CVE-2026-72940: Heap-based Buffer Overflow

Heap-based buffer overflow in Windows Schannel allows an unauthorized attacker to execute code over a network...

CVE-2026-72973: Heap-based Buffer Overflow

Heap-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code over a network...

RHEL 10 : expat (RHSA-2026:64810)

The remote Redhat Enterprise Linux 10 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2026:64810 advisory. Expat is a C library for parsing XML documents. Security Fixes: expat: libexpat: Use-after-free vulnerability due to improper handler call...

CVE-2026-81992: Heap-based Buffer Overflow

Acrobat Reader is affected by a Heap-based Buffer Overflow vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file...

CVE-2026-81389: Heap-based Buffer Overflow

Heap-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code locally...

Moderate: glib2 security update

GLib provides the core application building blocks for libraries and applications written in C. It provides the core object system used in GNOME, the main loop implementation, and a large set of utility functions for strings and common data structures. Security Fixes: xdgmime: heap-based buffer...

CVE-2026-71339: Heap-based Buffer Overflow

Heap-based buffer overflow in Windows Installer allows an authorized attacker to elevate privileges locally...

CVE-2026-69325: Heap-based Buffer Overflow

Heap-based buffer overflow in Microsoft JScript allows an unauthorized attacker to execute code over a network...

CVE-2026-20502: Heap-based Buffer Overflow

In vdec, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS11262030; Issue ID: MSV-9196...

CVE-2026-86142

In libxml2 before 2.15.4, there is a heap-based buffer overflow in xmlXPtrEvalXPtrPart because of xmlXPtrEval xpointer length saturation...

CVE-2026-86138

In libxml2 before 2.15.4, xmlDictAddQString in dict.c has an integer overflow and resultant heap-based buffer overflow...

Out-of-bounds Write

Overview Affected versions of this package are vulnerable to Out-of-bounds Write in the xmlDictAddQString function in dict.c due to an integer overflow that leads to a heap-based buffer overflow. An attacker can execute arbitrary code by supplying specially crafted input that triggers the overflo...

PT-2026-91912

In libxml2 before 2.15.4, xmlDictAddQString in dict.c has an integer overflow and resultant heap-based buffer overflow...

CVE-2026-86142: Heap-based Buffer Overflow

In libxml2 before 2.15.4, there is a heap-based buffer overflow in xmlXPtrEvalXPtrPart because of xmlXPtrEval xpointer length saturation...

CVE-2026-86138: Integer Overflow or Wraparound

In libxml2 before 2.15.4, xmlDictAddQString in dict.c has an integer overflow and resultant heap-based buffer overflow...

CVE-2026-86142: Heap-based Buffer Overflow

In libxml2 before 2.15.4, there is a heap-based buffer overflow in xmlXPtrEvalXPtrPart because of xmlXPtrEval xpointer length saturation...

CVE-2026-86138: Integer Overflow or Wraparound

In libxml2 before 2.15.4, xmlDictAddQString in dict.c has an integer overflow and resultant heap-based buffer overflow...

Linux Distros Unpatched Vulnerability : CVE-2026-86142

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In libxml2 before 2.15.4, there is a heap-based buffer overflow in xmlXPtrEvalXPtrPart because of xmlXPtrEval xpointer length saturation. CVE-2026-86142 Note th...

CVE-2026-18341: Heap-based Buffer Overflow

IBM i 7.6, 7.5, 7.4, and 7.3 could allow a remote authenticated attacker to corrupt memory due to an integer underflow...

CVE-2026-81665: Heap-based Buffer Overflow

A heap-based buffer overflow was found in Corosync's Totem Process Group totempg message reassembly. When processing fragmented multicast messages, the buffer used to reassemble fragments lacks a runtime bounds check in release builds. A network-adjacent attacker able to send crafted multicast...