PT-2026-114046

Mini-XML 4.0.0 through 4.0.6 contains an off-by-one stack out-of-bounds write in mxml strtod when the locale decimal point is not '.'. Attackers can supply XML with a 63-digit REAL value followed by '.' to write a NUL byte past the 64-byte stack buffer, corrupting stack memory or crashing the...

CVE-2026-110604: Off-by-one Error

Mini-XML 4.0.0 through 4.0.6 contains an off-by-one stack out-of-bounds write in mxmlstrtod when the locale decimal point is not '.'. Attackers can supply XML with a 63-digit REAL value followed by '.' to write a NUL byte past the 64-byte stack buffer, corrupting stack memory or crashing the...

CVE-2026-33796: Stack-based Buffer Overflow

A Stack-based Buffer Overflow vulnerability in the routing protocol daemon rpd of Juniper Networks Junos OS and Junos OS Evolved allows a configured external BGP neighbor to execute arbitrary commands with root privileges via BMP route monitoring...

PT-2026-114048

Name of the Vulnerable Software and Affected Versions LibreCAD versions prior to 2.2.1.5 libdxfrw versions prior to LC2.2.0 Description A stack-based out-of-bounds read occurs in the dwgReader18::readFileHeader function when strlen is called on buffers that are not NUL-terminated. An attacker can...

PT-2026-113787

Name of the Vulnerable Software and Affected Versions NSD affected versions not specified Description Tokens of text in RDATA, such as those found in TXT records, that are under 32 bytes are not verified to remain within the reserved space. This leads to arbitrary sized out-of-bound stack writes,...

Curl -- Multiple vulnerabilities

The Curl project reports: local interface connection reuse mixup CVE-2026-107929 info leak uploading over WebSockets with GnuTLS CVE-2026-107928 password leak in CURLINFOEFFECTIVEURL CVE-2026-94266 Authorization: Negotiate sent to foreign origin CVE-2026-94265 server-set cookie aborts cookie jar...

CVE-2026-96956

Stack-based buffer overflow in SQL Server allows an authorized attacker to elevate privileges over a network...

CVE-2026-88083

Stack-based buffer overflow in SQL Server allows an unauthorized attacker to execute code over a network...

CVE-2026-83965

Substance3D - Sampler is affected by a Stack-based Buffer Overflow vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file...

CVE-2026-103827

Substance3D - Designer is affected by a Stack-based Buffer Overflow vulnerability that could result in an application denial-of-service. An attacker could exploit this vulnerability to crash the application, leading to a denial-of-service condition. Exploitation of this issue requires user...

CVE-2026-103823

Substance3D - Designer is affected by a Stack-based Buffer Overflow vulnerability that could result in an application denial-of-service. An attacker could exploit this vulnerability to crash the application, leading to a denial-of-service condition. Exploitation of this issue requires user...

RHLW-2026-DBE0B911151FB6DD Lightwell Security Advisory: protobuf-javalite 3.21.7.rhlw-00002

Red Hat Lightwell has released com.google.protobuf:protobuf-javalite 3.21.7.rhlw-00002 with a backported security fix. CVE-2024-7254: Stack overflow in Protocol Buffers Java Lite This patched artifact is a drop-in replacement for com.google.protobuf:protobuf-javalite 3.21.7 from Maven Central...

EUVD-2026-100610

Stack-based buffer overflow in SQL Server allows an unauthorized attacker to execute code over a network...

EUVD-2026-100707

Stack-based buffer overflow in SQL Server allows an authorized attacker to elevate privileges over a network...

CVE-2026-96956

A stack-based buffer overflow in Microsoft SQL Server allows an authorized attacker to elevate privileges over a network. While the provided documents do not specify the exact component or file involved, the vulnerability could lead to arbitrary code execution, denial-of-service, or unauthorized ...

EUVD-2026-100704

Substance3D - Designer is affected by a Stack-based Buffer Overflow vulnerability that could result in an application denial-of-service. An attacker could exploit this vulnerability to crash the application, leading to a denial-of-service condition. Exploitation of this issue requires user...

CVE-2026-103823

The software Substance3D - Designer is impacted by a Stack-based Buffer Overflow (CWE-121). This vulnerability can be exploited by an attacker to cause an application denial-of-service (DoS) , resulting in a crash. Successful exploitation requires user interaction , specifically when a victim ope...

CVE-2026-103823 Substance3D - Designer | Stack-based Buffer Overflow (CWE-121)

Substance3D - Designer is affected by a Stack-based Buffer Overflow vulnerability that could result in an application denial-of-service. An attacker could exploit this vulnerability to crash the application, leading to a denial-of-service condition. Exploitation of this issue requires user...

CVE-2026-103823 Substance3D - Designer | Stack-based Buffer Overflow (CWE-121)

Substance3D - Designer is affected by a Stack-based Buffer Overflow vulnerability that could result in an application denial-of-service. An attacker could exploit this vulnerability to crash the application, leading to a denial-of-service condition. Exploitation of this issue requires user...

CVE-2026-103827 Substance3D - Designer | Stack-based Buffer Overflow (CWE-121)

Substance3D - Designer is affected by a Stack-based Buffer Overflow vulnerability that could result in an application denial-of-service. An attacker could exploit this vulnerability to crash the application, leading to a denial-of-service condition. Exploitation of this issue requires user...