fs_read_glyphs() in the libXfont2 font-server client (src/fc/fserve.c) copies each glyph's bitmap into a single buffer. Existing checks validates only that the source slice (pos...

CVE-2026-44950

fs_read_glyphs() in the libXfont2 font-server client (src/fc/fserve.c) copies each glyph's bitmap into a single buffer.

历史摘要 · 未重新核验 · NVD

A heap-based buffer overflow vulnerability in the PC bridge protocol decoder of BoschSensortec COINES_SDK (versions 2.10 through 2.12.2) allows attackers to cause a denial of se...

CVE-2026-42807

A heap-based buffer overflow vulnerability in the PC bridge protocol decoder of BoschSensortec COINES_SDK (versions 2.10

历史摘要 · 未重新核验 · NVD

Buffer overflow in ANGLE in Google Chrome on on Windows prior to 153.0.8010.36 allowed a remote...

CVE-2026-87654

Buffer overflow in ANGLE in Google Chrome on on Windows prior to 153.0.8010.36 allowed a remote attacker to execute arbi

历史摘要 · 未重新核验 · GitHub Advisory

sharp: Vulnerabilities in libheif: GHSA-g89c-p67h-r497 and GHSA-2jg2-4ch7-h545

### Impact A number of vulnerabilities, two rated as "Critical" severity using CVSSv3, have been discovered and fixed in

历史摘要 · 未重新核验 · GitHub Advisory

Heap-based buffer overflow in Windows Imaging Component allows an unauthorized attacker to execute code over a network.

CVE-2026-73013

Heap-based buffer overflow in Windows Imaging Component allows an unauthorized attacker to execute code over a network.

来源摘录 · NVD

Heap-based buffer overflow in Visual Studio allows an unauthorized attacker to execute code over a network.

CVE-2026-71328

Heap-based buffer overflow in Visual Studio allows an unauthorized attacker to execute code over a network.

来源摘录 · NVD

Heap-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code over a network.

CVE-2026-69556

Heap-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code over a network.

来源摘录 · NVD

Heap-based buffer overflow in Visual Studio allows an unauthorized attacker to execute code over a network.

CVE-2026-69522

Heap-based buffer overflow in Visual Studio allows an unauthorized attacker to execute code over a network.

来源摘录 · NVD

Heap-based buffer overflow in Windows Enterprise App Management allows an authorized attacker to elevate privileges over a network.

CVE-2026-69481

该漏洞通报来源于 NVD，仅提供简短的描述信息，未包含受影响产品、厂商补丁链接或详细技术分析。根据元数据，CVE-2026-69481 是 Windows 企业应用管理（Windows Enterprise App Management）组

历史摘要 · 未重新核验 · NVD

Heap-based buffer overflow in Windows Partition Management Driver allows an authorized attacker to elevate privileges locally.

CVE-2026-69480

CVE-2026-69480 涉及微软 Windows 分区管理驱动中一个基于堆的缓冲区溢出漏洞。该驱动是 Windows 系统负责管理磁盘分区结构的组件。由于在对某些输入进行内存拷贝或数据处理操作时，缺乏足够的边界检查，攻击者可以故意构造

历史摘要 · 未重新核验 · NVD

Heap-based buffer overflow in Windows NTFS allows an unauthorized attacker to execute code locally.

CVE-2026-69479

CVE-2026-69479 是 Windows NTFS 组件中的堆缓冲区溢出漏洞。根据 NVD 提供的元数据，攻击者可在本地环境、无需任何权限及用户交互的情况下触发该溢出（CVSS 向量 AV:L/AC:L/PR:N/UI:N/S:U/

历史摘要 · 未重新核验 · NVD

Heap-based buffer overflow in Windows Device Association Service allows an authorized attacker to elevate privileges locally.

CVE-2026-69478

CVE-2026-69478 是 Windows Device Association Service（设备关联服务）中的一个堆缓冲区溢出漏洞。该服务用于管理设备关联与连接配置，属于系统组件。由于服务在处理特定输入时未正确检查缓冲区边界，导

历史摘要 · 未重新核验 · NVD

Heap-based buffer overflow in Microsoft Office Access allows an authorized attacker to execute code locally.

CVE-2026-69477

CVE-2026-69477 是 Microsoft Office Access 组件中的一个堆缓冲区溢出漏洞。该漏洞允许已获得低权限的本地攻击者，在用户交互（例如打开恶意构建的数据库文件）的条件下，在目标系统上以当前用户权限执行任意代码。

历史摘要 · 未重新核验 · NVD

Heap-based buffer overflow in Windows Biometric Service allows an authorized attacker to elevate privileges locally.

CVE-2026-69476

CVE-2026-69476 是影响 Windows 生物识别服务（Windows Biometric Service）的一个基于堆的缓冲区溢出漏洞。该服务负责与指纹识别、面部识别等生物特征传感器交互，并提供相关安全认证功能。当服务处理特定

历史摘要 · 未重新核验 · NVD

Integer overflow or wraparound in Windows USB Audio Class driver (usbaudio.sys) allows an unauthorized attacker to elevate privileges with a physical attack.

CVE-2026-69469

CVE-2026-69469 是 Microsoft Windows USB Audio Class 驱动程序 usbaudio.sys 中存在的一个整数溢出或回绕漏洞。该漏洞源于驱动程序在处理音频类请求时，对相关长度或数值的边界检查不足，

历史摘要 · 未重新核验 · NVD

Heap-based buffer overflow in Windows Volume Manager Extension Driver allows an authorized attacker to elevate privileges locally.

CVE-2026-69468

CVE-2026-69468 是 Windows 卷管理器扩展驱动程序（Volume Manager Extension Driver）中的一个堆缓冲区溢出漏洞。根据 NVD 提供的元数据，该漏洞允许已获得本地系统有限访问权限（即具备低权限

历史摘要 · 未重新核验 · NVD

Heap-based buffer overflow in Windows NTFS allows an unauthorized attacker to execute code over a network.

CVE-2026-69463

CVE-2026-69463 是位于 Windows NTFS 组件中的一个堆缓冲区溢出漏洞。根据 NVD 提供的元数据，该漏洞可使未经授权的攻击者通过网络远程触发，并有可能执行任意代码。CVSS 3.1 基础评分为 9.8，属于严重程度（

历史摘要 · 未重新核验 · NVD

Heap-based buffer overflow in Windows Error Reporting allows an authorized attacker to elevate privileges over a network.

CVE-2026-69462

Heap-based buffer overflow in Windows Error Reporting allows an authorized attacker to elevate privileges over a network

历史摘要 · 未重新核验 · NVD

Heap-based buffer overflow in Windows Power Dependency Coordinator allows an authorized attacker to elevate privileges locally.

CVE-2026-69459

Heap-based buffer overflow in Windows Power Dependency Coordinator allows an authorized attacker to elevate privileges l

历史摘要 · 未重新核验 · NVD

Heap-based buffer overflow in Microsoft Windows Speech allows an authorized attacker to elevate privileges locally.

CVE-2026-69456

Heap-based buffer overflow in Microsoft Windows Speech allows an authorized attacker to elevate privileges locally.

历史摘要 · 未重新核验 · NVD