53491 matches found
CVE-2026-98568
A flaw was found in the Linux kernel's VXLAN Virtual Extensible LAN networking module. A race condition can occur when link properties are modified while neighbour advertisement reply packets are being processed, leading to inconsistent buffer size calculations. A local attacker could exploit thi...
CVE-2026-86981
An out-of-bounds write issue exists in macOS that can cause an application to trigger an unexpected system termination . The vulnerability was addressed by implementing improved bounds checking . This issue is fixed in macOS Sequoia 15.8 and macOS Tahoe 26.7 . No specific exploit or in-the-wild e...
CVE-2026-86981
An out-of-bounds write issue was addressed with improved bounds checking. This issue is fixed in macOS Sequoia 15.8, macOS Tahoe 26.7. An app may be able to cause unexpected system termination...
CVE-2026-86953
An out-of-bounds write issue exists in several Apple products, specifically affecting iOS 27 , iPadOS 27 , macOS Golden Gate 27 , tvOS 27 , visionOS 27 , and watchOS 27 . The root cause was addressed through improved bounds checking . A malicious actor in physical proximity to the device may expl...
CVE-2026-86953
An out-of-bounds write issue was addressed with improved bounds checking. This issue is fixed in iOS 27 and iPadOS 27, macOS Golden Gate 27, tvOS 27, visionOS 27, watchOS 27. An attacker in physical proximity may be able to cause a denial-of-service...
CVE-2026-86944
An out-of-bounds write issue exists in several Apple operating systems. The root cause was addressed by implementing improved bounds checking . This vulnerability could allow an application to cause unexpected system termination . The issue is fixed in iOS 26.7 , iPadOS 26.7 , macOS Sequoia 15.8 ...
CVE-2026-86944
An out-of-bounds write issue was addressed with improved bounds checking. This issue is fixed in iOS 26.7 and iPadOS 26.7, macOS Sequoia 15.8, macOS Tahoe 26.7. An app may be able to cause unexpected system termination...
CVE-2026-86918
Several Apple operating systems, including iOS 27 , iPadOS 27 , macOS Golden Gate 27 , tvOS 27 , visionOS 27 , and watchOS 27 , were affected by an out-of-bounds write issue. The root cause is related to insufficient bounds checking during the processing of images. An attacker could potentially c...
CVE-2026-86918
An out-of-bounds write issue was addressed with improved bounds checking. This issue is fixed in iOS 27 and iPadOS 27, macOS Golden Gate 27, tvOS 27, visionOS 27, watchOS 27. Processing a maliciously crafted image may lead to unexpected app termination...
CVE-2026-84613
Apple released security updates addressing an out-of-bounds write issue caused by insufficient bounds checking. The vulnerability affects multiple operating systems, including iOS, iPadOS, macOS, tvOS, visionOS, and watchOS . An attacker within radio range could potentially trigger an unexpected ...
CVE-2026-84613
An out-of-bounds write issue was addressed with improved bounds checking. This issue is fixed in iOS 26.7 and iPadOS 26.7, iOS 27 and iPadOS 27, macOS Golden Gate 27, macOS Sequoia 15.8, macOS Tahoe 26.7, tvOS 27, visionOS 27, watchOS 27. An attacker in radio range may be able to cause unexpected...
EUVD-2026-104651
A flaw was found in GIMP. The PSD thumbnail resource loader performs a BGR-to-RGB channel swap with a fixed 3-byte stride and does not verify that the JPEG thumbnail is RGB. A crafted grayscale PSD thumbnail can cause a heap out-of-bounds read and write in the plug-in process, leading to a crash...
RLSA-2026:84744 Important: gimp:2.8 security update
The GIMP GNU Image Manipulation Program is an image composition and editing program. GIMP provides a large image manipulation toolbox, including channel operations and layers, effects, sub-pixel imaging and anti-aliasing, and conversions, all with multi-level undo. Security Fixes: gimp: gimp:...
gimp:2.8 security update
An update is available for pygobject2, pygtk2, module.pygobject2, python2-pycairo, module.python2-pycairo, module.pygtk2, module.gimp, gimp. This update affects Rocky Linux 8. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each...
BlueGate
BlueGate Proof of Concept Denial of Service + scanner for CVE-2020-0609 and CVE-2020-0610. These vulnerabilities allows an unauthenticated attacker to gain remote code execution with highest privileges via RD Gateway for RDP. Please use for research and educational purpose only. Usage Make sure y...
CVE-2017-7308
CVE-2017-7308 CVE ID: CVE-2017-7308 Publish date: 2017-03-29T20:59:00.373 Base score CVSS 3.0/3.1: 7.8 Description: The packetsetring function in net/packet/afpacket.c in the Linux kernel through 4.10.6 does not properly validate certain block-size data, which allows local users to cause a denial...
CVE-2022-0995
CVE-2022-0995 This is my exploit for CVE-2022-0995, an heap out-of-bounds write in the watchqueue Linux kernel component. It uses the same technique described in https://google.github.io/security-research/pocs/linux/cve-2021-22555/writeup.html. The exploit targets Ubuntu 21.10 with kernel...
CVE-2026-112257
A flaw was found in GIMP. The PSD thumbnail resource loader performs a BGR-to-RGB channel swap with a fixed 3-byte stride and does not verify that the JPEG thumbnail is RGB. A crafted grayscale PSD thumbnail can cause a heap out-of-bounds read and write in the plug-in process, leading to a crash...
CVE-2026-76788 Stack out-of-bounds write in the OSDP Control Panel reply parser
The OSDP Control Panel reply parser cpdecoderesponse in subsys/mgmt/osdp/src/osdpcp.c decodes replies from a Peripheral Device into a stack-allocated struct osdpevent. For the REPLYKEYPPAD and REPLYRAW reply types, the payload length is taken from the received frame and the only validation...
CVE-2026-76788
The Zephyr RTOS OSDP Control Panel reply parser contains a stack out-of-bounds write in cp_decode_response() within subsys/mgmt/osdp/src/osdp_cp.c. When processing REPLY_KEYPPAD or REPLY_RAW types, the parser fails to validate that the payload length stays within the fixed 64-byte OSDP_EVENT_MAX_...