104977 matches found
CVE-2026-83988: Heap-based Buffer Overflow
Heap-based buffer overflow in Windows Biometric Service allows an authorized attacker to elevate privileges locally...
CVE-2026-72933: Heap-based Buffer Overflow
Heap-based buffer overflow in Microsoft WDAC OLE DB provider for SQL allows an unauthorized attacker to execute code over a network...
CVE-2026-73018: Heap-based Buffer Overflow
Heap-based buffer overflow in Graphic Fonts allows an unauthorized attacker to execute code over a network...
CVE-2026-72990: Heap-based Buffer Overflow
Heap-based buffer overflow in Windows Biometric Service allows an authorized attacker to elevate privileges locally...
Microsoft Windows Heap-Based Buffer Overflow Vulnerability
Microsoft Windows Advanced Local Procedure Call contains a heap-based buffer overflow vulnerability that allows an attacker to elevate privileges locally...
PT-2026-87465
Heap-based buffer overflow in Windows URL Moniker allows an unauthorized attacker to execute code over a network...
CVE-2026-69368: Heap-based Buffer Overflow
Heap-based buffer overflow in Windows Overlay Filter allows an authorized attacker to elevate privileges locally...
PT-2026-87896
Heap-based buffer overflow in Graphic Fonts allows an unauthorized attacker to execute code over a network...
PT-2026-88293
A vulnerability was determined in Cesanta mJS up to 1.26. Affected is the function skip spaces and comments of the file src/mjs tok.c. Executing a manipulation can lead to heap-based buffer overflow. The attack can be launched remotely. The exploit has been publicly disclosed and may be utilized...
Testing race conditions with memory access tracing and stack-based delay injection
Posted by Jann Horn Many security bugs are race conditions, where multi-threaded execution has to occur with the right interleaving for a negative effect to appear. This creates challenges for several use cases: Confirming bug candidates that have been discovered manually or through static...
RHEL 8 : gegl (RHSA-2026:64801)
The remote Redhat Enterprise Linux 8 host has a package installed that is affected by a vulnerability as referenced in the RHSA-2026:64801 advisory. GEGL Generic Graphics Library is a graph-based image processing framework. Security Fixes: gimp: GIMP: Arbitrary code execution via heap-based buffe...
RHEL 10 : expat (RHSA-2026:64810)
The remote Redhat Enterprise Linux 10 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2026:64810 advisory. Expat is a C library for parsing XML documents. Security Fixes: expat: libexpat: Use-after-free vulnerability due to improper handler call...
CVE-2026-71328: Heap-based Buffer Overflow
Heap-based buffer overflow in Visual Studio allows an unauthorized attacker to execute code over a network...
CVE-2026-69439: Heap-based Buffer Overflow
Heap-based buffer overflow in .NET and Visual Studio allows an unauthorized attacker to elevate privileges over a network...
CVE-2026-71328
Heap-based buffer overflow in Visual Studio allows an unauthorized attacker to execute code over a network...
PT-2026-88334
Adobe Experience Manager is affected by a DOM-based Cross-Site Scripting XSS vulnerability. An attacker could exploit this issue by manipulating the DOM environment to execute malicious JavaScript within the context of the victim's browser. Exploitation of this issue requires user interaction in...
CVE-2026-73026: Heap-based Buffer Overflow
Heap-based buffer overflow in Windows Biometric Service allows an authorized attacker to elevate privileges locally...
CVE-2026-69455: Heap-based Buffer Overflow
Heap-based buffer overflow in Windows Remote Access Connection Manager allows an authorized attacker to elevate privileges locally...