CVE-2026-69819 is a critical out-of-bounds write vulnerability in the RPC Runtime component of Microsoft Windows 10 Version 1607 and related versions. This flaw allows an unauthorized attacker to execute code remotely over a network without user interaction. The vulnerability affects multiple Windows 10 builds prior to specific fixed versions. Microsoft has released official patches to address this issue.
Insufficient validation of storage engine configuration options in MongoDB Server allows an authenticated user with write privileges to supply crafted parameters during collection creation that override internal storage metadata. This results in an out-of-bounds memory write in the server process, causing a denial of service via server crash, with potential for further impact including arbitrary code execution.
A vulnerability has been identified in Reyrolle 7SR5 (All versions < V2.70). The input received over a proprietary communication protocol that is exposed when the device is placed into a special firmware-update mode is not properly validated, resulting in a memory corruption condition. This could allow an unauthenticated attacker with physical access to the device to cause a crash and potentially execute arbitrary code on the device.
A vulnerability has been identified in Reyrolle 7SR5 (All versions < V2.70). The length of the URL component contained in pre-authenticated HTTP messages is not properly validated before appending additional data to it, resulting in an out-of-bounds write condition in memory. This could allow an unauthenticated remote attacker to crash the affected device, causing a reboot and resulting in a denial-of-service condition.
CVE-2026-14297 is a high-severity buffer overflow vulnerability in the Bluetooth Continuous Glucose Monitoring Service (CGMS) Record Access Control Point (RACP) write handler of Nordic Semiconductor ASA's nRF Connect SDK. An authenticated Bluetooth Low Energy (BLE) peer can overflow a 20-byte static buffer, potentially overwriting adjacent memory. The impact depends on the specific firmware build's memory layout and cannot be predetermined.
CVE-2026-86313 is an out-of-bounds write vulnerability in Samsung Opensource Walrus. This flaw allows buffer overflow conditions that can lead to high impact on confidentiality, integrity, and availability. The vulnerability requires local access with low complexity and user interaction. It has been assigned a high severity score of 7.8. No specific affected versions or patches have been disclosed yet.
This is the official web site of tcpdump, a powerful command-line packet analyzer; and libpcap, a portable C/C++ library for network traffic capture.
Security Fix(es):
In BPF instructions that load/store a value from/to a scratch memory register the register index is an unsigned 32-bit integer and must not exceed 15, but libpcap BPF interpreter does not validate the value. In particular uncommon use cases a crafted filter program can cause the interpreter to try reading and writing the OS process memory in the 16GiB starting at the current stack frame on 64-bit architectures and in the entire address space on 32-bit architectures.(CVE-2026-0799)
The rpcap client code that processes a RPCAP_MSG_PACKET message received from the server incorrectly validates its headers. A malicious server can send a crafted message and cause the client to treat up to 20 bytes of the client process memory beyond the end of the buffer as if it was a part of the captured packet.(CVE-2026-18238)
rpcapd can allocate up to 65536 bytes per each RPCAP_MSG_UPDATEFILTER_REQ or RPCAP_MSG_STARTCAP_REQ message received from the client, but it never frees the memory, so it leaks memory even under normal use. A malicious client can cause the server to leak memory substantially faster.(CVE-2026-18313)
libpcap BPF interpreter calls abort() if it encounters a BPF instruction that has an invalid opcode. In particular uncommon use cases a crafted filter program can terminate the OS process.(CVE-2026-31911)
libpcap BPF interpreter detects neither reaching the end of the filter program buffer due to lack of a return instruction nor executing a jump instruction with an offset that translates to a pointer outside of the buffer. In particular uncommon use cases a crafted filter program can cause the interpreter to try reading the OS process memory in the 32GiB around the buffer on 64-bit architectures and in the entire address space on 32-bit architectures.(CVE-2026-31912)
libpcap BPF interpreter for the 'div #k' and 'mod #k' ALU instructions does not check whether the immediate value is zero. In particular uncommon use cases a crafted filter program can cause a division by zero.(CVE-2026-6244)
libpcap BPF interpreter treats the offset in the 'ja L' BPF instruction as a signed integer to implement looping via backward jumps, but it does not limit the number of loop iterations. In particular uncommon use cases a crafted filter program can cause the interpreter to loop infinitely.(CVE-2026-6554)
CVE-2026-57159 is a high-severity vulnerability in the pjsip pjproject multimedia communication library. It involves improper validation of array indexes in the SDP negotiator component when the remote payload-type map maintenance feature (PJMEDIA_SDP_NEG_MAINTAIN_REMOTE_PT_MAP) is enabled. This flaw allows a crafted remote SDP offer or answer to cause out-of-bounds memory access, leading to memory corruption and denial of service. The vulnerability does not affect default builds where this feature is disabled. A patch addressing this issue has been committed.
IBM i 7.6, 7.5, 7.4, and 7.3 could allow a remote attacker to cause a denial of service due to improper validation of the prefix length in ICMPv6 Router Advertisements.
CVE-2026-17469 is an off-by-one out-of-bounds write vulnerability in IBM i versions 7.3, 7.4, 7.5, and 7.6. It affects the LPD queue name parser and can be exploited by a local authenticated attacker to cause a denial of service. The vulnerability does not impact confidentiality or integrity but can disrupt availability.
There is an out-of-bounds write vulnerability in DASYLab due to improper validation of user-supplied data, resulting in a write past the end of an allocated data structure. Successful exploitation requires an attacker to get a user to open a specially crafted .DSB file. This issue affects all versions before 2026.0.0.
There is an out-of-bounds write vulnerability in DASYLab due to improper validation of user-supplied data, resulting in a write past the end of an allocated heap. Successful exploitation requires an attacker to get a user to open a specially crafted .DSB file. This issue affects all versions before 2026.0.0.
There is an out-of-bounds write vulnerability in DASYLab due to lack of proper validation of user-supplied data. Successful exploitation requires an attacker to get a user to open a specially crafted .DSB file. This issue affects all versions before 2026.0.0.
A heap-based buffer overflow vulnerability exists in pymonocypher versions prior to 4.0.2.8 in the argon2i_32 implementation. The issue arises because the implementation does not verify the size of the nb_blocks parameter, allowing a buffer overflow if the caller provides an insufficiently sized buffer. This flaw has been fixed in version 4.0.2.8.
CVE-2026-84969 is a medium severity vulnerability in the MongoDB C Driver affecting versions >=1.30.0 <1.30.9 and >=2.0.0 <2.5.2. It involves an out-of-bounds write during BSON-to-JSON conversion when encoding a binary field with a caller-configured length limit. An unprivileged attacker supplying document content may cause a small amount of data outside the intended buffer to be altered.
A security issue exists within FactoryTalk® Historian Machine Edition. An attacker with low-level authentication could exploit this vulnerability to achieve remote code execution on the affected device.
CVE-2026-58106 is an out-of-bounds write vulnerability (CWE-787) in Ericsson CodeChecker through version 6.28.2. It occurs due to a stack overflow caused by the misuse of a bounded string copy function that writes 4096 bytes into a 4094-byte buffer, resulting in a 2-byte overflow on every invocation regardless of input length. The vulnerability has a low CVSS score of 2. No patch or official remediation has been confirmed yet.