CVE-2026-62700: Heap-based Buffer Overflow

Heap-based buffer overflow in Windows NTFS allows an authorized attacker to elevate privileges locally...

CVE-2026-61359: Heap-based Buffer Overflow

Heap-based buffer overflow in Windows Storage allows an authorized attacker to elevate privileges locally...

CVE-2026-62770: Heap-based Buffer Overflow

Heap-based buffer overflow in Windows Shell allows an authorized attacker to elevate privileges locally...

CVE-2026-62752: Heap-based Buffer Overflow

Heap-based buffer overflow in Windows Kerberos allows an authorized attacker to elevate privileges locally...

CVE-2026-62736: Heap-based Buffer Overflow

Heap-based buffer overflow in Windows DHCP Client allows an authorized attacker to elevate privileges locally...

CVE-2026-62732: Heap-based Buffer Overflow

Heap-based buffer overflow in Windows Telephony Service allows an authorized attacker to elevate privileges locally...

CVE-2026-61926: Heap-based Buffer Overflow

Heap-based buffer overflow in Windows USB Driver allows an authorized attacker to elevate privileges locally...

CVE-2026-61355: Heap-based Buffer Overflow

Heap-based buffer overflow in Windows Sensor Data Service allows an authorized attacker to elevate privileges locally...

CVE-2026-61363: Heap-based Buffer Overflow

Heap-based buffer overflow in Remote Desktop Client allows an unauthorized attacker to execute code over a network...

PT-2026-80492

A heap-based buffer overflow flaw was found in libmodbus in function modbus reply in src/modbus.c...

PT-2026-70442

Name of the Vulnerable Software and Affected Versions Windows Display Enhancement Service affected versions not specified Description A heap-based buffer overflow occurs in the Windows Display Enhancement Service. This issue allows an authorized attacker to elevate privileges locally on the syste...

CVE-2026-73072: Heap-based Buffer Overflow

Vim is an open source, command line text editor. Prior to 9.2.0846, setsofo in src/spellfile.c reuses slsalfirst without resetting values left by setsalfirst, so a crafted spell file containing an SNSAL section before an SNSOFO section causes under-counted mapping lists and attacker-influenced...

CVE-2026-62784: Heap-based Buffer Overflow

Heap-based buffer overflow in Microsoft Local Security Authority Server lsasrv allows an authorized attacker to execute code over a network...

PT-2026-70480

Name of the Vulnerable Software and Affected Versions Windows Message Queuing affected versions not specified Description A heap-based buffer overflow occurs in Windows Message Queuing, which allows an authorized attacker to elevate privileges locally. A heap-based buffer overflow is a memory...

CVE-2026-73072: Heap-based Buffer Overflow

Vim is an open source, command line text editor. Prior to 9.2.0846, setsofo in src/spellfile.c reuses slsalfirst without resetting values left by setsalfirst, so a crafted spell file containing an SNSAL section before an SNSOFO section causes under-counted mapping lists and attacker-influenced...

PT-2026-69837

Name of the Vulnerable Software and Affected Versions entr affected versions not specified Description A heap-based buffer overflow exists in the run utility function. The function allocates a fixed-size heap buffer using mallocARG MAX and copies command-line arguments into it. It advances the...

CVE-2026-18370: Heap-based Buffer Overflow

entr is vulnerable to Heap-based buffer overflow in runutility function. The function allocates a fixed-size heap buffer using mallocARGMAX and copies command-line arguments into it. It advances the destination pointer based on the return value of strlcpy, which returns the total length of the...

PT-2026-69185

Name of the Vulnerable Software and Affected Versions libiec61850 versions prior to 1.6.2 Description A heap-based buffer overflow exists in the MMS Protocol Workflow component within the MmsMapping varAccessSpecToObjectReference function located in the src/iec61850/common/iec61850 common.c file...

CVE-2026-42170: Incorrect Calculation of Buffer Size

A heap-based buffer overflow vulnerability exists in the GIMP DDS DirectDraw Surface file parser. When a crafted DDS file declares a D3D9 pixel format but sets a lower bits-per-pixel bpp value in the header, the loader allocates an undersized heap buffer. Subsequent pixel data consumption at the...

CVE-2026-19259: Heap-based Buffer Overflow

A vulnerability has been found in MZ Automation libiec61850 up to 1.6.1. The affected element is the function MmsMappingvarAccessSpecToObjectReference of the file src/iec61850/common/iec61850common.c of the component MMS Protocol Workflow. Such manipulation of the argument...