Filtered by CWE-122
Total 4024 CVE
CVE Vendors Products Updated CVSS v3.1
CVE-2026-62811 1 Microsoft 11 Windows 11 23h2, Windows 11 23h2, Windows 11 24h2 and 8 more 2026-08-14 7.8 High
Heap-based buffer overflow in Windows HTTP.sys allows an authorized attacker to elevate privileges locally.
CVE-2026-62822 1 Microsoft 26 Windows 10 1607, Windows 10 1809, Windows 10 21h2 and 23 more 2026-08-14 8.8 High
Integer overflow or wraparound in Windows GDI+ allows an unauthorized attacker to execute code over a network.
CVE-2026-62871 3 Apple, Linux, Microsoft 8 Macos, Linux Kernel, .net and 5 more 2026-08-14 7.8 High
Out-of-bounds write in .NET allows an unauthorized attacker to execute code locally.
CVE-2026-62885 1 Microsoft 26 Windows 10 1607, Windows 10 1809, Windows 10 21h2 and 23 more 2026-08-14 7.8 High
Heap-based buffer overflow in Windows Win32K allows an authorized attacker to elevate privileges locally.
CVE-2026-66810 1 Microsoft 10 365 Apps, Microsoft 365, Office 2019 and 7 more 2026-08-14 5.5 Medium
Heap-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to disclose information locally.
CVE-2026-63519 1 Microsoft 13 365 Apps, Microsoft 365, Microsoft 365 Apps For Enterprise and 10 more 2026-08-13 7.8 High
Heap-based buffer overflow in Microsoft Office allows an unauthorized attacker to execute code locally.
CVE-2026-63532 1 Microsoft 9 365 Apps, Microsoft 365, Office 2016 and 6 more 2026-08-13 7.8 High
Integer overflow or wraparound in Microsoft Office allows an unauthorized attacker to execute code locally.
CVE-2026-64898 1 Microsoft 8 365 Apps, Microsoft 365, Office 2019 and 5 more 2026-08-13 7.8 High
Heap-based buffer overflow in Microsoft Office allows an unauthorized attacker to execute code locally.
CVE-2026-64903 1 Microsoft 9 365 Apps, Microsoft 365, Office 2016 and 6 more 2026-08-13 7.8 High
Integer overflow or wraparound in Microsoft Office allows an unauthorized attacker to execute code locally.
CVE-2026-62799 1 Microsoft 2 Windows 11 26h1, Windows 11 26h1 2026-08-13 7.8 High
Heap-based buffer overflow in Windows SMB Client allows an authorized attacker to elevate privileges locally.
CVE-2026-48440 1 Adobe 3 Coldfusion, Coldfusion 2023, Coldfusion 2025 2026-08-13 8.1 High
ColdFusion is affected by a Heap-based Buffer Overflow vulnerability that could result in arbitrary code execution in the context of the current user. Exploit depends on conditions beyond the attacker's control. Exploitation of this issue does not require user interaction.
CVE-2026-73072 1 Vim 1 Vim 2026-08-13 7.8 High
Vim is an open source, command line text editor. Prior to 9.2.0846, set_sofo() in src/spellfile.c reuses sl_sal_first[] without resetting values left by set_sal_first(), so a crafted spell file containing an SN_SAL section before an SN_SOFO section causes under-counted mapping lists and attacker-influenced writes beyond a heap allocation. This issue is fixed in version 9.2.0846.
CVE-2026-68812 1 Microsoft 10 365 Apps, Excel, Excel 2016 and 7 more 2026-08-13 7.8 High
Heap-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code locally.
CVE-2026-68805 1 Microsoft 12 365 Apps, Excel, Excel 2016 and 9 more 2026-08-13 7.8 High
Heap-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code locally.
CVE-2026-68804 1 Microsoft 10 365 Apps, Excel, Excel 2016 and 7 more 2026-08-13 7.8 High
Numeric truncation error in Microsoft Office Excel allows an unauthorized attacker to execute code locally.
CVE-2026-68801 1 Microsoft 10 365 Apps, Excel, Excel 2016 and 7 more 2026-08-13 7.8 High
Heap-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code locally.
CVE-2026-68796 1 Microsoft 11 365, 365 Apps, Excel and 8 more 2026-08-13 7.8 High
Heap-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code locally.
CVE-2026-68794 1 Microsoft 10 365 Apps, Excel, Excel 2016 and 7 more 2026-08-13 7.8 High
Heap-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code locally.
CVE-2026-62772 1 Microsoft 2 Windows 11 26h1, Windows 11 26h1 2026-08-13 7.8 High
Heap-based buffer overflow in Windows Container Isolation FS Filter Driver (unionfs.sys) allows an authorized attacker to elevate privileges locally.
CVE-2026-18368 1 Teltonika-networks 1 Rutos 2026-08-13 N/A
In Teltonika Networks RUTOS devices, a vulnerability exists in modbusgwd due to improper handling of Modbus TCP request data. A remote, unauthenticated attacker with access to the affected service could trigger a heap-based buffer overflow, resulting in a denial of service.