Microsoft Windows: CVE-2026-69954: Windows Overlay Filter Information Disclosure Vulnerability

Buffer over-read in Windows Overlay Filter allows an authorized attacker to disclose information locally...

Microsoft Windows: CVE-2026-70234: Desktop Window Manager Information Disclosure Vulnerability

Buffer over-read in Desktop Window Manager allows an authorized attacker to disclose information locally...

Microsoft SQL Server: CVE-2026-88089: Microsoft SQL Server Remote Code Execution Vulnerability

Heap-based buffer overflow in SQL Server allows an authorized attacker to execute code locally...

CVE-2026-108130: Heap-based Buffer Overflow

Heap-based buffer overflow in Windows Virtualization-Based Security VBS Enclave allows an authorized attacker to elevate privileges locally...

Microsoft Windows: CVE-2026-88093: Desktop Window Manager Elevation of Privilege Vulnerability

Heap-based buffer overflow in Desktop Window Manager allows an authorized attacker to elevate privileges locally...

Microsoft Windows: CVE-2026-83863: Servicing Stack Updates Elevation of Privilege Vulnerability

Heap-based buffer overflow in Servicing Stack Updates allows an authorized attacker to elevate privileges locally...

Microsoft Windows: CVE-2026-83867: Windows Push Notifications Elevation of Privilege Vulnerability

Heap-based buffer overflow in Windows Push Notifications allows an authorized attacker to elevate privileges locally...

Microsoft Windows: CVE-2026-83903: Windows Direct Composition Elevation of Privilege Vulnerability

Heap-based buffer overflow in Windows Direct Composition allows an authorized attacker to elevate privileges locally...

Microsoft Windows: CVE-2026-83757: Win32k Elevation of Privilege Vulnerability

Heap-based buffer overflow in Windows Win32K allows an authorized attacker to elevate privileges locally...

Microsoft Windows: CVE-2026-85901: Windows Graphics Component Elevation of Privilege Vulnerability

Heap-based buffer overflow in Windows Win32K - GRFX allows an authorized attacker to elevate privileges locally...

Microsoft Windows: CVE-2026-85800: Windows Error Reporting Elevation of Privilege Vulnerability

Heap-based buffer overflow in Windows Error Reporting allows an authorized attacker to elevate privileges locally...

Microsoft Windows: CVE-2026-85358: Windows Installer Elevation of Privilege Vulnerability

Heap-based buffer overflow in Windows Installer allows an authorized attacker to elevate privileges locally...

Microsoft Windows: CVE-2026-83579: Windows Smart Card Elevation of Privilege Vulnerability

Heap-based buffer overflow in Windows Smart Card allows an authorized attacker to elevate privileges locally...

Microsoft Windows: CVE-2026-83882: Windows Kernel Elevation of Privilege Vulnerability

Heap-based buffer overflow in Windows Kernel allows an authorized attacker to elevate privileges locally...

Microsoft Windows: CVE-2026-83569: HID Parser Library Elevation of Privilege Vulnerability

Heap-based buffer overflow in HID Parser Library allows an authorized attacker to elevate privileges locally...

Microsoft Windows: CVE-2026-70262: WebDAV Elevation of Privilege Vulnerability

Heap-based buffer overflow in WebDAV allows an unauthorized attacker to elevate privileges over a network...

KB5126657: Windows 10 version 21H2 / Windows 10 Version 22H2 Security Update (October 2026)

The remote Windows host is missing security update 5126657. It is, therefore, affected by multiple vulnerabilities - Use after free in Windows Message Queuing Queue Manager allows an unauthorized attacker to execute code over a network. CVE-2026-100202 - Heap-based buffer overflow in Network Poli...

KB5126835: Windows Server 2012 Security Update (October 2026)

The remote Windows host is missing security update 5126835. It is, therefore, affected by multiple vulnerabilities - Use after free in Windows Message Queuing Queue Manager allows an unauthorized attacker to execute code over a network. CVE-2026-100202 - Heap-based buffer overflow in Network Poli...

CentOS Linux 8.4 [TuxCare] Security Update: zlib / zlib-devel / zlib-static (CENTOS8.4:CLSA-2026:1791915688)

The CentOS Linux 8.4 host has packages installed that are affected by a vulnerability as referenced in the TuxCare CENTOS8.4:CLSA-2026:1791915688 advisory. - zlib 1.2.11 through 1.3.2 contains a heap buffer overflow: after an underlying write fails, gzwrite returns without resetting strm.nextin,...

UBUNTU-CVE-2026-107815

MariaDB server is a community developed fork of MySQL server. From 10.6.1 until 10.6.28, 10.11.19, 11.4.13, 11.8.9, 12.3.3, and 13.0.2, the CONNECT engine's DOS table type used an incorrect boundary check that permitted a one-byte null write beyond a stack buffer at an attacker-controlled offset...