Security update for aws-nitro-enclaves-cli

This update for aws-nitro-enclaves-cli fixes the following issues: CVE-2026-25541: bytes: integer overflow in 'BytesMut:reserve' can lead to undefined behavior and crashes bsc1274300. CVE-2026-25727: time: parsing of user-provided input by the RFC 2822 date parser can lead to stack exhaustion...

SUSE-SU-2026:3992-1 Security update for aws-nitro-enclaves-cli

This update for aws-nitro-enclaves-cli fixes the following issues: - CVE-2026-25541: bytes: integer overflow in 'BytesMut:reserve' can lead to undefined behavior and crashes bsc1274300. - CVE-2026-25727: time: parsing of user-provided input by the RFC 2822 date parser can lead to stack exhaustion...

WAD (Web Access Daemon) Code Execution

The vulnerability of WAD Web Access Daemon in FortiOS operating systems is related to buffer overflow in the stack. Exploiting this vulnerability allows a malicious actor to execute arbitrary code using specially created sockets...

PT-2026-86832

A flaw has been found in java-json-tools json-patch up to 1.13. Affected is the function JsonMergePatch.fromJson of the file JsonMergePatchDeserializer.java. Executing a manipulation can lead to stack-based buffer overflow. The attack may be performed from remote. The exploit has been published a...

CVE-2026-86318: Stack-based Buffer Overflow

A flaw has been found in java-json-tools json-patch up to 1.13. Affected is the function JsonMergePatch.fromJson of the file JsonMergePatchDeserializer.java. Executing a manipulation can lead to stack-based buffer overflow. The attack may be performed from remote. The exploit has been published a...

CVE-2026-81738: Stack-based Buffer Overflow

OpenVPN 2.5.0 through 2.7.6 on Windows using the tap-windows6 driver allows attackers to trigger an out-of-bounds write via crafted DOMAIN-SEARCH entries...

CVE-2026-85498

Regression in CVE-2026-4897 fix polkit readcookie - stack buffer underflow...

LOYTEC L-IP BACnet/IP Routers Stack-based Buffer Overflow (CVE-2026-55728)

The 'cmdipaddrconflict' subcommand of the SUID-root '/usr/bin/ltsudo' utility on a LOYTEC L-IP BACnet/IP router copies a user-supplied network interface name into a fixed 20-byte stack buffer using 'strcpy' without bounds checking. A 'superadmin'-group attacker can supply an overly long interface...

ROS-20260907-73-0048

The vulnerability in Erlang is related to buffer overflow in the stack. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...

ROS-20260907-73-0006

The vulnerability in libssh is related to buffer overflow in the stack. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...

PT-2026-86965

A flaw has been found in D-Link DIR-895L A1 102b07. This impacts the function sendOffer/sendACK of the file udhcpcd/serverpacket.c of the component udhcpcd. This manipulation causes stack-based buffer overflow. The attack can only be done within the local network. The exploit has been published a...

UBUNTU-CVE-2026-85498

Regression in CVE-2026-4897 fix polkit readcookie - stack buffer underflow...

CVE-2026-86296: Stack-based Buffer Overflow

A vulnerability was determined in D-Link DIR-822A A101. This vulnerability affects the function strcpy of the file udhcpcd/serverpacket.c of the component udhcpcd. This manipulation causes stack-based buffer overflow. The attack is possible to be carried out remotely. The exploit has been publicl...

CVE-2026-20509: Stack-based Buffer Overflow

In Power HAL, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege if a malicious actor has already obtained the System privilege. User interaction is not needed for exploitation. Patch ID: ALPS11165543; Issue ID: MSV-9011...

Malicious code in easy-boolean-mock-proxy-stack (npm)

The package easy-boolean-mock-proxy-stack was found to contain malicious code. --- Credit: OpenSSF source...

Malicious code in doc-plugin-rush-stack (npm)

Source: ossf-package-analysis a12c396a6086d8e62fcd6527bd6c4056f50c8def8a668f50a021b0c73a3291be The OpenSSF Package Analysis project identified 'doc-plugin-rush-stack' @ 99.0.9 npm as malicious. It is considered malicious because: - The package communicates with a domain associated with malicious...

SUSE-SU-2026:23495-1 Security update for rpcbind

This update for rpcbind fixes the following issue: - CVE-2026-16461: stack buffer overflow in rpcinfo rpcbdump short-mode version-list formatting bsc1272340...

SUSE-SU-2026:23628-1 Security update for rpcbind

This update for rpcbind fixes the following issue: - CVE-2026-16461: stack buffer overflow in rpcinfo rpcbdump short-mode version-list formatting bsc1272340...

OPENSUSE-SU-2026:21765-1 Security update for rpcbind

This update for rpcbind fixes the following issue: - CVE-2026-16461: stack buffer overflow in rpcinfo rpcbdump short-mode version-list formatting bsc1272340...

libxml2: libxml2: Arbitrary code execution via stack-based buffer overflow in xmlSnprintfElements

A flaw was found in libxml2. A local attacker could exploit a stack-based buffer overflow in the xmlSnprintfElements function to achieve arbitrary code execution. This vulnerability in a fundamental system library could lead to significant system compromise if successfully exploited...