CWE-122 · Heap-based Buffer Overflow (page 8)
Page 8 of 33 — CVEs classified under CWE-122, newest first, with CVSS severity and publication dates.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2026-44178 | High | 8.8 | 2026-07-20 | xrdp is an open source RDP server. Versions 0.10.6 and prior contain a heap-based buffer overflow vulnerability within the virtual channel forwarding mechanism… |
CVE-2026-41252 | Critical | 9.8 | 2026-07-20 | xrdp is an open source RDP server. Versions 0.10.6 and prior contain a missing bounds check in xrdp, which allows a heap-based buffer overflow when operating i… |
CVE-2026-35591 | High | 7.8 | 2026-07-20 | libvips is a fast image processing library with low memory needs. The `tiffload` operation in libvips versions before and including 8.18.1 could incorrectly de… |
CVE-2026-35590 | Medium | 5.5 | 2026-07-20 | libvips is a fast image processing library with low memory needs. The EXIF decoder within libvips versions before and including 8.18.1 was not verifying the ra… |
CVE-2026-63090 | High | 8.8 | 2026-07-20 | ProFTPD before 1.3.9c and 1.3.10rc3 contains a heap-based buffer overflow vulnerability in the mod_sftp module that allows authenticated low-privilege attacker… |
CVE-2026-64620 | Critical | 9.8 | 2026-07-20 | FreeRDP before 3.28.0 (affected <=3.27.1) contains a heap-based buffer overflow in crypto_rsa_common() (libfreerdp/crypto/crypto.c). The function writes the mo… |
CVE-2026-53994 | High | 7.5 | 2026-07-18 | ProFTPD mod_sftp contains a heap-based buffer overflow reachable by an authenticated SFTP user. The fxp_packet_read() function accepts the attacker-supplied 32… |
CVE-2026-11826 | High | 8.8 | 2026-07-18 | OpenPLC_v3 contains a heap-based buffer overflow in the getData() function in webserver/core/modbus_master.cpp. getData() reads characters between two delimite… |
CVE-2026-48373 | High | 7.8 | 2026-07-17 | Acrobat Reader is affected by a Heap-based Buffer Overflow vulnerability that could result in arbitrary code execution in the context of the current user. Expl… |
CVE-2026-16118 | High | 7.1 | 2026-07-17 | A flaw was found in xdgmime. A heap-based buffer overflow can be triggered in _xdg_mime_magic_parse_magic_line() in the xdgmimemagic.c file on little-endian sy… |
CVE-2026-13473 | High | 8.1 | 2026-07-17 | IBM Storage Protect Client 8.1.0.0 through 8.1.27.0, 8.1.27.1, and 8.2.0.0 through 8.2.1.0 IBM Storage Protect is vulnerable to a heap-based buffer overflow, c… |
CVE-2026-44251 | Medium | 6.5 | 2026-07-17 | Wazuh is a free and open source platform used for threat prevention, detection, and response. In versions 3.0.0 and above, prior to 4.14.5, a size_t integer un… |
CVE-2026-40106 | Medium | 4.7 | 2026-07-17 | Wazuh is a free and open source platform used for threat prevention, detection, and response. Versions 4.6.0 and above prior to 4.14.5 contain a heap-based buf… |
CVE-2026-34150 | High | 7.5 | 2026-07-17 | Wazuh is a free and open source platform used for threat prevention, detection, and response. In versions 1.0.0 and above, prior to 4.14.5, a heap buffer overf… |
CVE-2026-15449 | | 2026-07-16 | A time-of-check to time-of-use (TOCTOU) flaw in the illumos data-link pseudo-driver (dld) affects handling of the DLDIOC_GETMACPROP and DLDIOC_SETMACPROP ioctl… | |
CVE-2026-15422 | | 2026-07-16 | The illumos SCTP inbound path performs association lookup for INIT ACK chunks without adequately validating the address parameters carried in the chunk. Since… | |
CVE-2026-50012 | Medium | 5.5 | 2026-07-16 | Squid is a caching proxy for the Web. Prior to 7.6, due to an improper input validation bug in cache digest reply handling (peerDigestSwapInMask in src/peer_di… |
CVE-2026-38755 | Low | 2.9 | 2026-07-15 | A heap overflow in the evalcommand() function (shell/ash.c) of Busybox v1.38.0 allows attackers to cause a Denial of Service (DoS) via supplying a crafted inpu… |
CVE-2026-38754 | Medium | 5.1 | 2026-07-15 | A heap overflow in the ifsbreakup() function (shell/ash.c) of Busybox v1.38.0 allows attackers to cause a Denial of Service (DoS) via supplying a crafted input. |
CVE-2026-42533 | High | 8.1 | 2026-07-15 | A vulnerability exists in NGINX Plus and NGINX Open Source when a map directive uses regex matching and a string expression references the map's regex capture… |
CVE-2026-61464 | Low | 1.8 | 2026-07-15 | ImageMagick before 7.1.2-26 and 6.9.13-51 contains a heap-based buffer over-write vulnerability that occurs when running an X11 import with a crafted window ti… |
CVE-2026-48339 | High | 7.8 | 2026-07-14 | Bridge is affected by a Heap-based Buffer Overflow vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation… |
CVE-2026-48269 | High | 7.8 | 2026-07-14 | Premiere Pro is affected by a Heap-based Buffer Overflow vulnerability that could result in arbitrary code execution in the context of the current user. Exploi… |
CVE-2026-47471 | High | 7.5 | 2026-07-14 | NVIDIA TensorRT-LLM for any platform contains a vulnerability in tensor deserialization, where an attacker could cause a heap based buffer overflow. A successf… |
CVE-2026-24272 | High | 7.8 | 2026-07-14 | NVIDIA TensorRT contains a vulnerability where an attacker might cause an overflow to a heap-based buffer. A successful exploit of this vulnerability might lea… |
CVE-2026-24268 | High | 7.8 | 2026-07-14 | NVIDIA TensorRT contains a vulnerability where an attacker might cause a heap-based buffer overflow. A successful exploit of this vulnerability might lead to c… |
CVE-2026-15767 | High | 8.8 | 2026-07-14 | Heap buffer overflow in libyuv in Google Chrome on Windows prior to 150.0.7871.125 allowed a remote attacker to execute arbitrary code inside a sandbox via a c… |
CVE-2026-58547 | Medium | 5.5 | 2026-07-14 | Heap-based buffer overflow in Universal Plug and Play (upnp.dll) allows an authorized attacker to elevate privileges locally. |
CVE-2026-58542 | High | 7.8 | 2026-07-14 | Heap-based buffer overflow in Windows Media allows an unauthorized attacker to execute code locally. |
CVE-2026-58538 | High | 7.8 | 2026-07-14 | Heap-based buffer overflow in Windows Bluetooth Service allows an authorized attacker to elevate privileges locally. |
CVE-2026-58534 | High | 8.8 | 2026-07-14 | Heap-based buffer overflow in Microsoft Input Method Editor (IME) allows an authorized attacker to elevate privileges locally. |
CVE-2026-58530 | High | 7.8 | 2026-07-14 | Heap-based buffer overflow in Windows Resilient File System (ReFS) allows an unauthorized attacker to execute code locally. |
CVE-2026-57096 | High | 7.8 | 2026-07-14 | Heap-based buffer overflow in Windows Routing and Remote Access Service (RRAS) allows an authorized attacker to elevate privileges locally. |
CVE-2026-57094 | High | 8.8 | 2026-07-14 | Heap-based buffer overflow in Microsoft Windows Media Foundation allows an unauthorized attacker to execute code over a network. |
CVE-2026-57090 | High | 8.8 | 2026-07-14 | Heap-based buffer overflow in Microsoft Windows Media Foundation allows an unauthorized attacker to execute code over a network. |
CVE-2026-57087 | High | 8.8 | 2026-07-14 | Heap-based buffer overflow in Microsoft Windows Media Foundation allows an unauthorized attacker to execute code over a network. |
CVE-2026-56650 | High | 7.8 | 2026-07-14 | Heap-based buffer overflow in Windows Network File System allows an authorized attacker to elevate privileges locally. |
CVE-2026-56194 | High | 8.8 | 2026-07-14 | Heap-based buffer overflow in Windows Network File System allows an authorized attacker to elevate privileges over a network. |
CVE-2026-56189 | High | 7.8 | 2026-07-14 | Heap-based buffer overflow in Microsoft Windows Media Foundation allows an unauthorized attacker to execute code locally. |
CVE-2026-56182 | High | 7.8 | 2026-07-14 | Integer overflow or wraparound in Windows NTFS allows an authorized attacker to elevate privileges locally. |
CVE-2026-56175 | High | 7.8 | 2026-07-14 | Heap-based buffer overflow in Windows NTFS allows an authorized attacker to elevate privileges locally. |
CVE-2026-56159 | Critical | 9.8 | 2026-07-14 | Heap-based buffer overflow in Windows DHCP Server allows an unauthorized attacker to execute code over a network. |
CVE-2026-56156 | High | 7.8 | 2026-07-14 | Heap-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code locally. |
CVE-2026-55947 | High | 7.8 | 2026-07-14 | Heap-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code locally. |
CVE-2026-55140 | High | 7.8 | 2026-07-14 | Heap-based buffer overflow in Microsoft Office allows an unauthorized attacker to execute code locally. |
CVE-2026-55137 | High | 7.8 | 2026-07-14 | Heap-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code locally. |
CVE-2026-55133 | High | 7.8 | 2026-07-14 | Heap-based buffer overflow in Microsoft Office OneNote allows an unauthorized attacker to execute code locally. |
CVE-2026-55131 | High | 7.8 | 2026-07-14 | Heap-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code locally. |
CVE-2026-55130 | High | 7.8 | 2026-07-14 | Heap-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code locally. |
CVE-2026-55129 | High | 7.8 | 2026-07-14 | Heap-based buffer overflow in Microsoft Office allows an unauthorized attacker to execute code locally. |
CVE-2026-55127 | High | 7.8 | 2026-07-14 | Heap-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code locally. |
CVE-2026-55125 | High | 7.8 | 2026-07-14 | Heap-based buffer overflow in Microsoft Office allows an unauthorized attacker to execute code locally. |
CVE-2026-55123 | High | 7.8 | 2026-07-14 | Heap-based buffer overflow in Microsoft Office PowerPoint allows an unauthorized attacker to execute code locally. |
CVE-2026-55120 | High | 7.8 | 2026-07-14 | Heap-based buffer overflow in Microsoft Office PowerPoint allows an unauthorized attacker to execute code locally. |
CVE-2026-55056 | High | 7.8 | 2026-07-14 | Heap-based buffer overflow in Microsoft Office allows an unauthorized attacker to execute code locally. |
CVE-2026-55053 | High | 7.8 | 2026-07-14 | Heap-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code locally. |
CVE-2026-55049 | High | 7.8 | 2026-07-14 | Heap-based buffer overflow in Microsoft Office allows an unauthorized attacker to execute code locally. |
CVE-2026-55048 | High | 7.8 | 2026-07-14 | Integer overflow or wraparound in Microsoft Office Excel allows an unauthorized attacker to execute code locally. |
CVE-2026-55043 | High | 7.8 | 2026-07-14 | Heap-based buffer overflow in Microsoft Office PowerPoint allows an unauthorized attacker to execute code locally. |
CVE-2026-55041 | High | 7.8 | 2026-07-14 | Heap-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code locally. |
CVE-2026-55039 | High | 7.8 | 2026-07-14 | Integer underflow (wrap or wraparound) in Microsoft Office Excel allows an unauthorized attacker to execute code locally. |
CVE-2026-55037 | High | 7.8 | 2026-07-14 | Heap-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code locally. |
CVE-2026-55033 | High | 7.8 | 2026-07-14 | Integer overflow or wraparound in Microsoft Office Word allows an unauthorized attacker to execute code locally. |
CVE-2026-55029 | High | 7.8 | 2026-07-14 | Heap-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code locally. |
CVE-2026-55017 | High | 7.8 | 2026-07-14 | Heap-based buffer overflow in Microsoft Office allows an unauthorized attacker to execute code locally. |
CVE-2026-55010 | Critical | 9.8 | 2026-07-14 | Heap-based buffer overflow in Minecraft Bedrock Dedicated Server allows an unauthorized attacker to execute code over a network. |
CVE-2026-54124 | High | 7.8 | 2026-07-14 | Integer overflow or wraparound in Windows Terminal allows an unauthorized attacker to execute code locally. |
CVE-2026-54115 | High | 7.8 | 2026-07-14 | Integer overflow or wraparound in Windows Active Directory allows an authorized attacker to elevate privileges locally. |
CVE-2026-50692 | High | 8.8 | 2026-07-14 | Heap-based buffer overflow in Desktop Window Manager allows an authorized attacker to elevate privileges locally. |
CVE-2026-50683 | High | 8.0 | 2026-07-14 | Heap-based buffer overflow in Windows DHCP Server allows an authorized attacker to elevate privileges over an adjacent network. |
CVE-2026-50680 | High | 8.2 | 2026-07-14 | Heap-based buffer overflow in Windows Hyper-V allows an authorized attacker to elevate privileges locally. |
CVE-2026-50679 | High | 7.8 | 2026-07-14 | Heap-based buffer overflow in Microsoft Windows Search Component allows an authorized attacker to elevate privileges locally. |
CVE-2026-50670 | High | 8.8 | 2026-07-14 | Out-of-bounds read in Windows Kernel allows an authorized attacker to elevate privileges locally. |
CVE-2026-50668 | Medium | 6.8 | 2026-07-14 | Heap-based buffer overflow in Windows NTFS allows an unauthorized attacker to elevate privileges with a physical attack. |
CVE-2026-50655 | High | 7.8 | 2026-07-14 | Heap-based buffer overflow in Windows Media allows an unauthorized attacker to execute code locally. |
CVE-2026-50518 | Critical | 9.8 | 2026-07-14 | Heap-based buffer overflow in Windows DHCP Server allows an unauthorized attacker to execute code over a network. |
CVE-2026-50499 | High | 7.8 | 2026-07-14 | Heap-based buffer overflow in Windows Print Spooler Components allows an authorized attacker to elevate privileges locally. |
CVE-2026-50494 | High | 7.8 | 2026-07-14 | Heap-based buffer overflow in Windows NTFS allows an authorized attacker to execute code locally. |
CVE-2026-50492 | Medium | 6.8 | 2026-07-14 | Heap-based buffer overflow in Windows Resilient File System (ReFS) allows an unauthorized attacker to execute code with a physical attack. |
CVE-2026-50489 | High | 8.8 | 2026-07-14 | Heap-based buffer overflow in Windows Win32K allows an authorized attacker to elevate privileges locally. |
CVE-2026-50484 | High | 7.8 | 2026-07-14 | Heap-based buffer overflow in Windows Kernel allows an authorized attacker to elevate privileges locally. |
CVE-2026-50482 | High | 7.3 | 2026-07-14 | Heap-based buffer overflow in Windows NTFS allows an authorized attacker to execute code locally. |
CVE-2026-50480 | High | 7.8 | 2026-07-14 | Heap-based buffer overflow in Windows Web Proxy Auto-Discovery Protocol (WPAD) allows an authorized attacker to elevate privileges locally. |
CVE-2026-50477 | High | 8.8 | 2026-07-14 | Heap-based buffer overflow in Windows Kernel allows an authorized attacker to elevate privileges locally. |
CVE-2026-50471 | High | 7.8 | 2026-07-14 | Heap-based buffer overflow in Windows NTFS allows an unauthorized attacker to execute code locally. |
CVE-2026-50461 | High | 7.8 | 2026-07-14 | Heap-based buffer overflow in Windows NTFS allows an unauthorized attacker to execute code locally. |
CVE-2026-50448 | High | 7.8 | 2026-07-14 | Heap-based buffer overflow in Windows NTFS allows an unauthorized attacker to execute code locally. |
CVE-2026-50447 | Critical | 9.8 | 2026-07-14 | Heap-based buffer overflow in Windows Message Queuing allows an unauthorized attacker to execute code over a network. |
CVE-2026-50417 | High | 7.8 | 2026-07-14 | Heap-based buffer overflow in Windows NTFS allows an authorized attacker to execute code locally. |
CVE-2026-50407 | High | 7.8 | 2026-07-14 | Heap-based buffer overflow in Windows Resilient File System (ReFS) allows an authorized attacker to elevate privileges locally. |
CVE-2026-50386 | High | 7.8 | 2026-07-14 | Heap-based buffer overflow in Windows NTFS allows an unauthorized attacker to execute code locally. |
CVE-2026-50380 | Critical | 9.6 | 2026-07-14 | Heap-based buffer overflow in Windows GDI+ allows an unauthorized attacker to execute code over a network. |
CVE-2026-50375 | Medium | 6.3 | 2026-07-14 | Heap-based buffer overflow in Windows DirectX allows an authorized attacker to elevate privileges locally. |
CVE-2026-50372 | High | 7.0 | 2026-07-14 | Buffer over-read in Windows Redirected Drive Buffering allows an authorized attacker to elevate privileges locally. |
CVE-2026-50370 | High | 8.8 | 2026-07-14 | Heap-based buffer overflow in Windows DHCP Server allows an unauthorized attacker to execute code over an adjacent network. |
CVE-2026-50363 | High | 7.8 | 2026-07-14 | Heap-based buffer overflow in Windows Push Notifications allows an authorized attacker to elevate privileges locally. |
CVE-2026-50362 | High | 7.8 | 2026-07-14 | Heap-based buffer overflow in Windows Resilient File System (ReFS) allows an unauthorized attacker to execute code locally. |
CVE-2026-50347 | High | 7.8 | 2026-07-14 | Heap-based buffer overflow in Windows Data dll allows an unauthorized attacker to execute code locally. |
CVE-2026-50336 | High | 7.8 | 2026-07-14 | Heap-based buffer overflow in Windows Media allows an authorized attacker to elevate privileges locally. |
CVE-2026-50332 | High | 7.8 | 2026-07-14 | Heap-based buffer overflow in Windows Kernel allows an authorized attacker to elevate privileges locally. |