EUVD-2026-56436

Heap-based buffer overflow in Windows Remote Access API allows an authorized attacker to elevate privileges locally...

EUVD-2026-56435

Heap-based buffer overflow in Windows Remote Access API allows an authorized attacker to elevate privileges locally...

EUVD-2026-56422

Heap-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code locally...

EUVD-2026-56415

Heap-based buffer overflow in Microsoft Exchange Server allows an authorized attacker to execute code over a network...

EUVD-2026-56402

Heap-based buffer overflow in Windows GDI+ allows an authorized attacker to execute code locally...

EUVD-2026-56390

Heap-based buffer overflow in Windows NTFS allows an authorized attacker to elevate privileges locally...

EUVD-2026-56385

Heap-based buffer overflow in Microsoft Local Security Authority Server lsasrv allows an authorized attacker to execute code over a network...

EUVD-2026-56327

Heap-based buffer overflow in Windows Display Enhancement Service allows an authorized attacker to elevate privileges locally...

CVE-2026-59134

Heap-based buffer overflow in Remote Desktop Client allows an unauthorized attacker to execute code over a network...

EUVD-2026-56314

Heap-based buffer overflow in Remote Desktop Client allows an unauthorized attacker to execute code over a network...

CVE-2026-54984

Heap-based buffer overflow in Windows Imaging Component allows an unauthorized attacker to execute code locally...

CVE-2026-48440 ColdFusion | Heap-based Buffer Overflow (CWE-122)

ColdFusion is affected by a Heap-based Buffer Overflow vulnerability that could result in arbitrary code execution in the context of the current user. Exploit depends on conditions beyond the attacker's control. Exploitation of this issue does not require user interaction...

CVE-2026-48440 ColdFusion | Heap-based Buffer Overflow (CWE-122)

ColdFusion is affected by a Heap-based Buffer Overflow vulnerability that could result in arbitrary code execution in the context of the current user. Exploit depends on conditions beyond the attacker's control. Exploitation of this issue does not require user interaction...

CVE-2026-21399

Heap-based buffer overflow for the IntelR Open Volume Kernel Library IntelR Open VKL library maintained by intelR before version 2.0.2 within Ring 3: User Applications may allow a denial of service. System software adversary with an authenticated user combined with a low complexity attack may...

CVE-2026-21399

The CVE affects Intel Open Volume Kernel Library (Intel Open VKL) prior to version 2.0.2, with a heap-based buffer overflow in the library component. The issue occurs in Ring 3 (user applications) and can allow a Denial of Service when an authenticated local user with low attack complexity can tr...

CVE-2026-73074

Vim prior to 9.2.0841 is affected by a heap-related vulnerability in text property handling. The function prop_add_one() in src/textprop.c uses proplen from get_text_props() to increment a uint16_t property count beyond 0xffff, causing a wrap to zero and copying existing text-property records int...

CVE-2026-73074 Vim: Heap Buffer Overflow in Text Property Handling

Vim is an open source, command line text editor. Prior to 9.2.0841, propaddone in src/textprop.c uses the proplen value from gettextprops to increment a uint16t property count beyond 0xffff, wrapping the count to zero and copying existing text-property records into a heap allocation sized for non...

CVE-2026-73074 Vim: Heap Buffer Overflow in Text Property Handling

Vim is an open source, command line text editor. Prior to 9.2.0841, propaddone in src/textprop.c uses the proplen value from gettextprops to increment a uint16t property count beyond 0xffff, wrapping the count to zero and copying existing text-property records into a heap allocation sized for non...

CVE-2026-34501

A flaw was found in the Redis client in the Apache Portable Runtime Utility apr-util. A heap buffer overflow can be triggered when the application processes a specially crafted response from a Redis server, resulting in a crash and denial of service. Mitigation Ensure that the Redis server used b...

CVE-2026-73072 Vim: Heap Buffer Overflow when Loading a Spell File

Vim is an open source, command line text editor. Prior to 9.2.0846, setsofo in src/spellfile.c reuses slsalfirst without resetting values left by setsalfirst, so a crafted spell file containing an SNSAL section before an SNSOFO section causes under-counted mapping lists and attacker-influenced...