CVE-2026-95117

Buffer Overflow vulnerability in zserge jsmn jsmn HEAD 25647e6 allows a remote attacker to cause a denial of service via the jsmn.h, jsmnparse, example/jsondump.c, dump components...

CVE-2026-95115

Buffer Overflow vulnerability in libwebsockets main 106d542c allows a remote attacker to cause a denial of service via the LEJP JSON parser...

Microsoft Windows: CVE-2026-85871: Windows Kernel-Mode Drivers Elevation of Privilege Vulnerability

Heap-based buffer overflow in Windows Kernel-Mode Drivers allows an authorized attacker to elevate privileges locally...

CVE-2026-83777: Heap-based Buffer Overflow

Heap-based buffer overflow in Windows Bluetooth Service allows an unauthorized attacker to elevate privileges over an adjacent network...

Ubuntu 22.04 LTS / 24.04 LTS / 26.04 LTS : libssh vulnerabilities (USN-8699-1)

The remote Ubuntu 22.04 LTS / 24.04 LTS / 26.04 LTS host has packages installed that are affected by multiple vulnerabilities as referenced in the USN-8699-1 advisory. It was discovered that libssh had a stack buffer overflow in its SFTP server when constructing directory listing entries for long...

PT-2026-113432

Name of the Vulnerable Software and Affected Versions SQL Server affected versions not specified Description A heap-based buffer overflow allows an authorized attacker to execute arbitrary code over a network, which can affect the system. A heap-based buffer overflow occurs when a program writes...

Microsoft Windows: CVE-2026-96868: Windows Kernel Elevation of Privilege Vulnerability

Heap-based buffer overflow in Windows Kernel allows an authorized attacker to elevate privileges locally...

CVE-2026-104348: Heap-based Buffer Overflow

Photoshop Desktop is affected by a Heap-based Buffer Overflow vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file...

Ubuntu 14.04 LTS / 16.04 LTS / 18.04 LTS / 20.04 LTS / 22.04 LTS / 24.04 LTS / 26.04 LTS : libxml2 vulnerabilities (USN-8910-1)

The remote Ubuntu 14.04 LTS / 16.04 LTS / 18.04 LTS / 20.04 LTS / 22.04 LTS / 24.04 LTS / 26.04 LTS host has packages installed that are affected by multiple vulnerabilities as referenced in the USN-8910-1 advisory. Yirou Yang discovered that libxml2 incorrectly handled certain XML catalogs. If a...

PT-2026-113487

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 155.0.8059.79 Description A buffer overflow exists in PDFium, a PDF rendering engine. This flaw allows a remote attacker to execute arbitrary code within the sandbox by inducing the user to open a specially...

CVE-2026-70278: Heap-based Buffer Overflow

Heap-based buffer overflow in Microsoft Windows Media Foundation allows an authorized attacker to elevate privileges locally...

SUSE SLED15 / SLES15 Security Update : ghostscript (SUSE-SU-2026:4632-1)

The remote SUSE Linux SLED15 / SLEDSAP15 / SLES15 / SLESSAP15 host has packages installed that are affected by a vulnerability as referenced in the SUSE-SU-2026:4632-1 advisory. This update for ghostscript fixes the following issue: - CVE-2026-39919: heap-based buffer overflow in the JPEG 2000...

Microsoft SQL Server: CVE-2026-96956: SQL Server Elevation of Privilege Vulnerability

Stack-based buffer overflow in SQL Server allows an authorized attacker to elevate privileges over a network...

CVE-2026-88202: Heap-based Buffer Overflow

Heap-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code over a network...

CentOS Linux 8.4 [TuxCare] Security Update: ImageMagick / ImageMagick-c++ / ImageMagick-c++-devel / etc Multiple Vulnerabilities (CENTOS8.4:CLSA-2026:1791904140)

The CentOS Linux 8.4 host has packages installed that are affected by multiple vulnerabilities as referenced in the TuxCare CENTOS8.4:CLSA-2026:1791904140 advisory. - A flaw was found in ImageMagick in versions before 7.0.11 and before 6.9.12, where a division by zero in WaveImage of...

SUSE SLED15 / SLES15 Security Update : expat (SUSE-SU-2026:4619-1)

The remote SUSE Linux SLED15 / SLEDSAP15 / SLES15 / SLESSAP15 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2026:4619-1 advisory. - CVE-2025-59375: denial of service resource consumption caused by processing malformed small documents...

SUSE SLES15 Security Update : expat (SUSE-SU-2026:4623-1)

"The remote SUSE Linux SLES15 / SLESSAP15 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2026:4623-1 advisory. - CVE-2025-59375: denial of service resource consumption caused by processing malformed small documents bsc1249584. -...

CentOS Linux 8 [TuxCare] Security Update: ImageMagick / ImageMagick-c++ / ImageMagick-c++-devel / etc Multiple Vulnerabilities (CENTOS-STREAM8:CLSA-2026:1791903924)

The CentOS Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the TuxCare CENTOS-STREAM8:CLSA-2026:1791903924 advisory. - A flaw was found in ImageMagick in versions before 7.0.11 and before 6.9.12, where a division by zero in WaveImage of...

SUSE SLES12 Security Update : expat (SUSE-SU-2026:4615-1)

"The remote SUSE Linux SLES12 / SLESSAP12 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2026:4615-1 advisory. - CVE-2025-59375: denial of service resource consumption caused by processing malformed small documents bsc1249584. -...

Security Vulnerabilities fixed in Thunderbird 158 — Mozilla

Several buffer-growth sites in libmime performed size arithmetic in 32-bit types without overflow checks. On a sufficiently large message the growth guard could fail open, or the buffer could be reallocated smaller than required, and a subsequent memcpy would then write attacker-controlled data...