CVE-2026-8618 | | | 2026-10-01 | A stack-based buffer overflow vulnerability exists in the TDDPv2 service (/usr/bin/tddp) on Deco M9 Plus due to insufficient validation of decrypted request da… |
CVE-2026-63292 | High | 7.5 | 2026-10-01 | Stack-based buffer overflow in mod_vhost_alias in Apache Software Foundation Apache HTTP Server through 2.4.68 on all platforms allows a remote client to cause… |
CVE-2026-12627 | Critical | 9.8 | 2026-10-01 | Fortra's Core Privileged Access Manager (BoKS) contains a stack-based buffer overflow vulnerability in boks_autoregisterd. A remote attacker with network acces… |
CVE-2026-103531 | Medium | 5.5 | 2026-10-01 | A flaw has been found in OpenSC up to 0.27.1. The impacted element is the function setcos_construct_fci_44 of the file src/libopensc/card-setcos.c. Executing a… |
CVE-2026-47593 | High | 7.8 | 2026-09-30 | NVIDIA GPU Display Driver for Windows contains a vulnerability in the kernel mode layer where an unprivileged user can cause an out-of-bounds write. A successf… |
CVE-2026-47506 | Medium | 5.5 | 2026-09-30 | NVIDIA GPU Display Driver for Windows contains a vulnerability in the kernel-mode color transform path where excessive kernel stack use occurs when evaluating… |
CVE-2026-103432 | High | 8.1 | 2026-09-30 | apcupsd through 3.14.14 has an sscanf stack-based buffer overflow in getupsvar() in src/cgi/upsfetch.c (used by upsstats.cgi, multimon.cgi, and upsfstats.cgi)… |
CVE-2026-103226 | Medium | 6.3 | 2026-09-30 | A vulnerability was identified in Artifex Ghostscript up to 10.09.0. Affected is the function type1_callsubr of the file devices/vector/gdevpsfx.c of the compo… |
CVE-2026-92870 | High | 7.5 | 2026-09-30 | A stack-based buffer overflow vulnerability exists in Pgpool-II, which may allow an unauthenticated attacker to cause abnormal process termination. |
CVE-2026-81433 | | | 2026-09-30 | A stack-based buffer overflow vulnerability in WatchGuard Fireware OS's DHCP fingerprinting daemon (fingerd) allows an unauthenticated attacker with adjacent n… |
CVE-2026-18145 | | | 2026-09-30 | A stack-based buffer overflow vulnerability in the spamBlocker (spamd) service of WatchGuard Fireware OS allows an authenticated attacker with administrator pr… |
CVE-2026-94952 | Critical | 9.8 | 2026-09-29 | A stack-based buffer overflow vulnerability exists in the web management interface of TOTOLINK N150RT (NTR150) firmware V3.4.0-B20201030. It is reachable throu… |
CVE-2026-94953 | High | 8.8 | 2026-09-29 | A stack-based buffer overflow vulnerability exists in the web management interface of TOTOLINK N150RT (NTR150) firmware V3.4.0-B20201030. It is reachable throu… |
CVE-2026-102302 | High | 8.8 | 2026-09-29 | Buffer overflow in V8 in Google Chrome prior to 154.0.8037.92 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. (… |
CVE-2026-94954 | High | 8.8 | 2026-09-29 | A stack-based buffer overflow vulnerability exists in the web management interface of TOTOLINK N150RT (NTR150) firmware V3.4.0-B20201030. It is reachable throu… |
CVE-2026-7192 | | | 2026-09-29 | A stack-based buffer overflow vulnerability in the Dbit T-CPE301K 4G WiFi minirouter allows an authenticated attacker to cause a denial of service (DoS) and a… |
CVE-2026-96415 | Medium | 5.5 | 2026-09-29 | Catapult DCT2000 protocol dissector crash in 4.6.0 to 4.6.8 and 4.4.0 to 4.4.18 allows denial of service |
CVE-2026-101354 | Critical | 9.6 | 2026-09-29 | A security flaw has been discovered in FAST FAC1203R 20200116_2.0.4. The affected element is the function _tWlanTask of the component MmtAtePrase Parser. Perfo… |
CVE-2026-101081 | Critical | 9.1 | 2026-09-28 | A security flaw has been discovered in D-Link DI-8400 16.07. This vulnerability affects the function menu_nat_more_asp of the file menu_nat_more.asp of the com… |
CVE-2026-101074 | Critical | 9.8 | 2026-09-28 | A weakness has been identified in Netcore NR289-GE 1.4.5102. The affected element is the function password-check of the file /bin/boa of the component Authenti… |
CVE-2026-101039 | Critical | 10.0 | 2026-09-28 | A vulnerability was identified in FAST FAC1900R 20190827_2.0.2. Affected by this issue is the function copy_msg_element of the component devdiscover Service. S… |
CVE-2026-101038 | Critical | 9.9 | 2026-09-28 | A vulnerability was determined in FAST FAC1200R 5.0_20201119_1.0.2. Affected by this vulnerability is the function MmtAtePrase of the component MmtAtePrase Par… |
CVE-2026-101037 | Critical | 9.9 | 2026-09-28 | A vulnerability was found in FAST FAC1200R 5.0_20201119_1.0.2. Affected is the function parse_advertisement_frame of the component devdiscover Service. The man… |
CVE-2026-95104 | High | 7.5 | 2026-09-28 | Stack-based buffer overflow vulnerability exists in BUFFALO Wi-Fi products. A non-authenticated crafted HTTP request may cause a denial-of-service (DoS) condit… |
CVE-2026-101003 | Medium | 5.3 | 2026-09-28 | A weakness has been identified in Cesanta Mongoose up to 7.21. Affected by this vulnerability is the function fn of the file tutorials/mqtt/mqtt-server/main.c… |
CVE-2026-100908 | High | 7.5 | 2026-09-28 | A vulnerability has been found in Eyeplus 57.0.0.0308. This affects an unknown function of the component p2pcam HTTP Parser. Such manipulation leads to stack-b… |
CVE-2026-100745 | Medium | 6.3 | 2026-09-27 | A vulnerability has been found in Edimax BR-6428nC 1.16. The impacted element is an unknown function of the file /goform/formWizSurvey of the component Wireles… |
CVE-2026-88388 | High | 7.5 | 2026-09-24 | Espruino 2v29 (commit bffc6d0) contains a stack-based buffer overflow vulnerability in the JavaScript error stack-trace handling path on 64-bit builds. A remot… |
CVE-2026-58008 | High | 8.1 | 2026-09-24 | Stack-based buffer overflow vulnerability in Altera Trusted Firmware on HPS allows Exploitation of Improperly Configured or Implemented Memory Protections.
Th… |
CVE-2026-13465 | High | 8.1 | 2026-09-24 | Stack-based buffer overflow vulnerability in Altera Trusted Firmware on HPS allows Exploitation of Improperly Configured or Implemented Memory Protections.
Th… |
CVE-2026-96676 | Medium | 6.3 | 2026-09-23 | A vulnerability was identified in Fast FAC1900R 20190827_2.0.2. The impacted element is the function get_alias_name of the component uhttpd. Such manipulation… |
CVE-2026-96257 | Critical | 10.0 | 2026-09-23 | A flaw has been found in Fast FAC1203R Gigabit Edition 2.0.4. Affected by this issue is the function copy_msg_element of the component Device Discovery Service… |
CVE-2026-83962 | High | 7.8 | 2026-09-22 | Substance3D - Modeler is affected by a Stack-based Buffer Overflow vulnerability that could result in arbitrary code execution in the context of the current us… |
CVE-2026-75676 | High | 7.8 | 2026-09-22 | Bridge is affected by a Stack-based Buffer Overflow vulnerability that could result in arbitrary code execution in the context of the current user. Exploitatio… |
CVE-2026-86054 | High | 7.8 | 2026-09-22 | Notepad++ is a free and open-source source code editor. Prior to 8.9.8, Notepad++ contains a stack buffer overflow in NppParameters::writeSession in PowerEdito… |
CVE-2026-85279 | High | 8.6 | 2026-09-22 | Notepad++ is a free and open-source source code editor. Prior to 8.9.8, Notepad++ contains a stack buffer overflow in PluginsManager::loadPluginFromPath in Pow… |
CVE-2026-7866 | | | 2026-09-22 | Stack-based Buffer Overflow vulnerability in RTI Connext Professional (Core Libraries) allows Overflow Buffers. This issue affects Connext Professional: from 7… |
CVE-2026-95818 | Low | 3.6 | 2026-09-22 | A stack-based buffer overflow in the dynamic loader (ld.so) of the GNU C Library (glibc) versions 2.14 through 2.44 allows a local attacker to crash or corrupt… |
CVE-2026-80147 | Critical | 9.9 | 2026-09-22 | Lantronix SLC8000/SLC9000 before firmware v9.7.0.2, EMG8500/EMG7500 before firmware v9.7.0.1, and all firmware versions of SLB882/SLCx-03/SLCx-02 contain a sta… |
CVE-2026-80146 | Critical | 9.9 | 2026-09-22 | Lantronix SLC8000/SLC9000 before firmware v9.7.0.2, EMG8500/EMG7500 before firmware v9.7.0.1, and all firmware versions of SLB882/SLCx-03/SLCx-02 contain a sta… |
CVE-2026-93433 | Medium | 5.5 | 2026-09-21 | A flaw was found in libstoragemgmt. An attacker with control over a local or virtual storage device could provide specially crafted SCSI (Small Computer System… |
CVE-2026-88408 | Medium | 6.5 | 2026-09-21 | FalkorDB (Redis module) v4.20.1 to v4.20.4 was discovered to contain a stack overflow in the _GetGroup() function (/ops/op_aggregate.c). This vulnerability all… |
CVE-2026-88406 | High | 7.5 | 2026-09-21 | FalkorDB (Redis module) v4.20.1 to v4.20.4 was discovered to contain a stack overflow in the _ValidateUnion_Clauses function (/ast/ast_validations.c). This vul… |
CVE-2026-61674 | | | 2026-09-21 | Fluent Bit is a fast and lightweight logs, metrics, and traces processor for Linux, BSD, macOS, and Windows. From 0.11.0 until 5.0.8, plugins/out_forward/forwa… |
CVE-2026-94184 | Medium | 5.3 | 2026-09-21 | A stack-based buffer overflow flaw was found in fetchmail when built with NTLM support. A malicious or compromised mail server advertising NTLM authentication… |
CVE-2026-94089 | Critical | 10.0 | 2026-09-20 | A vulnerability was determined in D-Link DIR-868L 2.01b05. This issue affects the function strcpy of the file /webfa_authentication.cgi of the component Authen… |
CVE-2026-94003 | Critical | 10.0 | 2026-09-20 | A vulnerability has been found in Comfast CF-N1-S 2.6.0.1. Impacted is the function get_css_path_from_uri of the file /cgi-bin/mbox-config of the component Web… |
CVE-2026-61548 | High | 8.1 | 2026-09-18 | Rsyslog is a rocket-fast system for log processing. From 7.5.4 until 8.2606.0, the optional mmpstrucdata plugin's parseSD_PARAM function in plugins/mmpstrucdat… |
CVE-2026-81946 | Medium | 4.4 | 2026-09-18 | PLANET IGS-5225-8P2T4S industrial managed switch V1 and V2 firmware versions before 1.2412b260707 and 2.2412b260519 use MD5-based password hashing, a cryptogra… |
CVE-2026-81945 | Medium | 6.6 | 2026-09-18 | PLANET IGS-5225-8P2T4S industrial managed switch V1 and V2 firmware versions before 1.2412b260707 and 2.2412b260519 contain a stack-based buffer overflow in th… |
CVE-2026-81944 | High | 7.5 | 2026-09-18 | PLANET IGS-5225-8P2T4S industrial managed switch V1 and V2 firmware versions before 1.2412b260707 and 2.2412b260519 contain a stack-based buffer overflow in th… |
CVE-2026-59181 | Medium | 6.1 | 2026-09-18 | OpenImageIO is a toolset for reading, writing, and manipulating image files of any image file format relevant to VFX / animation. Prior to 3.0.20.0, 3.1.15.0… |
CVE-2026-93372 | Critical | 9.6 | 2026-09-17 | Buffer overflow in WebGL in Google Chrome on on Android prior to 153.0.8010.52 allowed a remote attacker to execute arbitrary code outside the sandbox via a cr… |
CVE-2026-19477 | High | 7.8 | 2026-09-17 | There
is stack-based buffer overflow vulnerability recently discovered in MCC Universal Library for Linux (uldaq). This may result in information disclosure o… |
CVE-2026-90823 | Critical | 9.8 | 2026-09-17 | FatPipe MPVPN, WARP, and IPVPN appliances running the end-of-life firmware version 10.1.2r60p100 contain a stack-based buffer overflow in /usr/sbin/auth_user_p… |
CVE-2026-81480 | High | 7.2 | 2026-09-17 | Dell OpenManage Server Administrator, versions prior to 11.1.0.3, contains a Stack-based Buffer Overflow vulnerability. A high privileged attacker with remote… |
CVE-2026-25283 | High | 8.8 | 2026-09-17 | Memory Corruption when copying unverified data from an external source exceeds the allocated buffer size. |
CVE-2026-81546 | High | 7.7 | 2026-09-17 | The Affinity by Canva application before 3.3.0 (September 2026 release) did not perform adequate bounds checking when parsing Affinity document files leading t… |
CVE-2026-86358 | Medium | 6.5 | 2026-09-16 | Dell Update Package Framework, versions prior to 26.07.03, contains a Stack-based Buffer Overflow vulnerability. An unauthenticated attacker with adjacent netw… |
CVE-2026-91843 | Critical | 9.8 | 2026-09-16 | A stack overflow during the unauthenticated login process may allow an attacker to run arbitrary code remotely with root privileges. |
CVE-2026-76869 | High | 7.2 | 2026-09-15 | Netcore NR255-V version 1.5.130703 contains a stack-based buffer overflow in reboot_timer_set.cgi caused by improper sscanf token parsing. Attackers can exploi… |
CVE-2026-76861 | High | 8.8 | 2026-09-15 | Netcore NR255-V version 1.5.130703 contains a stack-based buffer overflow in ntools_tcpdump_start_set.cgi caused by an unsized sprintf call when processing for… |
CVE-2026-76860 | High | 8.8 | 2026-09-15 | Netcore NR255-V version 1.5.130703 contains a stack-based buffer overflow in wake_up_set.cgi caused by unbounded tokenization of MAC and ID input. Attackers ca… |
CVE-2026-76689 | High | 7.2 | 2026-09-15 | A vulnerability exists in the configuration processing logic of the affected component where malformed input is improperly processed. An authenticated remote a… |
CVE-2026-76676 | High | 8.8 | 2026-09-15 | Buffer overflow vulnerabilities exist in the underlying operating system of EdgeConnect SD-WAN Gateways that could allow an unauthenticated adjacent attacker t… |
CVE-2026-19774 | High | 7.1 | 2026-09-15 | BlueZ A2DP Stack-based Buffer Overflow Remote Code Execution Vulnerability. This vulnerability allows network-adjacent attackers to execute arbitrary code on a… |
CVE-2026-12150 | High | 7.0 | 2026-09-15 | IBM MQ 9.1.0.0 through 9.1.0.37 LTS, 9.2.0.0 through 9.2.0.43 LTS, 9.3.0.0 through 9.3.0.41 LTS, 9.3.0.0 through 9.3.5.1 CD, 9.4.0.0 through 9.4.0.25 LTS, 9.4… |
CVE-2026-91826 | Medium | 4.4 | 2026-09-15 | Stack-based buffer overflow vulnerability in Samsung Opensource rLottie allows attackers to overflow buffers, leading to memory corruption when rendering craft… |
CVE-2026-91090 | Low | 3.9 | 2026-09-15 | A vulnerability was determined in GPAC up to f1219cde. The affected element is the function gf_node_activate_ex of the file scenegraph/base_scenegraph.c. This… |
CVE-2026-91003 | Critical | 9.1 | 2026-09-15 | A flaw has been found in D-Link DI-8300 16.07. The affected element is the function rzgl_asp of the file /rzgl.asp of the component CGI Service. This manipulat… |
CVE-2026-91001 | Critical | 9.9 | 2026-09-15 | A security flaw has been discovered in D-Link DI-8400 16.07. This affects the function ddns_asp of the file /ddns.asp of the component DDNS Configuration. Perf… |
CVE-2026-90824 | Low | 3.3 | 2026-09-14 | A vulnerability has been found in GPAC 26.07.0. Affected is the function gf_sg_dom_event_bubble of the file src/scenegraph/dom_events.c of the component MP4Box… |
CVE-2026-54559 | | | 2026-09-14 | PocketSphinx is a small speech recognizer. Prior to 5.1.1, the trie language-model loaders in src/lm/ngram_model_trie.c do not adequately validate boundary con… |
CVE-2026-89020 | Medium | 4.3 | 2026-09-14 | MikroTik RouterOS before 7.23.4 (long-term) and 7.24.2 (stable) contains a stack-based buffer overflow vulnerability in the mtget binary's TFTP RRQ builder fun… |
CVE-2026-19542 | Medium | 5.6 | 2026-09-14 | Calling tdelete on a sufficiently deep tree in the GNU C Library version 2.1 to 2.44 may write one pointer past the end of an alloca-allocated array on the sta… |
CVE-2026-90693 | Critical | 9.9 | 2026-09-14 | A flaw has been found in D-Link DIR-878 120B05. This impacts the function SetWan3Settings of the component WAN Settings. This manipulation of the argument Prim… |
CVE-2026-90692 | Critical | 9.9 | 2026-09-14 | A vulnerability was detected in D-Link DIR-878 120B05. This affects the function SetDynamicDNSIPv6Settings of the component Dynamic DNS IPv6 Settings. The mani… |
CVE-2026-90689 | High | 8.8 | 2026-09-14 | A security flaw has been discovered in Tenda W20E 15.11.0.61068_1546_841_CN_TDC. Impacted is the function formDelWebAuthWhiteUser. Performing a manipulation of… |
CVE-2026-90688 | Medium | 6.5 | 2026-09-14 | A vulnerability was identified in Tenda W20E 15.11.0.61068_1546_841_CN_TDC. This issue affects the function formIPMacBindAdd of the component HTTP Handler. Suc… |
CVE-2026-82785 | Medium | 4.3 | 2026-09-14 | Stack-based buffer overflow vulnerability exists in Remote I/O Coupler Unit (Server Type) CPSN-MCB271-*. Receiving a specially crafted request created and sent… |
CVE-2023-46273 | High | 8.8 | 2026-09-14 | Bonjour Gateway in Extreme Networks IQ Engine before 10.6r1a, and through 10.6r4 before 10.6r5, has an ah_bgd buffer overflow via ah_event_send. |
CVE-2026-90680 | Critical | 9.9 | 2026-09-14 | A security flaw has been discovered in D-Link DIR-823G 1.0.2B05_20181207. The impacted element is the function strcpy of the file /HNAP1/SetStaticRouteSettings… |
CVE-2026-33963 | High | 7.5 | 2026-09-14 | An issue was discovered in camera in Samsung Mobile Processor Exynos 1330, 1380, 1480, 2400, 1580, 2500, 2600, and 1680. A stack-based buffer overflow occurs w… |
CVE-2026-90779 | High | 7.5 | 2026-09-13 | SIPp through 3.7.7 contains a stack buffer overflow vulnerability in createAuthHeader() when processing SIP authentication challenges with oversized algorithm… |
CVE-2026-90558 | Critical | 9.8 | 2026-09-12 | sngrep through 1.8.4 contains stack buffer overflow vulnerabilities in SIP attribute formatting routines when header values exceed the 255-byte buffer limit. A… |
CVE-2026-86093 | High | 7.5 | 2026-09-10 | IBM Db2 11.5.0 through 11.5.9, and 12.1.0 through 12.1.5 could allow an attacker with the ability to control or impersonate a DRDA server endpoint to execute a… |
CVE-2026-15419 | | | 2026-09-10 | In the silabser.sys driver for CP210x devices v11.5.0 and earlier, a local unprivileged user with a malicious device can use malformed packets to corrupt kerne… |
CVE-2026-88047 | High | 7.8 | 2026-09-10 | Tesseract is an open source OCR engine. In version 5.5.3 and earlier, Classify::ReadNormProtos in src/classify/normmatch.cpp parses the NORMPROTO component of… |
CVE-2026-88289 | High | 7.5 | 2026-09-10 | GeoVision GV-LPC2211 V1.14 (260903) fails to validate attacker-controlled variable-length fields before copying them into fixed-size stack buffers in multiple… |
CVE-2026-88287 | High | 7.5 | 2026-09-10 | GeoVision GV-LPC2211 V1.13 fails to bound the number of Scopes tokens in unauthenticated ONVIF WS-Discovery Probe requests, allowing a remote attacker to corru… |
CVE-2026-88284 | Medium | 4.9 | 2026-09-10 | GeoVision GV-LPC2211 V1.13 fails to limit repeated User elements in ONVIF SetUser requests, allowing an authenticated administrator to overwrite stack control… |
CVE-2026-88283 | Medium | 4.9 | 2026-09-10 | GeoVision GV-LPC2211 V1.13 fails to limit repeated User elements in ONVIF CreateUsers requests, allowing an authenticated administrator to overwrite stack cont… |
CVE-2026-88281 | Medium | 4.9 | 2026-09-10 | GeoVision GV-LPC2211 V1.13 fails to limit repeated Username elements in ONVIF DeleteUsers requests, allowing an authenticated administrator to overflow a stack… |
CVE-2026-88280 | Medium | 4.9 | 2026-09-10 | GeoVision GV-LPC2211 V1.13 copies an oversized ONVIF SetUser password into a fixed stack field, allowing an authenticated administrator to crash the ONVIF work… |
CVE-2026-88279 | Medium | 4.9 | 2026-09-10 | GeoVision GV-LPC2211 V1.13 copies oversized ONVIF CreateUsers username or password values into fixed stack fields, allowing an authenticated administrator to c… |
CVE-2026-88268 | Medium | 6.5 | 2026-09-10 | GeoVision GV-LPC2211
V1.13 contains an authenticated stack buffer overflow in SSVR fragment
reassembly that allows a valid user to crash the SSVR service. |
CVE-2026-42805 | High | 8.4 | 2026-09-10 | A stack-based buffer overflow vulnerability exists in the Bosch Sensortec BHI385 SensorAPI (C library) within the debug message parser function bhi385_parse_de… |
CVE-2026-42804 | High | 7.6 | 2026-09-10 | A stack-based buffer overflow vulnerability exists in the Bosch Sensortec BHI360 SensorAPI(C-Library) in versions up to and including commit d6b200416a.
The… |
CVE-2026-82079 | High | 8.4 | 2026-09-10 | A stack-based buffer overflow vulnerability in the Nintendo Switch local wireless networking functionality may allow an attacker within wireless range to execu… |
CVE-2026-21093 | Medium | 6.7 | 2026-09-09 | Stack-based buffer overflow in PROCA trustlet prior to SMR Sep-2026 Release 1 allows local privileged attackers to write out-of-bounds memory. |