Lucene search
+L

401003 matches found

Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/10/13 12:00 a.m.•6 views

CVE-2026-85871: Heap-based Buffer Overflow

Heap-based buffer overflow in Windows Kernel-Mode Drivers allows an authorized attacker to elevate privileges locally...

7.8CVSS6.1AI score0.00318EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
•added 2026/10/13 12:00 a.m.•11 views

PT-2026-113292

🚨 CVE-2026-103851 Substance3D - Stager is affected by a Stack-based Buffer Overflow vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file. šŸŽ–@cveNotify...

7.8CVSS6.3AI score0.00186EPSS
SaveExploits0References3
Positive Technologies
Positive Technologies
•added 2026/10/13 12:00 a.m.•9 views

PT-2026-112829

Name of the Vulnerable Software and Affected Versions Microsoft Windows Search Component affected versions not specified Description A heap-based buffer overflow occurs in the Microsoft Windows Search Component. This issue allows an authorized attacker to elevate privileges locally on the system....

7.8CVSS6.4AI score0.00318EPSS
SaveExploits0References5
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/10/13 12:00 a.m.•5 views

CVE-2025-58771: Integer Overflow or Wraparound

AMI APTIOV contains vulnerabilities in BIOS where users may cause ā€œInteger Overflow or Wraparoundā€ by local access. Successful exploitation of this vulnerability could lead to buffer overflows, memory corruption, and arbitrary code execution, and also impact Confidentiality, Integrity, and...

7.1CVSS6.4AI score0.00112EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
•added 2026/10/13 12:00 a.m.•12 views

PT-2026-113018

Name of the Vulnerable Software and Affected Versions Windows Event Logging Service affected versions not specified Description A buffer over-read in the Windows Event Logging Service allows an authorized attacker to disclose information locally. This issue can enable attackers to obtain sensitiv...

5.5CVSS5.7AI score0.00298EPSS
SaveExploits0References5
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/10/13 12:00 a.m.•10 views

Microsoft Windows: CVE-2026-70112: Windows Spaceport.sys Remote Code Execution Vulnerability

Heap-based buffer overflow in Windows Spaceport.sys allows an authorized attacker to execute code locally...

7.8CVSS6.5AI score0.00341EPSS
SaveExploits0References2
BDU FSTEC
BDU FSTEC
•added 2026/10/13 12:00 a.m.•7 views

USB driver Windows Privilege Escalation

The vulnerability of the USB driver for Windows operating systems is related to buffer overflows in dynamic memory. Exploiting this vulnerability can allow an attacker to gain increased privileges...

7.8CVSS6.7AI score0.00333EPSS
SaveExploits0References2Affected Software10
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/10/13 12:00 a.m.•7 views

CVE-2026-95124: Buffer Copy without Checking Size of Input

Buffer Overflow vulnerability in madmurphy libconfini v.1.16.4 allows a remote attacker to cause a denial of service via an allocation-size mismatch between its bundled loadinibuffer utility and stripinicache...

7.5CVSS5.8AI score0.00487EPSS
SaveExploits0References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/10/13 12:00 a.m.•6 views

Microsoft Windows: CVE-2026-85341: Windows USB Video Driver Elevation of Privilege Vulnerability

Heap-based buffer overflow in Windows USB Video Driver allows an authorized attacker to elevate privileges locally...

7.8CVSS6.1AI score0.00318EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
•added 2026/10/13 12:00 a.m.•7 views

PT-2026-113256

Buffer over-read in DNS Server allows an authorized attacker to disclose information over a network...

6.5CVSS5.8AI score0.00769EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
•added 2026/10/13 12:00 a.m.•7 views

PT-2026-112692

Name of the Vulnerable Software and Affected Versions Windows Hyper-V affected versions not specified Description A heap-based buffer overflow occurs in Windows Hyper-V, which allows an authorized attacker to execute code locally. This issue can also enable remote attackers to execute arbitrary...

7.8CVSS6.9AI score0.0027EPSS
SaveExploits0References6
Positive Technologies
Positive Technologies
•added 2026/10/13 12:00 a.m.•8 views

PT-2026-116206

Š£ŃŠ·Š²ŠøŠ¼Š¾ŃŃ‚ŃŒ ГекоГера Media Video Decoder операционных систем Windows ŃŠ²ŃŠ·Š°Š½Š° с выхоГом операции за границы Š±ŃƒŃ„ŠµŃ€Š° в ŠæŠ°Š¼ŃŃ‚Šø. Š­ŠŗŃŠæŠ»ŃƒŠ°Ń‚Š°Ń†ŠøŃ ŃƒŃŠ·Š²ŠøŠ¼Š¾ŃŃ‚Šø может ŠæŠ¾Š·Š²Š¾Š»ŠøŃ‚ŃŒ Š½Š°Ń€ŃƒŃˆŠøŃ‚ŠµŠ»ŃŽ, Š“ŠµŠ¹ŃŃ‚Š²ŃƒŃŽŃ‰ŠµŠ¼Ńƒ уГаленно, Š²Ń‹ŠæŠ¾Š»Š½ŠøŃ‚ŃŒ ŠæŃ€Š¾ŠøŠ·Š²Š¾Š»ŃŒŠ½Ń‹Š¹ коГ...

10CVSS7.9AI score0.00821EPSS
SaveExploits0References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/10/13 12:00 a.m.•8 views

CVE-2026-70153: Heap-based Buffer Overflow

Heap-based buffer overflow in Microsoft PostScript Printer Driver allows an unauthorized attacker to execute code over a network...

9.8CVSS9AI score0.00966EPSS
SaveExploits0References2
Tenable Nessus
Tenable Nessus
•added 2026/10/13 12:00 a.m.•11 views

KB5126836: Windows Server 2012 R2 Security Update (October 2026)

The remote Windows host is missing security update 5126836. It is, therefore, affected by multiple vulnerabilities - Use after free in Windows Message Queuing Queue Manager allows an unauthorized attacker to execute code over a network. CVE-2026-100202 - Heap-based buffer overflow in Network Poli...

9.8CVSS8.1AI score0.02933EPSS
SaveExploits0References650
Tenable Nessus
Tenable Nessus
•added 2026/10/13 12:00 a.m.•13 views

KB5126835: Windows Server 2012 Security Update (October 2026)

The remote Windows host is missing security update 5126835. It is, therefore, affected by multiple vulnerabilities - Use after free in Windows Message Queuing Queue Manager allows an unauthorized attacker to execute code over a network. CVE-2026-100202 - Heap-based buffer overflow in Network Poli...

9.8CVSS8AI score0.02933EPSS
SaveExploits0References613
Tenable Nessus
Tenable Nessus
•added 2026/10/13 12:00 a.m.•11 views

CentOS Linux 6 [TuxCare] Security Update: httpd / httpd-devel / httpd-manual / httpd-tools / mod_ssl (CENTOS6:CLSA-2026:1791487835)

The CentOS Linux 6 host has packages installed that are affected by a vulnerability as referenced in the TuxCare CENTOS6:CLSA-2026:1791487835 advisory. - Stack-based buffer overflow in modvhostalias in Apache Software Foundation Apache HTTP Server through 2.4.68 on all platforms allows a remote...

7.5CVSS7.7AI score0.00876EPSS
SaveExploits1References3
Tenable Nessus
Tenable Nessus
•added 2026/10/13 12:00 a.m.•6 views

Ubuntu 26.04 LTS : openCryptoki vulnerabilities (USN-8707-1)

The remote Ubuntu 26.04 LTS host has packages installed that are affected by multiple vulnerabilities as referenced in the USN-8707-1 advisory. It was discovered that primitive decoders in openCryptoki produced integer underflows when the encoded length was zero. An attacker could possibly use th...

6.8CVSS6.6AI score0.00284EPSS
SaveExploits2References4
Mozilla
Mozilla
•added 2026/10/13 12:00 a.m.•10 views

Security Vulnerabilities fixed in Thunderbird 158 — Mozilla

Several buffer-growth sites in libmime performed size arithmetic in 32-bit types without overflow checks. On a sufficiently large message the growth guard could fail open, or the buffer could be reallocated smaller than required, and a subsequent memcpy would then write attacker-controlled data...

9.6CVSS6.3AI score0.00327EPSS
SaveExploits0References80Affected Software1
Positive Technologies
Positive Technologies
•added 2026/10/13 12:00 a.m.•6 views

PT-2026-111864

🚨 CVE-2026-110247 Several buffer-growth sites in libmime performed size arithmetic in 32-bit types without overflow checks. On a sufficiently large message the growth guard could fail open, or the buffer could be reallocated smaller than required, and a subsequent memcpy would then write...

8.4CVSS6.3AI score0.00152EPSS
SaveExploits0References4
osv_alsa
osv_alsa
•added 2026/10/13 12:00 a.m.•13 views

ALSA-2026:82013 Important: libreoffice security update

LibreOffice is an open source, community-developed office productivity suite. It includes key desktop applications, such as a word processor, a spreadsheet, a presentation manager, a formula editor, and a drawing program. LibreOffice replaces OpenOffice and provides a similar but enhanced and...

8.5CVSS8.1AI score0.00195EPSS
SaveExploits1References10
Rows per page
Query Builder