CVE-2026-85828: Heap-based Buffer Overflow

Heap-based buffer overflow in WebDAV allows an authorized attacker to elevate privileges locally...

CVE-2026-85827: Heap-based Buffer Overflow

Heap-based buffer overflow in WebDAV allows an authorized attacker to elevate privileges locally...

CVE-2026-85814: Heap-based Buffer Overflow

Heap-based buffer overflow in Microsoft Windows Media Foundation allows an unauthorized attacker to execute code over a network...

CVE-2026-85800: Heap-based Buffer Overflow

Heap-based buffer overflow in Windows Error Reporting allows an authorized attacker to elevate privileges locally...

CVE-2026-85798: Heap-based Buffer Overflow

Heap-based buffer overflow in Windows Distributed File System DFS allows an authorized attacker to execute code over a network...

CVE-2026-85835: Buffer Over-read

Buffer over-read in Servicing Stack Updates allows an authorized attacker to disclose information locally...

CVE-2026-85832: Heap-based Buffer Overflow

Heap-based buffer overflow in Windows Background Intelligent Transfer Service BITS allows an authorized attacker to elevate privileges locally...

CVE-2026-85822: Heap-based Buffer Overflow

Heap-based buffer overflow in Windows exFAT File System allows an authorized attacker to elevate privileges locally...

CVE-2026-85809: Heap-based Buffer Overflow

Remote Code Execution in Windows Routing and Remote Access Service RRAS allows attacker to gain an unauthorized access to victim's machine...

Ubuntu 26.04 LTS : openCryptoki vulnerabilities (USN-8707-1)

The remote Ubuntu 26.04 LTS host has packages installed that are affected by multiple vulnerabilities as referenced in the USN-8707-1 advisory. It was discovered that primitive decoders in openCryptoki produced integer underflows when the encoded length was zero. An attacker could possibly use th...

CVE-2026-69634: Heap-based Buffer Overflow

Heap-based buffer overflow in Windows iSCSI allows an unauthorized attacker to execute code over a network...

CVE-2026-68836: Heap-based Buffer Overflow

Heap-based buffer overflow in Windows kernel32.dll allows an authorized attacker to elevate privileges locally...

CVE-2026-70285: Heap-based Buffer Overflow

Heap-based buffer overflow in Windows Win32 Kernel Subsystem allows an authorized attacker to elevate privileges locally...

CVE-2026-70234: Buffer Over-read

Buffer over-read in Desktop Window Manager allows an authorized attacker to disclose information locally...

CVE-2026-70233: Heap-based Buffer Overflow

Heap-based buffer overflow in Windows Common Log File System Driver allows an authorized attacker to elevate privileges locally...

PT-2026-111804

Heap-based buffer overflow in Microsoft Office Access allows an unauthorized attacker to execute code over a network...

CVE-2026-70286: Heap-based Buffer Overflow

Heap-based buffer overflow in Windows Win32K - GRFX allows an authorized attacker to elevate privileges locally...

kernel security update

5.14.0-687.57.1 - Disable UKI signing Orabug: 36571828 - Update Oracle Linux certificates Kevin Lyons - Disable signing for aarch64 Ilya Okomin - Oracle Linux RHCK Module Signing Key was added to the kernel trusted keys list olkmodsigningkey.pem Orabug: 29539237 - Update x509.genkey Orabug:...

CVE-2026-19938: Use After Free

The Bluetooth host's ATT transmit path releases a buffer it does not own when signing fails. chansend in subsys/bluetooth/host/att.c documents and every other error exit implements the contract that on failure the caller retains ownership of the netbuf; the BTATTOPSIGNEDWRITECMD branch instead...

PT-2026-111535

FreeRDP 3.0.0-beta1 before 3.32.0 on Unix builds with PKCS11 support has a stack-based buffer overflow in wprintKeyName in WinPR's NCrypt PKCS11 provider. It hex-encodes a key's CKA ID, which can be up to 64 bytes, into a fixed 128-byte stack buffer. An attacker supplying a malicious PKCS11 token...