20806 matches found
EUVD-2026-73194
Heap-based buffer overflow in Windows NTFS allows an unauthorized attacker to execute code with a physical attack...
CVE-2026-68787
A heap-based buffer overflow in Microsoft SQL Server allows an authorized attacker with low privileges to execute code locally. The flaw requires no user interaction and results in high impact to confidentiality, integrity, and availability (CVSS 3.1 base score 7.8 – HIGH , vector AV:L/AC:L/PR:L/...
CVE-2026-68785
Microsoft SQL Server is affected by a heap-based buffer overflow that allows an authorized attacker (high privileges required) to execute code over a network. The CVSS v3.1 score is 4.9 (Medium) , reflecting a network attack vector with low complexity, high privileges required, and no user intera...
EUVD-2026-73189
Heap-based buffer overflow in SQL Server allows an authorized attacker to execute code over a network...
EUVD-2026-73185
Heap-based buffer overflow in SQL Server allows an authorized attacker to execute code over a network...
EUVD-2026-73182
Heap-based buffer overflow in SQL Server allows an authorized attacker to execute code over a network...
EUVD-2026-73175
Heap-based buffer overflow in SQL Server allows an unauthorized attacker to execute code over a network...
CVE-2026-77482
CVE-2026-77482 is a heap-based buffer overflow in Microsoft SQL Server that allows an unauthorized attacker to achieve remote code execution over a network. The CVSS 3.1 score is 8.8 (High) with vector AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H, indicating low attack complexity but required user interac...
CVE-2026-69522
Heap-based buffer overflow in Visual Studio allows an unauthorized attacker to execute code over a network...
EUVD-2026-73167
Heap-based buffer overflow in Microsoft Windows Media Foundation allows an unauthorized attacker to execute code over a network...
CVE-2026-62744
A heap-based buffer overflow in Microsoft Windows Media Foundation allows an unauthorized attacker to achieve remote code execution over a network. The vulnerability requires user interaction but no prior authentication (CVSS 3.1 base score: 8.8 – HIGH ). No specific affected version range or pat...
CVE-2026-35330
CVE-2026-35330 strongSwan EAP-SIM / EAP-AKA attribute parser pre-auth heap buffer overflow via integer underflow. Description parseattributes in src/libsimaka/simakamessage.c:419 reads TLV headers whose length byte counts 4-byte words. For the ATRAND / ATENCRDATA branch: root@kitploit: if...
CVE-2025-47981
🔵 CVE-2025-47981 — Windows SPNEGO NEGOEX Vulnerability Assessment Script Type: Vulnerability Assessment — Detection / Compliance Check CVE: CVE-2025-47981 CVSS: 9.8 Critical AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H CWE: CWE-122 — Heap-based Buffer Overflow Alias: "SPNEGO Nightmare" / "Windows...
libyang: libyang: Denial of Service or arbitrary code execution via maliciously crafted LYB binary blob
A flaw was found in libyang, a YANG data modeling language library. An integer overflow in the lybreadstring function can lead to a heap buffer overflow when parsing a maliciously crafted LYB binary blob. A remote attacker, by supplying this malicious LYB data to any libyang consumer such as a...
Windows URL Moniker Remote Code Execution Vulnerability
Heap-based buffer overflow in Windows URL Moniker allows an unauthorized attacker to execute code over a network...
Role: Windows Fax Service Elevation of Privilege Vulnerability
Heap-based buffer overflow in Windows Fax Service allows an authorized attacker to elevate privileges locally...
Microsoft Office Word Remote Code Execution Vulnerability
Heap-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code over a network...
Windows Win32k Elevation of Privilege Vulnerability
Heap-based buffer overflow in Windows Win32K allows an authorized attacker to elevate privileges over a network...