CVE-2026-111458 | | | 2026-10-16 | The fanx_fingerprint function in ssl/sslxprint.c of ssldump allocates a heap buffer for formatting FAN/1 X.509 certificate fingerprints. The allocation size is… |
CVE-2026-111382 | High | 8.8 | 2026-10-16 | FreeRDP before 3.32.0 contains a client-side heap out-of-bounds write vulnerability in general_LumaToYUV444 and general_ChromaV2ToYUV444 that allows malicious… |
CVE-2026-89062 | Medium | 5.5 | 2026-10-16 | A potential out-of-bounds write vulnerability was reported in the Lenovo Energy Management driver that could allow a local authenticated user to cause a blue s… |
CVE-2026-111280 | High | 7.4 | 2026-10-15 | snap7 through 1.4.3 contains an out-of-bounds write vulnerability in TSnap7MicroClient::opReadArea() that allows malicious S7 peers to overflow client buffers… |
CVE-2026-111275 | Medium | 6.1 | 2026-10-15 | nifti_clib through 3.0.1 contains a stack-based out-of-bounds read and write vulnerability in nifti_convert_n2hdr2nim() because the NIfTI-2 dim[0] value is nev… |
CVE-2026-111270 | Medium | 6.1 | 2026-10-15 | libmodplug through 0.8.9.1 contains a heap-based out-of-bounds write in CSoundFile::ReadDSM() in src/load_dsm.cpp because nPat is never checked against MAX_PAT… |
CVE-2026-111161 | Medium | 6.1 | 2026-10-15 | libADLMIDI 1.6.2 through 1.6.2.1 contains an off-by-one stack out-of-bounds write vulnerability in BW_MidiSequencer that allows attackers to corrupt stack memo… |
CVE-2026-111157 | Medium | 6.1 | 2026-10-15 | SoX through 14.4.2 contains a heap out-of-bounds write vulnerability in lsx_ms_adpcm_block_expand_i() in src/adpcm.c, triggered by an odd samplesPerBlock value… |
CVE-2026-111156 | Medium | 6.1 | 2026-10-15 | libTiMidity through 0.2.8 contains an out-of-bounds access vulnerability in init_soundfont() in src/sndfont.c that allows attackers to corrupt memory by supply… |
CVE-2026-111154 | Medium | 6.1 | 2026-10-15 | libTiMidity through 0.2.8 contains a stack out-of-bounds write vulnerability in the SoundFont loader that allows attackers to corrupt stack memory via unchecke… |
CVE-2026-111151 | Medium | 6.1 | 2026-10-15 | OpenJPH through 0.32.0 contains a heap out-of-bounds write vulnerability in the HTJ2K cleanup-pass decoder that allows attackers to corrupt memory via one-row… |
CVE-2026-111137 | Medium | 6.1 | 2026-10-15 | libsmi through 0.5.0 contains an out-of-bounds write vulnerability in smiValueAsString() in lib/smi.c that allows attackers to overflow a fixed 1024-byte stati… |
CVE-2026-111136 | Medium | 6.1 | 2026-10-15 | libInstPatch through 1.1.7 contains a heap out-of-bounds write vulnerability in the SoundFont 2 loader because ipatch_sf2_gen_is_valid() does not range-check g… |
CVE-2026-111123 | Medium | 6.1 | 2026-10-15 | FluidSynth through 2.6.1 contains an out-of-bounds write vulnerability that allows attackers to corrupt heap and stack memory by supplying unvalidated SoundFon… |
CVE-2026-110875 | Medium | 6.1 | 2026-10-15 | AdPlug through 2.4 contains a heap-based buffer overflow in CksmPlayer::update() in src/ksm.cpp that writes past the fixed databuf[2048] array without bounds c… |
CVE-2026-55246 | High | 7.8 | 2026-10-15 | bincookie is a header-only binarycookies parser. Prior to 0.1.9, bincookie_init_file() in bincookie.h allocates a buffer using the actual .binarycookies file l… |
CVE-2026-79841 | Medium | 5.8 | 2026-10-15 | A buffer overflow vulnerability in HPE NonStop RDMA SERVICES NSK may cause out-of-bounds memory write, which may result in memory corruption. |
CVE-2026-101310 | High | 7.0 | 2026-10-15 | The HDA audio device model did not check for zero-length Buffer Descriptor List (BDL) entries when starting a stream. A zero-length entry caused an out-of-bou… |
CVE-2026-58098 | | | 2026-10-15 | When semop(2) blocks waiting for a semaphore condition, it releases the per-set lock and sleeps. Upon waking, it checks the sequence number embedded in the se… |
CVE-2026-101307 | Medium | 6.5 | 2026-10-15 | When the PCM sample array needs to grow, the RACK stack doubles a 16-bit allocation counter. Repeated doublings caused the counter to wrap to zero, resulting… |
CVE-2026-110839 | High | 7.1 | 2026-10-14 | FreeRDP 3.3.0 before 3.32.0, when built with WINPR_UTILS_IMAGE_JPEG=ON, has a heap-based out-of-bounds write in winpr_convert_from_jpeg because grayscale JPEG… |
CVE-2026-110698 | Medium | 6.3 | 2026-10-14 | A security vulnerability has been detected in Praat up to 7.0.02. Affected is the function whisper_model_load of the file external/whispercpp/whisper.cpp of th… |
CVE-2026-92158 | High | 7.2 | 2026-10-14 | F´ (F Prime) is a framework that enables development and deployment of spaceflight and other embedded software applications. Prior to 4.2.0, Svc::FpySequencer… |
CVE-2026-86856 | Medium | 6.5 | 2026-10-14 | A flaw was found in the DPDK nfp vDPA driver. Stack and heap buffers sized for a single queue pair can be overflowed when more virtqueues are configured, leadi… |
CVE-2026-86849 | Medium | 6.5 | 2026-10-14 | A flaw was found in DPDK lib/vhost vhost-crypto. Integer overflow in chain length checks, and missing length checks on the RSA path, can overflow a host buffer… |
CVE-2026-86846 | Medium | 6.5 | 2026-10-14 | A flaw was found in DPDK lib/vhost vhost-crypto. A guest can supply an avail-ring descriptor index that is used without bounds checking, causing an out-of-boun… |
CVE-2026-103415 | | | 2026-10-14 | When a TLS 1.3 client processes a HelloRetryRequest, it copies the server's cookie into its second ClientHello without checking that the cookie fits in the out… |
CVE-2026-103414 | | | 2026-10-14 | The GUIX binary resource (theme) loader sizes its arena and populates it in two separate passes that traverse the resource file with independent cursor arithme… |
CVE-2026-101976 | High | 7.5 | 2026-10-14 | An Out-of-bounds Write vulnerability in the routing protocol daemon (rpd) of Juniper Networks Junos OS and Junos OS Evolved allows an eBGP peer which has not n… |
CVE-2026-86565 | High | 8.2 | 2026-10-14 | A flaw was found in DPDK lib/vhost. A guest can desynchronize virtqueue size from inflight descriptor table size, causing an out-of-bounds write in the host vh… |
CVE-2026-75084 | Medium | 6.8 | 2026-10-14 | The CC1200 sub-GHz IEEE 802.15.4 driver takes the PHY packet length from the first byte of the radio's RX FIFO in get_packet_length() and validates it in verif… |
CVE-2026-103993 | Medium | 6.8 | 2026-10-14 | An Out-of-bounds Write vulnerability in the routing protocol daemon (rpd) of Juniper Networks Junos OS and Junos OS Evolved allows an adjacent attacker which s… |
CVE-2026-102179 | High | 7.5 | 2026-10-14 | An Out-of-bounds Write vulnerability in the routing protocol daemon (rpd) of Juniper Networks Junos OS and Junos OS Evolved allows an attacker with access to a… |
CVE-2026-102177 | High | 7.6 | 2026-10-14 | An Out-of-bounds Write vulnerability in the routing protocol daemon (rpd) of Juniper Networks Junos OS and Junos OS Evolved allows an adjacent unauthenticated… |
CVE-2026-102045 | Medium | 6.5 | 2026-10-14 | An Out-of-bounds Write Out-of-bounds Write vulnerability in lacpd of Juniper Networks Junos OS Evolved allows a Layer-2-adjacent attacker to cause a denial of… |
CVE-2026-102017 | Medium | 6.5 | 2026-10-14 | An Out-of-bounds Write vulnerability in the rpd process of Juniper Networks Junos OS and Junos OS Evolved allows an unauthenticated attacker to cause a routing… |
CVE-2026-101960 | Medium | 6.5 | 2026-10-14 | An Out-of-bounds Write vulnerability in the routing protocol daemon (rpd) of Juniper Networks Junos OS Evolved on QFX5240, QFX5241 and QFX5250 configured for B… |
CVE-2026-101934 | Medium | 4.4 | 2026-10-14 | An Out-of-bounds Write vulnerability in eventd of Juniper Networks Junos OS and Junos OS Evolved allows a local attacker to cause a Denial of Service (DoS) via… |
CVE-2026-100236 | High | 8.6 | 2026-10-14 | A flaw was found in the DPDK GSO library. When software GSO copies packet headers into a new mbuf, it does not check that the header fits in the source first s… |
CVE-2026-49206 | Low | 2.9 | 2026-10-14 | rapidcsv is a C++ CSV parser library. Prior to 8.99, RemoveColumn, InsertColumn, RemoveRow, InsertRow, and GetColumnNames converted size_t indexes to int befor… |
CVE-2026-110734 | Low | 2.5 | 2026-10-14 | Godot Engine through 4.7.2 has a heap out-of-bounds write in the Radiance HDR (.hdr) image decoder (modules/hdr/image_loader_hdr.cpp). The run-length decoding… |
CVE-2026-110715 | Medium | 6.1 | 2026-10-14 | MuJS 1.3.6 before 1.3.9 contains a heap out-of-bounds read and write vulnerability in Array.prototype.sort that allows attackers to corrupt memory by inflating… |
CVE-2026-110654 | Medium | 6.1 | 2026-10-14 | libzvbi through 0.2.45 contains an out-of-bounds write vulnerability in the Teletext decoder that allows attackers to corrupt memory by supplying unvalidated D… |
CVE-2026-110601 | Medium | 6.3 | 2026-10-14 | libsixel before 1.8.7-r1 and 1.9.0 through 1.10.5 contains a heap out-of-bounds write vulnerability in gif_init_frame() in src/fromgif.c, which never checks th… |
CVE-2017-20286 | High | 7.8 | 2026-10-14 | DevIL through 1.8.0 contains a heap-based buffer overflow in iGetPalette() in il_gif.cpp that allows attackers to write beyond a 768-byte palette buffer when l… |
CVE-2026-100229 | Medium | 6.5 | 2026-10-14 | A flaw was found in GStreamer's H.266 codec parser library (libgstcodecparsers). An out-of-bounds write vulnerability exists in the DCI parsing function, where… |
CVE-2026-86476 | High | 8.4 | 2026-10-14 | A flaw was found in gst-plugins-base. A heap buffer overflow can be triggered when processing video buffers whose attached GstVideoMeta metadata declares plane… |
CVE-2026-100231 | Medium | 6.1 | 2026-10-14 | A flaw was found in the GStreamer multimedia framework's ASF muxer plugin (asfmux). When writing string metadata tags containing Unicode characters outside the… |
CVE-2026-86573 | Medium | 5.1 | 2026-10-14 | Out-of-bounds write vulnerability in Hitachi Disk Array Driver for AIX and Hitachi Disk Array Driver for Virtual I/O Server.
This issue affects Hitachi Disk A… |
CVE-2026-84419 | | | 2026-10-13 | Out-of-bounds write vulnerability in Citrix Workspace app for Windows.
This issue affects Workspace app for Windows: before 2603.20 CR, before LTSR 2607 Hotfi… |
CVE-2026-97312 | High | 7.8 | 2026-10-13 | Photoshop Desktop is affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user. Exploit… |
CVE-2026-96523 | High | 7.8 | 2026-10-13 | Photoshop Desktop is affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user. Exploit… |
CVE-2026-96522 | High | 7.8 | 2026-10-13 | Photoshop Desktop is affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user. Exploit… |
CVE-2026-96521 | High | 7.8 | 2026-10-13 | Photoshop Desktop is affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user. Exploit… |
CVE-2026-95641 | High | 7.8 | 2026-10-13 | Photoshop Desktop is affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user. Exploit… |
CVE-2026-95637 | High | 7.8 | 2026-10-13 | Photoshop Desktop is affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user. Exploit… |
CVE-2026-83966 | High | 7.8 | 2026-10-13 | Substance3D - Sampler is affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user. Exp… |
CVE-2026-78628 | Medium | 6.0 | 2026-10-13 | The Okta Credential Provider for Windows does not validate a serialized credential buffer before interpreting it as a Kerberos logon structure. The buffer size… |
CVE-2026-104347 | High | 7.8 | 2026-10-13 | Photoshop Desktop is affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user. Exploit… |
CVE-2026-104346 | High | 7.8 | 2026-10-13 | Photoshop Desktop is affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user. Exploit… |
CVE-2026-103821 | High | 7.8 | 2026-10-13 | Substance3D - Designer is affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user. Ex… |
CVE-2026-100129 | High | 7.8 | 2026-10-13 | Bridge is affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of th… |
CVE-2026-100128 | High | 7.8 | 2026-10-13 | Bridge is affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of th… |
CVE-2026-100127 | High | 7.8 | 2026-10-13 | Bridge is affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of th… |
CVE-2026-100112 | High | 7.8 | 2026-10-13 | Photoshop Desktop is affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user. Exploit… |
CVE-2026-100111 | High | 7.8 | 2026-10-13 | Photoshop Desktop is affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user. Exploit… |
CVE-2026-103844 | High | 7.8 | 2026-10-13 | Dimension is affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of… |
CVE-2026-103839 | High | 7.8 | 2026-10-13 | Substance3D - Stager is affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user. Expl… |
CVE-2026-103838 | High | 7.8 | 2026-10-13 | Substance3D - Stager is affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user. Expl… |
CVE-2026-103837 | High | 7.8 | 2026-10-13 | Substance3D - Stager is affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user. Expl… |
CVE-2026-103836 | High | 7.8 | 2026-10-13 | Substance3D - Stager is affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user. Expl… |
CVE-2026-103835 | High | 7.8 | 2026-10-13 | Substance3D - Stager is affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user. Expl… |
CVE-2026-103834 | High | 7.8 | 2026-10-13 | Substance3D - Stager is affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user. Expl… |
CVE-2026-103833 | High | 7.8 | 2026-10-13 | Substance3D - Stager is affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user. Expl… |
CVE-2026-103832 | High | 7.8 | 2026-10-13 | Substance3D - Stager is affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user. Expl… |
CVE-2026-97762 | High | 8.8 | 2026-10-13 | Out-of-bounds write in Microsoft Office Excel allows an unauthorized attacker to execute code over a network. |
CVE-2026-96235 | High | 8.8 | 2026-10-13 | Out-of-bounds write in .NET allows an unauthorized attacker to execute code over a network. |
CVE-2026-96233 | High | 7.5 | 2026-10-13 | Out-of-bounds write in ASP.NET Core allows an unauthorized attacker to deny service over a network. |
CVE-2026-96224 | High | 8.8 | 2026-10-13 | Out-of-bounds write in .NET allows an unauthorized attacker to execute code over a network. |
CVE-2026-96219 | Critical | 9.8 | 2026-10-13 | Out-of-bounds write in Windows Local Security Authority Subsystem Service (LSASS) allows an unauthorized attacker to execute code over a network. |
CVE-2026-88165 | High | 8.8 | 2026-10-13 | Out-of-bounds write in Active Directory Domain Services allows an authorized attacker to execute code over a network. |
CVE-2026-85826 | High | 7.0 | 2026-10-13 | Out-of-bounds write in Windows Fast FAT Driver allows an authorized attacker to elevate privileges locally. |
CVE-2026-84016 | High | 7.8 | 2026-10-13 | Out-of-bounds write in Windows EAPHost Service allows an authorized attacker to elevate privileges locally. |
CVE-2026-83929 | High | 8.8 | 2026-10-13 | Out-of-bounds write in Windows GDI allows an unauthorized attacker to execute code over a network. |
CVE-2026-83910 | Critical | 9.8 | 2026-10-13 | Out-of-bounds write in RPC Runtime allows an unauthorized attacker to execute code over a network. |
CVE-2026-83712 | High | 7.8 | 2026-10-13 | Out-of-bounds write in Windows NTFS allows an authorized attacker to execute code locally. |
CVE-2026-70303 | High | 7.8 | 2026-10-13 | Out-of-bounds write in Windows Kernel allows an authorized attacker to elevate privileges locally. |
CVE-2026-70197 | High | 8.1 | 2026-10-13 | Out-of-bounds write in .NET allows an unauthorized attacker to execute code over a network. |
CVE-2026-70058 | High | 7.5 | 2026-10-13 | Out-of-bounds write in Windows DHCP Server allows an unauthorized attacker to execute code over a network. |
CVE-2026-70007 | High | 8.8 | 2026-10-13 | Out-of-bounds write in .NET Framework allows an unauthorized attacker to execute code over a network. |
CVE-2026-69705 | Critical | 9.8 | 2026-10-13 | Out-of-bounds write in Windows iSCSI allows an unauthorized attacker to execute code over a network. |
CVE-2026-108457 | High | 8.1 | 2026-10-13 | Out-of-bounds write in Microsoft Windows PDF allows an unauthorized attacker to execute code over a network. |
CVE-2026-106625 | High | 7.8 | 2026-10-13 | Adobe Framemaker is affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user. Exploita… |
CVE-2026-105005 | High | 8.1 | 2026-10-13 | Out-of-bounds write in Windows Schannel allows an unauthorized attacker to execute code over a network. |
CVE-2026-104341 | High | 7.8 | 2026-10-13 | Adobe Framemaker is affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user. Exploita… |
CVE-2026-103967 | High | 7.8 | 2026-10-13 | Adobe Framemaker is affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user. Exploita… |
CVE-2026-109827 | Medium | 6.3 | 2026-10-13 | A vulnerability has been found in GPAC up to 26.07.0. This vulnerability affects the function gf_m2ts_decode_ait of the file src/media_tools/ait.c of the compo… |
CVE-2026-95115 | High | 7.5 | 2026-10-13 | Buffer Overflow vulnerability in libwebsockets main 106d542c allows a remote attacker to cause a denial of service via the LEJP JSON parser |
CVE-2026-77094 | | | 2026-10-13 | CvFWD contained an out-of-bounds write affecting service availability. Software customers upgrade to resolved maintenance release. Software customers upgrade… |
CVE-2026-109680 | Medium | 5.3 | 2026-10-13 | FreeRDP 3.18.0 before 3.32.0 has a heap-based out-of-bounds write in freerdp_interruptible_get_line, which shrinks the buffer to 32 bytes while keeping a pre-f… |