19135 matches found
MiracleLinux 9 : libreoffice-7.1.8.1-15.el9_8.2.ML.1 (AXSA:2026-1517:04)
The remote MiracleLinux 9 host has packages installed that are affected by a vulnerability as referenced in the AXSA:2026-1517:04 advisory. libreoffice: LibreOffice Calc: Arbitrary code execution via heap buffer overflow in formula compilation CVE-2026-8357 Tenable has extracted the preceding...
PT-2026-70993
The userspace syscall verifiers z vrfy zsock sendmsg and z vrfy zsock recvmsg in subsys/net/lib/sockets/sockets.c snapshot the caller-supplied struct net msghdr into a kernel-side copy with k usermode from copy, but then re-read the still-live user struct for subsequent decisions. The kernel iove...
SUSE SLED15: ffmpeg / libavcodec-devel / libavcodec57 / libavdevice57 / etc (SUSE-SU-2026:3552-1)
The remote SUSE Linux SLED15 / SLEDSAP15 / SLES15 / SLESSAP15 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2026:3552-1 advisory. - CVE-2026-64830: Heap Buffer Overflow via VobSub Subtitle Demuxer bsc1272752. - CVE-2026-66039: MACE6 Audio...
Linux Distros Unpatched Vulnerability : CVE-2026-73072
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Vim is an open source, command line text editor. Prior to 9.2.0846, setsofo in src/spellfile.c reuses slsalfirst without resetting values left by setsalfirst, s...
CVE-2024-14043
Open5GS contains a vulnerability (CVE-2024-14043) in the Diameter S6a interface. The flaw resides in the mme_s6a_subscription_data_from_avp function (src/mme/mme-fd-path.c), where manipulating the msisdn_len argument can trigger a heap-based buffer overflow. This can be exploited remotely over th...
CVE-2024-14043 Open5GS Diameter S6a mme-fd-path.c mme_s6a_subscription_data_from_avp heap-based overflow
A vulnerability was determined in Open5GS up to 2.7.1. This vulnerability affects the function mmes6asubscriptiondatafromavp of the file src/mme/mme-fd-path.c of the component Diameter S6a Interface. Executing a manipulation of the argument msisdnlen can lead to heap-based buffer overflow. It is...
CVE-2024-14043
A vulnerability was determined in Open5GS up to 2.7.1. This vulnerability affects the function mmes6asubscriptiondatafromavp of the file src/mme/mme-fd-path.c of the component Diameter S6a Interface. Executing a manipulation of the argument msisdnlen can lead to heap-based buffer overflow. It is...
CVE-2026-29035
CivetWeb commit 4a4f0c95 contains a heap and stack buffer overflow vulnerability in the readwebsocket function that allows unauthenticated remote attackers to corrupt memory by sending compressed WebSocket frames when both USEZLIB and MGEXPERIMENTALINTERFACES are defined. Attackers can negotiate...
UBUNTU-CVE-2026-29035
CivetWeb commit 4a4f0c95 contains a heap and stack buffer overflow vulnerability in the readwebsocket function that allows unauthenticated remote attackers to corrupt memory by sending compressed WebSocket frames when both USEZLIB and MGEXPERIMENTALINTERFACES are defined. Attackers can negotiate...
Microsoft Security Advisory CVE-2026-62871 – .NET Elevation of Privilege Vulnerability
Executive summary Microsoft is releasing this security advisory to provide information about a vulnerability in Windows Presentation Foundation. This advisory also provides guidance on what developers can do to update their applications to remove this vulnerability. Out-of-bounds write in .NET...
GHSA-VG44-H755-9HW7 Microsoft Security Advisory CVE-2026-62871 – .NET Elevation of Privilege Vulnerability
Executive summary Microsoft is releasing this security advisory to provide information about a vulnerability in Windows Presentation Foundation. This advisory also provides guidance on what developers can do to update their applications to remove this vulnerability. Out-of-bounds write in .NET...
CVE-2026-71393
A flaw was found in GNU Emacs, specifically in GNU Emacs for Android. An integer overflow can occur when a specially crafted font file is processed on 32-bit systems due to an improper overflow checking. This can cause an undersized heap allocation and subsequently a heap-based buffer overflow,...
CVE-2026-71392
A flaw was found in GNU Emacs, specifically in GNU Emacs for Android. An integer overflow can occur when a specially crafted font file is processed on 32-bit systems due to an unguarded addition during memory allocation. This can cause an undersized heap allocation and subsequently a heap-based...
Microsoft Security Advisory CVE-2026-62886 – .NET Elevation of Privilege Vulnerability
Executive summary Microsoft is releasing this security advisory to provide information about a vulnerability in Windows Presentation Foundation. This advisory also provides guidance on what developers can do to update their applications to remove this vulnerability. An integer overflow or...
GHSA-JQHP-238X-QHGF Microsoft Security Advisory CVE-2026-62886 – .NET Elevation of Privilege Vulnerability
Executive summary Microsoft is releasing this security advisory to provide information about a vulnerability in Windows Presentation Foundation. This advisory also provides guidance on what developers can do to update their applications to remove this vulnerability. An integer overflow or...
Security Bulletin: IBM i is Affected By A Remote Code Execution Vulnerability [CVE-2026-16975]
Summary IBM i is vulnerable to remote code execution due to a heap-based buffer overflow CVE-2026-16975 as described in the vulnerability details section. Vulnerability Details CVEID:CVE-2026-16975 DESCRIPTION: IBM i could allow a remote authenticated attacker to execute arbitrary code due to a...
CVE-2026-68812
Heap-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code locally...
CVE-2026-68805
Heap-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code locally...