PT-2026-87802

Heap-based buffer overflow in Windows Print Spooler Components allows an authorized attacker to elevate privileges locally...

PT-2026-87813

Heap-based buffer overflow in Windows Credential Guard allows an authorized attacker to elevate privileges locally...

PT-2026-87809

Heap-based buffer overflow in Windows Biometric Service allows an authorized attacker to elevate privileges locally...

PT-2026-87820

🚨 CVE-2026-70586 MS Paint CVSS 8.8. heap buffer overflow. Microsoft: Remote Code Execution also Microsoft: victim opens your file so the kill chain is email a doodle, they open it in Paint to "fix one letter", code runs. we hardened the kernel for a decade. Paint still eats files like it is 1995...

PT-2026-88120

🚨 CVE-2026-83972 Heap-based buffer overflow in Windows Biometric Service allows an authorized attacker to elevate privileges locally. 🎖@cveNotify...

PT-2026-88119

🚨 CVE-2026-83971 Heap-based buffer overflow in Windows Biometric Service allows an authorized attacker to elevate privileges locally. 🎖@cveNotify...

PT-2026-88126

🚨 CVE-2026-83978 Heap-based buffer overflow in Windows Biometric Service allows an authorized attacker to elevate privileges locally. 🎖@cveNotify...

PT-2026-88121

🚨 CVE-2026-83973 Heap-based buffer overflow in Windows Biometric Service allows an authorized attacker to elevate privileges locally. 🎖@cveNotify...

PT-2026-88145

🚨 CVE-2026-84000 Heap-based buffer overflow in Microsoft Graphics Component allows an authorized attacker to execute code locally. 🎖@cveNotify...

389-ds-base security, bug fix, and enhancement update

3.2.0-10 - Bump version to 3.2.0-10 - Resolves: RHEL-220500 - CVE-2026-18355 389-ds-base: heap buffer overflow via SASL wrapped-record length lower-bound underflow in sasliostartpacket rhel-10.2.z - Resolves: RHEL-222320 - CVE-2026-18453 389-ds-base: pre-authentication NULL pointer dereference vi...

389-ds-base security, bug fix, and enhancement update

2.8.0-10 - Resolves: RHEL-220502 - CVE-2026-18355 389-ds-base: heap buffer overflow via SASL wrapped-record length lower-bound underflow in sasliostartpacket rhel-9.8.z - Resolves: RHEL-222321 - CVE-2026-18453 389-ds-base: pre-authentication NULL pointer dereference via paged results and...

RHEL 8 : expat (RHSA-2026:64809)

The remote Redhat Enterprise Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2026:64809 advisory. Expat is a C library for parsing XML documents. Security Fixes: expat: libexpat: Use-after-free vulnerability due to improper handler call...

RHEL 8 : 389-ds:1.4 (RHSA-2026:64789)

The remote Redhat Enterprise Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2026:64789 advisory. 389 Directory Server is an LDAP version 3 LDAPv3 compliant server. The base packages include the Lightweight Directory Access Protocol LDAP...

AZL-99980 CVE-2026-18355 affecting package 389-ds-base 3.1.1-12

A heap buffer overflow flaw was found in the SASL I/O layer of 389 Directory Server 389-ds-base. In sasliostartpacket, the wrapped-record length read from the wire is validated only against an upper bound. A small wire length 0, 1, or 2 produces an encryptedbuffercount below the already-consumed...

DEBIAN-CVE-2026-18355

A heap buffer overflow flaw was found in the SASL I/O layer of 389 Directory Server 389-ds-base. In sasliostartpacket, the wrapped-record length read from the wire is validated only against an upper bound. A small wire length 0, 1, or 2 produces an encryptedbuffercount below the already-consumed...

CVE-2026-18355

A heap buffer overflow flaw was found in the SASL I/O layer of 389 Directory Server 389-ds-base. In sasliostartpacket, the wrapped-record length read from the wire is validated only against an upper bound. A small wire length 0, 1, or 2 produces an encryptedbuffercount below the already-consumed...

CVE-2026-18355

A heap buffer overflow flaw was found in the SASL I/O layer of 389 Directory Server 389-ds-base. In sasliostartpacket, the wrapped-record length read from the wire is validated only against an upper bound. A small wire length 0, 1, or 2 produces an encryptedbuffercount below the already-consumed...

UBUNTU-CVE-2026-18355

A heap buffer overflow flaw was found in the SASL I/O layer of 389 Directory Server 389-ds-base. In sasliostartpacket, the wrapped-record length read from the wire is validated only against an upper bound. A small wire length 0, 1, or 2 produces an encryptedbuffercount below the already-consumed...

CVE-2026-86138

A flaw was found in libxml2, a software library for parsing XML documents. An integer overflow within the xmlDictAddQString function can lead to a heap-based buffer overflow. This vulnerability could allow a local attacker to execute arbitrary code on the system, potentially compromising its...

CVE-2026-18355 389-ds-base: 389-ds-base: heap buffer overflow via sasl wrapped-record length lower-bound underflow in sasl_io_start_packet()

A heap buffer overflow flaw was found in the SASL I/O layer of 389 Directory Server 389-ds-base. In sasliostartpacket, the wrapped-record length read from the wire is validated only against an upper bound. A small wire length 0, 1, or 2 produces an encryptedbuffercount below the already-consumed...