CVE-2026-78010: Stack-based Buffer Overflow

A stack-based buffer overflow vulnerability in the WatchGuard Fireware OS iked process iallows a remote unauthenticated attacker to create a Denial of Service DoS condition in VPN processing by sending specially crafted network traffic...

Microsoft Office Buffer Overflow

The vulnerability of Microsoft Office, Excel, and 365 Apps for Enterprise packages is related to buffer overflow in the stack. Exploiting this vulnerability can allow an attacker to execute arbitrary code...

IPMI Management Tools Buffer Overflow

The vulnerability of the IPMI management tools such as ipmi-sensors, ipmipower, client, OEM, and ipmi-oem relates to buffer overflow attacks on the stack. Exploiting this vulnerability can allow an attacker to trigger a service failure remotely...

Ncurses Heap Buffer Overflow DoS

The vulnerability in the progs/infocmp.c component of the input/output library for the Ncurses terminal emulator is related to buffer overflow on the stack. Exploiting this vulnerability could allow an attacker to cause a service failure...

Windows TCP/IP Code Execution

The vulnerability of the TCP/IP protocol implementation in Windows operating systems is related to buffer overflows in the stack. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...

Linux Distros Unpatched Vulnerability : CVE-2026-82343

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A flaw was found in the file-psd plugin in GIMP. When processing a specially crafted PSD image file, the plugin does not properly validate the channel-count...

Linux Distros Unpatched Vulnerability : CVE-2026-80662

"The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - cxl: Fix CXLHEADERLOGSIZE to match RAS Capability size The CXL r4.0 8.2.4.17.7 RAS Capability Structure has total length 0x58 bytes CXLRASCAPABILITYLENGTH...

Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: fribidi (UTSA-2025-002248)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-002248 advisory. A stack-based buffer overflow flaw was found in the Fribidi package. This flaw allows an attacker to pass a specially crafted file to the Fribidi application, which...

PT-2026-83352

Name of the Vulnerable Software and Affected Versions TL-MR100 version 3.20 Description A pre-authentication stack-based buffer overflow occurs in the http gdpr decrypt function due to insufficient bounds checking of encrypted requests. An adjacent unauthenticated attacker with access to the web...

CVE-2026-5706: Improper Handling of Length Parameter Inconsistency

In Bluetooth Mesh SDK 6.1.4 and earlier, malformed extended advertisements can trigger out-of-bounds writes leading to stack corruption and remote code execution. These messages must come from a device that has already joined the network. Only provisioners supporting extended advertisements may b...

CVE-2026-73209

An attacker that has valid credentials can send crafted compressed data that causes the affected process to exhaust its stack and crash. The affected process is terminated, which can cause degradation or denial of service for IMAP. Update to non-vulnerable version. No publicly available exploits...

PT-2026-83279

PLANET GS-4210-16P2S firmware before 3.441b260626 contains authenticated stack buffer overflow vulnerabilities in /cgi-bin/dispatcher.cgi. The web login first post handler copies the usrPass POST parameter into a fixed-size stack buffer without length validation, the web sys enablePasswd post...

PT-2026-83075

Name of the Vulnerable Software and Affected Versions dovecot versions prior to 2.4.5-1.1 Description An attacker with valid credentials can send specially crafted compressed data that leads to stack exhaustion, causing the affected process to crash. This termination of the process can result in...

CVE-2026-67560: Stack-based Buffer Overflow

Bendix EC80 Brake ECU is vulnerable to a stack-based buffer overflow, which may allow an attacker to crash the ECU. A crafted payload can then be used to remotely execute arbitrary code or inject arbitrary CAN bus traffic. This could cause the loss of the ABS function, steering assist, speedomete...

Linux Distros Unpatched Vulnerability : CVE-2026-80634

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - netfilter: flowtable: avoid numencaps underflow on bridge VLAN untag The DEVPATHBRVLANUNTAG case post-decrements info-numencaps inside WARNONONCE. numencaps is...

Fedora 44 : bluez (2026-1fba3f22c9)

The remote Fedora 44 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2026-1fba3f22c9 advisory. BlueZ sdp-xml.c type confusion via RegisterProfileServiceRecord can crash bluetoothd local DoS: a crafted nested ServiceRecord can corrupt the SDP X...

CVE-2026-75118: Stack-based Buffer Overflow

A pre-authentication stack-based buffer overflow vulnerability exists in the httpgdprdecrypt function of TL-MR100 V3.20 due to insufficient bounds checking of encrypted requests to the /cgi/login endpoint. An adjacent unauthenticated attacker with access to the router's web management interface c...

CVE-2026-81532: Stack-based Buffer Overflow

A user able to submit SQL through an application using the MongoDB Connector for BI ODBC driver can supply a positioned-cursor statement whose cursor name exceeds the size of an internal fixed-length buffer. Because the name length is not bounded before the driver builds its diagnostic message,...

CVE-2026-75126: Stack-based Buffer Overflow

PLANET GS-4210-16P2S V3 firmware before 3.441b260626 contains multiple authenticated stack buffer overflow vulnerabilities in /cgi-bin/dispatcher.cgi. The following handlers copy attacker-controlled POST parameters into fixed-size stack buffers without length validation:...

CVE-2026-73209: Uncontrolled Recursion

An attacker that has valid credentials can send crafted compressed data that causes the affected process to exhaust its stack and crash. The affected process is terminated, which can cause degradation or denial of service for IMAP. Update to non-vulnerable version. No publicly available exploits...