PatchTheCVE: hashcathttps://patchthecve.com/CVEs with upgrade or downgrade fix stepsCVE-2026-42484: A heap-based buffer overflow in hex_to_binary in the PKZIP hash parser in hashcat v7.1.2 allows an attacker tohttps://patchthecve.com/cve/CVE-2026-42484.htmlhttps://patchthecve.com/cve/CVE-2026-42484.htmlWed, 17 Jun 2026 10:47:55 +0000CRITICAL 9.8: A heap-based buffer overflow in hex_to_binary in the PKZIP hash parser in hashcat v7.1.2 allows an attacker to cause a denial of service or possibly execute arbitrary code via a crafted PKZIP hash file. The issue affects modules 17200, 17210, 17220, 17225, and 17230. When data_type_enum<=1, attackerCVE-2026-42483: A heap-based buffer overflow in the Kerberos hash parser in hashcat v7.1.2 allows an attacker to cause a deniahttps://patchthecve.com/cve/CVE-2026-42483.htmlhttps://patchthecve.com/cve/CVE-2026-42483.htmlWed, 17 Jun 2026 10:47:55 +0000CRITICAL 9.8: A heap-based buffer overflow in the Kerberos hash parser in hashcat v7.1.2 allows an attacker to cause a denial of service or possibly execute arbitrary code via a crafted Kerberos hash file. The issue affects module_hash_decode in multiple Kerberos-related modules because account_info_len is calculCVE-2026-42482: A stack-based buffer overflow in mangle_to_hex_lower() and mangle_to_hex_upper() in src/rp_cpu.c in hashcat v7https://patchthecve.com/cve/CVE-2026-42482.htmlhttps://patchthecve.com/cve/CVE-2026-42482.htmlWed, 17 Jun 2026 10:47:55 +0000CRITICAL 9.8: A stack-based buffer overflow in mangle_to_hex_lower() and mangle_to_hex_upper() in src/rp_cpu.c in hashcat v7.1.2 allows an attacker to cause a denial of service or possibly execute arbitrary code via a crafted rule file, or via the -j or -k rule options used with password candidates of 128 or more