VYPR

CWE-121

Stack-based Buffer Overflow

VariantDraftLikelihood: High

Description

A stack-based buffer overflow condition is a condition where the buffer being overwritten is allocated on the stack (i.e., is a local variable or, rarely, a parameter to a function).

Hierarchy (View 1000)

Children

none

CVEs mapped to this weakness (3,817)

page 99 of 191
  • CVE-2026-69467HigSep 8, 2026
    risk 0.51cvss 7.8epss 0.00

    Stack-based buffer overflow in Microsoft Graphics Component allows an authorized attacker to elevate privileges locally.

  • CVE-2026-69391HigSep 8, 2026
    risk 0.51cvss 7.8epss 0.00

    Stack-based buffer overflow in Windows Broker Infrastructure Service allows an authorized attacker to elevate privileges locally.

  • CVE-2026-69290HigSep 8, 2026
    risk 0.51cvss 7.8epss 0.00

    Stack-based buffer overflow in Windows Storage Spaces Controller allows an authorized attacker to elevate privileges locally.

  • CVE-2026-69277HigSep 8, 2026
    risk 0.51cvss 7.8epss 0.00

    Stack-based buffer overflow in Microsoft Local Security Authority Server (lsasrv) allows an authorized attacker to elevate privileges locally.

  • CVE-2026-73600HigSep 3, 2026
    risk 0.51cvss 7.8epss 0.00

    Dell PowerProtect Data Manager, versions 20.2.0.0 and below, contain a stack buffer overflow vulnerability in file-level restore agent. A high privileged remote attacker could potentially exploit this vulnerability, leading to Information disclosure.

  • CVE-2026-77658HigAug 26, 2026
    risk 0.51cvss 7.8epss 0.00

    A stack-based buffer overflow vulnerability exists in the Dia diagram editor when processing Network Bus objects from Dia XML project files. In objects/network/bus.c, bus_load() reads the number of bus handles from the file attribute "bus_handles" using attribute_num_data()…

  • CVE-2026-48417HigAug 25, 2026
    risk 0.51cvss 7.8epss 0.00

    Substance3D - Sampler is affected by a Stack-based Buffer Overflow vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file.

  • CVE-2026-16945HigAug 20, 2026
    risk 0.51cvss 7.8epss 0.00

    IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 could allow a local attacker to execute arbitrary code due to a stack-based buffer overflow.

  • CVE-2026-18303HigAug 20, 2026
    risk 0.51cvss 7.8epss 0.00

    GIMP TIF File Parsing Stack-based Buffer Overflow Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of GIMP. User interaction is required to exploit this vulnerability in that the target must visit…

  • CVE-2026-18297HigAug 20, 2026
    risk 0.51cvss 7.8epss 0.00

    GStreamer OGG File Parsing Stack-based Buffer Overflow Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of GStreamer. User interaction is required to exploit this vulnerability in that the target…

  • CVE-2026-75142HigAug 19, 2026
    risk 0.51cvss 7.8epss 0.00

    FFmpeg before commit 9d786e4 contains a stack buffer overflow in the MPEG-PS muxer (libavformat/mpegenc.c). When muxing input with more streams than the muxer's fixed-size stack buffer accommodates, the buffer is overflowed. A crafted input with an excessive number of streams…

  • CVE-2026-19003HigAug 12, 2026
    risk 0.51cvss 7.8epss 0.00

    A data source definition containing an over-length file path setting may cause the MongoDB BI Connector ODBC Driver setup dialog to write outside the bounds of an allocated buffer. The issue stems from an incorrect buffer capacity calculation in the dialog's file and folder…

  • CVE-2026-70346HigAug 11, 2026
    risk 0.51cvss 7.8epss 0.00

    Stack-based buffer overflow in Windows Installer allows an authorized attacker to elevate privileges locally.

  • CVE-2026-70344HigAug 11, 2026
    risk 0.51cvss 7.8epss 0.00

    Stack-based buffer overflow in Windows Installer allows an authorized attacker to elevate privileges locally.

  • CVE-2026-68817HigAug 11, 2026
    risk 0.51cvss 7.8epss 0.00

    Stack-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code locally.

  • CVE-2026-68816HigAug 11, 2026
    risk 0.51cvss 7.8epss 0.00

    Stack-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code locally.

  • CVE-2026-68795HigAug 11, 2026
    risk 0.51cvss 7.8epss 0.00

    Stack-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code locally.

  • CVE-2026-66807HigAug 11, 2026
    risk 0.51cvss 7.8epss 0.00

    Stack-based buffer overflow in Microsoft Office allows an unauthorized attacker to execute code locally.

  • CVE-2026-64919HigAug 11, 2026
    risk 0.51cvss 7.8epss 0.00

    Stack-based buffer overflow in Microsoft Office Access allows an unauthorized attacker to execute code locally.

  • CVE-2026-64912HigAug 11, 2026
    risk 0.51cvss 7.8epss 0.00

    Stack-based buffer overflow in Microsoft Office Access allows an unauthorized attacker to execute code locally.