26807 matches found
CVE-2026-110837: Heap-based Buffer Overflow
FreeRDP 2.0.0 before 3.32.0, when built with WITHLAME=ON and WITHDSPFFMPEG=OFF, has a heap-based buffer overflow in freerdpdspdecodemp3 because the right-channel PCM pointer is offset by a byte count treated as short elements. A malicious RDP server can send MP3 audio over rdpsnd so decoded sampl...
PT-2026-113966
🚨 CVE-2026-103994 A Heap-based Buffer Overflow vulnerability in the VXLAN Gateway Daemon vgd of Juniper Networks Junos OS allows a malicious or compromised SDN-controller to cause a complete outage of the OVSDB control plane and possibly remote code execution. 🎖@cveNotify...
Unity Linux 20.1050a / 20.1060a / 20.1070a Security Update: freerdp (UTSA-2026-130081)
The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-130081 advisory. FreeRDP versions before 3.31.0 contain a heap-based buffer overflow in negosendnegotiationrequest when processing Server Redirection PDU messages with...
Security Updates for Microsoft PowerPoint Products C2R (October 2026)
The Microsoft PowerPoint Products are missing security updates. It is, therefore, affected by multiple vulnerabilities: - Use after free in Microsoft Office PowerPoint allows an unauthorized attacker to execute code over a network. CVE-2026-70215, CVE-2026-88178 - Heap-based buffer overflow in...
Security Updates for Microsoft Office Products C2R (October 2026)
The Microsoft Office Products are missing security updates. It is, therefore, affected by multiple vulnerabilities: - Heap-based buffer overflow in Microsoft Office allows an unauthorized attacker to execute code over a network. CVE-2026-88196, CVE-2026-88197 - Heap-based buffer overflow in Windo...
Rocky Linux 8 [CIQ] Security Update: libxml2 / libxml2-debuginfo / libxml2-debugsource / libxml2-devel / etc (crlsa-2026_80675)
The Rocky Linux 8 host has packages installed that are affected by a vulnerability as referenced in the CIQ crlsa-202680675 advisory. libxml2: libxml2: Heap-based buffer overflow in xmlXPtrEval due to xpointer length saturation CVE-2026-86142 Tenable has extracted the preceding description block...
Adobe Photoshop 26.x < 26.11.8 / 27.x < 27.11 Multiple Vulnerabilities (macOS APSB26-158)
The version of Adobe Photoshop installed on the remote macOS or Mac OS X host is prior to 26.11.8/27.11. It is, therefore, affected by multiple vulnerabilities as referenced in the apsb26-158 advisory. - Photoshop Desktop is affected by an Incorrect Authorization vulnerability that could result i...
Security Updates for Microsoft Visio Products C2R (October 2026)
The Microsoft Visio Products are missing security updates. It is, therefore, affected by multiple vulnerabilities: - Heap-based buffer overflow in Microsoft Office Visio allows an unauthorized attacker to execute code over a network. CVE-2026-102855, CVE-2026-102856, CVE-2026-102857 Note that...
CVE-2026-95638
Photoshop Desktop is affected by a Heap-based Buffer Overflow vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file...
CVE-2026-94512
Heap-based buffer overflow in SQL Server allows an authorized attacker to execute code over a network...
CVE-2026-88089
Heap-based buffer overflow in SQL Server allows an authorized attacker to execute code locally...
CVE-2026-88085
Heap-based buffer overflow in SQL Server allows an authorized attacker to elevate privileges locally...
CVE-2026-88082
Heap-based buffer overflow in SQL Server allows an authorized attacker to elevate privileges locally...
CVE-2026-85919
Heap-based buffer overflow in SQL Server allows an authorized attacker to elevate privileges locally...
CVE-2026-85886
Heap-based buffer overflow in SQL Server allows an authorized attacker to execute code over a network...
CVE-2026-83945
Heap-based buffer overflow in SQL Server allows an authorized attacker to execute code over a network...
CVE-2026-70189
Heap-based buffer overflow in SQL Server allows an authorized attacker to execute code locally...
CVE-2026-68883
Heap-based buffer overflow in SQL Server allows an authorized attacker to elevate privileges over a network...
CVE-2026-104348
Photoshop Desktop is affected by a Heap-based Buffer Overflow vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file...
