CVE-2026-112063

libstrophe through 0.14.0 contains a stack-based buffer overflow vulnerability in SCRAMHi that allows malicious XMPP servers to overflow a 128-byte stack buffer by sending an oversized SCRAM salt. Attackers can send a server-first-message whose s= attribute decodes to more than 124 bytes, abortin...

CVE-2026-112063: Stack-based Buffer Overflow

libstrophe through 0.14.0 contains a stack-based buffer overflow vulnerability in SCRAMHi that allows malicious XMPP servers to overflow a 128-byte stack buffer by sending an oversized SCRAM salt. Attackers can send a server-first-message whose s= attribute decodes to more than 124 bytes, abortin...

Security update for fetchmail (important)

openSUSE security update: security update for fetchmail ------------------------------------------------------------- Announcement ID: openSUSE-SU-2026:22077-1 Rating: important References: bsc1282055 Cross-References: CVE-2026-94184 CVSS scores: CVE-2026-94184 SUSE : 8.1...

CVE-2026-112062: Stack-based Buffer Overflow

lwIP through 2.2.1 contains a stack out-of-bounds write vulnerability in mdnshandleresponse that allows adjacent attackers to corrupt stack memory by sending mDNS responses with invalid domain names. Attackers on the local link can send multicast PTR answers with oversized RDLENGTH or SRV answers...

PT-2026-116646

libstrophe through 0.14.0 contains a stack-based buffer overflow vulnerability in SCRAM Hi that allows malicious XMPP servers to overflow a 128-byte stack buffer by sending an oversized SCRAM salt. Attackers can send a server-first-message whose s= attribute decodes to more than 124 bytes, aborti...

Linux Distros Unpatched Vulnerability : CVE-2026-110606

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - LibreCAD libdxfrw through LC2.2.0 LibreCAD through 2.2.1.5 contains a stack-based out-of-bounds read vulnerability in dwgReader18::readFileHeader caused by...

CVE-2026-111275

A flaw was found in nifticlib. This vulnerability can result in a Denial of Service DoS or memory corruption when an application processes a specially crafted NIfTI-2 image file. Due to missing range validation on dimension header values, an attacker could supply a malicious file that triggers a...

CVE-2026-111154

A flaw was found in libtimidity. The SoundFont loader fails to properly validate generator operator values during file parsing, leading to a stack-based out-of-bounds write. By convincing a user to open a specially crafted SoundFont .sf2 audio file, an attacker can corrupt stack memory and crash...

Adobe Substance 3D Sampler < 6.0.4 Multiple Vulnerabilities (APSB26-159)

The version of Adobe Substance 3D Sampler installed on the remote host is prior or equal to 6.0.3. It is, therefore, affected by multiple vulnerabilities as referenced in the APSB26-159 advisory. - Substance3D - Sampler is affected by an out-of-bounds write vulnerability that could result in...

CVE-2026-108440

Stack-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code over a network...

CVE-2026-108431

Stack-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code over a network...

EUVD-2026-102457

Stack-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code over a network...

CVE-2026-108445

A stack-based buffer overflow vulnerability exists in Microsoft Office Word . This flaw allows an unauthorized attacker to achieve remote code execution over a network. The vulnerability is categorized under CWE-121 and has a HIGH base severity score of 8.8. Exploitation details are not provided ...

EUVD-2026-102452

Stack-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code over a network...

CVE-2026-108431

A stack-based buffer overflow vulnerability exists in Microsoft Office Word , which could allow an unauthorized attacker to execute code over a network. The vulnerability is confirmed by Microsoft and has a HIGH base severity score of 8.8. Exploitation details are not provided in the documents. R...

Microsoft Office Word Remote Code Execution Vulnerability

Stack-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code over a network...

Microsoft Office Word Remote Code Execution Vulnerability

Stack-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code over a network...

ghostscript: ghostscript: stack-based buffer overflow in pdfwrite via crafted font data

A flaw was found in ghostscript. This vulnerability allows a remote attacker to trigger an application crash leading to a Denial of Service DoS or potentially execute arbitrary code by tricking a user or service into processing a specially crafted file. The issue stems from a stack-based buffer...

ghostscript: ghostscript: stack-based buffer overflow in pdfwrite via crafted font data

A flaw was found in ghostscript. This vulnerability allows a remote attacker to trigger an application crash leading to a Denial of Service DoS or potentially execute arbitrary code by tricking a user or service into processing a specially crafted file. The issue stems from a stack-based buffer...

Important: Red Hat Security Advisory: ghostscript security update

An update for ghostscript is now available for Red Hat Enterprise Linux 10. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability...