CWE-122 · Heap-based Buffer Overflow (page 5)
Page 5 of 33 — CVEs classified under CWE-122, newest first, with CVSS severity and publication dates.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2026-69307 | High | 7.8 | 2026-09-08 | Heap-based buffer overflow in Windows USB Audio Class driver (usbaudio.sys) allows an authorized attacker to elevate privileges locally. |
CVE-2026-69293 | High | 7.8 | 2026-09-08 | Heap-based buffer overflow in Windows Biometric Service allows an authorized attacker to elevate privileges locally. |
CVE-2026-69291 | High | 8.8 | 2026-09-08 | Heap-based buffer overflow in Windows Volume Manager Extension Driver allows an unauthorized attacker to execute code over a network. |
CVE-2026-69285 | High | 8.8 | 2026-09-08 | Heap-based buffer overflow in Microsoft Office allows an unauthorized attacker to execute code over a network. |
CVE-2026-69284 | High | 7.8 | 2026-09-08 | Heap-based buffer overflow in Windows DCOM Server allows an authorized attacker to elevate privileges locally. |
CVE-2026-69283 | High | 7.8 | 2026-09-08 | Heap-based buffer overflow in Windows CD-ROM Driver allows an authorized attacker to elevate privileges locally. |
CVE-2026-69276 | Critical | 9.8 | 2026-09-08 | Integer underflow (wrap or wraparound) in Microsoft UxTheme Library (uxtheme.dll) allows an unauthorized attacker to execute code over a network. |
CVE-2026-69272 | High | 7.1 | 2026-09-08 | Heap-based buffer overflow in Microsoft Standard XPS allows an authorized attacker to elevate privileges over a network. |
CVE-2026-69271 | High | 8.0 | 2026-09-08 | Heap-based buffer overflow in Microsoft Standard XPS allows an authorized attacker to elevate privileges over a network. |
CVE-2026-69270 | High | 7.8 | 2026-09-08 | Heap-based buffer overflow in Windows USB Audio Class driver (usbaudio.sys) allows an authorized attacker to elevate privileges locally. |
CVE-2026-68897 | High | 7.0 | 2026-09-08 | Heap-based buffer overflow in Microsoft Standard XPS allows an authorized attacker to elevate privileges locally. |
CVE-2026-68894 | High | 8.0 | 2026-09-08 | Heap-based buffer overflow in Windows Error Reporting allows an authorized attacker to elevate privileges over a network. |
CVE-2026-68892 | High | 7.8 | 2026-09-08 | Heap-based buffer overflow in Microsoft Standard XPS allows an authorized attacker to elevate privileges locally. |
CVE-2026-68890 | High | 7.8 | 2026-09-08 | Heap-based buffer overflow in Microsoft Standard XPS allows an authorized attacker to elevate privileges locally. |
CVE-2026-68889 | High | 7.1 | 2026-09-08 | Heap-based buffer overflow in Microsoft Standard XPS allows an authorized attacker to elevate privileges over a network. |
CVE-2026-68888 | High | 7.8 | 2026-09-08 | Heap-based buffer overflow in Microsoft Standard XPS allows an authorized attacker to elevate privileges locally. |
CVE-2026-68885 | High | 7.8 | 2026-09-08 | Heap-based buffer overflow in Microsoft Standard XPS allows an authorized attacker to elevate privileges locally. |
CVE-2026-68884 | High | 7.0 | 2026-09-08 | Heap-based buffer overflow in Windows Kernel allows an authorized attacker to elevate privileges locally. |
CVE-2026-68880 | High | 8.0 | 2026-09-08 | Heap-based buffer overflow in Windows Win32K allows an authorized attacker to elevate privileges over a network. |
CVE-2026-68877 | High | 7.8 | 2026-09-08 | Heap-based buffer overflow in Windows Storage Spaces Controller allows an authorized attacker to execute code locally. |
CVE-2026-68876 | High | 8.0 | 2026-09-08 | Heap-based buffer overflow in Windows Program Compatibility Assistant Service allows an authorized attacker to elevate privileges over a network. |
CVE-2026-68850 | High | 7.8 | 2026-09-08 | Heap-based buffer overflow in Microsoft Account allows an authorized attacker to elevate privileges locally. |
CVE-2026-68848 | High | 7.8 | 2026-09-08 | Heap-based buffer overflow in Windows Print Spooler Components allows an authorized attacker to elevate privileges locally. |
CVE-2026-68845 | High | 7.8 | 2026-09-08 | Heap-based buffer overflow in Windows Program Compatibility Assistant Service allows an authorized attacker to elevate privileges locally. |
CVE-2026-68844 | High | 7.8 | 2026-09-08 | Heap-based buffer overflow in Windows Storage Spaces Controller allows an authorized attacker to execute code locally. |
CVE-2026-68841 | High | 7.8 | 2026-09-08 | Heap-based buffer overflow in Windows NTFS allows an authorized attacker to elevate privileges locally. |
CVE-2026-68839 | Critical | 9.8 | 2026-09-08 | Heap-based buffer overflow in Windows USB Mass Storage Class Driver allows an unauthorized attacker to execute code over a network. |
CVE-2026-68833 | Medium | 6.8 | 2026-09-08 | Heap-based buffer overflow in Windows NTFS allows an unauthorized attacker to execute code with a physical attack. |
CVE-2026-68828 | High | 8.8 | 2026-09-08 | Heap-based buffer overflow in Remote Desktop Client allows an unauthorized attacker to execute code over a network. |
CVE-2026-68827 | High | 8.0 | 2026-09-08 | Integer underflow (wrap or wraparound) in Windows GDI+ allows an authorized attacker to elevate privileges over a network. |
CVE-2026-68787 | High | 7.8 | 2026-09-08 | Heap-based buffer overflow in SQL Server allows an authorized attacker to execute code locally. |
CVE-2026-68786 | High | 8.8 | 2026-09-08 | Heap-based buffer overflow in SQL Server allows an authorized attacker to execute code over a network. |
CVE-2026-68785 | Medium | 4.9 | 2026-09-08 | Heap-based buffer overflow in SQL Server allows an authorized attacker to execute code over a network. |
CVE-2026-68775 | High | 8.8 | 2026-09-08 | Heap-based buffer overflow in SQL Server allows an authorized attacker to execute code over a network. |
CVE-2026-67643 | Critical | 9.8 | 2026-09-08 | Heap-based buffer overflow in SQL Server allows an unauthorized attacker to execute code over a network. |
CVE-2026-67642 | High | 8.8 | 2026-09-08 | Heap-based buffer overflow in SQL Server allows an authorized attacker to execute code over a network. |
CVE-2026-67639 | High | 8.8 | 2026-09-08 | Heap-based buffer overflow in SQL Server allows an authorized attacker to execute code over a network. |
CVE-2026-67638 | High | 8.8 | 2026-09-08 | Heap-based buffer overflow in SQL Server allows an authorized attacker to execute code over a network. |
CVE-2026-67631 | Critical | 9.8 | 2026-09-08 | Heap-based buffer overflow in SQL Server allows an unauthorized attacker to execute code over a network. |
CVE-2026-67388 | High | 8.8 | 2026-09-08 | Heap-based buffer overflow in SQL Server allows an authorized attacker to execute code over a network. |
CVE-2026-67384 | High | 8.8 | 2026-09-08 | Integer overflow or wraparound in SQL Server allows an authorized attacker to execute code over a network. |
CVE-2026-67381 | High | 8.8 | 2026-09-08 | Heap-based buffer overflow in SQL Server allows an authorized attacker to elevate privileges over a network. |
CVE-2026-67380 | High | 8.8 | 2026-09-08 | Heap-based buffer overflow in SQL Server allows an authorized attacker to execute code over a network. |
CVE-2026-67373 | High | 8.8 | 2026-09-08 | Heap-based buffer overflow in SQL Server allows an authorized attacker to execute code over a network. |
CVE-2026-62810 | High | 7.8 | 2026-09-08 | Heap-based buffer overflow in Active Directory Certificate Services (AD CS) allows an authorized attacker to elevate privileges locally. |
CVE-2026-62744 | High | 8.8 | 2026-09-08 | Heap-based buffer overflow in Microsoft Windows Media Foundation allows an unauthorized attacker to execute code over a network. |
CVE-2026-58600 | High | 7.8 | 2026-09-08 | Heap-based buffer overflow in Microsoft Windows Codecs Library allows an unauthorized attacker to elevate privileges locally. |
CVE-2026-58599 | High | 7.8 | 2026-09-08 | Heap-based buffer overflow in Microsoft Windows Codecs Library allows an unauthorized attacker to execute code locally. |
CVE-2026-79377 | High | 7.5 | 2026-09-08 | A heap overflow in the a2dp_decoder_sbc.cpp component of Bestechnic Co., Ltd BES2300 Bluetooth Audio SoC firmware v3.x and earlier allows attackers to cause a… |
CVE-2026-77102 | High | 7.5 | 2026-09-08 | CommServe contained a heap-based buffer overflow issue affecting service availability. Software customers upgrade to resolved maintenance release. Update CommS… |
CVE-2026-20502 | High | 8.4 | 2026-09-07 | In vdec, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with no additional execution p… |
CVE-2026-20501 | High | 8.4 | 2026-09-07 | In vdec, there is a possible out of bounds write due to a heap buffer overflow. This could lead to local escalation of privilege with no additional execution p… |
CVE-2026-86142 | Medium | 6.9 | 2026-09-05 | In libxml2 before 2.15.4, there is a heap-based buffer overflow in xmlXPtrEvalXPtrPart because of xmlXPtrEval xpointer length saturation. |
CVE-2026-57164 | Medium | 5.9 | 2026-09-04 | PJSIP is a free and open source multimedia communication library written in C. Prior to commit 8d5956a, a heap buffer overflow exists in the PJLIB-UTIL HTTP cl… |
CVE-2026-18341 | Medium | 6.3 | 2026-09-04 | IBM i 7.6, 7.5, 7.4, and 7.3 could allow a remote authenticated attacker to corrupt memory due to an integer underflow. |
CVE-2026-81665 | High | 7.5 | 2026-09-04 | A heap-based buffer overflow was found in Corosync's Totem Process Group (totempg) message reassembly. When processing fragmented multicast messages, the buffe… |
CVE-2026-83959 | High | 7.8 | 2026-09-03 | Substance3D - Sampler is affected by a Heap-based Buffer Overflow vulnerability that could result in arbitrary code execution in the context of the current use… |
CVE-2026-53720 | | 2026-09-03 | pymonocypher uses cython to wrap the Monocypher C library. Prior to version 4.0.2.8, the argon2i_32 implementation does not check the nb_blocks size. If the ca… | |
CVE-2026-78689 | High | 8.1 | 2026-09-02 | Description NGINX JavaScript (njs) has a vulnerability in the XML module's namespace prefix list parser, reachable through the xml.exclusiveC14n() method. An… |
CVE-2026-84269 | Medium | 6.5 | 2026-09-01 | A flaw was found in the AFP backend in gvfs. When mounting a share, a malicious AFP server can cause the DSI read path to process a length that exceeds the siz… |
CVE-2026-84268 | High | 8.8 | 2026-09-01 | A flaw was found in the SFTP backend in gvfs. When mounting a share and reading a file, a malicious SFTP server can cause read_reply() to process a length that… |
CVE-2026-75538 | | 2026-09-01 | An attacker that connects to an open Erlang TCP port that uses the inet driver with {packet,4} mode can use a signed overflow in an incorrect packet length cal… | |
CVE-2026-82820 | Medium | 4.3 | 2026-08-31 | A vulnerability was found in FLVMeta up to 1.2.2. Affected is the function amf_string_new of the file src/amf.c of the component AMF String Processing. The man… |
CVE-2026-82591 | Medium | 5.3 | 2026-08-30 | A security vulnerability has been detected in Open Asset Import Library Assimp up to 6.0.2. The impacted element is the function MD5Importer::MakeDataUnique of… |
CVE-2026-38821 | High | 7.1 | 2026-08-28 | A heap-based buffer overflow vulnerability exists in openNDS before 11.0.0 that allows an unauthenticated attacker on the captive portal network to crash the o… |
CVE-2026-19313 | | 2026-08-28 | An heap overflow vulnerability in the WatchGuard Fireware OS iked process allows a remote unauthenticated attacker to execute arbitrary code by sending special… | |
CVE-2026-81851 | | 2026-08-28 | A heap-based buffer overflow vulnerability in Fireware OS's iked process allows an authenticated administrator to crash the IKE daemon (iked), resulting in a d… | |
CVE-2026-38347 | High | 7.5 | 2026-08-28 | A heap overflow in the ff_sws_alphablendaway function (libswscale/alphablend.c) of FFmpeg git-master commit 722a217 allows attackers to cause a Denial of Servi… |
CVE-2026-34674 | High | 7.8 | 2026-08-27 | Substance3D - Sampler versions 5.1.3 and earlier are affected by a Heap-based Buffer Overflow vulnerability that could result in arbitrary code execution in th… |
CVE-2026-77652 | High | 7.8 | 2026-08-26 | A heap-based buffer overflow vulnerability exists in the Dia diagram editor WPG file format importer. In plug-ins/wpg/wpg-import.c, the WPG import renderer al… |
CVE-2025-70293 | Critical | 9.8 | 2026-08-26 | An issue was discovered in Denx U-Boot before 2026.04. An integer overflow vulnerability exists in function ext4fs_get_bgdtable, the size calculation can lead… |
CVE-2026-77532 | Critical | 9.6 | 2026-08-26 | A malicious actor with access to an adjacent network could exploit a Buffer Overflow vulnerability found in a DHCPv6-enabled EdgeMAX EdgeSwitch to initiate a R… |
CVE-2026-58097 | High | 7.8 | 2026-08-26 | mp_SetEnddisc() copied a user-supplied PSN endpoint value without length validation, allowing a buffer overflow via the ppp(8) command interface. A local user… |
CVE-2026-58095 | High | 8.8 | 2026-08-26 | mp_Enddisc() used incorrect length calculations when formatting endpoint discriminator addresses for display, allowing a received endpoint option to overflow a… |
CVE-2026-79231 | High | 8.8 | 2026-08-25 | Buffer overflow in Media in Google Chrome prior to 152.0.7977.65 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page… |
CVE-2026-79216 | High | 7.5 | 2026-08-25 | Buffer overflow in Blink in Google Chrome prior to 152.0.7977.65 allowed a remote attacker who had compromised the renderer process to execute arbitrary code i… |
CVE-2026-79142 | High | 8.8 | 2026-08-25 | Buffer overflow in ANGLE in Google Chrome on on Android prior to 152.0.7977.65 allowed a remote attacker to execute arbitrary code outside the sandbox via a cr… |
CVE-2026-79130 | Critical | 9.6 | 2026-08-25 | Buffer overflow in ANGLE in Google Chrome prior to 152.0.7977.65 allowed a remote attacker to execute arbitrary code outside the sandbox via a crafted HTML pag… |
CVE-2026-78948 | Critical | 9.6 | 2026-08-25 | Buffer overflow in WebGL in Google Chrome prior to 152.0.7977.65 allowed a remote attacker to execute arbitrary code outside the sandbox via a crafted HTML pag… |
CVE-2026-78891 | High | 8.8 | 2026-08-25 | Buffer overflow in WebRTC in Google Chrome prior to 152.0.7977.65 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML pag… |
CVE-2026-39113 | Medium | 4.0 | 2026-08-25 | Buffer Overflow vulnerability in SQLite affected version source snapshots/builds containing Fossil check-in 8bdc0d485e3ad0c7a1e818da66f106951d496b05cbe61d12c2c… |
CVE-2026-68515 | High | 7.1 | 2026-08-25 | OpenEXR is the reference implementation and specification for the EXR image format, widely used in the motion picture industry. In versions before 3.2.11, 3.3… |
CVE-2026-68514 | Medium | 5.5 | 2026-08-25 | OpenEXR is the reference implementation and specification for the EXR image file format, widely used in the motion picture industry. In versions 3.3.0 through… |
CVE-2026-68513 | High | 7.1 | 2026-08-25 | OpenEXR is the reference implementation and specification for the EXR image format, widely used in the motion picture industry. Versions 3.3.0 through 3.3.12 a… |
CVE-2026-75769 | High | 7.8 | 2026-08-25 | Substance3D - Painter is affected by a Heap-based Buffer Overflow vulnerability that could result in arbitrary code execution in the context of the current use… |
CVE-2026-75767 | High | 7.8 | 2026-08-25 | Substance3D - Painter is affected by a Heap-based Buffer Overflow vulnerability that could result in arbitrary code execution in the context of the current use… |
CVE-2026-75766 | High | 7.8 | 2026-08-25 | Substance3D - Painter is affected by a Heap-based Buffer Overflow vulnerability that could result in arbitrary code execution in the context of the current use… |
CVE-2026-75750 | High | 7.8 | 2026-08-25 | Substance3D - Painter is affected by a Heap-based Buffer Overflow vulnerability that could result in arbitrary code execution in the context of the current use… |
CVE-2026-48433 | High | 7.8 | 2026-08-25 | Substance3D - Designer is affected by a Heap-based Buffer Overflow vulnerability that could result in arbitrary code execution in the context of the current us… |
CVE-2026-48432 | High | 7.8 | 2026-08-25 | Substance3D - Designer is affected by a Heap-based Buffer Overflow vulnerability that could result in arbitrary code execution in the context of the current us… |
CVE-2026-48431 | High | 7.8 | 2026-08-25 | Substance3D - Designer is affected by a Heap-based Buffer Overflow vulnerability that could result in arbitrary code execution in the context of the current us… |
CVE-2026-48430 | High | 7.8 | 2026-08-25 | Substance3D - Designer is affected by a Heap-based Buffer Overflow vulnerability that could result in arbitrary code execution in the context of the current us… |
CVE-2026-48428 | High | 7.8 | 2026-08-25 | Substance3D - Designer is affected by a Heap-based Buffer Overflow vulnerability that could result in arbitrary code execution in the context of the current us… |
CVE-2026-48425 | High | 7.8 | 2026-08-25 | Substance3D - Sampler is affected by a Heap-based Buffer Overflow vulnerability that could result in arbitrary code execution in the context of the current use… |
CVE-2026-48424 | High | 7.8 | 2026-08-25 | Substance3D - Sampler is affected by a Heap-based Buffer Overflow vulnerability that could result in arbitrary code execution in the context of the current use… |
CVE-2026-48423 | High | 7.8 | 2026-08-25 | Substance3D - Sampler is affected by a Heap-based Buffer Overflow vulnerability that could result in arbitrary code execution in the context of the current use… |
CVE-2026-48422 | High | 7.8 | 2026-08-25 | Substance3D - Sampler is affected by a Heap-based Buffer Overflow vulnerability that could result in arbitrary code execution in the context of the current use… |
CVE-2026-59187 | High | 7.1 | 2026-08-25 | OpenEXR is the reference implementation and specification for the EXR image format, widely used in the motion picture industry. OpenEXR versions 3.3.0 through… |
CVE-2026-59186 | High | 7.1 | 2026-08-25 | OpenEXR is the reference implementation and specification for the EXR image format, widely used in the motion picture industry. In versions before 3.2.11, 3.3… |
CVE-2026-56135 | High | 7.4 | 2026-08-24 | In NTFS-3G through 2026.2.25, a heap-based buffer overflow exists in the function build_inherited_id() in libntfs-3g/security.c that allows an attacker to corr… |