Improper Restriction of Operations within the Bounds of a Memory Buffer

A remote code execution vulnerability exists in the way that the Microsoft Server Message Block 3.1.1 (SMBv3) protocol handles certain reque

• pre-auth RCE
• Memory safety

microsoft · windows 10 1903Mar 12, 2020

Mozilla Firefox 3.5.x through 3.5.14 and 3.6.x through 3.6.11, Thunderbird 3.1.6 before 3.1.6 and 3.0.x before 3.0.10, and SeaMonkey 2.x bef

• pre-auth RCE
• Memory safety

mozilla · firefoxOct 27, 2010

OleAut32.dll in OLE in Microsoft Windows Server 2003 SP2, Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8, W

• pre-auth RCE
• Memory safety

microsoft · windows 7Nov 11, 2014

Microsoft Office 2007 Service Pack 3, Microsoft Office 2010 Service Pack 2, Microsoft Office 2013 Service Pack 1, and Microsoft Office 2016

• RCE
• Memory safety

microsoft · officeNov 14, 2017

Heap-based buffer overflow in Adobe Reader and Acrobat 7.x before 7.1.4, 8.x before 8.1.7, and 9.x before 9.2 allows remote attackers to exe

• pre-auth RCE
• Memory safety

adobe · acrobatOct 13, 2009

Buffer underflow in atmfd.dll in the Windows Adobe Type Manager Library in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1,

• pre-auth RCE
• Memory safety

microsoft · windows 10Jul 20, 2015

Unauthenticated sensitive information disclosure

• Pre-auth
• Memory safety

citrix · netscaler application delivery controllerOct 10, 2023

Stack-based buffer overflow in the CComVariant::ReadFromStream function in the Active Template Library (ATL), as used in the MPEG2TuneReques

• pre-auth RCE
• Memory safety

microsoft · windows 2003 serverJul 7, 2009

On BIG-IP versions 16.0.x before 16.0.1.1, 15.1.x before 15.1.2.1, 14.1.x before 14.1.4, 13.1.x before 13.1.3.6, and 12.1.x before 12.1.5.3,

• pre-auth RCE
• Memory safety

f5 · big-ip access policy managerMar 31, 2021

A buffer overflow was found in the MikroTik RouterOS SMB service when processing NetBIOS session request messages.

• Pre-auth
• Memory safety

mikrotik · routerosMar 19, 2018

The Simple Network Management Protocol (SNMP) subsystem of Cisco IOS and IOS XE Software contains multiple vulnerabilities that could allow

• Memory safety

cisco · iosJul 17, 2017

Mozilla Firefox before 22.0, Firefox ESR 17.x before 17.0.7, Thunderbird before 17.0.7, and Thunderbird ESR 17.x before 17.0.7 do not proper

• pre-auth RCE
• Memory safety

mozilla · firefoxJun 25, 2013

Microsoft Office 2010, SharePoint Enterprise Server 2010, SharePoint Server 2010, Web Applications, Office Web Apps Server 2010 and 2013, Wo

• RCE
• Memory safety

microsoft · office compatibility packOct 13, 2017

An issue was discovered on D-Link DIR-825 R1 devices through 3.0.1 before 2020-11-20.

• pre-auth RCE
• Memory safety

dlink · dir-825 r1 firmwareJan 29, 2021

The NSPLookupServiceNext function in the client in Microsoft Forefront Threat Management Gateway (TMG) 2010 allows remote attackers to execu

• pre-auth RCE
• Memory safety

microsoft · forefront threat management gatewayJun 16, 2011

Microsoft Outlook 2010 SP2, Outlook 2013 SP1 and RT SP1, and Outlook 2016 allow an attacker to execute arbitrary commands, due to how Micros

• RCE
• Memory safety

microsoft · outlookOct 13, 2017

A vulnerability in the SNMP implementation of could allow an authenticated, remote attacker to cause a reload of the affected system or to r

• RCE
• Memory safety

cisco · iosJul 17, 2017

Microsoft Word 2007 SP2, Office 2010 SP2, Word 2013 SP1, Word 2013 RT SP1, Word 2016, Word for Mac 2011, Word 2016 for Mac, Office Compatibi

• RCE
• Memory safety

microsoft · officeOct 13, 2016

The kernel-mode drivers in Transaction Manager in Microsoft Windows Vista SP2; Windows Server 2008 SP2 and R2; Windows 7 SP1; Windows 8.1, W

• Local privilege escalation
• Memory safety

microsoft · windows 7Mar 16, 2017

fastping.c in MRLG (aka Multi-Router Looking Glass) before 5.5.0 allows remote attackers to cause an arbitrary memory write and memory corru

• Pre-auth
• Memory safety

multi-router looking glass project · multi-router looking glassMar 31, 2017

Improper Restriction of Operations within the Bounds of a Memory Buffer in NetScaler ADC and NetScaler Gateway allows Unauthenticated Denial

• Pre-auth
• Memory safety
• Denial of service

citrix · netscaler application delivery controllerJan 17, 2024

A memory corruption issue was addressed with improved bounds checking.

• Pre-auth
• Memory safety

apple · macosApr 16, 2025

The EPATHOBJ::pprFlattenRec function in win32k.sys in the kernel-mode drivers in Microsoft Windows XP SP2 and SP3, Windows Server 2003 SP2,

• Local privilege escalation
• Memory safety

microsoft · windows 7May 24, 2013

A vulnerability in the quality of service (QoS) subsystem of Cisco IOS Software and Cisco IOS XE Software could allow an unauthenticated, re

• pre-auth RCE
• Memory safety

cisco · ios xeMar 28, 2018

Memory overflow vulnerability leading to Remote Code Execution and/or Denial of Service

• pre-auth RCE
• Memory safety

citrix · netscaler application delivery controllerAug 26, 2025