1686 matches found
CVE-2026-64620
FreeRDP before 3.28.0 affected outlength, so out-of-bounds bytes are written before the bounds check. On the server side, when a client selects RDP Standard Security, the encrypted client random is decrypted into a fixed 32-byte buffer. Because the server publishes its RSA public key, an...
httpd: Apache HTTP Server: Heap-based Buffer Overflow via malicious backend servers
A flaw was found in Apache HTTP Server. This heap-based buffer overflow vulnerability can be exploited by a malicious backend server when using ProxyPassReverseCookie directives. This could lead to a denial of service DoS condition, making the server unavailable to legitimate users...
UBUNTU-CVE-2026-16118
A flaw was found in xdgmime. A heap-based buffer overflow can be triggered in xdgmimemagicparsemagicline in the xdgmimemagic.c file on little-endian systems when an attacker-controlled MIME magic file in a user-writable XDG data location e.g., in the $XDGDATAHOME/mime/magic path is parsed by an...
EUVD-2026-45307
IBM Storage Protect Client 8.1.0.0 through 8.1.27.0, 8.1.27.1, and 8.2.0.0 through 8.2.1.0 IBM Storage Protect is vulnerable to a heap-based buffer overflow, caused by improper bounds checking. A remote attacker could overflow a buffer and execute arbitrary code on the system or cause the server ...
CVE-2026-48373
CVE-2026-48373 describes a heap-based buffer overflow in Acrobat Reader that could allow arbitrary code execution in the context of the current user. The vulnerability requires user interaction (victim opens a malicious file); no vector details are provided beyond this condition. The affected pro...
PT-2026-60851
Name of the Vulnerable Software and Affected Versions Acrobat Reader affected versions not specified Description A Heap-based Buffer Overflow occurs when a program writes more data to a heap memory buffer than it can hold, potentially corrupting memory. This issue could allow arbitrary code...
PT-2026-60343
Name of the Vulnerable Software and Affected Versions Autel MaxiCharger AC Elite Home affected versions not specified Description A heap-based buffer overflow exists in the handling of custom USB packets. The issue occurs because the device fails to properly validate the length of user-supplied...
CVE-2026-48339
Bridge is affected by a Heap-based Buffer Overflow vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file...
CVE-2026-48339
CVE-2026-48339 describes a heap-based buffer overflow in Bridge that could lead to arbitrary code execution in the context of the current user. The vulnerability requires user interaction: a victim must open a malicious file. The available connected documents reiterate this condition and identify...
CVE-2026-24268
NVIDIA TensorRT contains a vulnerability where an attacker might cause a heap-based buffer overflow. A successful exploit of this vulnerability might lead to code execution...
EUVD-2026-43986
Heap-based buffer overflow in Windows FTP Service allows an unauthorized attacker to execute code over a network...
CVE-2026-56650
Heap-based buffer overflow in Windows Network File System allows an authorized attacker to elevate privileges locally...
CVE-2026-55947
Heap-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code locally...
CVE-2026-55129
Heap-based buffer overflow in Microsoft Office allows an unauthorized attacker to execute code locally...
CVE-2026-55131
Heap-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code locally...
CVE-2026-55053
Heap-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code locally...
CVE-2026-55041
Heap-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code locally...
CVE-2026-55017
Heap-based buffer overflow in Microsoft Office allows an unauthorized attacker to execute code locally...