153476 matches found
CVE-2026-87438
A flaw was found in chromium-browser. An out-of-bounds write vulnerability in the WebGL component of Google Chrome on Android allows a remote attacker to execute arbitrary code outside of the sandbox. This can be exploited by enticing a user to visit a specially crafted HTML page...
CVE-2026-27280
Escritura fuera de límites en dngrendertask::ProcessArea Adobe DNG SDK / Android Alcanzable desde un archivo DNG ordinario a través de la API pública de decodificación de imágenes de Android , y reproducido en un Galaxy S25 usando el propio/system/lib64/libdngsdk.so del teléfono. Vulnerable: DNG...
Minor update (2) for Vivaldi Desktop 8.2
Download Vivaldi The following improvements were made since the first 8.2 minor update: Calculator Precision rounding VB-131340 CalendarSecurity Incorrect sanitization of calendar display VB-130990 Chromium Update to 152.0.7977.124 ESR includes security fixes from 153.0.8010.36/37, such as...
CVE-2026-88053
A flaw was found in Tesseract, an open-source Optical Character Recognition OCR engine. A local attacker could provide a specially crafted .traineddata file, which, when processed, could lead to a heap out-of-bounds write. This vulnerability occurs due to unvalidated counts used as loop bounds...
CVE-2026-88052
A flaw was found in Tesseract, an open-source Optical Character Recognition OCR engine. The UNICHARSET::loadviafgets function incorrectly trusts a declared character count, which can lead to an out-of-bounds write in memory. A remote attacker could exploit this vulnerability by providing a...
CVE-2026-88051
A flaw was found in Tesseract, an open-source Optical Character Recognition OCR engine. A heap out-of-bounds write vulnerability exists in the GenericVector::read function when processing a specially crafted .traineddata model. By manipulating the reserved and sizeused fields, a local attacker ca...
CVE-2026-66729-Out-of-Bounds-Read-in-facil.io-MIME-Parser-leads-to-Server-Crash
セキュリティ開示: facil.io MIMEパーサーの領域外読み取りによりサーバーがクラッシュする 割り当てられたCVE ID CVE-2026-66729 製品: facil.io 影響を受けるバージョン: facil.io = 0.6.0（すべての0.6.x、すべての0.7.x、master）; 0.6.0 でMIMEパーサーが追加された際に導入 コンポーネント: lib/facil/http/parsers/httpmimeparser.h CWE: CWE-191（整数アンダーフロー）、CWE-125（領域外読み取り） CVSS v3.1: 7.5...
CVE-2026-13326
An out-of-bounds read in Qt NFC's language code length parsing allows a physically proximate attacker to cause a denial of service or limited memory disclosure via a crafted NFC tag...
[SECURITY] [DSA 6493-1] libevent security update
------------------------------------------------------------------------- Debian Security Advisory DSA-6493-1 [email protected] https://www.debian.org/security/ Aron Xu September 11, 2026 https://www.debian.org/security/faq -...
EUVD-2026-75974
An out-of-bounds read in Qt NFC's language code length parsing allows a physically proximate attacker to cause a denial of service or limited memory disclosure via a crafted NFC tag...
CVE-2026-13326
CVE-2026-13326 affects Qt NFC 's QNdefNfcTextRecord component, where an out-of-bounds read in language code length parsing (combined with an integer underflow) allows a physically proximate attacker to trigger a denial of service or limited memory disclosure via a crafted NFC tag. The CVSS 4.0 sc...
CVE-2026-13326 Out-of-bounds read and integer underflow vulnerability in QNdefNfcTextRecord impacts Qt NFC module
An out-of-bounds read in Qt NFC's language code length parsing allows a physically proximate attacker to cause a denial of service or limited memory disclosure via a crafted NFC tag...
vim security update
An update is available for vim. This update affects Rocky Linux 8. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list Vim Vi IMproved is an updated and improved version of the vi editor. Security...
CVE-2026-89160
A flaw was found in PCRE2, a library for processing regular expressions. A remote attacker could exploit this vulnerability by providing a specially crafted input that triggers an out-of-bounds read during pattern matching with invalid UTF Unicode Transformation Format characters. This could lead...
CVE-2026-89156
A flaw was found in PCRE2. An attacker can provide invalid UTF Unicode Transformation Format data, leading to an out-of-bounds read during a Just-In-Time JIT fallback. This vulnerability could potentially result in a denial of service. Mitigation Mitigation for this issue is either not available ...
CVE-2026-89158
A flaw was found in PCRE2. On 32-bit platforms, an integer overflow in the pcre2compile32 function can lead to an out-of-bounds write. This vulnerability could allow a remote attacker to achieve a high integrity impact and a low availability impact, potentially leading to data corruption or denia...
CVE-2026-89157
A flaw was found in PCRE2. On 32-bit platforms, an attacker can provide a specially crafted large pattern, leading to an out-of-bounds write within the pcre2patternconvert function. This vulnerability can result in high integrity impact, such as data corruption, and potentially a low availability...
AZL-100056 CVE-2026-89160 affecting package pcre2 10.42-3
PCRE2 before 10.48 has a pcre2match out-of-bounds read during the PCRE2MATCHINVALIDUTF matching of an invalid UTF subject...