20259 matches found
CVE-2026-69463
CVE-2026-69463 is a heap-based buffer overflow in the Windows NTFS filesystem component that allows an unauthorized attacker to achieve remote code execution over a network without requiring prior authentication or user interaction. The vulnerability is rated CVSS 3.1: 9.8 (Critical) by the CNA (...
CVE-2026-69491
CVE-2026-69491 is a heap-based buffer overflow in Windows Microsoft DirectMusic that allows an unauthorized, network-based attacker to achieve remote code execution without user interaction or prior privileges. The vulnerability is rated CVSS 9.8 (Critical) with high impact to confidentiality, in...
CVE-2026-69429
CVE-2026-69429 is a heap-based buffer overflow in the Windows Internet Key Exchange (IKE) Protocol Extension that allows an authorized attacker to achieve remote code execution over a network. The CVSS 3.1 score is 7.5 (HIGH) with the vector AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H, indicating that ex...
CVE-2026-69436
CVE-2026-69436 is a heap-based buffer overflow in Windows Error Reporting that allows an authorized attacker with low privileges to escalate privileges locally . The CVSS 3.1 score is 7.8 (HIGH) with a vector of AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H, indicating high impact across confidentiality, i...
CVE-2026-69420
CVE-2026-69420 is a heap-based buffer overflow in the Windows VOLSNAP.SYS driver that allows an authorized local attacker to escalate privileges . The CVSS 3.1 base score is 7.8 (HIGH) , with a local attack vector, low complexity, low privileges required, no user interaction, and high impact on c...
CVE-2026-69371
A heap-based buffer overflow in Windows Overlay Filter allows an authorized, low-privileged attacker to elevate privileges over a network , with user interaction required and high impact to confidentiality, integrity, and availability (CVSS 8.0 HIGH ). CISA's SSVC assessment indicates no known ex...
EUVD-2026-73233
Heap-based buffer overflow in Windows Storage Management Provider allows an authorized attacker to elevate privileges locally...
EUVD-2026-73231
Heap-based buffer overflow in Active Directory Domain Services allows an authorized attacker to elevate privileges locally...
CVE-2026-69336
CVE-2026-69336 is a heap-based buffer overflow in Microsoft Standard XPS that allows an authorized attacker to achieve privilege elevation over a network. The vulnerability is rated CVSS 3.1: 7.1 (HIGH) with a vector of AV:N/AC:H/PR:L/UI:R/S:U/C:H/I:H/A:H, indicating that exploitation requires us...
EUVD-2026-73205
Heap-based buffer overflow in Windows Kernel allows an authorized attacker to elevate privileges locally...
CVE-2026-68897
A heap-based buffer overflow in Microsoft Standard XPS allows an authorized attacker to escalate privileges locally . The vulnerability carries a CVSS 3.1 score of 7.0 (HIGH) with the vector AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H, indicating a local attack with high complexity, low required privileg...
CVE-2026-68841
Windows NTFS is affected by a heap-based buffer overflow that allows an authorized, local attacker with low privileges to elevate privileges without user interaction. The vulnerability is classified with a CVSS 3.1 score of 7.8 (HIGH) — AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H — indicating high impact...
CVE-2026-68833
CVE-2026-68833 is a heap-based buffer overflow in Windows NTFS (New Technology File System) that allows an unauthorized attacker to achieve code execution . The attack requires physical access to the system (CVSS:3.1 AV:P), with no privileges or user interaction needed, and results in high impact...
EUVD-2026-73190
Heap-based buffer overflow in SQL Server allows an authorized attacker to execute code locally...
CVE-2026-67373
This CVE describes a heap-based buffer overflow in Microsoft SQL Server that allows an authorized attacker to achieve remote code execution over a network. The vulnerability is rated CVSS 8.8 (HIGH) (AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H), indicating low attack complexity and low privilege requirem...
CVE-2026-69522
This is a heap-based buffer overflow in Visual Studio (and .NET , per the CVE record) that enables an unauthorized, remote attacker to achieve code execution over a network. The CVSS 3.1 base score is 8.8 (High) with an attack vector of network , low complexity, no privileges required, but user i...
Windows Imaging Component Remote Code Execution Vulnerability
Heap-based buffer overflow in Windows Imaging Component allows an unauthorized attacker to execute code over a network...
Graphic Fonts Remote Code Execution Vulnerability
Heap-based buffer overflow in Graphic Fonts allows an unauthorized attacker to execute code over a network...