7-Zip < 26.02 XZ Heap Buffer Overflow RCE (ZDI-26-444)

The version of 7-Zip installed on the remote host is prior to 26.02. It is, therefore, affected by a remote code execution vulnerability as referenced in the ZDI-26-444 advisory. - This vulnerability allows remote attackers to execute arbitrary code on affected installations of 7-Zip. User...

PT-2026-113154

Name of the Vulnerable Software and Affected Versions Microsoft Windows Media Foundation affected versions not specified Description A heap-based buffer overflow occurs in Microsoft Windows Media Foundation, which allows an unauthorized attacker to execute arbitrary code over a network and affect...

Microsoft Windows: CVE-2026-69898: Windows Kernel Elevation of Privilege Vulnerability

Heap-based buffer overflow in Windows Kernel allows an authorized attacker to elevate privileges locally...

PT-2026-111803

Heap-based buffer overflow in Microsoft Office Access allows an unauthorized attacker to execute code over a network...

PT-2026-111804

Heap-based buffer overflow in Microsoft Office Access allows an unauthorized attacker to execute code over a network...

PT-2026-111580

Name of the Vulnerable Software and Affected Versions AMI APTIOV affected versions not specified Description Local access allows users to trigger a Buffer Access with Incorrect Length Value in the BIOS. This issue can lead to buffer overflows, memory corruption, and arbitrary code execution,...

CVE-2026-88089: Heap-based Buffer Overflow

Heap-based buffer overflow in SQL Server allows an authorized attacker to execute code locally...

CVE-2026-103823: Stack-based Buffer Overflow

Substance3D - Designer is affected by a Stack-based Buffer Overflow vulnerability that could result in an application denial-of-service. An attacker could exploit this vulnerability to crash the application, leading to a denial-of-service condition. Exploitation of this issue requires user...

CVE-2026-103854: Stack-based Buffer Overflow

Dimension is affected by a Stack-based Buffer Overflow vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file...

Microsoft Office: CVE-2026-97004: Microsoft Office Excel Remote Code Execution Vulnerability

Heap-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code over a network...

CVE-2026-102227: Heap-based Buffer Overflow

Heap-based buffer overflow in Windows Resilient File System ReFS allows an authorized attacker to execute code locally...

CVE-2026-102849: Heap-based Buffer Overflow

Heap-based buffer overflow in Microsoft Office Access allows an unauthorized attacker to execute code over a network...

CVE-2026-103827: Stack-based Buffer Overflow

Substance3D - Designer is affected by a Stack-based Buffer Overflow vulnerability that could result in an application denial-of-service. An attacker could exploit this vulnerability to crash the application, leading to a denial-of-service condition. Exploitation of this issue requires user...

CVE-2026-102215: Heap-based Buffer Overflow

Heap-based buffer overflow in Windows Universal Disk Format File System Driver UDFS allows an authorized attacker to elevate privileges locally...

CVE-2026-83945: Heap-based Buffer Overflow

Heap-based buffer overflow in SQL Server allows an authorized attacker to execute code over a network...

CVE-2025-58771: Integer Overflow or Wraparound

AMI APTIOV contains vulnerabilities in BIOS where users may cause “Integer Overflow or Wraparound” by local access. Successful exploitation of this vulnerability could lead to buffer overflows, memory corruption, and arbitrary code execution, and also impact Confidentiality, Integrity, and...

CVE-2025-58774: Buffer Access with Incorrect Length Value

AMI APTIOV contains vulnerabilities in BIOS where users may cause “Buffer Access with Incorrect Length Value” by local access. Successful exploitation of this vulnerability could lead to buffer overflows, memory corruption, and arbitrary code execution, and also impact Confidentiality, Integrity,...

CVE-2026-69884: Buffer Over-read

Buffer over-read in Windows GDI allows an authorized attacker to elevate privileges locally...

CVE-2026-105716: Heap-based Buffer Overflow

Heap-based buffer overflow in Microsoft Office Access allows an unauthorized attacker to execute code over a network...

CVE-2026-105714: Heap-based Buffer Overflow

Heap-based buffer overflow in Microsoft Office Access allows an unauthorized attacker to execute code over a network...