Catalog
Findings
Filter the merged record by severity, source, stack, and weakness type.
- High8.8Heap-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code over a network.EPSS 0.7%Oct 13, 2026
- High7.5Heap-based buffer overflow in Microsoft Office PowerPoint allows an unauthorized attacker to execute code over a network.Oct 13, 2026
- High8.8Heap-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code over a network.EPSS 0.7%Oct 13, 2026
- High8.1Heap-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code over a network.EPSS 0.7%Oct 13, 2026
- High8.8Integer overflow or wraparound in Microsoft Office SharePoint allows an authorized attacker to execute code over a network.EPSS 0.8%Oct 13, 2026
- High8.8Heap-based buffer overflow in Microsoft Office SharePoint allows an authorized attacker to execute code over a network.EPSS 0.8%Oct 13, 2026
- High7.5Heap-based buffer overflow in Windows iSCSI allows an unauthorized attacker to execute code over a network.Oct 13, 2026
- High7.5Heap-based buffer overflow in Windows iSCSI allows an unauthorized attacker to deny service over a network.Oct 13, 2026
- High7.8Affected Microsoft products: Windows 11 Version 26H2 for ARM64-based Systems, Windows 11 Version 24H2 for x64-based Systems, Windows 11 Version 25H2 for x64-based Systems, WindowsEPSS 0.3%Oct 13, 2026
- High8.8Heap-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code over a network.EPSS 0.8%Oct 13, 2026
- High7.1OpenS100 through commit 2b1dafc contains an integer overflow vulnerability in the S-102 Bathymetric Surface parser.EPSS 0.1%Oct 13, 2026
- Critical9.8Microsoft Security Advisory CVE-2026-105016 - Microsoft QUIC Remote Code Execution VulnerabilityEPSS 1.0%Oct 13, 2026
- Medium5.9GNU Aspell 0.60.8.2 (first vulnerable version is not known) contains a heap-based buffer overflow write (CWE-122) in its read-only dictionary loader.EPSS 0.2%Oct 12, 2026
- Medium6.0FreeRDP 3.10.0 through 3.32.2 contains a heap buffer overflow in the WinPR png_write_data callback that writes past the buffer after a realloc failure.EPSS 0.3%Oct 12, 2026
- Medium6.1FreeRDP 3.0.0 before 3.32.0 contains an integer truncation vulnerability in license_check_stream_length that allows a malicious RDP server to trigger a heap buffer ove…EPSS 0.5%Oct 12, 2026
- Critical9.8IBM DataPower Gateway 10.5.0.0 through 10.5.0.22, 10.6.1 through 10.6.6, 10.6.0.0 through 10.6.0.10, and 11.0.0.0 through 11.0.0.2 could allow a remote attacker to exe…EPSS 0.4%Oct 8, 2026
- Critical9.8IBM DataPower Gateway 10.5.0.0 through 10.5.0.22, 10.6.1 through 10.6.6, 10.6.0.0 through 10.6.0.10, and 11.0.0.0 through 11.0.0.2 is vulnerable to a heap-based buffer…EPSS 0.5%Oct 8, 2026
- High7.1X11 protocol dissector crash in 4.6.0 to 4.6.8 and 4.4.0 to 4.4.18 allows denial of serviceEPSS 0.1%Sep 29, 2026
- Low3.4The mysqlnd wire protocol parser reads fields out of server packets before checking that the packet still holds enough bytes for them.EPSS 0.2%Sep 25, 2026
- Critical9.3F5 BIG-IP APM Heap-based Buffer Overflow VulnerabilityKEVEPSS 2.2%Sep 22, 2026
- Low2.5libarchive 3.8.x before 3.8.2 has a strcpy heap-based buffer overflow in the gzip writer via the original-filename field to archive_compressor_gzip_open in archive_wri…EPSS 0.2%Sep 14, 2026
- High7.8Microsoft Windows Heap-Based Buffer Overflow VulnerabilityKEVEPSS 3.6%Sep 8, 2026
- High8.8A flaw was found in the SFTP backend in gvfs.Sep 1, 2026
- High7.4In NTFS-3G through 2026.2.25, a heap-based buffer overflow exists in the function build_inherited_id() in libntfs-3g/security.c that allows an attacker to corrupt heap…EPSS 0.1%Aug 24, 2026
- Low2.1A security vulnerability has been detected in Open5GS 2.8.0.EPSS 0.6%Aug 24, 2026