KB5123499: Servicing stack update for Windows Server 2012 R2: September 8, 2026

KB5123499: Servicing stack update for Windows Server 2012 R2: September 8, 2026 Applies To Windows Server 2012 R2 ESU Summary This update makes quality improvements to the servicing stack, which is the component that installs Windows updates. Servicing stack updates SSU makes sure that you have a...

KB5123602: Servicing stack update for Windows Server 2012: September 8, 2026

KB5123602: Servicing stack update for Windows Server 2012: September 8, 2026 Applies To Windows Server 2012 ESU Summary This update makes quality improvements to the servicing stack, which is the component that installs Windows updates. Servicing stack updates SSU makes sure that you have a robus...

CVE-2026-69461: Stack-based Buffer Overflow

Stack-based buffer overflow in Windows NTFS allows an unauthorized attacker to execute code over a network...

CVE-2026-78504: Stack-based Buffer Overflow

Stack-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code over a network...

NewStart CGSL MAIN 7.02 : glibc Multiple Vulnerabilities (NS-SA-2026-0097)

The remote NewStart CGSL host, running version MAIN 7.02, has glibc packages installed that are affected by multiple vulnerabilities: - Calling getnetbyaddr or getnetbyaddrr with a configured nsswitch.conf that specifies the library's DNS backend for networks and queries for a zero-valued network...

EulerOS 2.0 SP12 : python3 (EulerOS-SA-2026-3305)

According to the versions of the python3 packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : xml.parsers.expat and xml.etree.ElementTree use insufficient entropy for Expat hash-flooding protection, which allows a crafted XML document to...

EulerOS 2.0 SP12 : rsync (EulerOS-SA-2026-3308)

According to the versions of the rsync packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : Rsync version 3.4.2 and prior contain an authorization bypass vulnerability in the rsync daemon's hostname-based access control list enforcement wh...

EulerOS 2.0 SP12 : vim (EulerOS-SA-2026-3318)

According to the versions of the vim packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : Vim is an open source, command line text editor. Prior to 9.2.0735, the C omni-completion script in runtime/autoload/ccomplete.vim interpolates the...

EulerOS 2.0 SP12 : vim (EulerOS-SA-2026-3393)

According to the versions of the vim packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : Vim is an open source, command line text editor. Prior to 9.2.0735, the C omni-completion script in runtime/autoload/ccomplete.vim interpolates the...

openbabel:fuzz_convert: Stack-buffer-overflow in OpenBabel::MCDLFormat::getMCDL

Project: https://github.com/openbabel/openbabel.git Detailed Report: https://oss-fuzz.com/testcase?key=6399125835546624 Project: openbabel Fuzzing Engine: libFuzzer Fuzz Target: fuzzconvert Job Type: libfuzzerasanopenbabel Platform Id: linux Crash Type: Stack-buffer-overflow WRITE 4 Crash Address...

misfortune-cookie

CVE-2014-9222 "Misfortune Cookie" PoC suite Stack overflow in...

CVE-2026-86318

A flaw has been found in java-json-tools json-patch up to 1.13. Affected is the function JsonMergePatch.fromJson of the file JsonMergePatchDeserializer.java. Executing a manipulation can lead to stack-based buffer overflow. The attack may be performed from remote. The exploit has been published a...

CLSA-2026-1788793963 xorg-x11-server: Fix of 2 CVEs

CVE-2026-50256: fix stack buffer overflow in font alias resolution by raising XLFDMAXFONTNAMELEN to libXfont2's MAXFONTNAMELEN and bounds-checking resolved names - CVE-2026-50264: fix out-of-bounds heap write in DRI2 DRIGetBuffers/DRIGetBuffersWithFormat by deduplicating attachments and tracking...

CLSA-2026-1788793700 xorg-x11-server: Fix of 2 CVEs

CVE-2026-50256: fix stack buffer overflow in font alias resolution by raising XLFDMAXFONTNAMELEN to libXfont2's MAXFONTNAMELEN and bounds-checking resolved names - CVE-2026-50264: fix out-of-bounds heap write in DRI2 DRIGetBuffers/DRIGetBuffersWithFormat by deduplicating attachments and tracking...

CVE-2026-86318 java-json-tools json-patch JsonMergePatchDeserializer.java JsonMergePatch.fromJson stack-based overflow

A flaw has been found in java-json-tools json-patch up to 1.13. Affected is the function JsonMergePatch.fromJson of the file JsonMergePatchDeserializer.java. Executing a manipulation can lead to stack-based buffer overflow. The attack may be performed from remote. The exploit has been published a...

EUVD-2026-72464

A flaw has been found in java-json-tools json-patch up to 1.13. Affected is the function JsonMergePatch.fromJson of the file JsonMergePatchDeserializer.java. Executing a manipulation can lead to stack-based buffer overflow. The attack may be performed from remote. The exploit has been published a...

CVE-2026-86318

A stack-based buffer overflow vulnerability exists in the java-json-tools json-patch library (versions up to 1.13 ), specifically in the JsonMergePatch.fromJson function within JsonMergePatchDeserializer.java . The flaw can be exploited remotely with no authentication required and low complexity,...

CVE-2026-86318

A flaw has been found in java-json-tools json-patch up to 1.13. Affected is the function JsonMergePatch.fromJson of the file JsonMergePatchDeserializer.java. Executing a manipulation can lead to stack-based buffer overflow. The attack may be performed from remote. The exploit has been published a...

CVE-2026-86318 java-json-tools json-patch JsonMergePatchDeserializer.java JsonMergePatch.fromJson stack-based overflow

A flaw has been found in java-json-tools json-patch up to 1.13. Affected is the function JsonMergePatch.fromJson of the file JsonMergePatchDeserializer.java. Executing a manipulation can lead to stack-based buffer overflow. The attack may be performed from remote. The exploit has been published a...

CVE-2026-86318 java-json-tools json-patch JsonMergePatchDeserializer.java JsonMergePatch.fromJson stack-based overflow

A flaw has been found in java-json-tools json-patch up to 1.13. Affected is the function JsonMergePatch.fromJson of the file JsonMergePatchDeserializer.java. Executing a manipulation can lead to stack-based buffer overflow. The attack may be performed from remote. The exploit has been published a...