9887 matches found
CVE-2026-103593
A stack-based buffer overflow exists in the Fireware OS logging service . This vulnerability allows a network-adjacent attacker to execute arbitrary code with root privileges by intercepting or impersonating traffic to the configured log server and presenting a specially crafted certificate. The ...
CVE-2026-103593 Fireware OS Stack Buffer Overflow in Logging Service Allows Remote Code Execution
A stack-based buffer overflow vulnerability in the Fireware OS logging service allows a network-adjacent attacker who can impersonate or intercept traffic to the configured log server to execute arbitrary code with root privileges by presenting a specially crafted certificate...
CVE-2026-103594
A stack-based buffer overflow exists in the Fireware OS WireGuard configuration processing. A remote attacker with man-in-the-middle TLS-decrypted access between the Firebox and WatchGuard Cloud can tamper with a FireCloud Gateway configuration payload . This vulnerability can lead to a Denial of...
CVE-2026-93857 Fireware OS Pre-Authentication Stack Buffer Overflow in SIP Proxy Allows Remote Code Execution
A stack-based buffer overflow vulnerability in Fireware OS's SIP proxy allows a remote, unauthenticated attacker to execute arbitrary code by sending a specially crafted request through a policy that uses the SIP proxy...
CVE-2026-93857
A stack-based buffer overflow vulnerability exists in the Fireware OS SIP proxy . A remote, unauthenticated attacker can exploit this by sending a specially crafted request through a policy utilizing the SIP proxy, potentially leading to remote code execution . No specific exploit details or reme...
CVE-2026-103594 Fireware OS Stack Buffer Overflow in WireGuard Configuration Allows Remote Code Execution
A stack-based buffer overflow vulnerability in Fireware OS's WireGuard configuration processing allows a remote attacker that has man-in-the-middle TLS-decrypted access between the Firebox and WatchGuard Cloud to create a Denial of Service condition and potentially execute arbitrary code by...
chromium-browser: skia: chromium-browser: skia: Stack buffer overflow in Skia
A stack buffer overflow flaw was found in the Skia component of the Chromium browser. Upstream bugs: https://code.google.com/p/chromium/issues/detail?id=497591594...
PT-2026-126696
Asterisk is an open source private branch exchange and telephony toolkit. Prior to Asterisk 20.20.1, 21.12.3, 22.10.1, 23.4.1 and Certified Asterisk 20.7-cert11, 22.8-cert3, a stack buffer overflow in the H.323 ooTrace trace-logging function can occur when unbounded vsprintf writes into a fixed...
PT-2026-127192
Asterisk is an open source private branch exchange and telephony toolkit. Prior to Asterisk 20.20.1, 21.12.3, 22.10.1, 23.4.1 and Certified Asterisk 20.7-cert11, 22.8-cert3, an authenticated attacker may cause a stack buffer overflow in res xmpp XMPP namespace prefix handling using carefully...
PT-2026-127239
Asterisk is an open source private branch exchange and telephony toolkit. Prior to Asterisk 20.20.1, 21.12.3, 22.10.1, 23.4.1 and Certified Asterisk 20.7-cert11, 22.8-cert3, an unbounded sscanf in res pjsip pubsub when parsing the MWI NOTIFY Message-Account field may allow an unauthenticated...
Linux Distros Unpatched Vulnerability : CVE-2026-115384
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Wasmtime 39.0.0 before 48.0.4 and 49.0.0 before 49.0.2 contains a stack buffer overflow vulnerability that allows malicious guests to write 16KB to the native...
FreeFloat FTP Server 1.0 Stack Buffer Overflow
FreeFloat FTP Server version 1.0 contains a stack-based buffer overflow in the NOOP command handler. The supplied proof of concept documentation demonstrates control of EIP and remote code execution in a laboratory environment. https://packetstorm.news/download/237895...
CVE-2026-116723 FLTK through 1.4.5 Stack Buffer Overflow via Fl_BMP_Image colors_used Field
FLTK through 1.4.5 contains a stack-based buffer overflow vulnerability in FlBMPImage::loadbmp that allows attackers to corrupt stack memory by supplying an oversized BMP colorsused field. Attackers can craft BMP or ICO files with colorsused above 256 to overflow the 768-byte colormap array,...
CVE-2026-116723
The FLTK library (versions through 1.4.5 ) contains a stack-based buffer overflow vulnerability in the Fl_BMP_Image::load_bmp_() function. The root cause is an insufficient check on the colors_used field in BMP or ICO files; providing a value greater than 256 can overflow the 768-byte colormap ar...
CVE-2026-116723 FLTK through 1.4.5 Stack Buffer Overflow via Fl_BMP_Image colors_used Field
FLTK through 1.4.5 contains a stack-based buffer overflow vulnerability in FlBMPImage::loadbmp that allows attackers to corrupt stack memory by supplying an oversized BMP colorsused field. Attackers can craft BMP or ICO files with colorsused above 256 to overflow the 768-byte colormap array,...
CVE-2026-84604
A stack buffer overflow was addressed through improved input validation. This issue is fixed in macOS Golden Gate 27, macOS Sequoia 15.8.2, macOS Tahoe 26.7.2. Processing a maliciously crafted audit file may corrupt process memory...
CVE-2026-84604
A stack buffer overflow was addressed through improved input validation. This issue is fixed in macOS Golden Gate 27, macOS Sequoia 15.8.2, macOS Tahoe 26.7.2. Processing a maliciously crafted audit file may corrupt process memory...
CVE-2026-84604
A stack buffer overflow vulnerability exists in macOS systems when processing a maliciously crafted audit file . This issue can lead to process memory corruption . The vulnerability has been addressed through improved input validation and is fixed in macOS Golden Gate 27 , macOS Sequoia 15.8.2 , ...
EUVD-2026-110351
A stack buffer overflow was addressed through improved input validation. This issue is fixed in macOS Golden Gate 27, macOS Sequoia 15.8.2, macOS Tahoe 26.7.2. Processing a maliciously crafted audit file may corrupt process memory...
CVE-2026-41089
CVE-2026-41089 — Windows Netlogon CLDAP Stack Buffer Overflow RCE Exploit CVE-ID: CVE-2026-41089 CVSS: 9.8 Critical CWE: CWE-121 Stack-based Buffer Overflow Attack Vector: UDP/389 CLDAP SearchRequest Impact: Remote Code Execution RCE / Denial of Service DoS Affected Versions: Windows Server 2012 ...