- CVE-2026-111880: fix heap out-of-bounds write in NTLM MIC computation; validate the MIC offset against the AUTHENTICATE_MESSAGE length - CVE-2023-39354: fix out-of-bounds read in nsc_rle_decompress_data; check that the stream holds the declared plane lengths - CVE-2026-109244: winpr-makecert: create key and certificate files with owner-only permissions and use a random export password - CVE-2026-109257: NSCodec encoder: free plane buffers in one place to avoid a double free - CVE-2026-109677: smartcard: validate cbAtr against the rgbAtr size when unpacking LocateCardsByATR and reader states - CVE-2026-111377: server: abort static channel reassembly when fragments exceed the declared total size