PT-2026-70425

Name of the Vulnerable Software and Affected Versions Windows Telephony Service affected versions not specified Description A heap-based buffer overflow occurs in the Windows Telephony Service, which allows an authorized attacker to elevate privileges locally. A heap-based buffer overflow is a...

PT-2026-70658

Name of the Vulnerable Software and Affected Versions Windows Remote Access API affected versions not specified Description A heap-based buffer overflow in the Windows Remote Access API allows an authorized attacker to elevate privileges locally. A heap-based buffer overflow occurs when a program...

PT-2026-70457

Name of the Vulnerable Software and Affected Versions Windows MIDI Service Module affected versions not specified Description A heap-based buffer overflow occurs in the Windows MIDI Service Module. This issue allows an authorized attacker to elevate privileges locally on the system. A heap-based...

PT-2026-70641

Name of the Vulnerable Software and Affected Versions Microsoft Office Access affected versions not specified Description A heap-based buffer overflow occurs when a program writes more data to a heap memory block than it can hold, potentially corrupting memory. This issue allows an unauthorized...

PT-2026-70475

Name of the Vulnerable Software and Affected Versions Windows affected versions not specified Description A heap-based buffer overflow in Windows Win32K allows an authorized attacker to elevate privileges locally. This issue is related to improper object management within the UMPDDrvBitBlt...

PT-2026-70473

Name of the Vulnerable Software and Affected Versions Windows Device Association Service affected versions not specified Description A heap-based buffer overflow occurs in the Windows Device Association Service. This issue allows an authorized attacker to elevate privileges locally on the system....

PT-2026-70653

Name of the Vulnerable Software and Affected Versions Microsoft Office affected versions not specified Description A heap-based buffer overflow occurs when a program writes more data to a heap memory block than it can hold, potentially corrupting memory. This issue allows an unauthorized attacker...

PT-2026-70580

Name of the Vulnerable Software and Affected Versions Windows Win32K affected versions not specified Description A heap-based buffer overflow occurs in Windows Win32K, which allows an authorized attacker to elevate privileges locally. A heap-based buffer overflow is a memory corruption issue that...

PT-2026-70391

Name of the Vulnerable Software and Affected Versions Microsoft Windows affected versions not specified Description A heap-based buffer overflow exists in the Windows Imaging Component during the parsing of ICC files. This out-of-bounds write allows an unauthorized attacker to execute code locall...

PT-2026-70681

Name of the Vulnerable Software and Affected Versions Desktop Window Manager affected versions not specified Description A heap-based buffer overflow occurs in the Desktop Window Manager, which allows an authorized attacker to elevate privileges locally. A heap-based buffer overflow is a memory...

PT-2026-70493

Name of the Vulnerable Software and Affected Versions Windows Telephony Service affected versions not specified Description A heap-based buffer overflow in the Windows Telephony Service allows an authorized attacker to elevate privileges locally. A heap-based buffer overflow occurs when a program...

PT-2026-70556

Name of the Vulnerable Software and Affected Versions Reliable Multicast Transport Driver RMCAST affected versions not specified Description A heap-based buffer overflow occurs in the Reliable Multicast Transport Driver RMCAST, which is a driver used for transmitting data to multiple recipients...

ImageMagick < 6.9.13-51 / 7.x < 7.1.2-26 Heap Buffer Over-write (CVE-2026-62343)

The remote host has a version of ImageMagick installed that is prior to 6.9.13-51 or 7.x prior to 7.1.2-26. It is, therefore, affected by a heap buffer over-write vulnerability: - An invalid kernel can cause a heap buffer over-write when performing a morphology operation with a user supplied...

CVE-2026-11809 UpdateHub probe: uninitialized-heap out-of-bounds read of network-supplied metadata

The UpdateHub OTA client in subsys/mgmt/updatehub/updatehub.c contains an out-of-bounds / uninitialized-memory read in zimplupdatehubprobe. The probe response from the UpdateHub server is copied into a heap buffer metadata that is correctly NUL-terminated, but a second buffer metadatacopy is...

SUSE-SU-2026:3562-1 Security update for freerdp

This update for freerdp fixes the following issues: - CVE-2026-27951: 32-bit system denial of service via endless blocking loop in StreamEnsureCapacity bsc1258939. - CVE-2026-33952: client denial of service via unvalidated authentication length field bsc1261196. - CVE-2026-33977: client denial of...

Security update for perl

This update for perl fixes the following issues: CVE-2026-8376: heap buffer overflow when compiling regular expressions with a repeated fixed string on 32-bit builds bsc1266304. CVE-2026-12087: Socket's packipmreqsource can copy adjacent heap memory into the returned packed structure bsc1268349...

SUSE-SU-2026:3558-1 Security update for perl

This update for perl fixes the following issues: - CVE-2026-8376: heap buffer overflow when compiling regular expressions with a repeated fixed string on 32-bit builds bsc1266304. - CVE-2026-12087: Socket's packipmreqsource can copy adjacent heap memory into the returned packed structure...

SUSE-SU-2026:3552-1 Security update for ffmpeg

This update for ffmpeg fixes the following issues: - CVE-2026-64830: Heap Buffer Overflow via VobSub Subtitle Demuxer bsc1272752. - CVE-2026-66039: MACE6 Audio Decoder Heap Out-of-Bounds Write via CAF File bsc1272765...

SUSE CVE-2026-18497

A heap-buffer-overflow vulnerability exists in the nothings stb TrueType library, up to version 1.26, that is used for parsing TrueType font files. The vulnerability exists in the stbttGetGlyphShapeTT function within the nothings stbtruetype.h library when parsing malformed TTF TrueType Font file...

SUSE-SU-2026:23049-1 Security update for libssh2_org

This update for libssh2org fixes the following issues: - CVE-2025-15661: out-of-bounds heap read vulnerability in the sftpsymlink function in src/sftp.c bsc1268546. - CVE-2026-7598: integer overflow in function userauthpassword of file src/userauth.c bsc1263890. - CVE-2026-58050: heap buffer...