Monthly
An unauthenticated stack-based buffer overflow in the Boa web server embedded in Netcore NR256CN firmware through 1.5.140116 lets remote attackers crash the router's main Boa process - and potentially execute code - by sending an HTTP Basic-auth username longer than 63 bytes to any password-protected /router/*.cgi route. The defect lives in the pre-authentication user_ok() handler, where Basic-auth usernames are copied with unbounded strcpy() into a fixed 64-byte stack buffer, so exploitation requires no credentials and no user interaction; the practical risk is governed almost entirely by exposure, since the attacker must be able to reach the device's HTTP management interface (far more dangerous when it faces the WAN, far less so when confined to the LAN). Per available data there is no confirmed active exploitation in CISA KEV and no public exploit code identified at time of analysis, but the zero-prerequisite access path and the network-facing attack vector make this a high-priority issue for any NR256CN with an internet-reachable admin UI.
Remote code execution in Microsoft Word affects Microsoft 365 Apps for Enterprise, Office LTSC 2021/2024, and Office for Mac/LTSC for Mac editions, allowing an unauthenticated attacker to execute arbitrary code by convincing a victim to open a specially crafted document (UI:R). The stack-based buffer overflow (CWE-121) requires no privileges or non-default configuration (PR:N, AC:L), making it a high-priority target for social-engineering campaigns, though no public exploit code has been identified at time of analysis. Patch available per vendor advisory from the Microsoft Security Response Center.
Stack-based buffer overflow in Microsoft Word permits remote code execution in affected Microsoft 365 Apps for Enterprise, Microsoft Office 365 for Mac, and Office LTSC 2021/2024 (including Mac editions) when a victim opens a maliciously crafted document. The vulnerability is unauthenticated from the attacker's perspective but requires user interaction (UI:R), so delivery typically depends on phishing or social engineering, and no public exploit identified at time of analysis or CISA KEV confirmation is available in the provided data. Patch available per vendor advisory via Microsoft's MSRC update guide.
Remote code execution in Microsoft Word affects Microsoft 365 Apps for Enterprise, Office LTSC 2021 and 2024, Office LTSC for Mac 2021 and 2024, and Office 365 for Mac when a user opens or previews a specially crafted document. The flaw is a stack-based buffer overflow (CWE-121) rated 8.8, reachable by unauthenticated remote attackers with PR:N but requiring user interaction with UI:R; successful exploitation yields code execution with the victim user’s privileges. A vendor patch is available, and no public exploit has been identified at time of analysis.
A stack-based buffer overflow in HPE NonStop XABroker can corrupt memory and terminate the broker process, handing an attacker who already holds a valid low-privilege account on the NonStop host a local denial-of-service primitive against a core system service. Exploitation is constrained: the CVSS vector (CVSS:3.1/AV:L/AC:L/PR:L/UI:R) confirms the attack is local, requires an authenticated low-privilege account, and needs a separate user action to deliver or process the crafted input, with our independent assessment narrowing the impact to availability only (S:U/C:N/I:N/A:H) rather than the confidentiality and integrity loss implied by the vendor-published score. There is no public exploit identified at time of analysis, no CISA KEV listing, and no EPSS data supplied, so this rates as a moderate, availability-focused issue that matters most in environments where untrusted or semi-trusted users already have NonStop logon rights.
A stack-based buffer overflow in HPE NonStop ODBC/MX Server (CWE-121) allows a local attacker with valid low-privileged credentials and user interaction to corrupt memory, potentially causing an application crash and denial of service. The assessed CVSS vector (AV:L/AC:L/PR:L/UI:R/S:U/C:L/I:L/A:H) indicates local access, authentication, and user interaction are required, and the impact is confined to service disruption rather than confirmed code execution. No public exploit code or active exploitation has been identified at time of analysis.
HPE NonStop ODBC/MX Services contains a stack-based buffer overflow (CWE-121) that allows a locally authenticated attacker with low privileges to crash the application via crafted input, provided a user action is performed. The vulnerability is not remotely exploitable and requires user interaction; no public exploit was identified at time of analysis. Per independent assessment, the impact is limited to availability (application crash), with no confirmed confidentiality or integrity impact.
Stack buffer overflow in the HPE NonStop SQL/MX Executor allows an authenticated remote user to trigger memory corruption, yielding partial information disclosure and a high-availability impact in the form of a process crash. The flaw is reachable over the network with low attack complexity and no user interaction, but requires valid credentials with at least low-level privileges (CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:H, base 7.6), meaning an attacker must already be able to submit SQL to the Executor. There is no confirmed active exploitation (CISA KEV) and no public exploit identified at time of analysis; the exposure is further limited because HPE NonStop is a specialized fault-tolerant platform rather than a commodity database, so this is a moderate-priority issue rather than an urgent one.
Stack-based buffer overflow in HPE NonStop TELSERV versions T9553L01^BAJ and earlier allows remote, unauthenticated attackers to corrupt memory and crash the service, causing a denial of service. The flaw is network-reachable with low complexity and requires no authentication or user interaction per the CVSS vector (PR:N/UI:N), so any party able to open a TELSERV session can attempt the overflow. No public exploit identified at time of analysis, and the impact is limited to availability - no code execution or data disclosure is described.
Stack-based memory corruption in the HPE NonStop SNMP Trap Multiplexer (T1041L01^BAA and earlier) lets remote, unauthenticated attackers crash the trap-handling service, producing a denial-of-service condition on the SNMP trap collection path. The assessed CVSS 3.1 vector (AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H, base 7.5) confirms network reachability with no authentication, privileges, or user interaction required, but limits impact strictly to availability - there is no assessed loss of confidentiality or integrity, so code execution or data disclosure is not established by the available evidence. No public exploit code or confirmed active exploitation was identified at time of analysis, and no EPSS score was supplied; the practical risk is therefore a remotely triggerable service crash on a specialized, typically network-segmented platform.
An unauthenticated stack-based buffer overflow in the Boa web server embedded in Netcore NR256CN firmware through 1.5.140116 lets remote attackers crash the router's main Boa process - and potentially execute code - by sending an HTTP Basic-auth username longer than 63 bytes to any password-protected /router/*.cgi route. The defect lives in the pre-authentication user_ok() handler, where Basic-auth usernames are copied with unbounded strcpy() into a fixed 64-byte stack buffer, so exploitation requires no credentials and no user interaction; the practical risk is governed almost entirely by exposure, since the attacker must be able to reach the device's HTTP management interface (far more dangerous when it faces the WAN, far less so when confined to the LAN). Per available data there is no confirmed active exploitation in CISA KEV and no public exploit code identified at time of analysis, but the zero-prerequisite access path and the network-facing attack vector make this a high-priority issue for any NR256CN with an internet-reachable admin UI.
Remote code execution in Microsoft Word affects Microsoft 365 Apps for Enterprise, Office LTSC 2021/2024, and Office for Mac/LTSC for Mac editions, allowing an unauthenticated attacker to execute arbitrary code by convincing a victim to open a specially crafted document (UI:R). The stack-based buffer overflow (CWE-121) requires no privileges or non-default configuration (PR:N, AC:L), making it a high-priority target for social-engineering campaigns, though no public exploit code has been identified at time of analysis. Patch available per vendor advisory from the Microsoft Security Response Center.
Stack-based buffer overflow in Microsoft Word permits remote code execution in affected Microsoft 365 Apps for Enterprise, Microsoft Office 365 for Mac, and Office LTSC 2021/2024 (including Mac editions) when a victim opens a maliciously crafted document. The vulnerability is unauthenticated from the attacker's perspective but requires user interaction (UI:R), so delivery typically depends on phishing or social engineering, and no public exploit identified at time of analysis or CISA KEV confirmation is available in the provided data. Patch available per vendor advisory via Microsoft's MSRC update guide.
Remote code execution in Microsoft Word affects Microsoft 365 Apps for Enterprise, Office LTSC 2021 and 2024, Office LTSC for Mac 2021 and 2024, and Office 365 for Mac when a user opens or previews a specially crafted document. The flaw is a stack-based buffer overflow (CWE-121) rated 8.8, reachable by unauthenticated remote attackers with PR:N but requiring user interaction with UI:R; successful exploitation yields code execution with the victim user’s privileges. A vendor patch is available, and no public exploit has been identified at time of analysis.
A stack-based buffer overflow in HPE NonStop XABroker can corrupt memory and terminate the broker process, handing an attacker who already holds a valid low-privilege account on the NonStop host a local denial-of-service primitive against a core system service. Exploitation is constrained: the CVSS vector (CVSS:3.1/AV:L/AC:L/PR:L/UI:R) confirms the attack is local, requires an authenticated low-privilege account, and needs a separate user action to deliver or process the crafted input, with our independent assessment narrowing the impact to availability only (S:U/C:N/I:N/A:H) rather than the confidentiality and integrity loss implied by the vendor-published score. There is no public exploit identified at time of analysis, no CISA KEV listing, and no EPSS data supplied, so this rates as a moderate, availability-focused issue that matters most in environments where untrusted or semi-trusted users already have NonStop logon rights.
A stack-based buffer overflow in HPE NonStop ODBC/MX Server (CWE-121) allows a local attacker with valid low-privileged credentials and user interaction to corrupt memory, potentially causing an application crash and denial of service. The assessed CVSS vector (AV:L/AC:L/PR:L/UI:R/S:U/C:L/I:L/A:H) indicates local access, authentication, and user interaction are required, and the impact is confined to service disruption rather than confirmed code execution. No public exploit code or active exploitation has been identified at time of analysis.
HPE NonStop ODBC/MX Services contains a stack-based buffer overflow (CWE-121) that allows a locally authenticated attacker with low privileges to crash the application via crafted input, provided a user action is performed. The vulnerability is not remotely exploitable and requires user interaction; no public exploit was identified at time of analysis. Per independent assessment, the impact is limited to availability (application crash), with no confirmed confidentiality or integrity impact.
Stack buffer overflow in the HPE NonStop SQL/MX Executor allows an authenticated remote user to trigger memory corruption, yielding partial information disclosure and a high-availability impact in the form of a process crash. The flaw is reachable over the network with low attack complexity and no user interaction, but requires valid credentials with at least low-level privileges (CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:H, base 7.6), meaning an attacker must already be able to submit SQL to the Executor. There is no confirmed active exploitation (CISA KEV) and no public exploit identified at time of analysis; the exposure is further limited because HPE NonStop is a specialized fault-tolerant platform rather than a commodity database, so this is a moderate-priority issue rather than an urgent one.
Stack-based buffer overflow in HPE NonStop TELSERV versions T9553L01^BAJ and earlier allows remote, unauthenticated attackers to corrupt memory and crash the service, causing a denial of service. The flaw is network-reachable with low complexity and requires no authentication or user interaction per the CVSS vector (PR:N/UI:N), so any party able to open a TELSERV session can attempt the overflow. No public exploit identified at time of analysis, and the impact is limited to availability - no code execution or data disclosure is described.
Stack-based memory corruption in the HPE NonStop SNMP Trap Multiplexer (T1041L01^BAA and earlier) lets remote, unauthenticated attackers crash the trap-handling service, producing a denial-of-service condition on the SNMP trap collection path. The assessed CVSS 3.1 vector (AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H, base 7.5) confirms network reachability with no authentication, privileges, or user interaction required, but limits impact strictly to availability - there is no assessed loss of confidentiality or integrity, so code execution or data disclosure is not established by the available evidence. No public exploit code or confirmed active exploitation was identified at time of analysis, and no EPSS score was supplied; the practical risk is therefore a remotely triggerable service crash on a specialized, typically network-segmented platform.