Microsoft Windows: CVE-2026-88168: Windows Bind Filter Driver Elevation of Privilege Vulnerability

Heap-based buffer overflow in Windows Bind Filter Driver allows an authorized attacker to elevate privileges locally...

Microsoft Windows: CVE-2026-69471: Windows Installer Elevation of Privilege Vulnerability

Heap-based buffer overflow in Windows Installer allows an authorized attacker to elevate privileges locally...

PT-2026-113432

Heap-based buffer overflow in SQL Server allows an authorized attacker to execute code over a network...

CVE-2026-108130: Heap-based Buffer Overflow

Heap-based buffer overflow in Windows Virtualization-Based Security VBS Enclave allows an authorized attacker to elevate privileges locally...

Microsoft Office: CVE-2026-97001: Microsoft Office Word Remote Code Execution Vulnerability

Heap-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code locally...

CVE-2026-95115

Buffer Overflow vulnerability in libwebsockets main 106d542c allows a remote attacker to cause a denial of service via the LEJP JSON parser...

PT-2026-113256

Buffer over-read in DNS Server allows an authorized attacker to disclose information over a network...

CVE-2026-95117

Buffer Overflow vulnerability in zserge jsmn jsmn HEAD 25647e6 allows a remote attacker to cause a denial of service via the jsmn.h, jsmnparse, example/jsondump.c, dump components...

Microsoft Windows: CVE-2026-70262: WebDAV Elevation of Privilege Vulnerability

Heap-based buffer overflow in WebDAV allows an unauthorized attacker to elevate privileges over a network...

Microsoft Windows: CVE-2026-96856: Windows Management Instrumentation Elevation of Privilege Vulnerability

Heap-based buffer overflow in Windows Management Instrumentation allows an authorized attacker to elevate privileges locally...

Microsoft Windows: CVE-2026-85832: Windows Background Intelligent Transfer Service (BITS) Elevation of Privilege Vulnerability

Heap-based buffer overflow in Windows Background Intelligent Transfer Service BITS allows an authorized attacker to elevate privileges locally...

ROS-20261013-73-0253

The vulnerability in the kernel-lt is related to writing beyond the buffer boundaries in memory. Exploiting this vulnerability can allow an attacker to execute arbitrary code...

PT-2026-111803

Heap-based buffer overflow in Microsoft Office Access allows an unauthorized attacker to execute code over a network...

PT-2026-112223

Name of the Vulnerable Software and Affected Versions Microsoft PostScript Printer Driver affected versions not specified Description A heap-based buffer overflow occurs in the driver, which allows an unauthorized attacker to elevate privileges locally. A heap-based buffer overflow is a memory...

Microsoft Office: CVE-2026-97004: Microsoft Office Excel Remote Code Execution Vulnerability

Heap-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code over a network...

ROS-20261013-73-0467

The vulnerability of the tapgetuserxdp function in the drivers/net/tap.c file of the Linux kernel network device driver involves copying buffers without checking the input data. Exploiting this vulnerability could allow a remote attacker to cause service interruptions...

Microsoft Windows: CVE-2026-96248: Windows Host Guardian Service Denial of Service Vulnerability

Stack-based buffer overflow in Windows Host Guardian Service allows an unauthorized attacker to deny service over a network...

Microsoft Windows: CVE-2026-83921: Windows Search Service Elevation of Privilege Vulnerability

Heap-based buffer overflow in Microsoft Windows Search Component allows an authorized attacker to elevate privileges locally...

ROS-20261013-73-0463

The vulnerability of the tunxdpone function in the drivers/net/tun.c file of the Linux kernel’s network device driver module is related to the copying of buffers without checking the size of the input data. Exploiting this vulnerability could allow an attacker to cause a system failure...

UBUNTU-CVE-2026-107816

MariaDB server is a community developed fork of MySQL server. From 10.6.1 until 10.6.28, 10.11.19, 11.4.13, 11.8.9, 12.3.3, and 13.0.2, the qcinfo plugin could be confused by a query containing embedded null bytes. Reading informationschema.querycacheinfo after such a query was cached could acces...