CVE-2026-97555

A flaw was found in the Linux kernel's SMB client. When rewriting a Discretionary Access Control List DACL during file ownership updates, the kernel allocates memory based on the original identifier lengths rather than accounting for larger replacement Security Identifiers SIDs. A local user can...

CVE-2026-98025

A flaw was found in the Linux kernel's cx82310eth USB Ethernet driver. An attacker connecting a malicious USB device can trigger a heap-based buffer overflow by sending crafted packets containing a reboot indicator. Because the driver fails to discard the packet after detecting the reboot signal,...

CVE-2021-3156

CVE-2021-3156 https://www.qualys.com/2021/01/26/cve-2021-3156/baron-samedit-heap-based-overflow-sudo.txt https://blog.qualys.com/vulnerabilities-research/2021/01/26/cve-2021-3156-heap-based-buffer-overflow-in-sudo-baron-samedit https://access.redhat.com/security/vulnerabilities/RHSB-2021-002...

gstreamer-plugins-good: GStreamer: Remote Code Execution via MRF file parsing heap-based buffer overflow

A flaw was found in GStreamer. A remote attacker could exploit a heap-based buffer overflow vulnerability when parsing specially crafted MRF Multimedia Research Forum files. This vulnerability arises from insufficient validation of user-supplied data length before copying it to a heap-based buffe...

gstreamer-plugins-good: GStreamer: Remote code execution via heap-based buffer overflow in PNG file parsing

A flaw was found in GStreamer. This vulnerability, a heap-based buffer overflow during PNG file parsing, allows a remote attacker to execute arbitrary code. Successful exploitation requires user interaction, such as opening a malicious PNG file or visiting a specially crafted web page. The issue...

Important: Red Hat Security Advisory: gstreamer1-plugins-good security update

An update for gstreamer1-plugins-good is now available for Red Hat Enterprise Linux 8.6 Advanced Mission Critical Update Support and Red Hat Enterprise Linux 8.6 Extended Update Support Long-Life Add-On. Red Hat Product Security has rated this update as having a security impact of Important. A...

CVE-2021-3156-Heap-Based-Buffer-Overflow-in-Sudo-Baron-Samedit-

Qualys Security Advisory Baron Samedit: Heap-based buffer overflow in Sudo CVE-2021-3156 ======================================================================== Contents Summary Analysis Exploitation Acknowledgments Timeline =======================================================================...

CVE-2025-14181

A flaw was found in PHP. A malicious server can cause a Denial of Service DoS by exploiting an improper buffer size check in the Simple Object Access Protocol SOAP client during HTTP response parsing. When responding to a request, the server can supply crafted data that triggers an integer...

CVE-2021-3156

CVE-2021-3156 Ansible role patches CVE-2021-3156 for CentOS Intro Sudo before 1.9.5p2 has a Heap-based Buffer Overflow, allowing privilege escalation to root via "sudoedit -s" and a command-line argument that ends with a single backslash character CVE-2021-3156 News RU RUN root@kitploit:...

Important: Red Hat Security Advisory: gstreamer1-plugins-good security update

An update for gstreamer1-plugins-good is now available for Red Hat Enterprise Linux 7 Extended Lifecycle Support. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating,...

gstreamer-plugins-good: GStreamer: Remote code execution via heap-based buffer overflow in PNG file parsing

A flaw was found in GStreamer. This vulnerability, a heap-based buffer overflow during PNG file parsing, allows a remote attacker to execute arbitrary code. Successful exploitation requires user interaction, such as opening a malicious PNG file or visiting a specially crafted web page. The issue...

gstreamer-plugins-good: GStreamer: Remote Code Execution via MRF file parsing heap-based buffer overflow

A flaw was found in GStreamer. A remote attacker could exploit a heap-based buffer overflow vulnerability when parsing specially crafted MRF Multimedia Research Forum files. This vulnerability arises from insufficient validation of user-supplied data length before copying it to a heap-based buffe...

cve-2024-49113-ldap_nightmare_reproduction

CVE-2024-49113 — LDAP Nightmare Windows LDAP Client Remote Code Execution Heap-Based Buffer Overflow...

openSUSE 16 Security Update : cjose (openSUSE-SU-2026:21944-1)

The remote openSUSE 16 host has packages installed that are affected by multiple vulnerabilities as referenced in the openSUSE-SU-2026:21944-1 advisory. - CVE-2026-53938: missing encryptedkey length validation during AES Key Wrap decryption can cause heap- based buffer overflow bsc1279844. -...

CVE-2026-55200

Security Report: CVE-2026-55200 📝 General Description CVE-2026-55200 is a critical heap-based buffer overflow vulnerability dynamic memory corruption affecting the libssh2 library in versions up to 1.11.1. It allows a malicious SSH server to compromise vulnerable clients that connect to it. ⚡...

OESA-2026-4056 gstreamer1-plugins-good security update

GStreamer is a streaming media framework, based on graphs of filters which operate on media data. Applications using this library can do anything from real-time sound processing to playing videos, and just about anything else media-related. Its plugin-based architecture means that new data types ...

OESA-2026-4055 gstreamer1-plugins-good security update

GStreamer is a streaming media framework, based on graphs of filters which operate on media data. Applications using this library can do anything from real-time sound processing to playing videos, and just about anything else media-related. Its plugin-based architecture means that new data types ...

OESA-2026-4054 gstreamer1-plugins-good security update

GStreamer is a streaming media framework, based on graphs of filters which operate on media data. Applications using this library can do anything from real-time sound processing to playing videos, and just about anything else media-related. Its plugin-based architecture means that new data types ...

Remote Desktop client for Windows Desktop (September 2026)

The Remote Desktop client for Windows Desktop installation on the remote host is missing security updates. It is, therefore, affected by multiple vulnerabilities: - Improper control of generation of code 'code injection' in Remote Desktop Client allows an unauthorized attacker to execute code ove...

Adobe Bridge 15.1.7 < 15.1.8 / 16.x < 16.0.7 Multiple Vulnerabilities (APSB26-148)

The version of Adobe Bridge installed on the remote host is prior to 15.1.8 or 16.0.7. It is, therefore, affected by multiple vulnerabilities as referenced in the apsb26-148 advisory. - Bridge is affected by a Stack-based Buffer Overflow vulnerability that could result in arbitrary code execution...