CVE-2026-108448 is a heap-based buffer overflow vulnerability in Microsoft Office Outlook within Microsoft 365 Apps for Enterprise. This flaw allows an unauthorized attacker to execute code remotely over a network. The vulnerability has a high severity score of 7.5 and affects multiple versions prior to specific fixed releases. Official patches are available from Microsoft to address this issue.
CVE-2026-108447 is a heap-based buffer overflow vulnerability in Microsoft Office Word within Microsoft 365 Apps for Enterprise. This flaw allows an unauthorized attacker to execute code remotely over a network. The vulnerability affects specific versions prior to 16.0.14334.20974 and 16.0.17932.21056. An official fix is available from Microsoft.
CVE-2026-108444 is a heap-based buffer overflow vulnerability in Microsoft 365 Apps for Enterprise (Microsoft Office) that allows an unauthorized attacker to execute code remotely over a network. The vulnerability has a high severity with a CVSS score of 8.8. Microsoft has released official fixes in versions 16.114.26101123, 16.0.14334.20974, and 16.0.17932.21056. The vulnerability requires user interaction but no privileges and affects multiple versions prior to these fixed releases.
CVE-2026-108441 is a heap-based buffer overflow vulnerability in Microsoft Office Word within Microsoft 365 Apps for Enterprise. This flaw allows an unauthorized attacker to execute code remotely over a network. The vulnerability has a high severity score of 8.8 and affects multiple versions prior to specific fixed releases. Microsoft has issued official fixes for this vulnerability.
CVE-2026-108439 is a heap-based buffer overflow vulnerability in Microsoft Office Word within Microsoft 365 Apps for Enterprise. It allows an unauthorized attacker to execute code remotely over a network. The vulnerability has a high severity with a CVSS score of 8.8. Official patches have been released to address this issue.
CVE-2026-108437 is a heap-based buffer overflow vulnerability in Microsoft Office Word within Microsoft 365 Apps for Enterprise. This flaw allows an unauthorized attacker to execute code remotely over a network. The vulnerability affects specific versions prior to 16.0.14334.20974 and 16.0.17932.21056. Microsoft has released official fixes for this issue. The vulnerability has a high severity rating with a CVSS score of 8.8.
CVE-2026-108432 is a heap-based buffer overflow vulnerability in Microsoft Office Word within Microsoft 365 Apps for Enterprise. This flaw allows an unauthorized attacker to execute code remotely over a network. The vulnerability has a high severity with a CVSS score of 8.8. Official patches have been released to address this issue in specific versions of the software.
CVE-2026-108430 is a heap-based buffer overflow vulnerability in Microsoft Office Word within Microsoft 365 Apps for Enterprise. This flaw allows an unauthorized attacker to execute code remotely over a network. The vulnerability has a high severity score and has been officially fixed in specific versions of the software.
CVE-2026-108429 is a heap-based buffer overflow vulnerability in Microsoft Office Word within Microsoft 365 Apps for Enterprise. This flaw allows an unauthorized attacker to execute code remotely over a network. The vulnerability has a high severity score of 8.8 and affects specific versions prior to fixed releases. Official patches are available from Microsoft to address this issue.
CVE-2026-108428 is a heap-based buffer overflow vulnerability in Microsoft Office Word within Microsoft 365 Apps for Enterprise. This flaw allows an unauthorized attacker to execute code remotely over a network. The vulnerability has a high severity with a CVSS score of 8.8 and affects specific versions prior to fixed releases. Official patches have been released by Microsoft to address this issue.
CVE-2026-108427 is a heap-based buffer overflow vulnerability in Microsoft Office Word within Microsoft 365 Apps for Enterprise. This flaw allows an unauthorized attacker to execute code remotely over a network. The vulnerability has a high severity score of 8.8 and affects specific versions prior to fixed releases. Official patches are available from Microsoft to address this issue.
CVE-2026-108426 is a heap-based buffer overflow vulnerability in Microsoft Office Word within Microsoft 365 Apps for Enterprise. This flaw allows an unauthorized attacker to execute code remotely over a network. The vulnerability has a high severity with a CVSS score of 8.8. Official patches have been released to address this issue in versions 16.0.14334.20974 and 16.0.17932.21056.
bincookie is a header-only binarycookies parser. Prior to 0.1.9, bincookie_init_file() in bincookie.h allocates a buffer using the actual .binarycookies file length but trusts the file-controlled num_pages field as the loop bound for byte-swapping page_sizes entries. A crafted file can make the loop read and write beyond the heap allocation, and related unvalidated page sizes and cookie_offsets can drive additional out-of-bounds accesses in page and cookie iteration. Applications that parse an attacker-supplied binarycookies file may crash or suffer heap corruption that can potentially enable code execution. This issue is fixed in version 0.1.9.
CVE-2026-79831 is a heap-based buffer overflow vulnerability in Hewlett Packard Enterprise's HPE NonStop Posix User Threads. This flaw may allow an attacker with local privileges to execute arbitrary code. The vulnerability has a CVSS 3.1 base score of 6.6, indicating a medium severity level. No specific affected versions or patches are currently documented. There is no evidence of known exploits in the wild at this time.
CVE-2026-79828 is a heap-based buffer overflow vulnerability in Hewlett Packard Enterprise's HPE NonStop Debug Utilities. This flaw can corrupt the resume-execution address, potentially allowing an attacker to redirect the execution flow. The vulnerability has a high severity rating with a CVSS score of 7.1. No specific affected versions or patch information are provided.
CVE-2026-79827 is a heap-based buffer overflow vulnerability in the Hewlett Packard Enterprise (HPE) NonStop Inspect Subsystem. This flaw could corrupt the resume-execution address, potentially allowing an attacker to redirect execution flow. The vulnerability has a high severity rating with a CVSS score of 7.1. No affected versions or patch information are currently provided.
CVE-2026-79826 is a heap-based buffer overflow vulnerability in Hewlett Packard Enterprise's HPE NonStop OCAX. This flaw could corrupt the program's address space and potentially redirect execution flow, leading to high impact on integrity and availability. The vulnerability has a CVSS score of 7.1, indicating high severity. No affected versions or patch information are currently provided, and no known exploits are reported in the wild.
CVE-2026-79825 is a heap-based buffer overflow vulnerability in Hewlett Packard Enterprise's HPE NonStop NDSREST component. This flaw could corrupt the resume-execution address, potentially allowing an attacker to redirect execution flow. The vulnerability has a CVSS 3.1 score of 7.1, indicating high severity. No specific affected versions or patch information are provided. There are no known exploits in the wild at this time.
CVE-2026-101307 is a heap-based buffer overflow vulnerability in the FreeBSD RACK TCP stack. The issue arises when the PCM sample array grows by doubling a 16-bit allocation counter, which can wrap to zero after repeated doublings. This leads to an undersized buffer allocation and a subsequent out-of-bounds write in kernel memory. A remote attacker can trigger this by sending many ACKs on an established TCP connection, potentially causing a kernel panic.
CVE-2026-79822 is a heap-based buffer overflow vulnerability in Hewlett Packard Enterprise's HPE NonStop TNS/X Native Inspect. This flaw may cause corruption of memory addresses and potentially redirect execution flow, leading to high impact on integrity and availability. The vulnerability requires local privileges to exploit and does not involve user interaction. It has a CVSS score of 7.1, indicating high severity. No affected versions or patch information are provided, and no known exploits are reported in the wild.