CWE-122 · Heap-based Buffer Overflow (page 7)
Page 7 of 33 — CVEs classified under CWE-122, newest first, with CVSS severity and publication dates.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2026-62881 | Medium | 6.7 | 2026-08-11 | Numeric truncation error in Windows DNS allows an authorized attacker to elevate privileges locally. |
CVE-2026-62871 | High | 7.8 | 2026-08-11 | Out-of-bounds write in .NET allows an unauthorized attacker to execute code locally. |
CVE-2026-62823 | High | 8.8 | 2026-08-11 | Heap-based buffer overflow in Windows DHCP Server allows an unauthorized attacker to execute code over an adjacent network. |
CVE-2026-62822 | High | 8.8 | 2026-08-11 | Integer overflow or wraparound in Windows GDI+ allows an unauthorized attacker to execute code over a network. |
CVE-2026-62816 | High | 8.8 | 2026-08-11 | Heap-based buffer overflow in Reliable Multicast Transport Driver (RMCAST) allows an unauthorized attacker to execute code over an adjacent network. |
CVE-2026-62811 | High | 7.8 | 2026-08-11 | Heap-based buffer overflow in Windows HTTP.sys allows an authorized attacker to elevate privileges locally. |
CVE-2026-62800 | High | 8.8 | 2026-08-11 | Heap-based buffer overflow in Windows SMB Server allows an authorized attacker to execute code over a network. |
CVE-2026-62799 | High | 7.8 | 2026-08-11 | Heap-based buffer overflow in Windows SMB Client allows an authorized attacker to elevate privileges locally. |
CVE-2026-62797 | High | 7.8 | 2026-08-11 | Heap-based buffer overflow in Windows NTFS allows an authorized attacker to elevate privileges locally. |
CVE-2026-62790 | High | 8.8 | 2026-08-11 | Heap-based buffer overflow in Windows SMB Server allows an authorized attacker to execute code over a network. |
CVE-2026-62785 | High | 8.8 | 2026-08-11 | Heap-based buffer overflow in Windows LDAP - Lightweight Directory Access Protocol allows an unauthorized attacker to execute code over a network. |
CVE-2026-62784 | High | 8.8 | 2026-08-11 | Heap-based buffer overflow in Microsoft Local Security Authority Server (lsasrv) allows an authorized attacker to execute code over a network. |
CVE-2026-62783 | High | 7.8 | 2026-08-11 | Heap-based buffer overflow in Windows Remote Access Connection Manager allows an authorized attacker to elevate privileges locally. |
CVE-2026-62781 | High | 8.1 | 2026-08-11 | Heap-based buffer overflow in RPC Runtime allows an unauthorized attacker to execute code over a network. |
CVE-2026-62772 | High | 7.8 | 2026-08-11 | Heap-based buffer overflow in Windows Container Isolation FS Filter Driver (unionfs.sys) allows an authorized attacker to elevate privileges locally. |
CVE-2026-62771 | High | 7.8 | 2026-08-11 | Heap-based buffer overflow in Windows Cloud Files Mini Filter Driver allows an authorized attacker to elevate privileges locally. |
CVE-2026-62770 | High | 7.8 | 2026-08-11 | Heap-based buffer overflow in Windows Shell allows an authorized attacker to elevate privileges locally. |
CVE-2026-62769 | Medium | 6.7 | 2026-08-11 | Numeric truncation error in Windows DNS allows an authorized attacker to elevate privileges locally. |
CVE-2026-62758 | High | 7.8 | 2026-08-11 | Heap-based buffer overflow in Windows Remote Access Connection Manager allows an authorized attacker to elevate privileges locally. |
CVE-2026-62754 | High | 7.8 | 2026-08-11 | Heap-based buffer overflow in Windows Kerberos allows an authorized attacker to elevate privileges locally. |
CVE-2026-62753 | High | 7.0 | 2026-08-11 | Heap-based buffer overflow in Windows HTTP.sys allows an authorized attacker to elevate privileges locally. |
CVE-2026-62752 | High | 7.8 | 2026-08-11 | Heap-based buffer overflow in Windows Kerberos allows an authorized attacker to elevate privileges locally. |
CVE-2026-62747 | High | 7.8 | 2026-08-11 | Heap-based buffer overflow in Windows Device Association Service allows an authorized attacker to elevate privileges locally. |
CVE-2026-62741 | High | 7.8 | 2026-08-11 | Integer underflow (wrap or wraparound) in Windows HTTP.sys allows an authorized attacker to elevate privileges locally. |
CVE-2026-62739 | High | 7.8 | 2026-08-11 | Heap-based buffer overflow in Windows HTTP.sys allows an authorized attacker to elevate privileges locally. |
CVE-2026-62736 | High | 7.8 | 2026-08-11 | Heap-based buffer overflow in Windows DHCP Client allows an authorized attacker to elevate privileges locally. |
CVE-2026-62735 | High | 7.8 | 2026-08-11 | Heap-based buffer overflow in Windows HTTP.sys allows an authorized attacker to elevate privileges locally. |
CVE-2026-62732 | High | 7.8 | 2026-08-11 | Heap-based buffer overflow in Windows Telephony Service allows an authorized attacker to elevate privileges locally. |
CVE-2026-62722 | High | 7.8 | 2026-08-11 | Heap-based buffer overflow in Windows Brokering File System allows an authorized attacker to elevate privileges locally. |
CVE-2026-62719 | High | 7.8 | 2026-08-11 | Heap-based buffer overflow in Windows Message Queuing allows an authorized attacker to elevate privileges locally. |
CVE-2026-62717 | High | 7.8 | 2026-08-11 | Heap-based buffer overflow in Windows Message Queuing allows an authorized attacker to elevate privileges locally. |
CVE-2026-62713 | High | 7.8 | 2026-08-11 | Heap-based buffer overflow in Windows Cloud Files Mini Filter Driver allows an authorized attacker to elevate privileges locally. |
CVE-2026-62712 | High | 7.8 | 2026-08-11 | Heap-based buffer overflow in Windows Win32K allows an authorized attacker to elevate privileges locally. |
CVE-2026-62710 | High | 7.8 | 2026-08-11 | Heap-based buffer overflow in Windows Device Association Service allows an authorized attacker to elevate privileges locally. |
CVE-2026-62700 | High | 7.8 | 2026-08-11 | Heap-based buffer overflow in Windows NTFS allows an authorized attacker to elevate privileges locally. |
CVE-2026-62699 | Medium | 6.8 | 2026-08-11 | Null pointer dereference in Windows Universal Disk Format File System Driver (UDFS) allows an authorized attacker to execute code locally. |
CVE-2026-62695 | High | 7.8 | 2026-08-11 | Heap-based buffer overflow in Windows Storage allows an authorized attacker to elevate privileges locally. |
CVE-2026-62692 | High | 7.8 | 2026-08-11 | Heap-based buffer overflow in Windows Remote Desktop Services allows an authorized attacker to elevate privileges locally. |
CVE-2026-62688 | High | 7.8 | 2026-08-11 | Heap-based buffer overflow in Windows MIDI Service Module allows an authorized attacker to elevate privileges locally. |
CVE-2026-61937 | High | 7.8 | 2026-08-11 | Integer overflow or wraparound in Windows HTTP.sys allows an authorized attacker to elevate privileges locally. |
CVE-2026-61932 | High | 7.8 | 2026-08-11 | Access of resource using incompatible type ('type confusion') in Windows DWM Core Library allows an authorized attacker to elevate privileges locally. |
CVE-2026-61930 | High | 7.8 | 2026-08-11 | Heap-based buffer overflow in Windows Kernel allows an authorized attacker to elevate privileges locally. |
CVE-2026-61926 | High | 7.8 | 2026-08-11 | Heap-based buffer overflow in Windows USB Driver allows an authorized attacker to elevate privileges locally. |
CVE-2026-61923 | High | 7.8 | 2026-08-11 | Heap-based buffer overflow in Windows Display Enhancement Service allows an authorized attacker to elevate privileges locally. |
CVE-2026-61368 | Medium | 5.0 | 2026-08-11 | Heap-based buffer overflow in Windows Hyper-V allows an authorized attacker to disclose information locally. |
CVE-2026-61363 | High | 7.5 | 2026-08-11 | Heap-based buffer overflow in Remote Desktop Client allows an unauthorized attacker to execute code over a network. |
CVE-2026-61359 | High | 7.8 | 2026-08-11 | Heap-based buffer overflow in Windows Storage allows an authorized attacker to elevate privileges locally. |
CVE-2026-61355 | High | 7.8 | 2026-08-11 | Heap-based buffer overflow in Windows Sensor Data Service allows an authorized attacker to elevate privileges locally. |
CVE-2026-61353 | High | 7.8 | 2026-08-11 | Heap-based buffer overflow in Windows Telephony Service allows an authorized attacker to elevate privileges locally. |
CVE-2026-59134 | High | 7.5 | 2026-08-11 | Heap-based buffer overflow in Remote Desktop Client allows an unauthorized attacker to execute code over a network. |
CVE-2026-58651 | High | 7.8 | 2026-08-11 | Heap-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code locally. |
CVE-2026-54984 | High | 7.8 | 2026-08-11 | Heap-based buffer overflow in Windows Imaging Component allows an unauthorized attacker to execute code locally. |
CVE-2026-50472 | High | 7.0 | 2026-08-11 | Heap-based buffer overflow in Windows LUAFV allows an authorized attacker to elevate privileges locally. |
CVE-2026-48440 | High | 8.1 | 2026-08-11 | ColdFusion is affected by a Heap-based Buffer Overflow vulnerability that could result in arbitrary code execution in the context of the current user. Exploit… |
CVE-2026-21399 | | 2026-08-11 | Heap-based buffer overflow for the Intel(R) Open Volume Kernel Library (Intel(R) Open VKL) library maintained by intel(R) before version 2.0.2 within Ring 3: U… | |
CVE-2026-73072 | High | 7.3 | 2026-08-11 | Vim is an open source, command line text editor. Prior to 9.2.0846, set_sofo() in src/spellfile.c reuses sl_sal_first[] without resetting values left by set_sa… |
CVE-2026-18370 | | 2026-08-10 | entr is vulnerable to Heap-based buffer overflow in run_utility() function. The function allocates a fixed-size heap buffer using malloc(ARG_MAX) and copies co… | |
CVE-2026-19259 | Medium | 5.3 | 2026-08-08 | A vulnerability has been found in MZ Automation libiec61850 up to 1.6.1. The affected element is the function MmsMapping_varAccessSpecToObjectReference of the… |
CVE-2026-18497 | High | 7.1 | 2026-08-07 | A heap-buffer-overflow vulnerability exists in the nothings stb TrueType library, up to version 1.26, that is used for parsing TrueType font files. The vulnera… |
CVE-2026-19206 | Medium | 5.3 | 2026-08-07 | A security flaw has been discovered in MZ Automation libiec61850 up to 1.6.1. This affects the function SVReceiver_stopThreadless of the file src/sampled_value… |
CVE-2026-18938 | Medium | 6.2 | 2026-08-07 | A flaw was found in p11-kit. A local attacker, or one with equivalent access to a reachable RPC channel, could exploit an integer overflow vulnerability. By se… |
CVE-2026-70638 | High | 7.8 | 2026-08-06 | llama.cpp builds b1886 through b7445 contain an integer overflow vulnerability in the LLaMA-Android JNI wrapper where the new_1batch() function multiplies size… |
CVE-2026-19156 | High | 7.5 | 2026-08-06 | Heap buffer overflow in Base in Google Chrome prior to 151.0.7922.109 allowed an attacker who convinced a user to install a malicious extension to potentially… |
CVE-2026-19138 | High | 8.3 | 2026-08-06 | Heap buffer overflow in CrashReporting in Google Chrome prior to 151.0.7922.109 allowed a remote attacker who had compromised the renderer process to potential… |
CVE-2026-34502 | High | 7.5 | 2026-08-06 | Heap-based Buffer Overflow vulnerability in Apache Portable Runtime Utility memcached client This issue affects Apache Portable Runtime Utility: from 1.3.0 th… |
CVE-2026-34501 | High | 7.5 | 2026-08-06 | Heap-based Buffer Overflow vulnerability in Apache Portable Runtime Utility redis client. This issue affects Apache Portable Runtime Utility: from 1.6.0 throu… |
CVE-2026-67873 | Critical | 9.8 | 2026-08-06 | A heap-based buffer overflow exists in lib60870-C 2.4.0 in the server-side FileSegment ASDU encoding path. The issue occurs because FileSegment_encode() valida… |
CVE-2026-67867 | High | 7.5 | 2026-08-05 | Buffer Overflow vulnerability in Systerel S2OPC 1.7.3 allows a remote attacker to cause a denial of service via the Alarm/Conditions wrapper when processing Pu… |
CVE-2026-67860 | High | 7.5 | 2026-08-04 | open62541 1.5.5 contains a heap-based buffer overflow in the default HistoryRead path when the default history database is used with the memory backend. |
CVE-2017-20241 | Critical | 9.8 | 2026-08-04 | Keysight IxChariot Endpoint before 9.5.102 contains a heap-based buffer overflow. An unauthenticated remote attacker can send a specially crafted packet to cra… |
CVE-2026-18784 | Medium | 5.3 | 2026-08-04 | A vulnerability was found in o6 open62541 up to 1.5.5. This issue affects the function UA_Client_readNodeClassAttribute of the file src/client/ua_client_highle… |
CVE-2026-10849 | High | 8.2 | 2026-08-03 | The hawkBit device management client in subsys/mgmt/hawkbit accumulates the body of an HTTP response from the update server into a heap buffer in response_json… |
CVE-2026-18585 | Medium | 4.3 | 2026-08-03 | A vulnerability was detected in GL.iNet MT3000, MT6000, BE9300, BE3600, MT3600BE, E5800, BE6500, MT5000, X3000, XE3000 and MT2500 up to 20260707. The affected… |
CVE-2026-20480 | Medium | 5.5 | 2026-08-03 | In Audio HAL, there is a possible out of bounds write due to a heap buffer overflow. This could lead to local denial of service with User execution privileges… |
CVE-2026-20465 | High | 8.1 | 2026-08-03 | In wlan AP driver, there is a possible out of bounds write due to a missing bounds check. This could lead to remote (proximal/adjacent) escalation of privilege… |
CVE-2026-68580 | High | 7.5 | 2026-08-02 | FreeRDP before 3.29.0 contains integer overflow vulnerabilities in the audio input redirection channel (audin) across ALSA, sndio, WinMM, and OpenSL ES backend… |
CVE-2026-67305 | High | 8.8 | 2026-08-01 | FreeRDP Windows client before 3.29.0 contains a heap buffer overflow vulnerability in the clipboard virtual channel when processing CLIPRDR_FILE_CONTENTS_RESPO… |
CVE-2026-54715 | | 2026-07-30 | GoAccess is a real-time web log analyzer and interactive viewer that runs in a terminal in *nix systems or through the browser. In version 1.10.2, parse_browse… | |
CVE-2026-17951 | High | 8.8 | 2026-07-30 | Heap buffer overflow in WebRTC in Google Chrome prior to 151.0.7922.72 allowed a remote attacker to perform an out of bounds memory read via a crafted HTML pag… |
CVE-2026-17935 | High | 8.8 | 2026-07-30 | Heap buffer overflow in Codecs in Google Chrome prior to 151.0.7922.72 allowed a remote attacker to execute arbitrary code inside a sandbox via a crafted HTML… |
CVE-2026-17758 | Critical | 9.6 | 2026-07-30 | Heap buffer overflow in Dawn in Google Chrome prior to 151.0.7922.72 allowed a remote attacker to potentially perform a sandbox escape via a crafted HTML page… |
CVE-2026-17680 | Critical | 9.6 | 2026-07-30 | Heap buffer overflow in Color in Google Chrome on ChromeOS prior to 151.0.7922.72 allowed a remote attacker who had compromised the renderer process to potenti… |
CVE-2026-13307 | Medium | 6.8 | 2026-07-29 | Autel MaxiCharger AC Elite Home USB Heap-based Buffer Overflow Arbitrary Code Execution Vulnerability. This vulnerability allows physically present attackers t… |
CVE-2026-14266 | High | 7.8 | 2026-07-29 | 7-Zip XZ Decompression Heap-based Buffer Overflow Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on… |
CVE-2026-67191 | Critical | 9.8 | 2026-07-29 | Xlight FTP Server before 3.9.5 contains a pre-authentication heap buffer overflow vulnerability that allows remote unauthenticated attackers to write past the… |
CVE-2026-16463 | High | 7.8 | 2026-07-29 | A maliciously crafted DXF file, when parsed through Autodesk AutoCAD, can force a Heap-Based Overflow vulnerability. A malicious actor can leverage this vulner… |
CVE-2026-48372 | High | 7.8 | 2026-07-28 | Format Plugins is affected by a Heap-based Buffer Overflow vulnerability that could result in arbitrary code execution in the context of the current user. Expl… |
CVE-2026-55971 | Critical | 9.8 | 2026-07-27 | Heap-based Buffer Overflow vulnerability in Apache Thrift C++ bindings. This issue affects Apache Thrift: before 0.24.0. Users are recommended to upgrade to… |
CVE-2026-66040 | High | 8.8 | 2026-07-24 | FFmpeg through 8.1.2, fixed in commit b506faf, contains a heap out-of-bounds write vulnerability in the native PNG and APNG encoders that allows remote attacke… |
CVE-2026-66039 | High | 8.8 | 2026-07-24 | FFmpeg through 8.1.2, fixed in commit aafb5c6, contains a signed integer overflow vulnerability in the MACE6 audio decoder that allows attackers to corrupt hea… |
CVE-2026-66036 | High | 8.8 | 2026-07-24 | FFmpeg through 8.1.2, fixed in commit 5d7112c, contains a heap out-of-bounds write vulnerability in the vf_hqdn3d filter that allows attackers to corrupt heap… |
CVE-2026-66035 | High | 7.5 | 2026-07-24 | libssh2 through 1.11.1, fixed in commit 42e33d8, contains a pre-authentication heap buffer overflow vulnerability that allows a malicious SSH server to corrupt… |
CVE-2026-56392 | Medium | 6.1 | 2026-07-24 | GNU coreutils unexpand is vulnerable to a heap-based buffer overflow due to an integer overflow during buffer allocation when processing large tab stop (-t) va… |
CVE-2026-56165 | Critical | 9.8 | 2026-07-24 | Heap-based buffer overflow in Microsoft Account allows an unauthorized attacker to execute code over a network. |
CVE-2026-49035 | High | 8.1 | 2026-07-23 | The affected product is vulnerable to a heap-based buffer overflow via a crafted MMS Initiate request. Remote code execution (RCE) has been demonstrated when A… |
CVE-2026-13072 | High | 8.1 | 2026-07-22 | When compute mode is enabled on a standalone mongod instance, insufficient validation of externally sourced BSON data during aggregation pipeline processing ca… |
CVE-2026-64830 | High | 8.8 | 2026-07-22 | FFmpeg versions 2.1 through 8.1.2 contains a heap buffer overflow vulnerability in the VobSub subtitle demuxer that allows attackers to corrupt adjacent heap m… |
CVE-2026-40691 | High | 7.5 | 2026-07-22 | In Unbound 1.9.0 up to and including 1.25.1, when a DNSCrypt query is received over TCP, the routine that encrypts the reply in place fails to bound the reply… |
CVE-2026-61390 | High | 7.7 | 2026-07-22 | There is a heap buffer overflow vulnerability in some Hikvision cameras, which may allow unauthenticated attackers to cause device malfunction by sending speci… |
CVE-2026-8987 | High | 8.8 | 2026-07-21 | Autel Maxi Charger Single firmware through V1.03.51 contains a heap-based buffer overflow in the set_ap_param command handled by the /localcfg endpoint. An aut… |