153474 matches found
CVE-2026-78546
CVE-2026-78546 is an Out-of-Bounds Read (CWE-125) in the Citrix Workspace app for Windows . It requires local access and low privileges, with no user interaction needed. The CVSS v4.0 base score is 4.8 (Medium) , reflecting low impacts to both confidentiality and availability. Affected versions i...
EUVD-2026-76445
Out-of-bounds read vulnerability in Citirx Workspace app for Windows. This issue affects Workspace app for Windows: before 2603.11 Current Release CR, before 2507.1 LTSR CU3, and before LTSR 2607...
CVE-2026-78547 Out-of-Bounds Write
Out-of-bounds write vulnerability in Citrix Citrix Workspace app for Windows. This issue affects Citrix Workspace app for Windows: before 2603.11 Current Release CR, before 2507.1 LTSR CU3, and before LTSR 2607...
CVE-2026-78547
CVE-2026-78547 is an Out-of-Bounds Write (CWE-787) in Citrix Workspace app for Windows , disclosed by Citrix on 2026-09-08. Exploitation requires physical access to the target system and low privileges, with high attack complexity. The vulnerability can lead to high impact on integrity and availa...
EUVD-2026-76444
Out-of-bounds write vulnerability in Citrix Citrix Workspace app for Windows. This issue affects Citrix Workspace app for Windows: before 2603.11 Current Release CR, before 2507.1 LTSR CU3, and before LTSR 2607...
CVE_2026_31694
CVE-2026-31694 被动扫描器 一个针对 CVE-2026-31694 的被动式 Linux 主机评估工具，该漏洞是 Linux 内核中 FUSE readdir 缓存的越界写入。 该扫描器评估运行中的内核、FUSE 暴露面、本地软件包元数据、内核源码证据、执行环境以及操作系统家族。当主机可能受影响时，它会生成针对所检测发行版量身定制的缓解指南。 作者： Aung Myat Thu w01f 目录 概述 漏洞摘要 安全模型 功能特性 要求 安装 使用方法 命令行选项 评估工作流 判定结果 退出代码 检测来源 发行版支持 缓解措施生成 容器与 WSL 行为 报告格式 自动化与集成...
CVE-2024-29943-but-with-wasm
CVE-2024-29943，但使用 wasm 一条针对 CVE-2024-29943 的端到端漏洞利用链，通过将 shellcode 以 f64.const 立即数的形式偷运进 SpiderMonkey 的 WebAssembly JIT 代码页，实现任意原生代码执行——无需 ROP，无需 VirtualProtect，无需外部工具链。 已验证可用 ，针对 2024-03-20 mozilla-central nightly 的 SpiderMonkey shell（JavaScript-C126.0a1，linux x86-64，修复前版本）：利用链完整运行，payload...
DEBIAN-CVE-2026-87020
An integer overflow in a specified pitch and buffer-size computation leads to a heap out-of-bounds write when Orthanc DICOM Server decodes an attacker-supplied PNG...
UBUNTU-CVE-2026-87020
An integer overflow in a specified pitch and buffer-size computation leads to a heap out-of-bounds write when Orthanc DICOM Server decodes an attacker-supplied PNG...
CVE-2026-87020
An integer overflow in a specified pitch and buffer-size computation leads to a heap out-of-bounds write when Orthanc DICOM Server decodes an attacker-supplied PNG...
EUVD-2026-76113
An integer overflow in a specified pitch and buffer-size computation leads to a heap out-of-bounds write when Orthanc DICOM Server decodes an attacker-supplied PNG...
CVE-2026-87020 Orthanc DICOM Server Integer Overflow or Wraparound
An integer overflow in a specified pitch and buffer-size computation leads to a heap out-of-bounds write when Orthanc DICOM Server decodes an attacker-supplied PNG...
CVE-2026-87020
Orthanc DICOM Server (headquartered in Belgium, deployed worldwide in the healthcare sector) is vulnerable to an integer overflow in its pitch and buffer-size computation when decoding an attacker-supplied PNG or JPEG image. This leads to a heap out-of-bounds write , resulting in a process crash ...
CVE-2026-86145
A flaw was found in PCRE2. An out-of-bounds write vulnerability exists in the pcre2dfamatch function due to improper size checking when reusing cached workspace blocks. A remote attacker could exploit this by providing a specially crafted regular expression or a recursive pattern in conjunction...
CVE-2026-89046
A flaw was found in zstd-jni. This out-of-bounds read vulnerability in the Zstd.getFrameContentSize function occurs because it fails to validate negative srcPosition arguments. A remote attacker can supply negative offset values, bypassing bounds checks and accessing the native frame-header parse...
CVE-2026-87650
A flaw was found in Google Chrome's WebGL component. A remote attacker could exploit an out-of-bounds read vulnerability by tricking a user into visiting a specially crafted HTML page. This could potentially allow the attacker to execute arbitrary code outside of the browser's security sandbox,...
CVE-2026-87638
A flaw was found in Google Chrome's Media component. A remote attacker could exploit an out-of-bounds write vulnerability by enticing a user to visit a specially crafted HTML page. This could potentially allow the attacker to execute arbitrary code outside of the browser's security sandbox...
CVE-2026-87621
A flaw was found in ANGLE, a component of Google Chrome. This out-of-bounds write vulnerability allows a remote attacker to potentially execute arbitrary code. By tricking a user into visiting a specially crafted HTML page, an attacker could bypass the browser's security sandbox and execute...
CVE-2026-87438
A flaw was found in chromium-browser. An out-of-bounds write vulnerability in the WebGL component of Google Chrome on Android allows a remote attacker to execute arbitrary code outside of the sandbox. This can be exploited by enticing a user to visit a specially crafted HTML page...
CVE-2026-27280
Escritura fuera de límites en dngrendertask::ProcessArea Adobe DNG SDK / Android Alcanzable desde un archivo DNG ordinario a través de la API pública de decodificación de imágenes de Android , y reproducido en un Galaxy S25 usando el propio/system/lib64/libdngsdk.so del teléfono. Vulnerable: DNG...