PatchTheCVE: rumbahttps://patchthecve.com/CVEs with upgrade or downgrade fix stepsCVE-2016-9176: Stack buffer overflow in the send.exe and receive.exe components of Micro Focus Rumba 9.4 and earlier could behttps://patchthecve.com/cve/CVE-2016-9176.htmlhttps://patchthecve.com/cve/CVE-2016-9176.htmlWed, 17 Jun 2026 00:55:37 +0000CRITICAL 9.8: Stack buffer overflow in the send.exe and receive.exe components of Micro Focus Rumba 9.4 and earlier could be used by local attackers or attackers able to inject arguments to these binaries to execute code.CVE-2016-5228: Stack-based buffer overflow in the PlayMacro function in ObjectXMacro.ObjectXMacro in WdMacCtl.ocx in Micro Fohttps://patchthecve.com/cve/CVE-2016-5228.htmlhttps://patchthecve.com/cve/CVE-2016-5228.htmlWed, 17 Jun 2026 00:49:00 +0000CRITICAL 9.8: Stack-based buffer overflow in the PlayMacro function in ObjectXMacro.ObjectXMacro in WdMacCtl.ocx in Micro Focus Rumba 9.x before 9.3 HF 11997 and 9.4.x before 9.4 HF 12815 allows remote attackers to execute arbitrary code via a long MacroName argument. NOTE: some references mention CVE-2016-5226 bCVE-2016-1606: Multiple stack-based buffer overflows in COM objects in Micro Focus Rumba 9.4.x before 9.4 HF 13960 allow remohttps://patchthecve.com/cve/CVE-2016-1606.htmlhttps://patchthecve.com/cve/CVE-2016-1606.htmlWed, 17 Jun 2026 00:42:14 +0000CRITICAL 9.8: Multiple stack-based buffer overflows in COM objects in Micro Focus Rumba 9.4.x before 9.4 HF 13960 allow remote attackers to execute arbitrary code via (1) the NetworkName property value to ObjectXSNAConfig.ObjectXSNAConfig in iconfig.dll, (2) the CPName property value to ObjectXSNAConfig.ObjectXSNCVE-2005-0979: Multiple buffer overflows in RUMBA 7.3 and earlier allow remote attackers to cause a denial of service and poshttps://patchthecve.com/cve/CVE-2005-0979.htmlhttps://patchthecve.com/cve/CVE-2005-0979.htmlTue, 16 Jun 2026 22:12:09 +0000HIGH 7.5: Multiple buffer overflows in RUMBA 7.3 and earlier allow remote attackers to cause a denial of service and possibly execute arbitrary code via crafted values in a profile file, as demonstrated using a long SysName field.