CVE Intelligence
Home / CVEs

CVE Database

Published vulnerabilities with severity, known exploitation and official sources.

Severity
Clear

2.283 result(s)

Export this search: RSS · CSV · STIX
CVE-2026-81983 High · 7.8 CWE-787 Sep 8, 2026
Acrobat Reader | Out-of-bounds Write (CWE-787)
Acrobat Reader is affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file.
CVE-2026-81981 High · 7.8 CWE-787 Sep 8, 2026
Acrobat Reader | Out-of-bounds Write (CWE-787)
Acrobat Reader is affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file.
CVE-2026-81980 High · 7.8 CWE-787 Sep 8, 2026
Acrobat Reader | Out-of-bounds Write (CWE-787)
Acrobat Reader is affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file.
CVE-2026-81979 High · 7.8 CWE-787 Sep 8, 2026
Acrobat Reader | Out-of-bounds Write (CWE-787)
Acrobat Reader is affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file.
CVE-2026-79908 High · 7.8 CWE-787 Sep 8, 2026
Acrobat Reader | Out-of-bounds Write (CWE-787)
Acrobat Reader is affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file.
CVE-2026-30754 High · 8.8 CWE-787 Sep 8, 2026
A memory corruption vulnerability exists in FFmpeg before 8.1. The RTP encoding process. In the...
A memory corruption vulnerability exists in FFmpeg before 8.1. The RTP encoding process. In the nal_send function in libavformat/rtpenc_h264_hevc.c, a negative size parameter (size=-3) is passed to memcpy when transmitting H.264/HEVC streams via RTP using a crafted input file. This was detected using AddressSanitizer.
CVE-2026-82005 High · 7.8 CWE-787 Sep 8, 2026
Photoshop Desktop | Out-of-bounds Write (CWE-787)
Photoshop Desktop is affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file.
CVE-2026-75992 High · 7.8 CWE-787 Sep 8, 2026
Illustrator | Out-of-bounds Write (CWE-787)
Illustrator is affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file.
CVE-2026-75631 High · 7.8 CWE-787 Sep 8, 2026
Photoshop Desktop | Out-of-bounds Write (CWE-787)
Photoshop Desktop is affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file.
CVE-2026-49918 High · 7.8 CWE-787 Sep 8, 2026
Out-of-bounds Write in Google Android
In multiple functions, there is a possible out of bounds write due to an integer overflow. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.
CVE-2026-49879 High · 8.8 CWE-787 Sep 8, 2026
Out-of-bounds Write in Google Android
In multiple functions of rw_t3t.cc, there is a possible out of bounds write due to an integer overflow. This could lead to remote code execution with no additional execution privileges needed. User interaction is not needed for exploitation.
CVE-2026-28653 High · 7.8 CWE-787 Sep 8, 2026
Out-of-bounds Write in Google Android
In multiple functions of rw_t3t.cc, there is a possible out of bounds write due to an integer overflow. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.
CVE-2026-78524 High · 8.8 CWE-787 Sep 8, 2026
Microsoft Office Remote Code Execution Vulnerability
Out-of-bounds write in Microsoft Office allows an unauthorized attacker to execute code over a network.
CVE-2026-71345 High · 7.8 CWE-787 Sep 8, 2026
Windows Spaceport.sys Remote Code Execution Vulnerability
Out-of-bounds write in Windows Spaceport.sys allows an authorized attacker to execute code locally.
CVE-2026-70296 Critical · 9.8 CWE-787 Sep 8, 2026
Windows Imaging Component Remote Code Execution Vulnerability
Out-of-bounds write in Windows Imaging Component allows an unauthorized attacker to execute code over a network.
CVE-2026-69819 Critical · 9.8 CWE-787 Sep 8, 2026
RPC Runtime Library Remote Code Execution Vulnerability
Out-of-bounds write in RPC Runtime allows an unauthorized attacker to execute code over a network.
CVE-2026-82071 High · 8.1 CWE-787 Sep 8, 2026
Insufficient Validation of Storage Engine Configuration Options in MongoDB Server Leads to Out-of-Bounds Write
Insufficient validation of storage engine configuration options in MongoDB Server allows an authenticated user with write privileges to supply crafted parameters during collection creation that override internal storage metadata. This results in an out-of-bounds memory write in the server process, causing a denial of service via server crash, with potential for further impact including arbitrary code execution.
CVE-2026-62653 Medium · 6.8 CWE-787 Sep 8, 2026
Out-of-bounds Write in Siemens Reyrolle 7SR5
A vulnerability has been identified in Reyrolle 7SR5 (All versions < V2.70). The input received over a proprietary communication protocol that is exposed when the device is placed into a special firmware-update mode is not properly validated, resulting in a memory corruption condition. This could allow an unauthenticated attacker with physical access to the device to cause a crash and potentially execute arbitrary code on the device.
CVE-2026-62648 High · 7.5 CWE-787 Sep 8, 2026
Out-of-bounds Write in Siemens Reyrolle 7SR5
A vulnerability has been identified in Reyrolle 7SR5 (All versions < V2.70). The length of the URL component contained in pre-authenticated HTTP messages is not properly validated before appending additional data to it, resulting in an out-of-bounds write condition in memory. This could allow an unauthenticated remote attacker to crash the affected device, causing a reboot and resulting in a denial-of-service condition.
CVE-2026-14297 High · 8.7 CWE-787 Sep 7, 2026
The Continuous Glucose Monitoring Service's Record Access Control Point (RACP) write handler `memcpy`s the entire attacker-supplied ATT write value into a fixed 20-byte BSS buffer.
A buffer overflow in the Bluetooth Continuous Glucose Monitoring Service (CGMS) Record Access Control Point (RACP) write handler allows an authenticated BLE peer to overflow a 20-byte static buffer into adjacent BSS memory. The exploitable impact cannot be predetermined - it is entirely dependent on the linker-assigned BSS layout of the specific firmware build, which may vary.
CVE-2026-86313 High · 7.8 CWE-787 Sep 7, 2026
Out-of-bounds Write in Samsung Open Source Walrus
Out-of-bounds write vulnerability in Samsung Opensource Walrus allows Overflow Buffers. This issue affects Walrus: af80e665ea49d9003695a66502f841ed1d8397e7.
CVE-2026-86098 High · 7.4 CWE-787 Sep 4, 2026
ntop nDPI before 6.0 Heap Buffer Overflow via ndpi_json_string_escape
ntop nDPI versions before 6.0 contain a heap buffer overflow vulnerability in the ndpi_json_string_escape function that writes beyond caller-supplied buffer boundaries. Attackers can trigger the overflow by supplying crafted network packet data including TLS SNI, HTTP headers, or DNS names that reach the vulnerable function, causing heap corruption.
CVE-2026-86095 High · 7.8 CWE-787 Sep 4, 2026
Unidata netcdf-c through 4.10.1 Out-of-bounds Write via Oversized HDF5 Attribute Name
Unidata netcdf-c through 4.10.1 contains an out-of-bounds write vulnerability in NC4_HDF5_inq_attname() that copies HDF5 attribute names into a fixed 256-byte buffer without length validation. Attackers can craft HDF5 files with oversized attribute names to overflow the destination buffer, causing memory corruption and crashes when applications enumerate attribute names.
CVE-2026-17470 High · 7.5 CWE-787 Sep 4, 2026
IBM i is Affected By Denial of Service Vulnerabilities in Line Printer Daemon [, ]
IBM i 7.6, 7.5, 7.4, and 7.3 could allow a remote attacker to cause a denial of service due to a buffer overflow.
CVE-2026-17255 High · 7.5 CWE-787 Sep 4, 2026
IBM i is Affected By Denial of Service Vulnerability []
IBM i 7.6, 7.5, 7.4, and 7.3 could allow a remote attacker to cause a denial of service due to improper validation of the prefix length in ICMPv6 Router Advertisements.