Heap-based Buffer Overflow

A heap overflow condition is a buffer overflow, where the buffer that can be overwritten is allocated in the heap portion of memory, generally meaning that the buffer was allocated using a routine such as malloc().

CVEs (3,703)

CVE VENDORS PRODUCTS UPDATED PUBLISHED CVSS
CVE-2026-27312 1Adobe 1Bridge Aug 28, 2026 Apr 14, 2026 N/A· v4 7.8 HIGH· v3 N/A· v2 Bridge versions 16.0.2, 15.1.4 and earlier are affected by a Heap-based Buffer Overflow vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires...Show more Bridge versions 16.0.2, 15.1.4 and earlier are affected by a Heap-based Buffer Overflow vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file.Show less
CVE-2026-27311 1Adobe 1Bridge Aug 28, 2026 Apr 14, 2026 N/A· v4 7.8 HIGH· v3 N/A· v2 Bridge versions 16.0.2, 15.1.4 and earlier are affected by a Heap-based Buffer Overflow vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires...Show more Bridge versions 16.0.2, 15.1.4 and earlier are affected by a Heap-based Buffer Overflow vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file.Show less
CVE-2026-27310 1Adobe 1Bridge Aug 28, 2026 Apr 14, 2026 N/A· v4 7.8 HIGH· v3 N/A· v2 Bridge versions 16.0.2, 15.1.4 and earlier are affected by a Heap-based Buffer Overflow vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires...Show more Bridge versions 16.0.2, 15.1.4 and earlier are affected by a Heap-based Buffer Overflow vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file.Show less
CVE-2026-34629 1Adobe 1Indesign Aug 28, 2026 Apr 14, 2026 N/A· v4 7.8 HIGH· v3 N/A· v2 InDesign Desktop versions 20.5.2, 21.2 and earlier are affected by a Heap-based Buffer Overflow vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue r...Show more InDesign Desktop versions 20.5.2, 21.2 and earlier are affected by a Heap-based Buffer Overflow vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file.Show less
CVE-2026-34628 1Adobe 1Indesign Aug 28, 2026 Apr 14, 2026 N/A· v4 7.8 HIGH· v3 N/A· v2 InDesign Desktop versions 20.5.2, 21.2 and earlier are affected by a Heap-based Buffer Overflow vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue r...Show more InDesign Desktop versions 20.5.2, 21.2 and earlier are affected by a Heap-based Buffer Overflow vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file.Show less
CVE-2026-34627 1Adobe 1Indesign Aug 28, 2026 Apr 14, 2026 N/A· v4 7.8 HIGH· v3 N/A· v2 InDesign Desktop versions 20.5.2, 21.2 and earlier are affected by a Heap-based Buffer Overflow vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue r...Show more InDesign Desktop versions 20.5.2, 21.2 and earlier are affected by a Heap-based Buffer Overflow vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file.Show less
CVE-2026-32223 1Microsoft 4Windows 11 24h2 Windows 11 25h2Windows 11 26h1+1 more Jul 25, 2026 Apr 14, 2026 N/A· v4 6.8 MEDIUM· v3 N/A· v2 Heap-based buffer overflow in Windows USB Print Driver allows an unauthorized attacker to elevate privileges with a physical attack.
CVE-2026-32221 1Microsoft 4Windows 11 24h2 Windows 11 25h2Windows 11 26h1+1 more Jul 25, 2026 Apr 14, 2026 N/A· v4 8.4 HIGH· v3 N/A· v2 Heap-based buffer overflow in Microsoft Graphics Component allows an unauthorized attacker to execute code locally.
CVE-2026-32149 1Microsoft 13Windows 10 1607 Windows 10 1809Windows 10 21h2+10 more Oct 26, 2026 Apr 14, 2026 N/A· v4 7.3 HIGH· v3 N/A· v2 Improper input validation in Windows Hyper-V allows an authorized attacker to execute code locally.
CVE-2026-32093 1Microsoft 14Windows 10 1607 Windows 10 1809Windows 10 21h2+11 more Oct 26, 2026 Apr 14, 2026 N/A· v4 7.0 HIGH· v3 N/A· v2 Concurrent execution using shared resource with improper synchronization ('race condition') in Function Discovery Service (fdwsd.dll) allows an authorized attacker to elevate privileges locally.
CVE-2026-32087 1Microsoft 14Windows 10 1607 Windows 10 1809Windows 10 21h2+11 more Oct 26, 2026 Apr 14, 2026 N/A· v4 7.0 HIGH· v3 N/A· v2 Heap-based buffer overflow in Function Discovery Service (fdwsd.dll) allows an authorized attacker to elevate privileges locally.
CVE-2026-26180 1Microsoft 14Windows 10 1607 Windows 10 1809Windows 10 21h2+11 more Oct 26, 2026 Apr 14, 2026 N/A· v4 7.8 HIGH· v3 N/A· v2 Heap-based buffer overflow in Windows Kernel allows an authorized attacker to elevate privileges locally.
CVE-2026-26176 1Microsoft 14Windows 10 1607 Windows 10 1809Windows 10 21h2+11 more Oct 26, 2026 Apr 14, 2026 N/A· v4 7.8 HIGH· v3 N/A· v2 Heap-based buffer overflow in Windows Client Side Caching driver (csc.sys) allows an authorized attacker to elevate privileges locally.
CVE-2026-26156 1Microsoft 13Windows 10 1607 Windows 10 1809Windows 10 21h2+10 more Oct 26, 2026 Apr 14, 2026 N/A· v4 7.8 HIGH· v3 N/A· v2 Heap-based buffer overflow in Windows Hyper-V allows an unauthorized attacker to execute code locally.
CVE-2026-27286 1Adobe 1Indesign Oct 26, 2026 Apr 14, 2026 N/A· v4 5.5 MEDIUM· v3 N/A· v2 InDesign Desktop versions 20.5.2, 21.2 and earlier are affected by a Heap-based Buffer Overflow vulnerability that could lead to memory exposure. An attacker could leverage this vulnerability to disclose sensitive inform...Show more InDesign Desktop versions 20.5.2, 21.2 and earlier are affected by a Heap-based Buffer Overflow vulnerability that could lead to memory exposure. An attacker could leverage this vulnerability to disclose sensitive information stored in memory. Exploitation of this issue requires user interaction in that a victim must open a malicious file.Show less
CVE-2026-27285 1Adobe 1Indesign Oct 26, 2026 Apr 14, 2026 N/A· v4 5.5 MEDIUM· v3 N/A· v2 InDesign Desktop versions 20.5.2, 21.2 and earlier are affected by a Heap-based Buffer Overflow vulnerability that could lead to application denial-of-service. An attacker could exploit this vulnerability to crash the ap...Show more InDesign Desktop versions 20.5.2, 21.2 and earlier are affected by a Heap-based Buffer Overflow vulnerability that could lead to application denial-of-service. An attacker could exploit this vulnerability to crash the application or disrupt its functionality. Exploitation of this issue requires user interaction in that a victim must open a malicious file.Show less
CVE-2026-27238 1Adobe 1Indesign Oct 26, 2026 Apr 14, 2026 N/A· v4 7.8 HIGH· v3 N/A· v2 InDesign Desktop versions 20.5.2, 21.2 and earlier are affected by a Heap-based Buffer Overflow vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue r...Show more InDesign Desktop versions 20.5.2, 21.2 and earlier are affected by a Heap-based Buffer Overflow vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file.Show less
CVE-2026-22828 1Fortinet 2Fortianalyzer Cloud Fortimanager Cloud Oct 26, 2026 Apr 14, 2026 N/A· v4 8.1 HIGH· v3 N/A· v2 A heap-based buffer overflow vulnerability in Fortinet FortiAnalyzer Cloud 7.6.2 through 7.6.4, FortiManager Cloud 7.6.2 through 7.6.4 may allow a remote unauthenticated attacker to execute arbitrary code or commands via...Show more A heap-based buffer overflow vulnerability in Fortinet FortiAnalyzer Cloud 7.6.2 through 7.6.4, FortiManager Cloud 7.6.2 through 7.6.4 may allow a remote unauthenticated attacker to execute arbitrary code or commands via specifically crafted requests. Successful exploitation would require a large amount of effort in preparation because of ASLR and network segmentationShow less
CVE-2026-40310 1Imagemagick 1Imagemagick Jun 17, 2026 Apr 13, 2026 N/A· v4 5.5 MEDIUM· v3 N/A· v2 ImageMagick is free and open-source software used for editing and manipulating digital images. Versions below both 7.1.2-19 and 6.9.13-44, contain a heap out-of-bounds write in the JP2 encoder with when a user specifies...Show more ImageMagick is free and open-source software used for editing and manipulating digital images. Versions below both 7.1.2-19 and 6.9.13-44, contain a heap out-of-bounds write in the JP2 encoder with when a user specifies an invalid sampling index. This issue has been fixed in versions 6.9.13-44 and 7.1.2-19.Show less
CVE-2026-40183 1Imagemagick 1Imagemagick Jun 17, 2026 Apr 13, 2026 N/A· v4 5.5 MEDIUM· v3 N/A· v2 ImageMagick is free and open-source software used for editing and manipulating digital images. In versions below 7.1.2-19, the JXL encoder has an heap write overflow when a user specifies that the image should be encoded...Show more ImageMagick is free and open-source software used for editing and manipulating digital images. In versions below 7.1.2-19, the JXL encoder has an heap write overflow when a user specifies that the image should be encoded as 16 bit floats. This issue has been fixed in version 7.1.2-19.Show less

Previous 1...808182...186 Next