2736 matches found
EUVD-2026-77629
The Zephyr SDIO subsystem function sdioiorwextendedhelper in subsys/sd/sdio.c finishes transfers with a byte-I/O loop that uses size = MINremaining, func-cis.maxblksize as the per-iteration step. The value func-cis.maxblksize is decoded directly from the SDIO card's CIS FUNCE tuple in sdiodecodec...
CVE-2026-15923 Infinite loop denial of service in Zephyr SDIO byte-I/O from a card-supplied zero max_blk_size
The Zephyr SDIO subsystem function sdioiorwextendedhelper in subsys/sd/sdio.c finishes transfers with a byte-I/O loop that uses size = MINremaining, func-cis.maxblksize as the per-iteration step. The value func-cis.maxblksize is decoded directly from the SDIO card's CIS FUNCE tuple in sdiodecodec...
CVE-2026-15923 Infinite loop denial of service in Zephyr SDIO byte-I/O from a card-supplied zero max_blk_size
The Zephyr SDIO subsystem function sdioiorwextendedhelper in subsys/sd/sdio.c finishes transfers with a byte-I/O loop that uses size = MINremaining, func-cis.maxblksize as the per-iteration step. The value func-cis.maxblksize is decoded directly from the SDIO card's CIS FUNCE tuple in sdiodecodec...
Astra Linux – Vulnerability in golang-golang-x-net
An attacker can cause excessive memory usage in a Go server that accepts HTTP/2 requests. HTTP/2 server connections include a cache of HTTP header keys sent by the client. Although the total number of entries in this cache is limited, an attacker who sends very large keys can cause the server to...
CVE-2026-90692
CVE-2026-90692 affects the D-Link DIR-878 router (firmware 120B05 ). The vulnerability resides in the SetDynamicDNSIPv6Settings function within the Dynamic DNS IPv6 Settings component, where manipulation of the IPv6Address/Hostname argument leads to a stack-based buffer overflow . The attack can ...
PT-2026-91031
A vulnerability was detected in GH05TCREW PentestAgent up to cf882dabea3ed91cef016cdd115e5426315665a2. This vulnerability affects the function run task of the file interface/main.py of the component MCP HTTP Server. Performing a manipulation results in os command injection. The attack is possible...
MiracleLinux 9 : glib2-2.68.4-19.el9_8.10 (AXSA:2026-1820:16)
The remote MiracleLinux 9 host has packages installed that are affected by a vulnerability as referenced in the AXSA:2026-1820:16 advisory. xdgmime: heap-based buffer overflow in xdgmimemagicparsemagicline in xdgmimemagic.c CVE-2026-16118 Tenable has extracted the preceding description block...
CVE-2026-90580
FlowiseAI Flowise (up to version 3.0.2) contains a server-side request forgery (SSRF) vulnerability in the Evaluations Endpoint . The flaw resides in the axios.post function within packages/server/src/controllers/evaluations/index.ts, where manipulation of the Host or X-Forwarded-Proto header all...
Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: vim (UTSA-2022-000378)
The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2022-000378 advisory. Use After Free in GitHub repository vim/vim prior to 9.0.0490. Tenable has extracted the preceding description block directly from the Unity Linux security advisory...
Fedora 45 : python-asteval (2026-79e569db98)
The remote Fedora 45 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2026-79e569db98 advisory. Update to 1.0.10 Resolves: rhbz2413249 Tenable has extracted the preceding description block directly from the Fedora security advisory. Note that Nessus has...
Oracle Linux 9 : ELSA-2026-64800-0: / glib2 (ELSA-2026-648000)
The remote Oracle Linux 9 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2026-648000 advisory. 2.68.4-19.10 - Fix CVE-2026-16118: heap-buffer-overflow in xdgmimemagic.c Tenable has extracted the preceding description block directly from the Oracle Linux...
CVE-2026-78439
Stack-based buffer overflow in Microsoft Graphics Component allows an unauthorized attacker to execute code over a network...
CVE-2026-77489
Null pointer dereference in Windows Biometric Service allows an authorized attacker to elevate privileges locally...
EUVD-2026-73241
Heap-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code over a network...
EUVD-2026-73047
Use after free in Windows TCP/IP allows an authorized attacker to elevate privileges over a network...
CVE-2026-69875
CVE-2026-69875 is a heap-based buffer overflow in Windows NTFS that allows an authorized attacker (low privileges, user interaction required) to elevate privileges over a network . The vulnerability carries a CVSS 3.1 score of 8.0 (HIGH) with impacts of High across confidentiality, integrity, and...
EUVD-2026-73041
Untrusted pointer dereference in Windows Group Policy allows an authorized attacker to elevate privileges over a network...
CVE-2026-69491
CVE-2026-69491 is a heap-based buffer overflow in Windows Microsoft DirectMusic that allows an unauthorized, network-based attacker to achieve remote code execution without user interaction or prior privileges. The vulnerability is rated CVSS 9.8 (Critical) with high impact to confidentiality, in...
