Andrew Fasano

**Name of the Vulnerable Software and Affected Versions** Windows Kernel (affected versions not specified) **Description** A heap-based buffer overflow in the Windows Kernel allows an authorized local attacker to elevate their privileges to administrative levels. A heap-based buffer overflow occurs when a program writes more data to a heap-allocated memory block than it can hold, potentially corrupting adjacent memory. **Recommendations** At the moment, there is no information about a newer version that contains a fix for this vulnerability.

**Name of the Vulnerable Software and Affected Versions** dnsmasq (affected versions not specified) **Description** The `extract name()` function can be abused to cause a heap buffer overflow, a condition where data exceeds the allocated memory buffer on the heap. This allows an attacker to inject false DNS cache entries, potentially redirecting DNS lookups to an attacker-controlled IP address or causing a Denial of Service (DoS). **Recommendations** At the moment, there is no information about a newer version that contains a fix for this vulnerability.

**Name of the Vulnerable Software and Affected Versions** Versions prior to 2026-1301 **Description** A specially crafted JSON message can cause a heap overflow in the PubSub JSON decoder before authentication. This can lead to a process crash and memory corruption. The issue occurs in builds with PubSub and JSON enabled. **Recommendations** At the moment, there is no information about a newer version that contains a fix for this vulnerability.

**Name of the Vulnerable Software and Affected Versions** Exim versions prior to 4.99.1 **Description** Exim software contains a flaw that allows for remote heap corruption. Further details about this issue will be disclosed on 2025-12-18. **Recommendations** Update to version 4.99.1 or later.

**Name of the Vulnerable Software and Affected Versions** Intel Security VirusScan Enterprise Linux (VSEL) versions 2.0.3 and earlier **Description** The issue is related to improper control of code generation, allowing remote authenticated users to execute arbitrary code via a crafted HTTP request parameter. This can also lead to bypassing sandbox mechanisms or causing a denial of service through a specially crafted parameter in an HTTP request. **Recommendations** For versions 2.0.3 and earlier, update to a version later than 2.0.3 to resolve the issue. As a temporary workaround, consider restricting access to the HTTP request parameter to minimize the risk of exploitation.