The internet is broken right now.

Heap-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code over a network.

Memory safety Microsoft 365 Apps

Out-of-bounds read in Microsoft Office Excel allows an unauthorized attacker to execute code over a network.

Memory safety Microsoft 365 Apps

Out-of-bounds write in Windows Local Security Authority Subsystem Service (LSASS) allows an unauthorized attacker to execute code over a network.

Memory safety OS & kernel Microsoft Windows 10 1809

Remote Code Execution in Windows Routing and Remote Access Service (RRAS) allows attacker to gain an unauthorized access to victim's machine

Memory safety OS & kernel Microsoft Windows 10 1607

Heap-based buffer overflow in Microsoft Office Visio allows an unauthorized attacker to execute code over a network.

Memory safety Microsoft 365 Apps

Stack-based buffer overflow in Windows GDI+ allows an unauthorized attacker to execute code over a network.

Memory safety OS & kernel Microsoft Windows 10 1607

Out-of-bounds read in Windows Text Shaping allows an unauthorized attacker to execute code over a network.

Memory safety OS & kernel Microsoft Windows 10 1607

Heap-based buffer overflow in Microsoft Office Access allows an unauthorized attacker to execute code over a network.

Memory safety Microsoft 365 Apps

Heap-based buffer overflow in Remote Access Point-to-Point Protocol (PPP) EAP-TLS allows an unauthorized attacker to execute code over a network.

Memory safety OS & kernel Microsoft Windows 10 1607

Heap-based buffer overflow in Windows Error Reporting allows an unauthorized attacker to execute code over a network.

Memory safety OS & kernel Microsoft Windows 10 1607

Heap-based buffer overflow in DNS Server allows an unauthorized attacker to execute code over a network.

Memory safety OS & kernel Microsoft Windows 10 1607

Heap-based buffer overflow in Windows Distributed File System (DFS) allows an authorized attacker to execute code over a network.

Memory safety OS & kernel Microsoft Windows 10 1607

Out-of-bounds read in Remote Desktop Client allows an unauthorized attacker to disclose information over a network.

Memory safety OS & kernel Microsoft Windows 10 1607

Heap-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code over a network.

Memory safety Microsoft 365 Apps

Heap-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code over a network.

Memory safety Microsoft 365 Apps

Heap-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code over a network.

Memory safety Microsoft 365 Apps

Out-of-bounds write in Microsoft Office Excel allows an unauthorized attacker to execute code over a network.

Memory safety Microsoft 365 Apps

Heap-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code over a network.

Memory safety Microsoft 365 Apps

Use after free in Microsoft Office Excel allows an unauthorized attacker to execute code over a network.

Memory safety Microsoft 365 Apps

Heap-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code over a network.

Memory safety Microsoft 365 Apps

Heap-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code over a network.

Memory safety Microsoft 365 Apps

Out-of-bounds write in .NET allows an unauthorized attacker to execute code over a network.

Memory safety Library

Heap-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code over a network.

Memory safety Microsoft 365 Apps

Integer overflow or wraparound in .NET Framework allows an unauthorized attacker to elevate privileges over a network.

Memory safety

Heap-based buffer overflow in Microsoft Office OneNote allows an unauthorized attacker to execute code over a network.

Memory safety Microsoft 365

F´ (F Prime) is a framework that enables development and deployment of spaceflight and other embedded software applications. Prior to 4.2.0, Svc::FpySequencer STORE directive stack write validation the bounds check adds attacker-controlled offset and size before memcpy, allowing integer wraparound to make an out-of-range destination appear valid. When a sequence-controlled STORE directive supplies a stack offset and size whose U32 sum wraps, memcpy can write outside the sequencer stack, causing memory corruption, denial of service, and potentially code execution. This issue is fixed in version 4.2.0.

Memory safety Device

Out-of-bounds write in Active Directory Domain Services allows an authorized attacker to execute code over a network.

Memory safety OS & kernel Microsoft Windows 10 1607

Use after free in Windows Background Intelligent Transfer Service (BITS) allows an unauthorized attacker to execute code over a network.

Memory safety OS & kernel Microsoft Windows 10 1607

Heap-based buffer overflow in Windows Distributed File System (DFS) allows an authorized attacker to execute code over a network.

Memory safety OS & kernel Microsoft Windows 10 1607

A buffer overflow was addressed with improved bounds checking. This issue is fixed in macOS Golden Gate 27.2, macOS Sequoia 15.8.2, macOS Tahoe 26.7.2. A remote attacker may be able to cause unexpected app termination.

Memory safety OS & kernel Apple macOS

Heap-based buffer overflow in Windows Event Tracing allows an unauthorized attacker to execute code over a network.

Memory safety OS & kernel Microsoft Windows 10 1607

Out-of-bounds read in Windows Partition Management Driver allows an unauthorized attacker to execute code over a network.

Memory safety OS & kernel Microsoft Windows 10 1809

Heap-based buffer overflow in Windows SMB Client allows an unauthorized attacker to elevate privileges over a network.

Memory safety OS & kernel Microsoft Windows 10 1607

Use after free in Remote Desktop Client allows an unauthorized attacker to execute code over a network.

Memory safety OS & kernel Microsoft Windows 10 1607

An elevation of privilege vulnerability exists in the Network Driver Interface Specification (NDIS) when ndis.sys fails to check the length of a buffer prior to copying memory to it. To exploit the vulnerability, in a local attack scenario, an attacker could run a specially crafted application to elevate the attacker's privilege level. An attacker who successfully exploited this vulnerability could run processes in an elevated context. However, an attacker must first gain access to the local system with the ability to execute a malicious application in order to exploit this vulnerability. The security update addresses the vulnerability by changing how ndis.sys validates buffer length.

Memory safety OS & kernel Microsoft Windows 10 1607

Use after free in Remote Desktop Client allows an unauthorized attacker to execute code over a network.

Memory safety OS & kernel Microsoft Windows 10 1607

libwebsockets MQTT Protocol PUBACK Packet Handling Out-Of-Bounds Write Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of libwebsockets. Authentication is not required to exploit this vulnerability. The specific flaw exists within the handling of PUBACK packets. The issue results from the lack of proper validation of user-supplied data, which can result in a write past the end of an allocated buffer. An attacker can leverage this vulnerability to execute code in the context of the current process. Was ZDI-CAN-31039.

Memory safety

A security flaw has been discovered in TOTOLINK CA300-PoE 6.2c.884. The impacted element is the function setLanguageCfg of the file /cgi-bin/cstecgi.cgi. Performing a manipulation of the argument langType results in buffer overflow. The attack can be initiated remotely. The exploit has been released to the public and may be used for attacks.

Memory safety

Double free in Microsoft Office Excel allows an unauthorized attacker to execute code over a network.

Memory safety Microsoft 365 Apps

Heap-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code over a network.

Memory safety Microsoft 365 Apps

Heap-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code over a network.

Memory safety Microsoft 365 Apps

Use after free in Microsoft Office Excel allows an unauthorized attacker to execute code over a network.

Memory safety Microsoft 365 Apps

Solanum before commit 2ce64de contains a heap-based buffer overflow vulnerability that allows a malicious linked server to corrupt memory by sending overlong channel names in JOIN or SJOIN messages. Attackers controlling a peer server can trigger strcpy and sprintf overflows in ms_join and ms_sjoin to crash the ircd or potentially achieve remote code execution.

Memory safety Server

Out-of-bounds read in Microsoft Office Excel allows an unauthorized attacker to disclose information over a network.

Memory safety Microsoft 365 Apps

Out-of-bounds read in Microsoft Office Word allows an unauthorized attacker to disclose information over a network.

Memory safety Microsoft 365 Apps

Out-of-bounds read in Microsoft Office Excel allows an unauthorized attacker to disclose information over a network.

Memory safety Microsoft 365 Apps

Out-of-bounds read in Microsoft Office Excel allows an unauthorized attacker to disclose information over a network.

Memory safety Microsoft 365 Apps

NGINX Plus and NGINX Open Source have a vulnerability in the ngx_http_core_module module. When asynchronous file I/O (AIO) is enabled in certain configurations, processing a Server Side Includes (SSI) page containing “include virtual” commands may trigger a Use-After-Free (UAF) in the NGINX worker process. This may cause memory corruption or a worker process crash. Additionally, attackers can execute code on systems with Address Space Layout Randomization (ASLR) disabled or when the attacker can bypass ASLR. Impact: This vulnerability may allow remote attackers to cause a denial-of-service (DoS) on the NGINX system, corrupt its memory, or possibly trigger code execution. There is no control plane exposure; this is a data plane issue only. Note: Software versions which have reached End of Technical Support (EoTS) are not evaluated.

Memory safety Library

Dell PowerProtect Data Domain, Feature Release versions 7.7.1.0 through 8.8, LTS2024 release versions 7.13.1.0 through 7.13.1.80, LTS2025 release versions 8.3.1.0 through 8.3.1.40, LTS2026 release versions 8.6.1.0 through 8.6.1.20, contain a Stack-based Buffer Overflow vulnerability. An unauthenticated attacker with remote access could potentially exploit this vulnerability, leading to command execution.

Memory safety

Asterisk is an open source private branch exchange and telephony toolkit. In affected deployments, an authenticated attacker may cause a `T.140 RED` heap buffer overflow using carefully crafted packets, potentially allowing remote code execution or causing Asterisk to crash. The `chan_sip` channel driver must be installed and configured, and its `textsupport` option must be enabled; `textsupport` defaults to no. `The chan_sip driver was deprecated in Asterisk 20 and completely removed in all later versions.` Repository comparisons verify patch containment in Asterisk 20.20.1, 21.12.3, 22.10.1 and 23.4.1, and Certified Asterisk 20.7-cert11 and 22.8-cert3. The affected release-track scope remains unresolved: structured metadata includes later release tracks even though the advisory says the required `chan_sip` driver was removed there.

Memory safety