PT-2026-117354

Generation of Error Message Containing Sensitive Information vulnerability in Apache Camel CXF component. This issue affects Apache Camel: from 4.0.0 before 4.18.5, from 4.19.0 before 4.22.1. When a route behind a CXF SOAP consumer failed with an exception the service contract does not declare, t...

PT-2026-117343

Generation of Error Message Containing Sensitive Information vulnerability in Apache Camel Knative component. This issue affects Apache Camel: from 4.0.0 before 4.18.5, from 4.19.0 before 4.22.1. When processing of an exchange failed on the consumer side, the Knative HTTP consumer wrote the...

Microsoft Office 2016 Equation Editor Memory Corruption

Microsoft Office versions 2007 SP3 through 2016 contain a stack-based buffer overflow in Equation Editor. This analysis describes the vulnerability, attack chain, patches, and mitigations...

CVE-2026-12665: Stack-based Buffer Overflow

IBM MQ could allow a remote attacker to execute arbitrary code due to a stack buffer overflow when processing TLS certificates with malformed distinguished names during channel connection establishment...

CVE-2026-85257: Generation of Error Message Containing Sensitive Information

Generation of Error Message Containing Sensitive Information vulnerability in Apache Camel CXF component. This issue affects Apache Camel: from 4.0.0 before 4.18.5, from 4.19.0 before 4.22.1. When a route behind a CXF SOAP consumer failed with an exception the service contract does not declare, t...

Linux Distros Unpatched Vulnerability : CVE-2026-96956

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Stack-based buffer overflow in SQL Server allows an authorized attacker to elevate privileges over a network. CVE-2026-96956 Note that Nessus relies on the...

CVE-2026-108984: Stack-based Buffer Overflow

A vulnerability is in Web Server default connection ports under the process name GeoWebServer.exe...

CVE-2026-8168: Uncontrolled Recursion

Uncontrolled recursion in the SVG parser and renderer of the Qt SVG module QtSvg in Qt Group Qt allows attackers to cause a denial of service application crash via stack exhaustion via a crafted SVG file with deeply nested elements...

PT-2026-118015

Coraza JSON body processor: argument-limit truncation reopens an unbounded-depth gjson.Valid stack overflow process crash in github.com/corazawaf/coraza...

CVE-2026-76788: Out-of-bounds Write

The OSDP Control Panel reply parser cpdecoderesponse in subsys/mgmt/osdp/src/osdpcp.c decodes replies from a Peripheral Device into a stack-allocated struct osdpevent. For the REPLYKEYPPAD and REPLYRAW reply types, the payload length is taken from the received frame and the only validation...

Red Hat: CVE-2026-112898: pillow: Pillow: Information disclosure via empty palette quantization

Pillow is a Python imaging library. From 9.1.0 until 13.0.0, Pillow can disclose uninitialized stack memory when Image.quantize uses an empty palette. ImagingPaletteCacheUpdate leaves a local cache array uninitialized when the palette has zero entries, and the conversion path emits those bytes as...

CVE-2026-84180: Generation of Error Message Containing Sensitive Information

Generation of Error Message Containing Sensitive Information vulnerability in Apache Camel Knative component. This issue affects Apache Camel: from 4.0.0 before 4.18.5, from 4.19.0 before 4.22.1. When processing of an exchange failed on the consumer side, the Knative HTTP consumer wrote the...

PT-2026-118010

Mutually-referencing array formulas recurse unboundedly, causing a fatal stack overflow in github.com/xuri/excelize...

PT-2026-117651

Name of the Vulnerable Software and Affected Versions Zephyr affected versions not specified Description The OSDP Control Panel reply parser cp decode response in subsys/mgmt/osdp/src/osdp cp.c fails to properly validate the payload length for REPLY KEYPPAD and REPLY RAW reply types. An attacker...

PT-2026-117685

Name of the Vulnerable Software and Affected Versions Pillow versions 9.1.0 through 12.x Description Pillow can disclose uninitialized stack memory when the Image.quantize function uses an empty palette. This occurs because the ImagingPaletteCacheUpdate function leaves a local cache array...

CVE-2026-105810: Stack-based Buffer Overflow

Tapo C320WS V2.0 contains an authenticated stack-based buffer overflow in the local onboarding Wi-Fi configuration path. An authenticated attacker on the adjacent network can submit a crafted request containing an oversized encrypted password field, overwrite stack state, and execute commands wit...

PT-2026-117537

Name of the Vulnerable Software and Affected Versions Tapo C320WS V2.0 Description An authenticated stack-based buffer overflow exists in the local onboarding Wi-Fi configuration path. An attacker on the adjacent network can submit a crafted request containing an oversized encrypted password fiel...

PT-2026-132891

Cpanel::JSON::XS versions before 4.80 for Perl allow stack exhaustion via nested tagged values under allow tags in decode tag. With allow tags, "" starts a tagged value. Its tag and value are decoded recursively, and each can start another tagged value. Unlike arrays and objects, this nesting is...

PT-2026-117571

Name of the Vulnerable Software and Affected Versions Cpanel::JSON::XS versions prior to 4.80 Description An issue exists in the decode tag function where the use of allow tags enables stack exhaustion through nested tagged values. When allow tags is active, the character "" initiates a tagged...

CVE-2026-110673: Uncontrolled Recursion

Cpanel::JSON::XS versions before 4.80 for Perl allow stack exhaustion via nested tagged values under allowtags in decodetag. With allowtags, "" starts a tagged value. Its tag and value are decoded recursively, and each can start another tagged value. Unlike arrays and objects, this nesting is not...