CVE-2026-34699: Heap-based Buffer Overflow

InDesign Desktop versions 21.3, 20.5.3 and earlier are affected by a Heap-based Buffer Overflow vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file...

CVE-2026-34701: Heap-based Buffer Overflow

InDesign Desktop versions 21.3, 20.5.3 and earlier are affected by a Heap-based Buffer Overflow vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file...

CVE-2026-45466: Heap-based Buffer Overflow

Heap-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to disclose information locally...

CVE-2026-44811: Heap-based Buffer Overflow

Heap-based buffer overflow in Windows DWM Core Library allows an authorized attacker to elevate privileges locally...

CVE-2026-44808: Heap-based Buffer Overflow

Heap-based buffer overflow in Windows DWM Core Library allows an authorized attacker to elevate privileges locally...

CVE-2026-47289: Heap-based Buffer Overflow

Heap-based buffer overflow in Remote Desktop Client allows an unauthorized attacker to execute code over a network...

CVE-2026-48292: Heap-based Buffer Overflow

Format Plugins versions 1.1.2 and earlier are affected by a Heap-based Buffer Overflow vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file...

CVE-2026-48574: Heap-based Buffer Overflow

Heap-based buffer overflow in Windows Media allows an unauthorized attacker to execute code locally...

CVE-2026-49841: Heap-based Buffer Overflow

FreeSWITCH is a Software Defined Telecom Stack enabling the digital transformation from proprietary telecom switches to a software implementation that runs on any commodity hardware. Prior to version 1.11.1, the modverto HTTP request handler allocates a fixed 2 MiB buffer for a POST...

CVE-2026-48291: Heap-based Buffer Overflow

Format Plugins versions 1.1.2 and earlier are affected by a Heap-based Buffer Overflow vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file...

CVE-2026-47635: Heap-based Buffer Overflow

Heap-based buffer overflow in Microsoft Office allows an unauthorized attacker to execute code locally...

CVE-2026-44824: Heap-based Buffer Overflow

Heap-based buffer overflow in Microsoft Office allows an unauthorized attacker to execute code locally...

CVE-2026-44799: Heap-based Buffer Overflow

Heap-based buffer overflow in Remote Desktop Client allows an unauthorized attacker to execute code over a network...

CVE-2026-45475: Heap-based Buffer Overflow

Heap-based buffer overflow in Microsoft Office allows an unauthorized attacker to execute code locally...

CVE-2026-40404: Heap-based Buffer Overflow

Windows Universal Disk Format File System Driver UDFS Elevation of Privilege Vulnerability...

CVE-2026-42993: Heap-based Buffer Overflow

Heap-based buffer overflow in Remote Desktop Client allows an unauthorized attacker to execute code over a network...

CVE-2026-42992: Heap-based Buffer Overflow

Heap-based buffer overflow in Remote Desktop Client allows an unauthorized attacker to execute code over a network...

CVE-2026-41981: Heap-based Buffer Overflow

Out-of-bounds write vulnerability in the IPC module. Impact: Successful exploitation of this vulnerability may affect availability...

CVE-2026-42904: Heap-based Buffer Overflow

Heap-based buffer overflow in Windows TCP/IP allows an unauthorized attacker to elevate privileges over an adjacent network...

CVE-2026-47652: Heap-based Buffer Overflow

Heap-based buffer overflow in Windows Hyper-V allows an authorized attacker to execute code locally...