The internet is broken right now.

Use after free in Microsoft QUIC allows an unauthorized attacker to execute code over a network.

Memory safety OS & kernel Microsoft Windows 11 23h2

Use after free in Windows Message Queuing Queue Manager allows an unauthorized attacker to execute code over a network.

Memory safety OS & kernel Microsoft Windows 10 1607

Heap-based buffer overflow in Windows Text Shaping allows an unauthorized attacker to execute code over a network.

Memory safety OS & kernel Microsoft Windows 10 1607

Heap-based buffer overflow in Windows Error Reporting allows an unauthorized attacker to execute code over a network.

Memory safety OS & kernel Microsoft Windows 10 1607

Out-of-bounds read in Microsoft Azure Attestation service and Device Health Attestation Service allows an unauthorized attacker to disclose information over a network.

Memory safety

Heap-based buffer overflow in Windows Text Shaping allows an unauthorized attacker to execute code over a network.

Memory safety OS & kernel Microsoft Windows 10 1607

Heap-based buffer overflow in Windows Rich Text Edit Control allows an unauthorized attacker to execute code over a network.

Memory safety OS & kernel

Heap-based buffer overflow in DNS Server allows an authorized attacker to disclose information over a network.

Memory safety OS & kernel Microsoft Windows 10 1607

Out-of-bounds read in DNS Server allows an authorized attacker to disclose information over a network.

Memory safety OS & kernel Microsoft Windows 10 1607

Heap-based buffer overflow in Windows Hyper-V allows an authorized attacker to disclose information over a network.

Memory safety OS & kernel Microsoft Windows 10 1809

Use after free in Windows Netlogon allows an authorized attacker to deny service over a network.

Memory safety OS & kernel Microsoft Windows 10 1607

Out-of-bounds read in DNS Server allows an authorized attacker to disclose information over a network.

Memory safety OS & kernel Microsoft Windows 10 1607

Out-of-bounds read in DNS Server allows an authorized attacker to disclose information over a network.

Memory safety OS & kernel Microsoft Windows 10 1607

Out-of-bounds read in DNS Server allows an authorized attacker to disclose information over a network.

Memory safety OS & kernel Microsoft Windows 10 1607

Double free in Windows Internet Information Services allows an unauthorized attacker to deny service over a network.

Memory safety OS & kernel Microsoft Windows 11 23h2

Out-of-bounds read in Microsoft Azure Attestation service and Device Health Attestation Service allows an unauthorized attacker to disclose information over a network.

Memory safety OS & kernel Microsoft Windows Server 2019

Heap-based buffer overflow in Microsoft PostScript Printer Driver allows an unauthorized attacker to execute code over a network.

Memory safety OS & kernel Microsoft Windows 10 1607

Heap-based buffer overflow in Microsoft PostScript Printer Driver allows an unauthorized attacker to execute code over a network.

Memory safety OS & kernel Microsoft Windows 10 1607

Out-of-bounds read in Function Discovery Service (fdwsd.dll) allows an unauthorized attacker to disclose information over a network.

Memory safety OS & kernel Microsoft Windows 10 1607

Integer underflow (wrap or wraparound) in Windows PowerShell allows an unauthorized attacker to execute code over a network.

Memory safety OS & kernel Microsoft Windows 10 1607

Out-of-bounds write in RPC Runtime allows an unauthorized attacker to execute code over a network.

Memory safety OS & kernel Microsoft Windows 10 1607

Use after free in Windows CCFFilter Driver allows an unauthorized attacker to execute code over a network.

Memory safety OS & kernel Microsoft Windows 10 1607

Heap-based buffer overflow in Microsoft Windows Media Foundation allows an unauthorized attacker to execute code over a network.

Memory safety OS & kernel Microsoft Windows 10 1607

Heap-based buffer overflow in Windows Error Reporting allows an unauthorized attacker to execute code over a network.

Memory safety OS & kernel Microsoft Windows 10 1607

Heap-based buffer overflow in Windows System Information Console allows an unauthorized attacker to execute code over a network.

Memory safety OS & kernel Microsoft Windows 10 1607

Heap-based buffer overflow in Network Policy Server (NPS) allows an unauthorized attacker to execute code over a network.

Memory safety OS & kernel Microsoft Windows 10 1607

Out-of-bounds read in Windows Partition Management Driver allows an unauthorized attacker to execute code over a network.

Memory safety OS & kernel Microsoft Windows 10 1607

Heap-based buffer overflow in Windows DHCP Server allows an unauthorized attacker to execute code over a network.

Memory safety OS & kernel Microsoft Windows 10 1607

Out-of-bounds read in Windows GDI allows an unauthorized attacker to disclose information over a network.

Memory safety OS & kernel Microsoft Windows 10 1607

Out-of-bounds read in DNS Server allows an unauthorized attacker to disclose information over a network.

Memory safety OS & kernel Microsoft Windows 10 1607

Out-of-bounds read in Windows Client for NFS allows an unauthorized attacker to disclose information over a network.

Memory safety OS & kernel Microsoft Windows 10 1607

SolarWinds Dameware was found to be affected by a buffer overflow vulnerability that can result in remote code execution. Authentication is required.

Memory safety

Stack-based buffer overflow in Windows DHCP Server allows an authorized attacker to execute code over a network.

Memory safety OS & kernel Microsoft Windows 10 1607

FreeSWITCH is a Software Defined Telecom Stack enabling the digital transformation from proprietary telecom switches to a software implementation that runs on any commodity hardware. Prior to 1.11.2, ws_read_frame() decoded a WebSocket frame's 64-bit extended payload length with a 32-bit byte swap and narrowed the result into a signed length. A value whose surviving low word became negative bypassed the signed size check and was reinterpreted as an enormous unsigned count, causing client bytes to overwrite memory beyond the 64 KiB receive buffer. Any client completing a /socket WebSocket upgrade on an enabled mod_xml_rpc endpoint reached the parser before HTTP authentication; both the module and WebSocket endpoint are disabled by default. The heap overwrite can corrupt connection pointers and crash FreeSWITCH, ending every concurrent session, although remote code execution has not been demonstrated. This issue is fixed in version 1.11.2.

Memory safety Library

A vulnerability was determined in Tenda AC19 16.03.10.07. Affected by this issue is the function saveParentControlInfo of the file /goform/saveParentControlInfo. This manipulation of the argument deviceId causes heap-based buffer overflow. The attack is possible to be carried out remotely. The exploit has been publicly disclosed and may be utilized.

Memory safety Device

Out-of-bounds read in DNS Server allows an authorized attacker to deny service over a network.

Memory safety OS & kernel Microsoft Windows Server 2012

A vulnerability was found in Wavlink WN530HG4B M30HG4B_V260724. The impacted element is an unknown function of the file api.cgi. The manipulation results in heap-based buffer overflow. It is possible to launch the attack remotely. The exploit has been made public and could be used. Upgrading to version 2026-09-24-841a51c6d5_tclinux.bin is sufficient to resolve this issue. The affected component should be upgraded. The vendor confirms: "We confirm the finding, and it has already been addressed. In the current firmware the api=info&client=app handler no longer builds a shell command: the login script is now invoked through an argument vector (execvp) instead of system(), and the client address is length-limited and null-checked."

Memory safety Web app

Pillow is a Python imaging library. From 2.0.0 until 13.0.0, Pillow has a heap buffer overflow and stale-heap disclosure in _tiffWriteProc when saving compressed TIFF data through libtiff to a target without a usable fileno(), such as BytesIO. The callback sizes its allocation from the prior buffer size instead of the current write position, allowing an attacker-controlled out-of-line TIFF tag or retained ICC profile to be copied beyond the allocation after libtiff seeks forward. This overflow can crash the process and may allow code execution. Independently, unwritten alignment gaps in compressed TIFF output larger than 64 KiB can disclose stale heap bytes without a crafted tag. File paths and targets with real file descriptors are unaffected. This issue is fixed in version 13.0.0.

Memory safety Library Python Pillow

Use after free in OpenSSH for Windows allows an unauthorized attacker to execute code over a network.

Memory safety OS & kernel Microsoft Windows 10 1809

Out-of-bounds read in Microsoft Office Word allows an unauthorized attacker to disclose information over a network.

Memory safety Microsoft 365 Apps

Heap-based buffer overflow in Microsoft PostScript Printer Driver allows an authorized attacker to execute code over a network.

Memory safety OS & kernel Microsoft Windows 10 1607

A vulnerability exists in NGINX Plus and NGINX Open Source when a location is configured that uses the alias directive together with rewrite and a set or return directive referencing the $request_filename variable. Alternatively, the same result could be achieved when the $request_filename variable is used in an access log format directive. An unauthenticated attacker along with conditions beyond their control can exploit this vulnerability by sending crafted HTTP requests. This may cause a heap buffer overflow in the NGINX worker process leading to a restart. Additionally, attackers can execute code on systems with Address Space Layout Randomization (ASLR) disabled or when the attacker can bypass ASLR. Impact: This vulnerability may allow remote attackers to cause a denial-of-service (DoS) on the NGINX system or to possibly trigger a code execution. There is no control plane exposure; this is a data plane issue only. Note: Software versions which have reached End of Technical Support (EoTS) are not evaluated.

Memory safety Server

Out-of-bounds read in Remote Desktop Gateway Service allows an authorized attacker to disclose information over a network.

Memory safety OS & kernel Microsoft Windows Server 2012

Out-of-bounds read in Microsoft Office Word allows an unauthorized attacker to disclose information over a network.

Memory safety Microsoft 365 Apps

Out-of-bounds write in ASP.NET Core allows an unauthorized attacker to deny service over a network.

Memory safety Web app

Heap-based buffer overflow in Windows BitLocker allows an unauthorized attacker to execute code over a network.

Memory safety OS & kernel Microsoft Windows 11 23h2

Heap-based buffer overflow in Windows Shell allows an unauthorized attacker to execute code over a network.

Memory safety OS & kernel Microsoft Windows 10 1607

Use after free in Microsoft Windows Search Component allows an unauthorized attacker to elevate privileges over a network.

Memory safety OS & kernel Microsoft Windows 10 1607

Heap-based buffer overflow in Windows Text Shaping allows an unauthorized attacker to execute code over a network.

Memory safety OS & kernel Microsoft Windows 10 1809

Out-of-bounds read in Windows Routing and Remote Access Service (RRAS) allows an unauthorized attacker to disclose information over a network.

Memory safety OS & kernel Microsoft Windows 10 1607