CVE-2021-3156-Exp

CVE-2021-3156-Exp The exploit of CVE-2021-3156. After an overnight researching, finally, I got it! Thanks https://www.qualys.com/2021/01/26/cve-2021-3156/baron-samedit-heap-based-overflow-sudo.txt...

CVE-2026-85103

Check Point Quantum Security Management and Quantum Security Gateway are affected by a heap-based buffer overflow in the VPN certificate ASN.1 decoding process. An unauthenticated remote attacker may exploit this to achieve arbitrary code execution , yielding a CVSS 3.1 score of 9.8 (Critical) wi...

Security Updates for Microsoft Outlook Products (September 2026)

The Microsoft Outlook Products are missing a security update. They are, therefore, affected by multiple vulnerabilities: - Heap-based buffer overflow in Microsoft Office Outlook allows an unauthorized attacker to execute code over a network. CVE-2026-69629 - Use of uninitialized resource in...

CVE-2026-86716

Cesanta mJS versions up to 1.26 contain a heap-based buffer overflow in the function skip_spaces_and_comments (file src/mjs_tok.c ). The flaw can be triggered remotely with no authentication required. The exploit has been publicly disclosed with proof-of-concept maturity, but the project has not ...

CVE-2026-86716 Cesanta mJS mjs_tok.c skip_spaces_and_comments heap-based overflow

A vulnerability was determined in Cesanta mJS up to 1.26. Affected is the function skipspacesandcomments of the file src/mjstok.c. Executing a manipulation can lead to heap-based buffer overflow. The attack can be launched remotely. The exploit has been publicly disclosed and may be utilized. The...

CVE-2026-73020

Heap-based buffer overflow in Windows Biometric Service allows an authorized attacker to elevate privileges locally...

CVE-2026-73013

Heap-based buffer overflow in Windows Imaging Component allows an unauthorized attacker to execute code over a network...

CVE-2026-73000

Heap-based buffer overflow in Windows Biometric Service allows an authorized attacker to elevate privileges locally...

CVE-2026-71350

Heap-based buffer overflow in Windows Spaceport.sys allows an unauthorized attacker to execute code with a physical attack...

CVE-2026-69563

Heap-based buffer overflow in Windows Program Compatibility Assistant Service allows an authorized attacker to elevate privileges locally...

EUVD-2026-73287

Heap-based buffer overflow in Microsoft Office allows an unauthorized attacker to execute code over a network...

EUVD-2026-73144

Heap-based buffer overflow in Windows Audio Service allows an authorized attacker to elevate privileges locally...

EUVD-2026-73086

Heap-based buffer overflow in Windows Paint allows an unauthorized attacker to execute code over a network...

CVE-2026-68841

Windows NTFS is affected by a heap-based buffer overflow that allows an authorized, local attacker with low privileges to elevate privileges without user interaction. The vulnerability is classified with a CVSS 3.1 score of 7.8 (HIGH) — AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H — indicating high impact...

Microsoft SQL Server Remote Code Execution Vulnerability

Heap-based buffer overflow in SQL Server allows an authorized attacker to execute code locally...

Windows Media Player Remote Code Execution Vulnerability

Heap-based buffer overflow in Windows Media Player allows an unauthorized attacker to execute code over a network...

Windows NFS Portmapper Elevation of Privilege Vulnerability

Heap-based buffer overflow in Windows NFS Portmapper allows an authorized attacker to elevate privileges locally...

ALSA-2026:64800 Moderate: glib2 security update

GLib provides the core application building blocks for libraries and applications written in C. It provides the core object system used in GNOME, the main loop implementation, and a large set of utility functions for strings and common data structures. Security Fixes: xdgmime: heap-based buffer...

Security Bulletin: IBM i is Affected By Buffer Overflow Vulnerability [CVE-2026-18341]

Summary IBM i is vulnerable to a buffer overflow due to an integer underflow CVE-2026-18341 as described in the vulnerability details section. Vulnerability Details CVEID:CVE-2026-18341 DESCRIPTION: IBM i could allow a remote authenticated attacker to corrupt memory due to an integer underflow...

httpd: Apache HTTP Server: Heap-based Buffer Overflow via malicious backend servers

A flaw was found in Apache HTTP Server. This heap-based buffer overflow vulnerability can be exploited by a malicious backend server when using ProxyPassReverseCookie directives. This could lead to a denial of service DoS condition, making the server unavailable to legitimate users...