Windows Storage Spaces Controller Remote Code Execution Vulnerability

Heap-based buffer overflow in Windows Storage Spaces Controller allows an authorized attacker to execute code locally...

Microsoft Excel Remote Code Execution Vulnerability

Stack-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code locally...

Microsoft Excel Remote Code Execution Vulnerability

Heap-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code locally...

Windows NTFS Remote Code Execution Vulnerability

Heap-based buffer overflow in Windows NTFS allows an unauthorized attacker to execute code locally...

PT-2026-88078

Name of the Vulnerable Software and Affected Versions Microsoft Office Excel affected versions not specified Description A stack-based buffer overflow occurs when a program writes more data to a buffer located on the stack than the buffer is allocated to hold, potentially overwriting adjacent...

PT-2026-88068

Name of the Vulnerable Software and Affected Versions Microsoft Office Excel affected versions not specified Description A heap-based buffer overflow occurs when a program writes more data to a heap memory block than it can hold, potentially corrupting memory. This issue allows an unauthorized...

PT-2026-87199

A new vulnerability with increased severity was disclosed for Microsoft Windows CVE-2026-58599 https://t.co/KnKmDk7lXz...

PT-2026-86736

Composer is a dependency Manager for the PHP language. From 1.0 until 2.2.30 and 2.10.3, a malicious dependency package from a custom Composer repository or an untrusted composer.lock file could set source.type to perforce and source.url to an rsh: or jsh: P4PORT value. When the Perforce p4 clien...

CVE-2026-81302

PALLET CONTROL products contain an incorrect default permission vulnerability, which may allow a local attacker to execute arbitrary code with SYSTEM privileges on the affected product...

CVE-2026-69665

SKYSEA Client View and SKYMEC IT Manager contain an issue with incorrect default permissions. If this vulnerability is exploited, an attacker who can log in to a Windows system on which the affected product is installed may execute arbitrary code with SYSTEM privilege...

dotnet: .NET: Local code execution via deserialization of untrusted data

A flaw was found in .NET. This vulnerability allows an unauthorized attacker to execute code locally by exploiting a deserialization of untrusted data. This means that if an attacker can provide specially crafted data, the .NET application may process it in a way that leads to the execution of...

dotnet: .NET: Local code execution via deserialization of untrusted data

A flaw was found in .NET. This vulnerability allows an unauthorized attacker to execute code locally by exploiting a deserialization of untrusted data. This means that if an attacker can provide specially crafted data, the .NET application may process it in a way that leads to the execution of...

SGLang is Vulnerable to DoS via the data_hash Function

A vulnerability was determined in sgl-project SGLang up to 0.5.11. Affected by this vulnerability is the function datahash of the component Cache Handler. This manipulation causes denial of service. The attack is restricted to local execution. A high degree of complexity is needed for the attack...

SUSE CVE-2026-14610

A flaw has been found in Open Asset Import Library Assimp up to 6.0.5. Impacted is the function Assimp::CSMImporter::InternReadFile of the file code/AssetLib/CSM/CSMLoader.cpp of the component CSM File Handler. This manipulation causes heap-based buffer overflow. The attack is restricted to local...

Out-of-bounds Write

Overview Affected versions of this package are vulnerable to Out-of-bounds Write via the memory management process. An attacker can achieve arbitrary code execution by supplying crafted input that triggers an out-of-bounds write during local execution with user interaction. Remediation Upgrade...

Out-of-bounds Write

Overview Affected versions of this package are vulnerable to Out-of-bounds Write via the memory management process. An attacker can achieve arbitrary code execution by supplying crafted input that triggers an out-of-bounds write during local execution with user interaction. Remediation Upgrade...

Integer Overflow or Wraparound

Overview Affected versions of this package are vulnerable to Integer Overflow or Wraparound due to improper handling of integer values in the process. An attacker can achieve code execution with the privileges of the user by supplying specially crafted input that triggers an integer overflow duri...

Integer Overflow or Wraparound

Overview Affected versions of this package are vulnerable to Integer Overflow or Wraparound due to improper handling of integer values in the process. An attacker can achieve code execution with the privileges of the user by supplying specially crafted input that triggers an integer overflow duri...

Out-of-bounds Write

Overview Affected versions of this package are vulnerable to Out-of-bounds Write via the process. An attacker can execute arbitrary code with high confidentiality, integrity, and availability impact by triggering an out-of-bounds write through crafted input during local execution with required us...

Out-of-bounds Write

Overview Affected versions of this package are vulnerable to Out-of-bounds Write via the process. An attacker can execute arbitrary code with high confidentiality, integrity, and availability impact by triggering an out-of-bounds write through crafted input during local execution with required us...