CVE-2026-95115

A buffer overflow vulnerability exists in the libwebsockets library (main 106d542c) within the LEJP JSON parser . This flaw allows a remote attacker to trigger a denial of service (DoS) condition. While the vulnerability is confirmed to be exploitable via a proof-of-concept, specific exploit link...

ROS-20261013-73-0419

The vulnerability in the kernel-lt is related to writing beyond the buffer boundaries in memory. Exploiting this vulnerability can allow an attacker to execute arbitrary code...

PT-2026-112817

Name of the Vulnerable Software and Affected Versions Windows Internet Connection Sharing ICS affected versions not specified Description A heap-based buffer overflow occurs in Windows Internet Connection Sharing ICS, which allows an authorized attacker to execute arbitrary code over an adjacent...

kernel security update

5.14.0-687.57.1 - Disable UKI signing Orabug: 36571828 - Update Oracle Linux certificates Kevin Lyons - Disable signing for aarch64 Ilya Okomin - Oracle Linux RHCK Module Signing Key was added to the kernel trusted keys list olkmodsigningkey.pem Orabug: 29539237 - Update x509.genkey Orabug:...

CentOS Linux 8.4 [TuxCare] Security Update: rsyslog / rsyslog-crypto / rsyslog-doc / rsyslog-elasticsearch / etc (CENTOS8.4:CLSA-2026:1791918528)

The CentOS Linux 8.4 host has packages installed that are affected by a vulnerability as referenced in the TuxCare CENTOS8.4:CLSA-2026:1791918528 advisory. - A flaw was found in rsyslog. An unauthenticated remote attacker can trigger a heap buffer overflow in the RainerScript replace function by...

Ubuntu 22.04 LTS / 24.04 LTS / 26.04 LTS : GNU Core Utilities vulnerabilities (USN-8697-1)

The remote Ubuntu 22.04 LTS / 24.04 LTS / 26.04 LTS host has packages installed that are affected by multiple vulnerabilities as referenced in the USN-8697-1 advisory. It was discovered that GNU Core Utilities sort had a heap buffer under-read in its begfield function. A local attacker could...

ALSA-2026:82094 Important: librabbitmq security update

The librabbitmq packages provide an Advanced Message Queuing Protocol AMQP client library that allows you to communicate with AMQP servers using protocol version 0-9-1. Security Fixes: rabbitmq-c: rabbitmq-c: Heap buffer overflow leading to denial of service CVE-2026-44236 For more details about...

Ubuntu 22.04 LTS / 24.04 LTS / 26.04 LTS : OpenSSL vulnerabilities (USN-8678-1)

The remote Ubuntu 22.04 LTS / 24.04 LTS / 26.04 LTS host has packages installed that are affected by multiple vulnerabilities as referenced in the USN-8678-1 advisory. It was discovered that OpenSSL incorrectly handled the QUIC server incoming channel queue. A remote attacker could possibly use...

Ubuntu 16.04 LTS / 18.04 LTS / 20.04 LTS / 22.04 LTS / 24.04 LTS / 26.04 LTS : BlueZ vulnerabilities (USN-8908-1)

The remote Ubuntu 16.04 LTS / 18.04 LTS / 20.04 LTS / 22.04 LTS / 24.04 LTS / 26.04 LTS host has packages installed that are affected by multiple vulnerabilities as referenced in the USN-8908-1 advisory. Michael Bommarito discovered that BlueZ incorrectly handled codec capability storage in the...

Security Vulnerabilities fixed in Thunderbird 158 — Mozilla

Several buffer-growth sites in libmime performed size arithmetic in 32-bit types without overflow checks. On a sufficiently large message the growth guard could fail open, or the buffer could be reallocated smaller than required, and a subsequent memcpy would then write attacker-controlled data...

PT-2026-111960

Name of the Vulnerable Software and Affected Versions Windows Broadcast DVR User Service affected versions not specified Description A buffer over-read exists in the Windows Broadcast DVR User Service. This issue allows an authorized attacker to disclose sensitive information locally, which may...

CVE-2026-83836: Heap-based Buffer Overflow

Heap-based buffer overflow in Windows Event Tracing allows an unauthorized attacker to execute code locally...

Stable Channel Update for Desktop

The Stable channel has been updated to 155.0.8059.79/.80 for Windows and Mac and 155.0.8059.79 to Linux which will roll out over the coming days/weeks. A full list of changes in this build is available in the Log Security Fixes and Rewards Note: Access to bug details and links may be kept...

PT-2026-111612

Buffer Overflow vulnerability in madmurphy libconfini v.1.16.4 allows a remote attacker to cause a denial of service via an allocation-size mismatch between its bundled load ini buffer utility and strip ini cache...

ROS-20261013-73-0373

The vulnerability in the kernel-lt is related to writing beyond the buffer boundaries in memory. Exploiting this vulnerability can allow an attacker to execute arbitrary code...

PT-2026-112496

Name of the Vulnerable Software and Affected Versions Windows Bind Filter Driver affected versions not specified Description A heap-based buffer overflow occurs in the Windows Bind Filter Driver. This issue allows an authorized attacker to elevate privileges locally on the system. A heap-based...

PT-2026-111886

Heap-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code over a network...

PT-2026-113242

Name of the Vulnerable Software and Affected Versions Windows Hyper-V affected versions not specified Description A heap-based buffer overflow occurs in Windows Hyper-V, which allows an authorized attacker to disclose sensitive information over a network and affect the system. A heap-based buffer...

PT-2026-112172

Heap-based buffer overflow in Windows iSCSI allows an unauthorized attacker to deny service over a network...

PT-2026-113035

Name of the Vulnerable Software and Affected Versions Windows NTFS affected versions not specified Description A heap-based buffer overflow in Windows NTFS allows an authorized attacker to elevate privileges locally. A heap-based buffer overflow occurs when a program writes more data to a heap...