CVE-2026-69412

Stack-based buffer overflow in Windows DHCP Server allows an authorized attacker to execute code over an adjacent network...

CVE-2026-69391

Stack-based buffer overflow in Windows Broker Infrastructure Service allows an authorized attacker to elevate privileges locally...

CVE-2026-69301

Stack-based buffer overflow in Windows Win32K allows an authorized attacker to elevate privileges over a network...

CVE-2026-69290

Stack-based buffer overflow in Windows Storage Spaces Controller allows an authorized attacker to elevate privileges locally...

CVE-2026-69277

Stack-based buffer overflow in Microsoft Local Security Authority Server lsasrv allows an authorized attacker to elevate privileges locally...

CVE-2026-68878

Stack-based buffer overflow in Windows Fast FAT Driver allows an authorized attacker to elevate privileges over a network...

CVE-2026-68838

Stack-based buffer overflow in Windows NTFS allows an authorized attacker to elevate privileges over a network...

CVE-2026-68834

Stack-based buffer overflow in Windows NTFS allows an authorized attacker to elevate privileges over a network...

CVE-2026-67379

Stack-based buffer overflow in SQL Server allows an authorized attacker to execute code over a network...

encoding/asn1: golang: Go encoding/asn1: Denial of Service via excessive recursion in Unmarshal

A flaw was found in the encoding/asn1 package in Go. An attacker could provide a specially crafted, deeply-nested Abstract Syntax Notation One ASN.1 structure, leading to excessive recursion during the Unmarshal operation. This could result in stack exhaustion and a Denial of Service DoS conditio...

encoding/xml: golang: Go: Denial of Service via XML decoding recursion depth issue

A flaw was found in the encoding/xml package of Go. The DecodeElement function failed to correctly track recursion depth, which could lead to stack exhaustion. A remote attacker could exploit this vulnerability by providing a specially crafted XML input, resulting in a Denial of Service DoS for t...

Security Bulletin: IBM Instana Observability is affected by multiple vulnerabilities within Instana Agent container image

Summary Multiple vulnerabilities were addressed in IBM Observability with Instana within Instana Agent container image build 1.0.324 Vulnerability Details CVEID:CVE-2025-11468 DESCRIPTION: When folding a long comment in an email header containing exclusively unfoldable characters, the parenthesis...

EUVD-2026-73913

Stack-based buffer overflow in Microsoft Graphics Component allows an authorized attacker to elevate privileges locally...

CVE-2026-83990

CVE-2026-83990 is a stack-based buffer overflow in the Microsoft Graphics Component that allows an authorized attacker to achieve local privilege escalation . The CVSS 3.1 score is 7.8 (High) , with a local attack vector, low privileges required, no user interaction, and high impact on confidenti...

EUVD-2026-73889

Improper link resolution before file access 'link following' in Windows Update Stack allows an authorized attacker to elevate privileges locally...

CVE-2026-81963

Windows Update Stack is affected by an improper link resolution before file access ('link following') flaw that allows an authorized attacker with low privileges to elevate privileges locally , rated CVSS 7.8 HIGH with high impact to confidentiality, integrity, and availability. The vulnerability...

EUVD-2026-73879

Stack-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code locally...

CVE-2026-81953

Microsoft Office Excel is affected by a stack-based buffer overflow that allows an unauthorized attacker to execute code locally. The CVSS 3.1 score is 7.8 (HIGH) with a local attack vector, low complexity, no privileges required, but user interaction required (the victim must open a crafted file...

EUVD-2026-73874

Stack-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code locally...

CVE-2026-81388

CVE-2026-81388 is a stack-based buffer overflow in Microsoft Office Excel that allows an unauthorized attacker to execute code locally. The attack requires user interaction (e.g., opening a crafted file) and no prior privileges. The CVSS 3.1 score is 7.8 (HIGH) , with high impact to confidentiali...