CVE-2026-105593 is a heap-based buffer overflow vulnerability in Microsoft Office Access within Microsoft 365 Apps for Enterprise. This flaw allows an unauthorized attacker to execute code remotely over a network. The vulnerability has a high severity score of 8.8 and affects specific versions prior to fixed releases. Official patches have been released by Microsoft to address this issue.
CVE-2026-105592 is a heap-based buffer overflow vulnerability in Microsoft Office Access, part of Microsoft 365 Apps for Enterprise. This flaw allows an unauthorized attacker to execute code remotely over a network. The vulnerability affects certain versions prior to 16.0.14334.20974 and 16.0.17932.21056. Microsoft has released official fixes for the affected versions. The vulnerability has a high severity rating with a CVSS score of 7.5. No known exploits are currently reported in the wild.
CVE-2026-105591 is a heap-based buffer overflow vulnerability in Microsoft Office Access within Microsoft 365 Apps for Enterprise. This flaw allows an unauthorized attacker to execute code remotely over a network. The vulnerability affects specific versions prior to fixed releases and has a high severity rating with a CVSS score of 8.8. Official patches have been released by Microsoft to address this issue.
CVE-2026-102858 is a heap-based buffer overflow vulnerability in Microsoft Office OneNote for Mac, part of Microsoft Office 365. This flaw allows an unauthorized attacker to execute code remotely over a network. The vulnerability affects versions prior to 16.114.26101123. Microsoft has released an official fix in version 16.114.26101123 to address this issue.
CVE-2026-102857 is a heap-based buffer overflow vulnerability in Microsoft Office Visio within Microsoft 365 Apps for Enterprise. This flaw allows an unauthorized attacker to execute code remotely over a network. The vulnerability affects specific versions prior to the fixed releases 16.0.14334.20974 and 16.0.17932.21056. Microsoft has issued an official fix for this vulnerability. The CVSS v3.1 base score is 8.8, indicating high severity with impacts on confidentiality, integrity, and availability.
CVE-2026-102856 is a heap-based buffer overflow vulnerability in Microsoft Office Visio within Microsoft 365 Apps for Enterprise. This flaw allows an unauthorized attacker to execute code remotely over a network. The vulnerability affects certain versions prior to 16.0.14334.20974 and 16.0.17932.21056. Microsoft has released official fixes for this issue. The vulnerability has a high severity rating with a CVSS score of 8.8.
CVE-2026-102855 is a heap-based buffer overflow vulnerability in Microsoft Office Visio, part of Microsoft 365 Apps for Enterprise. This flaw allows an unauthorized attacker to execute code remotely over a network. The vulnerability affects specific versions prior to 16.0.14334.20974 and 16.0.17932.21056. Microsoft has released official fixes for these versions. The vulnerability has a high severity rating with a CVSS score of 8.8. There are no known exploits in the wild at this time.
CVE-2026-102227 is a heap-based buffer overflow vulnerability in the Windows Resilient File System (ReFS) component affecting multiple builds of Windows 10 Version 1607 and later. An authorized local attacker can exploit this flaw to execute arbitrary code with elevated privileges. Microsoft has released official patches that address this vulnerability in specific Windows 10 builds.
CVE-2026-102850 is a heap-based buffer overflow vulnerability in Microsoft Office Access within Microsoft 365 Apps for Enterprise. This flaw allows an unauthorized attacker to execute code remotely over a network. The vulnerability has a high severity score of 8.8 and affects specific versions prior to fixed releases. Official patches are available and have been released by Microsoft.
CVE-2026-102849 is a heap-based buffer overflow vulnerability in Microsoft Office Access within Microsoft 365 Apps for Enterprise. This flaw allows an unauthorized attacker to execute code remotely over a network. The vulnerability affects specific versions prior to 16.0.14334.20974 and 16.0.17932.21056. Microsoft has released official fixes for this issue.
Adobe FrameMaker 2026 contains a heap-based buffer overflow vulnerability that can lead to arbitrary code execution when a user opens a specially crafted malicious file. This vulnerability requires user interaction and affects versions up to 18.0.0.206 and 17.0.9.866. The issue has a high severity rating with a CVSS score of 7.8.
Adobe FrameMaker 2026 contains a heap-based buffer overflow vulnerability that can lead to arbitrary code execution when a user opens a specially crafted malicious file. This vulnerability requires user interaction and affects certain versions of the software. The issue has a high severity rating with a CVSS score of 7.8.
Adobe FrameMaker 2026 contains a heap-based buffer overflow vulnerability that can lead to arbitrary code execution with high impact on confidentiality, integrity, and availability. Exploitation requires user interaction by opening a malicious file. The vulnerability affects multiple versions up to 18.0.0.206 and 17.0.9.866. No patch information is provided.
MediaAgent contained a heap-based buffer overflow issue affecting service availability. Software customers upgrade to resolved maintenance release. Update Commvault installation of MediaAgents and HyperScale.
NVIDIA Warp contains a vulnerability where an attacker could cause a heap-based buffer overflow. A successful exploit of this vulnerability might lead to denial of service.
GNU Aspell version 0.60.8.2 contains a heap-based buffer overflow vulnerability in its read-only dictionary loader. The flaw arises from improper handling of size fields in a .rws dictionary header, allowing crafted dictionary files to trigger out-of-bounds writes. This can lead to heap memory corruption, causing denial of service or potentially arbitrary code execution. The issue is fixed in a commit identified as b830b6e and will be addressed in release 0.60.8.3.
FreeRDP versions 3.10.0 through 3.32.2 have a heap-based buffer overflow vulnerability in the WinPR png_write_data callback. This occurs when a realloc failure leads to writing past the allocated buffer. An attacker controlling the RDP clipboard can supply a large CF_DIB image that triggers an out-of-bounds memcpy during PNG conversion, causing the client to crash.
FreeRDP versions 3.0.0 before 3.32.0 have a heap-based buffer overflow vulnerability due to an integer truncation in license_check_stream_length. A malicious RDP server can exploit this by sending a crafted SERVER_LICENSE_REQUEST with a large scopeCount, causing out-of-bounds writes. This can lead to denial of service or remote code execution on 32-bit clients.
A heap-based buffer overflow vulnerability exists in Samsung Opensource rlottie, triggered via environment variables. This flaw can cause a denial of service by crashing the affected application. No confidentiality or integrity impacts are reported. The vulnerability has a medium severity score of 5.5 CVSS v3.1. No affected versions or patches are explicitly stated.
A heap-based buffer overflow vulnerability exists in the Apache DataSketches C++ library during deserialization of HLL sketches in LIST mode. The flaw occurs because the coupon count from untrusted input is used to copy entries into a fixed-size buffer of 8 entries without proper bounds checking. This can lead to a write of up to 988 bytes beyond the buffer, corrupting heap memory and potentially causing crashes or further exploitation. The issue affects versions from 1.0.0-incubating up to 5.2.0. Upgrading to version 5.3.0 resolves the vulnerability.