CVE-2025-54910

Heap-based buffer overflow in Microsoft Office allows an unauthorized attacker to execute code locally...

CVE-2025-54900

Heap-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code locally...

Microsoft Excel Remote Code Execution Vulnerability

Heap-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code locally...

PT-2025-36974

Name of the Vulnerable Software and Affected Versions: Substance3D - Viewer versions 0.25.1 and earlier Description: Substance3D - Viewer is affected by a Heap-based Buffer Overflow that may lead to arbitrary code execution with current user privileges. Exploitation requires a user to open a...

PT-2025-36866

Name of the Vulnerable Software and Affected Versions: Microsoft Office Excel affected versions not specified Description: A heap-based buffer overflow exists in Microsoft Office Excel. This issue allows a remote attacker to execute arbitrary code on the affected system. Recommendations: At the...

PT-2025-36873

Name of the Vulnerable Software and Affected Versions: Microsoft Office Visio affected versions not specified Description: A heap-based buffer overflow exists in Microsoft Office Visio that could allow an unauthorized attacker to execute code locally. The issue requires user interaction and...

Grub2: udf: heap based buffer overflow in grub_udf_read_block() may lead to arbitrary code execution

...

HDF5 H5Ofsinfo.c H5O__fsinfo_encode heap-based overflow

...

HDF5 H5Ochunk.c H5O__chunk_protect heap-based overflow

...

HDF5 H5Faccum.c H5F__accum_free heap-based overflow

...

NASM Netwide Assember outmacho.c macho_no_dead_strip heap-based overflow

...

CVE-2025-8302

Realtek rtl81xx SDK Wi-Fi Driver rtwlanu Heap-based Buffer Overflow Local Privilege Escalation Vulnerability. This vulnerability allows local attackers to escalate privileges on affected installations of Realtek rtl81xx SDK Wi-Fi driver. An attacker must first obtain the ability to execute...

CVE-2025-8300

Realtek rtl81xx SDK Wi-Fi Driver rtwlanu Heap-based Buffer Overflow Local Privilege Escalation Vulnerability. This vulnerability allows local attackers to escalate privileges on affected installations of Realtek rtl81xx SDK Wi-Fi driver. An attacker must first obtain the ability to execute...

CVE-2025-57775

There is a heap-based Buffer Overflow vulnerability due to improper bounds checking when parsing a DSB file with Digilent DASYLab. This vulnerability may result in arbitrary code execution. Successful exploitation requires an attacker to get a user to open a specially crafted DSB file. The...

Linux Distros Unpatched Vulnerability : CVE-2022-43634

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - This vulnerability allows remote attackers to execute arbitrary code on affected installations of Netatalk. Authentication is not required to exploit this...

CVE-2025-34164 NetSupport Manager < 14.12.0000 Heap-Based Buffer Overflow

A heap-based buffer overflow vulnerability in NetSupport Manager 14.x versions prior to 14.12.0000 allows a remote, unauthenticated attacker to cause a denial of service DoS or execute arbitrary code...

CVE-2025-34164

NetSupport Manager 14.x before 14.12.0000 is vulnerable to a heap-based buffer overflow caused by a failure to enforce proper bounds checking when processing network packets before authentication. This can allow a remote, unauthenticated attacker to cause DoS or potentially execute arbitrary code...

Linux Distros Unpatched Vulnerability : CVE-2019-19796

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Yabasic 2.86.2 has a heap-based buffer overflow in myformat in function.c via a crafted BASIC source file. CVE-2019-19796 Note that Nessus relies on the presenc...

Linux Distros Unpatched Vulnerability : CVE-2019-18849

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In tnef before 1.4.18, an attacker may be able to write to the victim's .ssh/authorizedkeys file via an e-mail message with a crafted winmail.dat...

Linux Distros Unpatched Vulnerability : CVE-2022-2601

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A buffer overflow was found in grubfontconstructglyph. A malicious crafted pf2 font can lead to an overflow when calculating the maxglyphsize value, allocating ...