Chromium: CVE-2026-78952 Out of bounds write in Crashpad

This CVE was assigned by Chrome. Microsoft Edge Chromium-based ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information...

cve-2017-5123

CVE-2017-5123 Questa repository contiene una dimostrazione di CVE-2017-5123 , un backdoor di comando e controllo via ICMP, e un'applicazione web vulnerabile CWE-78 OS Command Injection. Parte di CSC 4308 - Challenge 3. Prerequisiti Linux Kernel : dalla 4.13 fino alla ma esclusa 4.13.7 Node.js :...

CVE-2025-24201-WebKit-Vulnerability-Detector-PoC-

CVE-2025-24201 Rilevatore di vulnerabilità WebKit PoC Questo proof-of-concept rileva se un browser basato su WebKit è vulnerabile a CVE‑2025‑24201 , una vulnerabilità di scrittura fuori dai limiti ad alta gravità causata da una convalida non corretta delle capability nell'implementazione WebGL. 🔍...

CVE-2026-27280

Schreibfehler außerhalb der Grenzen in dngrendertask::ProcessArea Adobe DNG SDK / Android Erreichbar über eine gewöhnliche DNG-Datei durch Androids öffentliche Bilddecodierungs-API und reproduziert auf einem Galaxy S25 mit der eigenen/system/lib64/libdngsdk.so des Telefons. Verwundbar: DNG SDK...

CVE-2026-40013

An attacker that has valid credentials can submit a Sieve script containing an extreme numeric literal, which causes an out-of-bounds write when the ManageSieve service compiles the script. This causes memory corruption and an observed crash of the ManageSieve process, resulting in denial of...

CVE-2021-4034

Pwnkit-Schwachstelle - CVE-2021-4034 📗 Einführung Im Jahr 2021 entdeckt, aber im Januar 2022 angekündigt und veröffentlicht, wurde CVE-2021-4034 liebevoll Pwnkit genannt; es ist jedoch in allen Versionen des Policy Toolkit - Polkit-Pakets in praktisch allen Linux-Distributionen vorhanden. Kurz...

CVE-2025-32023

CVE-2025-32023 Remote Code Execution in Redis HyperLogLog-Operationen Zusammenfassung der Schwachstelle CVE-2025-32023 ist eine Remote Code Execution RCE -Schwachstelle in der Redis-Datenbank, die speziell die Verarbeitung von HyperLogLog-Datenstrukturoperationen betrifft. Dieser Fehler ermöglich...

CVE_2025_24257----NOT-MINE

🔧 CVE202524257----NOT-MINE - Windows PoC को सुरक्षित रूप से चलाएँ 🧾 अवलोकन CVE202524257----NOT-MINE एक Windows proof of concept है जो IOGPUFamily में एक kernel मेमोरी बग दिखाता है। यह bitmapmask underflow पर आधारित है जो kernel heap out-of-bounds write का कारण बन सकता है। यह प्रोजेक्ट इस समस्या स...

CVE-2026-40013

CVE-2026-40013 affects the ManageSieve service in Open-Xchange Dovecot. An attacker with valid credentials can submit a Sieve script containing an extreme numeric literal , triggering an out-of-bounds write during script compilation. This leads to memory corruption and a crash of the ManageSieve ...

CVE-2026-40013

An attacker that has valid credentials can submit a Sieve script containing an extreme numeric literal, which causes an out-of-bounds write when the ManageSieve service compiles the script. This causes memory corruption and an observed crash of the ManageSieve process, resulting in denial of...

EUVD-2026-67663

An attacker that has valid credentials can submit a Sieve script containing an extreme numeric literal, which causes an out-of-bounds write when the ManageSieve service compiles the script. This causes memory corruption and an observed crash of the ManageSieve process, resulting in denial of...

CVE-2021-41160

CVE-2021-41160 FreeRDP è un'implementazione libera del Remote Desktop Protocol RDP, rilasciata sotto licenza Apache. Nelle versioni interessate, un server malintenzionato potrebbe innescare scritture fuori dai limiti in un client connesso. Le connessioni che utilizzano GDI o SurfaceCommands per...

empty_list

emptylist - exploit per p0 issue 1564 CVE-2018-4243 kernel r/w iOS 11.0 - 11.3.1 @i41nbeer BUG: getvolattrlist accetta un argomento bufferSize controllato dall'utente tramite la syscall fgetattrlist. Quando si alloca un buffer del kernel per serializzare l'elenco degli attributi, c'è il seguente...

CVE-2026-18393

A flaw was found in FFmpeg. The tdscloadcursor function writes beyond the bounds of a heap-allocated buffer when processing crafted TDSC cursor data. A remote attacker could exploit this by supplying a specially crafted video file, potentially leading to a denial of service or arbitrary code...

CVE-2022-36752

Beschreibung für CVE-2022-36752 png2webp v1.0.4 weist nachweislich eine Out-of-Bounds-Schreiboperation über die Funktion w2p auf. Diese Schwachstelle ist über eine präparierte webp-Datei ausnutzbar, wenn das Format zurück in png konvertiert wird. Reproduktion Um die Schwachstelle zu reproduzieren...

CVE-2026-80723

In the Linux kernel, the following vulnerability has been resolved: of: reservedmem: prevent OOB when too many dynamic regions are defined On boot, fdtscanreservedmem saves each dynamically-placed /reserved-memory subnode into a local array of size MAXRESERVEDREGIONS. If the device tree defines...

CVE-2026-80718

In the Linux kernel, the following vulnerability has been resolved: mm/percpu-km: fix bitmap overflow and accounting in pcpucreatechunk In pcpucreatechunk, nrpages is the total contiguous backing allocation, i.e., nrunits pcpuunitpages, but pcpuchunkpopulated uses it to set chunk-populated, whose...

CVE-2026-80693

In the Linux kernel, the following vulnerability has been resolved: idpf: bound interrupt-vector register fill to the allocated array idpfgetregintrvecs fills the caller-allocated regvals array from the VIRTCHNL2OPALLOCVECTORS reply in adapter-reqvecchunks, bounding its inner loop only by the...

CVE-2026-80638

In the Linux kernel, the following vulnerability has been resolved: ocfs2: fix out-of-bounds write in ocfs2removerefcountextent BUG Unlinking a refcounted file whose refcount tree has leaf blocks triggers a fortify panic due to an out-of-bounds write. CAUSE When the last leaf block is removed fro...

CVE-2026-80627

In the Linux kernel, the following vulnerability has been resolved: MIPS: mm: Fix out-of-bounds write in maarreswalk maarreswalk uses wi-numcfg as the index into the fixed-size wi-cfg array, but checks whether the array is full only after it has filled the selected entry. If walksystemramrange...