Search Results (4183 CVEs found)

CVE Vendors Products Updated CVSS v3.1
CVE-2026-81388 1 Microsoft 18 365, 365 Apps, Excel and 15 more 2026-09-10 7.8 High
Stack-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code locally.
CVE-2026-68878 1 Microsoft 14 Windows 10 1607, Windows 10 1809, Windows 10 21h2 and 11 more 2026-09-10 8 High
Stack-based buffer overflow in Windows Fast FAT Driver allows an authorized attacker to elevate privileges over a network.
CVE-2026-78439 1 Microsoft 4 Office, Office 365, Office Macos 2021 and 1 more 2026-09-09 8.8 High
Stack-based buffer overflow in Microsoft Graphics Component allows an unauthorized attacker to execute code over a network.
CVE-2026-69759 1 Microsoft 10 365 Apps, Microsoft 365, Office 2019 and 7 more 2026-09-09 8.8 High
Stack-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code over a network.
CVE-2026-69722 1 Microsoft 10 365 Apps, Microsoft 365, Office 2019 and 7 more 2026-09-09 8.8 High
Stack-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code over a network.
CVE-2026-69686 1 Microsoft 10 365 Apps, Microsoft 365, Office 2019 and 7 more 2026-09-09 8.8 High
Stack-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code over a network.
CVE-2026-85506 1 Freeipmi 1 Freeipmi 2026-09-09 9.8 Critical
ipmi-oem in FreeIPMI before 1.6.19 has a stack-based buffer overflow in _get_dell_system_info_idrac_info in ipmi-oem/ipmi-oem-dell.c (idrac-info subcommand to dell get-system-info).
CVE-2026-77101 3 Commvault, Linux, Microsoft 3 Commvault, Linux Kernel, Windows 2026-09-09 7.5 High
CommServe contained a stack-based buffer overflow issue affecting service availability. Software customers upgrade to resolved maintenance release. Update CommServe.
CVE-2026-81396 1 Microsoft 11 365 Apps, Excel, Excel 2016 and 8 more 2026-09-09 7.8 High
Stack-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code locally.
CVE-2026-11733 1 Netgear 22 Rax41, Rax41 Firmware, Rax41v2 and 19 more 2026-09-09 4.9 Medium
A buffer overflow vulnerability in the listed NETGEAR models allows a device administrator to temporarily interrupt the normal operation of the affected device.
CVE-2026-11734 1 Netgear 30 Mr70, Mr70 Firmware, Mr90 and 27 more 2026-09-09 2.7 Low
A buffer overflow vulnerability in the listed NETGEAR models allows an authenticated admin user to cause the affected device to become temporarily unavailable.
CVE-2026-11735 1 Netgear 40 R7000, R7000 Firmware, Rax20 and 37 more 2026-09-09 4.9 Medium
A stack-based buffer overflow vulnerability affects the listed NETGEAR models allowing an authenticated admin user to make unauthorized modification to the router's software and functionality.
CVE-2026-86140 1 Xmlsoft 1 Libxml2 2026-09-08 8 High
In libxml2 before 2.15.4, xmlSnprintfElements in valid.c has a strcat stack-based buffer overflow.
CVE-2026-71407 1 Fortinet 3 Fortios, Fortipam, Fortiproxy 2026-09-08 5.1 Medium
A Stack-based Buffer Overflow vulnerability [CWE-121] vulnerability in Fortinet FortiOS 7.6.1 through 7.6.6 may allow an unauthenticated attacker who can bypass stack protection and ASLR to execute arbitrary code or commands in the context of the WAD daemon via crafted sockets, only if the explicit proxy is configured with Kerberos authentication and SOCKS enabled.
CVE-2026-67379 1 Microsoft 3 Sql Server 2019, Sql Server 2022, Sql Server 2025 2026-09-08 8.5 High
Stack-based buffer overflow in SQL Server allows an authorized attacker to execute code over a network.
CVE-2026-86296 1 D-link 1 Dir-822a 2026-09-08 10 Critical
A vulnerability was determined in D-Link DIR-822A A_101. This vulnerability affects the function strcpy of the file udhcpcd/serverpacket.c of the component udhcpcd. This manipulation causes stack-based buffer overflow. The attack is possible to be carried out remotely. The exploit has been publicly disclosed and may be utilized.
CVE-2026-17259 1 Ibm 1 I 2026-09-08 4.3 Medium
IBM i 7.6, 7.5, 7.4, and 7.3 could allow a remote authenticated attacker to cause a denial of service due to a stack-based buffer overflow.
CVE-2026-17270 1 Ibm 1 I 2026-09-08 4.3 Medium
IBM i 7.6, 7.5, 7.4, and 7.3 could allow a local attacker to cause a denial of service due to a stack-based buffer overflow.
CVE-2026-81738 1 Openvpn 1 Openvpn 2026-09-08 4.2 Medium
OpenVPN 2.5.0 through 2.7.6 on Windows using the tap-windows6 driver allows attackers to trigger an out-of-bounds write via crafted DOMAIN-SEARCH entries
CVE-2026-86318 1 Java-json-tools 1 Json-patch 2026-09-08 5.3 Medium
A flaw has been found in java-json-tools json-patch up to 1.13. Affected is the function JsonMergePatch.fromJson of the file JsonMergePatchDeserializer.java. Executing a manipulation can lead to stack-based buffer overflow. The attack may be performed from remote. The exploit has been published and may be used. The project was informed of the problem early through an issue report but has not responded yet.