CVE-2023-21689
Microsoft Protected Extensible Authentication Protocol (PEAP) Remote Code Execution Vulnerability
CVSS
9.8
Crítico
EPSS
26.7%
p98
KEV
—
Exploit Today
29
0-100
Publicado: 14 feb 2023 · Última mod.: 19 ago 2026 · CWE-122
26.5%EPSS · 30 días26.7%
2026-10-012026-10-29
Microsoft Protected Extensible Authentication Protocol (PEAP) Remote Code Execution Vulnerability
CVECVSSEPSSKEVRExplotTítuloVis.
CVE-2026-1101335.8 MED—
——0A flaw was found in Ghostscript. When processing a specially crafted TrueType font or document embedding one, an accounting error during font rendering can bypass buffer size checks, triggering a heap-based buffer overflow. A remote attacker could exploit this by enticing a victim or automated service to open the malicious content, potentially resulting in a Denial of Service (DoS) crash or arbitrary code execution.6hCVE-2026-95367.5 ALT—
——0A heap-based buffer overflow vulnerability exists in the vtkWindBladeReader FindVariableOffsets functionality of vtk (version(s): 9.6.1). A specially crafted .wind can lead to a buffer overflow. An attacker can provide a malicious file to trigger this vulnerability.5hCVE-2026-961998.8 ALT—
——0Heap-based buffer overflow in Microsoft Edge (Chromium-based) allows an unauthorized attacker to execute code over a network.19hCVE-2026-961988.8 ALT—
——0Heap-based buffer overflow in Microsoft Edge (Chromium-based) allows an unauthorized attacker to execute code over a network.19hCVE-2026-858978.8 ALT—
——0Heap-based buffer overflow in Microsoft Edge (Chromium-based) allows an unauthorized attacker to execute code over a network.19hCVE-2026-1191243.3 BAJ—
——0ImageMagick before 7.1.2-34 contains a heap-based buffer overflow in its -morph processing, where crafted images cause writes beyond the bounds of a heap buffer. An attacker can supply a crafted image that, when processed by a user with the -morph option, corrupts heap memory and crashes the application.1d