SUSE CVE-2026-66485

GNU cpio is vulnerable to an uncontrolled memory allocation in the makepath function at src/makepath.c. The function uses alloca to allocate stack memory based on the length of argpath, which is derived from an archive-controlled pathname during extraction. A malicious cpio archive containing a...

PT-2026-71809

IBM i 7.6, 7.5, 7.4, and 7.3 could allow a remote attacker to cause a denial of service and potentially obtain sensitive information due to a stack-based buffer overflow...

PT-2026-76032

Previously, DecodeElement would reset the depth counter causing it to never fire; this could lead to stack exhaustion...

CVE-2026-72636: Uncontrolled Recursion

Uncontrolled Recursion CWE-674 in the Elasticsearch wildcard matching helper can lead to a denial of service via Excessive Allocation CAPEC-130. The matcher used to resolve wildcard patterns against names is implemented recursively and had no bound on recursion depth or on the total number of mat...

UBUNTU-CVE-2026-73070

Vim is an open source, command line text editor. Prior to 9.2.0842, the socket server backend in src/socketserver.c accepts unbounded client connections in socketserveraccept, causing descriptors to overflow fdset structures in src/channel.c and fixed-size struct pollfd arrays in src/osunix.c,...

RHEL 9 : gstreamer1-plugins-bad-free (RHSA-2026:54660)

The remote Redhat Enterprise Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2026:54660 advisory. GStreamer is a streaming media framework based on graphs of filters which operate on media data. The gstreamer1-plugins-bad-free package...

PT-2026-71755

Name of the Vulnerable Software and Affected Versions Elasticsearch affected versions not specified Description Uncontrolled Recursion in the wildcard matching helper can lead to a denial of service via Excessive Allocation. The matcher used to resolve wildcard patterns against names is implement...

UBUNTU-CVE-2026-73154

GHSA-5g48-xjmf-7p4q: StationData::setData stack overflow...

CVE-2026-73154

GHSA-5g48-xjmf-7p4q: StationData::setData stack overflow...

CVE-2026-73141

GHSA-xmcv-mjpv-x46q: Audio decoders: stack VLA exhaustion...

CVE-2026-73566: Uncontrolled Resource Consumption

node-tar is a tar archive manipulation library for Node.js. Prior to 7.5.21, node-tar's filesFilter in src/list.ts uses the recursive mapHas helper to walk an archive entry path upward with path.dirname and no segment cap when tar.t... or tar.x... receives a non-empty member-selection list. A...

Security Updates for Microsoft Word Products C2R (August 2026)

The Microsoft Word Products are missing security updates. It is, therefore, affected by multiple vulnerabilities: - Heap-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code locally. CVE-2026-58651, CVE-2026-64915 - Stack-based buffer overflow in Microsof...

Security Updates for Microsoft Access Products C2R (August 2026)

The Microsoft Access Products are missing security updates. It is, therefore, affected by multiple vulnerabilities: - Heap-based buffer overflow in Microsoft Office Access allows an unauthorized attacker to execute code locally. CVE-2026-64906, CVE-2026-64908, CVE-2026-64914, CVE-2026-64920 -...

CVE-2026-52078

opendir stack overflow via wcscat on MAXPATH path...

Nutanix AHV : Multiple Vulnerabilities (NXSA-AHV-11.2)

The version of AHV installed on the remote host is prior to 11.2. It is, therefore, affected by multiple vulnerabilities as referenced in the NXSA-AHV-11.2 advisory. - A vulnerability has been found in GNU Binutils 2.45. The affected element is the function elfswapshdr in the library bfd/elfcode....

CVE-2026-17083

IBM i 7.6, 7.5, 7.4, and 7.3 could allow a remote attacker to execute arbitrary code due to a stack-based buffer overflow...

EUVD-2026-57520

IBM i 7.6, 7.5, 7.4, and 7.3 could allow a remote attacker to execute arbitrary code due to a stack-based buffer overflow...

CVE-2026-17083 IBM i is Affected By Multiple Vulnerabilities in the Debug Server

IBM i 7.6, 7.5, 7.4, and 7.3 could allow a remote attacker to execute arbitrary code due to a stack-based buffer overflow...

K000162891: Jettison vulnerability CVE-2022-45693

Security Advisory Description Jettison before v1.5.2 was discovered to contain a stack overflow via the map parameter. This vulnerability allows attackers to cause a Denial of Service DoS via a crafted string. CVE-2022-45693 Impact There is no impact; F5 products are not affected by this...

CVE-2026-71407

CVE-2026-71407 is a stack-based buffer overflow (CWE-121) in the WAD daemon of Fortinet FortiOS 7.6.1 through 7.6.6 . An unauthenticated attacker who can bypass stack protection and ASLR may execute arbitrary code or commands via crafted sockets, but only if the explicit proxy is configured with ...