Lucene search
+L

35541 matches found

RedhatCVE
RedhatCVE
added 2026/08/11 8:50 a.m.8 views

CVE-2026-73154

A flaw was found in svxlink. A stack overflow in the StationData::setData function can be triggered by specially crafted input data, potentially allowing a remote attacker to crash the application or achieve arbitrary code execution. Mitigation Update svxlink to version 26.05.1 or later...

5.7AI score
SaveExploits0References4
Positive Technologies
Positive Technologies
added 2026/08/11 12:00 a.m.4 views

PT-2026-70190

Name of the Vulnerable Software and Affected Versions Simcenter Femap versions prior to V2606 Simcenter Nastran versions prior to V2606 Description A stack overflow occurs when the application parses specially crafted strings used as arguments for one of the application binaries. This flaw could...

7.8CVSS5.8AI score0.00115EPSS
SaveExploits0References3
Positive Technologies
Positive Technologies
added 2026/08/11 12:00 a.m.4 views

PT-2026-70574

Name of the Vulnerable Software and Affected Versions Windows Win32K affected versions not specified Description A stack-based buffer overflow occurs in Windows Win32K, which allows an authorized attacker to elevate privileges locally. A stack-based buffer overflow is a condition where a program...

7.8CVSS5.7AI score0.0024EPSS
SaveExploits0References7
Positive Technologies
Positive Technologies
added 2026/08/11 12:00 a.m.3 views

PT-2026-70706

Stack-based buffer overflow in Microsoft Office allows an unauthorized attacker to execute code locally...

7.8CVSS5.5AI score0.00352EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
added 2026/08/11 12:00 a.m.5 views

PT-2026-70563

Name of the Vulnerable Software and Affected Versions Remote Desktop Client affected versions not specified Description A stack-based buffer overflow occurs in the Remote Desktop Client, which allows an unauthorized attacker to execute arbitrary code over a network and affect the system. A...

8.8CVSS6.4AI score0.00613EPSS
SaveExploits0References5
Positive Technologies
Positive Technologies
added 2026/08/11 12:00 a.m.4 views

PT-2026-70635

Name of the Vulnerable Software and Affected Versions Microsoft Office Word affected versions not specified Description A stack-based buffer overflow occurs when a program writes more data to a buffer located on the stack than the buffer is allocated to hold. This issue allows an unauthorized...

7.8CVSS6.3AI score0.0034EPSS
SaveExploits0References3
Tenable Nessus
Tenable Nessus
added 2026/08/11 12:00 a.m.10 views

Security Updates for Microsoft Access Products (August 2026)

The Microsoft Access Products are missing a security update. They are, therefore, affected by multiple vulnerabilities: - Heap-based buffer overflow in Microsoft Office Access allows an unauthorized attacker to execute code locally. CVE-2026-64906, CVE-2026-64908, CVE-2026-64914, CVE-2026-64920 -...

7.8CVSS7.8AI score0.00393EPSS
SaveExploits0References8
Positive Technologies
Positive Technologies
added 2026/08/11 12:00 a.m.3 views

PT-2026-70228

Name of the Vulnerable Software and Affected Versions NETGEAR affected versions not specified Description A stack-based buffer overflow occurs when a program writes more data to a buffer located on the stack than the buffer is allocated to hold, potentially overwriting adjacent memory. This issue...

5.7CVSS5.9AI score0.00313EPSS
SaveExploits0References23
NVD
NVD
added 2026/08/10 7:17 p.m.8 views

CVE-2026-6791

When expanding paths that begin with a tilde followed by a username, the internal parsetilde function extracts the username to determine the user's home directory. The implementation allocates memory for this username directly on the stack using the strndupa macro. Because the size of this...

9CVSS0.00207EPSS
SaveExploits0References1
OSV
OSV
added 2026/08/10 7:17 p.m.4 views

UBUNTU-CVE-2026-6791

When expanding paths that begin with a tilde followed by a username, the internal parsetilde function extracts the username to determine the user's home directory. The implementation allocates memory for this username directly on the stack using the strndupa macro. Because the size of this...

9CVSS5.4AI score0.00207EPSS
SaveExploits0References2
Debian CVE
Debian CVE
added 2026/08/10 6:41 p.m.9 views

CVE-2026-6791

When expanding paths that begin with a tilde followed by a username, the internal parsetilde function extracts the username to determine the user's home directory. The implementation allocates memory for this username directly on the stack using the strndupa macro. Because the size of this...

9CVSS5.4AI score0.00207EPSS
SaveExploits0
OSV
OSV
added 2026/08/10 1:20 p.m.6 views

UBUNTU-CVE-2026-68187

In the Linux kernel, the following vulnerability has been resolved: exec: fix unsigned loop counter wrap in transferargstostack The stop value is derived from bprm-p PAGESHIFT. The index variable is an unsigned long. If bprm-p drops below PAGESIZE and stop becomes zero the loop condition index =...

5.3AI score0.0022EPSS
SaveExploits0References7
UbuntuCve
UbuntuCve
added 2026/08/10 1:20 p.m.6 views

CVE-2026-68159

In the Linux kernel, the following vulnerability has been resolved: libceph: bound pgtemp,upmap,upmapitems length to CEPHPGMAXSIZE decodepgtemp decodes an user-controlled length but only rejects values large enough to overflow the allocation; it does not bound it to CEPHPGMAXSIZE. The helper back...

9.8CVSS5.6AI score0.00553EPSS
SaveExploits0References3
Cvelist
Cvelist
added 2026/08/10 11:59 a.m.33 views

CVE-2026-68159 libceph: bound pg_{temp,upmap,upmap_items} length to CEPH_PG_MAX_SIZE

In the Linux kernel, the following vulnerability has been resolved: libceph: bound pgtemp,upmap,upmapitems length to CEPHPGMAXSIZE decodepgtemp decodes an user-controlled length but only rejects values large enough to overflow the allocation; it does not bound it to CEPHPGMAXSIZE. The helper back...

9.8CVSS0.00553EPSS
SaveExploits0References2
NVD
NVD
added 2026/08/10 11:17 a.m.8 views

CVE-2026-66485

GNU cpio is vulnerable to an uncontrolled memory allocation in the makepath function at src/makepath.c. The function uses alloca to allocate stack memory based on the length of argpath, which is derived from an archive-controlled pathname during extraction. A malicious cpio archive containing a...

4.6CVSS0.00132EPSS
SaveExploits0References2
UbuntuCve
UbuntuCve
added 2026/08/10 11:17 a.m.8 views

CVE-2026-66485

GNU cpio is vulnerable to an uncontrolled memory allocation in the makepath function at src/makepath.c. The function uses alloca to allocate stack memory based on the length of argpath, which is derived from an archive-controlled pathname during extraction. A malicious cpio archive containing a...

4.6CVSS5.4AI score0.00132EPSS
SaveExploits0References3
Cvelist
Cvelist
added 2026/08/10 10:25 a.m.44 views

CVE-2026-66485 Uncontrolled Memory Allocation in GNU cpio

GNU cpio is vulnerable to an uncontrolled memory allocation in the makepath function at src/makepath.c. The function uses alloca to allocate stack memory based on the length of argpath, which is derived from an archive-controlled pathname during extraction. A malicious cpio archive containing a...

4.6CVSS0.00132EPSS
SaveExploits0References2
CVE
CVE
added 2026/08/10 10:25 a.m.51 views

CVE-2026-66485

GNU cpio is affected by an uncontrolled memory allocation in make_path (src/makepath.c) that uses alloca based on the length of argpath, derived from an archive-controlled pathname during extraction. A crafted cpio archive with a long nested pathname can trigger unbounded stack allocation, causin...

4.6CVSS5.3AI score0.00132EPSS
SaveExploits0References2
ATTACKERKB
ATTACKERKB
added 2026/08/10 10:25 a.m.9 views

CVE-2026-66485

GNU cpio is vulnerable to an uncontrolled memory allocation in the makepath function at src/makepath.c. The function uses alloca to allocate stack memory based on the length of argpath, which is derived from an archive-controlled pathname during extraction. A malicious cpio archive containing a...

4.6CVSS5.3AI score0.00157EPSS
SaveExploits0References3
NVD
NVD
added 2026/08/10 9:17 a.m.8 views

CVE-2026-21068

Stack-based buffer overflow in librilsem.so prior to SMR Aug-2026 Release 1 allows privileged local attackers to execute arbitrary code...

8.4CVSS0.00125EPSS
SaveExploits0References1
Rows per page
Query Builder