358 CVEs — updated 2026-11-03 · vulnfeed
| CVE / ID | Title | Severity | CVSS | EPSS | Source | Date |
|---|---|---|---|---|---|---|
| CVE-2026-115384 | Wasmtime 39.0.0 before 48.0.4 and 49.0.0 before 49.0.2 Stack Buffer Overflow | CRITICAL | 9.9 | 24%ile | Microsoft | 2026-10-13 |
| CVE-2026-103780 | Dell PowerProtect Data Domain, Feature Release versions 7.7.1.0 through 8.8, LTS2024 release versions 7.13.1.0 through 7 | CRITICAL | 9.8 | 58%ile | NVD | 2026-10-28 |
| CVE-2024-12084 | Rsync: heap buffer overflow in rsync due to improper checksum length handling | CRITICAL | 9.8 | 99%ile | Microsoft | 2025-01-14 |
| CVE-2026-98272 | net: mvpp2: prevent buffer overflow in page_pool allocation | CRITICAL | 9.8 | 9%ile | Microsoft | 2026-10-13 |
| CVE-2026-85504 | FreeIPMI before 1.6.19 has a stack-based buffer overflow in _ipmi_sel_oem_fujitsu_get_sel_entry_long_text in libfreeipmi | CRITICAL | 9.8 | 35%ile | Microsoft | 2026-09-08 |
| CVE-2026-85506 | ipmi-oem in FreeIPMI before 1.6.19 has a stack-based buffer overflow in _get_dell_system_info_idrac_info in ipmi-oem/ipm | CRITICAL | 9.8 | 42%ile | Microsoft | 2026-09-08 |
| CVE-2026-85507 | ipmi-oem in FreeIPMI before 1.6.19 has a stack-based buffer overflow in _output_dell_system_info_cmc_info in ipmi-oem/ip | CRITICAL | 9.8 | 35%ile | Microsoft | 2026-09-08 |
| CVE-2026-85508 | ipmi-oem in FreeIPMI before 1.6.19 has a stack-based buffer overflow in _output_dell_system_info_cmc_ipv6_info in ipmi-o | CRITICAL | 9.8 | 35%ile | Microsoft | 2026-09-08 |
| CVE-2026-85509 | FreeIPMI before 1.6.19 has a stack-based buffer overflow in _read_fru_data in libfreeipmi/fru/ipmi-fru.c when a BMC retu | CRITICAL | 9.8 | 42%ile | Microsoft | 2026-09-08 |
| CVE-2025-34468 | libcoap Stack-Based Buffer Overflow in Address Resolution DoS or Potential RCE | CRITICAL | 9.8 | 55%ile | Microsoft | 2025-12-09 |
| CVE-2026-68349 | wifi: carl9170: fix buffer overflow in rx_stream failover path | CRITICAL | 9.8 | 10%ile | Microsoft | 2026-08-11 |
| CVE-2026-55971 | Apache Thrift: C++ ZLIB heap buffer overflow (write) in THeaderTransport::untransform() | CRITICAL | 9.8 | 62%ile | Microsoft | 2026-07-14 |
| CVE-2026-118305 | Memory corruption in Turbolev in Google Chrome prior to 156.0.8078.73 allowed a remote attacker to potentially execute a | CRITICAL | 9.6 | 31%ile | NVD | 2026-10-27 |
| CVE-2026-118306 | Memory corruption in FileSystem in Google Chrome prior to 156.0.8078.73 allowed a remote attacker to potentially execute | CRITICAL | 9.6 | 31%ile | NVD | 2026-10-27 |
| CVE-2026-118312 | Memory corruption in Paint in Google Chrome prior to 156.0.8078.73 allowed a remote attacker to potentially execute arbi | CRITICAL | 9.6 | 24%ile | NVD | 2026-10-27 |
| CVE-2026-118340 | Memory corruption in Skia in Google Chrome prior to 156.0.8078.73 allowed a remote attacker to potentially execute arbit | CRITICAL | 9.6 | 29%ile | NVD | 2026-10-27 |
| CVE-2026-119263 | Memory corruption in GarbageCollection in Google Chrome prior to 156.0.8078.79 allowed a remote attacker to potentially | CRITICAL | 9.6 | 19%ile | NVD | 2026-10-30 |
| CVE-2026-102331 | Chromium CVE-2026-102331: Buffer overflow | CRITICAL | 9.6 | 39%ile | Microsoft | 2026-10-13 |
| CVE-2026-110152 | Chromium CVE-2026-110152: Buffer overflow | CRITICAL | 9.6 | 44%ile | Microsoft | 2026-10-13 |
| CVE-2026-95281 | Chromium CVE-2026-95281: Buffer overflow in ANGLE | CRITICAL | 9.6 | 46%ile | Microsoft | 2026-09-08 |
| CVE-2026-95283 | Chromium CVE-2026-95283: Buffer overflow in Tint | CRITICAL | 9.6 | 33%ile | Microsoft | 2026-09-08 |
| CVE-2026-95284 | Chromium CVE-2026-95284: Buffer overflow in ANGLE | CRITICAL | 9.6 | 40%ile | Microsoft | 2026-09-08 |
| CVE-2026-95318 | Chromium CVE-2026-95318: Buffer overflow in Video | CRITICAL | 9.6 | 33%ile | Microsoft | 2026-09-08 |
| CVE-2026-95349 | Chromium CVE-2026-95349: Buffer overflow in WebGL | CRITICAL | 9.6 | 40%ile | Microsoft | 2026-09-08 |
| CVE-2026-95350 | Chromium CVE-2026-95350: Buffer overflow in ANGLE | CRITICAL | 9.6 | 44%ile | Microsoft | 2026-09-08 |
| CVE-2026-103594 | A stack-based buffer overflow vulnerability in Fireware OS's WireGuard configuration processing allows a remote attacker | CRITICAL | 9.5 | 38%ile | NVD | 2026-10-27 |
| CVE-2026-78403 | Stack-based buffer overflow and missing authorization vulnerability in Thales Sentinel Keys Server on Windows allows Ove | CRITICAL | 9.3 | 48%ile | NVD | 2026-10-30 |
| CVE-2026-120189 | A vulnerability was identified in D-Link DIR-505 1.10B02. Affected is the function save_upload_file/mp_upload_file of th | CRITICAL | 9.3 | 71%ile | NVD | 2026-11-01 |
| CVE-2026-120281 | A vulnerability was found in WAVLINK WN536AX6-A V260507. This affects the function strcpy of the file /protocol.csp of t | CRITICAL | 9.3 | — | NVD | 2026-11-02 |
| CVE-2026-120283 | A vulnerability was identified in Linksys E8450 1.2.00.360516. Affected is the function strcpy of the file /www/cgi-bin/ | CRITICAL | 9.3 | — | NVD | 2026-11-02 |
| CVE-2025-23016 | FastCGI fcgi2 (aka fcgi) 2.x through 2.4.4 has an integer overflow (and resultant heap-based buffer overflow) via crafte | CRITICAL | 9.3 | 49%ile | Microsoft | 2025-01-14 |
| CVE-2026-112709 | A heap-based buffer overflow vulnerability in the Fireware OS authentication service allows an attacker who controls or | CRITICAL | 9.2 | 36%ile | NVD | 2026-10-27 |
| CVE-2026-112710 | A heap-based buffer overflow vulnerability exists in the Fireware OS authentication service allows an attacker who contr | CRITICAL | 9.2 | 36%ile | NVD | 2026-10-27 |
| CVE-2026-93857 | A stack-based buffer overflow vulnerability in Fireware OS's SIP proxy allows a remote, unauthenticated attacker to exec | CRITICAL | 9.2 | 46%ile | NVD | 2026-10-27 |
| CVE-2026-44950 | fs_read_glyphs() heap buffer overflow via cumulative glyph data overflow in libXfont2 | CRITICAL | 9.0 | 18%ile | Microsoft | 2026-09-08 |
| CVE-2025-54351 | In iperf before 3.19.1, net.c has a buffer overflow when --skip-rx-copy is used (for MSG_TRUNC in recv). | HIGH | 8.9 | 38%ile | Microsoft | 2025-08-12 |
| CVE-2026-118311 | Memory corruption in Media in Google Chrome prior to 156.0.8078.73 allowed a remote attacker to potentially execute arbi | HIGH | 8.8 | 20%ile | NVD | 2026-10-27 |
| CVE-2026-118317 | Memory corruption in HTML in Google Chrome prior to 156.0.8078.73 allowed a remote attacker to potentially execute arbit | HIGH | 8.8 | 25%ile | NVD | 2026-10-27 |
| CVE-2026-118320 | Memory corruption in V8 in Google Chrome prior to 156.0.8078.73 allowed a remote attacker to potentially execute arbitra | HIGH | 8.8 | 25%ile | NVD | 2026-10-27 |
| CVE-2026-118327 | Memory corruption in Media in Google Chrome prior to 156.0.8078.73 allowed a remote attacker to potentially execute arbi | HIGH | 8.8 | 20%ile | NVD | 2026-10-27 |
| CVE-2026-118349 | Memory corruption in Payments in Google Chrome prior to 156.0.8078.73 allowed a remote attacker to execute arbitrary cod | HIGH | 8.8 | 18%ile | NVD | 2026-10-27 |
| CVE-2026-118351 | Memory corruption in Skia in Google Chrome prior to 156.0.8078.73 allowed a remote attacker to execute arbitrary code in | HIGH | 8.8 | 18%ile | NVD | 2026-10-27 |
| CVE-2026-118352 | Memory corruption in Cache in Google Chrome prior to 156.0.8078.73 allowed a remote attacker to potentially execute arbi | HIGH | 8.8 | 18%ile | NVD | 2026-10-27 |
| CVE-2026-118358 | Memory corruption in WebAudio in Google Chrome prior to 156.0.8078.73 allowed a remote attacker to potentially execute a | HIGH | 8.8 | 30%ile | NVD | 2026-10-27 |
| CVE-2026-118359 | Memory corruption in V8 in Google Chrome prior to 156.0.8078.73 allowed a remote attacker to potentially execute arbitra | HIGH | 8.8 | 21%ile | NVD | 2026-10-27 |
| CVE-2026-86378 | Dell PowerProtect Data Domain, Feature Release versions 7.7.1.0 through 8.8, LTS2024 release versions 7.13.1.0 through 7 | HIGH | 8.8 | 31%ile | NVD | 2026-10-28 |
| CVE-2026-103408 | A Stack Buffer Overflow vulnerability in the DHCP client in Juniper Networks Session Smart Router allows an unauthentica | HIGH | 8.8 | 24%ile | NVD | 2026-10-28 |
| CVE-2026-118610 | Alpine iLX-F511 Android Auto Service Stack-based Buffer Overflow Remote Code Execution Vulnerability. This vulnerability | HIGH | 8.8 | 27%ile | NVD | 2026-10-28 |
| CVE-2026-85897 | Heap-based buffer overflow in Microsoft Edge (Chromium-based) allows an unauthorized attacker to execute code over a net | HIGH | 8.8 | 48%ile | NVD | 2026-10-29 |
| CVE-2026-96198 | Heap-based buffer overflow in Microsoft Edge (Chromium-based) allows an unauthorized attacker to execute code over a net | HIGH | 8.8 | 48%ile | NVD | 2026-10-29 |
| CVE-2026-96199 | Heap-based buffer overflow in Microsoft Edge (Chromium-based) allows an unauthorized attacker to execute code over a net | HIGH | 8.8 | 48%ile | NVD | 2026-10-29 |
| CVE-2026-119264 | Memory corruption in Dawn in Google Chrome prior to 156.0.8078.79 allowed a remote attacker to potentially execute arbit | HIGH | 8.8 | 15%ile | NVD | 2026-10-30 |
| CVE-2026-119265 | Memory corruption in Quota in Google Chrome prior to 156.0.8078.79 allowed a remote attacker to potentially execute arbi | HIGH | 8.8 | 15%ile | NVD | 2026-10-30 |
| CVE-2026-119267 | Memory corruption in DOM in Google Chrome prior to 156.0.8078.79 allowed a remote attacker to potentially execute arbitr | HIGH | 8.8 | 15%ile | NVD | 2026-10-30 |
| CVE-2026-76026 | Memory corruption in Autofill in Google Chrome prior to 156.0.8078.79 allowed a remote attacker to execute arbitrary cod | HIGH | 8.8 | 15%ile | NVD | 2026-10-30 |
| CVE-2026-76029 | Memory corruption in Network in Google Chrome prior to 156.0.8078.79 allowed a remote attacker to potentially execute ar | HIGH | 8.8 | 15%ile | NVD | 2026-10-30 |
| CVE-2026-76030 | Memory corruption in FileSystem in Google Chrome prior to 156.0.8078.79 allowed a remote attacker to potentially execute | HIGH | 8.8 | 15%ile | NVD | 2026-10-30 |
| CVE-2026-76955 | A buffer overflow vulnerability in the zdp_wtp binary in Zyxel NWA110AX firmware versions through 7.12(ABTG.0)C0 could a | HIGH | 8.8 | — | NVD | 2026-11-03 |
| CVE-2026-102302 | Chromium CVE-2026-102302: Buffer overflow | HIGH | 8.8 | 29%ile | Microsoft | 2026-10-13 |
| CVE-2026-110155 | Chromium CVE-2026-110155: Buffer overflow | HIGH | 8.8 | 26%ile | Microsoft | 2026-10-13 |
| CVE-2026-110166 | Chromium CVE-2026-110166: Buffer overflow | HIGH | 8.8 | 22%ile | Microsoft | 2026-10-13 |
| CVE-2026-48715 | radvdump's Route Information Option Parser has a Stack Buffer Overflow | HIGH | 8.8 | 27%ile | Microsoft | 2026-06-09 |
| CVE-2026-97957 | net: hinic: fix mailbox segment buffer overflow | HIGH | 8.8 | 4%ile | Microsoft | 2026-09-08 |
| CVE-2026-14664 | PostgreSQL regexp heap buffer overflow executes arbitrary code | HIGH | 8.8 | 38%ile | Microsoft | 2026-08-11 |
| CVE-2026-14670 | PostgreSQL plperl tied object heap buffer overflow executes arbitrary code | HIGH | 8.8 | 38%ile | Microsoft | 2026-08-11 |
| CVE-2026-19385 | PostgreSQL pg_dump heap buffer overflow executes arbitrary code | HIGH | 8.8 | 37%ile | Microsoft | 2026-08-11 |
| CVE-2026-6637 | PostgreSQL refint allows stack buffer overflow and SQL injection | HIGH | 8.8 | 31%ile | Microsoft | 2026-05-12 |
| CVE-2025-44904 | hdf5 v1.14.6 was discovered to contain a heap buffer overflow via the H5VM_memcpyvv function. | HIGH | 8.8 | 40%ile | Microsoft | 2025-05-13 |
| CVE-2026-29508 | ReadyMedia (formerly MiniDLNA) versions 1.3.0 through 1.3.3 contain a stack-based buffer overflow vulnerability that all | HIGH | 8.7 | — | NVD | 2026-11-02 |
| CVE-2026-90442 | A stack-based buffer overflow vulnerability in the Fireware OS certd process allows an authenticated attacker with acces | HIGH | 8.6 | 16%ile | NVD | 2026-10-27 |
| CVE-2026-102556 | Libsoup: libsoup: heap buffer overflow from websocket pong signal type confusion | HIGH | 8.6 | 31%ile | Microsoft | 2026-09-08 |
| CVE-2026-102557 | Libsoup: libsoup: heap buffer overflow during websocket message reassembly | HIGH | 8.6 | 31%ile | Microsoft | 2026-09-08 |
| CVE-2026-102558 | Libsoup: libsoup: heap buffer overflow during websocket receive-buffer growth | HIGH | 8.6 | 41%ile | Microsoft | 2026-09-08 |
| CVE-2026-102559 | Libsoup: libsoup: heap buffer overflow during websocket client-frame masking | HIGH | 8.6 | 43%ile | Microsoft | 2026-09-08 |
| CVE-2026-102560 | Libsoup: libsoup: heap buffer overflow during outgoing permessage-deflate buffer growth | HIGH | 8.6 | 43%ile | Microsoft | 2026-09-08 |
| CVE-2026-93517 | A heap buffer overflow in handling GLX RenderLarge request where dataBytes exceeds cmdlen in X.org X server before 21.1. | HIGH | 8.5 | 9%ile | NVD | 2026-10-28 |
| CVE-2026-118752 | FreeImage through 3.18.0 and the danoli3 FreeImage fork before 3.19.22 contain a heap buffer overflow vulnerability in t | HIGH | 8.5 | 3%ile | NVD | 2026-10-28 |
| CVE-2026-118753 | FreeImage through 3.18.0 and the danoli3 FreeImage fork before 3.19.25 contain a heap buffer overflow vulnerability in P | HIGH | 8.5 | 3%ile | NVD | 2026-10-28 |
| CVE-2026-119373 | SQLite before 3.54.0 built with FTS5 contains a heap buffer overflow in fts5MergeRowidLists() that undersizes the output | HIGH | 8.5 | 4%ile | NVD | 2026-10-30 |
| CVE-2026-119374 | SQLite before 3.54.0 built with FTS5 contains a heap buffer overflow in fts5DoSecureDelete() that allows attackers to wr | HIGH | 8.5 | 8%ile | NVD | 2026-10-30 |
| CVE-2026-119379 | SQLite before 3.54.0 built with the session extension contains a heap buffer overflow vulnerability in sqlite3changeset_ | HIGH | 8.5 | 8%ile | NVD | 2026-10-30 |
| CVE-2026-104062 | Scribus before 1.6.7 and 1.7.x before 1.7.4 contains a heap buffer overflow vulnerability in the PICT image loader and i | HIGH | 8.5 | 12%ile | NVD | 2026-10-30 |
| CVE-2026-104066 | Scribus before 1.6.7 and 1.7.x before 1.7.4 contains a heap buffer overflow vulnerability in the Mac PICT image loader a | HIGH | 8.5 | 12%ile | NVD | 2026-10-30 |
| CVE-2026-119718 | Blender before 4.5.15 and 5.x before 5.2.3 contains a heap buffer overflow vulnerability caused by integer overflow in p | HIGH | 8.5 | 9%ile | NVD | 2026-10-30 |
| CVE-2026-119719 | Blender before 4.5.15 and 5.x before 5.2.3 contains a heap buffer overflow vulnerability in the blend file thumbnail ext | HIGH | 8.5 | 5%ile | NVD | 2026-10-30 |
| CVE-2026-120232 | A vulnerability was identified in Horizon DataSys Reboot Restore Standard up to 13.2. The impacted element is the functi | HIGH | 8.5 | 14%ile | NVD | 2026-11-01 |
| CVE-2026-120431 | Netpbm before 10.86.51, 11.x before 11.02.29, and 11.03 before 11.15.07 contains a heap-based buffer overflow in sgitopn | HIGH | 8.5 | — | NVD | 2026-11-02 |
| CVE-2026-120433 | Netpbm before 10.86.51, 11.x before 11.02.30, and 11.03 before 11.15.08 contains a stack-based buffer overflow in the pi | HIGH | 8.5 | — | NVD | 2026-11-02 |
| CVE-2026-120434 | Netpbm before 10.86.51, 11.x before 11.02.30, and 11.03 before 11.15.08 contains a stack-based buffer overflow in pictto | HIGH | 8.5 | — | NVD | 2026-11-02 |
| CVE-2026-120435 | Netpbm before 10.86.51, 11.x before 11.02.30, and 11.03 before 11.15.08 contains a heap buffer overflow in xpmtoppm caus | HIGH | 8.5 | — | NVD | 2026-11-02 |
| CVE-2026-120436 | Netpbm before 10.86.51, 11.x before 11.02.30, and 11.03 before 11.15.08 contains an integer overflow in jbigtopnm that c | HIGH | 8.5 | — | NVD | 2026-11-02 |
| CVE-2026-120438 | QuickJS-NG before 0.16.0 contains an integer overflow in js_proxy_get_own_property_names() in quickjs.c that causes a he | HIGH | 8.5 | — | NVD | 2026-11-02 |
| CVE-2026-56001 | libXfont2 BitmapScaleBitmaps Integer Overflow Heap Buffer Overflow | HIGH | 8.5 | 33%ile | Microsoft | 2026-07-14 |
| CVE-2026-56002 | libXfont2 PCF Font Parsing Heap Buffer Overflow | HIGH | 8.5 | 37%ile | Microsoft | 2026-07-14 |
| CVE-2026-56003 | libXfont2 computeProps Property Buffer Heap Buffer Overflow | HIGH | 8.5 | 34%ile | Microsoft | 2026-07-14 |
| CVE-2026-102212 | Heap-based buffer overflow in Opengear IM72XX, CM71XX, and ACM70XX firmware versions 4.8.0 through 5.5.2 on console serv | HIGH | 8.4 | 25%ile | NVD | 2026-10-31 |
| CVE-2026-120439 | QuickJS-NG before 0.16.0 contains an integer overflow in js_typed_array_sort() in quickjs.c that allows attackers to cau | HIGH | 8.3 | — | NVD | 2026-11-02 |
| CVE-2026-106247 | Chromium CVE-2026-106247: Buffer overflow | HIGH | 8.3 | 27%ile | Microsoft | 2026-10-13 |
| CVE-2026-106292 | Chromium CVE-2026-106292: Buffer overflow | HIGH | 8.3 | 26%ile | Microsoft | 2026-10-13 |
| CVE-2026-57191 | Asterisk is an open source private branch exchange and telephony toolkit. Prior to Asterisk 20.20.1, 21.12.3, 22.10.1, 2 | HIGH | 8.2 | 48%ile | NVD | 2026-10-27 |
| CVE-2026-49759 | Stack buffer overflow in SCTP error cause parsing in inet_drv allows remote VM crash | HIGH | 8.2 | 43%ile | Microsoft | 2026-06-09 |
| CVE-2026-102555 | Libsoup: libsoup: heap buffer overflow via uninitialized length in data-uri base64 decoding | HIGH | 8.2 | 39%ile | Microsoft | 2026-09-08 |
| CVE-2026-74220 | U-Boot before 2026.10-rc5 Buffer Overflow via NFS READ Reply | HIGH | 8.2 | 27%ile | Microsoft | 2026-09-08 |
| CVE-2026-74221 | U-Boot before 2026.10-rc5 Buffer Overflow via NFS READLINK | HIGH | 8.2 | 27%ile | Microsoft | 2026-09-08 |
| CVE-2026-111497 | Google: CVE-2026-111497 Buffer overflow vulnerability in the Brotli decoder | HIGH | 8.1 | 100%ile | Microsoft | 2026-10-13 |
| CVE-2026-46570 | In NTFS-3G before 2026.7.7, a heap buffer overflow exists in ntfs_index_walk_down() in libntfs-3g/index.c that allows an | HIGH | 8.1 | 4%ile | Microsoft | 2026-10-13 |
| CVE-2026-7383 | Possible Heap Buffer Overflow in ASN.1 Multibyte String Conversion | HIGH | 8.1 | 57%ile | Microsoft | 2026-06-09 |
| CVE-2026-56123 | socat 1.8.0.0 - 1.8.1.1 Heap Buffer Overflow via SOCKS5 Reply Parser | HIGH | 8.1 | 24%ile | Microsoft | 2026-06-09 |
| CVE-2026-61548 | Rsyslog: mmpstrucdata stack buffer overflow with oversized RFC5424 structured data | HIGH | 8.1 | 48%ile | Microsoft | 2026-09-08 |
| CVE-2026-6665 | PgBouncer buffer overflow in SCRAM | HIGH | 8.1 | 31%ile | Microsoft | 2026-05-12 |
| CVE-2026-118603 | Alpine iLX-F511 vCard Parsing Stack-based Buffer Overflow Remote Code Execution Vulnerability. This vulnerability allows | HIGH | 8.0 | 15%ile | NVD | 2026-10-28 |
| CVE-2026-118605 | Alpine iLX-F511 prh_sdp_service_search_decode Stack-based Buffer Overflow Remote Code Execution Vulnerability. This vuln | HIGH | 8.0 | 15%ile | NVD | 2026-10-28 |
| CVE-2026-86140 | In libxml2 before 2.15.4, xmlSnprintfElements in valid.c has a strcat stack-based buffer overflow. | HIGH | 8.0 | 5%ile | Microsoft | 2026-09-08 |
| CVE-2026-48379 | Substance3D - Painter is affected by a Stack-based Buffer Overflow vulnerability that could result in arbitrary code exe | HIGH | 7.8 | 8%ile | NVD | 2026-10-27 |
| CVE-2026-108307 | Tanium addressed a heap-based buffer overflow vulnerability in Index. | HIGH | 7.8 | 2%ile | NVD | 2026-10-27 |
| CVE-2026-93518 | An integer truncation issue in XkbResizeKeyType() that could lead to a heap buffer overflow by authenticated X clients i | HIGH | 7.8 | 10%ile | NVD | 2026-10-28 |
| CVE-2026-93519 | A buffer overflow when handling pointer barriers in the XFIXES extension in X.Org X server before 21.1.25 and XWayland b | HIGH | 7.8 | 10%ile | NVD | 2026-10-28 |
| CVE-2026-93520 | A heap buffer overflow caused by mismatching size calculations between XkbAllocNames and ChangeKeycodeRange in X.org X | HIGH | 7.8 | 10%ile | NVD | 2026-10-28 |
| CVE-2026-93521 | A buffer overflow in RandR ChangeProviderProperty requests in X.Org X Server before 2.1.25 and XWayland before 24.4.14 c | HIGH | 7.8 | 10%ile | NVD | 2026-10-28 |
| CVE-2026-93522 | A heap buffer overflow caused by mismatched size usage in CopyArea CPU-to-FBO path in X.Org X Server before 21.1.15 and | HIGH | 7.8 | 10%ile | NVD | 2026-10-28 |
| CVE-2026-93523 | A heap buffer overflow caused by a XIPassiveUngrabDevice request with an out-of-range modifier value in X.Org X Server b | HIGH | 7.8 | 10%ile | NVD | 2026-10-28 |
| CVE-2026-119528 | A flaw was found in GIMP. The PSD plug-in’s image resource header loader uses an incorrect destination size when copying | HIGH | 7.8 | 8%ile | NVD | 2026-10-30 |
| CVE-2026-119777 | A flaw was found in GStreamer's gst-plugins-bad H.266/VVC parser. When processing a malformed H.266 media file or stream | HIGH | 7.8 | 8%ile | NVD | 2026-10-30 |
| CVE-2024-49996 | cifs: Fix buffer overflow when parsing NFS reparse points | HIGH | 7.8 | 56%ile | Microsoft | 2024-10-08 |
| CVE-2024-9632 | Xorg-x11-server: tigervnc: heap-based buffer overflow privilege escalation vulnerability | HIGH | 7.8 | 60%ile | Microsoft | 2024-10-08 |
| CVE-2026-42616 | In NTFS-3G before 2026.7.7, a heap buffer overflow exists in cat() in ntfscat.c that allows an attacker to corrupt heap | HIGH | 7.8 | 6%ile | Microsoft | 2026-10-13 |
| CVE-2026-98808 | net: systemport: Fix buffer overflow in bcm_sysport_get_stats() | HIGH | 7.8 | 9%ile | Microsoft | 2026-10-13 |
| CVE-2026-11824 | SQLite before 3.53.2 Heap Buffer Overflow via FTS5 fts5ChunkIterate | HIGH | 7.8 | 8%ile | Microsoft | 2026-06-09 |
| CVE-2026-43958 | Rrdtool: rrdtool: stack buffer overflow allows local code execution or denial of service | HIGH | 7.8 | 7%ile | Microsoft | 2026-06-09 |
| CVE-2026-50256 | Xorg-x11-server: xorg-x11-server-xwayland: xorg-x11-server: stack buffer overflow in font alias resolution due to libxfo | HIGH | 7.8 | 5%ile | Microsoft | 2026-06-09 |
| CVE-2026-50258 | Xorg-x11-server: xorg-x11-server-xwayland: xorg-x11-server: stack buffer overflow in xkb key types due to unchecked shif | HIGH | 7.8 | 5%ile | Microsoft | 2026-06-09 |
| CVE-2026-50259 | Xorg-x11-server: xorg-x11-server-xwayland: xorg-x11-server: stack buffer overflow in xkb setmap request via mapwidths in | HIGH | 7.8 | 6%ile | Microsoft | 2026-06-09 |
| CVE-2026-53143 | drm/amdkfd: Fix buffer overflow in SDMA queue checkpoint/restore on GFX11 | HIGH | 7.8 | 4%ile | Microsoft | 2026-06-09 |
| CVE-2026-53194 | USB: serial: kl5kusb105: fix bulk-out buffer overflow | HIGH | 7.8 | 4%ile | Microsoft | 2026-06-09 |
| CVE-2025-68346 | ALSA: dice: fix buffer overflow in detect_stream_formats() | HIGH | 7.8 | 14%ile | Microsoft | 2025-12-09 |
| CVE-2025-38585 | staging: media: atomisp: Fix stack buffer overflow in gmin_get_var_int() | HIGH | 7.8 | 12%ile | Microsoft | 2025-08-12 |
| CVE-2025-38676 | iommu/amd: Avoid stack buffer overflow from kernel cmdline | HIGH | 7.8 | 36%ile | Microsoft | 2025-08-12 |
| CVE-2026-19582 | Binutils: stack buffer overflow in gnu binutils in rsrc_print_name from an untrusted pe file | HIGH | 7.8 | — | Microsoft | 2026-08-11 |
| CVE-2026-48864 | Libsolv: heap buffer overflow in libsolv repopagestore via unchecked decompression of malicious .solv page data | HIGH | 7.8 | 13%ile | Microsoft | 2026-05-12 |
| CVE-2026-57197 | Asterisk is an open source private branch exchange and telephony toolkit. Prior to Asterisk 20.20.1, 21.12.3, 22.10.1, 2 | HIGH | 7.7 | 45%ile | NVD | 2026-10-27 |
| CVE-2026-120208 | libheif 1.18.0 before 1.23.3 contains a heap-based buffer overflow vulnerability in unc_decoder_mixed_interleave::proces | HIGH | 7.7 | 30%ile | NVD | 2026-10-31 |
| CVE-2026-120241 | A vulnerability was identified in Ruijie RG-ES205GC, RG-ES206GC-P, RG-ES208GC, RG-ES210GC-LP and RG-ES210GS-P ESW_1.0(1) | HIGH | 7.7 | 50%ile | NVD | 2026-11-01 |
| CVE-2026-120752 | PyMuPDF 1.25.3 before 2.0 contains a stack-based buffer overflow vulnerability in JM_set_annot_callout_line() that copie | HIGH | 7.7 | — | NVD | 2026-11-02 |
| CVE-2026-46569 | In NTFS-3G before 2026.7.7, a heap buffer overflow exists in ntfs_ib_copy_tail(), in libntfs-3g/index.c, that allows an | HIGH | 7.7 | 5%ile | Microsoft | 2026-10-13 |
| CVE-2026-19499 | Buffer overflow in strfmon and strfmon_l right-justification padding | HIGH | 7.7 | 22%ile | Microsoft | 2026-09-08 |
| CVE-2026-68124 | mctp: serial: handle zero-length frames to prevent rx buffer overflow | HIGH | 7.7 | 28%ile | Microsoft | 2026-08-11 |
| CVE-2026-109089 | A buffer overflow when handling DEVICE_RESOLUTION in libXi before 1.8.4 could overflow a heap, triggered by a malicious | HIGH | 7.5 | 18%ile | NVD | 2026-10-27 |
| CVE-2026-57201 | Asterisk is an open source private branch exchange and telephony toolkit. Prior to Asterisk 20.20.1, 21.12.3, 22.10.1, 2 | HIGH | 7.5 | 53%ile | NVD | 2026-10-27 |
| CVE-2026-8822 | A memory corruption vulnerability exists in the vtkDEMReader ReadProfiles functionality of vtk (version(s): 9.6.1). A sp | HIGH | 7.5 | 24%ile | NVD | 2026-10-29 |
| CVE-2026-8824 | A memory corruption vulnerability exists in the vtkBMPReader ExecuteDataWithInformation functionality of vtk (version(s) | HIGH | 7.5 | 24%ile | NVD | 2026-10-29 |
| CVE-2026-9536 | A heap-based buffer overflow vulnerability exists in the vtkWindBladeReader FindVariableOffsets functionality of vtk (ve | HIGH | 7.5 | 24%ile | NVD | 2026-10-29 |
| CVE-2026-106804 | A stack-based buffer overflow exists in Kamailio v6.1.3 and v6.1.4 in the ims_qos_npn module. The w_rx_aar_register() fu | HIGH | 7.5 | — | NVD | 2026-11-02 |
| CVE-2026-106808 | OpenAirInterface Core Network v2.2.1 has a stack-based buffer overflow vulnerability in the OAI CN5G UDM Nudm_UEAU Gener | HIGH | 7.5 | — | NVD | 2026-11-02 |
| CVE-2026-58853 | In multiple functions of ipphelper.c, there is a possible stack bugger overflow due to a missing bounds check. This coul | HIGH | 7.5 | — | NVD | 2026-11-02 |
| CVE-2026-93451 | snappy-java: Heap buffer overflow in Snappy.uncompress*Array typed-array methods | HIGH | 7.5 | 22%ile | GitHub | 2026-10-27 |
| CVE-2026-107161 | Cyrus-sasl: heap buffer overflow in cyrus-sasl add_to_challenge() allows malicious server to crash or compromise digest- | HIGH | 7.5 | 32%ile | Microsoft | 2026-10-13 |
| CVE-2026-95124 | Buffer Overflow vulnerability in madmurphy libconfini v.1.16.4 allows a remote attacker to cause a denial of service via | HIGH | 7.5 | 46%ile | Microsoft | 2026-10-13 |
| CVE-2026-34355 | Apache HTTP Server: mod_proxy_html buffer overflow | HIGH | 7.5 | 67%ile | Microsoft | 2026-06-09 |
| CVE-2026-34356 | Apache HTTP Server: ProxyPassReverseCookieMap buffer overflow | HIGH | 7.5 | 54%ile | Microsoft | 2026-06-09 |
| CVE-2026-50031 | ipmi-oem in FreeIPMI before 1.6.18 has exploitable buffer overflows on response messages. The Intelligent Platform Manag | HIGH | 7.5 | 43%ile | Microsoft | 2026-06-09 |
| CVE-2026-81634 | Possible heap buffer overflow during DNSSEC canonicalization | HIGH | 7.5 | 41%ile | Microsoft | 2026-09-08 |
| CVE-2026-88806 | libX11 XkbGetMap Reply Heap-based Buffer Overflow | HIGH | 7.5 | 10%ile | Microsoft | 2026-09-08 |
| CVE-2025-68255 | staging: rtl8723bs: fix stack buffer overflow in OnAssocReq IE parsing | HIGH | 7.5 | 31%ile | Microsoft | 2025-12-09 |
| CVE-2025-52194 | A buffer overflow vulnerability exists in libsndfile version 1.2.2 and potentially earlier versions when processing malf | HIGH | 7.5 | 51%ile | Microsoft | 2025-08-12 |
| CVE-2026-34501 | Apache Portable Runtime Utility: Heap buffer overflow in APR redis client | HIGH | 7.5 | 43%ile | Microsoft | 2026-08-11 |
| CVE-2026-34502 | Apache Portable Runtime Utility: Heap buffer overflow in APR memcached client | HIGH | 7.5 | 43%ile | Microsoft | 2026-08-11 |
| CVE-2026-63072 | Heap Buffer Overflow in CMS Key Unwrapping | HIGH | 7.5 | 60%ile | Microsoft | 2026-08-11 |
| CVE-2026-78002 | Rsyslog: rsyslog: denial of service via heap buffer overflow in rainerscript replace() function | HIGH | 7.5 | 65%ile | Microsoft | 2026-08-11 |
| CVE-2026-33846 | Gnutls: gnutls: denial of service via heap buffer overflow in dtls handshake fragment reassembly | HIGH | 7.5 | 70%ile | Microsoft | 2026-05-12 |
| CVE-2026-44673 | libyang: lyb_read_string() integer overflow → heap buffer overflow | HIGH | 7.5 | 50%ile | Microsoft | 2026-05-12 |
| CVE-2026-48863 | Libsolv: stack-based buffer overflow in libsolv eddsa pgp signature verification allows denial of service | HIGH | 7.5 | 57%ile | Microsoft | 2026-07-14 |
| CVE-2026-55973 | 'dns-error-reporting: yes' leads to stack buffer overflow | HIGH | 7.5 | 21%ile | Microsoft | 2026-07-14 |
| CVE-2026-66035 | libssh2 Heap Buffer Overflow via ETM Cipher Negotiation | HIGH | 7.5 | 41%ile | Microsoft | 2026-07-14 |
| CVE-2026-46572 | In NTFS-3G before 2026.7.7, a heap buffer overflow exists in ntfs_ib_cut_tail() in libntfs-3g/index.c that allows an att | HIGH | 7.4 | 4%ile | Microsoft | 2026-10-13 |
| CVE-2026-3195 | Qemu-kvm: virtio-snd: heap buffer overflow in virtio_snd_pcm_in_cb (incomplete fix for cve-2024-7730) | HIGH | 7.4 | 6%ile | Microsoft | 2026-06-09 |
| CVE-2026-85091 | zlib 1.3.1.2 through 1.3.2 Heap Buffer Overflow via gz_vacate | HIGH | 7.4 | 41%ile | Microsoft | 2026-09-08 |
| CVE-2026-86098 | ntop nDPI before 6.0 Heap Buffer Overflow via ndpi_json_string_escape | HIGH | 7.4 | 48%ile | Microsoft | 2026-09-08 |
| CVE-2026-76844 | zlib 1.2.11 through 1.3.2 Heap Buffer Overflow via Stale gzwrite Pointer After Failed Write | HIGH | 7.4 | 48%ile | Microsoft | 2026-08-11 |
| CVE-2026-78402 | Stack-based buffer overflow and out-of-bounds write vulnerability in Thales Sentinel Keys Server on Windows allows Overf | HIGH | 7.3 | 4%ile | NVD | 2026-10-30 |
| CVE-2026-12912 | Libtiff: libtiff: heap-based buffer overflow via crafted pixarlog-compressed tiff image | HIGH | 7.3 | 38%ile | Microsoft | 2026-06-09 |
| CVE-2025-44905 | hdf5 v1.14.6 was discovered to contain a heap buffer overflow via the H5Z__filter_scaleoffset function. | HIGH | 7.3 | 41%ile | Microsoft | 2025-05-13 |
| CVE-2026-103593 | A stack-based buffer overflow vulnerability in the Fireware OS logging service allows a network-adjacent attacker who ca | HIGH | 7.1 | 1%ile | NVD | 2026-10-27 |
| CVE-2026-57188 | Asterisk is an open source private branch exchange and telephony toolkit. Prior to Asterisk 20.20.1, 21.12.3, 22.10.1, 2 | HIGH | 7.1 | 44%ile | NVD | 2026-10-27 |
| CVE-2026-117609 | rtl_433 through 25.12 contains a stack-based buffer overflow vulnerability in proflame2_mc() that allows nearby attacker | HIGH | 7.1 | 29%ile | NVD | 2026-10-28 |
| CVE-2026-42617 | In NTFS-3G before 2026.7.7, a heap buffer overflow exists in ntfs_ir_to_ib() in index.c that allows an attacker to corru | HIGH | 7.1 | 4%ile | Microsoft | 2026-10-13 |
| CVE-2026-42618 | In NTFS-3G before 2026.7.7, a heap buffer overflow exists in ntfs_decompress() in compress.c that allows an attacker to | HIGH | 7.1 | 4%ile | Microsoft | 2026-10-13 |
| CVE-2026-103242 | Rpm: heap-based buffer overflow write in hex2binv() via a mistyped rpmtag_filesignatures header tag | HIGH | 7.1 | 2%ile | Microsoft | 2026-09-08 |
| CVE-2026-19774 | BlueZ A2DP Stack-based Buffer Overflow Remote Code Execution Vulnerability | HIGH | 7.1 | 19%ile | Microsoft | 2026-09-08 |
| CVE-2026-95520 | Rpm: rpm: integer overflow in iterreadarchivenext() leads to heap-based buffer overflow when parsing untrusted rpm packa | HIGH | 7.1 | 2%ile | Microsoft | 2026-09-08 |
| CVE-2025-64720 | LIBPNG is vulnerable to a buffer overflow in `png_image_read_composite` via incorrect palette premultiplication | HIGH | 7.1 | 39%ile | Microsoft | 2025-11-11 |
| CVE-2025-65018 | LIBPNG is vulnerable to a heap buffer overflow in `png_combine_row` triggered via `png_image_finish_read` | HIGH | 7.1 | 20%ile | Microsoft | 2025-11-11 |
| CVE-2026-120451 | libgphoto2 through 2.5.34 contains stack-based and heap-based buffer overflow vulnerabilities in jl2005c_init() that all | HIGH | 7.0 | — | NVD | 2026-11-02 |
| CVE-2026-95508 | Libslirp: libslirp: heap buffer overflow in dhcpv6/tftp response builders on small interface mtu | HIGH | 7.0 | 47%ile | Microsoft | 2026-09-08 |
| CVE-2026-63387 | Libevent: Off-by-one stack buffer overflow in dnsname_to_labels via crafted DNS server response | HIGH | 7.0 | 36%ile | Microsoft | 2026-08-11 |
| CVE-2025-5222 | Icu: stack buffer overflow in the srbroot::addtag function | HIGH | 7.0 | 38%ile | Microsoft | 2025-05-13 |
| CVE-2026-56132 | In libexpat before 2.8.2, there is a heap-based buffer overflow in doProlog in xmlparse.c because scaffold backing array | MEDIUM | 6.9 | 3%ile | Microsoft | 2026-06-09 |
| CVE-2026-86138 | In libxml2 before 2.15.4, xmlDictAddQString in dict.c has an integer overflow and resultant heap-based buffer overflow. | MEDIUM | 6.9 | 3%ile | Microsoft | 2026-09-08 |
| CVE-2026-86142 | In libxml2 before 2.15.4, there is a heap-based buffer overflow in xmlXPtrEvalXPtrPart because of xmlXPtrEval xpointer l | MEDIUM | 6.9 | 5%ile | Microsoft | 2026-09-08 |
| CVE-2026-118604 | Alpine iLX-F511 Framework Service Stack-based Buffer Overflow Remote Code Execution Vulnerability. This vulnerability al | MEDIUM | 6.8 | 22%ile | NVD | 2026-10-28 |
| CVE-2026-118609 | Alpine iLX-F511 Android Auto Connection Handler Stack-based Buffer Overflow Remote Code Execution Vulnerability. This vu | MEDIUM | 6.8 | 22%ile | NVD | 2026-10-28 |
| CVE-2026-118611 | Alpine iLX-F511 Bluetooth OBEX Packet Handling Heap-based Buffer Overflow Remote Code Execution Vulnerability. This vuln | MEDIUM | 6.8 | 22%ile | NVD | 2026-10-28 |
| CVE-2026-120252 | imagecodecs 2023.1.23 through 2026.10.10 contains a stack-based buffer overflow vulnerability in the lossless JPEG Defin | MEDIUM | 6.8 | 3%ile | NVD | 2026-11-01 |
| CVE-2026-48914 | Qemu-kvm: heap buffer overflow in virtio-blk scsi request handling | MEDIUM | 6.7 | 5%ile | Microsoft | 2026-06-09 |
| CVE-2026-18917 | Libvirt: integer overflow in nodegetfreepages rpc handler leading to heap buffer overflow | MEDIUM | 6.6 | 8%ile | Microsoft | 2026-08-11 |
| CVE-2026-45130 | Vim: Heap Buffer Overflow in spell file loading | MEDIUM | 6.6 | 16%ile | Microsoft | 2026-05-12 |
| CVE-2025-46836 | net-tools Stack-based Buffer Overflow vulnerability | MEDIUM | 6.6 | 10%ile | Microsoft | 2025-05-13 |
| CVE-2026-76024 | Memory corruption in MediaStream in Google Chrome prior to 156.0.8078.79 allowed a remote attacker to potentially read m | MEDIUM | 6.5 | 12%ile | NVD | 2026-10-30 |
| CVE-2026-115455 | A flaw was found in GCC libstdc++. When an application extracts data into a bitset from a wide-character stream, interna | MEDIUM | 6.5 | 23%ile | NVD | 2026-10-30 |
| CVE-2025-14181 | Integer overflow to buffer overflow in soap HTTP parsing | MEDIUM | 6.5 | 24%ile | Microsoft | 2026-09-08 |
| CVE-2025-14178 | Heap buffer overflow in array_merge() | MEDIUM | 6.5 | 40%ile | Microsoft | 2025-12-09 |
| CVE-2025-14512 | Glib: integer overflow in glib gio attribute escaping causes heap buffer overflow | MEDIUM | 6.5 | 48%ile | Microsoft | 2025-12-09 |
| CVE-2025-54349 | In iperf before 3.19.1, iperf_auth.c has an off-by-one error and resultant heap-based buffer overflow. | MEDIUM | 6.5 | 38%ile | Microsoft | 2025-08-12 |
| CVE-2026-56135 | In NTFS-3G through 2026.2.25, a heap-based buffer overflow exists in the function build_inherited_id() in libntfs-3g/sec | MEDIUM | 6.5 | 4%ile | Microsoft | 2026-08-11 |
| CVE-2026-9149 | Libsolv: heap buffer overflow in libsolv repo_add_solv via negative maxsize from crafted .solv file | MEDIUM | 6.5 | 24%ile | Microsoft | 2026-05-12 |
| CVE-2026-9150 | Libsolv: stack-based buffer overflow in libsolv's debian metadata parser when handling sha384/sha512 checksums | MEDIUM | 6.5 | 35%ile | Microsoft | 2026-05-12 |
| CVE-2026-16277 | Rpcbind: rpcbind: stack buffer overflow in rpcinfo rpcbaddrlist() | MEDIUM | 6.5 | 43%ile | Microsoft | 2026-07-14 |
| CVE-2026-16461 | Rpcbind: rpcbind: stack buffer overflow in rpcinfo rpcbdump() short-mode version-list formatting | MEDIUM | 6.5 | 18%ile | Microsoft | 2026-07-14 |
| CVE-2026-119146 | ProFTPD before 1.3.9e and 1.3.10rc5 contains a buffer overflow vulnerability in the mod_rewrite int:utf8trans RewriteMap | MEDIUM | 6.3 | 40%ile | NVD | 2026-10-30 |
| CVE-2026-97425 | drm/amdgpu: fix buffer overflow during vBIOS update | MEDIUM | 6.3 | 8%ile | Microsoft | 2026-09-08 |
| CVE-2026-113881 | A stack-based buffer overflow vulnerability in Fireware OS's VPN Network Access Enforcement process allows an authentica | MEDIUM | 6.1 | 29%ile | NVD | 2026-10-27 |
| CVE-2025-64505 | LIBPNG is vulnerable to a heap buffer overflow in `png_do_quantize` via malformed palette index | MEDIUM | 6.1 | 10%ile | Microsoft | 2025-11-11 |
| CVE-2026-57192 | Asterisk is an open source private branch exchange and telephony toolkit. Prior to Asterisk 20.20.1, 21.12.3, 22.10.1, 2 | MEDIUM | 6.0 | 51%ile | NVD | 2026-10-27 |
| CVE-2026-103658 | GNU Aspell 0.60.8.2 (first vulnerable version is not known) contains a heap-based buffer overflow write (CWE-122) in its | MEDIUM | 5.9 | 12%ile | Microsoft | 2026-10-13 |
| CVE-2026-12725 | Dnsmasq: dnsmasq: heap buffer overflow in log_query() when logging unsupported ds/dnskey replies | MEDIUM | 5.9 | 45%ile | Microsoft | 2026-06-09 |
| CVE-2026-110133 | A flaw was found in Ghostscript. When processing a specially crafted TrueType font or document embedding one, an account | MEDIUM | 5.8 | 14%ile | NVD | 2026-10-30 |
| CVE-2026-72098 | dm-verity: fix buffer overflow in FEC calculation | MEDIUM | 5.7 | 54%ile | Microsoft | 2026-08-11 |
| CVE-2026-8376 | Perl versions through 5.43.10 have a heap buffer overflow when compiling regular expressions with a repeated fixed strin | MEDIUM | 5.7 | 42%ile | Microsoft | 2026-05-12 |
| CVE-2026-120336 | A vulnerability was found in VStarcam O-KAM Client 1.3.3.32. Affected by this vulnerability is the function FUN_10003EA0 | MEDIUM | 5.5 | — | NVD | 2026-11-02 |
| CVE-2026-120337 | A vulnerability was determined in VStarcam O-KAM SuperIPCam 1.3.3.32. Affected by this issue is the function FUN_005a2d4 | MEDIUM | 5.5 | — | NVD | 2026-11-02 |
| CVE-2026-49760 | Stack Buffer Overflow in ei_s_print_term at Very Large Integer | MEDIUM | 5.5 | 3%ile | Microsoft | 2026-06-09 |
| CVE-2026-93433 | Libstoragemgmt: libstoragemgmt: denial of service via stack buffer overflow in scsi vpd page parsing | MEDIUM | 5.5 | 5%ile | Microsoft | 2026-09-08 |
| CVE-2025-68347 | ALSA: firewire-motu: fix buffer overflow in hwdep read for DSP events | MEDIUM | 5.5 | 7%ile | Microsoft | 2025-12-09 |
| CVE-2025-40306 | orangefs: fix xattr related buffer overflow... | MEDIUM | 5.5 | 5%ile | Microsoft | 2025-12-09 |
| CVE-2026-44605 | Rpm: heap buffer overflow in ndb slot table parsing | MEDIUM | 5.5 | 7%ile | Microsoft | 2026-08-11 |
| CVE-2026-68293 | net/mlx5: Fix MCIA register buffer overflow on 32 dword reads | MEDIUM | 5.5 | 3%ile | Microsoft | 2026-08-11 |
| CVE-2025-37891 | ALSA: ump: Fix buffer overflow at UMP SysEx message conversion | MEDIUM | 5.5 | 16%ile | Microsoft | 2025-05-13 |
| CVE-2025-37927 | iommu/amd: Fix potential buffer overflow in parse_ivrs_acpihid | MEDIUM | 5.5 | 22%ile | Microsoft | 2025-05-13 |
| CVE-2025-37979 | ASoC: qcom: Fix sc7280 lpass potential buffer overflow | MEDIUM | 5.5 | 13%ile | Microsoft | 2025-05-13 |
| CVE-2026-95117 | Buffer Overflow vulnerability in zserge jsmn jsmn HEAD 25647e6 allows a remote attacker to cause a denial of service via | MEDIUM | 5.3 | 33%ile | Microsoft | 2026-10-13 |
| CVE-2026-90801 | GNU Binutils ld cache.c cache_bwrite buffer overflow | MEDIUM | 5.3 | 11%ile | Microsoft | 2026-09-08 |
| CVE-2025-9390 | vim xxd xxd.c main buffer overflow | MEDIUM | 5.3 | 21%ile | Microsoft | 2025-08-12 |
| CVE-2026-52492 | An integer overflow in the libtiff rgb2ycbcr utility's cvtRaster() function when computing strip buffer sizes can result | MEDIUM | 5.3 | 8%ile | Microsoft | 2026-08-11 |
| CVE-2026-10275 | OpenSC pkcs11-tool Key Generation pkcs11-tool.c test_kpgen_certwrite buffer overflow | MEDIUM | 5.0 | 22%ile | Microsoft | 2026-06-09 |
| CVE-2026-90731 | Dell PowerProtect Data Domain, Feature Release versions 7.7.1.0 through 8.7, LTS2024 release versions 7.13.1.0 through 7 | MEDIUM | 4.9 | 17%ile | NVD | 2026-10-27 |
| CVE-2026-90732 | Dell PowerProtect Data Domain, Feature Release versions 7.7.1.0 through LTS 2026, LTS2024 release versions 7.13.1.0 thro | MEDIUM | 4.9 | 17%ile | NVD | 2026-10-27 |
| CVE-2026-90725 | Dell PowerProtect Data Domain, Feature Release versions 7.7.1.0 through 8.8, LTS2024 release versions 7.13.1.0 through 7 | MEDIUM | 4.9 | 18%ile | NVD | 2026-10-27 |
| CVE-2026-86392 | Dell PowerProtect Data Domain, Feature Release versions 7.7.1.0 through 8.8, LTS2024 release versions 7.13.1.0 through 7 | MEDIUM | 4.9 | 27%ile | NVD | 2026-10-28 |
| CVE-2026-119124 | ImageMagick before 7.1.2-34 contains a heap-based buffer overflow in its -morph processing, where crafted images cause w | MEDIUM | 4.8 | 2%ile | NVD | 2026-10-29 |
| CVE-2025-67873 | Capstone doesn't check Skipdata length, leading to cs_insn.bytes heap buffer overflow | MEDIUM | 4.8 | 14%ile | Microsoft | 2025-12-09 |
| CVE-2026-56416 | Possible heap buffer overflow when validator canonicalizes RDATA that contains domain name | MEDIUM | 4.8 | 2%ile | Microsoft | 2026-07-14 |
| CVE-2026-101179 | Buffer overflow vulnerability in the file preview module. Impact: Successful exploitation of this vulnerability may affe | MEDIUM | 4.7 | — | NVD | 2026-11-02 |
| CVE-2026-68278 | drm/dp/mst: fix buffer overflows in sideband chunk accumulation | MEDIUM | 4.6 | 15%ile | Microsoft | 2026-08-11 |
| CVE-2026-90781 | alsa-lib through 1.2.16.1 Off-by-One Stack Buffer Overflow in __snd_ctl_ascii_elem_id_parse() | MEDIUM | 4.4 | 8%ile | Microsoft | 2026-09-08 |
| CVE-2026-118319 | Memory corruption in Skia in Google Chrome prior to 156.0.8078.73 allowed a remote attacker to potentially read memory i | MEDIUM | 4.3 | 7%ile | NVD | 2026-10-27 |
| CVE-2026-118322 | Memory corruption in ANGLE in Google Chrome prior to 156.0.8078.73 allowed a remote attacker to potentially read memory | MEDIUM | 4.3 | 10%ile | NVD | 2026-10-27 |
| CVE-2026-76027 | Memory corruption in CacheStorage in Google Chrome prior to 156.0.8078.79 allowed a remote attacker to read memory via a | MEDIUM | 4.3 | 12%ile | NVD | 2026-10-30 |
| CVE-2026-40510 | OpenSC < 0.27.0-rc1 Stack Buffer Overflow via piv_process_history() in card-piv.c | LOW | 3.8 | 22%ile | Microsoft | 2026-05-12 |
| CVE-2026-95818 | AT_SECURE program buffer overflow via $ORIGIN processing | LOW | 3.6 | 2%ile | Microsoft | 2026-09-08 |
| CVE-2025-0395 | When the assert() function in the GNU C Library versions 2.13 to 2.40 fails, it does not allocate enough space for the a | LOW | 2.9 | 29%ile | Microsoft | 2025-01-14 |
| CVE-2026-57198 | Asterisk is an open source private branch exchange and telephony toolkit. In affected deployments, an authenticated atta | LOW | 2.3 | 57%ile | NVD | 2026-10-27 |
| CVE-2026-120226 | A security vulnerability has been detected in Hangzhou Xiongmai Technology P2PAPI.dll 1.3.3.32 on Windows. Affected by t | LOW | 1.9 | 2%ile | NVD | 2026-11-01 |
| CVE-2026-106803 | A stack-based buffer overflow exists in Kamailio v6.1.3 and v6.1.4 in the ims_registrar_pcscf module. When processing a | UNKNOWN | — | — | NVD | 2026-11-02 |
| CVE-2026-58868 | In onOutputReceived of FrameDecoder.cpp, there is a possible out-of-bounds write due to a heap buffer overflow. This cou | UNKNOWN | — | — | NVD | 2026-11-02 |
| CVE-2026-58871 | In set_type4_frame_classifier of sta_iface.cpp, there is a possible memory safety issue due to a heap buffer overflow. T | UNKNOWN | — | — | NVD | 2026-11-02 |
| CVE-2026-58949 | In parseMetaData of StagefrightMetadataRetriever.cpp, there is a possible denial of service due to a stack buffer overfl | UNKNOWN | — | — | NVD | 2026-11-02 |
| CVE-2026-58953 | In dec_vlc_read of oapv_vlc.c, there is a possible out-of-bounds read due to a heap buffer overflow. This could lead to | UNKNOWN | — | — | NVD | 2026-11-02 |
| CVE-2026-58966 | In multiple functions of hppsfilter.c, there is a possible out-of-bounds write due to a stack buffer overflow. This coul | UNKNOWN | — | — | NVD | 2026-11-02 |
| CVE-2026-58995 | In getEntryFileName of ZipFileRO.cpp, there is a possible memory safety issue due to a heap buffer overflow. This could | UNKNOWN | — | — | NVD | 2026-11-02 |
| CVE-2025-60475 | CVE-2025-60475: GPAC/MP4Box: Global Buffer Overflow Read in gf_ac4_parser_bs on crafted AC-4 stream | UNKNOWN | — | 11%ile | OSS-Security | 2026-10-28 |
| CVE-2026-102165 | Security Advisory 0198 | UNKNOWN | — | 16%ile | Arista | 2026-10-02 |
| CVE-2026-102167 | Security Advisory 0197 | UNKNOWN | — | 14%ile | Arista | 2026-10-02 |
| CVE-2026-102162 | Security Advisory 0193 | UNKNOWN | — | 16%ile | Arista | 2026-10-02 |
| CVE-2025-0438 | Chromium: CVE-2025-0438 Stack buffer overflow in Tracing | UNKNOWN | — | 40%ile | Microsoft | 2025-01-14 |
| CVE-2024-47751 | PCI: kirin: Fix buffer overflow in kirin_pcie_parse_port() | UNKNOWN | — | 14%ile | Microsoft | 2024-10-08 |
| CVE-2026-106547 | HDF5 heap buffer overflow in H5VM_array_fill via crafted fill-value metadata | UNKNOWN | — | 5%ile | Microsoft | 2026-10-13 |
| CVE-2026-75818 | Heap Buffer Overflow in GNU Aspell's prezip utility | UNKNOWN | — | 4%ile | Microsoft | 2026-10-13 |
| CVE-2026-91135 | Apache Thrift: C++ `THeaderTransport::transform()` heap buffer overflow (write direction) | UNKNOWN | — | 27%ile | Microsoft | 2026-10-13 |
| CVE-2026-93925 | Apache Thrift: C++ `THeaderTransport::writeVarint32()` stack buffer overflow on a negative protocol id | UNKNOWN | — | 24%ile | Microsoft | 2026-10-13 |
| CVE-2026-103631 | Chromium CVE-2026-103631: Buffer overflow | UNKNOWN | — | 40%ile | Microsoft | 2026-10-13 |
| CVE-2026-41992 | Global Buffer Overflow in GNU gzip | UNKNOWN | — | 50%ile | Microsoft | 2026-06-09 |
| CVE-2026-9669 | bz2.BZ2Decompressor reuse after error can cause a stack buffer overflow | UNKNOWN | — | 37%ile | Microsoft | 2026-06-09 |
| CVE-2026-10898 | Chromium: CVE-2026-10898 Stack buffer overflow in GPU | UNKNOWN | — | 26%ile | Microsoft | 2026-06-09 |
| CVE-2026-10929 | Chromium: CVE-2026-10929 Heap buffer overflow in ANGLE | UNKNOWN | — | 24%ile | Microsoft | 2026-06-09 |
| CVE-2026-10946 | Chromium: CVE-2026-10946 Heap buffer overflow in Media | UNKNOWN | — | 31%ile | Microsoft | 2026-06-09 |
| CVE-2026-10949 | Chromium: CVE-2026-10949 Heap buffer overflow in Video | UNKNOWN | — | 24%ile | Microsoft | 2026-06-09 |
| CVE-2026-10993 | Chromium: CVE-2026-10993 Heap buffer overflow in Skia | UNKNOWN | — | 28%ile | Microsoft | 2026-06-09 |
| CVE-2026-10995 | Chromium: CVE-2026-10995 Heap buffer overflow in TabStrip | UNKNOWN | — | 29%ile | Microsoft | 2026-06-09 |
| CVE-2026-11024 | Chromium: CVE-2026-11024 Stack buffer overflow in Skia | UNKNOWN | — | 31%ile | Microsoft | 2026-06-09 |
| CVE-2026-11124 | Chromium: CVE-2026-11124 Heap buffer overflow in Skia | UNKNOWN | — | 16%ile | Microsoft | 2026-06-09 |
| CVE-2026-11143 | Chromium: CVE-2026-11143 Heap buffer overflow in Extensions | UNKNOWN | — | 7%ile | Microsoft | 2026-06-09 |
| CVE-2026-12010 | Chromium: CVE-2026-12010 Heap buffer overflow GPU | UNKNOWN | — | 18%ile | Microsoft | 2026-06-09 |
| CVE-2026-12447 | Chromium: CVE-2026-12447 Heap buffer overflow in WebRTC | UNKNOWN | — | 37%ile | Microsoft | 2026-06-09 |
| CVE-2026-12466 | Chromium: CVE-2026-12466 Heap buffer overflow in WebRTC | UNKNOWN | — | 37%ile | Microsoft | 2026-06-09 |
| CVE-2026-11979 | Stack-Based Buffer Overflow in libxml2 | UNKNOWN | — | 4%ile | Microsoft | 2026-06-09 |
| CVE-2026-61674 | Fluent Bit: Remote stack buffer overflow in Fluent Bit `out_forward` Secure-Forward `PONG` handler | UNKNOWN | — | 54%ile | Microsoft | 2026-09-08 |
| CVE-2026-81642 | Heap buffer overflow and possible Remote Code Execution when digesting DNSKEY | UNKNOWN | — | 62%ile | Microsoft | 2026-09-08 |
| CVE-2026-88807 | libXrender RenderQueryPictFormats Reply Heap-based Buffer Overflow | UNKNOWN | — | 18%ile | Microsoft | 2026-09-08 |
| CVE-2026-76022 | Chromium CVE-2026-76022: Buffer overflow in Network | UNKNOWN | — | 39%ile | Microsoft | 2026-09-08 |
| CVE-2026-76036 | Chromium CVE-2026-76036: Buffer overflow in Dawn | UNKNOWN | — | 43%ile | Microsoft | 2026-09-08 |
| CVE-2026-84351 | Chromium: CVE-2026-84351 Buffer overflow in GPU | UNKNOWN | — | 39%ile | Microsoft | 2026-09-08 |
| CVE-2026-87430 | Chromium CVE-2026-87430: Buffer overflow in WebRTC | UNKNOWN | — | 47%ile | Microsoft | 2026-09-08 |
| CVE-2026-87527 | Chromium CVE-2026-87527: Buffer overflow in WebGL | UNKNOWN | — | 43%ile | Microsoft | 2026-09-08 |
| CVE-2026-87579 | Chromium CVE-2026-87579: Buffer overflow in WebRTC | UNKNOWN | — | 47%ile | Microsoft | 2026-09-08 |
| CVE-2026-87654 | Chromium CVE-2026-87654: Buffer overflow in ANGLE | UNKNOWN | — | 34%ile | Microsoft | 2026-09-08 |
| CVE-2026-93372 | Chromium CVE-2026-93372: Buffer overflow in WebGL | UNKNOWN | — | 37%ile | Microsoft | 2026-09-08 |
| CVE-2026-93381 | Chromium CVE-2026-93381: Buffer overflow in PDFium | UNKNOWN | — | 33%ile | Microsoft | 2026-09-08 |
| CVE-2026-55556 | Rsyslog: Heap buffer overflow in imhttp plugin Basic Authentication handling | UNKNOWN | — | 58%ile | Microsoft | 2026-09-08 |
| CVE-2025-34297 | KissFFT Integer Overflow Heap Buffer Overflow via kiss_fft_alloc | UNKNOWN | — | 7%ile | Microsoft | 2025-12-09 |
| CVE-2015-3310 | Buffer overflow in the rc_mksid function in plugins/radius/util.c in Paul's PPP Package (ppp) 2.4.6 and earlier, when th | UNKNOWN | — | 93%ile | Microsoft | 2025-08-12 |
| CVE-2025-8879 | Chromium: CVE-2025-8879 Heap buffer overflow in libaom | UNKNOWN | — | 21%ile | Microsoft | 2025-08-12 |
| CVE-2026-55893 | Capstone SH disassembler `set_reg_n` heap buffer overflow via crafted SH2A FPU bytecode | UNKNOWN | — | 8%ile | Microsoft | 2026-08-11 |
| CVE-2026-73070 | Vim: Stack Buffer Overflow in the Vim Socket Server | UNKNOWN | — | 8%ile | Microsoft | 2026-08-11 |
| CVE-2026-73072 | Vim: Heap Buffer Overflow when Loading a Spell File | UNKNOWN | — | 2%ile | Microsoft | 2026-08-11 |
| CVE-2026-73074 | Vim: Heap Buffer Overflow in Text Property Handling | UNKNOWN | — | 1%ile | Microsoft | 2026-08-11 |
| CVE-2026-19138 | CVE-2026-19138 Heap buffer overflow in CrashReporting | UNKNOWN | — | 26%ile | Microsoft | 2026-08-11 |
| CVE-2026-19156 | CVE-2026-19156 Heap buffer overflow in Base | UNKNOWN | — | 16%ile | Microsoft | 2026-08-11 |
| CVE-2026-76034 | Chromium: CVE-2026-76034 Buffer overflow in WebGL | UNKNOWN | — | 47%ile | Microsoft | 2026-08-11 |
| CVE-2026-78891 | Chromium: CVE-2026-78891 Buffer overflow in WebRTC | UNKNOWN | — | 47%ile | Microsoft | 2026-08-11 |
| CVE-2026-78910 | Chromium: CVE-2026-78910 Buffer overflow in V8 | UNKNOWN | — | 39%ile | Microsoft | 2026-08-11 |
| CVE-2026-78948 | Chromium: CVE-2026-78948 Buffer overflow in WebGL | UNKNOWN | — | 43%ile | Microsoft | 2026-08-11 |
| CVE-2026-79130 | Chromium: CVE-2026-79130 Buffer overflow in ANGLE | UNKNOWN | — | 37%ile | Microsoft | 2026-08-11 |
| CVE-2026-79142 | Chromium: CVE-2026-79142 Buffer overflow in ANGLE | UNKNOWN | — | 34%ile | Microsoft | 2026-08-11 |
| CVE-2026-79216 | Chromium: CVE-2026-79216 Buffer overflow in Blink | UNKNOWN | — | 34%ile | Microsoft | 2026-08-11 |
| CVE-2026-79231 | Chromium: CVE-2026-79231 Buffer overflow in Media | UNKNOWN | — | 39%ile | Microsoft | 2026-08-11 |
| CVE-2026-7900 | Chromium: CVE-2026-7900 Heap buffer overflow in ANGLE | UNKNOWN | — | 15%ile | Microsoft | 2026-05-12 |
| CVE-2026-8509 | Chromium: CVE-2026-8509 Heap buffer overflow in WebML | UNKNOWN | — | 34%ile | Microsoft | 2026-05-12 |
| CVE-2026-8525 | Chromium: CVE-2026-8525 Heap buffer overflow in ANGLE | UNKNOWN | — | 14%ile | Microsoft | 2026-05-12 |
| CVE-2026-8529 | Chromium: CVE-2026-8529 Heap buffer overflow in Codecs | UNKNOWN | — | 23%ile | Microsoft | 2026-05-12 |
| CVE-2026-8531 | Chromium: CVE-2026-8531 Heap buffer overflow in WebML | UNKNOWN | — | 18%ile | Microsoft | 2026-05-12 |
| CVE-2026-8552 | Chromium: CVE-2026-8552 Heap buffer overflow in GPU | UNKNOWN | — | 9%ile | Microsoft | 2026-05-12 |
| CVE-2026-8560 | Chromium: CVE-2026-8560 Heap buffer overflow in SwiftShader | UNKNOWN | — | 16%ile | Microsoft | 2026-05-12 |
| CVE-2026-9119 | Chromium: CVE-2026-9119 Heap buffer overflow in WebRTC | UNKNOWN | — | 45%ile | Microsoft | 2026-05-12 |
| CVE-2026-9124 | Chromium: CVE-2026-9123 Heap buffer overflow in Chromecast | UNKNOWN | — | 18%ile | Microsoft | 2026-05-12 |
| CVE-2026-9915 | Chromium: CVE-2026-9915 Heap buffer overflow in ANGLE | UNKNOWN | — | 18%ile | Microsoft | 2026-05-12 |
| CVE-2026-9924 | Chromium: CVE-2026-9924 Heap buffer overflow in ANGLE | UNKNOWN | — | 16%ile | Microsoft | 2026-05-12 |
| CVE-2026-9926 | Chromium: CVE-2026-9926 Heap buffer overflow in ANGLE | UNKNOWN | — | 18%ile | Microsoft | 2026-05-12 |
| CVE-2026-9939 | Chromium: CVE-2026-9939 Heap buffer overflow in WebCodecs | UNKNOWN | — | 36%ile | Microsoft | 2026-05-12 |
| CVE-2026-9940 | Chromium: CVE-2026-9940 Heap buffer overflow in ANGLE | UNKNOWN | — | 20%ile | Microsoft | 2026-05-12 |
| CVE-2026-44662 | rust-openssl: Heap buffer overflow when encrypting with AES key-wrap-with-padding | UNKNOWN | — | 7%ile | Microsoft | 2026-05-12 |
| CVE-2025-4096 | Chromium: CVE-2025-4096 Heap buffer overflow in HTML | UNKNOWN | — | 39%ile | Microsoft | 2025-05-13 |
| CVE-2026-16554 | Integer Overflow Leading to Heap Buffer Overflow in cJSON | UNKNOWN | — | 31%ile | Microsoft | 2026-07-14 |
| CVE-2026-40468 | Heap buffer overflow in gawk | UNKNOWN | — | 10%ile | Microsoft | 2026-07-14 |
| CVE-2026-40553 | Stack-based buffer overflow in gawk | UNKNOWN | — | 22%ile | Microsoft | 2026-07-14 |
| CVE-2026-56392 | Heap-based Buffer Overflow in GNU coreutils | UNKNOWN | — | 8%ile | Microsoft | 2026-07-14 |
| CVE-2026-59250 | Megaco flex scanner buffer overflow via oversized property parm name | UNKNOWN | — | 56%ile | Microsoft | 2026-07-14 |
| CVE-2026-13798 | Chromium: CVE-2026-13798 Heap buffer overflow in Chromecast | UNKNOWN | — | 31%ile | Microsoft | 2026-07-14 |
| CVE-2026-13884 | Chromium: CVE-2026-13884 Heap buffer overflow in Chromecast | UNKNOWN | — | 10%ile | Microsoft | 2026-07-14 |
| CVE-2026-13976 | Chromium: CVE-2026-13976 Heap buffer overflow in Storage | UNKNOWN | — | 9%ile | Microsoft | 2026-07-14 |
| CVE-2026-14385 | Chromium: CVE-2026-14385 Heap buffer overflow in ANGLE | UNKNOWN | — | 26%ile | Microsoft | 2026-07-14 |
| CVE-2026-14427 | Chromium: CVE-2026-14427 Heap buffer overflow in Skia | UNKNOWN | — | 18%ile | Microsoft | 2026-07-14 |
| CVE-2026-15767 | Chromium: CVE-2026-15767 Heap buffer overflow in libyuv | UNKNOWN | — | 36%ile | Microsoft | 2026-07-14 |
| CVE-2026-16418 | Chromium: CVE-2026-16418 Stack buffer overflow in V8 | UNKNOWN | — | 39%ile | Microsoft | 2026-07-14 |
| CVE-2026-17680 | Chromium: CVE-2026-17680 Heap buffer overflow in Color | UNKNOWN | — | 31%ile | Microsoft | 2026-07-14 |
| CVE-2026-17758 | Chromium: CVE-2026-17758 Heap buffer overflow in Dawn | UNKNOWN | — | 31%ile | Microsoft | 2026-07-14 |
| CVE-2026-17935 | Chromium: CVE-2026-17935 Heap buffer overflow in Codecs | UNKNOWN | — | 39%ile | Microsoft | 2026-07-14 |
| CVE-2026-17951 | Chromium: CVE-2026-17951 Heap buffer overflow in WebRTC | UNKNOWN | — | 31%ile | Microsoft | 2026-07-14 |
| FG-IR-26-161 | Stack buffer overflow in WAD | UNKNOWN | — | — | Fortinet | 2026-08-12 |
| FG-IR-26-148 | Stack Buffer Overflow in Log Report | UNKNOWN | — | — | Fortinet | 2026-07-14 |