SUSE CVE-2026-109264

ImageMagick before 6.9.13-57 and 7.x before 7.1.2-32 contains uncontrolled recursion in the MVG decoder that can exhaust the program stack. An attacker who controls a file name processed by ImageMagick can trigger a stack overflow that crashes the process, causing a denial of service...

SUSE CVE-2026-109267

ImageMagick before 6.9.13-57 and 7.x before 7.1.2-32 contains a stack overflow in the MSL decoder caused by an incorrect depth check that fails to limit recursion. Attackers can supply a set of crafted MSL images that exhaust the stack when one of them is read, crashing the process and causing a...

hplip: potential memory buffer overflow

A flaw was found in HPLIP. A heap-based overflow in the mdnsreadName function and a stack-based overflow in the mdnsupdateuris function can be triggered when processing specially crafted mDNS responses. This vulnerability allows an attacker on the local network to crash the application, resulting...

HPE NonStop SNMP Trap Multiplexer buffer error vulnerability

The HPE NonStop SNMP Trap Multiplexer T1041L01^BAA and earlier versions contain a buffer error vulnerability stemming from a stack buffer overflow, which may lead to remote code execution...

HPE NonStop TMF Auditread2 buffer error vulnerability

The HPE NonStop TMF Auditread2 T2781L02^ANZ and earlier versions contain a buffer error vulnerability caused by a stack buffer overflow, which may lead to a denial of service...

CVE-2026-97333

QAPI contained a stack-based buffer overflow affecting service availability. Software customers upgrade to resolved maintenance release. Update CommServe, Web Server, Command Center and Index Server...

EUVD-2026-98763

QAPI contained a stack-based buffer overflow affecting service availability. Software customers upgrade to resolved maintenance release. Update CommServe, Web Server, Command Center and Index Server...

CVE-2026-97333 QAPI stack-based buffer overflow

QAPI contained a stack-based buffer overflow affecting service availability. Software customers upgrade to resolved maintenance release. Update CommServe, Web Server, Command Center and Index Server...

CVE-2026-97333 QAPI stack-based buffer overflow

QAPI contained a stack-based buffer overflow affecting service availability. Software customers upgrade to resolved maintenance release. Update CommServe, Web Server, Command Center and Index Server...

DEBIAN-CVE-2026-109940

FreeRDP 3.0.0-beta1 before 3.32.0 on Unix builds with PKCS11 support has a stack-based buffer overflow in wprintKeyName in WinPR's NCrypt PKCS11 provider. It hex-encodes a key's CKAID, which can be up to 64 bytes, into a fixed 128-byte stack buffer. An attacker supplying a malicious PKCS11 token ...

CVE-2026-109940

FreeRDP 3.0.0-beta1 before 3.32.0 on Unix builds with PKCS11 support has a stack-based buffer overflow in wprintKeyName in WinPR's NCrypt PKCS11 provider. It hex-encodes a key's CKAID, which can be up to 64 bytes, into a fixed 128-byte stack buffer. An attacker supplying a malicious PKCS11 token ...

UBUNTU-CVE-2026-109940

FreeRDP 3.0.0-beta1 before 3.32.0 on Unix builds with PKCS11 support has a stack-based buffer overflow in wprintKeyName in WinPR's NCrypt PKCS11 provider. It hex-encodes a key's CKAID, which can be up to 64 bytes, into a fixed 128-byte stack buffer. An attacker supplying a malicious PKCS11 token ...

CVE-2026-109940

FreeRDP 3.0.0-beta1 before 3.32.0 on Unix builds with PKCS11 support has a stack-based buffer overflow in wprintKeyName in WinPR's NCrypt PKCS11 provider. It hex-encodes a key's CKAID, which can be up to 64 bytes, into a fixed 128-byte stack buffer. An attacker supplying a malicious PKCS11 token ...

Microsoft Office Outlook Remote Code Execution Vulnerability

Stack-based buffer overflow in Microsoft Office Outlook allows an unauthorized attacker to execute code over a network...

Windows Installer Elevation of Privilege Vulnerability

Stack-based buffer overflow in Windows Installer allows an authorized attacker to elevate privileges locally...

Windows Update Stack Spoofing Vulnerability

Improper verification of cryptographic signature in Windows Update Stack allows an authorized attacker to perform spoofing locally...

SQL Server Elevation of Privilege Vulnerability

Stack-based buffer overflow in SQL Server allows an authorized attacker to elevate privileges over a network...

SysInternals Elevation of Privilege Vulnerability

Stack-based buffer overflow in SysInternals allows an authorized attacker to elevate privileges locally...

KB5127356: Servicing stack update for Windows Server 2012 R2: October 13, 2026

KB5127356: Servicing stack update for Windows Server 2012 R2: October 13, 2026 Applies To Windows Server 2012 R2 ESU Summary This update makes quality improvements to the servicing stack, which is the component that installs Windows updates. Servicing stack updates SSU makes sure that you have a...

KB5126649: Servicing stack update for Windows 10, version 1607 and Windows Server 2016: October 13, 2026

KB5126649: Servicing stack update for Windows 10, version 1607 and Windows Server 2016: October 13, 2026 Applies To Win 10 Ent LTSB 2016 Win 10 IoT Ent LTSB 2016 Windows Server 2016, all editions Important Free support for Windows 10 Enterprise LTSB 2016 and Windows 10 IoT Enterprise 2016 LTSB en...