CVE-2026-102693 is a critical buffer overflow vulnerability in the RIOT-OS microcontroller operating system affecting versions prior to 2026.04. The flaw exists in the ATWINC15x0 driver's _atwinc15x0_sta_set_current_ssid function, which uses strcpy to copy an SSID without validating the destination buffer size. When the MODULE_ATWINC15X0_DYNAMIC_CONNECT feature is enabled, an attacker within Wi-Fi range can send a malformed or oversized SSID during scanning, leading to memory corruption. This can cause a hard fault, denial of service, or potentially allow code execution. The vulnerability is fixed in RIOT-OS version 2026.04.
CVE-2026-108445 is a high-severity stack-based buffer overflow vulnerability in Microsoft Office Word within Microsoft 365 Apps for Enterprise. It allows an unauthorized attacker to execute code remotely over a network. The vulnerability affects multiple versions prior to specific fixed releases. Microsoft has issued official fixes for this vulnerability.
CVE-2026-108440 is a stack-based buffer overflow vulnerability in Microsoft Office Word, part of Microsoft 365 Apps for Enterprise. This flaw allows an unauthorized attacker to execute code remotely over a network. The vulnerability has a high severity with a CVSS score of 8.8. Microsoft has released official fixes in versions 16.114.26101123, 16.0.14334.20974, and 16.0.17932.21056. No known exploits are reported in the wild at this time.
CVE-2026-108431 is a stack-based buffer overflow vulnerability in Microsoft Office Word within Microsoft 365 Apps for Enterprise. This flaw allows an unauthorized attacker to execute code remotely over a network. The vulnerability has a high severity score of 8.8 and affects multiple versions prior to specific fixed releases. Official patches have been released by Microsoft to address this issue.
CVE-2026-79840 is a stack-based buffer overflow vulnerability in Hewlett Packard Enterprise's HPE NonStop XABroker. This flaw can lead to memory corruption and cause the affected application to crash. The vulnerability has a high severity rating with a CVSS score of 7.3. No specific affected versions or patch information are provided in the available data.
CVE-2026-79839 is a stack-based buffer overflow vulnerability in Hewlett Packard Enterprise's HPE NonStop ODBC/MX Server. This vulnerability can cause memory corruption leading to application crashes. It requires low privileges and user interaction to exploit and affects confidentiality, integrity, and availability to a limited extent. The vulnerability has a high severity rating with a CVSS score of 7.3.
CVE-2026-79838 is a stack-based buffer overflow vulnerability in Hewlett Packard Enterprise's HPE NonStop ODBC/MX Services. This flaw may lead to memory corruption and cause the affected application to crash. The vulnerability has a high severity rating with a CVSS score of 7.3. No specific affected versions or patch information is provided in the available data.
CVE-2026-79832 is a stack-based buffer overflow vulnerability in Hewlett Packard Enterprise's HPE NonStop SQL/MX Executor. This flaw may lead to information disclosure or cause the process to crash. The vulnerability has a high severity rating with a CVSS score of 7.6. No affected versions or patch information are currently provided.
CVE-2026-79830 is a stack-based buffer overflow vulnerability in the Hewlett Packard Enterprise (HPE) NonStop Kernel Level Thread Model Library. This flaw can potentially allow an attacker with limited privileges to execute arbitrary code. The vulnerability has a medium severity rating with a CVSS score of 6.6. No specific affected versions or patches are currently documented.
CVE-2026-79823 is a stack-based buffer overflow vulnerability in Hewlett Packard Enterprise's HPE NonStop EMS Distributor. This vulnerability may cause undesirable behavior due to improper handling of buffer boundaries. It has a medium severity rating with a CVSS score of 4.0. There is no information about affected versions or available patches. No known exploits are reported in the wild.
CVE-2025-29897 is a buffer copy vulnerability in QNAP Systems Inc.'s Qsync Central that allows a remote attacker with a user account to modify memory or crash processes. The issue is fixed in Qsync Central version 5.0.0.4 and later. The vulnerability has a low severity score and requires low privileges to exploit.
CVE-2026-76663 is a stack-based buffer overflow vulnerability in Hewlett Packard Enterprise's HPE NonStop TELSERV component. This vulnerability can cause memory corruption leading to a denial of service (DoS) condition. No information about affected versions or available patches is provided.
CVE-2026-76662 is a stack-based buffer overflow vulnerability in Hewlett Packard Enterprise's HPE NonStop TELSERV. This flaw can lead to memory corruption and cause a denial of service (DoS) condition. The vulnerability has a medium severity rating with a CVSS score of 5.9. No specific affected versions or patch information are provided. There are no known exploits in the wild at this time.
CVE-2026-73799 is a high-severity stack-based buffer overflow vulnerability (CWE-121) in Hewlett Packard Enterprise's HPE NonStop SNMP Trap Multiplexer. This flaw may cause memory corruption leading to denial of service. No affected versions or patch information are provided.
CVE-2026-101983 is a critical stack-based buffer overflow vulnerability in the httpd process of Juniper Networks Junos OS and Junos OS Evolved. It allows an unauthenticated network attacker to remotely execute code and cause denial of service when a J-Web virtual-domain is configured. The vulnerability affects multiple specific versions of Junos OS and Junos OS Evolved. The CVSS score is 9.8, indicating a high severity with network attack vector, low attack complexity, no privileges or user interaction required, and impacts confidentiality, integrity, and availability. No known exploits in the wild have been reported yet.
CVE-2026-101982 is a critical stack-based buffer overflow vulnerability in the routing protocol daemon (rpd) of Juniper Networks Junos OS and Junos OS Evolved. It allows a configured BGP/EVPN peer to cause root code execution on Junos OS or crash the rpd process on Junos OS Evolved by sending protocol-valid route advertisements for an EVPN-VPWS service. The vulnerability affects multiple versions of Junos OS and Junos OS Evolved prior to specific patch releases. The CVSS score is 9.8, indicating a high severity with network attack vector, no privileges required, and impacts on confidentiality, integrity, and availability. No known exploits in the wild have been reported. Juniper Networks has not provided explicit patch links in the input data, so patch status should be verified with the vendor.
CVE-2026-101981 is a stack-based buffer overflow vulnerability in the routing protocol daemon (rpd) of Juniper Networks Junos OS and Junos OS Evolved. It allows an unauthenticated adjacent LDP peer to cause a crash or execute arbitrary code by sending a malformed LDP Label Mapping message. The vulnerability affects multiple versions of Junos OS and Junos OS Evolved as specified. The CVSS v3.1 base score is 8.8, indicating high severity with impacts on confidentiality, integrity, and availability.
CVE-2026-101979 is a stack-based buffer overflow vulnerability in the authd component of Juniper Networks Junos OS and Junos OS Evolved. It allows a network attacker with SNMP read access to execute code with root privileges or cause a denial of service via a crafted SNMP packet, when SNMP and AAA are enabled. The vulnerability affects multiple versions of Junos OS and Junos OS Evolved prior to specific patched releases. The CVSS score is 8.8, indicating high severity.
CVE-2026-33798 is a high-severity stack-based buffer overflow vulnerability in the srxpfe component of Juniper Networks Junos OS and Junos OS Evolved on SRX Series devices. It allows an L2-adjacent attacker to execute arbitrary code with root privileges via high-availability fabric traffic. The vulnerability affects multiple versions of Junos OS and Junos OS Evolved as specified. No known exploits are reported in the wild. The CVSS v3.1 base score is 8.8, indicating a high impact on confidentiality, integrity, and availability.
CVE-2026-33796 is a critical stack-based buffer overflow vulnerability in the routing protocol daemon (rpd) of Juniper Networks Junos OS and Junos OS Evolved. It allows a configured external BGP neighbor to execute arbitrary commands with root privileges via BMP route monitoring. The vulnerability affects multiple versions of Junos OS and Junos OS Evolved prior to specific fixed releases. The CVSS v3.1 base score is 9.8, indicating a critical severity with network attack vector, low attack complexity, no privileges required, and no user interaction needed. There are no known exploits in the wild at this time. Juniper Networks has not provided explicit patch links in the input data, so patch status should be verified with the vendor advisory.