399793 matches found
CVE-2026-70207: Heap-based Buffer Overflow
Heap-based buffer overflow in Network Policy Server NPS allows an authorized attacker to execute code over a network...
Microsoft Windows: CVE-2026-70207: Network Policy Server (NPS) Remote Code Execution Vulnerability
Heap-based buffer overflow in Network Policy Server NPS allows an authorized attacker to execute code over a network...
CVE-2026-70343: Heap-based Buffer Overflow
Heap-based buffer overflow in Microsoft MPEG-2 Video Extension allows an unauthorized attacker to execute code over a network...
CVE-2026-88093: Heap-based Buffer Overflow
Heap-based buffer overflow in Desktop Window Manager allows an authorized attacker to elevate privileges locally...
CVE-2026-85831: Heap-based Buffer Overflow
Heap-based buffer overflow in Windows Biometric Service allows an authorized attacker to disclose information locally...
CVE-2026-68836: Heap-based Buffer Overflow
Heap-based buffer overflow in Windows kernel32.dll allows an authorized attacker to elevate privileges locally...
PT-2026-113498
Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 155.0.8059.79 Description A buffer overflow exists in the Animation component. This flaw allows a remote attacker to execute arbitrary code within the sandbox by inducing the user to visit a specially crafted HT...
7-Zip < 26.02 XZ Heap Buffer Overflow RCE (ZDI-26-444)
The version of 7-Zip installed on the remote host is prior to 26.02. It is, therefore, affected by a remote code execution vulnerability as referenced in the ZDI-26-444 advisory. - This vulnerability allows remote attackers to execute arbitrary code on affected installations of 7-Zip. User...
PT-2026-111910
Name of the Vulnerable Software and Affected Versions Microsoft Windows Codecs Library affected versions not specified Description A stack-based buffer overflow occurs in the Microsoft Windows Codecs Library. This issue allows an unauthorized attacker to cause a denial of service over a network. ...
CVE-2026-70301: Heap-based Buffer Overflow
Heap-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code over a network...
SUSE SLED15 / SLES15 Security Update : ghostscript (SUSE-SU-2026:4632-1)
The remote SUSE Linux SLED15 / SLEDSAP15 / SLES15 / SLESSAP15 host has packages installed that are affected by a vulnerability as referenced in the SUSE-SU-2026:4632-1 advisory. This update for ghostscript fixes the following issue: - CVE-2026-39919: heap-based buffer overflow in the JPEG 2000...
Ubuntu 16.04 LTS / 18.04 LTS / 20.04 LTS / 22.04 LTS / 24.04 LTS / 26.04 LTS : BlueZ vulnerabilities (USN-8908-1)
The remote Ubuntu 16.04 LTS / 18.04 LTS / 20.04 LTS / 22.04 LTS / 24.04 LTS / 26.04 LTS host has packages installed that are affected by multiple vulnerabilities as referenced in the USN-8908-1 advisory. Michael Bommarito discovered that BlueZ incorrectly handled codec capability storage in the...
KB5126836: Windows Server 2012 R2 Security Update (October 2026)
The remote Windows host is missing security update 5126836. It is, therefore, affected by multiple vulnerabilities - Use after free in Windows Message Queuing Queue Manager allows an unauthorized attacker to execute code over a network. CVE-2026-100202 - Heap-based buffer overflow in Network Poli...
CVE-2026-83768: Heap-based Buffer Overflow
Heap-based buffer overflow in Windows Kernel allows an authorized attacker to elevate privileges locally...
Ubuntu 22.04 LTS / 24.04 LTS / 26.04 LTS : GNU Core Utilities vulnerabilities (USN-8697-1)
The remote Ubuntu 22.04 LTS / 24.04 LTS / 26.04 LTS host has packages installed that are affected by multiple vulnerabilities as referenced in the USN-8697-1 advisory. It was discovered that GNU Core Utilities sort had a heap buffer under-read in its begfield function. A local attacker could...
Ubuntu 14.04 LTS / 16.04 LTS / 18.04 LTS / 20.04 LTS / 22.04 LTS / 24.04 LTS / 26.04 LTS : libxml2 vulnerabilities (USN-8910-1)
The remote Ubuntu 14.04 LTS / 16.04 LTS / 18.04 LTS / 20.04 LTS / 22.04 LTS / 24.04 LTS / 26.04 LTS host has packages installed that are affected by multiple vulnerabilities as referenced in the USN-8910-1 advisory. Yirou Yang discovered that libxml2 incorrectly handled certain XML catalogs. If a...
SUSE SLES15 Security Update : unbound (SUSE-SU-2026:4624-1)
The remote SUSE Linux SLES15 / SLESSAP15 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2026:4624-1 advisory. - CVE-2026-77860: 'serve-expired' can bypass Unbound 'wait-limit' bsc1280403. - CVE-2026-77955: Possible ZONEMD verification bypass...
Security Updates for Microsoft Office Online Server (October 2026)
The Microsoft Office Online Server or Office Web Apps installation on the remote host is missing security updates. It is, therefore, affected by multiple vulnerabilities: - Heap-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code over a network...
CentOS Linux 8.5 [TuxCare] Security Update: zlib / zlib-devel / zlib-static (CENTOS8.5:CLSA-2026:1791916248)
The CentOS Linux 8.5 host has packages installed that are affected by a vulnerability as referenced in the TuxCare CENTOS8.5:CLSA-2026:1791916248 advisory. - zlib 1.2.11 through 1.3.2 contains a heap buffer overflow: after an underlying write fails, gzwrite returns without resetting strm.nextin,...