ThreatVectr
Tag

#buffer overflow

7 stories taggedbuffer overflow.

Illustration: a dimly lit industrial control room at a water treatment facility
Vulnerabilities

A 9.8-severity hole in industrial email code puts water and energy gear at risk

A buffer overflow in the lwIP SMTP client could let an unauthenticated attacker crash or hijack equipment running in energy and water systems. A patch is available.

3 min read
Illustration: a rack-mounted network switch in a dim server room, front panel activity LEDs glowing amber and green
Vulnerabilities

CISA gives federal agencies three days to patch a Zyxel switch bug already being used in attacks

CVE-2026-7273 lets anyone on the local network hijack GS1900 switches with a single crafted web request. Federal deadline: 24 September 2026.

3 min read
Browser windows for both Firefox and Chrome open side-by-side, each displaying security update notifications with patch notes listing dozens of vulnerability fi
Vulnerabilities

Firefox and Chrome Rush Out Patches for Dozens of Security Flaws

Mozilla fixed 58 vulnerabilities in Firefox 154, while Google addressed 15 in Chrome 151, including two critical bugs that could let attackers run malicious code on your device.

3 min read
A video conferencing window with annotation tools highlighted as the attack vector, malicious code execution path visible flowing from the annotation feature to
Vulnerabilities

Zoom Had a Flaw That Let Hackers Take Over Your Computer During a Meeting, Without You Clicking Anything

A vulnerability in Zoom's annotation feature gave attackers a direct path to run code on any participant's machine. Patches are out now.

3 min read
Illustration: A home Wi-Fi router sitting on a shelf
Vulnerabilities

OpenWrt Ships Emergency Fix for Critical Router Flaw That Hands Attackers Full Control

A single crafted network request could let an intruder take over routers running vulnerable OpenWrt builds, before anyone logs in.

4 min read
Illustration: a laptop screen showing a generic file-archive dialog with a compressed folder icon highlighted
Vulnerabilities

7-Zip Ships Emergency Fix for Flaw That Lets Booby-Trapped Archives Run Code

Version 26.02 patches a heap buffer overflow in XZ decompression. There is no auto-update, so users have to grab it themselves.

3 min read
Illustration: a modern black IP conference phone sitting on a polished corporate boardroom table
Vulnerabilities

Root on Your Conference Phone: HP Poly Flaw Turns VoIP Hardware Into an AI Deepfake Feed

A CVSS 9.2 stack overflow in HP Poly's ICE implementation hands attackers unauthenticated root and a front-row seat to every executive call.

3 min read
© 2026 Threat Vectr