EUVD-2026-76848

msgpack-java through 0.9.12 contains a stack overflow vulnerability in MessageUnpacker.unpackValue that recursively deserializes arrays and maps without nesting depth limits. Attackers can craft payloads with deeply nested arrays to exhaust the deserializing thread's stack and trigger...

CVE-2026-90472 msgpack-java through 0.9.12 Stack Overflow via Nested Arrays

msgpack-java through 0.9.12 contains a stack overflow vulnerability in MessageUnpacker.unpackValue that recursively deserializes arrays and maps without nesting depth limits. Attackers can craft payloads with deeply nested arrays to exhaust the deserializing thread's stack and trigger...

CVE-2026-90472

msgpack-java through 0.9.12 contains a stack overflow vulnerability in MessageUnpacker.unpackValue that recursively deserializes arrays and maps without nesting depth limits. Attackers can craft payloads with deeply nested arrays to exhaust the deserializing thread's stack and trigger...

exploit.pub

Exploit Modeling Lab — Windows / x86 stack buffer overflow st...

PT-2026-90718

Name of the Vulnerable Software and Affected Versions sngrep versions prior to 1.8.4-2.1 Description Stack buffer overflow issues exist in SIP attribute formatting routines when header values exceed the 255-byte buffer limit. An attacker can send malicious SIP packets containing oversized header...

Linux Distros Unpatched Vulnerability : CVE-2026-80944

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - wifi: mwifiex: Detach sync cmd buffer on interrupted wait mwifiex synchronous commands keep the caller- provided data buffer in cmdnode-databuf. Several callers...

Linux Distros Unpatched Vulnerability : CVE-2026-89653

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - ceph: reject exporttargets ranks = CEPHMAXMDS in mdsmap decode MDSMap exporttargets entries are monitor controlled. checknewmap uses each entry as a bit number ...

Linux Distros Unpatched Vulnerability : CVE-2026-89587

"The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - ACPI: pfrupdate: fix stack buffer overflow in querycapability querycapability copies four ACPI buffer objects returned by the firmware DSM into fixed-size u816...

Linux Distros Unpatched Vulnerability : CVE-2026-90472

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - msgpack-java through 0.9.12 contains a stack overflow vulnerability in MessageUnpacker.unpackValue that recursively deserializes arrays and maps without nesting...

Linux Distros Unpatched Vulnerability : CVE-2026-89600

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In the Linux kernel, the following vulnerability has been resolved: fanotify: fix use-after-free of file range info fsnotifyprecontent builds its filerange on t...

Linux Distros Unpatched Vulnerability : CVE-2026-80975

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In the Linux kernel, the following vulnerability has been resolved: mfd: qnap-mcu: keep the reply buffer alive past a command timeout qnapmcuexec publishes an...

Linux Distros Unpatched Vulnerability : CVE-2026-80927

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In the Linux kernel, the following vulnerability has been resolved: timekeeping: Check the return value of tkgetauxts64 in doadjtimex If the auxiliary clock is...

PT-2026-90780

Name of the Vulnerable Software and Affected Versions Notepad++ versions prior to 8.9.8 Description A stack buffer overflow exists in the plugin loading mechanism within the PluginsManager::loadPluginFromPath function. The issue occurs because the result of the GetLexerCount function, provided by...

Linux Distros Unpatched Vulnerability : CVE-2026-81007

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - ipmi: ipmb: validate write message length ipmbwrite read message fields before validating the length byte. A zero or short write can read uninitialized stack...

Linux Distros Unpatched Vulnerability : CVE-2026-19201

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - An uncontrolled recursion vulnerability in the Windows SIPA event log parser of Google go-attestation versions up to and including 0.6.1 allows an attacker to...

Linux Distros Unpatched Vulnerability : CVE-2026-90558

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - sngrep through 1.8.4 contains stack buffer overflow vulnerabilities in SIP attribute formatting routines when header values exceed the 255-byte buffer limit...

openSUSE 16 Security Update : opensc (openSUSE-SU-2026:21820-1)

The remote openSUSE 16 host has packages installed that are affected by a vulnerability as referenced in the openSUSE- SU-2026:21820-1 advisory. This update for opensc fixes the following issue: - CVE-2026-40510: stack buffer overflow in pivprocesshistory allows physically present attackers to...

CVE-2026-90558: Stack-based Buffer Overflow

sngrep through 1.8.4 contains stack buffer overflow vulnerabilities in SIP attribute formatting routines when header values exceed the 255-byte buffer limit. Attackers can craft malicious SIP packets with oversized Call-ID, X-Call-ID, or other header fields to overflow stack buffers and cause...

Linux Distros Unpatched Vulnerability : CVE-2026-89759

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - mm/kmemleak: avoid soft lockup when scanning task stacks Patch series mm/kmemleak: avoid soft lockup when scanning task, v3. kmemleakscan scans every task stack...

Linux Distros Unpatched Vulnerability : CVE-2026-80978

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - net: cap advertised IP tunnel headroom IP tunnel devices derive their advertised neededheadroom from lower output devices. A stack of user-created devices can...