CVE-2026-101338 is a high-severity stack-based buffer overflow vulnerability in NLnet Labs NSD affecting versions from 4.10.0 up to but not including 4.15.3. The flaw occurs when a SVCB or HTTPS resource record (RR) fills the wire format RDATA to its limit, allowing an additional ECH parameter to overwrite the stack. This can lead to the base64 decoder writing attacker-controlled data of unlimited size, potentially causing memory corruption. Zone files written out by NSD itself are not affected, but zone files fed directly to NSD, such as those from operator-controlled provisioning systems, can trigger the vulnerability.
CVE-2026-101337 is a high-severity stack-based buffer overflow vulnerability in NLnet Labs NSD affecting versions from 4.10.0 up to but not including 4.15.3. The flaw occurs when base64 data is split into pieces of 3 characters or less, causing incorrect token calculations that result in zero bytes and allow an attacker to overwrite the stack with up to 64K of controlled data. This vulnerability requires feeding a specially crafted zone file directly to NSD, such as from an operator-controlled provisioning system, rather than zone files generated by NSD itself.
CVE-2026-73795 is a stack-based buffer overflow vulnerability in Hewlett Packard Enterprise's HPE NonStop TMF Auditread2 component. This vulnerability can lead to a denial of service condition. The CVSS 3.1 base score is 6.4, indicating a medium severity level. The attack vector is local with high attack complexity and requires low privileges. There is no indication of confidentiality impact, but integrity and availability impacts are present. No patch or remediation information is currently available.
CVE-2026-88083 is a stack-based buffer overflow vulnerability in Microsoft SQL Server 2022 (GDR) that allows an unauthorized attacker to execute code remotely over a network. The vulnerability affects multiple versions prior to specific fixed releases. A high-severity issue, it has an official fix available from Microsoft.
CVE-2026-96956 is a stack-based buffer overflow vulnerability in Microsoft SQL Server 2017 (GDR) that allows an authorized attacker to elevate privileges over a network. The vulnerability affects multiple versions of SQL Server 2017 and later releases up to specific fixed versions. Microsoft has issued official fixes for this vulnerability.
Adobe Substance 3D Designer contains a stack-based buffer overflow vulnerability that can cause the application to crash, resulting in a denial-of-service condition. Exploitation requires user interaction, specifically opening a malicious file. The vulnerability does not impact confidentiality or integrity but affects availability.
Adobe Substance 3D Designer contains a stack-based buffer overflow vulnerability that can cause the application to crash, resulting in a denial-of-service condition. Exploitation requires user interaction, specifically opening a malicious file. No data confidentiality or integrity impact is indicated. The vulnerability has a medium severity rating with a CVSS score of 5.5.
Adobe Substance 3D Sampler contains a stack-based buffer overflow vulnerability (CWE-121) that can lead to arbitrary code execution with high impact on confidentiality, integrity, and availability. Exploitation requires user interaction by opening a malicious file. The vulnerability affects versions from 0 up to and including 6.0.3. No patch information is currently provided.
Adobe Substance 3D Stager contains a stack-based buffer overflow vulnerability that can lead to arbitrary code execution when a user opens a specially crafted malicious file. The vulnerability affects versions from 0 up to and including 3.1.8. Exploitation requires user interaction. The vulnerability has a high severity rating with a CVSS score of 7.8.
Adobe Substance 3D Stager contains a stack-based buffer overflow vulnerability that can lead to arbitrary code execution when a user opens a specially crafted malicious file. This vulnerability affects versions from 0 up to and including 3.1.8. Exploitation requires user interaction. The vulnerability has a high severity rating with a CVSS score of 7.8.
Adobe Dimension contains a stack-based buffer overflow vulnerability (CWE-121) that could allow an attacker to execute arbitrary code with the privileges of the current user. Exploitation requires user interaction, specifically opening a malicious file. The vulnerability affects versions from 0 up to and including 4.1.8. The CVSS 3.1 score is 7.8, indicating high severity.
CVE-2026-102199 is a stack-based buffer overflow vulnerability in the Microsoft Windows Codecs Library affecting multiple versions of Windows 10, including Version 1607. This flaw allows an unauthorized attacker to cause a denial of service over a network. The vulnerability has been assigned a CVSS 3.1 base score of 6.5, indicating medium severity. Official patches have been released by Microsoft to address this issue.
CVE-2026-100216 is a stack-based buffer overflow vulnerability in Windows Storage on Microsoft Windows 10 Version 1809 and related builds. It allows an authorized local attacker to elevate privileges. The vulnerability has been assigned a high severity rating with a CVSS score of 7. A patch is available and has been officially released by Microsoft.
CVE-2026-97742 is a high-severity stack-based buffer overflow vulnerability in Microsoft Office Excel within Microsoft 365 Apps for Enterprise. It allows an unauthorized attacker to execute code remotely over a network. Microsoft has released official fixes for multiple affected versions to address this issue.
CVE-2026-88166 is an integer overflow or wraparound vulnerability in Microsoft SharePoint Server Subscription Edition. It allows an authorized attacker to execute code remotely over a network. The vulnerability affects versions from 16.0.0 up to but not including 16.0.20326.20190. A fix is available in version 16.0.20326.20190. The vulnerability has a high severity with a CVSS score of 8.8.
CVE-2026-70571 is a stack-based buffer overflow vulnerability in Microsoft Exchange Server 2016 Cumulative Update 23 that allows an unauthorized attacker to execute code remotely over a network. The vulnerability has a high severity with a CVSS score of 8.1. Official patches are available in specific fixed versions of Exchange Server 2016 Cumulative Update 23.
CVE-2026-83934 is a stack-based buffer overflow vulnerability in the Windows GDI+ component affecting multiple versions of Microsoft Windows 10, including Version 1607. This flaw allows an unauthorized attacker to execute code remotely over a network. The vulnerability has a high severity with a CVSS score of 8.8. Official patches have been released to address this issue.
CVE-2026-83860 is a stack-based buffer overflow vulnerability in the Windows Graphics Device Interface (GDI) affecting multiple versions of Microsoft Windows 10, including Version 1607. This flaw allows an unauthorized attacker to cause a denial of service over a network. The vulnerability has a high severity rating and has been officially fixed in specific Windows updates.
CVE-2026-83857 is a high-severity stack-based buffer overflow vulnerability in the Windows Universal Disk Format File System Driver (UDFS) affecting multiple versions of Microsoft Windows 10, including Version 1607. It allows an authorized local attacker to elevate privileges by exploiting a use-after-free condition. Official patches have been released to address this vulnerability.
CVE-2026-83767 is a stack-based buffer overflow vulnerability in the Windows Installer component of Microsoft Windows 10 Version 1607 and other specified versions. This flaw allows an authorized local attacker to elevate privileges on the affected system. The vulnerability has a high severity rating with a CVSS score of 7.8. Microsoft has released official fixes for all affected versions.