A stack-based buffer overflow condition exists in WOSDeviceDropFolder.dll when processing a long URL path starting with /resources:

A stack-based buffer overflow vulnerability has been identified in WOSDeviceDropFolder.dll when processing long URL paths starting with /resources:. This vulnerability could potentially allow attackers to execute arbitrary code or cause denial of service conditions. The vulnerability is documented as CVE-2026-8363 and has been assigned a high criticality rating. Additional research details are available from Tenable Security Research.