← Back
CWE-121

3,751 CVEs • Abstraction: Variant • Likelihood of Exploit: High

Stack-based Buffer Overflow

A stack-based buffer overflow condition is a condition where the buffer being overwritten is allocated on the stack (i.e., is a local variable or, rarely, a parameter to a function).

JSON object

Loading...

CVEs (3,751)

CVE
VENDORS
PRODUCTS
UPDATED
PUBLISHED
CVSS
1Microsoft
7Windows 10 1607
Windows 10 1809Windows Server 2012+4 more
Sep 9, 2026
Sep 8, 2026
N/A· v4
8.1 HIGH· v3
N/A· v2
Stack-based buffer overflow in Windows DHCP Server allows an unauthorized attacker to execute code over a network.
-
-
Sep 9, 2026
Sep 8, 2026
N/A· v4
7.8 HIGH· v3
N/A· v2
Stack-based buffer overflow in Windows MIDI Service Module allows an authorized attacker to elevate privileges locally.
-
-
Sep 9, 2026
Sep 8, 2026
N/A· v4
8.0 HIGH· v3
N/A· v2
Stack-based buffer overflow in Windows USB Driver allows an authorized attacker to elevate privileges over a network.
1Microsoft
6Windows 10 21h2
Windows 10 22h2Windows 11 23h2+3 more
Sep 10, 2026
Sep 8, 2026
N/A· v4
7.8 HIGH· v3
N/A· v2
Stack-based buffer overflow in Microsoft Graphics Component allows an authorized attacker to elevate privileges locally.
-
-
Sep 9, 2026
Sep 8, 2026
N/A· v4
8.8 HIGH· v3
N/A· v2
Stack-based buffer overflow in Windows NTFS allows an unauthorized attacker to execute code over a network.
1Microsoft
7Windows 10 1607
Windows 10 1809Windows Server 2012+4 more
Sep 9, 2026
Sep 8, 2026
N/A· v4
8.0 HIGH· v3
N/A· v2
Stack-based buffer overflow in Windows DHCP Server allows an authorized attacker to execute code over an adjacent network.
-
-
Sep 8, 2026
Sep 8, 2026
N/A· v4
7.8 HIGH· v3
N/A· v2
Stack-based buffer overflow in Windows Broker Infrastructure Service allows an authorized attacker to elevate privileges locally.
-
-
Sep 9, 2026
Sep 8, 2026
N/A· v4
8.0 HIGH· v3
N/A· v2
Stack-based buffer overflow in Windows Win32K allows an authorized attacker to elevate privileges over a network.
-
-
Sep 10, 2026
Sep 8, 2026
N/A· v4
7.8 HIGH· v3
N/A· v2
Stack-based buffer overflow in Windows Storage Spaces Controller allows an authorized attacker to elevate privileges locally.
-
-
Sep 9, 2026
Sep 8, 2026
N/A· v4
7.8 HIGH· v3
N/A· v2
Stack-based buffer overflow in Microsoft Local Security Authority Server (lsasrv) allows an authorized attacker to elevate privileges locally.
-
-
Sep 9, 2026
Sep 8, 2026
N/A· v4
8.0 HIGH· v3
N/A· v2
Stack-based buffer overflow in Windows Fast FAT Driver allows an authorized attacker to elevate privileges over a network.
-
-
Sep 9, 2026
Sep 8, 2026
N/A· v4
8.0 HIGH· v3
N/A· v2
Stack-based buffer overflow in Windows NTFS allows an authorized attacker to elevate privileges over a network.
-
-
Sep 9, 2026
Sep 8, 2026
N/A· v4
8.0 HIGH· v3
N/A· v2
Stack-based buffer overflow in Windows NTFS allows an authorized attacker to elevate privileges over a network.
-
-
Sep 9, 2026
Sep 8, 2026
N/A· v4
8.5 HIGH· v3
N/A· v2
Stack-based buffer overflow in SQL Server allows an authorized attacker to execute code over a network.
-
-
Sep 8, 2026
Sep 8, 2026
N/A· v4
8.8 HIGH· v3
N/A· v2
Out-of-bounds read in Microsoft Windows Media Foundation allows an unauthorized attacker to execute code over a network.
1Commvault
1Commvault
Sep 9, 2026
Sep 8, 2026
8.7 HIGH· v4
7.5 HIGH· v3
N/A· v2
CommServe contained a stack-based buffer overflow issue affecting service availability. Software customers upgrade to resolved maintenance release. Update CommServe.
-
-
Sep 8, 2026
Sep 8, 2026
2.1 LOW· v4
6.3 MEDIUM· v3
7.5 HIGH· v2
A weakness has been identified in vgmstream up to r2117. This issue affects the function sscanf of the file src/meta/txth.c of the component txth-txtp. This manipulation causes stack-based buffer overflow. The attack is...Show more
A weakness has been identified in vgmstream up to r2117. This issue affects the function sscanf of the file src/meta/txth.c of the component txth-txtp. This manipulation causes stack-based buffer overflow. The attack is possible to be carried out remotely. The exploit has been made available to the public and could be used for attacks. Patch name: 4669d37a6af94866f6f0628678f9f90d46954e8b. To fix this issue, it is recommended to deploy a patch.Show less
-
-
Sep 8, 2026
Sep 8, 2026
8.6 HIGH· v4
9.6 CRITICAL· v3
8.3 HIGH· v2
A flaw has been found in D-Link DIR-895L A1_102b07. This impacts the function sendOffer/sendACK of the file udhcpcd/serverpacket.c of the component udhcpcd. This manipulation causes stack-based buffer overflow. The attac...Show more
A flaw has been found in D-Link DIR-895L A1_102b07. This impacts the function sendOffer/sendACK of the file udhcpcd/serverpacket.c of the component udhcpcd. This manipulation causes stack-based buffer overflow. The attack can only be done within the local network. The exploit has been published and may be used.Show less
-
-
Sep 8, 2026
Sep 7, 2026
5.5 MEDIUM· v4
5.3 MEDIUM· v3
5.0 MEDIUM· v2
A flaw has been found in java-json-tools json-patch up to 1.13. Affected is the function JsonMergePatch.fromJson of the file JsonMergePatchDeserializer.java. Executing a manipulation can lead to stack-based buffer overfl...Show more
A flaw has been found in java-json-tools json-patch up to 1.13. Affected is the function JsonMergePatch.fromJson of the file JsonMergePatchDeserializer.java. Executing a manipulation can lead to stack-based buffer overflow. The attack may be performed from remote. The exploit has been published and may be used. The project was informed of the problem early through an issue report but has not responded yet.Show less
-
-
Sep 8, 2026
Sep 7, 2026
9.3 CRITICAL· v4
10.0 CRITICAL· v3
10.0 HIGH· v2
A vulnerability was determined in D-Link DIR-822A A_101. This vulnerability affects the function strcpy of the file udhcpcd/serverpacket.c of the component udhcpcd. This manipulation causes stack-based buffer overflow. T...Show more
A vulnerability was determined in D-Link DIR-822A A_101. This vulnerability affects the function strcpy of the file udhcpcd/serverpacket.c of the component udhcpcd. This manipulation causes stack-based buffer overflow. The attack is possible to be carried out remotely. The exploit has been publicly disclosed and may be utilized.Show less