Windows Encrypting File System (EFS) Elevation of Privilege Vulnerability

Heap-based buffer overflow in Windows Encrypting File System EFS allows an authorized attacker to elevate privileges locally...

Windows exFAT File System Elevation of Privilege Vulnerability

Heap-based buffer overflow in Windows exFAT File System allows an authorized attacker to elevate privileges locally...

Servicing Stack Updates Elevation of Privilege Vulnerability

Heap-based buffer overflow in Servicing Stack Updates allows an authorized attacker to elevate privileges locally...

Windows Camera Frame Server Monitor Elevation of Privilege Vulnerability

Heap-based buffer overflow in Windows Camera Frame Server Monitor allows an authorized attacker to elevate privileges locally...

Windows Biometric Service Information Disclosure Vulnerability

Heap-based buffer overflow in Windows Biometric Service allows an authorized attacker to disclose information locally...

Windows TCP/IP Elevation of Privilege Vulnerability

Heap-based buffer overflow in Windows TCP/IP allows an authorized attacker to elevate privileges locally...

Windows Installer Elevation of Privilege Vulnerability

Heap-based buffer overflow in Windows Installer allows an authorized attacker to elevate privileges locally...

Windows Error Reporting Elevation of Privilege Vulnerability

Heap-based buffer overflow in Windows Error Reporting allows an authorized attacker to elevate privileges locally...

Windows Distributed File System (DFS) Remote Code Execution Vulnerability

Heap-based buffer overflow in Windows Distributed File System DFS allows an authorized attacker to execute code over a network...

Microsoft OpenSSH for Windows Elevation of Privilege Vulnerability

Heap-based buffer overflow in OpenSSH for Windows allows an authorized attacker to elevate privileges locally...

Windows Installer Elevation of Privilege Vulnerability

Heap-based buffer overflow in Windows Installer allows an authorized attacker to elevate privileges locally...

Microsoft PostScript Printer Driver Remote Code Execution Vulnerability

Heap-based buffer overflow in Microsoft PostScript Printer Driver allows an unauthorized attacker to execute code over a network...

Windows Error Reporting Remote Code Execution Vulnerability

Heap-based buffer overflow in Windows Error Reporting allows an authorized attacker to execute code locally...

CVE-2026-74045 Wazuh 3.12.0 before 4.14.8 Heap Buffer Overflow in wazuh-analysisd FIM Decoder

Wazuh from 3.12.0 before 4.14.8 contains a heap buffer overflow in fimgeneratealert where fulllog is sized from input but written bounded by OSMAXSTR. An enrolled agent can send a crafted FIM syscheck event to corrupt manager heap memory and deterministically crash wazuh-analysisd, causing a...

CVE-2026-74045

Wazuh versions 3.12.0 before 4.14.8 are vulnerable to a heap buffer overflow in the fim_generate_alert() function of the wazuh-analysisd FIM Decoder. The issue occurs because full_log is sized based on the input but written with a boundary of OS_MAXSTR. An enrolled agent can trigger this by sendi...

CVE-2026-109940 FreeRDP 3.0.0-beta1 before 3.32.0 Stack Buffer Overflow via PKCS#11 Key Name

FreeRDP 3.0.0-beta1 before 3.32.0 on Unix builds with PKCS11 support has a stack-based buffer overflow in wprintKeyName in WinPR's NCrypt PKCS11 provider. It hex-encodes a key's CKAID, which can be up to 64 bytes, into a fixed 128-byte stack buffer. An attacker supplying a malicious PKCS11 token ...

CVE-2026-109940

FreeRDP 3.0.0-beta1 before 3.32.0 on Unix builds with PKCS11 support has a stack-based buffer overflow in wprintKeyName in WinPR's NCrypt PKCS11 provider. It hex-encodes a key's CKAID, which can be up to 64 bytes, into a fixed 128-byte stack buffer. An attacker supplying a malicious PKCS11 token ...

EUVD-2026-98705

FreeRDP 3.0.0-beta1 before 3.32.0 on Unix builds with PKCS11 support has a stack-based buffer overflow in wprintKeyName in WinPR's NCrypt PKCS11 provider. It hex-encodes a key's CKAID, which can be up to 64 bytes, into a fixed 128-byte stack buffer. An attacker supplying a malicious PKCS11 token ...

CVE-2026-109940 FreeRDP 3.0.0-beta1 before 3.32.0 Stack Buffer Overflow via PKCS#11 Key Name

FreeRDP 3.0.0-beta1 before 3.32.0 on Unix builds with PKCS11 support has a stack-based buffer overflow in wprintKeyName in WinPR's NCrypt PKCS11 provider. It hex-encodes a key's CKAID, which can be up to 64 bytes, into a fixed 128-byte stack buffer. An attacker supplying a malicious PKCS11 token ...

CVE-2026-109940

FreeRDP version 3.0.0-beta1 before 3.32.0 on Unix builds with PKCS#11 support is vulnerable to a stack-based buffer overflow . The issue resides in the wprintKeyName() function within WinPR's NCrypt PKCS#11 provider, where a key's CKA_ID (up to 64 bytes) is hex-encoded into a fixed 128-byte stack...