Microsoft March 2026 Security Updates

Microsoft March 2026 Early Security Updates

Microsoft February 2026 Security Updates

Microsoft January 2026 Security Updates

Microsoft December 2025 Security Updates

Microsoft December 2025 Early Security Updates

Microsoft November 2025 Security Updates

Microsoft October 2025 Security Updates

Microsoft September 2025 Security Updates

Microsoft August 2025 Security Updates

Microsoft August Early 2025 Security Updates

Microsoft July 2025 Security Updates

Microsoft June 2025 Security Updates

Microsoft June Early 2025 Security Updates

Microsoft May 2025 Security Updates

Microsoft May Early 2025 Security Updates

Microsoft April 2025 Security Updates

Microsoft March 2025 Security Updates

Microsoft March 2025 Early Security Updates

Microsoft February 2025 Security Updates

Microsoft February 2025 Early Security Updates

Microsoft January 2025 Security Updates

Microsoft January 2025 Early Security Updates

Microsoft December 2024 Security Updates

Microsoft November 2024 Security Updates

Microsoft October 2024 Security Updates

Microsoft September 2024 Security Updates

Microsoft August 2024 Security Updates

Microsoft July 2024 Security Updates

Microsoft June 2024 Security Updates

Microsoft May 2024 Security Updates

Microsoft April 2024 Security Updates

Microsoft March 2024 Security Updates

Microsoft February 2024 Security Updates

Microsoft January 2024 Security Updates

dir-513_firmware

Improper Restriction of Operations within the Bounds of a Memory Buffer

Stack-based Buffer Overflow

Out-of-bounds Write

A vulnerability was found in D-Link DIR-513 1.10. This issue affects the function formSetEmail of the file /goform/formSetEmail. Performing a manipulation of the argument curTime results in stack-based buffer overflow. The attack is possible to be carried out remotely. The exploit has been made public and could be used. This vulnerability only affects products that are no longer supported by the maintainer.

DIR-513

D-Link

A stack-based buffer overflow vulnerability exists in D-Link DIR-513 firmware version 1.10. The vulnerability is located in the formSetEmail function of the /goform/formSetEmail file and can be triggered through manipulation of the curTime argument. This vulnerability affects products that are no longer supported by the maintainer.

Buffer Overflow via Environment Variables

Overflow Buffers

Buffer Manipulation

Client-side Injection-induced Buffer Overflow

Filter Failure through Buffer Overflow

MIME Conversion

Overflow Binary Resource File

Buffer Overflow via Symbolic Links

Overflow Variables and Tags

Buffer Overflow via Parameter Expansion

Buffer Overflow in an API Call

Buffer Overflow in Local Command-Line Utilities

langflow

Improper Control of Generation of Code ('Code Injection')

Improper Neutralization of Directives in Dynamically Evaluated Code ('Eval Injection')

Missing Authentication for Critical Function

Langflow is a tool for building and deploying AI-powered agents and workflows. In versions prior to 1.9.0, the POST /api/v1/build_public_tmp/{flow_id}/flow endpoint allows building public flows without requiring authentication. When the optional data parameter is supplied, the endpoint uses attacker-controlled flow data (containing arbitrary Python code in node definitions) instead of the stored flow data from the database. This code is passed to exec() with zero sandboxing, resulting in unauthenticated remote code execution. This is distinct from CVE-2025-3248, which fixed /api/v1/validate/code by adding authentication. The build_public_tmp endpoint is designed to be unauthenticated (for public flows) but incorrectly accepts attacker-supplied flow data containing arbitrary executable code. This issue has been fixed in version 1.9.0.

Langflow's POST /api/v1/build_public_tmp/{flow_id}/flow endpoint allows attackers to supply arbitrary flow data containing malicious Python code in node definitions. This attacker-controlled code is passed directly to exec() with zero sandboxing, enabling unauthenticated remote code execution. The vulnerability exists because while the endpoint is designed to be unauthenticated for public flows, it incorrectly accepts and executes attacker-supplied flow data instead of retrieving stored flow data from the database.

Code Injection

Leverage Executable Code in Non-Executable Files

Manipulating User-Controlled Variables

Choosing Message Identifier

Force the System to Reset Values

Using Unpublished Interfaces

Cross Site Request Forgery

Github Advisory

github.com

bochs

Bochs 2.6-5 contains a stack-based buffer overflow vulnerability that allows attackers to execute arbitrary code by supplying an oversized input string to the application. Attackers can craft a malicious payload with 1200 bytes of padding followed by a return-oriented programming chain to overwrite the instruction pointer and execute shell commands with application privileges.

BOCHS

Bochs 2.6-5 contains a stack-based buffer overflow vulnerability caused by out-of-bounds write (CWE-787) that allows attackers to execute arbitrary code by supplying an oversized input string to the application.

wl-wn579x3

A vulnerability was determined in Wavlink WL-WN579X3-C 231124. This impacts the function sub_4019FC of the file /cgi-bin/firewall.cgi of the component UPNP Handler. Executing a manipulation of the argument UpnpEnabled can lead to stack-based buffer overflow. It is possible to launch the attack remotely. The exploit has been publicly disclosed and may be utilized. The vendor was contacted early about this disclosure but did not respond in any way.

WL-WN579X3-C

WAVLINK

A stack-based buffer overflow vulnerability exists in Wavlink WL-WN579X3-C (firmware version 231124) in the UPNP Handler component. The vulnerability is located in the /cgi-bin/firewall.cgi file, specifically in the function sub_4019FC. The vulnerability can be triggered by manipulating the UpnpEnabled argument, which can cause a stack-based buffer overflow condition.

Crashmail 1.6 contains a stack-based buffer overflow vulnerability that allows remote attackers to execute arbitrary code by sending malicious input to the application. Attackers can craft payloads with ROP chains to achieve code execution in the application context, with failed attempts potentially causing denial of service.

Crashmail

crashmail

Stack-based buffer overflow vulnerability in Crashmail 1.6 that allows remote attackers to execute arbitrary code by sending malicious input to the application.

MAWK 1.3.3-17 and prior contains a stack-based buffer overflow vulnerability that allows attackers to execute arbitrary code by exploiting inadequate boundary checks on user-supplied input. Attackers can craft malicious input that overflows the stack buffer and execute a return-oriented programming chain to spawn a shell with application privileges.

MAWK

mawk

Stack-based buffer overflow vulnerability in MAWK 1.3.3-17 and prior caused by inadequate boundary checks on user-supplied input. This allows attackers to overflow the stack buffer and execute arbitrary code through return-oriented programming chains.

kernel

In the Linux kernel, the following vulnerability has been resolved:

nf_tables: nft_dynset: fix possible stateful expression memleak in error path

If cloning the second stateful expression in the element via GFP_ATOMIC
fails, then the first stateful expression remains in place without being
released.

   unreferenced object (percpu) 0x607b97e9cab8 (size 16):
     comm "softirq", pid 0, jiffies 4294931867
     hex dump (first 16 bytes on cpu 3):
       00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
     backtrace (crc 0):
       pcpu_alloc_noprof+0x453/0xd80
       nft_counter_clone+0x9c/0x190 [nf_tables]
       nft_expr_clone+0x8f/0x1b0 [nf_tables]
       nft_dynset_new+0x2cb/0x5f0 [nf_tables]
       nft_rhash_update+0x236/0x11c0 [nf_tables]
       nft_dynset_eval+0x11f/0x670 [nf_tables]
       nft_do_chain+0x253/0x1700 [nf_tables]
       nft_do_chain_ipv4+0x18d/0x270 [nf_tables]
       nf_hook_slow+0xaa/0x1e0
       ip_local_deliver+0x209/0x330

Linux

f453_firmware

A flaw has been found in Tenda F453 1.0.0.3. This affects the function fromPPTPUserSetting of the file /goform/PPTPUserSetting of the component httpd. This manipulation of the argument delno causes stack-based buffer overflow. Remote exploitation of the attack is possible. The exploit has been published and may be used.

F453

Tenda

A stack-based buffer overflow flaw has been discovered in Tenda F453 firmware version 1.0.0.3. The vulnerability exists in the httpd component, specifically in the fromPPTPUserSetting function of the /goform/PPTPUserSetting file. The flaw is triggered through manipulation of the delno argument, which fails to properly restrict operations within the bounds of a memory buffer.

Search CVEs by ID

Trending Vulnerabilities

Latest Patch Tuesday Reports

March 2026 Patch Tuesday: 10 Critical Vulnerabilities Amid 96 CVEs

March 2026 Early Security Update: 2 Critical Vulnerabilities Amid 5 CVEs

February 2026 Patch Tuesday: 10 Critical Vulnerabilities Amid 61 CVEs

Browse

Be the first to know about critical vulnerabilities