-49793`	High	`7.8`	2026-07-14	Heap-based buffer overflow in Windows Resilient File System (ReFS) allows an authorized attacker to execute code locally.
`CVE-2026-49790`	High	`7.3`	2026-07-14	Windows Universal Disk Format File System Driver (UDFS) Elevation of Privilege Vulnerability
`CVE-2026-49184`	High	`8.4`	2026-07-14	Heap-based buffer overflow in Windows NTFS allows an unauthorized attacker to execute code locally.
`CVE-2026-49178`	High	`8.8`	2026-07-14	Heap-based buffer overflow in Active Directory Domain Services allows an authorized attacker to execute code over a network.
`CVE-2026-49175`	High	`7.8`	2026-07-14	Heap-based buffer overflow in Windows DNS allows an authorized attacker to elevate privileges locally.