UBUNTU-CVE-2026-109940

FreeRDP 3.0.0-beta1 before 3.32.0 on Unix builds with PKCS11 support has a stack-based buffer overflow in wprintKeyName in WinPR's NCrypt PKCS11 provider. It hex-encodes a key's CKAID, which can be up to 64 bytes, into a fixed 128-byte stack buffer. An attacker supplying a malicious PKCS11 token ...

CVE-2026-109940

FreeRDP 3.0.0-beta1 before 3.32.0 on Unix builds with PKCS11 support has a stack-based buffer overflow in wprintKeyName in WinPR's NCrypt PKCS11 provider. It hex-encodes a key's CKAID, which can be up to 64 bytes, into a fixed 128-byte stack buffer. An attacker supplying a malicious PKCS11 token ...

KB5127356: Servicing stack update for Windows Server 2012 R2: October 13, 2026

KB5127356: Servicing stack update for Windows Server 2012 R2: October 13, 2026 Applies To Windows Server 2012 R2 ESU Summary This update makes quality improvements to the servicing stack, which is the component that installs Windows updates. Servicing stack updates SSU makes sure that you have a...

KB5126649: Servicing stack update for Windows 10, version 1607 and Windows Server 2016: October 13, 2026

KB5126649: Servicing stack update for Windows 10, version 1607 and Windows Server 2016: October 13, 2026 Applies To Win 10 Ent LTSB 2016 Win 10 IoT Ent LTSB 2016 Windows Server 2016, all editions Important Free support for Windows 10 Enterprise LTSB 2016 and Windows 10 IoT Enterprise 2016 LTSB en...

Windows Storage Elevation of Privilege Vulnerability

Stack-based buffer overflow in Windows Storage allows an authorized attacker to elevate privileges locally...

Servicing Stack Updates Elevation of Privilege Vulnerability

Time-of-check time-of-use toctou race condition in Servicing Stack Updates allows an authorized attacker to elevate privileges locally...

Windows Update Stack Spoofing Vulnerability

Improper verification of cryptographic signature in Windows Update Stack allows an authorized attacker to perform spoofing locally...

SysInternals Elevation of Privilege Vulnerability

Stack-based buffer overflow in SysInternals allows an authorized attacker to elevate privileges locally...

SQL Server Elevation of Privilege Vulnerability

Stack-based buffer overflow in SQL Server allows an authorized attacker to elevate privileges over a network...

Microsoft Office Outlook Remote Code Execution Vulnerability

Stack-based buffer overflow in Microsoft Office Outlook allows an unauthorized attacker to execute code over a network...

Windows Installer Elevation of Privilege Vulnerability

Stack-based buffer overflow in Windows Installer allows an authorized attacker to elevate privileges locally...

KB5127357: Servicing stack update for Windows Server 2012: October 13, 2026

KB5127357: Servicing stack update for Windows Server 2012: October 13, 2026 Applies To Windows Server 2012 ESU Summary This update makes quality improvements to the servicing stack, which is the component that installs Windows updates. Servicing stack updates SSU makes sure that you have a robust...

Windows GDI+ Remote Code Execution Vulnerability

Stack-based buffer overflow in Windows GDI+ allows an unauthorized attacker to execute code over a network...

Microsoft Office Excel Remote Code Execution Vulnerability

Stack-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code over a network...

Microsoft Office Word Remote Code Execution Vulnerability

Stack-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code over a network...

Microsoft PostScript Printer Driver Elevation of Privilege Vulnerability

Stack-based buffer overflow in Microsoft PostScript Printer Driver allows an unauthorized attacker to elevate privileges locally...

Windows Update Stack Tampering Vulnerability

Improper access control in Windows Update Stack allows an authorized attacker to perform tampering locally...

Servicing Stack Updates Elevation of Privilege Vulnerability

Heap-based buffer overflow in Servicing Stack Updates allows an authorized attacker to elevate privileges locally...

Servicing Stack Updates Information Disclosure Vulnerability

Buffer over-read in Servicing Stack Updates allows an authorized attacker to disclose information locally...

Windows Client-Side Caching (CSC) Service Elevation of Privilege Vulnerability

Stack-based buffer overflow in Windows Client-Side Caching CSC Service allows an authorized attacker to elevate privileges locally...