PT-2026-88094

Name of the Vulnerable Software and Affected Versions Microsoft Office Excel affected versions not specified Description A stack-based buffer overflow occurs when a program writes more data to a buffer located on the stack than the buffer is allocated to hold, potentially overwriting adjacent...

PT-2026-87829

Name of the Vulnerable Software and Affected Versions Windows Storage Management Provider affected versions not specified Description A stack-based buffer overflow occurs in the Windows Storage Management Provider. This issue allows an authorized attacker to elevate privileges locally on the...

PT-2026-87657

Name of the Vulnerable Software and Affected Versions Microsoft Office Word affected versions not specified Description A stack-based buffer overflow occurs when a program writes more data to a buffer located on the stack than the buffer is allocated to hold, potentially overwriting adjacent...

PT-2026-87446

CVE-2026-69412 scores 8.0. • Stack-based buffer overflow in Windows DHCP Server • Allows authenticated adjacent-network RCE • Affects Windows 10 1607 • Exploitation considered unlikely, no known attacks https://t.co/fOP7ghPmwg https://t.co/G99ODACz6v...

PT-2026-87524

Stack-based buffer overflow in Windows USB Driver allows an authorized attacker to elevate privileges over a network...

PT-2026-87295

Name of the Vulnerable Software and Affected Versions Windows Fast FAT Driver affected versions not specified Description A stack-based buffer overflow occurs in the Windows Fast FAT Driver. This issue allows an authorized attacker to elevate privileges over a network. A stack-based buffer overfl...

PT-2026-87493

Stack-based buffer overflow in Microsoft Graphics Component allows an authorized attacker to elevate privileges locally...

CVE-2026-78504: Stack-based Buffer Overflow

Stack-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code over a network...

EulerOS 2.0 SP12 : python3 (EulerOS-SA-2026-3380)

According to the versions of the python3 packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : xml.parsers.expat and xml.etree.ElementTree use insufficient entropy for Expat hash-flooding protection, which allows a crafted XML document to...

KB5123602: Servicing stack update for Windows Server 2012: September 8, 2026

KB5123602: Servicing stack update for Windows Server 2012: September 8, 2026 Applies To Windows Server 2012 ESU Summary This update makes quality improvements to the servicing stack, which is the component that installs Windows updates. Servicing stack updates SSU makes sure that you have a robus...

KB5123499: Servicing stack update for Windows Server 2012 R2: September 8, 2026

KB5123499: Servicing stack update for Windows Server 2012 R2: September 8, 2026 Applies To Windows Server 2012 R2 ESU Summary This update makes quality improvements to the servicing stack, which is the component that installs Windows updates. Servicing stack updates SSU makes sure that you have a...

NewStart CGSL MAIN 7.02 : gstreamer1-plugins-bad-free Multiple Vulnerabilities (NS-SA-2026-0088)

The remote NewStart CGSL host, running version MAIN 7.02, has gstreamer1-plugins-bad-free packages installed that are affected by multiple vulnerabilities: - A stack buffer overflow flaw was found in the GStreamer H.265 codec parser library gst-plugins-bad. When parsing a buffering period SEI...

Testing race conditions with memory access tracing and stack-based delay injection

Posted by Jann Horn Many security bugs are race conditions, where multi-threaded execution has to occur with the right interleaving for a negative effect to appear. This creates challenges for several use cases: Confirming bug candidates that have been discovered manually or through static...

Security update for aws-nitro-enclaves-cli (important)

openSUSE security update: security update for aws-nitro-enclaves-cli ------------------------------------------------------------- Announcement ID: openSUSE-SU-2026:21782-1 Rating: important References: bsc1257933 bsc1270202 bsc1274300 Cross-References: CVE-2026-25541 CVE-2026-25727 CVE-2026-4167...

Microsoft Windows Link Following Vulnerability

Microsoft Windows Update Stack contains a link following vulnerability that allows a local attacker to escalate privileges locally up to SYSTEM...

PT-2026-87781

Stack-based buffer overflow in Windows Hyper-V allows an unauthorized attacker to execute code over a network...

EulerOS 2.0 SP12 : vim (EulerOS-SA-2026-3393)

According to the versions of the vim packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : Vim is an open source, command line text editor. Prior to 9.2.0735, the C omni-completion script in runtime/autoload/ccomplete.vim interpolates the...

NewStart CGSL MAIN 7.02 : openssl Multiple Vulnerabilities (NS-SA-2026-0112)

The remote NewStart CGSL host, running version MAIN 7.02, has openssl packages installed that are affected by multiple vulnerabilities: - Issue summary: An uncommon configuration of clients performing DANE TLSA-based server authentication, when paired with uncommon server DANE TLSA records, may...

EulerOS 2.0 SP12 : rsync (EulerOS-SA-2026-3308)

According to the versions of the rsync packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : Rsync version 3.4.2 and prior contain an authorization bypass vulnerability in the rsync daemon's hostname-based access control list enforcement wh...

EulerOS 2.0 SP12 : rsync (EulerOS-SA-2026-3383)

According to the versions of the rsync packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : Rsync version 3.4.2 and prior contain an authorization bypass vulnerability in the rsync daemon's hostname-based access control list enforcement wh...