CVE Database

CVE-2026-103832 High · 7.8 CWE-787 Oct 13, 2026

Substance3D - Stager | Out-of-bounds Write (CWE-787)

Substance3D - Stager is affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file.

CVE-2026-97762 High · 8.8 CWE-787 Oct 13, 2026

Microsoft Office Excel Remote Code Execution Vulnerability

Out-of-bounds write in Microsoft Office Excel allows an unauthorized attacker to execute code over a network.

CVE-2026-96235 High · 8.8 CWE-787 Oct 13, 2026

.NET Remote Code Execution Vulnerability

Out-of-bounds write in .NET allows an unauthorized attacker to execute code over a network.

CVE-2026-96233 High · 7.5 CWE-787 Oct 13, 2026

ASP.NET Core Denial of Service Vulnerability

Out-of-bounds write in ASP.NET Core allows an unauthorized attacker to deny service over a network.

CVE-2026-96224 High · 8.8 CWE-787 Oct 13, 2026

.NET Remote Code Execution Vulnerability

Out-of-bounds write in .NET allows an unauthorized attacker to execute code over a network.

CVE-2026-96219 Critical · 9.8 CWE-787 Oct 13, 2026

Windows Local Security Authority Subsystem Service (LSASS) Remote Code Execution Vulnerability

Out-of-bounds write in Windows Local Security Authority Subsystem Service (LSASS) allows an unauthorized attacker to execute code over a network.

CVE-2026-88165 High · 8.8 CWE-787 Oct 13, 2026

Windows Active Directory Domain Services Remote Code Execution Vulnerability

Out-of-bounds write in Active Directory Domain Services allows an authorized attacker to execute code over a network.

CVE-2026-85826 High · 7.0 CWE-787 Oct 13, 2026

Windows Fast FAT Driver Elevation of Privilege Vulnerability

Out-of-bounds write in Windows Fast FAT Driver allows an authorized attacker to elevate privileges locally.

CVE-2026-84016 High · 7.8 CWE-787 Oct 13, 2026

Windows EAPHost Service Elevation of Privilege Vulnerability

Out-of-bounds write in Windows EAPHost Service allows an authorized attacker to elevate privileges locally.

CVE-2026-83929 High · 8.8 CWE-787 Oct 13, 2026

Windows GDI Remote Code Execution Vulnerability

Out-of-bounds write in Windows GDI allows an unauthorized attacker to execute code over a network.

CVE-2026-83910 Critical · 9.8 CWE-787 Oct 13, 2026

RPC Runtime Library Remote Code Execution Vulnerability

Out-of-bounds write in RPC Runtime allows an unauthorized attacker to execute code over a network.

CVE-2026-83712 High · 7.8 CWE-787 Oct 13, 2026

Windows NTFS Remote Code Execution Vulnerability

Out-of-bounds write in Windows NTFS allows an authorized attacker to execute code locally.

CVE-2026-70303 High · 7.8 CWE-787 Oct 13, 2026

Windows Kernel Elevation of Privilege Vulnerability

Out-of-bounds write in Windows Kernel allows an authorized attacker to elevate privileges locally.

CVE-2026-70197 High · 8.1 CWE-787 Oct 13, 2026

.NET Remote Code Execution Vulnerability

Out-of-bounds write in .NET allows an unauthorized attacker to execute code over a network.

CVE-2026-70058 High · 7.5 CWE-787 Oct 13, 2026

Windows DHCP Server Remote Code Execution Vulnerability

Out-of-bounds write in Windows DHCP Server allows an unauthorized attacker to execute code over a network.

CVE-2026-70007 High · 8.8 CWE-787 Oct 13, 2026

.NET Framework Remote Code Execution Vulnerability

Out-of-bounds write in .NET Framework allows an unauthorized attacker to execute code over a network.

CVE-2026-69705 Critical · 9.8 CWE-787 Oct 13, 2026

Windows iSCSI Remote Code Execution Vulnerability

Out-of-bounds write in Windows iSCSI allows an unauthorized attacker to execute code over a network.

CVE-2026-108457 High · 8.1 CWE-787 Oct 13, 2026

Microsoft Windows PDF Remote Code Execution Vulnerability

Out-of-bounds write in Microsoft Windows PDF allows an unauthorized attacker to execute code over a network.

CVE-2026-106625 High · 7.8 CWE-787 Oct 13, 2026

Adobe Framemaker | Out-of-bounds Write (CWE-787)

Adobe Framemaker is affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file.

CVE-2026-105005 High · 8.1 CWE-787 Oct 13, 2026

Windows Schannel Remote Code Execution Vulnerability

Out-of-bounds write in Windows Schannel allows an unauthorized attacker to execute code over a network.

CVE-2026-104341 High · 7.8 CWE-787 Oct 13, 2026

Adobe Framemaker | Out-of-bounds Write (CWE-787)

Adobe Framemaker is affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file.

CVE-2026-103967 High · 7.8 CWE-787 Oct 13, 2026

Adobe Framemaker | Out-of-bounds Write (CWE-787)

Adobe Framemaker is affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file.

CVE-2026-95115 High · 7.5 CWE-787 Oct 13, 2026

Buffer Overflow vulnerability in libwebsockets main 106d542c allows a remote attacker to cause a...

Buffer Overflow vulnerability in libwebsockets main 106d542c allows a remote attacker to cause a denial of service via the LEJP JSON parser

CVE-2026-77094 High · 7.1 CWE-787 Oct 13, 2026

CvFWD Out-of-Bounds Write

CvFWD contained an out-of-bounds write affecting service availability. Software customers upgrade to resolved maintenance release. Software customers upgrade to resolved maintenance release. Update all Commvault installations, including CommServe, Webserver, Command Center, MediaAgents, Clients and HyperScale.

CVE-2026-109680 Medium · 6.5 CWE-787 Oct 13, 2026

FreeRDP 3.18.0 before 3.32.0 Heap Out-of-Bounds Write via ARM Redirected Username

FreeRDP 3.18.0 before 3.32.0 has a heap-based out-of-bounds write in freerdp_interruptible_get_line, which shrinks the buffer to 32 bytes while keeping a pre-filled suggested username's length as its write offset. A malicious or compromised ARM routing service can return a long redirectedUsername that reaches the CLI credential prompt, crashing the client when the user types input.