← Back
CWE-121

3,751 CVEs • Abstraction: Variant • Likelihood of Exploit: High

Stack-based Buffer Overflow

A stack-based buffer overflow condition is a condition where the buffer being overwritten is allocated on the stack (i.e., is a local variable or, rarely, a parameter to a function).

JSON object

Loading...

CVEs (3,751)

CVE
VENDORS
PRODUCTS
UPDATED
PUBLISHED
CVSS
1Microsoft
7365 Apps
Microsoft 365Office 2019+4 more
Jul 16, 2026
Jul 14, 2026
N/A· v4
7.8 HIGH· v3
N/A· v2
Stack-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code locally.
1Microsoft
4Windows 11 24h2
Windows 11 25h2Windows 11 26h1+1 more
Jul 22, 2026
Jul 14, 2026
N/A· v4
7.8 HIGH· v3
N/A· v2
Stack-based buffer overflow in Windows Resilient File System (ReFS) allows an unauthorized attacker to execute code locally.
1Microsoft
12Windows 10 1607
Windows 10 1809Windows 10 21h2+9 more
Jul 20, 2026
Jul 14, 2026
N/A· v4
7.8 HIGH· v3
N/A· v2
Stack-based buffer overflow in Windows NTFS allows an authorized attacker to elevate privileges locally.
-
-
Jul 22, 2026
Jul 14, 2026
N/A· v4
7.5 HIGH· v3
N/A· v2
Stack-based buffer overflow in Active Directory Federation Services (AD FS) allows an unauthorized attacker to deny service over a network.
1Microsoft
12Windows 10 1607
Windows 10 1809Windows 10 21h2+9 more
Jul 22, 2026
Jul 14, 2026
N/A· v4
7.8 HIGH· v3
N/A· v2
Stack-based buffer overflow in Windows App Installer allows an authorized attacker to elevate privileges locally.
1Microsoft
16365 Copilot
Microsoft 365Office 2021+13 more
Jul 22, 2026
Jul 14, 2026
N/A· v4
7.8 HIGH· v3
N/A· v2
Stack-based buffer overflow in Windows GDI allows an authorized attacker to elevate privileges locally.
-
-
Jul 22, 2026
Jul 14, 2026
N/A· v4
7.5 HIGH· v3
N/A· v2
Stack-based buffer overflow in Active Directory Federation Services allows an unauthorized attacker to deny service over a network.
-
-
Jul 22, 2026
Jul 14, 2026
N/A· v4
7.5 HIGH· v3
N/A· v2
Stack-based buffer overflow in Active Directory Federation Services allows an unauthorized attacker to deny service over a network.
1Microsoft
7Windows 10 1607
Windows 10 1809Windows Server 2012+4 more
Jul 22, 2026
Jul 14, 2026
N/A· v4
7.5 HIGH· v3
N/A· v2
Stack-based buffer overflow in Active Directory Federation Services allows an unauthorized attacker to deny service over a network.
-
-
Jul 15, 2026
Jul 14, 2026
N/A· v4
7.4 HIGH· v3
N/A· v2
Buffer Overflow in the entry handler of the TraceEvent() system call could allow an attacker with local access to cause information disclosure, data tampering or a crash of the QNX Neutrino kernel.
1Microsoft
7365 Apps
ExcelMicrosoft 365+4 more
Jul 16, 2026
Jul 14, 2026
N/A· v4
7.8 HIGH· v3
N/A· v2
Stack-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code locally.
1Microsoft
12Windows 10 1607
Windows 10 1809Windows 10 21h2+9 more
Jul 20, 2026
Jul 14, 2026
N/A· v4
7.5 HIGH· v3
N/A· v2
Stack-based buffer overflow in Active Directory Federation Services (AD FS) allows an unauthorized attacker to deny service over a network.
1Microsoft
12Windows 10 1607
Windows 10 1809Windows 10 21h2+9 more
Jul 22, 2026
Jul 14, 2026
N/A· v4
7.5 HIGH· v3
N/A· v2
Stack-based buffer overflow in Active Directory Federation Services allows an unauthorized attacker to deny service over a network.
1Microsoft
11Windows 10 1607
Windows 10 1809Windows 10 21h2+8 more
Jul 16, 2026
Jul 14, 2026
N/A· v4
7.8 HIGH· v3
N/A· v2
Stack-based buffer overflow in Windows Resilient File System (ReFS) allows an authorized attacker to elevate privileges locally.
1Microsoft
12Windows 10 1607
Windows 10 1809Windows 10 21h2+9 more
Jul 22, 2026
Jul 14, 2026
N/A· v4
7.8 HIGH· v3
N/A· v2
Stack-based buffer overflow in Windows NTFS allows an authorized attacker to elevate privileges locally.
-
-
Jul 15, 2026
Jul 14, 2026
8.9 HIGH· v4
9.8 CRITICAL· v3
10.0 HIGH· v2
A weakness has been identified in Totolink NR1800X 9.1.0u.6279_B20210910. Affected by this issue is the function Form_Logout of the file /formLogout.htm of the component lighttpd. This manipulation of the argument Host c...Show more
A weakness has been identified in Totolink NR1800X 9.1.0u.6279_B20210910. Affected by this issue is the function Form_Logout of the file /formLogout.htm of the component lighttpd. This manipulation of the argument Host causes stack-based buffer overflow. The attack is possible to be carried out remotely. The exploit has been made available to the public and could be used for attacks.Show less
1Fortinet
3Fortios
FortipamFortiproxy
Aug 11, 2026
Jul 14, 2026
N/A· v4
6.6 MEDIUM· v3
N/A· v2
A stack-based buffer overflow vulnerability in Fortinet FortiOS 7.4.0 through 7.4.1, FortiOS 7.2 all versions, FortiPAM 1.8.0 through 1.8.2, FortiPAM 1.7 all versions, FortiPAM 1.6 all versions, FortiPAM 1.5 all versions...Show more
A stack-based buffer overflow vulnerability in Fortinet FortiOS 7.4.0 through 7.4.1, FortiOS 7.2 all versions, FortiPAM 1.8.0 through 1.8.2, FortiPAM 1.7 all versions, FortiPAM 1.6 all versions, FortiPAM 1.5 all versions, FortiPAM 1.4 all versions, FortiPAM 1.3 all versions, FortiPAM 1.2 all versions, FortiPAM 1.1 all versions, FortiPAM 1.0 all versions, FortiProxy 7.4.0 through 7.4.13, FortiProxy 7.2 all versions may allow a privileged authenticated attacker who can bypass stack protection and ASLR to execute arbitrary code or commands via crafted HTTP requests.Show less
-
-
Jul 15, 2026
Jul 14, 2026
N/A· v4
7.5 HIGH· v3
N/A· v2
Buffer Overflow vulnerability in aMULE-Project aMule v.2.3.3 allows a remote attacker to cause a denial of service via the OP_SERVERMESSAGE Handler.
-
-
Jul 14, 2026
Jul 14, 2026
7.4 HIGH· v4
8.8 HIGH· v3
9.0 HIGH· v2
A vulnerability has been found in Tenda BE12 Pro 16.03.66.23. The impacted element is the function fromVirtualSer of the file /goform/VirtualSer. Such manipulation of the argument page leads to stack-based buffer overflo...Show more
A vulnerability has been found in Tenda BE12 Pro 16.03.66.23. The impacted element is the function fromVirtualSer of the file /goform/VirtualSer. Such manipulation of the argument page leads to stack-based buffer overflow. The attack can be launched remotely. The exploit has been disclosed to the public and may be used.Show less
-
-
Jul 15, 2026
Jul 14, 2026
7.4 HIGH· v4
8.8 HIGH· v3
9.0 HIGH· v2
A flaw has been found in Tenda BE12 Pro 16.03.66.23. The affected element is the function fromDhcpListClient of the file /goform/DhcpListClient. This manipulation of the argument page causes stack-based buffer overflow....Show more
A flaw has been found in Tenda BE12 Pro 16.03.66.23. The affected element is the function fromDhcpListClient of the file /goform/DhcpListClient. This manipulation of the argument page causes stack-based buffer overflow. The attack can be initiated remotely. The exploit has been published and may be used.Show less