100687 matches found
CVE-2026-86514
vgmstream (up to revision r2117) contains a stack-based buffer overflow in the sscanf function within src/meta/txth.c, part of the txth-txtp component. The flaw can be triggered remotely without authentication, though user interaction is required (e.g., opening a crafted file). CVSS 3.1 rates it ...
kernel: netfilter: conntrack: remove sprintf usage
A flaw was found in the Linux kernel's netfilter conntrack module. This vulnerability arises from the use of sprintf and insufficient buffer sizing in the manglecontentlen function, which can lead to a stack-out-of-bounds write. An attacker could potentially exploit this memory corruption issue t...
CVE-2026-86509
A flaw has been found in D-Link DIR-895L A1102b07. This impacts the function sendOffer/sendACK of the file udhcpcd/serverpacket.c of the component udhcpcd. This manipulation causes stack-based buffer overflow. The attack can only be done within the local network. The exploit has been published an...
[SECURITY] Fedora 44 Update: libre-4.11.0-1.fc44
Libre is a generic library for real-time communications with async I/O support. Features are a SIP stack RFC 3261, SDP, RTP and RTCP, SRTP and SRTCP Secure RTP, DNS client, STUN/TURN/ICE stack, BFCP, HTTP stack with client/server, Websockets, Jitter buffer, async I/O poll, epoll, select, kqueue,...
EUVD-2026-72608
A flaw has been found in D-Link DIR-895L A1102b07. This impacts the function sendOffer/sendACK of the file udhcpcd/serverpacket.c of the component udhcpcd. This manipulation causes stack-based buffer overflow. The attack can only be done within the local network. The exploit has been published an...
CVE-2026-86509 D-Link DIR-895L udhcpcd serverpacket.c sendACK stack-based overflow
A flaw has been found in D-Link DIR-895L A1102b07. This impacts the function sendOffer/sendACK of the file udhcpcd/serverpacket.c of the component udhcpcd. This manipulation causes stack-based buffer overflow. The attack can only be done within the local network. The exploit has been published an...
CVE-2026-86509 D-Link DIR-895L udhcpcd serverpacket.c sendACK stack-based overflow
A flaw has been found in D-Link DIR-895L A1102b07. This impacts the function sendOffer/sendACK of the file udhcpcd/serverpacket.c of the component udhcpcd. This manipulation causes stack-based buffer overflow. The attack can only be done within the local network. The exploit has been published an...
CVE-2026-86509
A stack-based buffer overflow exists in the udhcpcd component (specifically the sendOffer/sendACK functions in serverpacket.c) of the D-Link DIR-895L (A1, firmware 102b07). An attacker on the same local network can trigger the flaw without authentication, achieving complete impact to confidential...
PT-2026-87348
Name of the Vulnerable Software and Affected Versions Windows Win32K affected versions not specified Description A stack-based buffer overflow occurs in Windows Win32K, which allows an authorized attacker to elevate privileges over a network. A stack-based buffer overflow is a condition where a...
PT-2026-87272
Name of the Vulnerable Software and Affected Versions Windows NTFS affected versions not specified Description A stack-based buffer overflow in Windows NTFS allows an authorized attacker to elevate privileges over a network. A stack-based buffer overflow occurs when a program writes more data to ...
CVE-2026-86514: Stack-based Buffer Overflow
A weakness has been identified in vgmstream up to r2117. This issue affects the function sscanf of the file src/meta/txth.c of the component txth-txtp. This manipulation causes stack-based buffer overflow. The attack is possible to be carried out remotely. The exploit has been made available to t...
CVE-2026-85384: Stack-based Buffer Overflow
A stack-based buffer overflow vulnerability exists in the httpd component of RE210 AC750 due to improper bounds checking in the splitString function when processing an uploaded configuration file. An authenticated attacker on the local network can upload a crafted configuration file to trigger th...
CVE-2026-9216: Stack-based Buffer Overflow
An insufficient input validation vulnerability in the listed NETGEAR RAX series models allows a network-adjacent attacker having network access such as WiFi credentials to crash the router's management UI. There is no confidentiality or integrity impact. A crash of the router's management UI does...
CVE-2026-81963: Improper Link Resolution Before File Access
Improper link resolution before file access 'link following' in Windows Update Stack allows an authorized attacker to elevate privileges locally...
CVE-2026-81953: Stack-based Buffer Overflow
Stack-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code locally...
CVE-2026-81388: Stack-based Buffer Overflow
Stack-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code locally...
CVE-2026-81396: Stack-based Buffer Overflow
Stack-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code locally...
CVE-2026-73006: Stack-based Buffer Overflow
Stack-based buffer overflow in Microsoft Graphics Component allows an unauthorized attacker to execute code over a network...