PT-2026-112168

Name of the Vulnerable Software and Affected Versions Windows Internet Information Services affected versions not specified Description A stack-based buffer overflow occurs in Windows Internet Information Services, which allows an unauthorized remote attacker to execute arbitrary code over a...

Microsoft Windows: CVE-2026-70207: Network Policy Server (NPS) Remote Code Execution Vulnerability

Heap-based buffer overflow in Network Policy Server NPS allows an authorized attacker to execute code over a network...

PT-2026-112328

Name of the Vulnerable Software and Affected Versions Windows Storage Spaces Controller affected versions not specified Description A heap-based buffer overflow occurs in the Windows Storage Spaces Controller. This issue allows an authorized attacker to elevate their privileges locally on the...

NFS ONCRPC XDR Driver Privilege Escalation

The vulnerability of services for the NFS ONCRPC XDR driver on Windows operating systems is related to buffer overflow in dynamic memory. Exploiting this vulnerability can allow an attacker to gain increased privileges...

PT-2026-111941

Heap-based buffer overflow in Microsoft Office Visio allows an unauthorized attacker to execute code over a network...

CVE-2026-83699: Stack-based Buffer Overflow

Stack-based buffer overflow in Windows Client-Side Caching CSC Service allows an authorized attacker to elevate privileges locally...

CVE-2026-70210: Heap-based Buffer Overflow

Heap-based buffer overflow in Windows OLE DB allows an unauthorized attacker to elevate privileges over a network...

CVE-2026-70068: Heap-based Buffer Overflow

Heap-based buffer overflow in Windows Client-Side Caching CSC Service allows an unauthorized attacker to elevate privileges over a network...

CVE-2026-70149: Heap-based Buffer Overflow

Exposure of sensitive information to an unauthorized actor in Windows Client Side Caching driver csc.sys allows an authorized attacker to disclose information locally...

CVE-2026-70242: Heap-based Buffer Overflow

Heap-based buffer overflow in Microsoft Office Outlook allows an unauthorized attacker to execute code over a network...

CVE-2026-85919: Heap-based Buffer Overflow

Heap-based buffer overflow in SQL Server allows an authorized attacker to elevate privileges locally...

CVE-2026-95117

Buffer Overflow vulnerability in zserge jsmn jsmn HEAD 25647e6 allows a remote attacker to cause a denial of service via the jsmn.h, jsmnparse, example/jsondump.c, dump components...

ROS-20261013-73-0076

The vulnerability in the kernel-lt is related to writing beyond the buffer boundaries in memory. Exploiting this vulnerability can allow an attacker to execute arbitrary code...

Microsoft Windows: CVE-2026-85928: Windows Volume Manager Extension Driver Remote Code Execution Vulnerability

Heap-based buffer overflow in Windows Volume Manager Extension Driver allows an unauthorized attacker to execute code over a network...

CentOS Linux 8.4 [TuxCare] Security Update: zlib / zlib-devel / zlib-static (CENTOS8.4:CLSA-2026:1791915688)

The CentOS Linux 8.4 host has packages installed that are affected by a vulnerability as referenced in the TuxCare CENTOS8.4:CLSA-2026:1791915688 advisory. - zlib 1.2.11 through 1.3.2 contains a heap buffer overflow: after an underlying write fails, gzwrite returns without resetting strm.nextin,...

Microsoft Windows: CVE-2026-85835: Servicing Stack Updates Information Disclosure Vulnerability

Buffer over-read in Servicing Stack Updates allows an authorized attacker to disclose information locally...

KB5126646: Windows Server 2025 Security Update (October 2026)

The remote Windows host is missing security update 5126646. It is, therefore, affected by multiple vulnerabilities - Use after free in Windows Message Queuing Queue Manager allows an unauthorized attacker to execute code over a network. CVE-2026-100202 - Use after free in Microsoft QUIC allows an...

Security Vulnerabilities fixed in Thunderbird 158 — Mozilla

Several buffer-growth sites in libmime performed size arithmetic in 32-bit types without overflow checks. On a sufficiently large message the growth guard could fail open, or the buffer could be reallocated smaller than required, and a subsequent memcpy would then write attacker-controlled data...

SUSE SLES15 Security Update : expat (SUSE-SU-2026:4623-1)

"The remote SUSE Linux SLES15 / SLESSAP15 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2026:4623-1 advisory. - CVE-2025-59375: denial of service resource consumption caused by processing malformed small documents bsc1249584. -...

SUSE SLES12 Security Update : expat (SUSE-SU-2026:4615-1)

"The remote SUSE Linux SLES12 / SLESSAP12 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2026:4615-1 advisory. - CVE-2025-59375: denial of service resource consumption caused by processing malformed small documents bsc1249584. -...