4850 matches found
CVE-2026-55980 Denial-of-service vulnerability in CatchPulse
A denial-of-service vulnerability in CatchPulse could allow an attacker to conduct a stack buffer overrun attack, leading to a denial-of-service condition...
CVE-2026-55980
A denial-of-service vulnerability in CatchPulse could allow an attacker to conduct a stack buffer overrun attack, leading to a denial-of-service condition...
PT-2026-68458
Name of the Vulnerable Software and Affected Versions CatchPulse affected versions not specified Description A stack buffer overrun allows an attacker to cause a denial-of-service condition. A stack buffer overrun occurs when a program writes more data to a buffer located on the stack than the...
EulerOS 2.0 SP13 : xorg-x11-server (EulerOS-SA-2026-3056)
According to the versions of the xorg-x11-server packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : A flaw was found in the X.Org X server. This use-after-free vulnerability occurs in the XSYNC fence triggering logic, specifically within...
The vulnerability of the __ioam6_fillTraceData() and ioam6_validateTraceHdr() functions in the Linux operating system allows attackers to compromise the confidentiality, integrity, and accessibility of protected information.
The vulnerability of the ioam6fillTraceData and ioam6validateTraceHdr functions in the Linux operating system is related to the execution of operations outside of the buffer in memory. Exploiting this vulnerability could allow a remote attacker to compromise the confidentiality, integrity, and...
The vulnerability of the ANGLE component in Google Chrome and Microsoft Edge web browsers allows a hacker to trigger a service failure.
The vulnerability of the ANGLE component in Google Chrome and Microsoft Edge relates to the execution of operations outside the buffer in memory. Exploiting this vulnerability could allow a malicious actor to cause service interruptions through a specially crafted HTML page...
The vulnerability of the ANGLE component in Google Chrome and Microsoft Edge web browsers allows a hacker to trigger a service failure.
The vulnerability of the ANGLE component in Google Chrome and Microsoft Edge relates to the execution of operations outside the buffer in memory. Exploiting this vulnerability could allow a malicious actor to cause service interruptions through a specially crafted HTML page...
K000162790: Linux Kernel vulnerability CVE-2026-53209
Security Advisory Description In the Linux kernel, the following vulnerability has been resolved: Bluetooth: hcisync: reject oversized Broadcast Announcement prepend Existing advertising instances can already hold the maximum extended advertising payload. When hciadvbcastannoucement prepends the...
The vulnerability of the Active Directory Federation Services (ADFS) for Windows operating systems allows a perpetrator to induce a service failure.
The vulnerability of the Active Directory Federation Services AD FS for Windows operating systems is related to the execution of operations outside the buffer in memory. Exploiting this vulnerability could allow a malicious actor to cause a service failure...
EUVD-2026-51340
The MMS server connection handler contains a flaw in its processing of BER-encoded request data. When an MMS confirmed request PDU containing an extended BER tag is received over an established session, the decoder may advance its internal buffer incorrectly due to a missing bounds check. This...
SUSE SLED15 / SLES15 Security Update : libarchive (SUSE-SU-2026:3429-1)
The remote SUSE Linux SLED15 / SLEDSAP15 / SLES15 / SLESSAP15 host has packages installed that are affected by a vulnerability as referenced in the SUSE-SU-2026:3429-1 advisory. - creating temporary files in the current working directory instead of the target directory can lead to file creation...
Vulnerability of Microsoft Excel, Microsoft Office, Microsoft 365 Apps for Enterprise, and Microsoft Office Online Server packages, related to the execution of operations outside the buffer in memory, allowing attackers to execute arbitrary code.
The vulnerability of Microsoft Office packages, Microsoft 365 Apps for Enterprise, and Microsoft SharePoint stems from the execution of operations outside of the buffer in memory. Exploitation of this vulnerability can allow an attacker to execute arbitrary code by sending a specially crafted...
The vulnerability of the instrument-based library for generating unique UUIDs lies in the possibility of writing beyond the buffer boundaries, allowing an attacker to cause memory corruption.
The vulnerability of the instrument-based library for generating unique UUIDs is related to writing beyond the buffer boundaries. Exploiting this vulnerability could allow a malicious actor to cause memory corruption...
The vulnerability of the MNG encoder in the console-based image editing tool ImageMagick allows a hacker to execute arbitrary code.
The vulnerability of the MNG encoder in the console-based image editing tool ImageMagick is related to the execution of operations beyond the buffer boundaries in memory. Exploiting this vulnerability allows an attacker to execute arbitrary code...
The vulnerability of the f_audio_out_ep_complete() function in the drivers/usb/gadget/function/f_uac1_legacy.c file of the Linux operating system’s gadget driver framework allows a perpetrator to compromise the confidentiality, integrity, and accessibility of protected information.
The vulnerability of the faudiooutepcomplete function in the drivers/usb/gadget/function/fuac1legacy.c file of the Linux operating system’s device drivers is related to writing beyond buffer boundaries. Exploiting this vulnerability could allow an attacker to compromise the confidentiality,...
CVE-2026-51272
Rejected reason: DO NOT USE THIS CVE RECORD. ConsultIDs: none. Reason: This record was withdrawn by its CNA. Further investigation showed that it was not a security issue. Notes: none...
SUSE-SU-2026:3429-1 Security update for libarchive
This update for libarchive fixes the following issues: - creating temporary files in the current working directory instead of the target directory can lead to file creation failures when the working directory is not writable bsc1254340. - file descriptor leak in the mtree parser cleanup path coul...
Security update for xen
This update for xen fixes the following issues CVE-2026-42493: x86 shadow paging is deprecated bsc1271528. CVE-2026-42494,CVE-2026-42495,CVE-2026-62423,CVE-2026-62424,CVE-2026-62425: buffer overruns in libfsimage iso9660 handling bsc1271530. CVE-2026-62426,CVE-2026-62427: sysctl and platform-op...
PT-2026-76536
This update for libarchive fixes the following issues: - creating temporary files in the current working directory instead of the target directory can lead to file creation failures when the working directory is not writable bsc1254340. - file descriptor leak in the mtree parser cleanup path coul...
The vulnerability of the print spooler driver in Windows operating systems allows attackers to disclose sensitive information that is protected by this driver.
The vulnerability of the Windows Print Spooler in operating systems related to print queues is related to the execution of operations beyond the buffer boundaries in memory. Exploiting this vulnerability can allow an attacker to disclose sensitive information that is protected by security measure...