Vulnerabilities > Heap-based Buffer Overflow

DATE CVE VULNERABILITY TITLE RISK
2025-03-11 CVE-2025-27177 Heap-based Buffer Overflow vulnerability in Adobe Indesign
InDesign Desktop versions ID20.1, ID19.5.2 and earlier are affected by a Heap-based Buffer Overflow vulnerability that could result in arbitrary code execution in the context of the current user.
local
low complexity
adobe CWE-122
7.8
2025-03-11 CVE-2025-21169 Heap-based Buffer Overflow vulnerability in Adobe Substance 3D Designer
Substance3D - Designer versions 14.1 and earlier are affected by a Heap-based Buffer Overflow vulnerability that could result in arbitrary code execution in the context of the current user.
local
low complexity
adobe CWE-122
7.8
2025-03-11 CVE-2025-21180 Heap-based buffer overflow in Windows exFAT File System allows an unauthorized attacker to execute code locally.
local
low complexity
CWE-122
7.8
2025-03-11 CVE-2025-24048 Heap-based buffer overflow in Role: Windows Hyper-V allows an authorized attacker to elevate privileges locally.
local
low complexity
CWE-122
7.8
2025-03-11 CVE-2025-24050 Heap-based buffer overflow in Role: Windows Hyper-V allows an authorized attacker to elevate privileges locally.
local
low complexity
CWE-122
7.8
2025-03-11 CVE-2025-24051 Heap-based buffer overflow in Windows Routing and Remote Access Service (RRAS) allows an unauthorized attacker to execute code over a network.
network
low complexity
CWE-122
8.8
2025-03-11 CVE-2025-24056 Heap-based buffer overflow in Windows Telephony Server allows an unauthorized attacker to execute code over a network.
network
low complexity
CWE-122
8.8
2025-03-11 CVE-2025-24057 Heap-based buffer overflow in Microsoft Office allows an unauthorized attacker to execute code locally.
local
low complexity
CWE-122
7.8
2025-03-11 CVE-2025-24066 Heap-based buffer overflow in Windows Kernel-Mode Drivers allows an authorized attacker to elevate privileges locally.
local
low complexity
CWE-122
7.8
2025-03-11 CVE-2025-24067 Heap-based buffer overflow in Microsoft Streaming Service allows an authorized attacker to elevate privileges locally.
local
low complexity
CWE-122
7.8