CVE-2026-16418: Stack-based Buffer Overflow

Stack buffer overflow in V8 in Google Chrome prior to 150.0.7871.182 allowed a remote attacker to execute arbitrary code inside a sandbox via a crafted HTML page. Chromium security severity: High...

PT-2026-61847

Name of the Vulnerable Software and Affected Versions libssh affected versions not specified Description A flaw exists in libssh during SFTP server directory listing. The longname field is constructed using unsafe concatenation into a fixed-size stack buffer. An attacker can trigger a stack buffe...

CVE-2026-59144: Stack-based Buffer Overflow

Data::RingBuffer::Shared versions before 0.04 for Perl allow a stack buffer overflow via an unvalidated elemsize in ringreadseq. The attach-time validator ringvalidateheader checks the capacity-overflow and totalsize consistency of the header but never caps elemsize against the destination size...

AZL-93009 CVE-2026-16277 affecting package rpcbind for versions less than 1.2.9-1

A stack-based buffer overflow was found in rpcbind's rpcinfo utility. When querying a remote rpcbind service with rpcinfo -l, address information returned by the server is copied into a fixed-size buffer without sufficient bounds checking. A malicious or compromised rpcbind server could use this...

OESA-2026-3083 ffmpeg security update

FFmpeg is a complete and free Internet live audio and video broadcasting solution for Linux/Unix. It also includes a digital VCR. It can encode in real time in many formats including MPEG1 audio and video, MPEG4, h263, ac3, asf, avi, real, mjpeg, and flash. Security Fixes: Unchecked Return Value,...

OESA-2026-3084 ffmpeg security update

FFmpeg is a complete and free Internet live audio and video broadcasting solution for Linux/Unix. It also includes a digital VCR. It can encode in real time in many formats including MPEG1 audio and video, MPEG4, h263, ac3, asf, avi, real, mjpeg, and flash. Security Fixes: A flaw was found in...

CVE-2026-64135: Undefined Security Weakness

In the Linux kernel, the following vulnerability has been resolved: hwmon: pmbus/adm1266 widen blackbox-info buffer to I2CSMBUSBLOCKMAX adm1266nvmemreadblackbox declares a 5-byte stack buffer and passes it to i2csmbusreadblockdata to retrieve the 4-byte BLACKBOXINFO response. i2csmbusreadblockdat...

AZL-92388 CVE-2026-48863 affecting package libsolv for versions less than 0.7.28-5

A flaw was found in libsolv. A stack-based buffer overflow vulnerability exists in the PGP verification component due to incorrect length handling when copying EdDSA 's' MPI into a stack buffer. A remote attacker could craft a malicious Ed25519 PGP signature with mismatched MPI lengths. Processin...

CVE-2026-48863 Libsolv: stack-based buffer overflow in libsolv eddsa pgp signature verification allows denial of service

A flaw was found in libsolv. A stack-based buffer overflow vulnerability exists in the PGP verification component due to incorrect length handling when copying EdDSA 's' MPI into a stack buffer. A remote attacker could craft a malicious Ed25519 PGP signature with mismatched MPI lengths. Processin...

rrdtool security update

1.8.0-21 - Fixed stack buffer overflow in rrdcached and added more security checks Resolves: RHEL-173264...

libxml2 security update

An update is available for libxml2. This update affects Rocky Linux 9. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list The libxml2 library is a development toolbox providing the implementation of...

Tenda BE12 Pro stack buffer overflow vulnerability (CNVD-2026-32963)

The Tenda BE12 Pro is a Wi-Fi7 router released by Tenda in January 2026. The Tenda BE12 Pro has a stack buffer overflow vulnerability. This vulnerability stems from the fromSafeMacFilter function, which fails to correctly validate the input length when processing the page parameter. Attackers can...

Tenda BE12 Pro stack buffer overflow vulnerability (CNVD-2026-32962)

The Tenda BE12 Pro is a Wi-Fi 7 router released by Tenda in January 2026. The Tenda BE12 Pro has a stack buffer overflow vulnerability. This vulnerability stems from the fromSafeUrlFilter function in the /goform/SafeUrlFilter file, which fails to properly handle the parameter page. An attacker ca...

Tenda BE12 Pro stack buffer overflow vulnerability (CNVD-2026-32961)

The Tenda BE12 Pro is a Wi-Fi 7 wireless router released by Tenda in January 2026. The Tenda BE12 Pro has a stack buffer overflow vulnerability. This vulnerability stems from the fromSetIpBind function in the /goform/SetIpBind file, which fails to correctly validate the length of the page...

Tenda BE12 Pro stack buffer overflow vulnerability (CNVD-2026-32964)

The Tenda BE12 Pro is a Wi-Fi 7 wireless router released by Tenda in January 2026. The Tenda BE12 Pro has a stack buffer overflow vulnerability. This vulnerability stems from the fromSafeClientFilter function in the /goform/SafeClientFilter file, which fails to properly handle the page parameter...

Tenda BE12 Pro stack buffer overflow vulnerability

The Tenda BE12 Pro is a Wi-Fi 7 wireless router released by Tenda in January 2026. The Tenda BE12 Pro has a stack buffer overflow vulnerability. This vulnerability stems from the fromDhcpListClient function in the /goform/DhcpListClient file, which fails to properly handle the page parameter. An...

Microsoft Office Excel stack buffer overflow vulnerability (CNVD-2026-29407)

Microsoft Office Excel is a spreadsheet processing software within the Microsoft Office suite, primarily used for data organization, analysis, and visualization. Microsoft Office Excel has a stack buffer overflow vulnerability, which stems from improper handling of memory operations. Attackers ca...

RockyLinux 10 : libxml2 (RLSA-2026:39304)

The remote RockyLinux 10 host has packages installed that are affected by a vulnerability as referenced in the RLSA-2026:39304 advisory. libxml2: Stack Buffer Overflow in xmllint Interactive Shell Command Handling CVE-2025-6170 Tenable has extracted the preceding description block directly from t...

CVE-2026-49789

CVE-2026-49789 is a Windows NTFS elevation-of-privilege vulnerability. A stack-based buffer overflow in NTFS could allow an authorized local attacker to escalate privileges. Affected component: Windows NTFS subsystem. Root cause: stack-based overflow in an NTFS operation, leading to potential cod...

EUVD-2026-43602

In OpENer 2.3.0 commit 76b95cf when parsing incoming CIP Common Industrial Protocol network packets, the length parameter is inconsistently typed across the call stack. Specifically, an upstream length calculated as an int is passed to a downstream function that expects an EipInt16 a 16-bit signe...