Topic

Heap Buffer Overflow: news, advisories and analysis

6 articlesUpdated 4 Nov 2026

CyberSecureToday covers Heap Buffer Overflow across 6 articles published between 21 Sep 2026 and 4 Nov 2026. The coverage includes 6 vulnerability advisories. 6 advisories are rated critical or high severity, and 1 involves a flaw listed in CISA's Known Exploited Vulnerabilities catalog.

Stories on Heap Buffer Overflow most often intersect with CWE-122, Security Advisory and Patch & Fix, with Technology, Cloud & SaaS the most affected sector. The most recent story, “Dawn Buffer overflow in Dawn in Google Chrome on on And Heap Buffer Overflow Flaw Disclosed (CVE-2026-121247)”, was published 4 Nov 2026. Every article is listed below, newest first, with the affected products, severity and remediation guidance in each piece.

Latest coverage

ThreatsCloud & SaaSCritical
Dawn Buffer overflow in Dawn in Google Chrome on on And Heap Buffer Overflow Flaw Disclosed (CVE-2026-121247)
CVE-2026-121247 in Dawn Buffer overflow in Dawn in Google Chrome on on And (Heap Buffer Overflow) allows remote attackers to trigger arbitrary code executi
Aisha Noor4 Nov 202610 min read
ThreatsCloud & SaaSCritical
NoMachine nxwebrunner Heap-based Buffer Overflow R Heap Buffer Overflow Flaw Disclosed (CVE-2026-114549)
CVE-2026-114549 in NoMachine nxwebrunner Heap-based Buffer Overflow R (Heap Buffer Overflow) allows remote attackers to trigger arbitrary code execution. P
Aisha Noor4 Nov 202610 min read
ThreatsCloud & SaaSCritical
NGINX Heap Overflow in Regex Map Handling Threatens Worker Processes
F5 NGINX patches critical heap buffer overflow CVE-2026-93479 in ngx_http_core_module where regex map variables lead to worker crash and code execution.
CST Editorial Desk15 Oct 20268 min read
ThreatsCloud & SaaSCritical
ESnet iperf3 RSA Authtoken Pre-Authentication Heap Buffer Overflow Flaw Uncovered (CVE-2026-101283)
A pre-authentication heap buffer overflow in ESnet iperf3 v3.20–3.21 allows unauthenticated remote attackers to corrupt heap memory via oversized RSA tokens.
CST Editorial Desk1 Oct 202611 min read
ThreatsCloud & SaaSCritical
F5 BIG-IP APM Heap Overflow Weaponized to Hijack Gateway Data Planes
F5 confirms active zero-day exploitation of CVE-2026-94127, a critical heap buffer overflow in BIG-IP APM OAuth gateways allowing unauthenticated remote code execution.
CST Editorial Desk23 Sep 202617 min read
ThreatsCloud & SaaSCritical
Hacktron Uses Claude Opus 5 to Beat libheif ASLR, Infiltrate OpenAI Perimeter
Hacktron AI researchers demonstrate how Claude Opus 5 synthesized an ASLR-bypassing libheif exploit to breach OpenAI forum and pivot to internal repos.
CST Editorial Desk21 Sep 202614 min read