Out-of-bounds Write

The product writes data past the end, or before the beginning, of the intended buffer.

CVEs (15,391)

CVE VENDORS PRODUCTS UPDATED PUBLISHED CVSS
CVE-2024-39825 1Zoom 4Rooms WorkplaceWorkplace Desktop+1 more Jun 17, 2026 Aug 14, 2024 N/A· v4 8.5 HIGH· v3 N/A· v2 Buffer overflow in some Zoom Workplace Apps and Rooms Clients may allow an authenticated user to conduct an escalation of privilege via network access.
CVE-2024-41853 1Adobe 1Indesign Jun 17, 2026 Aug 14, 2024 N/A· v4 7.8 HIGH· v3 N/A· v2 InDesign Desktop versions ID19.4, ID18.5.2 and earlier are affected by a Heap-based Buffer Overflow vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this iss...Show more InDesign Desktop versions ID19.4, ID18.5.2 and earlier are affected by a Heap-based Buffer Overflow vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file.Show less
CVE-2024-41852 1Adobe 1Indesign Jun 17, 2026 Aug 14, 2024 N/A· v4 7.8 HIGH· v3 N/A· v2 InDesign Desktop versions ID19.4, ID18.5.2 and earlier are affected by a Stack-based Buffer Overflow vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this is...Show more InDesign Desktop versions ID19.4, ID18.5.2 and earlier are affected by a Stack-based Buffer Overflow vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file.Show less
CVE-2024-41850 1Adobe 1Indesign Jun 17, 2026 Aug 14, 2024 N/A· v4 7.8 HIGH· v3 N/A· v2 InDesign Desktop versions ID19.4, ID18.5.2 and earlier are affected by a Heap-based Buffer Overflow vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this iss...Show more InDesign Desktop versions ID19.4, ID18.5.2 and earlier are affected by a Heap-based Buffer Overflow vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file.Show less
CVE-2024-41840 1Adobe 1Bridge Jun 17, 2026 Aug 14, 2024 N/A· v4 7.8 HIGH· v3 N/A· v2 Bridge versions 13.0.8, 14.1.1 and earlier are affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user i...Show more Bridge versions 13.0.8, 14.1.1 and earlier are affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file.Show less
CVE-2024-39423 1Adobe 4Acrobat Acrobat DcAcrobat Reader+1 more Jun 17, 2026 Aug 14, 2024 N/A· v4 7.8 HIGH· v3 N/A· v2 Acrobat Reader versions 20.005.30636, 24.002.20965, 24.002.20964, 24.001.30123 and earlier are affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current...Show more Acrobat Reader versions 20.005.30636, 24.002.20965, 24.002.20964, 24.001.30123 and earlier are affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file.Show less
CVE-2024-39394 1Adobe 1Indesign Jun 17, 2026 Aug 14, 2024 N/A· v4 7.8 HIGH· v3 N/A· v2 InDesign Desktop versions ID19.4, ID18.5.2 and earlier are affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue req...Show more InDesign Desktop versions ID19.4, ID18.5.2 and earlier are affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file.Show less
CVE-2024-39391 1Adobe 1Indesign Jun 17, 2026 Aug 14, 2024 N/A· v4 7.8 HIGH· v3 N/A· v2 InDesign Desktop versions ID19.4, ID18.5.2 and earlier are affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue req...Show more InDesign Desktop versions ID19.4, ID18.5.2 and earlier are affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file.Show less
CVE-2024-39390 1Adobe 1Indesign Jun 17, 2026 Aug 14, 2024 N/A· v4 7.8 HIGH· v3 N/A· v2 InDesign Desktop versions ID19.4, ID18.5.2 and earlier are affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue req...Show more InDesign Desktop versions ID19.4, ID18.5.2 and earlier are affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file.Show less
CVE-2024-39389 1Adobe 1Indesign Jun 17, 2026 Aug 14, 2024 N/A· v4 7.8 HIGH· v3 N/A· v2 InDesign Desktop versions ID19.4, ID18.5.2 and earlier are affected by a Stack-based Buffer Overflow vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this is...Show more InDesign Desktop versions ID19.4, ID18.5.2 and earlier are affected by a Stack-based Buffer Overflow vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file.Show less
CVE-2024-39386 1Adobe 1Bridge Jun 17, 2026 Aug 14, 2024 N/A· v4 7.8 HIGH· v3 N/A· v2 Bridge versions 13.0.8, 14.1.1 and earlier are affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user i...Show more Bridge versions 13.0.8, 14.1.1 and earlier are affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file.Show less
CVE-2024-34133 1Adobe 1Illustrator Jun 17, 2026 Aug 14, 2024 N/A· v4 7.8 HIGH· v3 N/A· v2 Illustrator versions 28.5, 27.9.4 and earlier are affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires use...Show more Illustrator versions 28.5, 27.9.4 and earlier are affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file.Show less
CVE-2024-34124 1Adobe 1Dimension Jun 17, 2026 Aug 14, 2024 N/A· v4 7.8 HIGH· v3 N/A· v2 Dimension versions 3.4.11 and earlier are affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user intera...Show more Dimension versions 3.4.11 and earlier are affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file.Show less
CVE-2024-23497 1Intel 1Ethernet 800 Series Controllers Driver Jun 17, 2026 Aug 14, 2024 9.3 CRITICAL· v4 8.8 HIGH· v3 N/A· v2 Out-of-bounds write in Linux kernel mode driver for some Intel(R) Ethernet Network Controllers and Adapters before version 28.3 may allow an authenticated user to potentially enable escalation of privilege via local acce...Show more Out-of-bounds write in Linux kernel mode driver for some Intel(R) Ethernet Network Controllers and Adapters before version 28.3 may allow an authenticated user to potentially enable escalation of privilege via local access.Show less
CVE-2024-41864 1Adobe 1Substance 3d Designer Jun 17, 2026 Aug 14, 2024 N/A· v4 7.8 HIGH· v3 N/A· v2 Substance3D - Designer versions 13.1.2 and earlier are affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue require...Show more Substance3D - Designer versions 13.1.2 and earlier are affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file.Show less
CVE-2024-20083 1Google 1Android Jun 17, 2026 Aug 14, 2024 N/A· v4 9.8 CRITICAL· v3 N/A· v2 In venc, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation. P...Show more In venc, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS08810810 / ALPS08805789; Issue ID: MSV-1502.Show less
CVE-2023-20513 - - Jun 17, 2026 Aug 13, 2024 N/A· v4 3.3 LOW· v3 N/A· v2 An insufficient bounds check in PMFW (Power Management Firmware) may allow an attacker to utilize a malicious VF (virtualization function) to send a malformed message, potentially resulting in a denial of service.
CVE-2022-23815 1Amd 16Athlon Gold 3150g Firmware Athlon Gold 3150u FirmwareAthlon Gold Pro 3150g Firmware+13 more Jun 17, 2026 Aug 13, 2024 N/A· v4 8.2 HIGH· v3 N/A· v2 Improper bounds checking in APCB firmware may allow an attacker to perform an out of bounds write, corrupting the APCB entry, potentially leading to arbitrary code execution.
CVE-2021-46772 - - Jun 17, 2026 Aug 13, 2024 N/A· v4 3.9 LOW· v3 N/A· v2 Insufficient input validation in the ABL may allow a privileged attacker with access to the BIOS menu or UEFI shell to tamper with the structure headers in SPI ROM causing an out of bounds memory read and write, potentia...Show more Insufficient input validation in the ABL may allow a privileged attacker with access to the BIOS menu or UEFI shell to tamper with the structure headers in SPI ROM causing an out of bounds memory read and write, potentially resulting in memory corruption or denial of service.Show less
CVE-2021-26344 1Amd 69Epyc 7001 Firmware Epyc 7203 FirmwareEpyc 7203p Firmware+66 more Jun 17, 2026 Aug 13, 2024 N/A· v4 8.2 HIGH· v3 N/A· v2 An out of bounds memory write when processing the AMD PSP1 Configuration Block (APCB) could allow an attacker with access the ability to modify the BIOS image, and the ability to sign the resulting image, to potentially...Show more An out of bounds memory write when processing the AMD PSP1 Configuration Block (APCB) could allow an attacker with access the ability to modify the BIOS image, and the ability to sign the resulting image, to potentially modify the APCB block resulting in arbitrary code execution.Show less

Previous 1...203204205...770 Next