Oracle Linux 9 : wireshark (ELSA-2026-83546)

The remote Oracle Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2026-83546 advisory. - Fix DoS via heap-based buffer overflow in SPDY dissector CVE-2026-95387 - Fix DoS vulnerability in H.245 protocol dissector CVE-2026-76927 - Fix DoS...

CVE-2026-79822: Heap-based Buffer Overflow

A security vulnerability in HPE NonStop TNS/X Native Inspect may cause corruption of address and potentially redirect execution flow...

CVE-2026-101307: Heap-based Buffer Overflow

When the PCM sample array needs to grow, the RACK stack doubles a 16-bit allocation counter. Repeated doublings caused the counter to wrap to zero, resulting in a near-zero-length allocation followed by a copy of the existing samples into the undersized buffer. A remote peer can trigger the...

RockyLinux 10 : hplip (RLSA-2026:82883)

The remote RockyLinux 10 host has packages installed that are affected by multiple vulnerabilities as referenced in the RLSA-2026:82883 advisory. hplip: HP Linux Imaging and Printing Software - Use of DSA Key CVE-2025-43023 hplip: HPLIP: Multiple vulnerabilities enabling local code execution and...

Microsoft Windows Raw Image Extension < 2.4.36.0 / 2.5.35.0 RCE (October 2026)

The Windows 'Raw Image Extension' app installed on the remote host is prior to 2.4.36.0 2.5.35.0 on Windows 11 versions 21H2 and 26H2. It is, therefore, affected by multiple remote code execution vulnerabilities: - A heap-based buffer overflow vulnerability exists in the losslessjpegloadraw...

CVE-2026-55246: Heap-based Buffer Overflow

bincookie is a header-only binarycookies parser. Prior to 0.1.9, bincookieinitfile in bincookie.h allocates a buffer using the actual .binarycookies file length but trusts the file-controlled numpages field as the loop bound for byte-swapping pagesizes entries. A crafted file can make the loop re...

PT-2026-115246

Name of the Vulnerable Software and Affected Versions Microsoft Office affected versions not specified Description A heap-based buffer overflow occurs in Microsoft Office, which allows an unauthorized attacker to execute arbitrary code over a network. A heap-based buffer overflow is a memory...

CVE-2026-108444: Heap-based Buffer Overflow

Heap-based buffer overflow in Microsoft Office allows an unauthorized attacker to execute code over a network...

PT-2026-115251

Name of the Vulnerable Software and Affected Versions Microsoft Office Word affected versions not specified Description A heap-based buffer overflow occurs when a program writes more data to a heap memory block than it can hold, potentially corrupting memory. In Microsoft Office Word, this flaw...

CVE-2026-108449: Heap-based Buffer Overflow

Heap-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code over a network...

CVE-2026-108450: Heap-based Buffer Overflow

Heap-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code over a network...

PT-2026-115249

Name of the Vulnerable Software and Affected Versions Microsoft Office Word affected versions not specified Description A heap-based buffer overflow occurs when a program writes more data to a heap memory block than it can hold, potentially corrupting memory. In Microsoft Office Word, this flaw...

CVE-2026-108447: Heap-based Buffer Overflow

Heap-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code over a network...

PT-2026-115250

Name of the Vulnerable Software and Affected Versions Microsoft Office Outlook affected versions not specified Description A heap-based buffer overflow occurs when a program writes more data to a heap memory block than it can hold, potentially corrupting memory. In Microsoft Office Outlook, this...

CVE-2026-108448: Heap-based Buffer Overflow

Heap-based buffer overflow in Microsoft Office Outlook allows an unauthorized attacker to execute code over a network...

PT-2026-115234

Name of the Vulnerable Software and Affected Versions Microsoft Office Word affected versions not specified Description A heap-based buffer overflow occurs when a program writes more data to a heap memory block than it can hold, potentially corrupting memory. In Microsoft Office Word, this flaw...

PT-2026-115230

Name of the Vulnerable Software and Affected Versions Microsoft Office Word affected versions not specified Description A heap-based buffer overflow occurs when a program writes more data to a heap memory block than it can hold, potentially corrupting memory. In Microsoft Office Word, this flaw...

CVE-2026-111272: Out-of-bounds Read

LibRaw through 0.22.2 contains a heap-based out-of-bounds read in LibRaw::parseNikonMakernote that allows attackers to read past a short ShotInfo buffer. Attackers can supply a crafted Nikon NEF/TIFF with a 5-byte ShotInfo tag declaring version 243 to crash applications decoding the image...

CVE-2026-111273: Off-by-one Error

unarr through 1.1.1 contains an off-by-one heap-based buffer overflow in targetname in tar/parse-tar.c, reachable through the arentrygetname API. Attackers can supply a crafted TAR archive with a full ustar prefix and name to write a NUL byte past the allocation, corrupting heap memory and crashi...

CVE-2026-110837

FreeRDP 2.0.0 before 3.32.0, when built with WITHLAME=ON and WITHDSPFFMPEG=OFF, has a heap-based buffer overflow in freerdpdspdecodemp3 because the right-channel PCM pointer is offset by a byte count treated as short elements. A malicious RDP server can send MP3 audio over rdpsnd so decoded sampl...