← Back to feed Search feed

CWE-787 Out-of-bounds Write vulnerabilities

159 CVEs — updated 2026-11-05 · vulnfeed

CVE / IDTitleSeverityCVSSEPSSSourceDate
CVE-2026-98181drm/gud: fix out-of-bounds write in gud_plane_atomic_check()CRITICAL9.87%ileMicrosoft2026-10-13
CVE-2026-89783xfrm6: fix out-of-bounds write in xfrm6_input_addr() when secpath is fullCRITICAL9.854%ileMicrosoft2026-09-08
CVE-2026-89969nvmet-tcp: fix out-of-bounds write when receiving an over-long PDUCRITICAL9.854%ileMicrosoft2026-09-08
CVE-2026-90048fs/ntfs3: fix slab-out-of-bounds write in ni_create_attr_list()CRITICAL9.854%ileMicrosoft2026-09-08
CVE-2026-31705ksmbd: fix out-of-bounds write in smb2_get_ea() EA alignmentCRITICAL9.834%ileMicrosoft2026-05-12
CVE-2026-121037Out of bounds write in ANGLE in Google Chrome on on Windows prior to 157.0.8103.38 allowed a remote attacker to potentiaCRITICAL9.634%ileNVD2026-11-03
CVE-2026-120931Out of bounds write in WebGL in Google Chrome on on Android prior to 156.0.8078.47 allowed a remote attacker to execute CRITICAL9.638%ileNVD2026-11-03
CVE-2026-111732P-Net before 1.0.3, when built with PNET_OPTION_AR_VENDOR_BLOCKS enabled, parses a data length from a field of the ARVenCRITICAL9.335%ileNVD2026-10-29
CVE-2026-121952FreeRDP before 3.32.2 has an out-of-bounds write in the proxy because rdp_read_bitmap_cache_v2_capability_set rejects onCRITICAL9.3—NVD2026-11-04
CVE-2026-113780ESF-IDF is the Espressif Internet of Things (IOT) Development Framework. From 5.5.5 until 5.5.6, 6.0.4, and 6.1.1, the eCRITICAL9.3—NVD2026-11-04
CVE-2026-118769Botan is a C++ cryptography library. From 2.1.0 until 3.13.0, the Botan C API function botan_block_cipher_block_size conCRITICAL9.230%ileNVD2026-10-29
CVE-2026-98725nvmet-auth: fix out-of-bounds write in nvmet_auth_challenge()CRITICAL9.112%ileMicrosoft2026-10-13
CVE-2026-119262Out of bounds write in V8 in Google Chrome prior to 156.0.8078.79 allowed a remote attacker to execute arbitrary code inHIGH8.821%ileNVD2026-10-30
CVE-2026-119777A flaw was found in GStreamer's gst-plugins-bad H.266/VVC parser. When processing a malformed H.266 media file or streamHIGH8.846%ileNVD2026-10-30
CVE-2026-107441An out-of-bounds write vulnerability in the CGI program of Zyxel GS1900-24E firmware versions through 2.90(AAHK.2)C0 couHIGH8.822%ileNVD2026-11-03
CVE-2026-16511Two RTIO syscall verifiers, in subsys/rtio/rtio_syscalls.c (subsys/rtio/rtio_handlers.c before v4.3.0), did not validateHIGH8.87%ileNVD2026-11-04
CVE-2026-77372VeraCrypt provides disk encryption with strong security based on TrueCrypt. Prior to 1.26.30, the Unix, macOS, and FreeBHIGH8.8—NVD2026-11-04
CVE-2026-99083ksmbd: fix heap out-of-bounds write in krb5_authenticate()HIGH8.839%ileMicrosoft2026-10-13
CVE-2026-121958FreeRDP through 3.32.1 has a heap out-of-bounds write in the RDPGFX client because the delete_surface callback truncatesHIGH8.7—NVD2026-11-04
CVE-2026-122127CESNET ipfixcol2 2.7.1 before 2.9.0 contains a heap-based buffer overflow in Lz4Decoder.cpp that allows unauthenticated HIGH8.7—NVD2026-11-04
CVE-2026-119373SQLite before 3.54.0 built with FTS5 contains a heap buffer overflow in fts5MergeRowidLists() that undersizes the outputHIGH8.56%ileNVD2026-10-30
CVE-2026-119374SQLite before 3.54.0 built with FTS5 contains a heap buffer overflow in fts5DoSecureDelete() that allows attackers to wrHIGH8.514%ileNVD2026-10-30
CVE-2026-119379SQLite before 3.54.0 built with the session extension contains a heap buffer overflow vulnerability in sqlite3changeset_HIGH8.520%ileNVD2026-10-30
CVE-2026-104061Scribus before 1.6.7 and 1.7.x before 1.7.4 contains a heap out-of-bounds write vulnerability in the scimgdataloader_psdHIGH8.510%ileNVD2026-10-30
CVE-2026-104062Scribus before 1.6.7 and 1.7.x before 1.7.4 contains a heap buffer overflow vulnerability in the PICT image loader and iHIGH8.512%ileNVD2026-10-30
CVE-2026-104065Scribus before 1.6.7 and 1.7.x before 1.7.4 contains an out-of-bounds write vulnerability in the importdrw Micrografx DrHIGH8.510%ileNVD2026-10-30
CVE-2026-104066Scribus before 1.6.7 and 1.7.x before 1.7.4 contains a heap buffer overflow vulnerability in the Mac PICT image loader aHIGH8.512%ileNVD2026-10-30
CVE-2026-104067Scribus before 1.6.7 and 1.7.x before 1.7.4 contains an out-of-bounds memory access vulnerability in the importsvm plugiHIGH8.510%ileNVD2026-10-30
CVE-2026-119719Blender before 4.5.15 and 5.x before 5.2.3 contains a heap buffer overflow vulnerability in the blend file thumbnail extHIGH8.55%ileNVD2026-10-30
CVE-2026-120435Netpbm before 10.86.51, 11.x before 11.02.30, and 11.03 before 11.15.08 contains a heap buffer overflow in xpmtoppm causHIGH8.54%ileNVD2026-11-02
CVE-2026-20565In Modem, there is a possible out of bounds write due to an incorrect bounds check. This could lead to local escalation HIGH8.43%ileNVD2026-11-02
CVE-2026-58824In __pkvm_load_tracing of trace.c, there is a possible out-of-bounds write due to an incorrect bounds check. This could HIGH8.41%ileNVD2026-11-02
CVE-2026-58844In multiple locations, there is a possible out of bounds read/write due to an incorrect bounds check. This could lead toHIGH8.45%ileNVD2026-11-02
CVE-2026-58879In descramble of multiple files, there is a possible out-of-bounds write due to improper casting. This could lead to locHIGH8.40%ileNVD2026-11-02
CVE-2026-58966In multiple functions of hppsfilter.c, there is a possible out-of-bounds write due to a stack buffer overflow. This coulHIGH8.40%ileNVD2026-11-02
CVE-2026-58975In multiple locations, there is a possible out-of-bounds write due to a missing bounds check. This could lead to local eHIGH8.40%ileNVD2026-11-02
CVE-2026-59014In multiple locations, there is a possible out-of-bounds write due to an integer overflow. This could lead to local escaHIGH8.40%ileNVD2026-11-02
CVE-2026-87040The nRF link-layer receive paths of the open-source Bluetooth LE Controller did not validate the on-air LENGTH field of HIGH8.321%ileNVD2026-11-04
CVE-2026-59685Apache HTTP Server: Out-of-Bounds Write in ap_directory_walk() Canonical-Name Rewrite on CASE_BLIND_FILESYSTEMHIGH8.240%ileMicrosoft2026-10-13
CVE-2026-86145PCRE2 before 10.48 allows a pcre2_dfa_match out-of-bounds write because reuse of a cached workspace block, in a recursivHIGH8.237%ileMicrosoft2026-09-08
CVE-2026-71971U-Boot before 2026.10-rc3 Out-of-Bounds Write in IP Fragment ReassemblyHIGH8.232%ileMicrosoft2026-09-08
CVE-2026-114550libwebsockets MQTT Protocol PUBACK Packet Handling Out-Of-Bounds Write Remote Code Execution Vulnerability. This vulneraHIGH8.158%ileNVD2026-11-04
CVE-2026-55368h2o is an HTTP server with support for HTTP/1.x, HTTP/2 and HTTP/3. Prior to commit 48b7ae12107fd2b118e4641da49599e9aac8HIGH8.1—NVD2026-11-04
CVE-2026-103111PCRE2 before 10.49, when there is an attacker-controlled regular expression and certain JIT API usage, allows an out-of-HIGH8.119%ileMicrosoft2026-09-08
CVE-2026-55200libssh2 - Out-of-Bounds Write via Unchecked packet_length in transport.cHIGH8.190%ileMicrosoft2026-06-09
GHSA-p3jp-9v83-76w9Microsoft Security Advisory CVE-2026-111497 - .NET Brotli Decoder Out-of-bounds Write VulnerabilityHIGH8.1—GitHub2026-11-03
FG-IR-26-187Node2Shell CVEsHIGH8.1—Fortinet2026-10-26
CVE-2026-87039The user-mode syscall verifier z_vrfy_i2s_configure() in drivers/i2s/i2s_handlers.c copies the caller's struct i2s_confiHIGH7.81%ileNVD2026-11-04
CVE-2026-87041The RTIO submission-queue verifier rtio_vrfy_sqe() in subsys/rtio/rtio_syscalls.c (subsys/rtio/rtio_handlers.c before v4HIGH7.82%ileNVD2026-11-04
CVE-2026-93520X.Org Server XKB ChangeKeycodeRange Heap Out-of-Bounds WriteHIGH7.810%ileMicrosoft2026-10-13
CVE-2026-93523X.Org Server XInput2 PassiveUngrabDevice Out-of-Bounds WriteHIGH7.810%ileMicrosoft2026-10-13
CVE-2026-90295cpufreq: imx6q: fix out-of-bounds write when probed more than onceHIGH7.811%ileMicrosoft2026-09-08
CVE-2026-55693Vim: Out-of-bounds Write in Spell File Word CountHIGH7.82%ileMicrosoft2026-06-09
CVE-2026-57455Vim: Stack out-of-bounds write in `spell_soundfold_sofo()` via an over-length `soundfold()` argumentHIGH7.82%ileMicrosoft2026-06-09
CVE-2025-68973In GnuPG through 2.4.8, armor_filter in g10/armor.c has two increments of an index variable where one is intended, leadiHIGH7.84%ileMicrosoft2025-12-09
CVE-2024-47697drivers: media: dvb-frontends/rtl2830: fix an out-of-bounds write errorHIGH7.821%ileMicrosoft2024-10-08
CVE-2024-47698drivers: media: dvb-frontends/rtl2832: fix an out-of-bounds write errorHIGH7.819%ileMicrosoft2024-10-08
CVE-2025-38568net/sched: mqprio: fix stack out-of-bounds write in tc entry parsingHIGH7.87%ileMicrosoft2025-08-12
CVE-2026-121617A security flaw has been discovered in Linksys E5600 1.1.0.26. Affected by this issue is the function init_multipart of HIGH7.741%ileNVD2026-11-04
CVE-2026-80335In the bootloader download module, there is a possible out-of-bounds write due to a failure to reset a global offset varHIGH7.619%ileNVD2026-11-04
CVE-2026-8822A memory corruption vulnerability exists in the vtkDEMReader ReadProfiles functionality of vtk (version(s): 9.6.1). A spHIGH7.524%ileNVD2026-10-29
CVE-2026-8824A memory corruption vulnerability exists in the vtkBMPReader ExecuteDataWithInformation functionality of vtk (version(s)HIGH7.524%ileNVD2026-10-29
CVE-2026-20499In Modem, there is a possible out of bounds write due to a missing bounds check. This could lead to remote escalation ofHIGH7.516%ileNVD2026-11-02
CVE-2026-20545In Modem, there is a possible out of bounds write due to a missing bounds check. This could lead to remote escalation ofHIGH7.516%ileNVD2026-11-02
CVE-2026-20546In Modem, there is a possible out of bounds write due to an incorrect bounds check. This could lead to remote escalationHIGH7.516%ileNVD2026-11-02
CVE-2026-20547In Modem, there is a possible out of bounds write due to a missing bounds check. This could lead to remote escalation ofHIGH7.516%ileNVD2026-11-02
CVE-2026-20548In Modem, there is a possible out of bounds write due to an integer overflow. This could lead to remote escalation of prHIGH7.516%ileNVD2026-11-02
CVE-2026-20549In Modem, there is a possible out of bounds write due to improper input validation. This could lead to remote escalationHIGH7.516%ileNVD2026-11-02
CVE-2026-20556In Modem, there is a possible out of bounds write due to a missing bounds check. This could lead to remote escalation ofHIGH7.514%ileNVD2026-11-02
CVE-2026-20557In Modem, there is a possible out of bounds write due to a missing bounds check. This could lead to remote escalation ofHIGH7.514%ileNVD2026-11-02
CVE-2026-20585In Modem, there is a possible out of bounds write due to a missing bounds check. This could lead to remote escalation ofHIGH7.512%ileNVD2026-11-02
CVE-2026-120058psqlODBC sizes its row cache from the column count of a cursor's first result, but recomputes the column count from eachHIGH7.517%ileNVD2026-11-02
CVE-2026-121510Remote Unauthenticated Heap Out-of-Bounds Write in µD3TN BPv6 Administrative Record Parser allows Unauthenticated RemoteHIGH7.539%ileNVD2026-11-03
CVE-2026-121513Off-by-one Heap Overflow in µD3TN v0.15.1 SPP Parser allows Unauthenticated Remote Attacker to Reliably Cause DoSHIGH7.538%ileNVD2026-11-03
CVE-2026-63209Integer Overflow or Wraparound and Out-of-bounds Write in compressHIGH7.547%ileMicrosoft2026-09-08
CVE-2026-37457An off-by-one out-of-bounds write vulnerability in the bgp_flowspec_op_decode() function (bgpd/bgp_flowspec_util.c) of FHIGH7.533%ileMicrosoft2026-05-12
CVE-2026-55958Renesas TSIP TLS 1.3 transcript buffer out-of-bounds write in tsip_StoreMessageHIGH7.539%ileMicrosoft2026-06-09
CVE-2026-6325Out-of-bounds write in SetSuitesHashSigAlgo on oversized signature algorithms listHIGH7.522%ileMicrosoft2026-06-09
CVE-2026-59042In __pkvm_pages_to_ppages of mmu.c, there is a possible out-of-bounds write due to a race condition. This could lead to HIGH7.40%ileNVD2026-11-02
CVE-2026-121506An out-of-bounds read and write in NTS client extension field parsing (extens_client_recv) in NTPsec before 1.2.5 allowsHIGH7.439%ileNVD2026-11-03
CVE-2026-61626libass is a portable subtitle renderer for the ASS/SSA (Advanced Substation Alpha/Substation Alpha) subtitle format. FroHIGH7.32%ileNVD2026-10-30
CVE-2026-61627libass is a portable subtitle renderer for the `ASS`/SSA (Advanced Substation Alpha/Substation Alpha) subtitle format. PHIGH7.35%ileNVD2026-10-30
CVE-2026-78402Stack-based buffer overflow and out-of-bounds write vulnerability in Thales Sentinel Keys Server on Windows allows OverfHIGH7.34%ileNVD2026-10-30
CVE-2026-59268An out-of-bounds Write vulnerability in Apache OpenOffice versions through 4.1.16 could allow an attacker to craft a MicHIGH7.3—NVD2026-11-04
CVE-2026-90624An unchecked memory access in the PDF import code of Apache OpenOffice versions through 4.1.16 on allows a crafted PDF tHIGH7.3—NVD2026-11-04
CVE-2026-90626An uncontrolled memory access in the PDF import code of Apache OpenOffice versions through 4.1.16 allows a crafted PDF tHIGH7.3—NVD2026-11-04
CVE-2026-90629An uncontrolled memory access in the WMF import code of Apache OpenOffice versions through 4.1.16 allows a crafted WMF fHIGH7.3—NVD2026-11-04
CVE-2026-90634An uncontrolled memory access in the PDF import code of Apache OpenOffice versions through 4.1.16 allows a crafted PDF tHIGH7.3—NVD2026-11-04
CVE-2026-111730P-Net before 1.0.3 does not validate the LengthPeerStationName field of a CheckPeers block in get_check_peer(). The receHIGH7.28%ileNVD2026-10-29
CVE-2026-84729Out-of-bounds write in certain ASUS Router firmware allow an unauthenticated nearby attacker to write data beyond the inHIGH7.26%ileNVD2026-11-04
CVE-2026-121962FreeRDP before 3.32.2 contains a heap buffer overflow in transport_default_read_pdu when handling partial Early User AutHIGH7.2—NVD2026-11-04
CVE-2026-20554In Modem, there is a possible system crash due to a missing bounds check. This could lead to remote escalation of privilHIGH7.110%ileNVD2026-11-02
CVE-2026-121954FreeRDP before 3.32.2 has a heap out-of-bounds write in the planar codec because freerdp_bitmap_planar_context_reset comHIGH7.1—NVD2026-11-04
CVE-2026-113782ESP-IDF is the Espressif Internet of Things (IOT) Development Framework. From 5.2.0 until 5.2.8, 5.3.6, 5.4.5, 5.5.5, anHIGH7.1—NVD2026-11-04
CVE-2026-108985ZDR decoding in libnfs through 6.0.2 before 7613236 has an out-of-bounds write related to lib/libnfs-zdr.c with libnfs_zHIGH7.17%ileMicrosoft2026-10-13
CVE-2026-120451libgphoto2 through 2.5.34 contains stack-based and heap-based buffer overflow vulnerabilities in jl2005c_init() that allHIGH7.013%ileNVD2026-11-02
CVE-2026-115653In Eclipse ThreadX versions 6.0.1 through 6.5.2.202603, the PendSV handler of the Cortex-M module ports saves a preempteHIGH7.04%ileNVD2026-11-02
CVE-2026-63418Monitoring Plugins is a suite of plugins for monitoring applications. From 3.0.0-rc1 until 3.0.1, check_icmp stores the HIGH7.03%ileNVD2026-11-03
CVE-2026-61495TinyUSB through 0.21.0, fixed in commit e85c2b8, contains an out-of-bounds write vulnerability in the MTP device class hHIGH7.019%ileNVD2026-11-03
CVE-2026-113679HarfBuzz 8.0.0 through 14.6.0 Out-of-Bounds Write via WebAssembly font_glyph_to_stringHIGH7.06%ileMicrosoft2026-10-13
CVE-2026-71220Gfs2-utils: gfs2-utils: stack out-of-bounds write via unchecked di_height in gfs2_editHIGH7.03%ileMicrosoft2026-09-08
CVE-2026-71221Gfs2-utils: gfs2-utils: stack out-of-bounds write via unchecked height in savemetaHIGH7.03%ileMicrosoft2026-09-08
CVE-2026-53059dm log: fix out-of-bounds write due to region_count overflowHIGH7.03%ileMicrosoft2026-06-09
CVE-2025-40331sctp: Prevent TOCTOU out-of-bounds writeHIGH7.08%ileMicrosoft2025-12-09
CVE-2025-68284libceph: prevent potential out-of-bounds writes in handle_auth_session_key()HIGH7.048%ileMicrosoft2025-12-09
CVE-2026-119601AFFLIB through 3.7.22 contains a heap out-of-bounds write vulnerability in af_get_page() that allows attackers to corrupMEDIUM6.92%ileNVD2026-10-30
CVE-2026-120455rapidyaml through 0.16.0 contains an out-of-bounds write vulnerability in ParseEngine::_add_annotation() that allows attMEDIUM6.92%ileNVD2026-11-02
CVE-2026-120456L-SMASH through 2.14.5 contains a heap out-of-bounds write vulnerability in isom_read_hdlr() and isom_read_dref_entry() MEDIUM6.95%ileNVD2026-11-02
CVE-2026-119739The VobSub subtitle decoder libsub_vob (part of the Amlogic DroidLogic SubTitleService), as shipped on Nexbox A95X (AmloMEDIUM6.931%ileNVD2026-11-02
CVE-2026-20553In DA, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of priMEDIUM6.89%ileNVD2026-11-02
CVE-2026-89729HID: sensor-hub: Fix out-of-bounds write in sensor_hub_get_featureMEDIUM6.829%ileMicrosoft2026-09-08
CVE-2026-20567In afe, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of prMEDIUM6.72%ileNVD2026-11-02
CVE-2026-20584In usb, there is a possible memory corruption due to a missing bounds check. This could lead to local escalation of privMEDIUM6.71%ileNVD2026-11-02
CVE-2026-68589In Modem, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of MEDIUM6.71%ileNVD2026-11-02
CVE-2026-58977In is_valid_header of timed_cache_item.c, there is a possible out-of-bounds write due to a missing bounds check. This coMEDIUM6.71%ileNVD2026-11-02
CVE-2026-85034The Bluetooth host's GATT client passed the value of a received Handle Value Notification, Handle Value Indication or MuMEDIUM6.715%ileNVD2026-11-03
CVE-2026-86565Dpdk: dpdk: guest can desynchronize virtqueue size from inflight descriptor table size, causing out-of-bounds writeMEDIUM6.76%ileMicrosoft2026-10-13
CVE-2026-115455A flaw was found in GCC libstdc++. When an application extracts data into a bitset from a wide-character stream, internaMEDIUM6.524%ileNVD2026-10-30
CVE-2026-20552In ccci, there is a possible out of bounds write due to a missing bounds check. This could lead to remote denial of servMEDIUM6.533%ileNVD2026-11-02
CVE-2026-120831A flaw was found in libslirp in if_output(). When moving a session from the fast queue to the batch queue, the code unliMEDIUM6.519%ileNVD2026-11-03
CVE-2026-89158PCRE2 before 10.48, on 32-bit platforms, has a pcre2_compile_32 integer overflow and resultant out-of-bounds write.MEDIUM6.516%ileMicrosoft2026-09-08
CVE-2026-114690A flaw was found in GCC. An out-of-bounds memory access vulnerability exists in the libstdc++ parallel search implementaMEDIUM6.21%ileNVD2026-10-30
CVE-2026-20550In gnss, there is a possible out of bounds write due to a missing bounds check. This could lead to local denial of serviMEDIUM6.23%ileNVD2026-11-02
CVE-2026-20564In Modem, there is a possible out of bounds write due to an incorrect bounds check. This could lead to local denial of sMEDIUM6.22%ileNVD2026-11-02
CVE-2026-59046In __pkvm_guest_relinquish_to_host of mem_protect.c, there is a possible out-of-bounds write due to improper input validMEDIUM6.20%ileNVD2026-11-02
CVE-2026-118384GNU mtools through 4.0.49 has an out-of-bounds write in parse_vses in vfat.c.MEDIUM6.125%ileMicrosoft2026-10-13
CVE-2026-111137libsmi through 0.5.0 Out-of-Bounds Write via smiValueAsString OCTET STRING DEFVALMEDIUM6.12%ileMicrosoft2026-10-13
CVE-2026-120952An out-of-bounds write in the MongoDB Atlas SQL ODBC Driver may be triggered when a value of a particular database type MEDIUM6.030%ileNVD2026-11-03
CVE-2026-80852tls: device: fix out-of-bounds write in tls_append_frag()MEDIUM6.08%ileMicrosoft2026-09-08
CVE-2026-120063When psqlODBC quotes a schema or table name into a 128-byte stack buffer, its length check lets it write up to two bytesMEDIUM5.919%ileNVD2026-11-02
CVE-2026-120067For updatable cursors, which are enabled by default, psqlODBC adds hidden ctid and, for tables with OIDs, oid columns toMEDIUM5.928%ileNVD2026-11-02
CVE-2026-71972U-Boot through 2026.10-rc5 Out-of-Bounds Write in BMP RLE8 DecoderMEDIUM5.913%ileMicrosoft2026-09-08
CVE-2026-89157PCRE2 before 10.48, on 32-bit platforms, has a pcre2_pattern_convert out-of-bounds write when an attacker can provide a MEDIUM5.729%ileMicrosoft2026-09-08
CVE-2026-19542Stack-based out-of-bounds write in tdelete during tree rebalancingMEDIUM5.613%ileMicrosoft2026-09-08
CVE-2026-20551In gnss, there is a possible out of bounds write due to a missing bounds check. This could lead to local denial of serviMEDIUM5.53%ileNVD2026-11-02
CVE-2026-121616A vulnerability was identified in Linksys E5600 1.1.0.26. Affected by this vulnerability is the function strcpy of the fMEDIUM5.523%ileNVD2026-11-04
CVE-2026-55892Vim: Out-of-bounds Write in Spell File Prefix DumpMEDIUM5.52%ileMicrosoft2026-06-09
CVE-2026-93011A flaw was found in dnsmasq. After a reduction of internal domain-name buffer sizes, the DNSSEC validator can write a feMEDIUM5.350%ileNVD2026-10-29
CVE-2026-20563In Modem, there is a possible out of bounds write due to an incorrect bounds check. This could lead to remote denial of MEDIUM5.312%ileNVD2026-11-02
CVE-2026-120452libgphoto2 through 2.5.34 contains a heap out-of-bounds read and write vulnerability in jl2005bcd_decompress() that alloMEDIUM5.28%ileNVD2026-11-02
CVE-2026-40661An out-of-bounds write (OOW) condition in the AMD Compressonator SDK could allow an attacker with local access to supplyMEDIUM5.23%ileNVD2026-11-03
CVE-2026-98419drop_monitor: fix out-of-bounds write in reset_per_cpu_data()MEDIUM5.15%ileMicrosoft2026-10-13
CVE-2026-20566In Modem, there is a possible out of bounds write due to a missing bounds check. This could lead to remote denial of serMEDIUM4.85%ileNVD2026-11-02
CVE-2026-100407Git for Windows is the Windows port of Git. From 2.44.0.windows.1 until 2.55.0.windows.3, the git-credential-wincred stoMEDIUM4.4—NVD2026-11-04
CVE-2026-100408Git for Windows is the Windows port of Git. From 2.43.0.windows.1 until 2.55.0.windows.3, when a matching git:* credentiMEDIUM4.4—NVD2026-11-04
CVE-2026-111487An out-of-bounds write vulnerability in the Qt Framework assimp scene import plugin of the Qt3D module.MEDIUM4.32%ileNVD2026-10-30
CVE-2026-98107Bluetooth: L2CAP: fix out-of-bounds write in l2cap_ecred_connectMEDIUM4.26%ileMicrosoft2026-09-08
CVE-2026-118673KeePassXC is a cross-platform community-driven port of the Windows application KeePass Password Safe. From 2.3.0 until 2MEDIUM4.12%ileNVD2026-10-29
CVE-2026-92382Usbredir: usbredir: unbounded iso_packet_desc[] index in usbredirhost_iso_packet() leads to heap out-of-bounds writeMEDIUM4.13%ileMicrosoft2026-09-08
CVE-2026-107457A memory corruption vulnerability in the QMqttClient class of the Qt MQTT module. Under certain MQTT 5 connection settinLOW2.318%ileNVD2026-11-02
CVE-2026-120959A memory-handling flaw in the MongoDB Atlas SQL ODBC Driver can cause values returned for a query to be written outside LOW2.113%ileNVD2026-11-03
CVE-2026-65587A web page that contains unusual WebGPU content loaded into the GPU GLES render process can trigger an OOB write in the UNKNOWN—3%ileNVD2026-10-30
CVE-2026-115946XS::libbrotli versions before 1.2.1.0 for Perl bundle a brotli library with an out-of-bounds write in the decoder. AffeUNKNOWN—16%ileNVD2026-11-01
CVE-2026-58868In onOutputReceived of FrameDecoder.cpp, there is a possible out-of-bounds write due to a heap buffer overflow. This couUNKNOWN—11%ileNVD2026-11-02
CVE-2026-102163Security Advisory 0195UNKNOWN—24%ileArista2026-10-02
CVE-2026-86107Security Advisory 0180UNKNOWN—31%ileArista2026-09-09
CVE-2026-80795nfc: nci: fix out-of-bounds write in nci_target_auto_activated()UNKNOWN—16%ileMicrosoft2026-09-08
CVE-2026-15390Out-of-bounds write in Das U-BootUNKNOWN—9%ileMicrosoft2026-09-08
CVE-2026-42250Off-by-One Leading to Out-of-Bounds Write in bzip2UNKNOWN—2%ileMicrosoft2026-05-12