CWE-121
CVEs classified under CWE-121, newest first.
776 CVEsRSS
CVE-2026-85806Critical· 9.8Integer underflow (wrap or wraparound) in Network Policy Server (NPS) allows an unauthorized attacker to execute code over a network.
Integer underflow (wrap or wraparound) in Network Policy Server (NPS) allows an unauthorized attacker to execute code over a network.
CVE-2026-85796High· 7.8Numeric truncation error in Windows Installer allows an authorized attacker to elevate privileges locally.
Numeric truncation error in Windows Installer allows an authorized attacker to elevate privileges locally.
CVE-2026-83934High· 8.8Stack-based buffer overflow in Windows GDI+ allows an unauthorized attacker to execute code over a network.
Stack-based buffer overflow in Windows GDI+ allows an unauthorized attacker to execute code over a network.
CVE-2026-83891High· 8.8Stack-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code over a network.
Stack-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code over a network.
CVE-2026-83860High· 7.5Stack-based buffer overflow in Windows GDI allows an unauthorized attacker to deny service over a network.
Stack-based buffer overflow in Windows GDI allows an unauthorized attacker to deny service over a network.
CVE-2026-83857High· 7.8Use after free in Windows Universal Disk Format File System Driver (UDFS) allows an authorized attacker to elevate privileges locally.
Use after free in Windows Universal Disk Format File System Driver (UDFS) allows an authorized attacker to elevate privileges locally.
CVE-2026-83767High· 7.8Stack-based buffer overflow in Windows Installer allows an authorized attacker to elevate privileges locally.
Stack-based buffer overflow in Windows Installer allows an authorized attacker to elevate privileges locally.
CVE-2026-83708High· 7.0Stack-based buffer overflow in Windows Installer allows an authorized attacker to elevate privileges locally.
Stack-based buffer overflow in Windows Installer allows an authorized attacker to elevate privileges locally.
CVE-2026-83699High· 7.8Stack-based buffer overflow in Windows Client-Side Caching (CSC) Service allows an authorized attacker to elevate privileges locally.
Stack-based buffer overflow in Windows Client-Side Caching (CSC) Service allows an authorized attacker to elevate privileges locally.
CVE-2026-83643High· 8.8Stack-based buffer overflow in Windows Error Reporting allows an unauthorized attacker to execute code over a network.
Stack-based buffer overflow in Windows Error Reporting allows an unauthorized attacker to execute code over a network.
CVE-2026-70571High· 8.1Stack-based buffer overflow in Microsoft Exchange Server allows an unauthorized attacker to execute code over a network.
Stack-based buffer overflow in Microsoft Exchange Server allows an unauthorized attacker to execute code over a network.
CVE-2026-70116Medium· 4.2Stack-based buffer overflow in Windows Resilient File System (ReFS) allows an unauthorized attacker to bypass a security feature with a physical attack.
Stack-based buffer overflow in Windows Resilient File System (ReFS) allows an unauthorized attacker to bypass a security feature with a physical attack.
CVE-2026-70110High· 7.8Stack-based buffer overflow in Microsoft PostScript Printer Driver allows an unauthorized attacker to elevate privileges locally.
Stack-based buffer overflow in Microsoft PostScript Printer Driver allows an unauthorized attacker to elevate privileges locally.
CVE-2026-70069High· 8.8Stack-based buffer overflow in Windows DHCP Server allows an authorized attacker to execute code over a network.
Stack-based buffer overflow in Windows DHCP Server allows an authorized attacker to execute code over a network.
CVE-2026-70024Critical· 9.8Stack-based buffer overflow in Windows Internet Information Services allows an unauthorized attacker to execute code over a network.
Stack-based buffer overflow in Windows Internet Information Services allows an unauthorized attacker to execute code over a network.
CVE-2026-105732High· 7.3Stack-based buffer overflow in SysInternals allows an authorized attacker to elevate privileges locally.
Stack-based buffer overflow in SysInternals allows an authorized attacker to elevate privileges locally.
CVE-2026-102199Medium· 6.5Stack-based buffer overflow in Microsoft Windows Codecs Library allows an unauthorized attacker to deny service over a network.
Stack-based buffer overflow in Microsoft Windows Codecs Library allows an unauthorized attacker to deny service over a network.
CVE-2026-100216High· 7.0Stack-based buffer overflow in Windows Storage allows an authorized attacker to elevate privileges locally.
Stack-based buffer overflow in Windows Storage allows an authorized attacker to elevate privileges locally.
CVE-2026-97333High· 7.1QAPI contained a stack-based buffer overflow affecting service availability
QAPI contained a stack-based buffer overflow affecting service availability. Software customers upgrade to resolved maintenance release. Update CommServe, Web Server, Command Center and Index Server.
CVE-2026-109940Medium· 4.3PoCFreeRDP 3.0.0-beta1 before 3.32.0 on Unix builds with PKCS#11 support has a stack-based buffer overflow in wprintKeyName() in WinPR's NCrypt PKCS#11 provider
FreeRDP 3.0.0-beta1 before 3.32.0 on Unix builds with PKCS#11 support has a stack-based buffer overflow in wprintKeyName() in WinPR's NCrypt PKCS#11 provider. It hex-encodes a key's CKA_ID, which can be up to 64 bytes, into a fixed 128-b…
CVE-2026-65148High· 7.3NVIDIA DALI contains a vulnerability where an attacker could cause a stack-based buffer overflow
NVIDIA DALI contains a vulnerability where an attacker could cause a stack-based buffer overflow. A successful exploit of this vulnerability might lead to code execution, information disclosure, data tampering, and denial of service.
CVE-2026-109833Medium· 5.9A flaw was found in gnome-remote-desktop as shipped in Red Hat Enterprise Linux
A flaw was found in gnome-remote-desktop as shipped in Red Hat Enterprise Linux. In the VNC TLS read path, partial consumption of the internal peek buffer incorrectly moves remaining peeked bytes into the caller-supplied buffer instead o…
CVE-2026-109157Critical· 9.9PoCA vulnerability was found in TRENDnet TEW-432BRP 3.10B20
A vulnerability was found in TRENDnet TEW-432BRP 3.10B20. Affected by this vulnerability is the function formTcpipSetup of the file /goform/formTcpipSetup. Performing a manipulation of the argument Name results in stack-based buffer over…
CVE-2026-102076High· 7.5A vulnerability has been identified in APOGEE MBC (PPC) (BACnet) (All versions), APOGEE MBC (PPC) (P2 Ethernet) (All versions), APOGEE MEC (PPC) (BACnet) (All versions), APOGEE MEC (PPC) (P2 Ethernet) (All versions), APOGEE PXC Compact (…
A vulnerability has been identified in APOGEE MBC (PPC) (BACnet) (All versions), APOGEE MBC (PPC) (P2 Ethernet) (All versions), APOGEE MEC (PPC) (BACnet) (All versions), APOGEE MEC (PPC) (P2 Ethernet) (All versions), APOGEE PXC Compact (…
CVE-2026-102075High· 7.5A vulnerability has been identified in APOGEE MBC (PPC) (BACnet) (All versions), APOGEE MBC (PPC) (P2 Ethernet) (All versions), APOGEE MEC (PPC) (BACnet) (All versions), APOGEE MEC (PPC) (P2 Ethernet) (All versions), APOGEE PXC Compact (…
A vulnerability has been identified in APOGEE MBC (PPC) (BACnet) (All versions), APOGEE MBC (PPC) (P2 Ethernet) (All versions), APOGEE MEC (PPC) (BACnet) (All versions), APOGEE MEC (PPC) (P2 Ethernet) (All versions), APOGEE PXC Compact (…
CVE-2026-102074High· 7.5A vulnerability has been identified in APOGEE MBC (PPC) (BACnet) (All versions), APOGEE MBC (PPC) (P2 Ethernet) (All versions), APOGEE MEC (PPC) (BACnet) (All versions), APOGEE MEC (PPC) (P2 Ethernet) (All versions), APOGEE PXC Compact (…
A vulnerability has been identified in APOGEE MBC (PPC) (BACnet) (All versions), APOGEE MBC (PPC) (P2 Ethernet) (All versions), APOGEE MEC (PPC) (BACnet) (All versions), APOGEE MEC (PPC) (P2 Ethernet) (All versions), APOGEE PXC Compact (…
CVE-2026-109109Critical· 10.0A vulnerability was detected in Wavlink WL-WN530BE1-A 251117
A vulnerability was detected in Wavlink WL-WN530BE1-A 251117. This vulnerability affects the function strcpy of the file /cgi-bin/ExportAllSettings.cgi of the component Settings Export CGI. Performing a manipulation of the argument HTTP_…
CVE-2026-85457High· 8.1IBM Planning Analytics 2.0, and 2.1 could allow a remote authenticated attacker to execute arbitrary code due to a stack-based buffer overflow.
IBM Planning Analytics 2.0, and 2.1 could allow a remote authenticated attacker to execute arbitrary code due to a stack-based buffer overflow.
CVE-2026-53922Medium· 6.5PoCodhcpd is the DHCPv6, DHCPv4, and router-advertisement server used by OpenWrt
odhcpd is the DHCPv6, DHCPv4, and router-advertisement server used by OpenWrt. In commit cfddd56 and earlier, an unauthenticated host on the same link can first obtain two bindings through normal DHCPv6 SOLICIT and REQUEST exchanges and …
CVE-2026-96266High· 8.2IBM Power Systems Firmware FW1060.00 through FW1060.81 is affected by a vulnerability in host firmware configuration parsing
IBM Power Systems Firmware FW1060.00 through FW1060.81 is affected by a vulnerability in host firmware configuration parsing. An attacker with authenticated service-level access to the FSP can write specially crafted configuration data t…