Search Results (22084 CVEs found)

CVE Vendors Products Updated CVSS v3.1
CVE-2026-62823 1 Microsoft 14 Windows 10 1607, Windows 10 1809, Windows Server 2012 and 11 more 2026-08-14 8.8 High
Heap-based buffer overflow in Windows DHCP Server allows an unauthorized attacker to execute code over an adjacent network.
CVE-2026-64920 1 Microsoft 7 365 Apps, Access, Access 2016 and 4 more 2026-08-14 7.8 High
Heap-based buffer overflow in Microsoft Office Access allows an unauthorized attacker to execute code locally.
CVE-2026-64905 1 Microsoft 10 365 Apps, Microsoft 365, Office 2019 and 7 more 2026-08-14 7.8 High
Buffer over-read in Microsoft Office Word allows an unauthorized attacker to execute code locally.
CVE-2026-64914 1 Microsoft 7 365 Apps, Access, Access 2016 and 4 more 2026-08-14 7.8 High
Heap-based buffer overflow in Microsoft Office Access allows an unauthorized attacker to execute code locally.
CVE-2026-64919 1 Microsoft 7 365 Apps, Access, Access 2016 and 4 more 2026-08-14 7.8 High
Stack-based buffer overflow in Microsoft Office Access allows an unauthorized attacker to execute code locally.
CVE-2026-64907 1 Microsoft 10 365 Apps, Microsoft 365, Office 2019 and 7 more 2026-08-14 7.8 High
Stack-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code locally.
CVE-2026-64912 1 Microsoft 6 365 Apps, Access, Access 2016 and 3 more 2026-08-14 7.8 High
Stack-based buffer overflow in Microsoft Office Access allows an unauthorized attacker to execute code locally.
CVE-2026-63533 1 Microsoft 9 365 Apps, Microsoft 365, Office 2016 and 6 more 2026-08-14 7.8 High
Heap-based buffer overflow in Microsoft Office allows an unauthorized attacker to execute code locally.
CVE-2026-63526 1 Microsoft 9 365 Apps, Microsoft 365, Office 2016 and 6 more 2026-08-14 7.8 High
Stack-based buffer overflow in Microsoft Office allows an unauthorized attacker to execute code locally.
CVE-2026-63530 1 Microsoft 10 365 Apps, Microsoft 365, Office 2019 and 7 more 2026-08-14 5.5 Medium
Out-of-bounds read in Microsoft Office Word allows an unauthorized attacker to disclose information locally.
CVE-2026-64899 1 Microsoft 9 365 Apps, Microsoft 365, Office 2016 and 6 more 2026-08-14 5.5 Medium
Out-of-bounds read in Microsoft Office allows an unauthorized attacker to disclose information locally.
CVE-2026-62886 1 Microsoft 6 .net, Microsoft Visual Studio 2022, Microsoft Visual Studio 2026 and 3 more 2026-08-14 7.8 High
Integer overflow or wraparound in .NET allows an unauthorized attacker to elevate privileges locally.
CVE-2026-64917 1 Microsoft 10 365 Apps, Microsoft 365, Office 2019 and 7 more 2026-08-14 5.5 Medium
Out-of-bounds read in Microsoft Office Word allows an unauthorized attacker to disclose information locally.
CVE-2026-64906 1 Microsoft 7 365 Apps, Access, Access 2016 and 4 more 2026-08-14 7.8 High
Heap-based buffer overflow in Microsoft Office Access allows an unauthorized attacker to execute code locally.
CVE-2026-63531 1 Microsoft 10 365 Apps, Microsoft 365, Office 2019 and 7 more 2026-08-14 5.5 Medium
Out-of-bounds read in Microsoft Office Word allows an unauthorized attacker to disclose information locally.
CVE-2026-63529 1 Microsoft 5 365 Apps, Office 2016, Office 2019 and 2 more 2026-08-14 5.5 Medium
Out-of-bounds read in Microsoft Office allows an unauthorized attacker to disclose information locally.
CVE-2026-63524 1 Microsoft 9 365 Apps, Microsoft 365, Office 2016 and 6 more 2026-08-14 5.5 Medium
Out-of-bounds read in Microsoft Office allows an unauthorized attacker to disclose information locally.
CVE-2026-70345 1 Microsoft 26 Windows 10 1607, Windows 10 1809, Windows 10 21h2 and 23 more 2026-08-14 7.8 High
Heap-based buffer overflow in Windows Installer allows an authorized attacker to elevate privileges locally.
CVE-2026-70346 1 Microsoft 26 Windows 10 1607, Windows 10 1809, Windows 10 21h2 and 23 more 2026-08-14 7.8 High
Stack-based buffer overflow in Windows Installer allows an authorized attacker to elevate privileges locally.
CVE-2026-6477 1 Postgresql 1 Postgresql 2026-08-14 8.8 High
Use of inherently dangerous function PQfn(..., result_is_int=0, ...) in PostgreSQL libpq lo_export(), lo_read(), lo_lseek64(), and lo_tell64() functions allows the server superuser to overwrite a client stack buffer with an arbitrarily-large response. Like gets(), PQfn(..., result_is_int=0, ...) stores arbitrary-length, server-determined data into a buffer of unspecified size. Because both the \lo_export command in psql and pg_dump call lo_read(), the server superuser can overwrite pg_dump or psql stack memory. Versions before PostgreSQL 18.4, 17.10, 16.14, 15.18, and 14.23 are affected.