PT-2026-70775

Name of the Vulnerable Software and Affected Versions Windows Installer affected versions not specified Description A stack-based buffer overflow occurs in Windows Installer, which allows an authorized attacker to elevate privileges locally. A stack-based buffer overflow is a condition where a...

PT-2026-70515

Name of the Vulnerable Software and Affected Versions Windows DHCP Client affected versions not specified Description A stack-based buffer overflow occurs in the Windows DHCP Client, which allows an authorized attacker to elevate privileges locally. A stack-based buffer overflow is a condition...

dts-data__damn-vulnerable-tiny-web-server

Damn Vulnerable Tiny Web Server A deliberately insecure webse...

USN-8592-1: ImageMagick vulnerabilities

Hao Ren discovered that ImageMagick incorrectly handled certain images when using the wavelet-denoise operation. An attacker could possibly use this issue to trigger an out-of-bounds heap write, resulting in arbitrary code execution. This issue only affected Ubuntu 18.04 LTS, Ubuntu 20.04 LTS,...

Exploit for CVE-2021-47881

CVE-2021-47881 Local stack-based buffer overflow in dataSIM...

Security Bulletin: IBM Informix Server Vulnerability in SQL Interface Handler Could Allow Remote Code Execution (CVE-2026-13361)

Summary A remote code execution vulnerability exists in the SQL Interface component of IBM Informix Dynamic Server. An admitted SQL Interface client can send a specially crafted request to cause a stack-based buffer overflow. Vulnerability Details CVEID:CVE-2026-13361 DESCRIPTION: IBM Informix...

CVE-2026-68184

In the Linux kernel, the following vulnerability has been resolved: cdrom: fix stack out-of-bounds read in CDROMVOLCTRL mmcioctlcdromvolume first reads the audio control mode page into a 32-byte stack buffer with cgc-buflen set to 24. If the device reports a block descriptor, the function increas...

UBUNTU-CVE-2026-68184

In the Linux kernel, the following vulnerability has been resolved: cdrom: fix stack out-of-bounds read in CDROMVOLCTRL mmcioctlcdromvolume first reads the audio control mode page into a 32-byte stack buffer with cgc-buflen set to 24. If the device reports a block descriptor, the function increas...

CVE-2026-68184 cdrom: fix stack out-of-bounds read in CDROMVOLCTRL

In the Linux kernel, the following vulnerability has been resolved: cdrom: fix stack out-of-bounds read in CDROMVOLCTRL mmcioctlcdromvolume first reads the audio control mode page into a 32-byte stack buffer with cgc-buflen set to 24. If the device reports a block descriptor, the function increas...

CVE-2026-21068

Stack-based buffer overflow in librilsem.so prior to SMR Aug-2026 Release 1 allows privileged local attackers to execute arbitrary code...

Alibaba Cloud Linux 3 : 0243: vim (ALINUX3-SA-2026:0243)

The remote Alibaba Cloud Linux 3 host has packages installed that are affected by multiple vulnerabilities as referenced in the ALINUX3-SA-2026:0243 advisory. Package updates are available for Alibaba Cloud Linux 3 that fix the following vulnerabilities: CVE-2026-55693: Vim is an open source,...

MiracleLinux 9 : gimp-3.0.4-4.el9_8.7 (AXSA:2026-1507:08)

The remote MiracleLinux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the AXSA:2026-1507:08 advisory. gimp: gimp: Stack buffer overflow in pnmscannergettoken CVE-2026-58380 gimp: gimp: Integer overflow in readRLEchannel CVE-2026-58384 Tenable has...

MiracleLinux 9 : libxml2-2.9.13-14.el9_8.2 (AXSA:2026-1496:06)

The remote MiracleLinux 9 host has packages installed that are affected by a vulnerability as referenced in the AXSA:2026-1496:06 advisory. libxml2: Stack Buffer Overflow in xmllint Interactive Shell Command Handling CVE-2025-6170 Tenable has extracted the preceding description block directly fro...

PT-2026-69396

Name of the Vulnerable Software and Affected Versions libril sem.so versions prior to SMR Aug-2026 Release 1 Description A stack-based buffer overflow exists in the libril sem.so library. This flaw allows privileged local attackers to execute arbitrary code. A stack-based buffer overflow occurs...

CLSA-2026-1785838548 radvd: Fix of CVE-2026-48715

CVE-2026-48715: radvdump stack buffer overflow in printff Route Information option parser via crafted ICMPv6 Router Advertisement...

CLSA-2026-1786007261 Fix CVE(s): CVE-2026-28494

SECURITY UPDATE: stack buffer overflow in the morphology kernel parser - debian/patches/CVE-2026-28494.patch: bound the token copy to sizeoftoken-1 in ParseKernelArray and ParseKernelName in magick/morphology.c - CVE-2026-28494...

CVE-2026-55980: Stack-based Buffer Overflow

A denial-of-service vulnerability in CatchPulse could allow an attacker to conduct a stack buffer overrun attack, leading to a denial-of-service condition...

CLSA-2026-1785945472 Fix CVE(s): CVE-2026-28494

SECURITY UPDATE: stack buffer overflow in the morphology kernel parser - debian/patches/CVE-2026-28494.patch: bound the token copy to sizeoftoken-1 in ParseKernelArray and ParseKernelName in magick/morphology.c - CVE-2026-28494...

CVE-2026-71266

tinyobjloader-c's tinyobjparseandindexmtlfile tinyobjloaderc.h reads each line of a .mtl material file into a fixed 4096-byte stack buffer via memcpylinebuf, p, plen, guarded only by . The identical vulnerable pattern is duplicated in a second function in the same file...

UBUNTU-CVE-2026-71266

tinyobjloader-c's tinyobjparseandindexmtlfile tinyobjloaderc.h reads each line of a .mtl material file into a fixed 4096-byte stack buffer via memcpylinebuf, p, plen, guarded only by . The identical vulnerable pattern is duplicated in a second function in the same file...