CVE-2026-83965: Stack-based Buffer Overflow

Substance3D - Sampler is affected by a Stack-based Buffer Overflow vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file...

CVE-2026-83643: Stack-based Buffer Overflow

Stack-based buffer overflow in Windows Error Reporting allows an unauthorized attacker to execute code over a network...

CVE-2026-97750: Stack-based Buffer Overflow

Stack-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code over a network...

CVE-2026-96995: Stack-based Buffer Overflow

Stack-based buffer overflow in Microsoft Office Word allows an authorized attacker to elevate privileges locally...

CVE-2026-97012: Stack-based Buffer Overflow

Stack-based buffer overflow in Microsoft Office Outlook allows an unauthorized attacker to execute code over a network...

CVE-2026-70110: Stack-based Buffer Overflow

Stack-based buffer overflow in Microsoft PostScript Printer Driver allows an unauthorized attacker to elevate privileges locally...

CVE-2026-70024: Stack-based Buffer Overflow

Stack-based buffer overflow in Windows Internet Information Services allows an unauthorized attacker to execute code over a network...

CVE-2026-85835: Buffer Over-read

Buffer over-read in Servicing Stack Updates allows an authorized attacker to disclose information locally...

CVE-2026-83719: Buffer Over-read

Buffer over-read in Servicing Stack Updates allows an authorized attacker to disclose information locally...

CVE-2026-83699: Stack-based Buffer Overflow

Stack-based buffer overflow in Windows Client-Side Caching CSC Service allows an authorized attacker to elevate privileges locally...

PT-2026-111535

FreeRDP 3.0.0-beta1 before 3.32.0 on Unix builds with PKCS11 support has a stack-based buffer overflow in wprintKeyName in WinPR's NCrypt PKCS11 provider. It hex-encodes a key's CKA ID, which can be up to 64 bytes, into a fixed 128-byte stack buffer. An attacker supplying a malicious PKCS11 token...

Microsoft Windows: CVE-2026-87711: Windows Installer Elevation of Privilege Vulnerability

Stack-based buffer overflow in Windows Installer allows an authorized attacker to elevate privileges locally...

Microsoft Office: CVE-2026-88156: Microsoft Office Outlook Remote Code Execution Vulnerability

Stack-based buffer overflow in Microsoft Office Outlook allows an unauthorized attacker to execute code over a network...

PT-2026-112800

Name of the Vulnerable Software and Affected Versions Servicing Stack Updates affected versions not specified Description A buffer over-read exists in Servicing Stack Updates, which allows an authorized attacker to disclose sensitive information locally and affect the system. A buffer over-read...

Microsoft Windows: CVE-2026-83863: Servicing Stack Updates Elevation of Privilege Vulnerability

Heap-based buffer overflow in Servicing Stack Updates allows an authorized attacker to elevate privileges locally...

PT-2026-111910

Name of the Vulnerable Software and Affected Versions Microsoft Windows Codecs Library affected versions not specified Description A stack-based buffer overflow occurs in the Microsoft Windows Codecs Library. This issue allows an unauthorized attacker to cause a denial of service over a network. ...

Microsoft Windows: CVE-2026-70024: Windows Internet Information Services Remote Code Execution Vulnerability

Stack-based buffer overflow in Windows Internet Information Services allows an unauthorized attacker to execute code over a network...

Microsoft Windows: CVE-2026-85365: Servicing Stack Updates Elevation of Privilege Vulnerability

Heap-based buffer overflow in Servicing Stack Updates allows an authorized attacker to elevate privileges locally...

PT-2026-113406

Substance3D - Designer is affected by a Stack-based Buffer Overflow vulnerability that could result in an application denial-of-service. An attacker could exploit this vulnerability to crash the application, leading to a denial-of-service condition. Exploitation of this issue requires user...

CVE-2026-103851: Stack-based Buffer Overflow

Substance3D - Stager is affected by a Stack-based Buffer Overflow vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file...