PT-2026-112695

Stack-based buffer overflow in Windows GDI+ allows an unauthorized attacker to execute code over a network...

Microsoft Office: CVE-2026-97012: Microsoft Office Outlook Remote Code Execution Vulnerability

Stack-based buffer overflow in Microsoft Office Outlook allows an unauthorized attacker to execute code over a network...

PT-2026-112004

Stack-based buffer overflow in SysInternals allows an authorized attacker to elevate privileges locally...

PT-2026-112625

Name of the Vulnerable Software and Affected Versions Windows GDI affected versions not specified Description A stack-based buffer overflow occurs in Windows GDI, which allows an unauthorized attacker to cause a denial of service over a network. A stack-based buffer overflow is a condition where ...

PT-2026-112522

Name of the Vulnerable Software and Affected Versions Servicing Stack Updates affected versions not specified Description A buffer over-read exists in Servicing Stack Updates, which allows an authorized attacker to locally disclose sensitive information and affect the system. A buffer over-read...

Important: libreoffice security update

LibreOffice is an open source, community-developed office productivity suite. It includes key desktop applications, such as a word processor, a spreadsheet, a presentation manager, a formula editor, and a drawing program. LibreOffice replaces OpenOffice and provides a similar but enhanced and...

PT-2026-113160

Stack-based buffer overflow in Microsoft Office Word allows an authorized attacker to elevate privileges locally...

PT-2026-113466

Name of the Vulnerable Software and Affected Versions SQL Server affected versions not specified Description A stack-based buffer overflow allows an authorized attacker to elevate privileges over a network. A stack-based buffer overflow occurs when a program writes more data to a buffer located o...

Windows-CVE-2024-38063

Windows CVE-2024-38063 CVE ID: CVE-2024-38063 CVSS 3.1 Score: 9.8 Critical EPSS Score: Low - 0.088% https://www.cvedetails.com/epss/CVE-2024-38063/epss-score-history.html Impact: Remote Code Execution Affected Components: Windows TCP/IP stack Attack Vector: Network Remote Vulnerability Details...

CVE-2026-85457

IBM Planning Analytics 2.0, and 2.1 could allow a remote authenticated attacker to execute arbitrary code due to a stack-based buffer overflow...

CVE-2026-85457

IBM Planning Analytics versions 2.0 and 2.1 are affected by a stack-based buffer overflow (CWE-121). This vulnerability could allow a remote authenticated attacker to perform arbitrary code execution . No specific exploit details or remediation instructions are provided in the documents.

CVE-2026-85457 IBM Planning Analytics Local is affected by security vulnerabilities

IBM Planning Analytics 2.0, and 2.1 could allow a remote authenticated attacker to execute arbitrary code due to a stack-based buffer overflow...

CVE-2026-53922 odhcpd: pre-auth remote DoS via size_t underflow in dhcpv6_ia_handle_IAs (stack BOF, canary-terminated)

odhcpd is the DHCPv6, DHCPv4, and router-advertisement server used by OpenWrt. In commit cfddd56 and earlier, an unauthenticated host on the same link can first obtain two bindings through normal DHCPv6 SOLICIT and REQUEST exchanges and then send a crafted RENEW containing multiple IANA options. ...

CVE-2026-53922

The odhcpd DHCPv6, DHCPv4, and router-advertisement server used by OpenWrt is vulnerable to a pre-auth remote Denial of Service (DoS) . In versions prior to commit cfddd56 , an unauthenticated host on the same link can trigger a size_t underflow within the dhcpv6_ia_handle_IAs function. By sendin...

CVE-2026-53922 odhcpd: pre-auth remote DoS via size_t underflow in dhcpv6_ia_handle_IAs (stack BOF, canary-terminated)

odhcpd is the DHCPv6, DHCPv4, and router-advertisement server used by OpenWrt. In commit cfddd56 and earlier, an unauthenticated host on the same link can first obtain two bindings through normal DHCPv6 SOLICIT and REQUEST exchanges and then send a crafted RENEW containing multiple IANA options. ...

CVE-2026-53922 odhcpd: pre-auth remote DoS via size_t underflow in dhcpv6_ia_handle_IAs (stack BOF, canary-terminated)

odhcpd is the DHCPv6, DHCPv4, and router-advertisement server used by OpenWrt. In commit cfddd56 and earlier, an unauthenticated host on the same link can first obtain two bindings through normal DHCPv6 SOLICIT and REQUEST exchanges and then send a crafted RENEW containing multiple IANA options. ...

EUVD-2026-97866

IBM Power Systems Firmware FW1060.00 through FW1060.81 is affected by a vulnerability in host firmware configuration parsing. An attacker with authenticated service-level access to the FSP can write specially crafted configuration data to cause memory corruption in the host firmware boot stage...

RHLW-2026-F1A22CABC5A36F13 Lightwell Security Advisory: xstream 1.4.20.rhlw-00001

Red Hat Lightwell has released com.thoughtworks.xstream:xstream 1.4.20.rhlw-00001 with a backported security fix. CVE-2024-47072: XStream is vulnerable to a Denial of Service attack due to stack overflow from a manipulated binary input stream This patched artifact is a drop-in replacement for...

RHLW-2026-C7695B3B26607B57 Lightwell Security Advisory: snakeyaml 1.30.0.rhlw-00013

Red Hat Lightwell has released org.yaml:snakeyaml 1.30.0.rhlw-00013 with backported fixes for CVE-2022-38750, CVE-2022-38751, CVE-2022-38752, and CVE-2022-41854. CVE-2022-38750: DoS in SnakeYAML CVE-2022-38751: DoS in SnakeYAML CVE-2022-38752: DoS in SnakeYAML CVE-2022-41854: Stack Overflow in...

RHLW-2026-5EB0CB8050278DB4 Lightwell Security Advisory: protobuf-kotlin-lite 3.21.7.rhlw-00002

Red Hat Lightwell has released com.google.protobuf:protobuf-kotlin-lite 3.21.7.rhlw-00002 with a backported security fix. CVE-2024-7254: Stack overflow in Protocol Buffers Java Lite This patched artifact is a drop-in replacement for com.google.protobuf:protobuf-kotlin-lite 3.21.7 from Maven Centr...