CVE-2026-27301

Adobe Framemaker 2022.8 and earlier is affected by a heap-based buffer overflow that can disclose memory contents. Exploitation requires user interaction: the victim must open a malicious file. CVSS v3.1 indicates LOCAL attack vector, LOW attack complexity, NONE privileges, and UI:R with CONFIDEN...

EUVD-2026-22689

Bridge versions 16.0.2, 15.1.4 and earlier are affected by a Heap-based Buffer Overflow vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file...

EUVD-2026-22609

Heap-based buffer overflow in Microsoft Graphics Component allows an unauthorized attacker to execute code locally...

EUVD-2026-22611

Heap-based buffer overflow in Windows USB Print Driver allows an unauthorized attacker to elevate privileges with a physical attack...

EUVD-2026-22423

Heap-based buffer overflow in Windows Kernel allows an authorized attacker to elevate privileges locally...

CVE-2026-26156

Heap-based buffer overflow in Windows Hyper-V allows an unauthorized attacker to execute code locally...

CVE-2026-34629

InDesign Desktop versions 20.5.2, 21.2 and earlier are affected by a Heap-based Buffer Overflow vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file...

CVE-2026-34629

CVE-2026-34629 affects Adobe InDesign Desktop up to version 21.2 (and 20.5.2 and earlier). It describes a heap-based buffer overflow in the application that could lead to arbitrary code execution in the context of the current user. Exploitation requires user interaction: a victim must open a mali...

CVE-2026-34627

CVE-2026-34627 affects InDesign Desktop versions 20.5.2, 21.2 and earlier. It is a heap-based buffer overflow that could lead to arbitrary code execution in the current user’s context. Exploitation requires user interaction (victim opens a malicious file). CVSS v3.1: 7.8 ( HIGH ) with LOCAL attac...

CVE-2026-32087

Heap-based buffer overflow in Function Discovery Service fdwsd.dll allows an authorized attacker to elevate privileges locally...

CVE-2026-27238 InDesign Desktop | Heap-based Buffer Overflow (CWE-122)

InDesign Desktop versions 20.5.2, 21.2 and earlier are affected by a Heap-based Buffer Overflow vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file...

Windows Kernel Elevation of Privilege Vulnerability

Heap-based buffer overflow in Windows Kernel allows an authorized attacker to elevate privileges locally...

Windows Client Side Caching driver (csc.sys) Elevation of Privilege Vulnerability

Heap-based buffer overflow in Windows Client Side Caching driver csc.sys allows an authorized attacker to elevate privileges locally...

Windows Hyper-V Remote Code Execution Vulnerability

Heap-based buffer overflow in Windows Hyper-V allows an unauthorized attacker to execute code locally...

Windows Graphics Component Remote Code Execution Vulnerability

Heap-based buffer overflow in Microsoft Graphics Component allows an unauthorized attacker to execute code locally...

PT-2026-32942

Name of the Vulnerable Software and Affected Versions Adobe Framemaker versions prior to 2022.9 Description A Heap-based Buffer Overflow exists which could result in arbitrary code execution in the context of the current user. Exploitation requires user interaction, specifically that a victim ope...

PT-2026-32903

Bridge | Heap-based Buffer Overflow CWE-122 CVE: CVE-2026-27310 PT ID: PT-2026-32903 Vendor: Adobe Product: Bridge CVSS: 7.8 Credits: n/a Description: Bridge versions 16.0.2, 15.1.4 and earlier are affected by a Heap-based Buffer Overflow vulnerability that could result in arbitrary code executio...

PT-2026-32864

Name of the Vulnerable Software and Affected Versions Microsoft Graphics Component affected versions not specified Description A heap-based buffer overflow in the Microsoft Graphics Component allows an unauthorized attacker to execute arbitrary code locally and remotely, which can affect the...

fontforge security update

20200314-7 - Resolves: RHEL-138168 CVE-2025-15270 SFD File Parsing Remote Code Execution Vulnerability - Resolves: RHEL-138174 CVE-2025-15279 GUtils BMP File Parsing Heap-based Buffer Overflow - Resolves: RHEL-138190 CVE-2025-15275 SFD File Parsing Heap-based Buffer Overflow - Resolves: RHEL-1381...

PT-2026-32753

Name of the Vulnerable Software and Affected Versions Windows Client Side Caching driver csc.sys affected versions not specified Description A heap-based buffer overflow in the Windows Client Side Caching driver csc.sys allows an authorized attacker to elevate privileges locally. A heap-based...