PT-2026-111303

Name of the Vulnerable Software and Affected Versions Wavlink WL-WN530BE1-A version 251117 Description A stack-based buffer overflow exists in the Settings Export CGI component. The issue occurs within the strcpy function located in the '/cgi-bin/ExportAllSettings.cgi' endpoint when the HTTP...

Microsoft Windows: CVE-2026-95904: Windows Event Logging Service Information Disclosure Vulnerability

Buffer over-read in Windows Event Logging Service allows an authorized attacker to disclose information locally...

Microsoft Windows: CVE-2026-83902: Windows Direct Composition Elevation of Privilege Vulnerability

Heap-based buffer overflow in Windows Direct Composition allows an authorized attacker to elevate privileges locally...

Microsoft Windows: CVE-2026-70093: Windows Rich Text Edit Control Elevation of Privilege Vulnerability

Heap-based buffer overflow in Windows Rich Text Edit Control allows an authorized attacker to elevate privileges locally...

Microsoft Windows: CVE-2026-70096: Windows Rich Text Edit Control Remote Code Execution Vulnerability

Heap-based buffer overflow in Windows Rich Text Edit Control allows an unauthorized attacker to execute code over a network...

Microsoft Windows: CVE-2026-83770: Windows Text Shaping Remote Code Execution Vulnerability

Heap-based buffer overflow in Windows Text Shaping allows an unauthorized attacker to execute code over a network...

Microsoft Windows: CVE-2026-83932: Windows Group Policy Elevation of Privilege Vulnerability

Heap-based buffer overflow in Windows Group Policy allows an authorized attacker to elevate privileges locally...

Microsoft Windows: CVE-2026-85869: Microsoft Windows Search Component Elevation of Privilege Vulnerability

Heap-based buffer overflow in Microsoft Windows Search Component allows an authorized attacker to elevate privileges locally...

Microsoft Windows: CVE-2026-85358: Windows Installer Elevation of Privilege Vulnerability

Heap-based buffer overflow in Windows Installer allows an authorized attacker to elevate privileges locally...

CVE-2026-103567: Buffer Over-read

Buffer over-read in Windows Broadcast DVR User Service allows an authorized attacker to disclose information locally...

PT-2026-112967

Name of the Vulnerable Software and Affected Versions OpenSSH for Windows affected versions not specified Description A heap-based buffer overflow allows an unauthorized remote attacker to execute arbitrary code over a network and affect the system. A heap-based buffer overflow occurs when a...

PT-2026-111926

Name of the Vulnerable Software and Affected Versions Windows Universal Disk Format File System Driver UDFS affected versions not specified Description A heap-based buffer overflow occurs in the Windows Universal Disk Format File System Driver UDFS. This issue allows an authorized attacker to...

PT-2026-112450

Name of the Vulnerable Software and Affected Versions Windows Sensor Data Service affected versions not specified Description A heap-based buffer overflow occurs in the Windows Sensor Data Service. This issue allows an authorized attacker to elevate privileges locally on the system. A heap-based...

PT-2026-112703

Name of the Vulnerable Software and Affected Versions Windows Device Association Service affected versions not specified Description A heap-based buffer overflow exists in the Windows Device Association Service. This flaw allows an authorized attacker to elevate privileges locally. A heap-based...

PT-2026-111571

Name of the Vulnerable Software and Affected Versions Wazuh versions 3.12.0 through 4.14.7 Description A heap buffer overflow exists in the fim generate alert function. The issue occurs because the full log variable is sized based on input but written with a boundary defined by OS MAXSTR. An...

CVE-2026-95124

Buffer Overflow vulnerability in madmurphy libconfini v.1.16.4 allows a remote attacker to cause a denial of service via an allocation-size mismatch between its bundled loadinibuffer utility and stripinicache...

EUVD-2026-98804

Buffer Overflow vulnerability in madmurphy libconfini v.1.16.4 allows a remote attacker to cause a denial of service via an allocation-size mismatch between its bundled loadinibuffer utility and stripinicache...

Microsoft Office: CVE-2026-97004: Microsoft Office Excel Remote Code Execution Vulnerability

Heap-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code over a network...

Microsoft Windows: CVE-2026-70048: Windows Resilient File System (ReFS) Elevation of Privilege Vulnerability

Heap-based buffer overflow in Windows Resilient File System ReFS allows an authorized attacker to elevate privileges locally...

PT-2026-112179

Name of the Vulnerable Software and Affected Versions Windows Resilient File System ReFS affected versions not specified Description A heap-based buffer overflow occurs in the Windows Resilient File System ReFS, which allows an authorized attacker to elevate privileges locally. A heap-based buffe...