#cwe-122

共收录 1245 条相关情报。

← 返回所有主题
漏洞预警2026-05-12 发布INFO

Access of resource using incompatible type ('type confusion') in Microsoft Office Word allows an unauthorized attacker to execute code locally.

CVE-2026-40364

Access of resource using incompatible type ('type confusion') in Microsoft Office Word allows an unauthorized attacker t

历史摘要 · 未重新核验 · NVD

漏洞预警2026-05-12 发布INFO

Heap-based buffer overflow in Microsoft Office allows an unauthorized attacker to execute code locally.

CVE-2026-40363

Heap-based buffer overflow in Microsoft Office allows an unauthorized attacker to execute code locally.

历史摘要 · 未重新核验 · NVD

漏洞预警2026-05-12 发布INFO

Heap-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code locally.

CVE-2026-40362

Heap-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code locally.

历史摘要 · 未重新核验 · NVD

漏洞预警2026-05-12 发布INFO

Heap-based buffer overflow in Windows GDI allows an unauthorized attacker to execute code locally.

CVE-2026-35421

Heap-based buffer overflow in Windows GDI allows an unauthorized attacker to execute code locally.

历史摘要 · 未重新核验 · NVD

漏洞预警2026-05-12 发布INFO

Heap-based buffer overflow in Windows Kernel allows an authorized attacker to elevate privileges locally.

CVE-2026-35420

Heap-based buffer overflow in Windows Kernel allows an authorized attacker to elevate privileges locally.

历史摘要 · 未重新核验 · NVD

漏洞预警2026-05-12 发布INFO

After Effects versions 26.0, 25.6.4 and earlier are affected by a Heap-based Buffer Overflow vulnerability that could result in arbitrary code execution in the context of the cu...

CVE-2026-34642

After Effects versions 26.0, 25.6.4 and earlier are affected by a Heap-based Buffer Overflow vulnerability that could re

历史摘要 · 未重新核验 · NVD

漏洞预警2026-05-12 发布INFO

Heap-based buffer overflow in Windows Application Identity (AppID) Subsystem allows an authorized attacker to elevate privileges locally.

CVE-2026-34343

Heap-based buffer overflow in Windows Application Identity (AppID) Subsystem allows an authorized attacker to elevate pr

历史摘要 · 未重新核验 · NVD

漏洞预警2026-05-12 发布INFO

Heap-based buffer overflow in Windows Message Queuing allows an unauthorized attacker to execute code over an adjacent network.

CVE-2026-34329

Heap-based buffer overflow in Windows Message Queuing allows an unauthorized attacker to execute code over an adjacent n

历史摘要 · 未重新核验 · NVD

漏洞预警2026-05-12 发布INFO

Heap-based buffer overflow in Windows Kernel allows an authorized attacker to elevate privileges locally.

CVE-2026-33841

Heap-based buffer overflow in Windows Kernel allows an authorized attacker to elevate privileges locally.

历史摘要 · 未重新核验 · NVD

漏洞预警2026-05-12 发布INFO

Heap-based buffer overflow in Windows TCP/IP allows an authorized attacker to elevate privileges locally.

CVE-2026-33837

Heap-based buffer overflow in Windows TCP/IP allows an authorized attacker to elevate privileges locally.

历史摘要 · 未重新核验 · NVD

漏洞预警2026-05-12 发布INFO

Heap-based buffer overflow in .NET allows an unauthorized attacker to elevate privileges locally.

CVE-2026-32177

Heap-based buffer overflow in .NET allows an unauthorized attacker to elevate privileges locally.

历史摘要 · 未重新核验 · NVD

漏洞预警2026-05-11 发布INFO

libcaca is a colour ASCII art library. In 0.99.beta20 and earlier, an integer overflow vulnerability in libcaca's canvas import functionality allows an attacker to cause a contr...

CVE-2026-42046

libcaca is a colour ASCII art library. In 0.99.beta20 and earlier, an integer overflow vulnerability in libcaca's canvas

历史摘要 · 未重新核验 · NVD

漏洞预警2026-05-11 发布INFO

A vulnerability was determined in Squirrel up to 3.2. This affects the function SQFunctionProto::Load of the file squirrel/sqobject.cpp. This manipulation causes heap-based buff...

CVE-2026-8261

A vulnerability was determined in Squirrel up to 3.2. This affects the function SQFunctionProto::Load of the file squirr

历史摘要 · 未重新核验 · NVD

漏洞预警2026-05-09 发布MEDIUM

A vulnerability has been found in OSGeo gdal up to 3.13.0dev-4. Affected by this issue is the function GDSDfldsrch of the file frmts/hdf4/hdf-eos/GDapi.c of the component Grid F...

CVE-2026-8213

2026年,OSGeo GDAL库(版本3.13.0dev-4及之前)的HDF4网格文件处理组件中发现了一个本地可利用的堆缓冲区溢出漏洞。漏洞位于frmts/hdf4/hdf-eos/GDapi.c文件的GDSDfldsrch函数中,由于对

历史摘要 · 未重新核验 · NVD

漏洞预警2026-05-09 发布MEDIUM

A flaw has been found in OSGeo gdal up to 3.13.0dev-4. Affected by this vulnerability is the function SWSDfldsrch of the file frmts/hdf4/hdf-eos/SWapi.c. Executing a manipulatio...

CVE-2026-8212

CVE-2026-8212 是 OSGeo GDAL 库(版本 up to 3.13.0dev-4)中 HDF4 插件的一个堆缓冲区溢出漏洞。该漏洞位于文件 frmts/hdf4/hdf-eos/SWapi.c 的函数 SWSDfldsrc

历史摘要 · 未重新核验 · NVD

漏洞预警2026-05-09 发布INFO

Pillow is a Python imaging library. From version 11.2.1 to before version 12.2.0, passing nested lists as coordinates to APIs that accept coordinates such as ImagePath.Path, Ima...

CVE-2026-42309

Pillow is a Python imaging library. From version 11.2.1 to before version 12.2.0, passing nested lists as coordinates to

历史摘要 · 未重新核验 · NVD

安全公告2026-05-09 发布INFO

smallbitvec: Integer overflow in safe API leads to heap buffer overflow

CVE-2026-44983

### Summary An integer overflow in the internal capacity calculation of `smallbitvec` can lead to an undersized heap all

历史摘要 · 未重新核验 · GitHub Advisory

漏洞预警2026-05-08 发布INFO

Vim is an open source, command line text editor. Prior to version 9.2.0450, a heap buffer overflow exists in read_compound() in src/spellfile.c when loading a crafted spell file...

CVE-2026-45130

Vim is an open source, command line text editor. Prior to version 9.2.0450, a heap buffer overflow exists in read_compou

历史摘要 · 未重新核验 · NVD

漏洞预警2026-05-08 发布INFO

CROSS implementation contains reference and optimized implementations of the CROSS post-quantum signature algorithm. Prior to commit fc6b7e7, there is a buffer overflow in crypt...

CVE-2026-41509

CROSS implementation contains reference and optimized implementations of the CROSS post-quantum signature algorithm. Pri

历史摘要 · 未重新核验 · NVD

安全公告2026-05-07 发布INFO

rust-openssl vulnerable to heap buffer overflow when encrypting with AES key-wrap-with-padding

CVE-2026-44662

`CipherCtxRef::cipher_update`, `CipherCtxRef::cipher_update_vec`, and `symm::Crypter::update` incorrectly sized output b

历史摘要 · 未重新核验 · GitHub Advisory