Security Risk Category
Memory Corruption Security Risks — Page 2
Published vulnerability pages connected to Memory Corruption. Each page keeps one canonical URL and focused remediation guidance.
409 published Memory Corruption risks
Memory Corruption risks
Showing 37–72 of 409 published risks.
CVE-2026-64608 Apache Fory vulnerability
Heap type confusion and out-of-bounds read/write in the Apache Fory C++ implementation. When deserializing data in compatible mode, the field-skip paths do not correctly validate the declared field types against the actual data, so input with an inconsistent schema can cause type confusion and out-of-bounds memory access. Only the C++ implementation is affected; other language implementations of Apache Fory are not. This issue affects Apache Fory C++: from 0.14.0 before 1.4.0. Users are recommended to upgrade to version 1.4.0, which fixes the issue.
Updated Jul 21, 2026
CVE-2026-56648 windows 10 1607 vulnerability
Time-of-check time-of-use (toctou) race condition in Windows Network File System allows an authorized attacker to elevate privileges over a network.
Updated Jul 19, 2026
CVE-2026-56649 windows 10 1607 vulnerability
Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Network File System allows an unauthorized attacker to execute code over a network.
Updated Jul 19, 2026
CVE-2026-56650 windows 10 1607 vulnerability
Heap-based buffer overflow in Windows Network File System allows an authorized attacker to elevate privileges locally.
Updated Jul 19, 2026
CVE-2026-57087 windows 10 1607 vulnerability
Heap-based buffer overflow in Microsoft Windows Media Foundation allows an unauthorized attacker to execute code over a network.
Updated Jul 19, 2026
CVE-2026-57089 windows 10 1607 vulnerability
Use after free in Windows SMB Server Network Transport Driver (srvnet.sys) allows an unauthorized attacker to execute code over a network.
Updated Jul 19, 2026
CVE-2026-57090 windows 10 1607 vulnerability
Heap-based buffer overflow in Microsoft Windows Media Foundation allows an unauthorized attacker to execute code over a network.
Updated Jul 19, 2026
CVE-2026-57091 windows 10 1607 vulnerability
Stack-based buffer overflow in Windows File History Service allows an authorized attacker to elevate privileges locally.
Updated Jul 19, 2026
CVE-2026-57092 windows 10 1607 vulnerability
Use after free in Windows VMSwitch allows an authorized attacker to elevate privileges over a network.
Updated Jul 19, 2026
CVE-2026-57093 windows 10 1607 vulnerability
Use after free in Windows Ancillary Function Driver for WinSock allows an authorized attacker to elevate privileges locally.
Updated Jul 19, 2026
CVE-2026-57094 windows 10 1607 vulnerability
Heap-based buffer overflow in Microsoft Windows Media Foundation allows an unauthorized attacker to execute code over a network.
Updated Jul 19, 2026
CVE-2026-56455 dfxanalytics vulnerability
HCL DFXAnalytics is affected by a Buffer Overflow vulnerability that can lead to a Denial of Service (DoS). The application fails to properly validate input sizes, allowing an attacker to pass an excessive amount of information into a memory container, which can cause the system to crash or become unresponsive. To mitigate this flaw, comprehensive input length checks must be implemented and enforced on both the client and server sides.
Updated Jul 18, 2026
CVE-2026-42900 windows 10 1607 vulnerability
Concurrent execution using shared resource with improper synchronization ('race condition') in Windows App Store allows an unauthorized attacker to elevate privileges over a network.
Updated Jul 17, 2026
CVE-2026-42975 windows 10 1607 vulnerability
Heap-based buffer overflow in Windows Bluetooth Port Driver allows an unauthorized attacker to execute code over an adjacent network.
Updated Jul 17, 2026
CVE-2026-42990 windows 10 1607 vulnerability
Heap-based buffer overflow in SQL Server ODBC driver allows an unauthorized attacker to execute code over a network.
Updated Jul 17, 2026
CVE-2026-44800 windows 11 23h2 vulnerability
Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Push Notifications allows an authorized attacker to elevate privileges locally.
Updated Jul 17, 2026
CVE-2026-48564 windows 10 1607 vulnerability
Heap-based buffer overflow in Windows DHCP Server allows an authorized attacker to execute code over a network.
Updated Jul 17, 2026
CVE-2026-48571 windows 11 23h2 vulnerability
Use after free in Windows App Installer allows an authorized attacker to elevate privileges locally.
Updated Jul 17, 2026
CVE-2026-48572 windows 11 23h2 vulnerability
Concurrent execution using shared resource with improper synchronization ('race condition') in Windows App Installer allows an authorized attacker to elevate privileges locally.
Updated Jul 17, 2026
CVE-2026-49162 windows 11 24h2 vulnerability
Use after free in Microsoft Brokering File System allows an authorized attacker to elevate privileges locally.
Updated Jul 17, 2026
CVE-2026-49164 windows 10 1607 vulnerability
Heap-based buffer overflow in Active Directory Domain Services allows an unauthorized attacker to execute code over a network.
Updated Jul 17, 2026
CVE-2026-49166 windows 11 24h2 vulnerability
Use after free in Microsoft Printer Drivers allows an authorized attacker to elevate privileges locally.
Updated Jul 17, 2026
CVE-2026-49167 windows 10 1809 vulnerability
Use after free in Windows Kernel allows an authorized attacker to elevate privileges locally.
Updated Jul 17, 2026
CVE-2026-49169 windows server 2025 vulnerability
Use after free in DNS Server allows an authorized attacker to execute code over a network.
Updated Jul 17, 2026
CVE-2026-49171 windows 10 1607 vulnerability
Use after free in Microsoft Windows Speech allows an authorized attacker to elevate privileges locally.
Updated Jul 17, 2026
CVE-2026-49795 windows 10 1809 vulnerability
Use after free in Windows Kernel allows an authorized attacker to elevate privileges locally.
Updated Jul 17, 2026
CVE-2026-49796 windows 10 1607 vulnerability
Heap-based buffer overflow in Windows GDI+ allows an unauthorized attacker to execute code locally.
Updated Jul 17, 2026
CVE-2026-49797 windows 10 1607 vulnerability
Heap-based buffer overflow in Windows NTFS allows an unauthorized attacker to execute code locally.
Updated Jul 17, 2026
CVE-2026-49798 windows 10 1607 vulnerability
Use after free in Windows Kernel allows an unauthorized attacker to elevate privileges locally.
Updated Jul 17, 2026
CVE-2026-49800 windows 10 1809 vulnerability
Integer overflow or wraparound in Windows Web Proxy Auto-Discovery Protocol (WPAD) allows an authorized attacker to elevate privileges locally.
Updated Jul 17, 2026
CVE-2026-49802 windows 11 24h2 vulnerability
Concurrent execution using shared resource with improper synchronization ('race condition') in Windows USB Print Driver allows an authorized attacker to elevate privileges locally.
Updated Jul 17, 2026
CVE-2026-49804 windows 10 1607 vulnerability
Heap-based buffer overflow in Windows USB Video Driver allows an unauthorized attacker to elevate privileges with a physical attack.
Updated Jul 17, 2026
CVE-2026-49806 windows 11 24h2 vulnerability
Concurrent execution using shared resource with improper synchronization ('race condition') in Windows USB Print Driver allows an authorized attacker to elevate privileges locally.
Updated Jul 17, 2026
CVE-2026-49808 windows 11 24h2 vulnerability
Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Kernel allows an authorized attacker to elevate privileges locally.
Updated Jul 17, 2026
CVE-2026-50293 windows 10 21h2 vulnerability
Use after free in Windows Internal Task Bar allows an authorized attacker to elevate privileges locally.
Updated Jul 17, 2026
CVE-2026-50296 windows 10 1607 vulnerability
Use after free in Graphics Kernel allows an authorized attacker to elevate privileges locally.
Updated Jul 17, 2026