Browse CVEs

HIGH 7.8 CVE-2025-24439 Substance3D - Sampler versions 4.5.2 and earlier are affected by a Heap-based Buffer Overflow vulnerability that could result in arbitrary code execu… Substance 3d Sampler 5.0+ Fix from $1,9502025-03-11 HIGH 7.5 CVE-2025-26634 Heap-based buffer overflow in Windows Core Messaging allows an authorized attacker to elevate privileges over a network. Windows 10 1507 10.0.10240.20915 / 10.0.14393.7785+ Fix from $1,9502025-03-11 HIGH 7.8 CVE-2025-24995 Heap-based buffer overflow in Kernel Streaming WOW Thunk Service Driver allows an authorized attacker to elevate privileges locally. Windows 10 1507 10.0.10240.20947 / 10.0.14393.7876+ Fix from $1,9502025-03-11 HIGH 7.8 CVE-2025-24993 KEV Heap-based buffer overflow in Windows NTFS allows an unauthorized attacker to execute code locally. Windows 10 1507 10.0.10240.20947 / 10.0.14393.7876+ Fix from $1,9502025-03-11 HIGH 7.8 CVE-2025-24985 KEV Integer overflow or wraparound in Windows Fast FAT Driver allows an unauthorized attacker to execute code locally. Windows 10 1507 10.0.10240.20947 / 10.0.14393.7876+ Fix from $1,9502025-03-11 HIGH 7.8 CVE-2025-24066 Heap-based buffer overflow in Windows Kernel-Mode Drivers allows an authorized attacker to elevate privileges locally. Windows 10 1507 10.0.10240.20947 / 10.0.14393.7876+ Fix from $1,9502025-03-11 HIGH 7.8 CVE-2025-24067 Heap-based buffer overflow in Microsoft Streaming Service allows an authorized attacker to elevate privileges locally. Windows 10 1507 10.0.10240.20947 / 10.0.14393.7876+ Fix from $1,9502025-03-11 HIGH 8.8 CVE-2025-24056 Heap-based buffer overflow in Windows Telephony Server allows an unauthorized attacker to execute code over a network. Windows 10 1507 10.0.10240.20947 / 10.0.14393.7876+ Fix from $1,9502025-03-11 HIGH 7.8 CVE-2025-24057 Heap-based buffer overflow in Microsoft Office allows an unauthorized attacker to execute code locally. 365 Apps Mitigation only Fix from $1,9502025-03-11 HIGH 7.8 CVE-2025-24050 Heap-based buffer overflow in Role: Windows Hyper-V allows an authorized attacker to elevate privileges locally. Windows 10 1607 10.0.14393.7876 / 10.0.17763.7009+ Fix from $1,9502025-03-11 HIGH 8.8 CVE-2025-24051 Heap-based buffer overflow in Windows Routing and Remote Access Service (RRAS) allows an unauthorized attacker to execute code over a network. Windows 10 1507 10.0.10240.20947 / 10.0.14393.7876+ Fix from $1,9502025-03-11 HIGH 7.8 CVE-2025-24048 Heap-based buffer overflow in Role: Windows Hyper-V allows an authorized attacker to elevate privileges locally. Windows 10 1607 10.0.14393.7876 / 10.0.17763.7009+ Fix from $1,9502025-03-11 HIGH 7.8 CVE-2025-21169 Substance3D - Designer versions 14.1 and earlier are affected by a Heap-based Buffer Overflow vulnerability that could result in arbitrary code execu… Substance 3d Designer 14.1.1+ Fix from $1,9502025-03-11 HIGH 7.8 CVE-2025-21180 Heap-based buffer overflow in Windows exFAT File System allows an unauthorized attacker to execute code locally. Windows 10 1507 10.0.10240.20947 / 10.0.14393.7876+ Fix from $1,9502025-03-11 CRITICAL 9.8 CVE-2025-2152 A vulnerability, which was classified as critical, has been found in Open Asset Import Library Assimp 5.4.3. This issue affects the function Assimp::… Assimp No fix yet Fix from $2,3002025-03-10 HIGH 8.1 CVE-2025-2153 A vulnerability, which was classified as critical, was found in HDF5 1.14.6. Affected is the function H5SM_delete of the file H5SM.c of the component… Hdf5 No fix yet Fix from $1,9502025-03-10 CRITICAL 9.8 CVE-2024-41147 An out-of-bounds write vulnerability exists in the ma_dr_flac__decode_samples__lpc functionality of Miniaudio miniaudio v0.11.21. A specially crafted… Miniaudio No fix yet Fix from $2,3002025-03-04 HIGH 8.2 CVE-2025-1943 Memory safety bugs present in Firefox 135 and Thunderbird 135. Some of these bugs showed evidence of memory corruption and we presume that with enoug… Firefox 136.0+ Fix from $1,9502025-03-04 HIGH 7.8 CVE-2025-1788 A vulnerability, which was classified as critical, was found in rizinorg rizin up to 0.8.0. This affects the function rz_utf8_encode in the library /… Rizin after 0.8.0 Fix from $1,9502025-03-01 HIGH 7.8 CVE-2025-22881 Delta Electronics CNCSoft-G2 lacks proper validation of the length of user-supplied data prior to copying it to a fixed-length heap-based buffer. If … Cncsoft G2 2.1.0.20+ Fix from $1,9502025-02-26 MEDIUM 6.5 CVE-2024-27245 Buffer overflow in some Zoom Workplace Apps and SDKs may allow an authenticated user to conduct a denial of service via network access. Workplace Desktop 5.15.17 / 5.16.15+ Fix from $1,6002025-02-25 HIGH 8.8 CVE-2024-45421 Buffer overflow in some Zoom Apps may allow an authenticated user to conduct an escalation of privilege via network access. Workplace Desktop 6.1.12 / 6.2.0+ Fix from $1,9502025-02-25 HIGH 8.8 CVE-2025-1538 A vulnerability classified as critical was found in D-Link DAP-1320 1.00. Affected by this vulnerability is the function set_ws_action of the file /d… Dap 1320 Firmware No fix yet Fix from $1,9502025-02-21 HIGH 7.5 CVE-2025-27091 OpenH264 is a free license codec library which supports H.264 encoding and decoding. A vulnerability in the decoding functions of OpenH264 codec libr… Openh264 2.5.1+ Fix from $1,9502025-02-20 HIGH 8.8 CVE-2025-1426 Heap buffer overflow in GPU in Google Chrome on Android prior to 133.0.6943.126 allowed a remote attacker to potentially exploit heap corruption via … Chrome 133.0.6943.126+ Fix from $1,9502025-02-19 HIGH 8.8 CVE-2025-0999 Heap buffer overflow in V8 in Google Chrome prior to 133.0.6943.126 allowed a remote attacker to potentially exploit heap corruption via a crafted HT… Chrome 133.0.6943.126+ Fix from $1,9502025-02-19 MEDIUM 5.1 CVE-2025-0633 Heap-based Buffer Overflow vulnerability in iniparser_dumpsection_ini() in iniparser allows attacker to read out of bound memory Mitigation only Fix from $1,6002025-02-19 MEDIUM 5.3 CVE-2025-22920 A heap buffer overflow vulnerability in FFmpeg before commit 4bf784c allows attackers to trigger a memory corruption via supplying a crafted media fi… Mitigation only Fix from $1,6002025-02-18 MEDIUM 5.5 CVE-2024-53310 A Structured Exception Handler based buffer overflow vulnerability exists in Effectmatrix Total Video Converter Command Line (TVCC) 2.50 when a speci… Mitigation only Fix from $1,6002025-02-13 HIGH 8.2 CVE-2023-31276 Heap-based buffer overflow in BMC Firmware for the Intel(R) Server Board S2600WF, Intel(R) Server Board S2600ST, Intel(R) Server Board S2600BP, befor… Mitigation only Fix from $1,9502025-02-12