Improper Restriction of Operations within the Bounds of a Memory Buffer

The product performs operations on a memory buffer, but it reads from or writes to a memory location outside the buffer's intended boundary. This may result in read or write operations on unexpected memory locations that could be linked to other variables, data structures, or internal program data.

CVEs (14,558)

CVE VENDORS PRODUCTS UPDATED PUBLISHED CVSS
CVE-2016-6671 1Ffmpeg 1Ffmpeg May 6, 2026 Dec 23, 2016 N/A· v4 7.8 HIGH· v3 6.8 MEDIUM· v2 The raw_decode function in libavcodec/rawdec.c in FFmpeg before 3.1.2 allows remote attackers to cause a denial of service (memory corruption) or execute arbitrary code via a crafted SWF file.
CVE-2016-7298 1Microsoft 2Office Word Viewer May 6, 2026 Dec 20, 2016 N/A· v4 7.8 HIGH· v3 9.3 HIGH· v2 Microsoft Office 2007 SP3, Office 2010 SP2, Word Viewer, Office for Mac 2011, and Office 2016 for Mac allow remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted docume...Show more Microsoft Office 2007 SP3, Office 2010 SP2, Word Viewer, Office for Mac 2011, and Office 2016 for Mac allow remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted document, aka "Microsoft Office Memory Corruption Vulnerability."Show less
CVE-2016-7297 1Microsoft 1Edge May 6, 2026 Dec 20, 2016 N/A· v4 7.5 HIGH· v3 7.6 HIGH· v2 The scripting engines in Microsoft Edge allow remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web site, aka "Scripting Engine Memory Corruption Vulnerability," a...Show more The scripting engines in Microsoft Edge allow remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web site, aka "Scripting Engine Memory Corruption Vulnerability," a different vulnerability than CVE-2016-7286, CVE-2016-7288, and CVE-2016-7296.Show less
CVE-2016-7296 1Microsoft 1Edge May 6, 2026 Dec 20, 2016 N/A· v4 7.5 HIGH· v3 7.6 HIGH· v2 The scripting engines in Microsoft Edge allow remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web site, aka "Scripting Engine Memory Corruption Vulnerability," a...Show more The scripting engines in Microsoft Edge allow remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web site, aka "Scripting Engine Memory Corruption Vulnerability," a different vulnerability than CVE-2016-7286, CVE-2016-7288, and CVE-2016-7297.Show less
CVE-2016-7289 1Microsoft 1Publisher May 6, 2026 Dec 20, 2016 N/A· v4 7.8 HIGH· v3 9.3 HIGH· v2 Microsoft Publisher 2010 SP2 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted document, aka "Microsoft Office Memory Corruption Vulnerability."
CVE-2016-7288 1Microsoft 1Edge May 6, 2026 Dec 20, 2016 N/A· v4 7.5 HIGH· v3 7.6 HIGH· v2 The scripting engines in Microsoft Edge allow remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web site, aka "Scripting Engine Memory Corruption Vulnerability," a...Show more The scripting engines in Microsoft Edge allow remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web site, aka "Scripting Engine Memory Corruption Vulnerability," a different vulnerability than CVE-2016-7286, CVE-2016-7296, and CVE-2016-7297.Show less
CVE-2016-7287 1Microsoft 2Edge Internet Explorer May 6, 2026 Dec 20, 2016 N/A· v4 7.5 HIGH· v3 7.6 HIGH· v2 The scripting engines in Microsoft Internet Explorer 11 and Microsoft Edge allow remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web site, aka "Scripting Engine M...Show more The scripting engines in Microsoft Internet Explorer 11 and Microsoft Edge allow remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web site, aka "Scripting Engine Memory Corruption Vulnerability."Show less
CVE-2016-7286 1Microsoft 1Edge May 6, 2026 Dec 20, 2016 N/A· v4 7.5 HIGH· v3 7.6 HIGH· v2 The scripting engines in Microsoft Edge allow remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web site, aka "Scripting Engine Memory Corruption Vulnerability," a...Show more The scripting engines in Microsoft Edge allow remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web site, aka "Scripting Engine Memory Corruption Vulnerability," a different vulnerability than CVE-2016-7288, CVE-2016-7296, and CVE-2016-7297.Show less
CVE-2016-7283 1Microsoft 1Internet Explorer May 6, 2026 Dec 20, 2016 N/A· v4 8.8 HIGH· v3 9.3 HIGH· v2 Microsoft Internet Explorer 9 through 11 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web site, aka "Internet Explorer Memory Corruption Vulnerability."
CVE-2016-7279 1Microsoft 2Edge Internet Explorer May 6, 2026 Dec 20, 2016 N/A· v4 7.5 HIGH· v3 7.6 HIGH· v2 Microsoft Internet Explorer 9 through 11 and Microsoft Edge allow remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web site, aka "Microsoft Browser Memory Corrupti...Show more Microsoft Internet Explorer 9 through 11 and Microsoft Edge allow remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web site, aka "Microsoft Browser Memory Corruption Vulnerability."Show less
CVE-2016-7277 1Microsoft 1Office May 6, 2026 Dec 20, 2016 N/A· v4 9.6 CRITICAL· v3 9.3 HIGH· v2 Microsoft Office 2016 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted document, aka "Microsoft Office Memory Corruption Vulnerability."
CVE-2016-7263 1Microsoft 1Excel For Mac May 6, 2026 Dec 20, 2016 N/A· v4 7.8 HIGH· v3 9.3 HIGH· v2 Microsoft Excel for Mac 2011 and Excel 2016 for Mac allow remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted document, aka "Microsoft Office Memory Corruption Vulner...Show more Microsoft Excel for Mac 2011 and Excel 2016 for Mac allow remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted document, aka "Microsoft Office Memory Corruption Vulnerability."Show less
CVE-2016-7181 1Microsoft 1Edge May 6, 2026 Dec 20, 2016 N/A· v4 7.5 HIGH· v3 7.6 HIGH· v2 Microsoft Edge allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web site, aka "Microsoft Edge Memory Corruption Vulnerability."
CVE-2016-5182 1Google 1Chrome May 6, 2026 Dec 18, 2016 N/A· v4 8.8 HIGH· v3 6.8 MEDIUM· v2 Blink in Google Chrome prior to 54.0.2840.59 for Windows, Mac, and Linux; 54.0.2840.85 for Android had insufficient validation in bitmap handling, which allowed a remote attacker to potentially exploit heap corruption vi...Show more Blink in Google Chrome prior to 54.0.2840.59 for Windows, Mac, and Linux; 54.0.2840.85 for Android had insufficient validation in bitmap handling, which allowed a remote attacker to potentially exploit heap corruption via crafted HTML pages.Show less
CVE-2016-8825 1Nvidia 1Gpu Driver May 6, 2026 Dec 16, 2016 N/A· v4 7.8 HIGH· v3 7.2 HIGH· v2 All versions of NVIDIA Windows GPU Display Driver contain a vulnerability in the kernel mode layer (nvlddmkm.sys) handler for DxgDdiEscape where the size of an input buffer is not validated, leading to denial of service...Show more All versions of NVIDIA Windows GPU Display Driver contain a vulnerability in the kernel mode layer (nvlddmkm.sys) handler for DxgDdiEscape where the size of an input buffer is not validated, leading to denial of service or potential escalation of privileges.Show less
CVE-2016-8823 1Nvidia 1Gpu Driver May 6, 2026 Dec 16, 2016 N/A· v4 7.8 HIGH· v3 7.2 HIGH· v2 All versions of NVIDIA Windows GPU Display Driver contain a vulnerability in the kernel mode layer handler for DxgDdiEscape where the size of an input buffer is not validated leading to a denial of service or possible es...Show more All versions of NVIDIA Windows GPU Display Driver contain a vulnerability in the kernel mode layer handler for DxgDdiEscape where the size of an input buffer is not validated leading to a denial of service or possible escalation of privilegesShow less
CVE-2016-8817 1Nvidia 1Gpu Driver May 6, 2026 Dec 16, 2016 N/A· v4 7.8 HIGH· v3 7.2 HIGH· v2 All versions of NVIDIA Windows GPU Display Driver contain a vulnerability in the kernel mode layer (nvlddmkm.sys) handler for DxgDdiEscape where a value passed from a user to the driver is used without validation as the...Show more All versions of NVIDIA Windows GPU Display Driver contain a vulnerability in the kernel mode layer (nvlddmkm.sys) handler for DxgDdiEscape where a value passed from a user to the driver is used without validation as the size input to memcpy(), causing a buffer overflow, leading to denial of service or potential escalation of privileges.Show less
CVE-2016-7886 1Adobe 2Indesign Indesign Server May 6, 2026 Dec 15, 2016 N/A· v4 9.8 CRITICAL· v3 10.0 HIGH· v2 Adobe InDesign version 11.4.1 and earlier, Adobe InDesign Server 11.0.0 and earlier have an exploitable memory corruption vulnerability. Successful exploitation could lead to arbitrary code execution.
CVE-2016-7866 1Adobe 1Animate May 6, 2026 Dec 15, 2016 N/A· v4 9.8 CRITICAL· v3 10.0 HIGH· v2 Adobe Animate versions 15.2.1.95 and earlier have an exploitable memory corruption vulnerability. Successful exploitation could lead to arbitrary code execution.
CVE-2016-7856 1Adobe 1Dng Converter May 6, 2026 Dec 15, 2016 N/A· v4 9.8 CRITICAL· v3 10.0 HIGH· v2 Adobe DNG Converter versions 9.7 and earlier have an exploitable memory corruption vulnerability. Successful exploitation could lead to arbitrary code execution.

Previous 1...372373374...728 Next