98066 matches found
CVE-2026-9216: Stack-based Buffer Overflow
An insufficient input validation vulnerability in the listed NETGEAR RAX series models allows a network-adjacent attacker having network access such as WiFi credentials to crash the router's management UI. There is no confidentiality or integrity impact. A crash of the router's management UI does...
CVE-2026-72982: Stack-based Buffer Overflow
Stack-based buffer overflow in Windows Netlogon allows an unauthorized attacker to execute code over a network...
PT-2026-87829
Name of the Vulnerable Software and Affected Versions Windows Storage Management Provider affected versions not specified Description A stack-based buffer overflow occurs in the Windows Storage Management Provider. This issue allows an authorized attacker to elevate privileges locally on the...
PT-2026-87337
Name of the Vulnerable Software and Affected Versions Windows Storage Spaces Controller affected versions not specified Description A stack-based buffer overflow occurs in the Windows Storage Spaces Controller. This issue allows an authorized attacker to elevate privileges locally on the system. ...
CVE-2026-69412: Stack-based Buffer Overflow
Stack-based buffer overflow in Windows DHCP Server allows an authorized attacker to execute code over an adjacent network...
CVE-2026-69467: Stack-based Buffer Overflow
Stack-based buffer overflow in Microsoft Graphics Component allows an authorized attacker to elevate privileges locally...
CVE-2026-78439: Stack-based Buffer Overflow
Stack-based buffer overflow in Microsoft Graphics Component allows an unauthorized attacker to execute code over a network...
CVE-2026-73006: Stack-based Buffer Overflow
Stack-based buffer overflow in Microsoft Graphics Component allows an unauthorized attacker to execute code over a network...
CVE-2026-71337: Stack-based Buffer Overflow
Stack-based buffer overflow in Windows Storage Management Provider allows an authorized attacker to elevate privileges locally...
PT-2026-87781
Stack-based buffer overflow in Windows Hyper-V allows an unauthorized attacker to execute code over a network...
Testing race conditions with memory access tracing and stack-based delay injection
Posted by Jann Horn Many security bugs are race conditions, where multi-threaded execution has to occur with the right interleaving for a negative effect to appear. This creates challenges for several use cases: Confirming bug candidates that have been discovered manually or through static...
CVE-2026-86509: Stack-based Buffer Overflow
A flaw has been found in D-Link DIR-895L A1102b07. This impacts the function sendOffer/sendACK of the file udhcpcd/serverpacket.c of the component udhcpcd. This manipulation causes stack-based buffer overflow. The attack can only be done within the local network. The exploit has been published an...
CVE-2026-69722: Stack-based Buffer Overflow
Stack-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code over a network...
CVE-2026-69686: Stack-based Buffer Overflow
Stack-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code over a network...
Security update for aws-nitro-enclaves-cli (important)
openSUSE security update: security update for aws-nitro-enclaves-cli ------------------------------------------------------------- Announcement ID: openSUSE-SU-2026:21782-1 Rating: important References: bsc1257933 bsc1270202 bsc1274300 Cross-References: CVE-2026-25541 CVE-2026-25727 CVE-2026-4167...
Microsoft Windows Link Following Vulnerability
Microsoft Windows Update Stack contains a link following vulnerability that allows a local attacker to escalate privileges locally up to SYSTEM...
PT-2026-87039
PX4 Autopilot through 1.17.0 contains a use-after-free vulnerability in the load mon module's stop path where exit and cleanup deletes the LoadMon object and frees the performance counter before perf end attempts to access it. Attackers can trigger this vulnerability by issuing the load mon stop...
PT-2026-88521
Name of the Vulnerable Software and Affected Versions go-attestation versions prior to 0.6.2 Description An uncontrolled recursion issue in the Windows SIPA event log parser allows a remote attacker to cause a denial of service DoS. The readELAMAggregation function in the WinEvents object recurse...
