Heap-based Buffer Overflow

A heap overflow condition is a buffer overflow, where the buffer that can be overwritten is allocated in the heap portion of memory, generally meaning that the buffer was allocated using a routine such as malloc().

CVEs (3,698)

CVE VENDORS PRODUCTS UPDATED PUBLISHED CVSS
CVE-2024-28912 1Microsoft 3Ole Db Driver For Sql Server Sql Server 2019Sql Server 2022 Jun 17, 2026 Apr 9, 2024 N/A· v4 8.8 HIGH· v3 N/A· v2 Microsoft OLE DB Driver for SQL Server Remote Code Execution Vulnerability
CVE-2024-28911 1Microsoft 3Ole Db Driver For Sql Server Sql Server 2019Sql Server 2022 Jun 17, 2026 Apr 9, 2024 N/A· v4 8.8 HIGH· v3 N/A· v2 Microsoft OLE DB Driver for SQL Server Remote Code Execution Vulnerability
CVE-2024-28910 1Microsoft 3Ole Db Driver For Sql Server Sql Server 2019Sql Server 2022 Jun 17, 2026 Apr 9, 2024 N/A· v4 8.8 HIGH· v3 N/A· v2 Microsoft OLE DB Driver for SQL Server Remote Code Execution Vulnerability
CVE-2024-28909 1Microsoft 3Ole Db Driver For Sql Server Sql Server 2019Sql Server 2022 Jun 17, 2026 Apr 9, 2024 N/A· v4 8.8 HIGH· v3 N/A· v2 Microsoft OLE DB Driver for SQL Server Remote Code Execution Vulnerability
CVE-2024-28908 1Microsoft 3Ole Db Driver For Sql Server Sql Server 2019Sql Server 2022 Jun 17, 2026 Apr 9, 2024 N/A· v4 8.8 HIGH· v3 N/A· v2 Microsoft OLE DB Driver for SQL Server Remote Code Execution Vulnerability
CVE-2024-28906 1Microsoft 3Ole Db Driver For Sql Server Sql Server 2019Sql Server 2022 Jun 17, 2026 Apr 9, 2024 N/A· v4 8.8 HIGH· v3 N/A· v2 Microsoft OLE DB Driver for SQL Server Remote Code Execution Vulnerability
CVE-2024-28896 1Microsoft 13Windows 10 1507 Windows 10 1607Windows 10 1809+10 more Jun 17, 2026 Apr 9, 2024 N/A· v4 7.5 HIGH· v3 N/A· v2 Secure Boot Security Feature Bypass Vulnerability
CVE-2024-26256 3Fedoraproject LibarchiveMicrosoft 5Fedora LibarchiveWindows 11 22h2+2 more Jun 17, 2026 Apr 9, 2024 N/A· v4 7.8 HIGH· v3 N/A· v2 Libarchive Remote Code Execution Vulnerability
CVE-2024-26239 1Microsoft 13Windows 10 1507 Windows 10 1607Windows 10 1809+10 more Jun 17, 2026 Apr 9, 2024 N/A· v4 7.8 HIGH· v3 N/A· v2 Windows Telephony Server Elevation of Privilege Vulnerability
CVE-2024-26229 1Microsoft 14Windows 10 1507 Windows 10 1607Windows 10 1809+11 more Jun 17, 2026 Apr 9, 2024 N/A· v4 7.8 HIGH· v3 N/A· v2 Windows CSC Service Elevation of Privilege Vulnerability
CVE-2024-26214 1Microsoft 14Windows 10 1507 Windows 10 1607Windows 10 1809+11 more Jun 17, 2026 Apr 9, 2024 N/A· v4 8.8 HIGH· v3 N/A· v2 Microsoft WDAC SQL Server ODBC Driver Remote Code Execution Vulnerability
CVE-2024-26211 1Microsoft 13Windows 10 1507 Windows 10 1607Windows 10 1809+10 more Jun 17, 2026 Apr 9, 2024 N/A· v4 7.8 HIGH· v3 N/A· v2 Windows Remote Access Connection Manager Elevation of Privilege Vulnerability
CVE-2024-26210 1Microsoft 14Windows 10 1507 Windows 10 1607Windows 10 1809+11 more Jun 17, 2026 Apr 9, 2024 N/A· v4 8.8 HIGH· v3 N/A· v2 Microsoft WDAC OLE DB provider for SQL Server Remote Code Execution Vulnerability
CVE-2024-26205 1Microsoft 14Windows 10 1507 Windows 10 1607Windows 10 1809+11 more Jun 17, 2026 Apr 9, 2024 N/A· v4 8.8 HIGH· v3 N/A· v2 Windows Routing and Remote Access Service (RRAS) Remote Code Execution Vulnerability
CVE-2024-26202 1Microsoft 5Windows Server 2012 Windows Server 2016Windows Server 2019+2 more Jun 17, 2026 Apr 9, 2024 N/A· v4 7.2 HIGH· v3 N/A· v2 DHCP Server Service Remote Code Execution Vulnerability
CVE-2024-26200 1Microsoft 14Windows 10 1507 Windows 10 1607Windows 10 1809+11 more Jun 17, 2026 Apr 9, 2024 N/A· v4 8.8 HIGH· v3 N/A· v2 Windows Routing and Remote Access Service (RRAS) Remote Code Execution Vulnerability
CVE-2024-26195 1Microsoft 6Windows Server 2008 Windows Server 2012Windows Server 2016+3 more Jun 17, 2026 Apr 9, 2024 N/A· v4 7.2 HIGH· v3 N/A· v2 DHCP Server Service Remote Code Execution Vulnerability
CVE-2024-26179 1Microsoft 14Windows 10 1507 Windows 10 1607Windows 10 1809+11 more Jun 17, 2026 Apr 9, 2024 N/A· v4 8.8 HIGH· v3 N/A· v2 Windows Routing and Remote Access Service (RRAS) Remote Code Execution Vulnerability
CVE-2024-26168 1Microsoft 13Windows 10 1507 Windows 10 1607Windows 10 1809+10 more Jun 17, 2026 Apr 9, 2024 N/A· v4 6.8 MEDIUM· v3 N/A· v2 Secure Boot Security Feature Bypass Vulnerability
CVE-2024-27341 1Tungstenautomation 1Power Pdf Jun 17, 2026 Apr 3, 2024 N/A· v4 7.8 HIGH· v3 N/A· v2 Kofax Power PDF PDF File Parsing Heap-based Buffer Overflow Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Kofax Power PDF. User int...Show more Kofax Power PDF PDF File Parsing Heap-based Buffer Overflow Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Kofax Power PDF. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsing of PDF files. The issue results from the lack of proper validation of the length of user-supplied data prior to copying it to a fixed-length heap-based buffer. An attacker can leverage this vulnerability to execute code in the context of the current process. Was ZDI-CAN-22927.Show less

Previous 1...141142143...185 Next