CVE-2026-68365

A flaw was found in the Linux kernel's ioedgeport USB serial driver. The driver fails to properly cap the transmit credits received from a connected USB device. This can lead to the txCredits value exceeding the allocated buffer size. A malicious USB device could leverage this vulnerability to...

CVE-2026-68401

A flaw was found in the ARM Firmware Framework for Arm FFA driver within the Linux kernel. This vulnerability, specifically in the ffasetupandtransmit function, allows for out-of-bounds writes due to incorrect size handling when writing to memory descriptors and constituents. An attacker could...

CVE-2026-25194

Out-of-bounds write in the firmware for the IntelR Slim Bootloader may allow a denial of service. System software adversary with a privileged user combined with a low complexity attack may enable denial of service. This result may potentially occur via local access when attack requirements are...

CVE-2026-25194

CVE-2026-25194 affects the Intel Slim Bootloader firmware. The issue is an out-of-bounds write in the bootloader firmware that can lead to a denial of service. Exploitation requires a local attacker with privileged access and low attack complexity, with no user interaction. The impact is limited ...

CVE-2026-25194

Out-of-bounds write in the firmware for the IntelR Slim Bootloader may allow a denial of service. System software adversary with a privileged user combined with a low complexity attack may enable denial of service. This result may potentially occur via local access when attack requirements are...

EUVD-2026-56521

Out-of-bounds write in the firmware for the IntelR Slim Bootloader may allow a denial of service. System software adversary with a privileged user combined with a low complexity attack may enable denial of service. This result may potentially occur via local access when attack requirements are...

CVE-2026-20886

Out-of-bounds write for some IntelR PROSet/Wireless WiFi Software for Windows within Ring 2: Device Drivers may allow a denial of service. Network adversary with an unauthenticated user combined with a low complexity attack may enable denial of service. This result may potentially occur via...

EUVD-2026-56506

Out-of-bounds write for some IntelR PROSet/Wireless WiFi Software for Windows within Ring 2: Device Drivers may allow a denial of service. Network adversary with an unauthenticated user combined with a low complexity attack may enable denial of service. This result may potentially occur via...

CVE-2026-20886

An out-of-bounds write in the Ring 2 Device Drivers component of some Intel PROSet/Wireless WiFi Software for Windows versions may allow an adjacent, unauthenticated network adversary to trigger a denial of service . The attack requires low complexity and passive user interaction , with no specia...

EUVD-2026-56484

Out-of-bounds write for some IntelR PROSet/Wireless WiFi Software for Windows within Ring 2: Device Drivers may allow a denial of service. Network adversary with an unauthenticated user combined with a low complexity attack may enable denial of service. This result may potentially occur via...

CVE-2026-20745

The CVE-2026-20745 entry describes an out-of-bounds write affecting Intel PROSet/Wireless WiFi Software for Windows, specifically within Ring 2: Device Drivers. The vulnerability could allow a denial of service by an unauthenticated network-adjacent attacker with low complexity and no user intera...

CVE-2026-20745

Out-of-bounds write for some IntelR PROSet/Wireless WiFi Software for Windows within Ring 2: Device Drivers may allow a denial of service. Network adversary with an unauthenticated user combined with a low complexity attack may enable denial of service. This result may potentially occur via...

CVE-2026-73075

Vim is an open source, command line text editor. From 9.2.0469 until 9.2.0843, popupmarkopacityzindex in src/popupwin.c can use a negative wwinrow for a text-property-anchored popup with clipwindow and opacity, indexing before the screen array instead of accounting for wpopuptopoff and causing an...

UBUNTU-CVE-2026-73074

Vim is an open source, command line text editor. Prior to 9.2.0841, propaddone in src/textprop.c uses the proplen value from gettextprops to increment a uint16t property count beyond 0xffff, wrapping the count to zero and copying existing text-property records into a heap allocation sized for non...

CVE-2026-68124

A flaw was found in the Linux kernel's Message Control Transport Protocol MCTP serial driver. The driver's receive state machine incorrectly handles zero-length frames, leading to an out-of-bounds write. A local attacker with CAPNETADMIN capabilities can exploit this vulnerability by sending...

EUVD-2026-56226

Vim is an open source, command line text editor. Prior to 9.2.0846, setsofo in src/spellfile.c reuses slsalfirst without resetting values left by setsalfirst, so a crafted spell file containing an SNSAL section before an SNSOFO section causes under-counted mapping lists and attacker-influenced...

CVE-2026-73066

Tesseract is an open source OCR engine. Prior to 5.5.3, a crafted .traineddata LSTM model component loaded through Tesseract's deserializer can cause an unchecked signed integer multiplication in Convolve::DeSerialize in src/lstm/convolve.cpp to wrap the convolution output-channel count,...

UBUNTU-CVE-2026-73066

Tesseract is an open source OCR engine. Prior to 5.5.3, a crafted .traineddata LSTM model component loaded through Tesseract's deserializer can cause an unchecked signed integer multiplication in Convolve::DeSerialize in src/lstm/convolve.cpp to wrap the convolution output-channel count,...

CVE-2026-19162

A flaw was found in V8, the JavaScript engine used in Google Chrome. This out-of-bounds write vulnerability allows a remote attacker to execute arbitrary code within the browser's sandbox environment. Exploitation occurs when a user visits a specially crafted HTML page. This could lead to...

CVE-2026-19148

A flaw was found in the GPU component of Google Chrome on Linux. A remote attacker, who has already compromised the renderer process, could exploit an out-of-bounds write vulnerability by tricking a user into visiting a specially crafted HTML page. This could potentially allow the attacker to...