UBUNTU-CVE-2026-101339

A HIP resource record that fills the RDATA near or at is limit, and has another dname RDATA field a HIP Rendezvous server can overwrite the stack with up to 191 bytes of attacker controlled data. Zone files which are written out by NSD itself, such as for zones for which the NSD instance is...

PT-2026-115167

libADLMIDI 1.6.2 through 1.6.2.1 contains an off-by-one stack out-of-bounds write vulnerability in BW MidiSequencer that allows attackers to corrupt stack memory via crafted MIDI files. Attackers can supply a MIDI file with a note-on using status 0x9F and note 0x7F through adl openFile or adl...

CVE-2026-108440: Stack-based Buffer Overflow

Stack-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code over a network...

CVE-2026-73799: Stack-based Buffer Overflow

A security vulnerability in HPE NonStop SNMP Trap Multiplexer may cause memory corruption...

HPE NonStop TELSERV buffer error vulnerability

The HPE NonStop TELSERV T9553L01^BAJ and earlier versions contain a buffer error vulnerability. This vulnerability stems from a stack buffer overflow, which may lead to memory corruption and cause a denial of service...

CVE-2026-108431: Stack-based Buffer Overflow

Stack-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code over a network...

PT-2026-115137

Name of the Vulnerable Software and Affected Versions libxmp versions prior to 4.7.5 Description An off-by-one stack out-of-bounds read occurs in the prowizard P61A depacker depack p61a function. This issue allows an attacker to provide a crafted headerless P61A module containing 31 samples and a...

ghostscript security update

9.27-19 - CVE-2026-101258 ghostscript: ghostscript: -dSAFER sandbox bypass via Type 5 shading OOB write and procedure-stream use-after-free via Type 5 shading OOB write and procedure-stream use-after-free - CVE-2026-103226 ghostscript: ghostscript: stack-based buffer overflow in pdfwrite via...

Oracle Linux 10 : ghostscript (ELSA-2026-83551)

The remote Oracle Linux 10 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2026-83551 advisory. - CVE-2026-103226 ghostscript: ghostscript: stack-based buffer overflow in pdfwrite via crafted font data Tenable has extracted the preceding...

HPE NonStop SNMP Trap Multiplexer buffer error vulnerability

The HPE NonStop SNMP Trap Multiplexer T1041L01^BAA and earlier versions contain a buffer error vulnerability stemming from a stack buffer overflow, which may lead to memory corruption...

CVE-2026-109413: Uncontrolled Recursion

In Symfony YAML prior to versions 5.4.54, 6.4.45, 7.4.18, and 8.1.6, Yaml\Parser::lexInlineStructure recursed through lexInlineMapping and lexInlineSequence for every and of an inline collection, without entering the nesting level that the rest of the parser bounds with maxNestingLevel. A documen...

Oracle Linux 9 : ghostscript (ELSA-2026-83553)

The remote Oracle Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2026-83553 advisory. - RHEL-273957 CVE-2026-103226 ghostscript: ghostscript: stack-based buffer overflow in pdfwrite via crafted font data Tenable has extracted the...

PT-2026-114972

A stack overflow in the gensub ParsePsb function of AOC LC32D1320 v2.05 allows attackers to cause a Denial of Service DoS via supplying a crafted .PSB subtitle file...

CVE-2026-52167

A stack overflow in the gensubParsePsb function of AOC LC32D1320 v2.05 allows attackers to cause a Denial of Service DoS via supplying a crafted .PSB subtitle file...

ALSA-2026:83552 Important: ghostscript security update

The Ghostscript suite contains utilities for rendering PostScript and PDF documents. Ghostscript translates PostScript code to common bitmap formats so that the code can be displayed or printed. Security Fixes: ghostscript: ghostscript: -dSAFER sandbox bypass via Type 5 shading OOB write and...

UBUNTU-CVE-2026-101341

Tokens of text in RDATA of for example TXT records under 32 bytes are not checked to stay within the space reserved for the RDATA allowing for arbitrary sized out of bound stack writes, including an overwrite of a callback function pointer which is called directly after parse. Zone files which ar...

PT-2026-114898

A stack buffer overflow vulnerability in HPE NonStop SQL/MX Executor may potentially result in information disclosure or process crash...

PT-2026-114442

A stack-based buffer overflow vulnerability in HPE NonStop TELSERV can cause memory corruption that may result in DoS...

AlmaLinux 9 : libreoffice (ALSA-2026:82013)

The remote AlmaLinux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the ALSA-2026:82013 advisory. libreoffice: heap buffer overflow in PDF import stream handling CVE-2026-63274 libreoffice: stack buffer overflow in CFF to Type 1 font conversion...

Rocky Linux 9 [CIQ] Security Update: autocorr-af / autocorr-bg / autocorr-ca / autocorr-cs / autocorr-da / etc Multiple Vulnerabilities (crlsa-2026_82013)

The Rocky Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the CIQ crlsa-202682013 advisory. libreoffice: heap buffer overflow in PDF import stream handling CVE-2026-63274 libreoffice: stack buffer overflow in CFF to Type 1 font conversion...