Filtered by CWE-787
Total 15353 CVE
CVE Vendors Products Updated CVSS v3.1
CVE-2021-34448 1 Microsoft 18 Windows 10 1507, Windows 10 1607, Windows 10 1809 and 15 more 2026-08-10 6.8 Medium
Scripting Engine Memory Corruption Vulnerability
CVE-2021-38653 1 Microsoft 3 365 Apps, Office, Office 2019 2026-08-10 7.8 High
Microsoft Office Visio Remote Code Execution Vulnerability
CVE-2021-26435 1 Microsoft 20 Windows 10, Windows 10 1507, Windows 10 1607 and 17 more 2026-08-10 8.1 High
Windows Scripting Engine Memory Corruption Vulnerability
CVE-2021-36952 1 Microsoft 2 Visual Studio 2017, Visual Studio 2019 2026-08-10 7.8 High
Visual Studio Remote Code Execution Vulnerability
CVE-2021-34480 1 Microsoft 16 Windows 10, Windows 10 1507, Windows 10 1607 and 13 more 2026-08-10 6.8 Medium
Scripting Engine Memory Corruption Vulnerability
CVE-2026-71263 1 Cwalter-at 1 Freemodbus 2026-08-10 9.1 Critical
The LINUXTCP port of FreeModbus contains an off-by-one bounds check in xMBPortTCPPool (demo/LINUXTCP/port/porttcp.c). The check uses a strict greater-than comparison instead of greater-than-or-equal against the 263-byte MB_TCP_BUF_SIZE limit.
CVE-2026-71255 1 Debevv 1 Nanomodbus 2026-08-10 8.6 High
nanoMODBUS through v1.23.0 contains an out-of-bounds write in the Modbus client-side recv_read_device_identification_res function (FC 0x2B/MEI 0x0E, Read Device Identification) in nanomodbus.c. The server-supplied object_length field (0-246) is validated only against the remaining PDU size (res_size_left) and is never validated against the caller-supplied buffers_length parameter.
CVE-2026-71254 1 Debevv 1 Nanomodbus 2026-08-10 9.8 Critical
nanoMODBUS through v1.23.0 contains an out-of-bounds write in the Modbus server-side handle_read_file_record function (FC 0x14, Read File Record) in nanomodbus.c. The function validates that the total request size does not exceed 245 bytes and that each sub-request's record_length is at most 124, but it never validates the CUMULATIVE response size across all sub-requests before processing them.
CVE-2026-54410 1 Debevv 1 Nanomodbus 2026-08-10 8.6 High
nanoMODBUS through v1.23.0 contains an off-by-one buffer overflow in the recv_msg_header function of the Modbus/TCP server that allows remote unauthenticated attackers to write one attacker-controlled byte past the end of the 260-byte receive buffer by sending a crafted MBAP frame whose Length field is set to 255.
CVE-2026-3298 1 Python 1 Cpython 2026-08-10 N/A
The method "sock_recvfrom_into()" of "asyncio.ProacterEventLoop" (Windows only) was missing a boundary check for the data buffer when using nbytes parameter. This allowed for an out-of-bounds buffer write if data was larger than the buffer size. Non-Windows platforms are not affected.
CVE-2026-19173 1 Google 1 Chrome 2026-08-08 8.3 High
Out of bounds write in Skia in Google Chrome prior to 151.0.7922.109 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page. (Chromium security severity: High)
CVE-2026-19159 1 Google 1 Chrome 2026-08-08 7.5 High
Use after free in Views in Google Chrome prior to 151.0.7922.109 allowed a remote attacker who convinced a user to engage in specific UI gestures to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: High)
CVE-2026-19156 1 Google 1 Chrome 2026-08-08 7.5 High
Heap buffer overflow in Base in Google Chrome prior to 151.0.7922.109 allowed an attacker who convinced a user to install a malicious extension to potentially exploit heap corruption via a crafted Chrome Extension. (Chromium security severity: High)
CVE-2026-19148 2 Google, Linux 2 Chrome, Linux Kernel 2026-08-08 8.3 High
Out of bounds write in GPU in Google Chrome on Linux prior to 151.0.7922.109 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page. (Chromium security severity: High)
CVE-2026-19157 1 Google 2 Android, Chrome 2026-08-07 9.6 Critical
Out of bounds write in ANGLE in Google Chrome on Android prior to 151.0.7922.109 allowed a remote attacker to potentially perform a sandbox escape via a crafted HTML page. (Chromium security severity: Critical)
CVE-2026-19162 1 Google 1 Chrome 2026-08-07 8.8 High
Out of bounds write in V8 in Google Chrome prior to 151.0.7922.109 allowed a remote attacker to execute arbitrary code inside a sandbox via a crafted HTML page. (Chromium security severity: High)
CVE-2026-17264 1 Medixant 1 Radiant Dicom 2026-08-07 4.3 Medium
Opening a crafted DICOM file containing malicious JPEG-compressed pixel data triggers an attacker-controlled heap out-of-bounds write, which may allow an attacker to remotely execute arbitrary code.
CVE-2026-55130 1 Microsoft 10 365 Apps, Office 2019, Office 2021 and 7 more 2026-08-07 7.8 High
Heap-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code locally.
CVE-2026-67858 1 Open62541 1 Open62541 2026-08-05 7.5 High
Buffer Overflow vulnerability exists in open62541 1.5.5 when the Local Discovery Server (LDS) is built with multicast discovery enabled through the MDNSD backend. An unauthenticated remote attacker can send a RegisterServer or RegisterServer2 request containing many unique discoveryUrls. This allows remote attackers to cause a denial of service.
CVE-2024-41056 2 Linux, Redhat 3 Linux Kernel, Enterprise Linux, Rhel Eus 2026-08-05 7.3 High
In the Linux kernel, the following vulnerability has been resolved: firmware: cs_dsp: Use strnlen() on name fields in V1 wmfw files Use strnlen() instead of strlen() on the algorithm and coefficient name string arrays in V1 wmfw files. In V1 wmfw files the name is a NUL-terminated string in a fixed-size array. cs_dsp should protect against overrunning the array if the NUL terminator is missing.