CVE-2026-70258: Heap-based Buffer Overflow

Heap-based buffer overflow in Microsoft Windows Media Foundation allows an unauthorized attacker to execute code over a network...

Microsoft Windows: CVE-2026-70258: Microsoft Windows Media Foundation Remote Code Execution Vulnerability

Heap-based buffer overflow in Microsoft Windows Media Foundation allows an unauthorized attacker to execute code over a network...

PT-2026-112240

Name of the Vulnerable Software and Affected Versions Microsoft Windows Media Foundation affected versions not specified Description A heap-based buffer overflow exists in Microsoft Windows Media Foundation. This issue allows an unauthorized attacker to elevate privileges locally on the system. A...

CVE-2026-83517: Heap-based Buffer Overflow

Heap-based buffer overflow in Microsoft Windows Media Foundation allows an unauthorized attacker to execute code over a network...

Microsoft Windows: CVE-2026-83517: Microsoft Windows Media Foundation Remote Code Execution Vulnerability

Heap-based buffer overflow in Microsoft Windows Media Foundation allows an unauthorized attacker to execute code over a network...

Microsoft Windows: CVE-2026-96952: Microsoft Windows Media Foundation Remote Code Execution Vulnerability

Heap-based buffer overflow in Microsoft Windows Media Foundation allows an unauthorized attacker to execute code over a network...

PT-2026-113154

Name of the Vulnerable Software and Affected Versions Microsoft Windows Media Foundation affected versions not specified Description A heap-based buffer overflow occurs in Microsoft Windows Media Foundation, which allows an unauthorized attacker to execute arbitrary code over a network and affect...

PT-2026-113027

Name of the Vulnerable Software and Affected Versions Microsoft Windows Media Foundation affected versions not specified Description Deserialization of untrusted data in Microsoft Windows Media Foundation allows an authorized attacker to elevate privileges locally. Deserialization is the process ...

Microsoft Windows: CVE-2026-96186: Microsoft Windows Media Foundation Elevation of Privilege Vulnerability

Deserialization of untrusted data in Microsoft Windows Media Foundation allows an authorized attacker to elevate privileges locally...

CVE-2026-96186: Deserialization of Untrusted Data

Deserialization of untrusted data in Microsoft Windows Media Foundation allows an authorized attacker to elevate privileges locally...

CVE-2026-96952: Heap-based Buffer Overflow

Heap-based buffer overflow in Microsoft Windows Media Foundation allows an unauthorized attacker to execute code over a network...

CVE-2026-102201: Use After Free

Use after free in Microsoft Windows Media Foundation allows an authorized attacker to elevate privileges locally...

PT-2026-111911

Name of the Vulnerable Software and Affected Versions Microsoft Windows Media Foundation affected versions not specified Description A use-after-free condition exists in Microsoft Windows Media Foundation. This issue allows an authorized attacker to elevate privileges locally on the system...

Security Bulletin: IBM Storage Fusion Data Foundation is vulnerable to Authentication Bypass.

Summary proxy-addr is used by IBM Storage Fusion Data Foundation, which could cause Authentication Bypass. CVE-2026-90711. Vulnerability Details CVEID:CVE-2026-90711 DESCRIPTION: proxy-addr is a Node.js module that determines a request's client address behind trusted reverse proxies, and it backs...

Security Bulletin: IBM Storage Fusion Data Foundation is vulnerable to Cross-Site Scripting.

Summary ip-address is used by IBM Storage Fusion Data Foundation, which could cause Cross-Site Scripting. CVE-2026-42338. Vulnerability Details CVEID:CVE-2026-42338 DESCRIPTION: ip-address is a library for parsing and manipulating IPv4 and IPv6 addresses in JavaScript. Prior to 10.1.1,...

Security Bulletin: IBM Storage Fusion Data Foundation is vulnerable to XML Injection.

Summary fast-xml-builder is used by IBM Storage Fusion Data Foundation, which could cause XML Injection. CVE-2026-44665. Vulnerability Details CVEID:CVE-2026-44665 DESCRIPTION: fast-xml-builder builds XML from JSON. Prior to 1.1.7, when an input data has quotes in attribute values but process...

Security Bulletin: IBM Storage Fusion Data Foundation is vulnerable to Denial of Service.

Summary spdystream is used by IBM Storage Fusion Data Foundation, which could cause Denial of Service. CVE-2026-35469. Vulnerability Details CVEID:CVE-2026-35469 DESCRIPTION: spdystream is a Go library for multiplexing streams over SPDY connections. In versions 0.5.0 and below, the SPDY/3 frame...

Security Bulletin: IBM Storage Fusion Data Foundation is vulnerable to Cross-Site Scripting.

Summary postcss is used by IBM Storage Fusion Data Foundation, which could cause Cross-Site Scripting. CVE-2026-41305. Vulnerability Details CVEID:CVE-2026-41305 DESCRIPTION: PostCSS takes a CSS file and provides an API to analyze and modify its rules by transforming the rules into an Abstract...

Security Bulletin: IBM Storage Fusion Data Foundation is vulnerable to Denial of Service.

Summary compression is used by IBM Storage Fusion Data Foundation, which could cause Denial of Service. CVE-2026-87776 Vulnerability Details CVEID:CVE-2026-87776 DESCRIPTION: compression is a Node.js and Express compression middleware. In versions before 1.8.2, when a client aborts the connection...

Security Bulletin: IBM Storage Fusion Data Foundation is vulnerable to Denial of Service

Summary fast-xml-parser is used by IBM Storage Fusion Data Foundation, which could cause Denial of Service. CVE-2026-27942, CVE-2026-26278, CVE-2026-33036 Vulnerability Details CVEID:CVE-2026-27942 DESCRIPTION: fast-xml-parser allows users to validate XML, parse XML to JS object, or build XML fro...