WaratekVRT Sign in
Reset
More filters (1)
Columns
Including CVEs outside Waratek scope✕CWE CWE-122✕
Overview 4,078 matches · 3 in Waratek scope · 0 protected · 29 exploited · 21 CISA KEV · 51 public PoC · 24 EPSS ≥ 0.5
4,078matches 3in Waratek scope0.1% 0protected0.0% 29exploited0.7% 21CISA KEV0.5% 51public PoC1.3% 24EPSS ≥ 0.50.6%
Protected by Waratek 0 0.0% Rule in development 0 0.0% Mitigation candidate 0 0.0% No exploit published 3 0.1% Outside Waratek scope 13 0.3% Not applicable 4,062 99.6% Withdrawn CVE 0 0.0%
Critical 444 10.9% High 3,008 73.8% Medium 486 11.9% Low 140 3.4% None 0 0.0% Unknown 0 0.0%
blocked by ARMR today 0 0.0% partly blocked 0 0.0% not blocked 4,078 100.0% not established 0 0.0% unrecorded 0 0.0%
Exploited 29 0.7% Working exploit published 14 0.3% Proof of concept only 481 11.8% Forecast only 15 0.4% No public exploit 3,539 86.8%
split by peak 2,246 / year
Not applicable: 4,062Outside Waratek scope: 13No exploit published: 3 Low: 140Medium: 486High: 3,008Critical: 444 not blocked: 4,078 No public exploit: 3,539Forecast only: 15Proof of concept only: 481Working exploit published: 14Exploited: 29
20091 Not applicable1 High1 not blocked1 Exploited1 20100 20110 20120 20131 Not applicable1 Medium1 not blocked1 Proof of concept only1 20144 Not applicable4 High2 Medium2 not blocked4 No public exploit4 20152 Not applicable2 Critical1 High1 not blocked2 Exploited1 No public exploit1 20162 Not applicable2 High2 not blocked2 No public exploit2 20177 Not applicable7 Critical1 High6 not blocked7 No public exploit7 201845 Not applicable45 Critical10 High32 Medium3 not blocked45 Working exploit published3 No public exploit42 201968 Outside Waratek scope8 Not applicable60 Critical34 High34 not blocked68 Exploited2 No public exploit66 202054 Not applicable54 Critical12 High32 Medium10 not blocked54 Exploited1 Forecast only2 No public exploit51 2021130 Outside Waratek scope1 Not applicable129 Critical30 High87 Medium13 not blocked130 Exploited1 Proof of concept only1 Forecast only6 No public exploit122 2022189 Outside Waratek scope1 Not applicable188 Critical30 High146 Medium11 Low2 not blocked189 Exploited1 Proof of concept only32 Forecast only1 No public exploit155 2023257 No exploit published1 Not applicable256 Critical32 High188 Medium34 Low3 not blocked257 Exploited6 Working exploit published1 Proof of concept only45 Forecast only2 No public exploit203 2024528 No exploit published1 Not applicable527 Critical38 High417 Medium70 Low3 not blocked528 Exploited4 Working exploit published3 Proof of concept only67 Forecast only4 No public exploit450 2025544 Outside Waratek scope1 Not applicable543 Critical40 High389 Medium71 Low44 not blocked544 Exploited6 Working exploit published5 Proof of concept only111 No public exploit422 20262,246 No exploit published1 Outside Waratek scope2 Not applicable2,243 Critical216 High1,671 Medium271 Low88 not blocked2,246 Exploited6 Working exploit published2 Proof of concept only224 No public exploit2,014
201020122014201620182020202220242026
4,078 matches Sign in to download these CVEs as CSV or JSON, or to follow them in a feed. ‹ prev page 1 of 41 next ›
CVE Severity Published▾ Status Exploitation Description
CVE-2026-129126 Critical 2026-11-13 Not applicable No public exploit C-Kermit before 11.1.515 contains a heap buffer overflow vulnerability in putsrv() in ckcfns.c that allows malicious peers to write past the srvcmd buffer by sending crafted packets. Attackers can use Kermit repeat-count compression in server command, GET, or file-header packets to write attacker-chosen bytes beyond the heap buffer on servers or receiving instances.
CVE-2026-109091 High 2026-11-13 Not applicable No public exploit A buffer overflow in handling EDID Display-Range descriptors in X.Org xwayland before 24.1.15 and X Server before 21.1.26 could be used by malicious monitors to crash the x server or execute cote.
CVE-2026-121752 High 2026-11-12 Not applicable No public exploit Ashlar-Vellum Cobalt LI File Parsing Heap-based Buffer Overflow Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Ashlar-Vellum Cobalt. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsing of LI files. The issue results from the lack of proper validation of the length of user-supplied data prior to copying it to a heap-based buffer. An attacker can leverage this vulnerability to execute code in the context of the current process. Was ZDI-CAN-28447.
CVE-2026-121743 High 2026-11-12 Not applicable No public exploit Ashlar-Vellum Cobalt AR File Parsing Heap-based Buffer Overflow Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Ashlar-Vellum Cobalt. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsing of AR files. The issue results from the lack of proper validation of the length of user-supplied data prior to copying it to a heap-based buffer. An attacker can leverage this vulnerability to execute code in the context of the current process. Was ZDI-CAN-28675.
CVE-2026-120149 High 2026-11-12 Not applicable No public exploit Heap-based buffer overflow in PostgreSQL foreign batch inserts allows a foreign server to execute arbitrary code, via reporting that it inserted more rows than the server supplied. postgres_fdw can legitimately encounter this when a rule on the remote table expands an INSERT into additional rows. Versions before PostgreSQL 18.7, 17.12, 16.16, 15.20, and 14.25 are affected.
CVE-2026-116317 High 2026-11-12 Not applicable No public exploit Heap-based buffer overflow in PostgreSQL ts_rank_cd() may allow a database user to execute arbitrary code as the operating system user running the database, via an invalid tsvector containing duplicate positions. Versions before PostgreSQL 18.7, 17.12, 16.16, 15.20, and 14.25 are affected.
CVE-2026-116315 High 2026-11-12 Not applicable No public exploit Heap-based buffer overflow in PostgreSQL tsvector_delete() allows a database user to execute arbitrary code as the operating system user running the database, via a tsvector whose lexeme data uses a nonstandard but valid ordering that requires additional alignment padding in the result. Versions before PostgreSQL 18.7, 17.12, 16.16, 15.20, and 14.25 are affected.
CVE-2026-114569 High 2026-11-12 Not applicable No public exploit OriginLab Origin Viewer OGWU File Parsing Heap-based Buffer Overflow Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of OriginLab Origin Viewer. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsing of OGWU files. The issue results from the lack of proper validation of the length of user-supplied data prior to copying it to a heap-based buffer. An attacker can leverage this vulnerability to execute code in the context of the current process. Was ZDI-CAN-30430.
CVE-2026-114568 High 2026-11-12 Not applicable No public exploit OriginLab Origin Viewer OPJ File Parsing Heap-based Buffer Overflow Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of OriginLab Origin Viewer. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsing of OPJ files. The issue results from the lack of proper validation of the length of user-supplied data prior to copying it to a heap-based buffer. An attacker can leverage this vulnerability to execute code in the context of the current process. Was ZDI-CAN-31587.
CVE-2025-10935 High 2026-11-12 Not applicable No public exploit libilbm ILBM File Parsing Heap-based Buffer Overflow Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of libilbm. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsing of ILBM files. The issue results from the lack of proper validation of the length of user-supplied data prior to copying it to a heap-based buffer. An attacker can leverage this vulnerability to execute code in the context of the current process. Was ZDI-CAN-27792.
CVE-2026-126912 Critical 2026-11-11 Not applicable No public exploit Buffer overflow in Skia in Google Chrome prior to 157.0.8103.78 allowed a remote attacker to execute arbitrary code outside the sandbox via a crafted HTML page. (Chromium security severity: High)
CVE-2026-126888 High 2026-11-11 Not applicable No public exploit Buffer overflow in Turbolev in Google Chrome prior to 157.0.8103.78 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: High)
CVE-2026-126212 High 2026-11-11 Not applicable No public exploit A heap-based buffer overflow vulnerability in Fortinet FortiAnalyzer 8.0.0 through 8.0.1, FortiAnalyzer 7.6.0 through 7.6.7, FortiAnalyzer 7.4.0 through 7.4.11, FortiAnalyzer Cloud 8.0.0 through 8.0.1, FortiAnalyzer Cloud 7.6.0 through 7.6.7, FortiAnalyzer Cloud 7.4.1 through 7.4.11, FortiManager 8.0.0 through 8.0.1, FortiManager 7.6.0 through 7.6.7, FortiManager 7.4.0 through 7.4.11, FortiManager Cloud 8.0.0 through 8.0.1, FortiManager Cloud 7.6.0 through 7.6.7, FortiManager Cloud 7.4.1 through 7.4.11 may allow an authenticated administrator to execute unauthorized code or commands or cause a denial of service via specially crafted JSON-RPC requests.
CVE-2026-126178 High 2026-11-11 Not applicable No public exploit A heap-based buffer overflow vulnerability in Fortinet FortiAnalyzer 8.0.0 through 8.0.1, FortiAnalyzer 7.6.0 through 7.6.7, FortiAnalyzer 7.4.0 through 7.4.11, FortiAnalyzer 7.2.0 through 7.2.12, FortiAnalyzer Cloud 8.0.0 through 8.0.1, FortiAnalyzer Cloud 7.6.0 through 7.6.7, FortiAnalyzer Cloud 7.4.1 through 7.4.11, FortiAnalyzer Cloud 7.2.1 through 7.2.12, FortiManager 8.0.0 through 8.0.1, FortiManager 7.6.0 through 7.6.7, FortiManager 7.4.0 through 7.4.11, FortiManager 7.2.0 through 7.2.12, FortiManager Cloud 8.0.0 through 8.0.1, FortiManager Cloud 7.6.0 through 7.6.7, FortiManager Cloud 7.4.1 through 7.4.11, FortiManager Cloud 7.2.1 through 7.2.12 may allow an authenticated attacker with admin privileges to execute unauthorized code or commands via a crafted request.
CVE-2026-123828 Medium 2026-11-11 Not applicable No public exploit A one-byte heap buffer overflow in Node.js HTTP/2 Alt-Svc handling lets a remote, unauthenticated attacker corrupt process memory. When an application passes an attacker-controlled value such as a request's :authority header to Http2Session.altsvc(), the AltSvc implementation in src/node_http2.cc allocates a buffer sized to the origin length and then writes it with a null terminator, placing one byte past the end of the allocation. A single request carrying a long but syntactically valid :authority triggers the out-of-bounds write, which aborts the process and serves as a remote heap-corruption primitive. This vulnerability affects Node.js 26.x and 24.x.
CVE-2026-97015 Medium 2026-11-10 Not applicable No public exploit Heap-based buffer overflow in Windows BitLocker allows an unauthorized attacker to bypass a security feature with a physical attack.
CVE-2026-96993 High 2026-11-10 Not applicable No public exploit Release of invalid pointer or reference in Windows Performance Monitor allows an unauthorized attacker to execute code over a network.
CVE-2026-96184 High 2026-11-10 Not applicable No public exploit Heap-based buffer overflow in Windows Modern Device Management (MDM) allows an authorized attacker to elevate privileges locally.
CVE-2026-96164 High 2026-11-10 Not applicable No public exploit Heap-based buffer overflow in Windows Imaging Component allows an unauthorized attacker to execute code over a network.
CVE-2026-96157 Critical 2026-11-10 Not applicable No public exploit Heap-based buffer overflow in Microsoft Windows Media Foundation allows an unauthorized attacker to execute code over a network.
CVE-2026-96153 High 2026-11-10 Not applicable No public exploit Heap-based buffer overflow in Windows Error Reporting allows an authorized attacker to elevate privileges locally.
CVE-2026-96127 High 2026-11-10 Not applicable No public exploit Heap-based buffer overflow in Windows Biometric Service allows an authorized attacker to elevate privileges locally.
CVE-2026-96126 High 2026-11-10 Not applicable No public exploit Heap-based buffer overflow in Windows Graphics Kernel allows an authorized attacker to elevate privileges locally.
CVE-2026-96117 High 2026-11-10 Not applicable No public exploit Heap-based buffer overflow in Windows LUAFV allows an authorized attacker to elevate privileges locally.
CVE-2026-96115 High 2026-11-10 Not applicable No public exploit Double free in Windows DHCP Client allows an authorized attacker to elevate privileges over an adjacent network.
CVE-2026-96103 High 2026-11-10 Not applicable No public exploit Heap-based buffer overflow in Desktop Window Manager allows an authorized attacker to elevate privileges locally.
CVE-2026-96102 High 2026-11-10 Not applicable No public exploit Heap-based buffer overflow in Windows TCP/IP allows an authorized attacker to elevate privileges locally.
CVE-2026-96085 High 2026-11-10 Not applicable No public exploit Heap-based buffer overflow in Windows Installer allows an authorized attacker to elevate privileges locally.
CVE-2026-96084 High 2026-11-10 Not applicable No public exploit Heap-based buffer overflow in Graphic Fonts allows an authorized attacker to elevate privileges locally.
CVE-2026-96081 High 2026-11-10 Not applicable No public exploit Heap-based buffer overflow in Windows Rich Text Edit Control allows an unauthorized attacker to execute code over a network.
CVE-2026-96078 Critical 2026-11-10 Not applicable No public exploit Heap-based buffer overflow in Microsoft Color Management allows an unauthorized attacker to execute code over a network.
CVE-2026-96074 High 2026-11-10 Not applicable No public exploit Heap-based buffer overflow in Windows AppX Package Manager allows an authorized attacker to elevate privileges locally.
CVE-2026-96064 High 2026-11-10 Not applicable No public exploit Heap-based buffer overflow in DNS Server allows an authorized attacker to execute code over a network.
CVE-2026-96062 High 2026-11-10 Not applicable No public exploit Heap-based buffer overflow in Windows Installer allows an authorized attacker to elevate privileges locally.
CVE-2026-96057 High 2026-11-10 Not applicable No public exploit Heap-based buffer overflow in Windows USB Driver allows an authorized attacker to elevate privileges locally.
CVE-2026-96056 High 2026-11-10 Not applicable No public exploit Heap-based buffer overflow in Windows USB Driver allows an authorized attacker to elevate privileges locally.
CVE-2026-96055 High 2026-11-10 Not applicable No public exploit Heap-based buffer overflow in Windows USB Driver allows an authorized attacker to elevate privileges locally.
CVE-2026-96054 High 2026-11-10 Not applicable No public exploit Heap-based buffer overflow in Microsoft Color Management allows an unauthorized attacker to execute code locally.
CVE-2026-96037 High 2026-11-10 Not applicable No public exploit Heap-based buffer overflow in Windows User Manager Service allows an authorized attacker to elevate privileges locally.
CVE-2026-96036 High 2026-11-10 Not applicable No public exploit Integer overflow or wraparound in Windows Installer allows an authorized attacker to elevate privileges locally.
CVE-2026-96016 High 2026-11-10 Not applicable No public exploit Heap-based buffer overflow in Windows Local Security Authority Subsystem Service (LSASS) allows an authorized attacker to elevate privileges locally.
CVE-2026-96005 High 2026-11-10 Not applicable No public exploit Heap-based buffer overflow in Windows USB Driver allows an authorized attacker to elevate privileges locally.
CVE-2026-96002 High 2026-11-10 Not applicable No public exploit Heap-based buffer overflow in DNS Server allows an authorized attacker to execute code over a network.
CVE-2026-95975 High 2026-11-10 Not applicable No public exploit Heap-based buffer overflow in Windows Performance Counters allows an unauthorized attacker to execute code over a network.
CVE-2026-95974 High 2026-11-10 Not applicable No public exploit Heap-based buffer overflow in Windows Graphics Kernel allows an authorized attacker to elevate privileges locally.
CVE-2026-95965 High 2026-11-10 Not applicable No public exploit Heap-based buffer overflow in Windows USB Video Driver allows an authorized attacker to elevate privileges locally.
CVE-2026-95951 High 2026-11-10 Not applicable No public exploit Heap-based buffer overflow in Windows Installer allows an authorized attacker to elevate privileges locally.
CVE-2026-95938 High 2026-11-10 Not applicable No public exploit Heap-based buffer overflow in Windows Graphics Kernel allows an authorized attacker to elevate privileges locally.
CVE-2026-95933 High 2026-11-10 Not applicable No public exploit Heap-based buffer overflow in Windows OLE allows an authorized attacker to elevate privileges locally.
CVE-2026-95923 High 2026-11-10 Not applicable No public exploit Heap-based buffer overflow in Windows HTTP.sys allows an authorized attacker to elevate privileges locally.
CVE-2026-95922 High 2026-11-10 Not applicable No public exploit Heap-based buffer overflow in Windows Graphics Kernel allows an authorized attacker to elevate privileges locally.
CVE-2026-95920 High 2026-11-10 Not applicable No public exploit Heap-based buffer overflow in Windows Management Instrumentation allows an authorized attacker to elevate privileges locally.
CVE-2026-95905 Medium 2026-11-10 Not applicable No public exploit Heap-based buffer overflow in Windows Kernel allows an unauthorized attacker to elevate privileges with a physical attack.
CVE-2026-95902 High 2026-11-10 Not applicable No public exploit Heap-based buffer overflow in Windows USB Hub Driver allows an authorized attacker to elevate privileges locally.
CVE-2026-95898 High 2026-11-10 Not applicable No public exploit Heap-based buffer overflow in Windows iSCSI allows an authorized attacker to elevate privileges locally.
CVE-2026-95896 High 2026-11-10 Not applicable No public exploit Heap-based buffer overflow in Windows Microsoft DirectMusic allows an authorized attacker to execute code locally.
CVE-2026-95894 High 2026-11-10 Not applicable No public exploit Heap-based buffer overflow in Windows Task Scheduler allows an authorized attacker to elevate privileges locally.
CVE-2026-95891 High 2026-11-10 Not applicable No public exploit Heap-based buffer overflow in Windows Microsoft DirectMusic allows an authorized attacker to execute code locally.
CVE-2026-95888 High 2026-11-10 Not applicable No public exploit Heap-based buffer overflow in Windows Graphics Kernel allows an authorized attacker to elevate privileges locally.
CVE-2026-95881 High 2026-11-10 Not applicable No public exploit Heap-based buffer overflow in Windows Push Notifications allows an authorized attacker to elevate privileges locally.
CVE-2026-95877 High 2026-11-10 Not applicable No public exploit Heap-based buffer overflow in Windows Biometric Service allows an authorized attacker to elevate privileges locally.
CVE-2026-95874 High 2026-11-10 Not applicable No public exploit Heap-based buffer overflow in Xbox allows an authorized attacker to elevate privileges locally.
CVE-2026-95872 High 2026-11-10 Not applicable No public exploit Heap-based buffer overflow in Windows USB Driver allows an authorized attacker to elevate privileges locally.
CVE-2026-95871 High 2026-11-10 Not applicable No public exploit Heap-based buffer overflow in Windows Broadcast DVR User Service allows an authorized attacker to elevate privileges locally.
CVE-2026-94529 High 2026-11-10 Not applicable No public exploit Heap-based buffer overflow in Windows Broadcast DVR User Service allows an authorized attacker to elevate privileges locally.
CVE-2026-94527 High 2026-11-10 Not applicable No public exploit Heap-based buffer overflow in Windows GDI allows an authorized attacker to elevate privileges locally.
CVE-2026-94515 High 2026-11-10 Not applicable No public exploit Heap-based buffer overflow in Windows Advanced Rasterization Platform allows an authorized attacker to elevate privileges locally.
CVE-2026-94513 High 2026-11-10 Not applicable No public exploit Heap-based buffer overflow in SQL Server allows an authorized attacker to elevate privileges over a network.
CVE-2026-94511 High 2026-11-10 Not applicable No public exploit Heap-based buffer overflow in SQL Server allows an authorized attacker to execute code over a network.
CVE-2026-94507 High 2026-11-10 Not applicable No public exploit Heap-based buffer overflow in Windows DirectX allows an authorized attacker to elevate privileges locally.
CVE-2026-91760 High 2026-11-10 Not applicable No public exploit Heap-based Buffer Overflow Vulnerability in Hitachi Dynamic Link Manager for Linux. This issue affects Hitachi Dynamic Link Manager for Linux: from 7.5.0-00 before 9.0.5-00.
CVE-2026-89126 Critical 2026-11-10 Not applicable No public exploit SAP Web Dispatcher does not sufficiently validate certain network input processed by an internal component. An unauthenticated attacker could send specially crafted network traffic to trigger a memory corruption condition in the affected functionality. Successful exploitation could allow the attacker to execute arbitrary code and fully compromise the system, resulting in a high impact on confidentiality, integrity and availability of the system.
CVE-2026-88241 High 2026-11-10 Not applicable No public exploit Heap-based buffer overflow in Windows Sensor Data Service allows an authorized attacker to elevate privileges locally.
CVE-2026-88240 High 2026-11-10 Not applicable No public exploit Heap-based buffer overflow in Windows DHCP Client allows an authorized attacker to elevate privileges over an adjacent network.
CVE-2026-88239 High 2026-11-10 Not applicable No public exploit Heap-based buffer overflow in Windows Biometric Service allows an authorized attacker to elevate privileges locally.
CVE-2026-88238 High 2026-11-10 Not applicable No public exploit Heap-based buffer overflow in Windows Camera Frame Server Monitor allows an authorized attacker to elevate privileges locally.
CVE-2026-88230 High 2026-11-10 Not applicable No public exploit Heap-based buffer overflow in Windows LUAFV allows an authorized attacker to elevate privileges locally.
CVE-2026-88229 High 2026-11-10 Not applicable No public exploit Heap-based buffer overflow in Windows Media Player allows an unauthorized attacker to execute code over a network.
CVE-2026-88228 High 2026-11-10 Not applicable No public exploit Heap-based buffer overflow in Windows Local Security Authority Subsystem Service (LSASS) allows an authorized attacker to elevate privileges locally.
CVE-2026-88227 High 2026-11-10 Not applicable No public exploit Heap-based buffer overflow in Windows Local Security Authority Subsystem Service (LSASS) allows an authorized attacker to elevate privileges locally.
CVE-2026-88222 High 2026-11-10 Not applicable No public exploit Heap-based buffer overflow in Microsoft WDAC OLE DB provider for SQL allows an unauthorized attacker to execute code over a network.
CVE-2026-88216 High 2026-11-10 Not applicable No public exploit Time-of-check time-of-use (toctou) race condition in Windows DHCP Server allows an authorized attacker to execute code over a network.
CVE-2026-88187 High 2026-11-10 Not applicable No public exploit Heap-based buffer overflow in Windows Bluetooth A2DP driver allows an authorized attacker to elevate privileges over an adjacent network.
CVE-2026-88111 High 2026-11-10 Not applicable No public exploit Heap-based buffer overflow in SQL Server allows an authorized attacker to execute code over a network.
CVE-2026-85942 High 2026-11-10 Not applicable No public exploit Heap-based buffer overflow in Windows Camera Frame Server Monitor allows an authorized attacker to elevate privileges locally.
CVE-2026-85839 High 2026-11-10 Not applicable No public exploit Heap-based buffer overflow in Microsoft WDAC OLE DB provider for SQL allows an unauthorized attacker to execute code over a network.
CVE-2026-85838 High 2026-11-10 Not applicable No public exploit Heap-based buffer overflow in Microsoft WDAC OLE DB provider for SQL allows an unauthorized attacker to execute code over a network.
CVE-2026-83563 High 2026-11-10 Not applicable No public exploit Heap-based buffer overflow in Winlogon allows an authorized attacker to elevate privileges locally.
CVE-2026-81384 High 2026-11-10 Not applicable No public exploit Heap-based buffer overflow in DNS Server allows an unauthorized attacker to execute code over a network.
CVE-2026-67646 High 2026-11-10 Not applicable No public exploit Heap-based buffer overflow in SQL Server allows an authorized attacker to execute code over a network.
CVE-2026-67637 High 2026-11-10 Not applicable No public exploit Heap-based buffer overflow in SQL Server allows an authorized attacker to execute code over a network.
CVE-2026-67632 High 2026-11-10 Not applicable No public exploit Heap-based buffer overflow in SQL Server allows an authorized attacker to execute code over a network.
CVE-2026-67391 High 2026-11-10 Not applicable No public exploit Heap-based buffer overflow in SQL Server allows an authorized attacker to execute code over a network.
CVE-2026-67374 High 2026-11-10 Not applicable No public exploit Heap-based buffer overflow in SQL Server allows an authorized attacker to execute code over a network.
CVE-2026-67372 High 2026-11-10 Not applicable No public exploit Heap-based buffer overflow in SQL Server allows an authorized attacker to execute code over a network.
CVE-2026-66801 Critical 2026-11-10 Not applicable No public exploit Heap-based buffer overflow in Xbox allows an unauthorized attacker to execute code over a network.
CVE-2026-63540 Medium 2026-11-10 Not applicable No public exploit Heap-based buffer overflow for some Hyperscan before version v5.4.2.1 within Ring 3: User Applications may allow a denial of service. Unprivileged software adversary with an unauthenticated user combined with a low complexity attack may enable denial of service. This result may potentially occur via local access when attack requirements are not present without special internal knowledge and requires passive user interaction. The potential vulnerability may impact the confidentiality (none), integrity (low) and availability (high) of the vulnerable system, resulting in subsequent system confidentiality (none), integrity (none) and availability (none) impacts.
CVE-2026-59594 High 2026-11-10 Not applicable No public exploit In spm_alloc of encoder, there is a possible Heap Buffer Overflow due to a heap buffer overflow. This could lead to local escalation of privilege with execution privileges needed. User interaction is for exploitation.
CVE-2026-59593 High 2026-11-10 Not applicable No public exploit In tile_info of av1_decoder, there is a possible Heap Buffer Overflow due to a heap buffer overflow. This could lead to local escalation of privilege with execution privileges needed. User interaction is for exploitation.
CVE-2026-58696 Medium 2026-11-10 Not applicable No public exploit In multiple locations, there is a possible out-of-bounds write due to a heap buffer overflow. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation.
‹ prev page 1 of 41 next ›