CWE-122: Heap-based Buffer Overflow vulnerabilities

1,842 threats

Severity	CVSS	Signals	Threat	Source	Published
Medium	6.7	EPSS 0.3%	CVE-2026-65797Microsoft Windows 10 Version 1607 · Numeric Truncation Error Medium6.7EPSS 0.3%2026-08-11CVE Database V5CVE-2026-65797 Numeric truncation error in Windows DNS allows an authorized attacker to elevate privileges locally. EPSS 0.3%Vulnerability CWE-197	CVE Database V5	2026-08-11
Critical	9.8	EPSS 1.0%	CVE-2026-65791Microsoft Windows 10 Version 1607 · Heap-based Buffer Overflow Critical9.8EPSS 1.0%2026-08-11CVE Database V5CVE-2026-65791 Heap-based buffer overflow in Windows iSCSI Target Service allows an unauthorized attacker to execute code over a network. EPSS 1.0%Vulnerability CWE-122	CVE Database V5	2026-08-11
High	7.8	EPSS 0.3%	CVE-2026-65790Microsoft Windows 10 Version 1607 · Heap-based Buffer Overflow High7.8EPSS 0.3%2026-08-11CVE Database V5CVE-2026-65790 Heap-based buffer overflow in Windows Message Queuing allows an authorized attacker to elevate privileges locally. EPSS 0.3%Vulnerability CWE-122	CVE Database V5	2026-08-11
High	7.8	EPSS 0.3%	CVE-2026-65774Microsoft Windows 10 Version 1607 · Heap-based Buffer Overflow High7.8EPSS 0.3%2026-08-11CVE Database V5CVE-2026-65774 Heap-based buffer overflow in Windows Installer allows an authorized attacker to elevate privileges locally. EPSS 0.3%Vulnerability CWE-122	CVE Database V5	2026-08-11
High	8.1	EPSS 0.7%	CVE-2026-65679Microsoft Windows 10 Version 1607 · Heap-based Buffer Overflow High8.1EPSS 0.7%2026-08-11CVE Database V5CVE-2026-65679 Heap-based buffer overflow in Windows iSCSI Target Service allows an unauthorized attacker to execute code over a network. EPSS 0.7%Vulnerability CWE-122	CVE Database V5	2026-08-11
High	7.8	EPSS 0.5%	CVE-2026-64920Microsoft 365 Apps for Enterprise · Heap-based Buffer Overflow High7.8EPSS 0.5%2026-08-11CVE Database V5CVE-2026-64920 Heap-based buffer overflow in Microsoft Office Access allows an unauthorized attacker to execute code locally. EPSS 0.5%Vulnerability CWE-122	CVE Database V5	2026-08-11
High	7.8	EPSS 0.5%	CVE-2026-64915Microsoft 365 Apps for Enterprise · Heap-based Buffer Overflow High7.8EPSS 0.5%2026-08-11CVE Database V5CVE-2026-64915 Heap-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code locally. EPSS 0.5%Vulnerability CWE-122	CVE Database V5	2026-08-11
High	7.8	EPSS 0.5%	CVE-2026-64914Microsoft 365 Apps for Enterprise · Heap-based Buffer Overflow High7.8EPSS 0.5%2026-08-11CVE Database V5CVE-2026-64914 Heap-based buffer overflow in Microsoft Office Access allows an unauthorized attacker to execute code locally. EPSS 0.5%Vulnerability CWE-122	CVE Database V5	2026-08-11
High	7.8	EPSS 0.5%	CVE-2026-64908Microsoft 365 Apps for Enterprise · Heap-based Buffer Overflow High7.8EPSS 0.5%2026-08-11CVE Database V5CVE-2026-64908 Heap-based buffer overflow in Microsoft Office Access allows an unauthorized attacker to execute code locally. EPSS 0.5%Vulnerability CWE-122	CVE Database V5	2026-08-11
High	7.8	EPSS 0.5%	CVE-2026-64911Microsoft 365 Apps for Enterprise · Integer Overflow or Wraparound High7.8EPSS 0.5%2026-08-11CVE Database V5CVE-2026-64911 Integer overflow or wraparound in Microsoft Office allows an unauthorized attacker to execute code locally. EPSS 0.5%Vulnerability CWE-190	CVE Database V5	2026-08-11
High	7.8	EPSS 0.5%	CVE-2026-64909Microsoft 365 Apps for Enterprise · Integer Underflow High7.8EPSS 0.5%2026-08-11CVE Database V5CVE-2026-64909 Integer underflow (wrap or wraparound) in Microsoft Office allows an unauthorized attacker to execute code locally. EPSS 0.5%Vulnerability CWE-191	CVE Database V5	2026-08-11
High	7.8	EPSS 0.5%	CVE-2026-64906Microsoft 365 Apps for Enterprise · Heap-based Buffer Overflow High7.8EPSS 0.5%2026-08-11CVE Database V5CVE-2026-64906 Heap-based buffer overflow in Microsoft Office Access allows an unauthorized attacker to execute code locally. EPSS 0.5%Vulnerability CWE-122	CVE Database V5	2026-08-11
High	7.8	EPSS 0.5%	CVE-2026-64903Microsoft 365 Apps for Enterprise · Integer Overflow or Wraparound High7.8EPSS 0.5%2026-08-11CVE Database V5CVE-2026-64903 Integer overflow or wraparound in Microsoft Office allows an unauthorized attacker to execute code locally. EPSS 0.5%Vulnerability CWE-190	CVE Database V5	2026-08-11
High	7.8	EPSS 0.5%	CVE-2026-64898Microsoft 365 Apps for Enterprise · Heap-based Buffer Overflow High7.8EPSS 0.5%2026-08-11CVE Database V5CVE-2026-64898 Heap-based buffer overflow in Microsoft Office allows an unauthorized attacker to execute code locally. EPSS 0.5%Vulnerability CWE-122	CVE Database V5	2026-08-11
High	7.8	EPSS 0.5%	CVE-2026-63533Microsoft 365 Apps for Enterprise · Heap-based Buffer Overflow High7.8EPSS 0.5%2026-08-11CVE Database V5CVE-2026-63533 Heap-based buffer overflow in Microsoft Office allows an unauthorized attacker to execute code locally. EPSS 0.5%Vulnerability CWE-122	CVE Database V5	2026-08-11
High	7.8	EPSS 0.5%	CVE-2026-63532Microsoft 365 Apps for Enterprise · Integer Overflow or Wraparound High7.8EPSS 0.5%2026-08-11CVE Database V5CVE-2026-63532 Integer overflow or wraparound in Microsoft Office allows an unauthorized attacker to execute code locally. EPSS 0.5%Vulnerability CWE-190	CVE Database V5	2026-08-11
High	7.8	EPSS 0.5%	CVE-2026-62886Microsoft .NET Framework 3.5 · Integer Overflow or Wraparound High7.8EPSS 0.5%2026-08-11CVE Database V5CVE-2026-62886 Integer overflow or wraparound in .NET allows an unauthorized attacker to elevate privileges locally. EPSS 0.5%Vulnerability CWE-190	CVE Database V5	2026-08-11
High	7.8	EPSS 0.3%	CVE-2026-62885Microsoft Windows 10 Version 1607 · Heap-based Buffer Overflow High7.8EPSS 0.3%2026-08-11CVE Database V5CVE-2026-62885 Heap-based buffer overflow in Windows Win32K allows an authorized attacker to elevate privileges locally. EPSS 0.3%Vulnerability CWE-122	CVE Database V5	2026-08-11
Medium	6.7	EPSS 0.3%	CVE-2026-62883Microsoft Windows 10 Version 1607 · Numeric Truncation Error Medium6.7EPSS 0.3%2026-08-11CVE Database V5CVE-2026-62883 Numeric truncation error in Windows DNS allows an authorized attacker to elevate privileges locally. EPSS 0.3%Vulnerability CWE-197	CVE Database V5	2026-08-11
Medium	6.7	EPSS 0.3%	CVE-2026-62881Microsoft Windows 10 Version 1607 · Numeric Truncation Error Medium6.7EPSS 0.3%2026-08-11CVE Database V5CVE-2026-62881 Numeric truncation error in Windows DNS allows an authorized attacker to elevate privileges locally. EPSS 0.3%Vulnerability CWE-197	CVE Database V5	2026-08-11

Page 46 of 94