#cwe-122

共收录 1199 条相关情报。

← 返回所有主题
漏洞预警2026-09-08 发布INFO

Heap-based buffer overflow in SQL Server allows an authorized attacker to elevate privileges over a network.

CVE-2026-67381

Heap-based buffer overflow in SQL Server allows an authorized attacker to elevate privileges over a network.

历史摘要 · 未重新核验 · NVD

漏洞预警2026-09-08 发布INFO

Heap-based buffer overflow in SQL Server allows an authorized attacker to execute code over a network.

CVE-2026-67380

Heap-based buffer overflow in SQL Server allows an authorized attacker to execute code over a network.

历史摘要 · 未重新核验 · NVD

漏洞预警2026-09-08 发布INFO

Heap-based buffer overflow in SQL Server allows an authorized attacker to execute code over a network.

CVE-2026-67373

Heap-based buffer overflow in SQL Server allows an authorized attacker to execute code over a network.

历史摘要 · 未重新核验 · NVD

漏洞预警2026-09-08 发布INFO

Heap-based buffer overflow in Active Directory Certificate Services (AD CS) allows an authorized attacker to elevate privileges locally.

CVE-2026-62810

Heap-based buffer overflow in Active Directory Certificate Services (AD CS) allows an authorized attacker to elevate pri

历史摘要 · 未重新核验 · NVD

漏洞预警2026-09-08 发布INFO

Heap-based buffer overflow in Microsoft Windows Media Foundation allows an unauthorized attacker to execute code over a network.

CVE-2026-62744

Heap-based buffer overflow in Microsoft Windows Media Foundation allows an unauthorized attacker to execute code over a

历史摘要 · 未重新核验 · NVD

漏洞预警2026-09-08 发布INFO

Heap-based buffer overflow in Microsoft Windows Codecs Library allows an unauthorized attacker to elevate privileges locally.

CVE-2026-58600

Heap-based buffer overflow in Microsoft Windows Codecs Library allows an unauthorized attacker to elevate privileges loc

历史摘要 · 未重新核验 · NVD

漏洞预警2026-09-08 发布INFO

Heap-based buffer overflow in Microsoft Windows Codecs Library allows an unauthorized attacker to execute code locally.

CVE-2026-58599

Heap-based buffer overflow in Microsoft Windows Codecs Library allows an unauthorized attacker to execute code locally.

历史摘要 · 未重新核验 · NVD

漏洞预警2026-09-08 发布INFO

A heap overflow in the a2dp_decoder_sbc.cpp component of Bestechnic Co., Ltd BES2300 Bluetooth Audio SoC firmware v3.x and earlier allows attackers to cause a Denial of Service ...

CVE-2026-79377

A heap overflow in the a2dp_decoder_sbc.cpp component of Bestechnic Co., Ltd BES2300 Bluetooth Audio SoC firmware v3.x a

历史摘要 · 未重新核验 · NVD

漏洞预警2026-09-08 发布INFO

CommServe contained a heap-based buffer overflow issue affecting service availability. Software customers upgrade to resolved maintenance release. Update CommServe.

CVE-2026-77102

CommServe contained a heap-based buffer overflow issue affecting service availability. Software customers upgrade to res

历史摘要 · 未重新核验 · NVD

漏洞预警2026-09-07 发布INFO

In vdec, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with no additional execution privileges needed. ...

CVE-2026-20502

In vdec, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of p

历史摘要 · 未重新核验 · NVD

漏洞预警2026-09-07 发布INFO

In vdec, there is a possible out of bounds write due to a heap buffer overflow. This could lead to local escalation of privilege with no additional execution privileges needed. ...

CVE-2026-20501

In vdec, there is a possible out of bounds write due to a heap buffer overflow. This could lead to local escalation of p

历史摘要 · 未重新核验 · NVD

漏洞预警2026-09-05 发布INFO

In libxml2 before 2.15.4, there is a heap-based buffer overflow in xmlXPtrEvalXPtrPart because of xmlXPtrEval xpointer length saturation.

CVE-2026-86142

In libxml2 before 2.15.4, there is a heap-based buffer overflow in xmlXPtrEvalXPtrPart because of xmlXPtrEval xpointer l

历史摘要 · 未重新核验 · NVD

安全公告2026-09-05 发布INFO

CVE-2026-86142

CVE-2026-86142

In libxml2 before 2.15.4, there is a heap-based buffer overflow in xmlXPtrEvalXPtrPart because of xmlXPtrEval xpointer l

历史摘要 · 未重新核验 · OSV.dev

漏洞预警2026-09-04 发布INFO

PJSIP is a free and open source multimedia communication library written in C. Prior to commit 8d5956a, a heap buffer overflow exists in the PJLIB-UTIL HTTP client (http_client....

CVE-2026-57164

PJSIP is a free and open source multimedia communication library written in C. Prior to commit 8d5956a, a heap buffer ov

历史摘要 · 未重新核验 · NVD

漏洞预警2026-09-04 发布INFO

IBM i 7.6, 7.5, 7.4, and 7.3 could allow a remote authenticated attacker to corrupt memory due to an integer underflow.

CVE-2026-18341

IBM i 7.6, 7.5, 7.4, and 7.3 could allow a remote authenticated attacker to corrupt memory due to an integer underflow.

历史摘要 · 未重新核验 · NVD

漏洞预警2026-09-04 发布INFO

A heap-based buffer overflow was found in Corosync's Totem Process Group (totempg) message reassembly. When processing fragmented multicast messages, the buffer used to reassemb...

CVE-2026-81665

A heap-based buffer overflow was found in Corosync's Totem Process Group (totempg) message reassembly. When processing f

历史摘要 · 未重新核验 · NVD

漏洞预警2026-09-03 发布INFO

Substance3D - Sampler is affected by a Heap-based Buffer Overflow vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of...

CVE-2026-83959

Substance3D - Sampler is affected by a Heap-based Buffer Overflow vulnerability that could result in arbitrary code exec

历史摘要 · 未重新核验 · NVD

漏洞预警2026-09-03 发布INFO

pymonocypher uses cython to wrap the Monocypher C library. Prior to version 4.0.2.8, the argon2i_32 implementation does not check the nb_blocks size. If the caller does not prov...

CVE-2026-53720

pymonocypher uses cython to wrap the Monocypher C library. Prior to version 4.0.2.8, the argon2i_32 implementation does

历史摘要 · 未重新核验 · NVD

安全公告2026-09-03 发布INFO

pymonocypher: Potential heap buffer overflow on nb_blocks in argon2i_32 when provided buffer is too small

CVE-2026-53720

pymonocypher uses cython to wrap the Monocypher C library. Prior to version 4.0.2.8, the argon2i_32 implementation does

历史摘要 · 未重新核验 · OSV.dev

安全公告2026-09-02 发布INFO

Description NGINX JavaScript (njs) has a vulnerability in the XML module's namespace prefix...

CVE-2026-78689

Description NGINX JavaScript (njs) has a vulnerability in the XML module's namespace prefix list parser, reachable thr

历史摘要 · 未重新核验 · GitHub Advisory