Microsoft Windows: CVE-2026-70132: Windows Portable Device File System Driver Elevation of Privilege Vulnerability

Heap-based buffer overflow in Windows Portable Device File System Driver allows an authorized attacker to elevate privileges locally...

CVE-2026-83782: Heap-based Buffer Overflow

Heap-based buffer overflow in Windows Shell allows an unauthorized attacker to execute code over a network...

CVE-2026-109157: Stack-based Buffer Overflow

A vulnerability was found in TRENDnet TEW-432BRP 3.10B20. Affected by this vulnerability is the function formTcpipSetup of the file /goform/formTcpipSetup. Performing a manipulation of the argument Name results in stack-based buffer overflow. It is possible to initiate the attack remotely. The...

Microsoft Windows: CVE-2026-88093: Desktop Window Manager Elevation of Privilege Vulnerability

Heap-based buffer overflow in Desktop Window Manager allows an authorized attacker to elevate privileges locally...

CVE-2026-85886: Heap-based Buffer Overflow

Heap-based buffer overflow in SQL Server allows an authorized attacker to execute code over a network...

CVE-2026-109109: Stack-based Buffer Overflow

A vulnerability was detected in Wavlink WL-WN530BE1-A 251117. This vulnerability affects the function strcpy of the file /cgi-bin/ExportAllSettings.cgi of the component Settings Export CGI. Performing a manipulation of the argument HTTPCOOKIE/X-Cmd results in stack-based buffer overflow. It is...

CVE-2026-67625: Heap-based Buffer Overflow

Heap-based buffer overflow in SQL Server allows an authorized attacker to execute code over a network...

CVE-2026-108954: Buffer Copy without Checking Size of Input

A vulnerability was found in k2-fsa sherpa-onnx up to 1.13.8. This issue affects the function OfflineTransducerGreedySearchDecoder::Decode of the file sherpa-onnx/csrc/offline-transducer-greedy-search-decoder.cc of the component Offline Transducer Greedy Search Decoder. The manipulation of the...

PT-2026-112695

Stack-based buffer overflow in Windows GDI+ allows an unauthorized attacker to execute code over a network...

Microsoft Windows: CVE-2026-96856: Windows Management Instrumentation Elevation of Privilege Vulnerability

Heap-based buffer overflow in Windows Management Instrumentation allows an authorized attacker to elevate privileges locally...

Microsoft Windows: CVE-2026-88168: Windows Bind Filter Driver Elevation of Privilege Vulnerability

Heap-based buffer overflow in Windows Bind Filter Driver allows an authorized attacker to elevate privileges locally...

CVE-2026-83934: Stack-based Buffer Overflow

Stack-based buffer overflow in Windows GDI+ allows an unauthorized attacker to execute code over a network...

Microsoft Windows: CVE-2026-83935: Microsoft XML Remote Code Execution Vulnerability

Heap-based buffer overflow in Microsoft XML allows an unauthorized attacker to execute code over a network...

CVE-2026-108399: Heap-based Buffer Overflow

Heap-based buffer overflow in Windows Hyper-V allows an authorized attacker to elevate privileges locally...

CVE-2026-94512: Heap-based Buffer Overflow

Heap-based buffer overflow in SQL Server allows an authorized attacker to execute code over a network...

PT-2026-112651

Name of the Vulnerable Software and Affected Versions Windows CD-ROM Driver affected versions not specified Description A buffer over-read in the Windows CD-ROM Driver allows an unauthorized attacker to elevate privileges over a network. A buffer over-read occurs when a program reads more data fr...

CVE-2026-108130: Heap-based Buffer Overflow

Heap-based buffer overflow in Windows Virtualization-Based Security VBS Enclave allows an authorized attacker to elevate privileges locally...

CVE-2026-85919: Heap-based Buffer Overflow

Heap-based buffer overflow in SQL Server allows an authorized attacker to elevate privileges locally...

CVE-2026-105599: Heap-based Buffer Overflow

Heap-based buffer overflow in Microsoft Office PowerPoint allows an unauthorized attacker to execute code over a network...

SUSE SLED15 / SLES15 Security Update : libsoup (SUSE-SU-2026:4631-1)

The remote SUSE Linux SLED15 / SLEDSAP15 / SLES15 / SLESSAP15 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2026:4631-1 advisory. - CVE-2026-15713: SoupCache: libsoup: HTTP/2 frame window exhaustion remote denial of service via memory leak...