CVE-2026-19156

A flaw was found in Google Chrome's Base component. An attacker could convince a user to install a malicious extension, leading to a heap buffer overflow. This vulnerability allows for potential heap corruption, which could be exploited to impact the integrity and availability of the browser...

CVE-2026-19138

A flaw was found in Google Chrome's CrashReporting component. A heap buffer overflow vulnerability allows a remote attacker, who has already compromised the renderer process, to potentially escape the browser's security sandbox by crafting a malicious HTML page. This could lead to further...

CVE-2026-73066

Tesseract prior to 5.5.3 is affected by a heap out-of-bounds write in LSTM Convolve via a crafted .traineddata loaded through the deserializer. The root cause is an unchecked signed integer multiplication that wraps the convolution output-channel count, undersizing the forward-pass output buffer ...

EUVD-2026-56181

Tesseract is an open source OCR engine. Prior to 5.5.3, a crafted .traineddata LSTM model component loaded through Tesseract's deserializer can cause an unchecked signed integer multiplication in Convolve::DeSerialize in src/lstm/convolve.cpp to wrap the convolution output-channel count,...

Windows Installer Elevation of Privilege Vulnerability

Heap-based buffer overflow in Windows Installer allows an authorized attacker to elevate privileges locally...

Microsoft Exchange Server Remote Code Execution Vulnerability

Heap-based buffer overflow in Microsoft Exchange Server allows an authorized attacker to execute code over a network...

Windows Device Association Service Elevation of Privilege Vulnerability

Heap-based buffer overflow in Windows Device Association Service allows an authorized attacker to elevate privileges locally...

Windows Display Enhancement Service Elevation of Privilege Vulnerability

Heap-based buffer overflow in Windows Display Enhancement Service allows an authorized attacker to elevate privileges locally...

Microsoft Local Security Authority Server (lsasrv) Remote Code Execution Vulnerability

Heap-based buffer overflow in Microsoft Local Security Authority Server lsasrv allows an authorized attacker to execute code over a network...

Windows Message Queuing Elevation of Privilege Vulnerability

Heap-based buffer overflow in Windows Message Queuing allows an authorized attacker to elevate privileges locally...

Microsoft Access Remote Code Execution Vulnerability

Heap-based buffer overflow in Microsoft Office Access allows an unauthorized attacker to execute code locally...

Desktop Window Manager Elevation of Privilege Vulnerability

Heap-based buffer overflow in Desktop Window Manager allows an authorized attacker to elevate privileges locally...

Windows DHCP Server Remote Code Execution Vulnerability

Heap-based buffer overflow in Windows DHCP Server allows an unauthorized attacker to execute code over an adjacent network...

RPC Runtime Library Remote Code Execution Vulnerability

Heap-based buffer overflow in RPC Runtime allows an unauthorized attacker to execute code over a network...

Windows SMBv3 Server Remote Code Execution Vulnerability

Heap-based buffer overflow in Windows SMB Server allows an authorized attacker to execute code over a network...

Microsoft Brokering File System Elevation of Privilege Vulnerability

Heap-based buffer overflow in Windows Brokering File System allows an authorized attacker to elevate privileges locally...

Windows Telephony Service Elevation of Privilege Vulnerability

Heap-based buffer overflow in Windows Telephony Service allows an authorized attacker to elevate privileges locally...

Windows Imaging Component Remote Code Execution Vulnerability

Heap-based buffer overflow in Windows Imaging Component allows an unauthorized attacker to execute code locally...

Microsoft Office Graphics Component Remote Code Execution Vulnerability

Heap-based buffer overflow in Microsoft Office allows an unauthorized attacker to execute code locally...

Important: Red Hat Security Advisory: xorg-x11-server-Xwayland security update

An update for xorg-x11-server-Xwayland is now available for Red Hat Enterprise Linux 8.6 Advanced Mission Critical Update Support and Red Hat Enterprise Linux 8.6 Extended Update Support Long-Life Add-On. Red Hat Product Security has rated this update as having a security impact of Important. A...