CWE-787 · Out-of-bounds Write (page 16)
Page 16 of 100 — CVEs classified under CWE-787, newest first, with CVSS severity and publication dates.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2019-25466 | High | 8.4 | 2026-03-11 | Easy File Sharing Web Server 7.2 contains a local structured exception handling buffer overflow vulnerability that allows local attackers to execute arbitrary… |
CVE-2019-25463 | Medium | 6.2 | 2026-03-11 | SpotIE Internet Explorer Password Recovery 2.9.5 contains a denial of service vulnerability in the registration key input field that allows local attackers to… |
CVE-2026-27272 | High | 7.8 | 2026-03-10 | Illustrator versions 29.8.4, 30.1 and earlier are affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context… |
CVE-2026-21362 | High | 7.8 | 2026-03-10 | Illustrator versions 29.8.4, 30.1 and earlier are affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context… |
CVE-2026-0124 | High | 7.8 | 2026-03-10 | There is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with no additional execution privileges… |
CVE-2026-0123 | High | 8.4 | 2026-03-10 | In EfwApTransport::ProcessRxRing of efw_ap_transport.cc, there is a possible out of bounds write due to a missing bounds check. This could lead to local escala… |
CVE-2026-0122 | High | 8.4 | 2026-03-10 | In multiple places, there is a possible out of bounds write due to memory corruption. This could lead to remote code execution with no additional execution pri… |
CVE-2026-0120 | Critical | 9.8 | 2026-03-10 | In modem, there is a possible out of bounds write due to an incorrect bounds check. This could lead to remote code execution with no additional execution privi… |
CVE-2026-0119 | Medium | 6.8 | 2026-03-10 | In usim_SendMCCMNCIndMsg of usim_Registration.c, there is a possible out of bounds write due to memory corruption. This could lead to physical escalation of pr… |
CVE-2026-0117 | High | 8.4 | 2026-03-10 | In mfc_dec_dqbuf of mfc_dec_v4l2.c, there is a possible out of bounds write due to an incorrect bounds check. This could lead to local escalation of privilege… |
CVE-2026-0116 | Critical | 9.8 | 2026-03-10 | In __mfc_handle_released_buf of mfc_core_isr.c, there is a possible out of bounds write due to a missing bounds check. This could lead to remote code execution… |
CVE-2026-0114 | Critical | 9.8 | 2026-03-10 | In Modem, there is a possible out of bounds write due to an incorrect bounds check. This could lead to remote code execution with no additional execution privi… |
CVE-2026-0113 | Critical | 9.8 | 2026-03-10 | In ns_GetUserData of ns_SmscbUtilities.c, there is a possible out of bounds write due to an incorrect bounds check. This could lead to remote escalation of pri… |
CVE-2026-0111 | Critical | 9.8 | 2026-03-10 | In ns_GetUserData of ns_SmscbUtilities.c, there is a possible out of bounds write due to an incorrect bounds check. This could lead to remote escalation of pri… |
CVE-2025-36920 | High | 8.4 | 2026-03-10 | In hyp_alloc of arch/arm64/kvm/hyp/nvhe/alloc.c, there is a possible out of bounds write due to improper input validation. This could lead to local escalation… |
CVE-2026-27280 | High | 7.8 | 2026-03-10 | DNG SDK versions 1.7.1 2471 and earlier are affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of th… |
CVE-2026-27279 | High | 7.8 | 2026-03-10 | Substance3D - Stager versions 3.1.7 and earlier are affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the conte… |
CVE-2026-27275 | High | 7.8 | 2026-03-10 | Substance3D - Stager versions 3.1.7 and earlier are affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the conte… |
CVE-2026-27274 | High | 7.8 | 2026-03-10 | Substance3D - Stager versions 3.1.7 and earlier are affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the conte… |
CVE-2026-27273 | High | 7.8 | 2026-03-10 | Substance3D - Stager versions 3.1.7 and earlier are affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the conte… |
CVE-2026-31797 | Medium | 6.1 | 2026-03-10 | iccDEV provides a set of libraries and tools for working with ICC color management profiles. Prior to 2.3.1.5, there is a heap out-of-bounds read in CTiffImg… |
CVE-2026-31796 | High | 7.8 | 2026-03-10 | iccDEV provides a set of libraries and tools for working with ICC color management profiles. Prior to 2.3.1.5, there is a heap-based buffer overflow in icCurve… |
CVE-2026-31795 | High | 7.8 | 2026-03-10 | iccDEV provides a set of libraries and tools for working with ICC color management profiles. Prior to 2.3.1.5, there is a stack buffer overflow write in CIccXf… |
CVE-2026-30987 | High | 7.8 | 2026-03-10 | iccDEV provides a set of libraries and tools for working with ICC color management profiles. Prior to 2.3.1.5, there is a stack buffer overflow in CIccTagNum<>… |
CVE-2026-30985 | High | 7.8 | 2026-03-10 | iccDEV provides a set of libraries and tools for working with ICC color management profiles. Prior to 2.3.1.5, there is a heap-based buffer overflow write in C… |
CVE-2026-30983 | High | 7.8 | 2026-03-10 | iccDEV provides a set of libraries and tools for working with ICC color management profiles. Prior to 2.3.1.5, there is a stack buffer overflow in icFixXml() (… |
CVE-2026-30981 | Medium | 6.1 | 2026-03-10 | iccDEV provides a set of libraries and tools for working with ICC color management profiles. Prior to 2.3.1.5, there is a heap-buffer-overflow read in CIccXmlA… |
CVE-2026-30979 | High | 7.8 | 2026-03-10 | iccDEV provides a set of libraries and tools for working with ICC color management profiles. Prior to 2.3.1.5, there is a heap-based buffer overflow in CIccCal… |
CVE-2026-26108 | High | 7.8 | 2026-03-10 | Heap-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code locally. |
CVE-2026-25569 | High | 7.4 | 2026-03-10 | A vulnerability has been identified in SICAM SIAPP SDK (All versions < V2.1.7). An out-of-bounds write vulnerability exists in SICAM SIAPP SDK. This could allo… |
CVE-2026-24640 | Medium | 6.6 | 2026-03-10 | A Stack-based Buffer Overflow vulnerability [CWE-121] vulnerability in Fortinet FortiWeb 8.0.0 through 8.0.2, FortiWeb 7.6.0 through 7.6.6, FortiWeb 7.4 all ve… |
CVE-2026-23665 | High | 7.8 | 2026-03-10 | Heap-based buffer overflow in Azure Linux Virtual Machines allows an authorized attacker to elevate privileges locally. |
CVE-2025-54820 | High | 8.1 | 2026-03-10 | A Stack-based Buffer Overflow vulnerability [CWE-121] vulnerability in Fortinet FortiManager 7.4.0 through 7.4.2, FortiManager 7.2.0 through 7.2.10, FortiManag… |
CVE-2026-30929 | High | 7.7 | 2026-03-10 | ImageMagick is free and open-source software used for editing and manipulating digital images. Prior to versions 7.1.2-16 and 6.9.13-41, MagnifyImage uses a fi… |
CVE-2026-28693 | High | 8.1 | 2026-03-10 | ImageMagick is free and open-source software used for editing and manipulating digital images. Prior to versions 7.1.2-16 and 6.9.13-41, an integer overflow in… |
CVE-2026-3038 | High | 7.5 | 2026-03-09 | The rtsock_msg_buffer() function serializes routing information into a buffer. As a part of this, it copies sockaddr structures into a sockaddr_storage struct… |
CVE-2025-41766 | High | 8.8 | 2026-03-09 | A low-privileged remote attacker can trigger a stack-based buffer overflow via a crafted HTTP POST request using the ubr-network method resulting in full devic… |
CVE-2026-3823 | Critical | 9.8 | 2026-03-09 | EHG2408 series switch developed by Atop Technologies has a Stack-based Buffer Overflow vulnerability, allowing unauthenticated remote attackers to control the… |
CVE-2026-3630 | Critical | 9.8 | 2026-03-09 | Delta Electronics COMMGR2 has Stack-based Buffer Overflow vulnerability. |
CVE-2026-3703 | Critical | 9.8 | 2026-03-08 | A flaw has been found in Wavlink NU516U1 251208. This affects the function sub_401A10 of the file /cgi-bin/login.cgi. Executing a manipulation of the argument… |
CVE-2018-25198 | Medium | 6.2 | 2026-03-06 | eToolz 3.4.8.0 contains a denial of service vulnerability that allows local attackers to crash the application by supplying oversized input buffers. Attackers… |
CVE-2026-3606 | Low | 3.3 | 2026-03-05 | A vulnerability has been found in Ettercap 0.8.4-Garofalo. Affected by this vulnerability is the function add_data_segment of the file src/ettercap/utils/etter… |
CVE-2026-28552 | Medium | 6.5 | 2026-03-05 | Out-of-bounds write vulnerability in the IMS module. Impact: Successful exploitation of this vulnerability may affect availability. |
CVE-2026-1678 | Critical | 9.4 | 2026-03-05 | dns_unpack_name() caches the buffer tailroom once and reuses it while appending DNS labels. As the buffer grows, the cached size becomes incorrect, and the fin… |
CVE-2026-3544 | High | 8.8 | 2026-03-04 | Heap buffer overflow in WebCodecs in Google Chrome prior to 145.0.7632.159 allowed a remote attacker to perform an out of bounds memory write via a crafted HTM… |
CVE-2026-3537 | High | 8.8 | 2026-03-04 | Object lifecycle issue in PowerVR in Google Chrome on Android prior to 145.0.7632.159 allowed a remote attacker to potentially exploit heap corruption via a cr… |
CVE-2026-20023 | Medium | 6.1 | 2026-03-04 | A vulnerability in the OSPF protocol of Cisco Secure Firewall Adaptive Security Appliance (ASA) Software and Cisco Secure Firewall Threat Defense (FTD) Softwar… |
CVE-2026-20067 | Medium | 5.8 | 2026-03-04 | Multiple Cisco products are affected by a vulnerability in the Snort 3 detection engine that could allow an unauthenticated, remote attacker to cause the Snort… |
CVE-2026-23233 | High | 7.8 | 2026-03-04 | In the Linux kernel, the following vulnerability has been resolved: f2fs: fix to avoid mapping wrong physical block for swapfile Xiaolong Guo reported a f2fs… |
CVE-2026-3094 | High | 7.8 | 2026-03-04 | Delta Electronics CNCSoft-G2 lacks proper validation of the user-supplied file. If a user opens a malicious file, an attacker can leverage this vulnerability t… |
CVE-2026-27622 | High | 7.8 | 2026-03-03 | OpenEXR provides the specification and reference implementation of the EXR file format, an image storage format for the motion picture industry. In CompositeDe… |
CVE-2025-70240 | Critical | 9.8 | 2026-03-03 | Stack buffer overflow vulnerability in D-Link DIR-513 v1.10 via the curTime parameter to goform/formSetWAN_Wizard51. |
CVE-2025-70239 | Critical | 9.8 | 2026-03-03 | Stack buffer overflow vulnerability in D-Link DIR-513 v1.10 via the curTime parameter to goform/formSetWAN_Wizard55. |
CVE-2025-70234 | Critical | 9.8 | 2026-03-03 | Stack buffer overflow vulnerability in D-Link DIR-513 v1.10 via the curTime parameter to goform/formSetQoS. |
CVE-2026-29022 | High | 7.3 | 2026-03-03 | dr_libs dr_wav.h version 0.14.4 and earlier (fixed in commit 8a7258c) contain a heap buffer overflow vulnerability in the drwav__read_smpl_to_metadata_obj() fu… |
CVE-2025-70241 | Critical | 9.8 | 2026-03-03 | Stack buffer overflow vulnerability in D-Link DIR-513 v1.10 via the curTime parameter to goform/formSetWANType_Wizard5. |
CVE-2025-70237 | Critical | 9.8 | 2026-03-03 | Stack buffer overflow vulnerability in D-Link DIR-513 v1.10 via the curTime parameter to goform/formSetPortTr. |
CVE-2025-70236 | Critical | 9.8 | 2026-03-03 | Stack buffer overflow vulnerability in D-Link DIR-513 v1.10 via the curTime parameter to goform/formSetDomainFilter. |
CVE-2025-66945 | Critical | 9.1 | 2026-03-03 | A path traversal vulnerability exists in the ZIP extraction API of Zdir Pro 4.x. When a crafted ZIP archive is processed by the backend at /api/extract, files… |
CVE-2026-3342 | High | 7.2 | 2026-03-03 | An Out-of-bounds Write vulnerability in WatchGuard Fireware OS may allow an authenticated privileged administrator to execute arbitrary code with root permissi… |
CVE-2026-0037 | High | 8.4 | 2026-03-02 | In multiple functions of ffa.c, there is a possible memory corruption due to a logic error in the code. This could lead to local escalation of privilege with n… |
CVE-2026-0035 | High | 8.4 | 2026-03-02 | In createRequest of MediaProvider.java, there is a possible way for an app to gain read/write access to non-existing files due to a logic error in the code. Th… |
CVE-2026-0032 | High | 7.8 | 2026-03-02 | In multiple functions of mem_protect.c, there is a possible out-of-bounds write due to a logic error in the code. This could lead to local escalation of privil… |
CVE-2026-0030 | High | 8.4 | 2026-03-02 | In __host_check_page_state_range of mem_protect.c, there is a possible out of bounds write due to an incorrect bounds check. This could lead to local escalatio… |
CVE-2026-0010 | High | 8.4 | 2026-03-02 | In onTransact of IDrmManagerService.cpp, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privileg… |
CVE-2025-32313 | High | 8.4 | 2026-03-02 | In UsageEvents of UsageEvents.java, there is a possible out of bounds write due to an incorrect bounds check. This could lead to local escalation of privilege… |
CVE-2025-59603 | High | 7.8 | 2026-03-02 | Memory Corruption when processing invalid user address with nonstandard buffer address. |
CVE-2025-47373 | High | 7.8 | 2026-03-02 | Memory Corruption when accessing buffers with invalid length during TA invocation. |
CVE-2026-20444 | Medium | 6.7 | 2026-03-02 | In display, there is a possible memory corruption due to a missing bounds check. This could lead to local escalation of privilege if a malicious actor has alre… |
CVE-2026-20441 | Medium | 6.7 | 2026-03-02 | In MAE, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege if a malicious actor has alread… |
CVE-2026-20440 | Medium | 6.7 | 2026-03-02 | In MAE, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege if a malicious actor has alread… |
CVE-2026-20434 | High | 7.5 | 2026-03-02 | In Modem, there is a possible out of bounds write due to a missing bounds check. This could lead to remote escalation of privilege, if a UE has connected to a… |
CVE-2026-20430 | High | 8.8 | 2026-03-02 | In wlan AP FW, there is a possible out of bounds write due to an incorrect bounds check. This could lead to remote (proximal/adjacent) escalation of privilege… |
CVE-2026-20428 | Medium | 6.7 | 2026-03-02 | In display, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege if a malicious actor has al… |
CVE-2026-20427 | Medium | 6.7 | 2026-03-02 | In display, there is a possible escalation of privilege due to a missing bounds check. This could lead to local escalation of privilege if a malicious actor ha… |
CVE-2026-20426 | Medium | 6.7 | 2026-03-02 | In display, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege if a malicious actor has al… |
CVE-2026-20425 | Medium | 6.7 | 2026-03-02 | In display, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege if a malicious actor has al… |
CVE-2026-20423 | High | 7.8 | 2026-03-02 | In wlan STA driver, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with User execution… |
CVE-2026-20416 | High | 7.2 | 2026-03-02 | In pcie, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege if a malicious actor has alrea… |
CVE-2026-3408 | Medium | 4.3 | 2026-03-02 | A vulnerability was identified in Open Babel up to 3.1.1. This impacts the function OBAtom::GetExplicitValence of the file isrc/atom.cpp of the component CDXML… |
CVE-2026-3400 | High | 8.8 | 2026-03-02 | A security flaw has been discovered in Tenda AC15 up to 15.13.07.13. Affected by this issue is some unknown functionality of the file /goform/TextEditingConver… |
CVE-2026-3382 | Low | 3.3 | 2026-03-01 | A security flaw has been discovered in ChaiScript up to 6.1.0. The impacted element is the function chaiscript::Boxed_Number::get_as of the file include/chaisc… |
CVE-2026-22716 | Medium | 5.0 | 2026-02-27 | Out-of-bound write vulnerability in VMware Workstation 25H1 and below on any platform allows an actor with non-administrative privileges on a guest VM to termi… |
CVE-2026-24497 | Critical | 9.8 | 2026-02-27 | Stack-based Buffer Overflow vulnerability in SimTech Systems, Inc. ThinkWise allows Remote Code Inclusion.This issue affects ThinkWise: from 7 through 23. |
CVE-2026-20797 | Medium | 4.3 | 2026-02-27 | A stack based buffer overflow exists in an API route of XWEB Pro version 1.12.1 and prior, enabling unauthenticated attackers to cause stack corruption and a… |
CVE-2026-3172 | High | 8.1 | 2026-02-25 | Buffer overflow in parallel HNSW index build in pgvector 0.6.0 through 0.8.1 allows a database user to leak sensitive data from other relations or crash the da… |
CVE-2026-26965 | High | 8.8 | 2026-02-25 | FreeRDP is a free implementation of the Remote Desktop Protocol. Prior to version 3.23.0, in the RLE planar decode path, `planar_decompress_plane_rle()` writes… |
CVE-2026-26955 | High | 8.8 | 2026-02-25 | FreeRDP is a free implementation of the Remote Desktop Protocol. Prior to version 3.23.0, a malicious RDP server can trigger a heap buffer overflow in FreeRDP… |
CVE-2026-27692 | High | 7.1 | 2026-02-25 | iccDEV provides a set of libraries and tools for working with ICC color management profiles. In versions up to and including 2.3.1.4, heap-buffer-overflow read… |
CVE-2026-3137 | Medium | 5.3 | 2026-02-25 | A security vulnerability has been detected in CodeAstro Food Ordering System 1.0. This affects an unknown function of the file food_ordering.exe. Such manipula… |
CVE-2026-2807 | Critical | 9.8 | 2026-02-24 | Memory safety bugs present in Firefox 147 and Thunderbird 147. Some of these bugs showed evidence of memory corruption and we presume that with enough effort s… |
CVE-2026-2793 | Critical | 9.8 | 2026-02-24 | Memory safety bugs present in Firefox ESR 115.32, Firefox ESR 140.7, Thunderbird ESR 140.7, Firefox 147 and Thunderbird 147. Some of these bugs showed evidence… |
CVE-2026-2792 | Critical | 9.8 | 2026-02-24 | Memory safety bugs present in Firefox ESR 140.7, Thunderbird ESR 140.7, Firefox 147 and Thunderbird 147. Some of these bugs showed evidence of memory corruptio… |
CVE-2026-26284 | Medium | 6.5 | 2026-02-24 | ImageMagick is free and open-source software used for editing and manipulating digital images. Prior to versions 7.1.2-15 and 6.9.13-40, ImageMagick lacks prop… |
CVE-2026-25986 | Medium | 5.3 | 2026-02-24 | ImageMagick is free and open-source software used for editing and manipulating digital images. Prior to versions 7.1.2-15 and 6.9.13-40, a heap buffer overflow… |
CVE-2026-25971 | Medium | 6.2 | 2026-02-24 | ImageMagick is free and open-source software used for editing and manipulating digital images. Prior to versions 7.1.2-15 and 6.9.13-40, Magick fails to check… |
CVE-2026-25968 | High | 7.4 | 2026-02-24 | ImageMagick is free and open-source software used for editing and manipulating digital images. Prior to versions 7.1.2-15 and 6.9.13-40, a stack buffer overflo… |
CVE-2026-25967 | High | 7.4 | 2026-02-24 | ImageMagick is free and open-source software used for editing and manipulating digital images. Prior to version 7.1.2-15, a stack-based buffer overflow exists… |
CVE-2026-3062 | Critical | 9.8 | 2026-02-23 | Out of bounds read and write in Tint in Google Chrome on Mac prior to 145.0.7632.116 allowed a remote attacker to perform out of bounds memory access via a cra… |
CVE-2026-2940 | High | 7.3 | 2026-02-22 | A vulnerability was determined in Zaher1307 tiny_web_server up to 8d77b1044a0ca3a5297d8726ac8aa2cf944d481b. This affects the function tiny_web_server/tiny.c of… |