409020 matches found
CVE-2026-84015
A heap-based buffer overflow exists in the Remote Access Point-to-Point Protocol (PPP) EAP-TLS component within Microsoft Windows . This vulnerability allows an unauthorized attacker to execute arbitrary code over a network. The impact is rated as CRITICAL with a CVSS score of 9.80 . No specific ...
EUVD-2026-99452
Heap-based buffer overflow in Remote Access Point-to-Point Protocol PPP EAP-TLS allows an unauthorized attacker to execute code over a network...
EUVD-2026-99445
Heap-based buffer overflow in Windows Imaging Component allows an unauthorized attacker to execute code over a network...
EUVD-2026-99443
Heap-based buffer overflow in Windows Group Policy allows an authorized attacker to elevate privileges locally...
CVE-2026-84014
A Heap-based buffer overflow exists in the Windows Device Association Service . This vulnerability allows an authorized attacker to achieve local privilege elevation . The issue is associated with CWE-122 (Heap-based Buffer Overflow) and CWE-362 (Race Condition). No specific exploit links or deta...
CVE-2026-83921
A heap-based buffer overflow exists in the Microsoft Windows Search Component (Windows Search Service). This vulnerability allows an authorized attacker to achieve local privilege escalation . While the technical root cause is identified as a heap-based buffer overflow, specific exploit details o...
CVE-2026-83919
A heap-based buffer overflow exists in the Microsoft Internet Messaging API . This vulnerability allows an authorized attacker to achieve local code execution . No specific versions are listed as affected, and no exploit information is provided in the documents. Remediation is indicated as an off...
EUVD-2026-99438
Heap-based buffer overflow in Microsoft Windows Search Component allows an authorized attacker to elevate privileges locally...
CVE-2026-83920
A heap-based buffer overflow exists in the Microsoft Windows Search Component . This vulnerability allows an authorized attacker to achieve local privilege escalation . No specific versions, exploit details, or remediation steps are provided in the documents beyond the existence of an official fix.
EUVD-2026-99437
Heap-based buffer overflow in Microsoft Internet Messaging API allows an authorized attacker to execute code locally...
EUVD-2026-99436
Heap-based buffer overflow in Microsoft Windows Search Component allows an authorized attacker to elevate privileges locally...
EUVD-2026-99427
Heap-based buffer overflow in Windows Storage allows an authorized attacker to elevate privileges locally...
CVE-2026-83871
A Heap-based buffer overflow exists in OpenSSH for Windows , which allows an authorized attacker to achieve local privilege elevation . The vulnerability involves a Time-of-check Time-of-use (TOCTOU) Race Condition (CWE-367) and a Heap-based Buffer Overflow (CWE-122). The CVSS 3.1 base score is 7...
CVE-2026-83911
A heap-based buffer overflow exists in Windows Storage which can be leveraged by an authorized attacker to achieve local privilege elevation . The vulnerability is classified as High severity with a CVSS 3.1 score of 7.0. No specific exploit details or in-the-wild exploitation information are pro...
EUVD-2026-99428
Heap-based buffer overflow in OpenSSH for Windows allows an authorized attacker to elevate privileges locally...
EUVD-2026-99421
Heap-based buffer overflow in Windows Win32K - GRFX allows an authorized attacker to elevate privileges locally...
EUVD-2026-99423
Heap-based buffer overflow in HID Parser Library allows an authorized attacker to elevate privileges locally...
CVE-2026-70089
A heap-based buffer overflow vulnerability exists in the Windows GDI component. This flaw could allow an unauthorized attacker to achieve remote code execution over a network. The vulnerability is characterized by a HIGH base severity score of 8.8. No specific exploit details or patch versions ar...
CVE-2026-70286
A heap-based buffer overflow exists in the Windows Win32K - GRFX component. This vulnerability allows an authorized attacker to achieve local privilege elevation . No specific exploit details or in-the-wild exploitation instances are provided in the documents. Remediation is indicated as an offic...