1688 matches found
CVE-2021-3156-Exp
CVE-2021-3156-Exp CVE-2021-3156 用のエクスプロイトです。 一晩中調査した結果、ついに成功しました！ 謝辞 https://www.qualys.com/2021/01/26/cve-2021-3156/baron-samedit-heap-based-overflow-sudo.txt...
Astra Linux – Vulnerability in libwebp
A heap-based buffer overflow was discovered in libwebp in versions prior to 1.0.1 in the GetLE24 function...
CVE-2026-90682
A heap-based buffer overflow in the ProcessGpsInfo function of gpsinfo.c (WebP EXIF Handler) affects Matthias-Wandel jhead up to 3.3 . Manipulation of the TAG_GPS_LAT/TAG_GPS_LONG arguments triggers the overflow. The attack vector is local with low privileges required, yielding partial impact on ...
CVE-2026-90577
CVE-2026-90577 is a heap-based buffer overflow in the MP4Box component of GPAC (up to commit f1219cde), specifically in the function gf_node_get_field within scenegraph/base_scenegraph.c. The vulnerability requires local access with low privileges and no user interaction, resulting in low impact ...
CVE-2026-85103
Check Point Quantum Security Management and Quantum Security Gateway are affected by a heap-based buffer overflow in the VPN certificate ASN.1 decoding process. An unauthenticated remote attacker may exploit this to achieve arbitrary code execution , yielding a CVSS 3.1 score of 9.8 (Critical) wi...
Security Updates for Microsoft Outlook Products (September 2026)
The Microsoft Outlook Products are missing a security update. They are, therefore, affected by multiple vulnerabilities: - Heap-based buffer overflow in Microsoft Office Outlook allows an unauthorized attacker to execute code over a network. CVE-2026-69629 - Use of uninitialized resource in...
CVE-2026-86716
Cesanta mJS versions up to 1.26 contain a heap-based buffer overflow in the function skip_spaces_and_comments (file src/mjs_tok.c ). The flaw can be triggered remotely with no authentication required. The exploit has been publicly disclosed with proof-of-concept maturity, but the project has not ...
CVE-2026-86716 Cesanta mJS mjs_tok.c skip_spaces_and_comments heap-based overflow
A vulnerability was determined in Cesanta mJS up to 1.26. Affected is the function skipspacesandcomments of the file src/mjstok.c. Executing a manipulation can lead to heap-based buffer overflow. The attack can be launched remotely. The exploit has been publicly disclosed and may be utilized. The...
CVE-2026-73020
Heap-based buffer overflow in Windows Biometric Service allows an authorized attacker to elevate privileges locally...
CVE-2026-73013
Heap-based buffer overflow in Windows Imaging Component allows an unauthorized attacker to execute code over a network...
CVE-2026-73000
Heap-based buffer overflow in Windows Biometric Service allows an authorized attacker to elevate privileges locally...
CVE-2026-71350
Heap-based buffer overflow in Windows Spaceport.sys allows an unauthorized attacker to execute code with a physical attack...
CVE-2026-69563
Heap-based buffer overflow in Windows Program Compatibility Assistant Service allows an authorized attacker to elevate privileges locally...
EUVD-2026-73287
Heap-based buffer overflow in Microsoft Office allows an unauthorized attacker to execute code over a network...
EUVD-2026-73144
Heap-based buffer overflow in Windows Audio Service allows an authorized attacker to elevate privileges locally...
EUVD-2026-73086
Heap-based buffer overflow in Windows Paint allows an unauthorized attacker to execute code over a network...
CVE-2026-68841
Windows NTFS is affected by a heap-based buffer overflow that allows an authorized, local attacker with low privileges to elevate privileges without user interaction. The vulnerability is classified with a CVSS 3.1 score of 7.8 (HIGH) — AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H — indicating high impact...
Microsoft SQL Server Remote Code Execution Vulnerability
Heap-based buffer overflow in SQL Server allows an authorized attacker to execute code locally...