CVE-2025-47987

CVE-2025-47987: Windows CredSSP Elevation of Privilege 📌 This repository contains documentation and analysis resources about the vulnerability CVE-2025-47987, a heap-based buffer overflow flaw affecting the Windows Credential Security Support Provider CredSSP protocol. 📝 Description The...

CVE-2026-81474

Dell OpenManage Server Administrator, versions prior to 11.1.0.3, contains a Heap-based Buffer Overflow vulnerability. A low privileged attacker with local access could potentially exploit this vulnerability, leading to Elevation of privileges...

CVE-2026-81474

Dell OpenManage Server Administrator (versions prior to 11.1.0.3 ) contains a Heap-based Buffer Overflow vulnerability. A low-privileged attacker with local access and no user interaction can exploit this to achieve Elevation of Privileges , with high impact on confidentiality, integrity, and ava...

CVE-2026-92399

GPAC 26.07.0 contains a heap-based buffer overflow in the function rmt_client_handle_ws_frame within the WebSocket Handler component (src/utils/rmt_ws.c). The vulnerability is triggered by manipulating the payload_size argument, allowing a remote attacker to exploit it without authentication or u...

Important: Red Hat Security Advisory: corosync security update

An update for corosync is now available for Red Hat Enterprise Linux 9.6 Extended Update Support. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available fo...

Important: Red Hat Security Advisory: corosync security update

An update for corosync is now available for Red Hat Enterprise Linux 9. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from...

CVE-2021-3156-Heap-Based-Buffer-Overflow-in-Sudo-Baron-Samedit-

Qualys Security Advisory Baron Samedit: Heap-based buffer overflow in Sudo CVE-2021-3156 ======================================================================== Contents Summary Analysis Exploitation Acknowledgments Timeline =======================================================================...

Important: Red Hat Security Advisory: corosync security update

An update for corosync is now available for Red Hat Enterprise Linux 9.4 Update Services for SAP Solutions. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is...

UBUNTU-CVE-2026-39919

Ghostscript before 10.08.0 contains a heap-based buffer overflow vulne...

CVE-2026-39919

Ghostscript before 10.08.0 contains a heap-based buffer overflow vulne...

Microsoft Edge (Chromium-based) Remote Code Execution Vulnerability

Heap-based buffer overflow in Microsoft Edge Chromium-based allows an unauthorized attacker to execute code over a network...

EUVD-2026-78303

A vulnerability has been found in GPAC up to f1219cde. This issue affects the function gfurlconcatenateex of the file utils/url.c of the component URL Handler. The manipulation leads to heap-based buffer overflow. An attack has to be approached locally. Upgrading to version abi-16.23 is capable o...

CVE-2026-91088 GPAC URL url.c gf_url_concatenate_ex heap-based overflow

A vulnerability has been found in GPAC up to f1219cde. This issue affects the function gfurlconcatenateex of the file utils/url.c of the component URL Handler. The manipulation leads to heap-based buffer overflow. An attack has to be approached locally. Upgrading to version abi-16.23 is capable o...

CVE-2026-91086

GPAC (up to commit f1219cde) contains a heap-based buffer overflow in the function mpgviddmx_process within filters/reframe_mpgvid.c, part of the MPEG Video Reframer component. The vulnerability is exploitable remotely with low complexity and no required privileges, though user interaction is req...

CVE-2021-3156

CVE-2021-3156 https://www.qualys.com/2021/01/26/cve-2021-3156/baron-samedit-heap-based-overflow-sudo.txt https://blog.qualys.com/vulnerabilities-research/2021/01/26/cve-2021-3156-heap-based-buffer-overflow-in-sudo-baron-samedit https://access.redhat.com/security/vulnerabilities/RHSB-2021-002...

OESA-2026-3725 glib2 security update

GLib is a bundle of three formerly five low-level system libraries written in C and developed mainly by GNOME. GLib's code was separated from GTK, so it can be used by software other than GNOME and has been developed in parallel ever since. Security Fixes: A flaw was found in xdgmime. A heap-base...

CVE-2026-90948

GIMP's ICO file loader is vulnerable to a heap-based buffer overflow triggered by an integer overflow when calculating the buffer size for an embedded PNG image within an ICO file. The undersized allocation causes decoded pixel data to overflow the buffer, potentially enabling arbitrary code exec...

CVE-2021-3156

CVE-2021-3156 Ansible role patches CVE-2021-3156 for CentOS Intro Sudo before 1.9.5p2 has a Heap-based Buffer Overflow, allowing privilege escalation to root via "sudoedit -s" and a command-line argument that ends with a single backslash character CVE-2021-3156 News RU RUN root@kitploit:...

CVE-2026-90682

A security vulnerability has been detected in Matthias-Wandel jhead up to 3.3. This impacts the function ProcessGpsInfo of the file gpsinfo.c of the component WebP EXIF Handler. Such manipulation of the argument TAGGPSLAT/TAGGPSLONG leads to heap-based buffer overflow. An attack has to be...

CVE-2026-90682

A security vulnerability has been detected in Matthias-Wandel jhead up to 3.3. This impacts the function ProcessGpsInfo of the file gpsinfo.c of the component WebP EXIF Handler. Such manipulation of the argument TAGGPSLAT/TAGGPSLONG leads to heap-based buffer overflow. An attack has to be...