← Back
CWE-121

4,068 CVEs • Abstraction: Variant • Likelihood of Exploit: High

Stack-based Buffer Overflow

A stack-based buffer overflow condition is a condition where the buffer being overwritten is allocated on the stack (i.e., is a local variable or, rarely, a parameter to a function).

JSON object

Loading...

CVEs (4,068)

CVE
VENDORS
PRODUCTS
UPDATED
PUBLISHED
CVSS
1Microsoft
14Windows 10 1607
Windows 10 1809Windows 10 21h2+11 more
Oct 21, 2026
Oct 13, 2026
N/A· v4
7.5 HIGH· v3
N/A· v2
Stack-based buffer overflow in Windows GDI allows an unauthorized attacker to deny service over a network.
1Microsoft
14Windows 10 1607
Windows 10 1809Windows 10 21h2+11 more
Oct 21, 2026
Oct 13, 2026
N/A· v4
7.8 HIGH· v3
N/A· v2
Use after free in Windows Universal Disk Format File System Driver (UDFS) allows an authorized attacker to elevate privileges locally.
-
-
Oct 16, 2026
Oct 13, 2026
N/A· v4
7.8 HIGH· v3
N/A· v2
Stack-based buffer overflow in Windows Installer allows an authorized attacker to elevate privileges locally.
-
-
Oct 16, 2026
Oct 13, 2026
N/A· v4
7.0 HIGH· v3
N/A· v2
Stack-based buffer overflow in Windows Installer allows an authorized attacker to elevate privileges locally.
-
-
Oct 16, 2026
Oct 13, 2026
N/A· v4
7.8 HIGH· v3
N/A· v2
Stack-based buffer overflow in Windows Client-Side Caching (CSC) Service allows an authorized attacker to elevate privileges locally.
-
-
Oct 16, 2026
Oct 13, 2026
N/A· v4
8.8 HIGH· v3
N/A· v2
Stack-based buffer overflow in Windows Error Reporting allows an unauthorized attacker to execute code over a network.
-
-
Oct 14, 2026
Oct 13, 2026
N/A· v4
8.1 HIGH· v3
N/A· v2
Stack-based buffer overflow in Microsoft Exchange Server allows an unauthorized attacker to execute code over a network.
-
-
Oct 13, 2026
Oct 13, 2026
N/A· v4
4.2 MEDIUM· v3
N/A· v2
Stack-based buffer overflow in Windows Resilient File System (ReFS) allows an unauthorized attacker to bypass a security feature with a physical attack.
-
-
Oct 16, 2026
Oct 13, 2026
N/A· v4
7.8 HIGH· v3
N/A· v2
Stack-based buffer overflow in Microsoft PostScript Printer Driver allows an unauthorized attacker to elevate privileges locally.
-
-
Oct 13, 2026
Oct 13, 2026
N/A· v4
8.8 HIGH· v3
N/A· v2
Stack-based buffer overflow in Windows DHCP Server allows an authorized attacker to execute code over a network.
1Microsoft
14Windows 10 1607
Windows 10 1809Windows 10 21h2+11 more
Oct 16, 2026
Oct 13, 2026
N/A· v4
9.8 CRITICAL· v3
N/A· v2
Stack-based buffer overflow in Windows Internet Information Services allows an unauthorized attacker to execute code over a network.
-
-
Oct 13, 2026
Oct 13, 2026
N/A· v4
7.3 HIGH· v3
N/A· v2
Stack-based buffer overflow in SysInternals allows an authorized attacker to elevate privileges locally.
1Microsoft
14Windows 10 1607
Windows 10 1809Windows 10 21h2+11 more
Oct 20, 2026
Oct 13, 2026
N/A· v4
6.5 MEDIUM· v3
N/A· v2
Stack-based buffer overflow in Microsoft Windows Codecs Library allows an unauthorized attacker to deny service over a network.
1Microsoft
11Windows 10 1809
Windows 10 21h2Windows 10 22h2+8 more
Oct 20, 2026
Oct 13, 2026
N/A· v4
7.0 HIGH· v3
N/A· v2
Stack-based buffer overflow in Windows Storage allows an authorized attacker to elevate privileges locally.
-
-
Oct 14, 2026
Oct 13, 2026
7.1 HIGH· v4
N/A· v3
N/A· v2
QAPI contained a stack-based buffer overflow affecting service availability. Software customers upgrade to resolved maintenance release. Update CommServe, Web Server, Command Center and Index Server.
1Freerdp
1Freerdp
Oct 26, 2026
Oct 13, 2026
5.1 MEDIUM· v4
4.6 MEDIUM· v3
N/A· v2
FreeRDP 3.0.0-beta1 before 3.32.0 on Unix builds with PKCS#11 support has a stack-based buffer overflow in wprintKeyName() in WinPR's NCrypt PKCS#11 provider. It hex-encodes a key's CKA_ID, which can be up to 64 bytes, i...Show more
FreeRDP 3.0.0-beta1 before 3.32.0 on Unix builds with PKCS#11 support has a stack-based buffer overflow in wprintKeyName() in WinPR's NCrypt PKCS#11 provider. It hex-encodes a key's CKA_ID, which can be up to 64 bytes, into a fixed 128-byte stack buffer. An attacker supplying a malicious PKCS#11 token or module whose key and matching certificate use a 55- to 64-byte CKA_ID can overflow the client's stack during key enumeration, causing a crash.Show less
-
-
Oct 13, 2026
Oct 13, 2026
N/A· v4
7.3 HIGH· v3
N/A· v2
NVIDIA DALI contains a vulnerability where an attacker could cause a stack-based buffer overflow. A successful exploit of this vulnerability might lead to code execution, information disclosure, data tampering, and denia...Show more
NVIDIA DALI contains a vulnerability where an attacker could cause a stack-based buffer overflow. A successful exploit of this vulnerability might lead to code execution, information disclosure, data tampering, and denial of service.Show less
-
-
Oct 15, 2026
Oct 13, 2026
N/A· v4
5.9 MEDIUM· v3
N/A· v2
A flaw was found in gnome-remote-desktop as shipped in Red Hat Enterprise Linux. In the VNC TLS read path, partial consumption of the internal peek buffer incorrectly moves remaining peeked bytes into the caller-supplied...Show more
A flaw was found in gnome-remote-desktop as shipped in Red Hat Enterprise Linux. In the VNC TLS read path, partial consumption of the internal peek buffer incorrectly moves remaining peeked bytes into the caller-supplied buffer instead of compacting the peek buffer. A remote attacker who can reach an enabled VNC TLS listener and trigger a peek/read size mismatch can cause an out-of-bounds write, leading to denial of service.Show less
-
-
Oct 14, 2026
Oct 13, 2026
8.6 HIGH· v4
9.9 CRITICAL· v3
9.0 HIGH· v2
A vulnerability was found in TRENDnet TEW-432BRP 3.10B20. Affected by this vulnerability is the function formTcpipSetup of the file /goform/formTcpipSetup. Performing a manipulation of the argument Name results in stack-...Show more
A vulnerability was found in TRENDnet TEW-432BRP 3.10B20. Affected by this vulnerability is the function formTcpipSetup of the file /goform/formTcpipSetup. Performing a manipulation of the argument Name results in stack-based buffer overflow. It is possible to initiate the attack remotely. The exploit has been made public and could be used. The vendor confirms: "As this router was EOL'd in 2011, we have no way of testing if such vulnerability exists. We will notify our customers of a potential vulnerability on this product." This vulnerability only affects products that are no longer supported by the maintainer.Show less
-
-
Oct 15, 2026
Oct 13, 2026
8.7 HIGH· v4
7.5 HIGH· v3
N/A· v2
A vulnerability has been identified in APOGEE MBC (PPC) (BACnet) (All versions), APOGEE MBC (PPC) (P2 Ethernet) (All versions), APOGEE MEC (PPC) (BACnet) (All versions), APOGEE MEC (PPC) (P2 Ethernet) (All versions), APO...Show more
A vulnerability has been identified in APOGEE MBC (PPC) (BACnet) (All versions), APOGEE MBC (PPC) (P2 Ethernet) (All versions), APOGEE MEC (PPC) (BACnet) (All versions), APOGEE MEC (PPC) (P2 Ethernet) (All versions), APOGEE PXC Compact (BACnet) (All versions < V3.5.7), APOGEE PXC Compact (P2 Ethernet) (All versions < V2.8.21), APOGEE PXC Modular (BACnet) (All versions < V3.5.7), APOGEE PXC Modular (P2 Ethernet) (All versions < V2.8.21), TALON TC Compact (BACnet) (All versions < V3.5.7), TALON TC Modular (BACnet) (All versions < V3.5.7). The affected product web service does not properly validate user-supplied input in upload code. This could allow an unauthenticated remote attacker to cause a denial of service.Show less