CVE-2026-62365

The Wazuh security platform contains a Heap-based Buffer Overflow (CWE-122) within the DecodeWinevt function located in src/analysisd/decoders/winevtchannel.c. The vulnerability occurs because the code accumulates unnamed Windows EventChannel Data elements into a fixed 65,535-byte heap buffer (jo...

CVE-2025-59938

Wazuh is a free and open source platform used for threat prevention, detection, and response. In versions starting from 3.8.0 to before 4.11.0, wazuh-analysisd is vulnerable to a heap buffer overflow when parsing XML elements from Windows EventChannel messages. This issue has been patched in...