Search: “buffer overflow”

518 stories

Searchkeyword smart Sortlatest hot importance relevance

DomainAll Cyber AIWindow24h 3d 7d 30d AllIn the wild Important only Show duplicates

CategoryAll Vulnerability 522 Exploit / PoC 314 Ransomware 50 Malware 25 Advisory 14 Data breach 11 Threat actor 10 Phishing & fraud 4 Policy & legal 1

SeverityAll critical 763 high 188 medium 0 low 0 info 0

Microsoft Patch Tuesday, September 2026 Security Update Review

Microsoft's September 2026 Patch Tuesday fixes 974 vulnerabilities, including 113 critical and two actively exploited Windows privilege escalation flaws.

Microsoft's September 2026 Patch Tuesday fixes 974 vulnerabilities, its largest release ever, including 113 critical and 860 important, covering Windows HTTP.sys, Hyper-V, Entra ID, Exchange Server, Office, DNS, and more. Two zero-days are confirmed exploited in the wild: CVE-2026-81963 (Windows Update Stack EoP) and CVE-2026-85880 (ALPC heap overflow), both letting authenticated attackers gain SYSTEM privileges. Notable criticals include an Entra ID authentication bypass (CVE-2026-62916) and multiple Windows DNS Server and Office remote code execution flaws.

Qualys ThreatPROTECTSep 9, 12:23 UTC · 7d agoVulnerability in the wildCVE-2026-81963 CVE-2026-85880 CVE-2026-58599+27 CVEs

Palo Alto PAN-OS Buffer Overflow Lets Attackers Execute Arbitrary Code as Root

Palo Alto Networks fixed CVE-2026-0310, a CVSS 9.2 unauthenticated PAN-OS buffer overflow enabling root code execution on PA-Series firewalls.

Palo Alto Networks published an advisory on September 9, 2026 for CVE-2026-0310, a CWE-787 out-of-bounds write in PAN-OS XML processing with a CVSS v4.0 base score of 9.2, affecting the management and dataplane interfaces. Unauthenticated attackers could execute arbitrary code as root on PA-Series hardware firewalls, while VM-Series faces denial-of-service impact and Prisma Access and Cloud NGFW have reduced, authenticated exposure. Affected releases include PAN-OS 10.2, 11.1, 11.2, 12.1, and 12.2 before fixed maintenance releases such as 12.2.3, 12.1.4-h10, 11.2.13-h2, 11.1.16-h2, and 10.2.18-h10; no workaround is available. Palo Alto is not aware of malicious exploitation but classifies remediation urgency as highest.

GBHackersupdated Sep 10, 12:10 UTC · 6d agofirst Sep 10, 11:39 UTC · 6d agoVulnerability 3 sources CVE-2026-0310

Experts found a critical remote buffer overflow vulnerability in Skype

Security AffairsJun 28, 19:30 UTC · Jun 28, 2017Vulnerability CVE-2017-9948

Vulnerability Spotlight: Heap buffer overflow condition in Google Chrome could lead to code execution

Cisco TalosJan 11, 15:07 UTC · Jan 11, 2022Vulnerability in the wildCVE-2021-37979

Buffer overflow exposes unpatched Squid servers to RCE and DoS attacks

Security AffairsAug 24, 08:28 UTC · Aug 24, 2019Vulnerability CVE-2019-12527

Cisco Talos discovered 2 critical flaws in the popular OpenCV library

Security AffairsJan 4, 09:05 UTC · Jan 4, 2020Vulnerability CVE-2019-5063 CVE-2019-5064

Vulnerability Spotlight: Multiple vulnerabilities in SoftMaker Office PlanMaker

Cisco TalosFeb 3, 18:00 UTC · Feb 3, 2021Vulnerability in the wildCVE-2020-13579 CVE-2020-13580 CVE-2020-13581+1 CVEs

Vulnerability Spotlight: Heap buffer overflow vulnerability in Ribbonsoft dxflib library

Cisco TalosSep 7, 15:56 UTC · Sep 7, 2021Vulnerability in the wildCVE-2021-21897

Vulnerability Spotlight: Buffer overflow vulnerability in AnyCubic Chitubox plugin

Cisco TalosJan 10, 14:40 UTC · Jan 10, 2022Vulnerability in the wildCVE-2021-21948

Vulnerability Spotlight: Heap-based buffer overflow in Google Chrome could lead to code execution

Cisco TalosMay 20, 17:41 UTC · May 20, 2021Vulnerability in the wildCVE-2021-21160

Vulnerability Spotlight: Vulnerabilities in Anker Eufy Homebase could lead to code execution, buffer overflows

Cisco TalosOct 12, 14:48 UTC · Oct 12, 2021Vulnerability in the wildCVE-2021-21940 CVE-2021-21941 CVE-2021-21950+5 CVEs

Millions of Routers open to attack due to a NetUSB flaw

Security AffairsJan 12, 22:03 UTC · Jan 12, 2022Vulnerability CVE-2015-3036

Vulnerability Spotlight: Multiple Arbitrary Code Execution Vulnerabilities Identified in Hancom Hangul Office

Cisco TalosAug 4, 18:09 UTC · Aug 4, 2016Vulnerability in the wild

Vulnerability Spotlight: TALOS-2018-0529-531 - Multiple Vulnerabilities in NASA CFITSIO library

Cisco TalosApr 12, 19:10 UTC · Apr 12, 2018Vulnerability in the wildCVE-2018-3846 CVE-2018-3847 CVE-2018-3848+1 CVEs

Vulnerability Spotlight: Natus NeuroWorks Multiple Vulnerabilities

Cisco TalosApr 4, 18:30 UTC · Apr 4, 2018Vulnerability in the wildCVE-2017-2853 CVE-2017-2867 CVE-2017-2868+2 CVEs

Four Critical Vulnerabilities Expose HPE Aruba Devices to RCE Attacks

The Hacker NewsMay 3, 04:50 UTC · May 3, 2024Vulnerability CVE-2024-26304 CVE-2024-26305 CVE-2024-33511+1 CVEs

Alert: Over 700,000 DrayTek Routers Exposed to Hacking via 14 New Vulnerabilities

The Hacker NewsOct 7, 06:12 UTC · Oct 7, 2024Vulnerability CVE-2024-41592 CVE-2024-41585 CVE-2024-41589+11 CVEs

Cisco fixed multiple flaws in Cisco SD-WAN products and Smart Software Manager Satellite Web UI

Security AffairsJan 21, 08:43 UTC · Jan 21, 2021Vulnerability CVE-2021-1300 CVE-2021-1301 CVE-2021-1138+2 CVEs

Microsoft Patch Tuesday for May 2026 — Snort rules and prominent vulnerabilities

Cisco TalosMay 13, 15:34 UTC · May 13, 2026Vulnerability in the wildCVE-2026-32161 CVE-2026-33109 CVE-2026-33844+22 CVEs

Microsoft Patch Tuesday for June 2026 — Snort rules and prominent vulnerabilities

Cisco TalosJun 9, 21:21 UTC · Jun 9, 2026Vulnerability CVE-2026-42985 CVE-2026-47291 CVE-2026-44803+26 CVEs

Experts discovered buffer overflow vulnerability in MikroTik RouterOS

Security AffairsMar 19, 07:56 UTC · Mar 19, 2018Vulnerability CVE-2018-7445 CVE-2007-5633 CVE-2010-1592+1 CVEs

Vulnerability Spotlight: Buffer overflow vulnerability in ADMesh library

Cisco TalosApr 3, 15:08 UTC · Apr 3, 2023Vulnerability in the wildCVE-2022-38072

Vulnerability Spotlight: Buffer overflow vulnerabilities in Accusoft ImageGear could lead to code execution

Cisco TalosFeb 23, 16:58 UTC · Feb 23, 2022Vulnerability in the wildCVE-2021-21914 CVE-2021-21938 CVE-2021-21939+7 CVEs1

Vulnerability Spotlight: WellinTech ICS platform vulnerable to information disclosure, buffer overflow vulnerabilities

Cisco TalosMar 21, 13:27 UTC · Mar 21, 2023Vulnerability in the wildCVE-2022-45124 CVE-2022-43663

Adobe just fixed thirteen code execution flaws in Flash Player

Security AffairsFeb 14, 20:01 UTC · Feb 14, 2017Vulnerability CVE-2017-2968 CVE-2017-2969

Experts found critical flaws in Realtek Wi

Security AffairsFeb 6, 21:35 UTC · Feb 6, 2021Vulnerability CVE-2020-9395 CVE-2020-25853 CVE-2020-25854+3 CVEs

HPE Aruba Networking addressed four critical ArubaOS RCE flaws

Security AffairsMay 2, 17:46 UTC · May 2, 2024Vulnerability CVE-2024-26305 CVE-2024-26304 CVE-2024-33511+1 CVEs

Zyxel firewall and VPN devices affected by critical flaws

Security AffairsMay 25, 20:15 UTC · May 25, 2023Vulnerability CVE-2023-33009 CVE-2023-33010 CVE-2023-28771+1 CVEs

SonicWall strongly urges customers to apply patches to SMA 100 devices

Security AffairsDec 8, 20:08 UTC · Dec 8, 2021Vulnerability CVE-2021-20038 CVE-2021-20045 CVE-2021-20039+5 CVEs

Multiple vulnerabilities in Adobe Acrobat Reader could lead to remote code execution

Cisco TalosFeb 29, 13:39 UTC · Feb 29, 2024Vulnerability CVE-2024-20735 CVE-2024-20747 CVE-2024-20749+23 CVEs

Vulnerability Spotlight: Multiple vulnerabilities in Atlantis Word Processor

Cisco TalosOct 1, 12:30 UTC · Oct 1, 2018Vulnerability in the wildCVE-2018-3975 CVE-2018-3978 CVE-2018-3982+5 CVEs

Vulnerability Spotlight: Integer and buffer overflow vulnerabilities found in QT QML

Cisco TalosJan 13, 16:58 UTC · Jan 13, 2023Vulnerability in the wildCVE-2022-40983 CVE-2022-43591

Vulnerability Spotlight: Remote code execution vulnerabilities in Simple DirectMedia Layer

Cisco TalosJul 2, 17:05 UTC · Jul 2, 2019Vulnerability in the wildCVE-2019-5051 CVE-2019-5052 CVE-2019-5060+3 CVEs

Vulnerability Spotlight: Multiple remote code execution vulnerabilities in Iceni Argus PDF Content Extraction affect MarkLogic

Cisco TalosFeb 27, 17:59 UTC · Feb 27, 2017Vulnerability in the wildCVE-2016-8385 CVE-2016-8386 CVE-2016-8387+4 CVEs