Overview 3,009 matches · 0 in Waratek scope · 0 protected · 19 exploited · 14 CISA KEV · 37 public PoC · 14 EPSS ≥ 0.5
3,009matches
0in Waratek scope0.0%
0protected0.0%
19exploited0.6%
14CISA KEV0.5%
37public PoC1.2%
14EPSS ≥ 0.50.5%
Protected by Waratek
0
0.0%
Rule in development
0
0.0%
Mitigation candidate
0
0.0%
No exploit published
0
0.0%
Outside Waratek scope
7
0.2%
Not applicable
3,002
99.8%
Withdrawn CVE
0
0.0%
blocked by ARMR today
0
0.0%
partly blocked
0
0.0%
not blocked
3,009
100.0%
not established
0
0.0%
unrecorded
0
0.0%
split by
peak 1,672 / year
20091
Not applicable1
High1
not blocked1
Exploited1
20100
20110
20120
20130
20142
Not applicable2
High2
not blocked2
No public exploit2
20151
Not applicable1
High1
not blocked1
No public exploit1
20162
Not applicable2
High2
not blocked2
No public exploit2
20176
Not applicable6
High6
not blocked6
No public exploit6
201832
Not applicable32
High32
not blocked32
Working exploit published2
No public exploit30
201934
Outside Waratek scope6
Not applicable28
High34
not blocked34
Exploited1
No public exploit33
202032
Not applicable32
High32
not blocked32
Forecast only2
No public exploit30
202187
Not applicable87
High87
not blocked87
Exploited1
Forecast only3
No public exploit83
2022146
Outside Waratek scope1
Not applicable145
High146
not blocked146
Exploited1
Proof of concept only24
No public exploit121
2023188
Not applicable188
High188
not blocked188
Exploited5
Working exploit published1
Proof of concept only26
Forecast only2
No public exploit154
2024417
Not applicable417
High417
not blocked417
Exploited3
Working exploit published3
Proof of concept only31
Forecast only4
No public exploit376
2025389
Not applicable389
High389
not blocked389
Exploited4
Working exploit published5
Proof of concept only35
No public exploit345
20261,672
Not applicable1,672
High1,672
not blocked1,672
Exploited3
Working exploit published2
Proof of concept only96
No public exploit1,571
201020122014201620182020202220242026
| CVE | Severity | Published▾ | Status | Exploitation | Description |
|---|---|---|---|---|---|
| CVE-2026-109091 | High | 2026-11-13 | Not applicable | No public exploit | A buffer overflow in handling EDID Display-Range descriptors in X.Org xwayland before 24.1.15 and X Server before 21.1.26 could be used by malicious monitors to crash the x server or execute cote. |
| CVE-2026-121752 | High | 2026-11-12 | Not applicable | No public exploit | Ashlar-Vellum Cobalt LI File Parsing Heap-based Buffer Overflow Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Ashlar-Vellum Cobalt. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsing of LI files. The issue results from the lack of proper validation of the length of user-supplied data prior to copying it to a heap-based buffer. An attacker can leverage this vulnerability to execute code in the context of the current process. Was ZDI-CAN-28447. |
| CVE-2026-121743 | High | 2026-11-12 | Not applicable | No public exploit | Ashlar-Vellum Cobalt AR File Parsing Heap-based Buffer Overflow Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Ashlar-Vellum Cobalt. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsing of AR files. The issue results from the lack of proper validation of the length of user-supplied data prior to copying it to a heap-based buffer. An attacker can leverage this vulnerability to execute code in the context of the current process. Was ZDI-CAN-28675. |
| CVE-2026-120149 | High | 2026-11-12 | Not applicable | No public exploit | Heap-based buffer overflow in PostgreSQL foreign batch inserts allows a foreign server to execute arbitrary code, via reporting that it inserted more rows than the server supplied. postgres_fdw can legitimately encounter this when a rule on the remote table expands an INSERT into additional rows. Versions before PostgreSQL 18.7, 17.12, 16.16, 15.20, and 14.25 are affected. |
| CVE-2026-116317 | High | 2026-11-12 | Not applicable | No public exploit | Heap-based buffer overflow in PostgreSQL ts_rank_cd() may allow a database user to execute arbitrary code as the operating system user running the database, via an invalid tsvector containing duplicate positions. Versions before PostgreSQL 18.7, 17.12, 16.16, 15.20, and 14.25 are affected. |
| CVE-2026-116315 | High | 2026-11-12 | Not applicable | No public exploit | Heap-based buffer overflow in PostgreSQL tsvector_delete() allows a database user to execute arbitrary code as the operating system user running the database, via a tsvector whose lexeme data uses a nonstandard but valid ordering that requires additional alignment padding in the result. Versions before PostgreSQL 18.7, 17.12, 16.16, 15.20, and 14.25 are affected. |
| CVE-2026-114569 | High | 2026-11-12 | Not applicable | No public exploit | OriginLab Origin Viewer OGWU File Parsing Heap-based Buffer Overflow Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of OriginLab Origin Viewer. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsing of OGWU files. The issue results from the lack of proper validation of the length of user-supplied data prior to copying it to a heap-based buffer. An attacker can leverage this vulnerability to execute code in the context of the current process. Was ZDI-CAN-30430. |
| CVE-2026-114568 | High | 2026-11-12 | Not applicable | No public exploit | OriginLab Origin Viewer OPJ File Parsing Heap-based Buffer Overflow Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of OriginLab Origin Viewer. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsing of OPJ files. The issue results from the lack of proper validation of the length of user-supplied data prior to copying it to a heap-based buffer. An attacker can leverage this vulnerability to execute code in the context of the current process. Was ZDI-CAN-31587. |
| CVE-2025-10935 | High | 2026-11-12 | Not applicable | No public exploit | libilbm ILBM File Parsing Heap-based Buffer Overflow Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of libilbm. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsing of ILBM files. The issue results from the lack of proper validation of the length of user-supplied data prior to copying it to a heap-based buffer. An attacker can leverage this vulnerability to execute code in the context of the current process. Was ZDI-CAN-27792. |
| CVE-2026-126888 | High | 2026-11-11 | Not applicable | No public exploit | Buffer overflow in Turbolev in Google Chrome prior to 157.0.8103.78 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: High) |
| CVE-2026-126212 | High | 2026-11-11 | Not applicable | No public exploit | A heap-based buffer overflow vulnerability in Fortinet FortiAnalyzer 8.0.0 through 8.0.1, FortiAnalyzer 7.6.0 through 7.6.7, FortiAnalyzer 7.4.0 through 7.4.11, FortiAnalyzer Cloud 8.0.0 through 8.0.1, FortiAnalyzer Cloud 7.6.0 through 7.6.7, FortiAnalyzer Cloud 7.4.1 through 7.4.11, FortiManager 8.0.0 through 8.0.1, FortiManager 7.6.0 through 7.6.7, FortiManager 7.4.0 through 7.4.11, FortiManager Cloud 8.0.0 through 8.0.1, FortiManager Cloud 7.6.0 through 7.6.7, FortiManager Cloud 7.4.1 through 7.4.11 may allow an authenticated administrator to execute unauthorized code or commands or cause a denial of service via specially crafted JSON-RPC requests. |
| CVE-2026-126178 | High | 2026-11-11 | Not applicable | No public exploit | A heap-based buffer overflow vulnerability in Fortinet FortiAnalyzer 8.0.0 through 8.0.1, FortiAnalyzer 7.6.0 through 7.6.7, FortiAnalyzer 7.4.0 through 7.4.11, FortiAnalyzer 7.2.0 through 7.2.12, FortiAnalyzer Cloud 8.0.0 through 8.0.1, FortiAnalyzer Cloud 7.6.0 through 7.6.7, FortiAnalyzer Cloud 7.4.1 through 7.4.11, FortiAnalyzer Cloud 7.2.1 through 7.2.12, FortiManager 8.0.0 through 8.0.1, FortiManager 7.6.0 through 7.6.7, FortiManager 7.4.0 through 7.4.11, FortiManager 7.2.0 through 7.2.12, FortiManager Cloud 8.0.0 through 8.0.1, FortiManager Cloud 7.6.0 through 7.6.7, FortiManager Cloud 7.4.1 through 7.4.11, FortiManager Cloud 7.2.1 through 7.2.12 may allow an authenticated attacker with admin privileges to execute unauthorized code or commands via a crafted request. |
| CVE-2026-96993 | High | 2026-11-10 | Not applicable | No public exploit | Release of invalid pointer or reference in Windows Performance Monitor allows an unauthorized attacker to execute code over a network. |
| CVE-2026-96184 | High | 2026-11-10 | Not applicable | No public exploit | Heap-based buffer overflow in Windows Modern Device Management (MDM) allows an authorized attacker to elevate privileges locally. |
| CVE-2026-96164 | High | 2026-11-10 | Not applicable | No public exploit | Heap-based buffer overflow in Windows Imaging Component allows an unauthorized attacker to execute code over a network. |
| CVE-2026-96153 | High | 2026-11-10 | Not applicable | No public exploit | Heap-based buffer overflow in Windows Error Reporting allows an authorized attacker to elevate privileges locally. |
| CVE-2026-96127 | High | 2026-11-10 | Not applicable | No public exploit | Heap-based buffer overflow in Windows Biometric Service allows an authorized attacker to elevate privileges locally. |
| CVE-2026-96126 | High | 2026-11-10 | Not applicable | No public exploit | Heap-based buffer overflow in Windows Graphics Kernel allows an authorized attacker to elevate privileges locally. |
| CVE-2026-96117 | High | 2026-11-10 | Not applicable | No public exploit | Heap-based buffer overflow in Windows LUAFV allows an authorized attacker to elevate privileges locally. |
| CVE-2026-96115 | High | 2026-11-10 | Not applicable | No public exploit | Double free in Windows DHCP Client allows an authorized attacker to elevate privileges over an adjacent network. |
| CVE-2026-96103 | High | 2026-11-10 | Not applicable | No public exploit | Heap-based buffer overflow in Desktop Window Manager allows an authorized attacker to elevate privileges locally. |
| CVE-2026-96102 | High | 2026-11-10 | Not applicable | No public exploit | Heap-based buffer overflow in Windows TCP/IP allows an authorized attacker to elevate privileges locally. |
| CVE-2026-96085 | High | 2026-11-10 | Not applicable | No public exploit | Heap-based buffer overflow in Windows Installer allows an authorized attacker to elevate privileges locally. |
| CVE-2026-96084 | High | 2026-11-10 | Not applicable | No public exploit | Heap-based buffer overflow in Graphic Fonts allows an authorized attacker to elevate privileges locally. |
| CVE-2026-96081 | High | 2026-11-10 | Not applicable | No public exploit | Heap-based buffer overflow in Windows Rich Text Edit Control allows an unauthorized attacker to execute code over a network. |
| CVE-2026-96074 | High | 2026-11-10 | Not applicable | No public exploit | Heap-based buffer overflow in Windows AppX Package Manager allows an authorized attacker to elevate privileges locally. |
| CVE-2026-96064 | High | 2026-11-10 | Not applicable | No public exploit | Heap-based buffer overflow in DNS Server allows an authorized attacker to execute code over a network. |
| CVE-2026-96062 | High | 2026-11-10 | Not applicable | No public exploit | Heap-based buffer overflow in Windows Installer allows an authorized attacker to elevate privileges locally. |
| CVE-2026-96057 | High | 2026-11-10 | Not applicable | No public exploit | Heap-based buffer overflow in Windows USB Driver allows an authorized attacker to elevate privileges locally. |
| CVE-2026-96056 | High | 2026-11-10 | Not applicable | No public exploit | Heap-based buffer overflow in Windows USB Driver allows an authorized attacker to elevate privileges locally. |
| CVE-2026-96055 | High | 2026-11-10 | Not applicable | No public exploit | Heap-based buffer overflow in Windows USB Driver allows an authorized attacker to elevate privileges locally. |
| CVE-2026-96054 | High | 2026-11-10 | Not applicable | No public exploit | Heap-based buffer overflow in Microsoft Color Management allows an unauthorized attacker to execute code locally. |
| CVE-2026-96037 | High | 2026-11-10 | Not applicable | No public exploit | Heap-based buffer overflow in Windows User Manager Service allows an authorized attacker to elevate privileges locally. |
| CVE-2026-96036 | High | 2026-11-10 | Not applicable | No public exploit | Integer overflow or wraparound in Windows Installer allows an authorized attacker to elevate privileges locally. |
| CVE-2026-96016 | High | 2026-11-10 | Not applicable | No public exploit | Heap-based buffer overflow in Windows Local Security Authority Subsystem Service (LSASS) allows an authorized attacker to elevate privileges locally. |
| CVE-2026-96005 | High | 2026-11-10 | Not applicable | No public exploit | Heap-based buffer overflow in Windows USB Driver allows an authorized attacker to elevate privileges locally. |
| CVE-2026-96002 | High | 2026-11-10 | Not applicable | No public exploit | Heap-based buffer overflow in DNS Server allows an authorized attacker to execute code over a network. |
| CVE-2026-95975 | High | 2026-11-10 | Not applicable | No public exploit | Heap-based buffer overflow in Windows Performance Counters allows an unauthorized attacker to execute code over a network. |
| CVE-2026-95974 | High | 2026-11-10 | Not applicable | No public exploit | Heap-based buffer overflow in Windows Graphics Kernel allows an authorized attacker to elevate privileges locally. |
| CVE-2026-95965 | High | 2026-11-10 | Not applicable | No public exploit | Heap-based buffer overflow in Windows USB Video Driver allows an authorized attacker to elevate privileges locally. |
| CVE-2026-95951 | High | 2026-11-10 | Not applicable | No public exploit | Heap-based buffer overflow in Windows Installer allows an authorized attacker to elevate privileges locally. |
| CVE-2026-95938 | High | 2026-11-10 | Not applicable | No public exploit | Heap-based buffer overflow in Windows Graphics Kernel allows an authorized attacker to elevate privileges locally. |
| CVE-2026-95933 | High | 2026-11-10 | Not applicable | No public exploit | Heap-based buffer overflow in Windows OLE allows an authorized attacker to elevate privileges locally. |
| CVE-2026-95923 | High | 2026-11-10 | Not applicable | No public exploit | Heap-based buffer overflow in Windows HTTP.sys allows an authorized attacker to elevate privileges locally. |
| CVE-2026-95922 | High | 2026-11-10 | Not applicable | No public exploit | Heap-based buffer overflow in Windows Graphics Kernel allows an authorized attacker to elevate privileges locally. |
| CVE-2026-95920 | High | 2026-11-10 | Not applicable | No public exploit | Heap-based buffer overflow in Windows Management Instrumentation allows an authorized attacker to elevate privileges locally. |
| CVE-2026-95902 | High | 2026-11-10 | Not applicable | No public exploit | Heap-based buffer overflow in Windows USB Hub Driver allows an authorized attacker to elevate privileges locally. |
| CVE-2026-95898 | High | 2026-11-10 | Not applicable | No public exploit | Heap-based buffer overflow in Windows iSCSI allows an authorized attacker to elevate privileges locally. |
| CVE-2026-95896 | High | 2026-11-10 | Not applicable | No public exploit | Heap-based buffer overflow in Windows Microsoft DirectMusic allows an authorized attacker to execute code locally. |
| CVE-2026-95894 | High | 2026-11-10 | Not applicable | No public exploit | Heap-based buffer overflow in Windows Task Scheduler allows an authorized attacker to elevate privileges locally. |
| CVE-2026-95891 | High | 2026-11-10 | Not applicable | No public exploit | Heap-based buffer overflow in Windows Microsoft DirectMusic allows an authorized attacker to execute code locally. |
| CVE-2026-95888 | High | 2026-11-10 | Not applicable | No public exploit | Heap-based buffer overflow in Windows Graphics Kernel allows an authorized attacker to elevate privileges locally. |
| CVE-2026-95881 | High | 2026-11-10 | Not applicable | No public exploit | Heap-based buffer overflow in Windows Push Notifications allows an authorized attacker to elevate privileges locally. |
| CVE-2026-95877 | High | 2026-11-10 | Not applicable | No public exploit | Heap-based buffer overflow in Windows Biometric Service allows an authorized attacker to elevate privileges locally. |
| CVE-2026-95874 | High | 2026-11-10 | Not applicable | No public exploit | Heap-based buffer overflow in Xbox allows an authorized attacker to elevate privileges locally. |
| CVE-2026-95872 | High | 2026-11-10 | Not applicable | No public exploit | Heap-based buffer overflow in Windows USB Driver allows an authorized attacker to elevate privileges locally. |
| CVE-2026-95871 | High | 2026-11-10 | Not applicable | No public exploit | Heap-based buffer overflow in Windows Broadcast DVR User Service allows an authorized attacker to elevate privileges locally. |
| CVE-2026-94529 | High | 2026-11-10 | Not applicable | No public exploit | Heap-based buffer overflow in Windows Broadcast DVR User Service allows an authorized attacker to elevate privileges locally. |
| CVE-2026-94527 | High | 2026-11-10 | Not applicable | No public exploit | Heap-based buffer overflow in Windows GDI allows an authorized attacker to elevate privileges locally. |
| CVE-2026-94515 | High | 2026-11-10 | Not applicable | No public exploit | Heap-based buffer overflow in Windows Advanced Rasterization Platform allows an authorized attacker to elevate privileges locally. |
| CVE-2026-94513 | High | 2026-11-10 | Not applicable | No public exploit | Heap-based buffer overflow in SQL Server allows an authorized attacker to elevate privileges over a network. |
| CVE-2026-94511 | High | 2026-11-10 | Not applicable | No public exploit | Heap-based buffer overflow in SQL Server allows an authorized attacker to execute code over a network. |
| CVE-2026-94507 | High | 2026-11-10 | Not applicable | No public exploit | Heap-based buffer overflow in Windows DirectX allows an authorized attacker to elevate privileges locally. |
| CVE-2026-91760 | High | 2026-11-10 | Not applicable | No public exploit | Heap-based Buffer Overflow Vulnerability in Hitachi Dynamic Link Manager for Linux. This issue affects Hitachi Dynamic Link Manager for Linux: from 7.5.0-00 before 9.0.5-00. |
| CVE-2026-88241 | High | 2026-11-10 | Not applicable | No public exploit | Heap-based buffer overflow in Windows Sensor Data Service allows an authorized attacker to elevate privileges locally. |
| CVE-2026-88240 | High | 2026-11-10 | Not applicable | No public exploit | Heap-based buffer overflow in Windows DHCP Client allows an authorized attacker to elevate privileges over an adjacent network. |
| CVE-2026-88239 | High | 2026-11-10 | Not applicable | No public exploit | Heap-based buffer overflow in Windows Biometric Service allows an authorized attacker to elevate privileges locally. |
| CVE-2026-88238 | High | 2026-11-10 | Not applicable | No public exploit | Heap-based buffer overflow in Windows Camera Frame Server Monitor allows an authorized attacker to elevate privileges locally. |
| CVE-2026-88230 | High | 2026-11-10 | Not applicable | No public exploit | Heap-based buffer overflow in Windows LUAFV allows an authorized attacker to elevate privileges locally. |
| CVE-2026-88229 | High | 2026-11-10 | Not applicable | No public exploit | Heap-based buffer overflow in Windows Media Player allows an unauthorized attacker to execute code over a network. |
| CVE-2026-88228 | High | 2026-11-10 | Not applicable | No public exploit | Heap-based buffer overflow in Windows Local Security Authority Subsystem Service (LSASS) allows an authorized attacker to elevate privileges locally. |
| CVE-2026-88227 | High | 2026-11-10 | Not applicable | No public exploit | Heap-based buffer overflow in Windows Local Security Authority Subsystem Service (LSASS) allows an authorized attacker to elevate privileges locally. |
| CVE-2026-88222 | High | 2026-11-10 | Not applicable | No public exploit | Heap-based buffer overflow in Microsoft WDAC OLE DB provider for SQL allows an unauthorized attacker to execute code over a network. |
| CVE-2026-88216 | High | 2026-11-10 | Not applicable | No public exploit | Time-of-check time-of-use (toctou) race condition in Windows DHCP Server allows an authorized attacker to execute code over a network. |
| CVE-2026-88187 | High | 2026-11-10 | Not applicable | No public exploit | Heap-based buffer overflow in Windows Bluetooth A2DP driver allows an authorized attacker to elevate privileges over an adjacent network. |
| CVE-2026-88111 | High | 2026-11-10 | Not applicable | No public exploit | Heap-based buffer overflow in SQL Server allows an authorized attacker to execute code over a network. |
| CVE-2026-85942 | High | 2026-11-10 | Not applicable | No public exploit | Heap-based buffer overflow in Windows Camera Frame Server Monitor allows an authorized attacker to elevate privileges locally. |
| CVE-2026-85839 | High | 2026-11-10 | Not applicable | No public exploit | Heap-based buffer overflow in Microsoft WDAC OLE DB provider for SQL allows an unauthorized attacker to execute code over a network. |
| CVE-2026-85838 | High | 2026-11-10 | Not applicable | No public exploit | Heap-based buffer overflow in Microsoft WDAC OLE DB provider for SQL allows an unauthorized attacker to execute code over a network. |
| CVE-2026-83563 | High | 2026-11-10 | Not applicable | No public exploit | Heap-based buffer overflow in Winlogon allows an authorized attacker to elevate privileges locally. |
| CVE-2026-81384 | High | 2026-11-10 | Not applicable | No public exploit | Heap-based buffer overflow in DNS Server allows an unauthorized attacker to execute code over a network. |
| CVE-2026-67646 | High | 2026-11-10 | Not applicable | No public exploit | Heap-based buffer overflow in SQL Server allows an authorized attacker to execute code over a network. |
| CVE-2026-67637 | High | 2026-11-10 | Not applicable | No public exploit | Heap-based buffer overflow in SQL Server allows an authorized attacker to execute code over a network. |
| CVE-2026-67632 | High | 2026-11-10 | Not applicable | No public exploit | Heap-based buffer overflow in SQL Server allows an authorized attacker to execute code over a network. |
| CVE-2026-67391 | High | 2026-11-10 | Not applicable | No public exploit | Heap-based buffer overflow in SQL Server allows an authorized attacker to execute code over a network. |
| CVE-2026-67374 | High | 2026-11-10 | Not applicable | No public exploit | Heap-based buffer overflow in SQL Server allows an authorized attacker to execute code over a network. |
| CVE-2026-67372 | High | 2026-11-10 | Not applicable | No public exploit | Heap-based buffer overflow in SQL Server allows an authorized attacker to execute code over a network. |
| CVE-2026-59594 | High | 2026-11-10 | Not applicable | No public exploit | In spm_alloc of encoder, there is a possible Heap Buffer Overflow due to a heap buffer overflow. This could lead to local escalation of privilege with execution privileges needed. User interaction is for exploitation. |
| CVE-2026-59593 | High | 2026-11-10 | Not applicable | No public exploit | In tile_info of av1_decoder, there is a possible Heap Buffer Overflow due to a heap buffer overflow. This could lead to local escalation of privilege with execution privileges needed. User interaction is for exploitation. |
| CVE-2026-58787 | High | 2026-11-10 | Not applicable | No public exploit | In chppWifiRangingEventNotification of clients/wifi.c, there is a possible Heap Buffer Overflow due to a logic error in the code. This could lead to remote (proximal/adjacent) escalation of privilege with execution privileges needed. User interaction is for exploitation. |
| CVE-2026-54436 | High | 2026-11-10 | Not applicable | No public exploit | Heap-based Buffer Overflow in the io-char library's DCMD_CHR_WAITINFO devctl() handler could allow an attacker with local access to cause data tampering, arbitrary code execution, or a crash in the Character I/O device driver. |
| CVE-2026-40433 | High | 2026-11-10 | Not applicable | No public exploit | Heap-based buffer overflow for some Intel(R) PROSet Wireless Wi-Fi Software for Windows within Ring 0: Kernel may allow a denial of service. Network adversary with an unauthenticated user combined with a low complexity attack may enable denial of service. This result may potentially occur via adjacent network access when attack requirements are not present without special internal knowledge and requires no user interaction. The potential vulnerability may impact the confidentiality (none), integrity (high) and availability (high) of the vulnerable system, resulting in subsequent system confidentiality (none), integrity (high) and availability (high) impacts. |
| CVE-2026-40275 | High | 2026-11-10 | Not applicable | No public exploit | Heap-based Buffer Overflow in the DCMD_PROC_EVENT handler of the procnto could allow an attacker with local access to cause an information disclosure, data tampering or a crash of the QNX Neutrino kernel. |
| CVE-2026-126050 | High | 2026-11-10 | Not applicable | No public exploit | apitrace 2.0 through 14.0 contains a heap-based buffer overflow in SnappyFile::flushReadCache() that allows attackers to write past m_compressedCache via an oversized compressed chunk length. Attackers can supply a crafted .trace file whose 4-byte chunk length exceeds the fixed buffer size, corrupting heap memory when users dump, inspect, or replay it. |
| CVE-2026-125401 | High | 2026-11-10 | Not applicable | No public exploit | Ettercap through 0.8.4.1 contains a heap buffer overflow vulnerability in gg_get_version() in src/dissectors/ec_gg.c that writes up to 44 bytes into a 30-byte allocation. Remote attackers can send Gadu-Gadu traffic on TCP port 8074 with a crafted version field through a monitored network to corrupt heap memory in the Ettercap process, which normally runs as root. |
| CVE-2026-125393 | High | 2026-11-10 | Not applicable | No public exploit | MailEnable Enterprise Premium before 10.62 contains a heap overflow vulnerability in the IMAP X-FB-FETCH command that allows authenticated users to overflow a fixed 0x400-byte heap buffer. Attackers can supply an X-FB-USER address longer than about 1016 bytes, which is formatted without a length check, to crash the IMAP service and cause denial of service. |
| CVE-2026-125343 | High | 2026-11-10 | Not applicable | No public exploit | Buffer overflow in Compositing in Google Chrome prior to 157.0.8103.50 allowed a remote attacker who had compromised the renderer process to execute arbitrary code outside the sandbox via a crafted HTML page. (Chromium security severity: High) |
| CVE-2026-125137 | High | 2026-11-10 | Not applicable | No public exploit | Heap-based buffer overflow in Windows Graphics Kernel allows an authorized attacker to elevate privileges locally. |
| CVE-2026-125136 | High | 2026-11-10 | Not applicable | No public exploit | Heap-based buffer overflow in Windows Network Connected Devices Auto-Setup Service allows an unauthorized attacker to execute code over an adjacent network. |
| CVE-2026-124176 | High | 2026-11-10 | Not applicable | No public exploit | Heap-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code over a network. |