CVE-2026-71334: Heap-based Buffer Overflow

Heap-based buffer overflow in Windows NFS Portmapper allows an authorized attacker to elevate privileges locally...

CVE-2026-68845: Heap-based Buffer Overflow

Heap-based buffer overflow in Windows Program Compatibility Assistant Service allows an authorized attacker to elevate privileges locally...

PT-2026-87641

Heap-based buffer overflow in Windows Raw Image Extension allows an unauthorized attacker to execute code over a network...

CVE-2026-69325: Heap-based Buffer Overflow

Heap-based buffer overflow in Microsoft JScript allows an unauthorized attacker to execute code over a network...

CVE-2026-72959: Heap-based Buffer Overflow

Remote Code Execution in Windows Routing and Remote Access Service RRAS allows attacker to gain an unauthorized access to victim's machine...

CVE-2026-69787: Heap-based Buffer Overflow

Heap-based buffer overflow in Windows Biometric Service allows an authorized attacker to elevate privileges locally...

CVE-2026-69272: Heap-based Buffer Overflow

Heap-based buffer overflow in Microsoft Standard XPS allows an authorized attacker to elevate privileges over a network...

CVE-2026-81352: Heap-based Buffer Overflow

Heap-based buffer overflow in Microsoft Windows Codecs Library allows an unauthorized attacker to execute code over a network...

CVE-2026-69489: Heap-based Buffer Overflow

Heap-based buffer overflow in Windows Biometric Service allows an authorized attacker to elevate privileges locally...

CVE-2026-69620: Stack-based Buffer Overflow

Stack-based buffer overflow in Windows DHCP Server allows an unauthorized attacker to execute code over a network...

CVE-2026-69456: Heap-based Buffer Overflow

Heap-based buffer overflow in Microsoft Windows Speech allows an authorized attacker to elevate privileges locally...

CVE-2026-69433: Heap-based Buffer Overflow

Heap-based buffer overflow in Windows Error Reporting allows an authorized attacker to elevate privileges locally...

CVE-2026-71328

Heap-based buffer overflow in Visual Studio allows an unauthorized attacker to execute code over a network...

NewStart CGSL MAIN 7.02 : xorg-x11-server-Xwayland Vulnerability (NS-SA-2026-0112)

The remote NewStart CGSL host, running version MAIN 7.02, has xorg-x11-server-Xwayland packages installed that are affected by a vulnerability: - A flaw was found in the X.org server. Due to improperly tracked allocation size in XkbSetCompatMap, a local attacker may be able to trigger a buffer...

EulerOS 2.0 SP12 : httpd (EulerOS-SA-2026-3268)

According to the versions of the httpd packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : Improper Null Termination, Out-of-bounds Read vulnerability in Apache HTTP Server. This issue affects Apache HTTP Server: through 2.4.66. Users are...

EulerOS 2.0 SP12 : libsolv (EulerOS-SA-2026-3277)

According to the versions of the libsolv packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : A flaw was found in libsolv. This heap buffer overflow vulnerability occurs when a victim processes a specially crafted .solv file containing...

EulerOS 2.0 SP12 : libssh2 (EulerOS-SA-2026-3354)

According to the versions of the libssh2 packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : libssh2 through 1.11.1 reads an attacker-controlled 32-bit attribute count from a publickey-subsystem response and uses it in the allocation...

RHEL 8 : 389-ds:1.4 (RHSA-2026:64791)

The remote Redhat Enterprise Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2026:64791 advisory. 389 Directory Server is an LDAP version 3 LDAPv3 compliant server. The base packages include the Lightweight Directory Access Protocol LDAP...

EulerOS 2.0 SP12 : spice-vdagent (EulerOS-SA-2026-3387)

According to the versions of the spice-vdagent packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : A path traversal vulnerability was found in spice-vdagent. This flaw allows a malicious or compromised SPICE host to write arbitrary files ...

EulerOS 2.0 SP12 : gzip (EulerOS-SA-2026-3266)

According to the versions of the gzip packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : GNU gzip contains a global buffer overflow vulnerability in the LZH decompression logic caused by improper reuse of shared global state between...