71880 matches found
CVE-2026-42990
Heap-based buffer overflow in SQL Server ODBC driver allows an unauthorized attacker to execute code over a network...
kernel: crypto: caam - fix overflow on long hmac keys
A flaw was found in the Linux kernel's caam cryptographic accelerator driver. When processing a Hash-based Message Authentication Code HMAC key that exceeds the block size, the driver incorrectly handles memory allocation and copying. This can lead to an overflow, where the system attempts to rea...
CVE-2026-50411
Stack-based buffer overflow in Active Directory Federation Services AD FS allows an unauthorized attacker to deny service over a network...
CVE-2026-49796
CVE-2026-49796 is a heap-based buffer overflow in Windows GDI+ that can let a local attacker execute code. Affected: Windows GDI+ component; root cause is a heap buffer overflow. Impact per CVSS: local attack with user interaction required, high confidentiality, integrity, and availability impact...
CVE-2026-49793
CVE-2026-49793 is a heap-based buffer overflow in the Windows Resilient File System (ReFS) that could allow an authorized local attacker to execute code. Affected component: ReFS mechanisms handling memory allocations during I/O; root cause described as a heap-based overflow, enabling code execut...
CVE-2026-58618
CVE-2026-58618 : Heap-based buffer overflow in Microsoft Office Excel can allow a local attacker to execute code. Affects Excel components implicated in the heap overflow; CVSS 3.1 base score 7.8 (High). Exploitation is local and requires user interaction. Current connected docs reference Microso...
CVE-2026-55899
Microsoft Excel is affected by a stack-based buffer overflow (CVE-2026-55899) that can allow a local attacker to execute code with high impact. The CVSS indicates local access with user interaction required and high confidentiality/integrity/availability impact. Root cause: overflow in Excel’s ha...
CVE-2026-54987
CVE-2026-54987 is a Windows vulnerability described as a heap-based buffer overflow in the Windows Overlay Filter, enabling a locally authenticated attacker to elevate privileges. The CVSSv3.1 score is 7.8 (HIGH) with local attack vector, low attack complexity, and requires low privileges with no...
CVE-2026-49175
CVE-2026-49175 is a Windows DNS Client vulnerability described as a heap-based buffer overflow that allows an authorized attacker to achieve local privilege escalation. The issue affects the Windows DNS client and is characterized by a LOCAL attack vector with low attack complexity and the need f...
CVE-2026-42990
CVE-2026-42990 affects the SQL Server ODBC driver, where a heap-based buffer overflow enables code execution over the network. The vulnerability is exploitable remotely (network vector) and is rated high severity (CVSS 3.1: 9.8, CRITICAL) with no privileges required and no user interaction. The a...
2026-07 Cumulative Update for Windows Server 2019 for x64-based Systems (KB5099538)
2026-07 Cumulative Update for Windows Server 2019 for x64-based Systems KB5099538...
2026-07 Cumulative Update for .NET Framework 3.5 and 4.7.2 for Windows 10 Version 1809 for ARM64 (KB5102201)
2026-07 Cumulative Update for .NET Framework 3.5 and 4.7.2 for Windows 10 Version 1809 for ARM64 KB5102201...
2026-07 Cumulative Update for Windows 10 Version 21H2 for x86-based Systems (KB5099539)
2026-07 Cumulative Update for Windows 10 Version 21H2 for x86-based Systems KB5099539...
2026-07 Cumulative Update for Windows 10 Version 1809 for x86-based Systems (KB5099538)
2026-07 Cumulative Update for Windows 10 Version 1809 for x86-based Systems KB5099538...
2026-07 Cumulative Update for Windows Server 2022 Datacenter: Azure Edition for x64-based Systems (KB5099540)
A security issue has been identified in a Microsoft software product that could affect your system. You can help protect your system by installing this update from Microsoft. For a complete listing of the issues that are included in this update, see the associated Microsoft Knowledge Base article...
CVE-2026-48816
A flaw was found in sigstore-js. The software derives a transparency-log timestamp from tlogEntries.integratedTime and uses it to validate certificate validity windows and satisfy timestampThreshold. For bundle v0.2, a transparency log tlog entry can be inclusion-proof-only, meaning the inclusion...
Windows File History Service Elevation of Privilege Vulnerability
Stack-based buffer overflow in Windows File History Service allows an authorized attacker to elevate privileges locally...
Microsoft Windows Media Foundation Remote Code Execution Vulnerability
Heap-based buffer overflow in Microsoft Windows Media Foundation allows an unauthorized attacker to execute code over a network...