PULSEUnderground Intel

EN VIVO29señales / 24h

FEED

ransomkrybit reclama a www.choicegoodwill.com · US · Retail & E-Commerceransomkrybit reclama a mainplace.com.my · MY · Retail & E-Commerceransomkrybit reclama a MODON Developments S.A.E · EG · Manufacturingransomkrybit reclama a www.zhservices.com · Professional Servicesransomkrybit reclama a grupoeuro.com.mx · MX · Manufacturingransomkrybit reclama a www.optika.ca · CA · Technologyransomn0n reclama a Texcar Inc. · Manufacturingransomn0n reclama a GPIC Projectos Con Instalacoes Lda · PT · Manufacturingransomn0n reclama a Asisken Asistencia Médica S.A. · AR · Healthcareransomn0n reclama a Adirondack Networks, Inc. · US · Technologyransomn0n reclama a Arthritis Center of Riverside · US · Healthcareransomthegentlemen reclama a Red Oak Technologies · US · Technologyransomthegentlemen reclama a Penco Products · US · Manufacturingransomthegentlemen reclama a Conax Technologies · NO · Technologyransomkrybit reclama a www.choicegoodwill.com · US · Retail & E-Commerceransomkrybit reclama a mainplace.com.my · MY · Retail & E-Commerceransomkrybit reclama a MODON Developments S.A.E · EG · Manufacturingransomkrybit reclama a www.zhservices.com · Professional Servicesransomkrybit reclama a grupoeuro.com.mx · MX · Manufacturingransomkrybit reclama a www.optika.ca · CA · Technologyransomn0n reclama a Texcar Inc. · Manufacturingransomn0n reclama a GPIC Projectos Con Instalacoes Lda · PT · Manufacturingransomn0n reclama a Asisken Asistencia Médica S.A. · AR · Healthcareransomn0n reclama a Adirondack Networks, Inc. · US · Technologyransomn0n reclama a Arthritis Center of Riverside · US · Healthcareransomthegentlemen reclama a Red Oak Technologies · US · Technologyransomthegentlemen reclama a Penco Products · US · Manufacturingransomthegentlemen reclama a Conax Technologies · NO · Technology

← Todos los CVEs

CVE Watch7 oct 2026

CVE-2025-7019

Stack overflow vulnerability in Avast Antivirus when scanning a malformed Office Open XML file may allow Denial-of-Service of the antivirus

CVSS

5.5

Medio

EPSS

0.1%

p1

KEV

—

Exploit Today

0

0-100

Publicado: 12 jun 2026 · Última mod.: 7 oct 2026 · CWE-121

EPSS · 30d

0.1%EPSS · 30 días0.1%

2026-09-252026-10-23

Descripción técnica

Stack overflow vulnerability in Avast Antivirus when scanning a malformed Office Open XML file may allow Denial-of-Service of the antivirus process. This issue affects Avast Antivirus, AVG Antivirus, Norton Antivirus, Avast One, and Avast Business Antivirus on Windows, macOS, and Linux for virus definition builds before VPS 25020100. The affected scanning logic is delivered through a shared Gen Digital virus definition update stream. The same stream feeds the consumer antivirus products listed in this advisory and other Gen Digital products that embed the same engine. Mitigation flows through this update channel; installations at or above the listed build are not vulnerable regardless of which product consumes the stream.

Referencias oficiales

www.gendigital.comhttps://www.gendigital.com/us/en/contact-us/security-advisories/

CVEs relacionados

CVECVSSEPSSKEVRExplotTítuloVis.

CVE-2026-1158637.6 ALT

——0ConnMan through 2.0 has a stack-based buffer overflow via a DHCPv6 Reply message. This occurs in get_domains in gdhcp/client.c. It copies a fixed NS_MAXDNAME (1025) bytes from a DHCPv6 DOMAIN_LIST (option 24) value into a 1026-byte stack buffer dns_name regardless of the actual option length, then walks DNS labels with an unbounded "c += jump + 1" loop. A crafted DHCPv6 REPLY with a DOMAIN_LIST option of >= 1025 non-zero bytes makes the label walk leave the buffer and read/write '.' past its end in attacker-chosen strides. An on-link attacker can trigger this without authentication via a forged Router Advertisement (O=1) and a forged DHCPv6 REPLY matching xid/CLIENTID with a long DOMAIN_LIST. The impact is unauthenticated on-link crash of connmand (runs as root). This was introduced in bb06c47.21h CVE-2026-539219.8 CRÍ

——0odhcpd is the DHCPv6, DHCPv4, and router-advertisement server used by OpenWrt. Prior to version 25.12, odhcpd's DHCPv6 IA response handler writes past the end of a fixed 512-byte stack buffer (pdbuf) when a single DHCPv6 REQUEST carries enough IA options to nearly exhaust the reply space. Two independent overflow sites exist in the same call chain, both reachable from the network via a single unauthenticated UDP packet. odhcpd runs as root on OpenWrt; embedded targets often lack stack canaries and ASLR, making code execution realistic. This issue has been patched in version 25.12.21h CVE-2026-961857.5 ALT

——13Stack-based buffer overflow in Microsoft Exchange Online allows an authorized attacker to execute code over a network.13h CVE-2026-94502—

——4In EmberZNet 9.1.1 and earlier, a malformed Publish Price Matrix command can result in an out-of-bounds write potentially leading to remote code execution. These messages must come from a device that has already joined the network. Only devices supporting the Price Cluster are impacted.1d CVE-2026-85080—

——8In EmberZNet 9.1.1 and earlier, a malformed GetGroupMembership message can result in an out-of-bounds write leading to a crash. A limited number of values can be written using this vulnerability, so no route to remote code execution was observed. These messages must come from a device that has already joined the network. Only devices supporting the Group Cluster are impacted.1d CVE-2026-85079—

——7In EmberZNet 9.1.1 and earlier, a malformed Simple_Desc_req response can result in an out-of-bounds write potentially leading to remote code execution. This response must come from a device that has already joined the network, and the attacker must wait for a Simple_Desc_req before the attack can be performed.2d