16250 matches found
CVE-2026-80603
A flaw was found in the Linux kernel's netfilter component, specifically within the nfconntrackirc module. An off-by-one error in the parsedcc function can cause the system to read one byte beyond an allocated buffer. This can lead to the use of uninitialized or stale data, potentially resulting ...
CVE-2026-70651
A flaw was found in libvips, an image processing library. When libvips is built without libtiff support but with ImageMagick support, an integer overflow can occur while loading a crafted multi-page Tagged Image File Format TIFF image. This overflow, caused by unchecked calculations of image fram...
Dawn Component DoS
The vulnerability of the Dawn component in Google Chrome and Microsoft Edge relates to reading data beyond the allowed buffer size. Exploiting this vulnerability could allow a malicious actor to cause service interruptions through a specially created HTML page...
Google Chrome Microsoft Edge Confidential Data Access
The vulnerability of JavaScript script handlers in Google Chrome and Microsoft Edge browsers relates to reading data beyond the allowed buffer size. Exploiting this vulnerability can allow a malicious actor to gain access to confidential data through a specially created HTML page...
WebRTC Component Confidential Data Access
The vulnerability of the WebRTC component in Google Chrome and Microsoft Edge relates to reading data from the buffer beyond its allowable limits. Exploiting this vulnerability can allow a malicious actor to gain access to confidential data through a specially created HTML page...
Input component in Google
The vulnerability of the Input component in Google Chrome and Microsoft Edge relates to reading data beyond the allowed buffer size. Exploiting this vulnerability can allow an attacker to access confidential data through a specially created HTML page...
ANGLE DoS
The vulnerability of the ANGLE component in Google Chrome and Microsoft Edge relates to reading data beyond the allowed buffer size. Exploiting this vulnerability can allow an attacker to cause a service failure through a specially created HTML page...
Nutanix AOS : Multiple Vulnerabilities (NXSA-AOS-7.6.0.6)
The version of AOS installed on the remote host is prior to 7.6.0.6. It is, therefore, affected by multiple vulnerabilities as referenced in the NXSA-AOS-7.6.0.6 advisory. - In an untrusted JMS environment, org.springframework.jms.support.converter.MappingJackson2MessageConverter and...
RHEL 8 : glib2 (RHSA-2026:61766)
The remote Redhat Enterprise Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2026:61766 advisory. GLib provides the core application building blocks for libraries and applications written in C. It provides the core object system used in...
ALSA-2026:61766 Moderate: glib2 security update
GLib provides the core application building blocks for libraries and applications written in C. It provides the core object system used in GNOME, the main loop implementation, and a large set of utility functions for strings and common data structures. Security Fixes: glib: buffer over-read in...
Moderate: glib2 security update
GLib provides the core application building blocks for libraries and applications written in C. It provides the core object system used in GNOME, the main loop implementation, and a large set of utility functions for strings and common data structures. Security Fixes: glib: buffer over-read in...
SUSE CVE-2026-80662
In the Linux kernel, the following vulnerability has been resolved: cxl: Fix CXLHEADERLOGSIZE to match RAS Capability size The CXL r4.0 8.2.4.17.7 RAS Capability Structure has total length 0x58 bytes CXLRASCAPABILITYLENGTH; the Header Log occupies the trailing 64 bytes at offset 0x18...
AZL-98096 CVE-2026-80662 affecting package kernel 6.6.157.1-1
In the Linux kernel, the following vulnerability has been resolved: cxl: Fix CXLHEADERLOGSIZE to match RAS Capability size The CXL r4.0 8.2.4.17.7 RAS Capability Structure has total length 0x58 bytes CXLRASCAPABILITYLENGTH; the Header Log occupies the trailing 64 bytes at offset 0x18...
SUSE CVE-2026-74324
In the Linux kernel, the following vulnerability has been resolved: wifi: mt76: mt7925: validate skb length in testmode query In mt7925tmquery, the response skb from mt76mcusendandgetmsg is used in a memcpy without validating its length: memcpyevtresp, skb-data + 8, MT7925EVTRSPLEN; where...
Win32k.sys Privilege Escalation
The vulnerability of the Win32k.sys component in Windows operating systems is related to reading beyond the buffer boundaries in memory. Exploiting this vulnerability can allow an attacker to increase their privileges...
BusyBox udhcp_getoption Heap Buffer Overflow Info Disclosure
The vulnerability of the udhcpgetoption function in the networking/udhcp/common.c component of the BusyBox command-line utility tools on UNIX systems is related to reading data from a buffer beyond its allowable limits. Exploiting this vulnerability could allow an attacker to gain access to...
NTFS Disclosure
The vulnerability of the NTFS file system in Windows operating systems relates to reading data beyond the buffer in memory. Exploiting this vulnerability can allow an attacker to disclose protected information...
QEMU Buffer Overflow DoS
The vulnerability of the QEMU hardware emulation software is related to reading data from buffer registers beyond their allowable limits. Exploiting this vulnerability can allow a remote attacker to gain access to confidential data...
Linux Distros Unpatched Vulnerability : CVE-2026-80717
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - sctp: validate Adaptation Indication parameter length The Adaptation Layer Indication parameter contains a fixed 32-bit Adaptation Code Point after its paramete...
PT-2026-82974
Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the NTFS driver where resident attribute lists are not properly validated. The function ntfs read locked inode copies a resident attribute list into ni-attr list using...