Search Results (48230 CVEs found)

CVE Vendors Products Updated CVSS v3.1
CVE-2026-48435 1 Adobe 6 C2pa, C2pa-web, C2patool and 3 more 2026-08-14 6.2 Medium
CAI Content Credentials is affected by an Integer Underflow (Wrap or Wraparound) vulnerability that could result in an application denial-of-service. An attacker could exploit this vulnerability to crash the application, leading to a denial-of-service condition. Exploitation of this issue does not require user interaction.
CVE-2026-48444 1 Adobe 6 C2pa, C2pa-web, C2patool and 3 more 2026-08-14 6.2 Medium
CAI Content Credentials is affected by an Integer Overflow or Wraparound vulnerability that could result in an application denial-of-service. An attacker could exploit this vulnerability to crash the application, leading to a denial-of-service condition. Exploitation of this issue does not require user interaction.
CVE-2026-48445 1 Adobe 6 C2pa, C2pa-web, C2patool and 3 more 2026-08-14 6.2 Medium
CAI Content Credentials is affected by an Integer Overflow or Wraparound vulnerability that could result in an application denial-of-service. An attacker could exploit this vulnerability to crash the application, leading to a denial-of-service condition. Exploitation of this issue does not require user interaction.
CVE-2026-71389 1 Adobe 6 C2pa, C2pa-web, C2patool and 3 more 2026-08-14 6.2 Medium
CAI Content Credentials is affected by an Integer Underflow (Wrap or Wraparound) vulnerability that could result in an application denial-of-service. An attacker could exploit this vulnerability to crash the application, leading to a denial-of-service condition. Exploitation of this issue does not require user interaction.
CVE-2026-48387 1 Adobe 6 C2pa, C2pa-web, C2patool and 3 more 2026-08-14 6.2 Medium
CAI Content Credentials is affected by an Integer Overflow or Wraparound vulnerability that could result in an application denial-of-service. An attacker could exploit this vulnerability to crash the application, leading to a denial-of-service condition. Exploitation of this issue does not require user interaction.
CVE-2026-65661 1 Microsoft 5 365 Apps, Office 2016, Office 2019 and 2 more 2026-08-14 7.8 High
Heap-based buffer overflow in Microsoft Office allows an unauthorized attacker to execute code locally.
CVE-2026-70329 1 Microsoft 6 365 Apps, Office 2019, Office 2021 and 3 more 2026-08-14 8.8 High
Integer overflow or wraparound in Microsoft Office Outlook allows an unauthorized attacker to execute code over a network.
CVE-2026-64911 1 Microsoft 15 365 Apps, Microsoft 365, Microsoft 365 Apps For Enterprise and 12 more 2026-08-14 7.8 High
Integer overflow or wraparound in Microsoft Office allows an unauthorized attacker to execute code locally.
CVE-2026-63513 1 Microsoft 17 365 Apps, Microsoft 365, Microsoft 365 Apps For Enterprise and 14 more 2026-08-14 7.8 High
Heap-based buffer overflow in Microsoft Office allows an unauthorized attacker to execute code locally.
CVE-2026-62823 1 Microsoft 14 Windows 10 1607, Windows 10 1809, Windows Server 2012 and 11 more 2026-08-14 8.8 High
Heap-based buffer overflow in Windows DHCP Server allows an unauthorized attacker to execute code over an adjacent network.
CVE-2026-72827 1 Getgrav 1 Grav 2026-08-14 8.8 High
Grav CMS before 2.0.13 contains a server-side template injection vulnerability in email-action parameters that allows low-privileged page editors to execute arbitrary operating-system commands. Attackers can inject Twig payloads using the unsandboxed find filter in email subject, body, to, or from fields to achieve remote code execution when forms are submitted.
CVE-2026-19822 1 Tenda 2 W20e, W20e Firmware 2026-08-14 8.8 High
A vulnerability was identified in Tenda W20E 15.11.0.6(1068_1546_841)_CN_TDC. This issue affects the function lstAdd of the file /goform/editQos of the component QoS Edit. Such manipulation of the argument qosListConnecttedNum leads to stack-based buffer overflow. The attack may be launched remotely. The exploit is publicly available and might be used.
CVE-2026-19812 1 Totolink 2 A800r, A800r Firmware 2026-08-14 8.8 High
A weakness has been identified in TOTOLINK A800R 4.1.2cu.5137_B20200730. This affects the function UploadCustomModule of the file /cgi-bin/cstecgi.cgi of the component product.so. This manipulation of the argument File causes stack-based buffer overflow. The attack is possible to be carried out remotely. The exploit has been made available to the public and could be used for attacks.
CVE-2026-64920 1 Microsoft 7 365 Apps, Access, Access 2016 and 4 more 2026-08-14 7.8 High
Heap-based buffer overflow in Microsoft Office Access allows an unauthorized attacker to execute code locally.
CVE-2026-64905 1 Microsoft 10 365 Apps, Microsoft 365, Office 2019 and 7 more 2026-08-14 7.8 High
Buffer over-read in Microsoft Office Word allows an unauthorized attacker to execute code locally.
CVE-2026-64914 1 Microsoft 7 365 Apps, Access, Access 2016 and 4 more 2026-08-14 7.8 High
Heap-based buffer overflow in Microsoft Office Access allows an unauthorized attacker to execute code locally.
CVE-2026-64919 1 Microsoft 7 365 Apps, Access, Access 2016 and 4 more 2026-08-14 7.8 High
Stack-based buffer overflow in Microsoft Office Access allows an unauthorized attacker to execute code locally.
CVE-2026-64907 1 Microsoft 10 365 Apps, Microsoft 365, Office 2019 and 7 more 2026-08-14 7.8 High
Stack-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code locally.
CVE-2026-64912 1 Microsoft 6 365 Apps, Access, Access 2016 and 3 more 2026-08-14 7.8 High
Stack-based buffer overflow in Microsoft Office Access allows an unauthorized attacker to execute code locally.
CVE-2026-19791 1 Tenda 1 G0 2026-08-14 8.8 High
A weakness has been identified in Tenda G0 up to 20260625. The affected element is the function addStaticRoute of the file /goform/module of the component httpd web management interface. Executing a manipulation of the argument staticRouteNet can lead to stack-based buffer overflow. The attack may be performed from remote. The exploit has been made available to the public and could be used for attacks.