150834 matches found
Microsoft Office Outlook Information Disclosure Vulnerability
Out-of-bounds read in Microsoft Office Outlook allows an unauthorized attacker to disclose information over a network...
Microsoft Office PowerPoint Information Disclosure Vulnerability
Out-of-bounds read in Microsoft Office PowerPoint allows an unauthorized attacker to disclose information over a network...
Windows Imaging Component Remote Code Execution Vulnerability
Out-of-bounds write in Windows Imaging Component allows an unauthorized attacker to execute code over a network...
Windows USB Mass Storage Class Driver Elevation of Privilege Vulnerability
Out-of-bounds read in Windows USB Mass Storage Class Driver allows an unauthorized attacker to elevate privileges with a physical attack...
Windows Win32k Elevation of Privilege Vulnerability
Out-of-bounds read in Windows Win32K allows an authorized attacker to elevate privileges locally...
Microsoft Excel Remote Code Execution Vulnerability
Out-of-bounds read in Microsoft Office Excel allows an unauthorized attacker to execute code locally...
Microsoft Office Outlook Information Disclosure Vulnerability
Out-of-bounds read in Microsoft Office Outlook allows an unauthorized attacker to disclose information over a network...
CVE-2026-53360-POC
CVE-2026-53360: KVM SEV-SNP PSC heap out-of-bounds Proof of concept for a heap out-of-bounds read and write in KVM's SEV-SNP Page State Change PSC handling. A malicious SEV-SNP guest makes the host kernel walk a PSC entry array off the end of its slab allocation. That leaks the layout of...
CVE-2025-5777
CVE-2025-5777 ā Citrix NetScaler "CitrixBleed 2" Memory Disclosure Research writeup by Sentinel AI Defense. Defensive analysis only ā no working exploit or PoC is published here. The sequel to the original CitrixBleed: an out-of-bounds read on NetScaler ADC/Gateway authentication endpoints that...
GreenSection
GreenSection Nvidia GreenSection Memory Corruption 0day vulnerability Multiple NVIDIA user mode components shares a global memory section in \BaseNamedObjects\52813408-3561-4705-820a-2b3b78be92ba with full R/W access to everyone, this section stores important data structures inside but there are...
CVE-2026-8451
šØ CVE-2026-8451 - NetScaler SAML IdP Memory Overread Vulnerability A pre-authentication memory disclosure vulnerability affecting Citrix NetScaler ADC and NetScaler Gateway configured as a SAML Identity Provider IdP. āØ Overview CVE-2026-8451 is a High-Severity memory disclosure vulnerability caus...
kernel: Bluetooth: RFCOMM: validate skb length in MCC handlers
A flaw was found in the Linux kernel's Bluetooth RFCOMM Radio Frequency Communication subsystem. A malicious remote device could exploit this vulnerability by sending specially crafted, truncated Multiplexing Control Channel MCC frames. This lack of proper validation of incoming data length befor...
kernel: dm-verity: fix buffer overflow in FEC calculation
A flaw was found in the dm-verity component of the Linux kernel. A buffer overflow occurs during Forward Error Correction FEC calculation, allowing an attacker to write past the end of an allocated buffer. This out-of-bounds write can corrupt the syndrome buffer, potentially leading to system...
kernel: Bluetooth: HIDP: fix missing length checks in hidp_input_report()
A flaw was found in the Linux kernel's Bluetooth Human Interface Device Protocol HIDP. A remote attacker, by sending specially crafted truncated packets from a paired Bluetooth device, could trigger an out-of-bounds read in the hidpinputreport function. This vulnerability may lead to unintended...
kernel: nvmet-rdma: handle inline data with a nonzero offset
A flaw was found in the nvmet-rdma component of the Linux kernel. This vulnerability arises from incorrect handling of inline data with a non-zero offset, which can lead to an integer underflow. An attacker could exploit this to cause the system to read beyond its allocated memory, potentially...
kernel: wifi: iwlwifi: mld: validate sta_mask before ffs() in BA session handlers
A flaw was found in the Linux kernel's iwlwifi Intel Wireless WiFi driver. This vulnerability allows an attacker to cause an out-of-bounds memory access in the WiFi Block Acknowledgement BA session handlers. This occurs when the stamask value is zero, leading to an incorrect station ID calculatio...
Important: Red Hat Security Advisory: redis:7 security update
An update for the redis:7 module is now available for Red Hat Enterprise Linux 9. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each...
kernel: nvmet-auth: validate reply message payload bounds against transfer length
A flaw was found in the Linux kernel's nvmet-auth component. A remote attacker, by sending a specially crafted NVMe-oF NVMe over Fabrics authentication reply message, can cause an out-of-bounds read in the kernel's memory. This vulnerability, exploitable pre-authentication, can lead to the...
kernel: nvmet: fix pre-auth out-of-bounds heap read in Discovery Get Log Page
A flaw was found in the Linux kernel's nvmet subsystem. An unauthenticated remote attacker could exploit an out-of-bounds heap read vulnerability in the Discovery Get Log Page function. By sending a specially crafted request with a manipulated offset, an attacker could read sensitive kernel memor...
kernel: can: bcm: add locking for bcm_op runtime updates
A flaw was found in the Linux kernel's Controller Area Network CAN broadcast manager BCM. Improper locking during runtime updates of internal counters in the bcmcantx function allows a local attacker to trigger a slab-out-of-bounds read access. This vulnerability can lead to information disclosur...