103047 matches found
CVE-2026-69593: Heap-based Buffer Overflow
Heap-based buffer overflow in Windows Biometric Service allows an authorized attacker to elevate privileges locally...
CVE-2026-69625: Heap-based Buffer Overflow
Heap-based buffer overflow in Windows Connected User Experiences and Telemetry allows an authorized attacker to elevate privileges over a network...
CVE-2026-69729: Heap-based Buffer Overflow
Heap-based buffer overflow in Windows Credential Providers allows an authorized attacker to execute code over a network...
PT-2026-87902
🚨 CVE-2026-72992 Heap-based buffer overflow in Windows Biometric Service allows an authorized attacker to elevate privileges locally. 🎖@cveNotify...
CVE-2026-72962: Heap-based Buffer Overflow
Heap-based buffer overflow in Windows USB Video Driver allows an authorized attacker to elevate privileges locally...
CVE-2026-69786: Heap-based Buffer Overflow
Heap-based buffer overflow in Windows Text Shaping allows an unauthorized attacker to execute code over a network...
PT-2026-88396
Adobe Experience Manager is affected by a DOM-based Cross-Site Scripting XSS vulnerability. An attacker could exploit this issue by manipulating the DOM environment to execute malicious JavaScript within the context of the victim's browser. Exploitation of this issue requires user interaction in...
CVE-2026-83969: Heap-based Buffer Overflow
Heap-based buffer overflow in Windows Biometric Service allows an authorized attacker to elevate privileges locally...
Testing race conditions with memory access tracing and stack-based delay injection
Posted by Jann Horn Many security bugs are race conditions, where multi-threaded execution has to occur with the right interleaving for a negative effect to appear. This creates challenges for several use cases: Confirming bug candidates that have been discovered manually or through static...
CVE-2026-69731: Heap-based Buffer Overflow
Heap-based buffer overflow in HID class driver allows an authorized attacker to elevate privileges locally...
CVE-2026-86514: Stack-based Buffer Overflow
A weakness has been identified in vgmstream up to r2117. This issue affects the function sscanf of the file src/meta/txth.c of the component txth-txtp. This manipulation causes stack-based buffer overflow. The attack is possible to be carried out remotely. The exploit has been made available to t...
CVE-2026-71328: Heap-based Buffer Overflow
Heap-based buffer overflow in Visual Studio allows an unauthorized attacker to execute code over a network...
PT-2026-88351
Adobe Experience Manager is affected by a DOM-based Cross-Site Scripting XSS vulnerability. An attacker could exploit this issue by manipulating the DOM environment to execute malicious JavaScript within the context of the victim's browser. Exploitation of this issue requires user interaction in...
PT-2026-88382
Adobe Experience Manager is affected by a DOM-based Cross-Site Scripting XSS vulnerability. An attacker could exploit this issue by manipulating the DOM environment to execute malicious JavaScript within the context of the victim's browser. Exploitation of this issue requires user interaction in...
PT-2026-88362
🚨 CVE-2026-75661 Adobe Experience Manager is affected by a DOM-based Cross-Site Scripting XSS vulnerability. An attacker could exploit this issue by manipulating the DOM environment to execute malicious JavaScript within the context of the victim's browser. Exploitation of this issue requires use...
PT-2026-88350
Adobe Experience Manager is affected by a DOM-based Cross-Site Scripting XSS vulnerability. An attacker could exploit this issue by manipulating the DOM environment to execute malicious JavaScript within the context of the victim's browser. Exploitation of this issue requires user interaction in...
PT-2026-88357
Adobe Experience Manager is affected by a DOM-based Cross-Site Scripting XSS vulnerability. An attacker could exploit this issue by manipulating the DOM environment to execute malicious JavaScript within the context of the victim's browser. Exploitation of this issue requires user interaction in...
PT-2026-88365
Adobe Experience Manager is affected by a DOM-based Cross-Site Scripting XSS vulnerability. An attacker could exploit this issue by manipulating the DOM environment to execute malicious JavaScript within the context of the victim's browser. Exploitation of this issue requires user interaction in...
PT-2026-87537
Name of the Vulnerable Software and Affected Versions Windows Remote Desktop affected versions not specified Description A heap-based buffer overflow occurs in Windows Remote Desktop, which is a memory corruption issue where a program writes more data to a heap-allocated buffer than it can hold...