CVE-2026-88279 GV-LPC2011/LPC2211 - ONVIF CreateUsers Username/Password Stack-Frame Overflow Denial of Service

GeoVision GV-LPC2211 V1.13 copies oversized ONVIF CreateUsers username or password values into fixed stack fields, allowing an authenticated administrator to crash the ONVIF worker...

CVE-2026-88268 GV-LPC2011/LPC2211 - SSVR Fragment-Reassembly Stack Overflow Denial of Service

GeoVision GV-LPC2211 V1.13 contains an authenticated stack buffer overflow in SSVR fragment reassembly that allows a valid user to crash the SSVR service...

CVE-2026-88268

GeoVision GV-LPC2211 (and GV-LPC2011 ) version V1.13 is affected by an authenticated stack buffer overflow in the SSVR fragment reassembly mechanism. A valid user can exploit this flaw to crash the SSVR service , resulting in a denial of service. The CVSS v3.1 score is 6.5 (MEDIUM) with a network...

PT-2026-89321

GeoVision GV-LPC2211 V1.13 copies an oversized ONVIF SetUser password into a fixed stack field, allowing an authenticated administrator to crash the ONVIF worker...

PT-2026-89330

GeoVision GV-LPC2211 V1.14 260903 fails to validate attacker-controlled variable-length fields before copying them into fixed-size stack buffers in multiple VLSVR request handlers, allowing an unauthenticated remote attacker to crash the VLSVR service...

Security Updates for Microsoft Access Products C2R (September 2026)

The Microsoft Access Products are missing security updates. It is, therefore, affected by multiple vulnerabilities: - Heap-based buffer overflow in Microsoft Office Access allows an unauthorized attacker to execute code over a network. CVE-2026-69529, CVE-2026-69778 - Stack-based buffer overflow ...

Oracle Linux 10 : ELSA-2026-66336-0: / vim (ELSA-2026-663360)

The remote Oracle Linux 10 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2026-663360 advisory. - RHEL-253668 CVE-2026-28420 buffer overflow in terminal emulator - RHEL-215660 CVE-2026-55892 vim: stack out-of-bounds write in dumpprefixes -...

PT-2026-89320

GeoVision GV-LPC2211 V1.13 copies oversized ONVIF CreateUsers username or password values into fixed stack fields, allowing an authenticated administrator to crash the ONVIF worker...

Ubuntu 22.04 LTS / 26.04 LTS / Pro Realtime 22.04 LTS : GNU C Library vulnerabilities (USN-8737-1)

The remote Ubuntu 22.04 LTS / 26.04 LTS / Pro Realtime 22.04 LTS host has packages installed that are affected by multiple vulnerabilities as referenced in the USN-8737-1 advisory. It was discovered that GNU C Library had a buffer overflow in the strfmon function when handling right- justificatio...

CVE-2026-42808: Buffer Copy without Checking Size of Input

An issue was discovered in Bosch Sensortec COINESSDK versions 2.0 through 2.11. The host streaming API function coinesreadstreamsensordata fails to validate the boundaries of the caller-provided destination buffer. Internally, the stream processing mechanism in commintfprocessstreamresponse...

PT-2026-89322

GeoVision GV-LPC2211 V1.13 fails to limit repeated Username elements in ONVIF DeleteUsers requests, allowing an authenticated administrator to overflow a stack array and crash the ONVIF worker...

EUVD-2026-74300

An uncontrolled recursion vulnerability in the Windows SIPA event log parser of Google go-attestation versions up to and including 0.6.1 allows an attacker to cause a denial of service DoS. The WinEvents.readELAMAggregation function recurses for every nested elamAggregation sub-event without...

CVE-2026-19201

An uncontrolled recursion vulnerability in the Windows SIPA event log parser of Google go-attestation versions up to and including 0.6.1 allows an attacker to cause a denial of service DoS. The WinEvents.readELAMAggregation function recurses for every nested elamAggregation sub-event without...

DEBIAN-CVE-2026-19201

An uncontrolled recursion vulnerability in the Windows SIPA event log parser of Google go-attestation versions up to and including 0.6.1 allows an attacker to cause a denial of service DoS. The WinEvents.readELAMAggregation function recurses for every nested elamAggregation sub-event without...

UBUNTU-CVE-2026-19201

An uncontrolled recursion vulnerability in the Windows SIPA event log parser of Google go-attestation versions up to and including 0.6.1 allows an attacker to cause a denial of service DoS. The WinEvents.readELAMAggregation function recurses for every nested elamAggregation sub-event without...

CVE-2026-19201

An uncontrolled recursion vulnerability in the Windows SIPA event log parser of Google go-attestation versions up to and including 0.6.1 allows an attacker to cause a denial of service DoS. The WinEvents.readELAMAggregation function recurses for every nested elamAggregation sub-event without...

CVE-2026-19201: Uncontrolled Recursion

An uncontrolled recursion vulnerability in the Windows SIPA event log parser of Google go-attestation versions up to and including 0.6.1 allows an attacker to cause a denial of service DoS. The WinEvents.readELAMAggregation function recurses for every nested elamAggregation sub-event without...

Security Updates for Microsoft Access Products (September 2026)

The Microsoft Access Products are missing a security update. They are, therefore, affected by multiple vulnerabilities: - Heap-based buffer overflow in Microsoft Office Access allows an authorized attacker to execute code locally. CVE-2026-69477 - Heap-based buffer overflow in Microsoft Office...

CVE-2026-19201 Denial of Service via Unbounded Recursion in go-attestation Windows SIPA Parser

An uncontrolled recursion vulnerability in the Windows SIPA event log parser of Google go-attestation versions up to and including 0.6.1 allows an attacker to cause a denial of service DoS. The WinEvents.readELAMAggregation function recurses for every nested elamAggregation sub-event without...

CVE-2026-19201 Denial of Service via Unbounded Recursion in go-attestation Windows SIPA Parser

An uncontrolled recursion vulnerability in the Windows SIPA event log parser of Google go-attestation versions up to and including 0.6.1 allows an attacker to cause a denial of service DoS. The WinEvents.readELAMAggregation function recurses for every nested elamAggregation sub-event without...