Exploit for CVE-2026-110264

PoC CVE-2026-110264 — GitLab Org-mode / Onigmo Unauthenticated...

CVE-2026-98860

A flaw was found in the Linux kernel's Human Interface Device HID subsystem. This flaw can lead to information disclosure when hardware communication errors occur. Due to an improper integer comparison in the Berkeley Packet Filter BPF handler, negative error return codes are mistakenly treated a...

ruby: integer overflow issue in regular expression compiler

A flaw was found in Ruby. When compiling a specially crafted regular expression containing an excessive number of repeats with the methods Regexp.new, Regexp.union, Regexp.compile, or via a string interpolation such as /input/, an integer overflow of internal IDs can occur. This integer overflow...

ruby: integer overflow issue in regular expression compiler

A flaw was found in Ruby. When compiling a specially crafted regular expression with the methods Regexp.new, Regexp.union, Regexp.compile, or via a string interpolation such as /input/, an integer overflow in the size of the compiled pattern can occur. This integer overflow causes memory...

ruby: integer overflow issue in CI/CD regular expression compiler

A flaw was found in Ruby. When compiling a specially crafted regular expression with the methods Regexp.new, Regexp.union, Regexp.compile, or via a string interpolation such as /input/, an integer overflow in the size of the compiled pattern can occur. This integer overflow causes memory...

ruby: integer overflow issue in CI/CD regular expression compiler

A flaw was found in Ruby. When compiling a specially crafted regular expression with the methods Regexp.new, Regexp.union, Regexp.compile, or via a string interpolation such as /input/, an integer overflow in the size of the compiled pattern can occur. This integer overflow causes memory...

ruby: integer overflow issue in regular expression compiler

A flaw was found in Ruby. When compiling a specially crafted regular expression containing an excessive number of repeats with the methods Regexp.new, Regexp.union, Regexp.compile, or via a string interpolation such as /input/, an integer overflow of internal IDs can occur. This integer overflow...

ruby: integer overflow issue in regular expression compiler

A flaw was found in Ruby. When compiling a specially crafted regular expression with the methods Regexp.new, Regexp.union, Regexp.compile, or via a string interpolation such as /input/, an integer overflow in the size of the compiled pattern can occur. This integer overflow causes memory...

CLSA-2026-1792801476 ruby: Fix of 3 CVEs

CVE-2026-110264: regexp: fix out-of-bounds repeat stack access in Onigmo by rejecting patterns whose range-repeat or null-check count overflows the internal ID type - CVE-2026-93577, CVE-2026-97229: regexp: fix wrapped jump offsets in Onigmo by checking the quantifier expansion size without...

CLSA-2026-1792800480 ruby: Fix of 3 CVEs

CVE-2026-110264: regexp: fix out-of-bounds repeat stack access in Onigmo by rejecting patterns whose range-repeat or null-check count overflows the internal ID type - CVE-2026-93577, CVE-2026-97229: regexp: fix wrapped jump offsets in Onigmo by checking the quantifier expansion size without...

Open62541 Digital error vulnerability

In versions prior to 1.5.7 of Open62541, there is a numeric error vulnerability. This vulnerability arises because UADataTypefromStructureDescription experiences an integer overflow when processing large custom structure definitions; it then wraps around the 16-bit memSize field. A malicious OPC ...

GitLab 19.5.0 Integer Overflow

GitLab CE/EE versions before 18.11.13, 19.0.10, 19.1.9, 19.2.9, 19.3.6, 19.4.3, and 19.5.1 contain an integer overflow in regular expression compilation. The proof of concept demonstrates the underlying Onigmo repeat-ID overflow. https://packetstorm.news/download/237411...

Unity Linux 20.1050e / 20.1060e / 20.1070-8ae / 20.1070e Security Update: php (UTSA-2026-143721)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-143721 advisory. phartarnumber parses the octal size field of a TAR header into a uint32t with no overflow check. The field is 11 octal digits wide and holds values up to 0x1FFFFFFFF...

AlmaLinux 9.6 [TuxCare] Security Update: tigervnc / tigervnc-icons / tigervnc-license / tigervnc-selinux / etc Multiple Vulnerabilities (ALMALINUX9.6:CLSA-2026:1792819460)

The AlmaLinux 9.6 host has packages installed that are affected by multiple vulnerabilities as referenced in the TuxCare ALMALINUX9.6:CLSA-2026:1792819460 advisory. - xorg-x11-server: xorg-x11-server: arbitrary code execution via GLX RenderLarge heap-based buffer overflow CVE-2026-93517 -...

Rocky Linux 9 [CIQ] Security Update: expat / expat-debuginfo / expat-debugsource / expat-devel Multiple Vulnerabilities (crlsa-2026_88247)

The Rocky Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the CIQ crlsa-202688247 advisory. expat: expat: Denial of Service via integer overflow in expatrealloc CVE-2026-102633 expat: expat: Information disclosure via heap buffer over-read in...

Rocky Linux 10.2 [CIQ] Security Update: expat / expat-debuginfo / expat-debugsource / expat-devel Multiple Vulnerabilities (crlsa-2026_88248)

The Rocky Linux 10.2 host has packages installed that are affected by multiple vulnerabilities as referenced in the CIQ crlsa-202688248 advisory. expat: expat: Denial of Service via integer overflow in expatrealloc CVE-2026-102633 expat: expat: Information disclosure via heap buffer over-read in...

GitLab CE/EE 19.5.0 Regular Expression Integer Overflow

GitLab CE/EE versions before 18.11.13, 19.0.10, 19.1.9, 19.2.9, 19.3.6, 19.4.3, and 19.5.1 contain a regular expression compiler integer overflow that may allow unauthenticated arbitrary code execution. This proof of concept generates crafted Org-mode content and triggers the affected render path...

PT-2026-122595

Name of the Vulnerable Software and Affected Versions open62541 versions 1.5.0 through 1.5.6 Description An integer overflow exists in the UA DataType fromStructureDescription function that affects the 16-bit memSize field when processing large custom structure definitions. A malicious OPC UA...

Medium: nss

Issue Overview: Incorrect boundary conditions in the Libraries component in NSS. This vulnerability was fixed in Firefox 152 and Thunderbird 152. CVE-2026-12318 Incorrect boundary conditions, integer overflow in the Libraries component in NSS. This vulnerability was fixed in Firefox 153...

Linux Distros Unpatched Vulnerability : CVE-2026-110264

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - An issue has been discovered in GitLab CE/EE affecting all versions from 7.0 before 18.11.13, 19.0 before 19.0.10, 19.1 before 19.1.9, 19.2 before 19.2.9, 19.3...