Uncontrolled Recursion

Overview Affected versions of this package are vulnerable to Uncontrolled Recursion through the processing of XML data in cryptographic operations. An attacker can cause excessive resource consumption and application unavailability by submitting specially crafted XML input that triggers...

Uncontrolled Recursion

Overview Affected versions of this package are vulnerable to Uncontrolled Recursion through the processing of XML data in cryptographic operations. An attacker can cause excessive resource consumption and application unavailability by submitting specially crafted XML input that triggers...

Uncontrolled Recursion

Overview Affected versions of this package are vulnerable to Uncontrolled Recursion through the processing of XML data in cryptographic operations. An attacker can cause excessive resource consumption and application unavailability by submitting specially crafted XML input that triggers...

Uncontrolled Recursion

Overview Affected versions of this package are vulnerable to Uncontrolled Recursion through the processing of XML data in cryptographic operations. An attacker can cause excessive resource consumption and application unavailability by submitting specially crafted XML input that triggers...

Uncontrolled Recursion

Overview Affected versions of this package are vulnerable to Uncontrolled Recursion through the processing of XML data in cryptographic operations. An attacker can cause excessive resource consumption and application unavailability by submitting specially crafted XML input that triggers...

Uncontrolled Recursion

Overview Affected versions of this package are vulnerable to Uncontrolled Recursion through the processing of XML data in cryptographic operations. An attacker can cause excessive resource consumption and application unavailability by submitting specially crafted XML input that triggers...

Uncontrolled Recursion

Overview Affected versions of this package are vulnerable to Uncontrolled Recursion through the processing of XML data in cryptographic operations. An attacker can cause excessive resource consumption and application unavailability by submitting specially crafted XML input that triggers...

Uncontrolled Recursion

Overview Affected versions of this package are vulnerable to Uncontrolled Recursion through the processing of XML data in cryptographic operations. An attacker can cause excessive resource consumption and application unavailability by submitting specially crafted XML input that triggers...

MAL-2026-17862 Malicious code in fontcase (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 9e2c4992e5295f2b094f3c7c2b2e6c2dbc8d0d9ca6242d58318e6e1b83a4255c During import, the package downloads and executes an infostealer. --- Category: MALICIOUS - The campaign has clearly malicious intent, like infostealers...

CVE-2026-104252

The Vitess database clustering system is vulnerable to a reflected XSS attack in the twopczHandler located in go/vt/vttablet/tabletserver/twopcz.go (prior to versions 23.0.5 and 24.0.2 ). The root cause is the lack of HTML escaping when writing Action and dtid form values from the /twopcz HTTP de...

GnuPG: Incorrect cryptographic message parsing

A flaw in GnuPG's gpgsm component improperly handles the Cryptographic Message Syntax CMS format for AES-GCM. By accepting an authentication tag length of 4 bytes instead of the required 12 bytes, this vulnerability allows for a low-impact data integrity issue where the cryptographic validity of...

CVE-2026-83870

Out-of-bounds read in Windows Aggregated Data Platform Service allows an authorized attacker to disclose information locally...

CVE-2026-83639

Heap-based buffer overflow in Windows Sensor Data Service allows an authorized attacker to elevate privileges locally...

CVE-2026-70261

Exposure of sensitive system information to an unauthorized control sphere in Microsoft Trace Data Helper allows an authorized attacker to disclose information locally...

CVE-2026-70260

Exposure of sensitive system information to an unauthorized control sphere in Microsoft Trace Data Helper allows an authorized attacker to disclose information locally...

CVE-2026-110036

A flaw was found in device-mapper-persistent-data. A local attacker can cause a Denial of Service DoS by inducing a user or system tool to process crafted device metadata containing an excessively large block index. An arithmetic error in the synchronous block reading logic causes the application...

CVE-2026-70260

The Microsoft Trace Data Helper component is vulnerable to an information disclosure flaw (CWE-497) that allows an authorized attacker to disclose sensitive system information locally. The vulnerability results from exposure to an unauthorized control sphere. The CVSS 3.1 score is 5.5 (Medium) , ...

CVE-2026-70261

The Microsoft Trace Data Helper component is affected by a vulnerability that allows an authorized attacker to disclose sensitive system information locally. This issue is categorized as CWE-497 (Exposure of Sensitive System Information to an Unauthorized Control Sphere). The vulnerability has a ...

CVE-2026-83870

The Windows Aggregated Data Platform Service is susceptible to an out-of-bounds read vulnerability (CWE-125). This flaw allows an authorized attacker to perform a local information disclosure , potentially exposing sensitive data. The vulnerability has a CVSS 3.1 base score of 5.5 (Medium). No sp...

CVE-2026-83639

A heap-based buffer overflow vulnerability exists in the Windows Sensor Data Service . This flaw allows an authorized attacker to achieve local privilege escalation . While the CVSS 3.1 score of 7.8 indicates a high severity, specific exploitation details or in-the-wild occurrences are not provid...