CVE-2025-51089
Tenda AC8V4 V16.03.34.06` was discovered to contain heap overflow at /goform/GetParentControlInfo.The manipulation of the argument `mac` lea
CVSS
6.5
Medio
EPSS
9.0%
p95
KEV
—
Exploit Today
29
0-100
Publicado: 24 jul 2025 · Última mod.: 5 jul 2026 · CWE-122
6.8%EPSS · 30 días9.0%
2026-10-012026-10-28
Tenda AC8V4 V16.03.34.06` was discovered to contain heap overflow at /goform/GetParentControlInfo.The manipulation of the argument `mac` leads to heap-based buffer overflow.
CVECVSSEPSSKEVRExplotTítuloVis.
CVE-2026-95367.5 ALT—
———A heap-based buffer overflow vulnerability exists in the vtkWindBladeReader FindVariableOffsets functionality of vtk (version(s): 9.6.1). A specially crafted .wind can lead to a buffer overflow. An attacker can provide a malicious file to trigger this vulnerability.7hCVE-2026-961998.8 ALT—
———Heap-based buffer overflow in Microsoft Edge (Chromium-based) allows an unauthorized attacker to execute code over a network.10hCVE-2026-961988.8 ALT—
———Heap-based buffer overflow in Microsoft Edge (Chromium-based) allows an unauthorized attacker to execute code over a network.10hCVE-2026-858978.8 ALT—
———Heap-based buffer overflow in Microsoft Edge (Chromium-based) allows an unauthorized attacker to execute code over a network.10hCVE-2026-1191243.3 BAJ—
———ImageMagick before 7.1.2-34 contains a heap-based buffer overflow in its -morph processing, where crafted images cause writes beyond the bounds of a heap buffer. An attacker can supply a crafted image that, when processed by a user with the -morph option, corrupts heap memory and crashes the application.10hCVE-2026-935365.3 MED—
——0A use after free caused by missing lifecycle management of gesture sprites in GestureBuildSprite() in X.Org X Server before 21.1.25 and XWayland before 24.1.14 could be used by authenticated X clients to crash the X server or potentially execute code.11h