UBUNTU-CVE-2026-113436

Inefficient Algorithmic Complexity vulnerability in the header integer parser of mtrudel bandit allows an unauthenticated remote attacker to consume server CPU via a content-length value or a Host or :authority port made of thousands of digits. Bandit.Headers.parseinteger/2 in lib/bandit/headers....

Chromium CVE-2026-103621: Integer overflow

This CVE was assigned by Chrome. Microsoft Edge Chromium-based ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information...

Chromium CVE-2026-103629: Integer overflow

This CVE was assigned by Chrome. Microsoft Edge Chromium-based ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information...

Microsoft Edge (Chromium-based) Elevation of Privilege Vulnerability

Integer overflow or wraparound in Microsoft Edge Chromium-based allows an unauthorized attacker to elevate privileges over a network...

CVE-2026-113436

The mtrudel bandit web server (versions 1.0.0-pre.7 before 1.14.0 ) is vulnerable to an Inefficient Algorithmic Complexity vulnerability in its header integer parser. Specifically, Bandit.Headers.parse_integer/2 in lib/bandit/headers.ex processes digits one at a time without a limit, allocating a...

CVE-2026-113436 Quadratic bignum parsing of Content-Length and Host port values in Bandit

Inefficient Algorithmic Complexity vulnerability in the header integer parser of mtrudel bandit allows an unauthenticated remote attacker to consume server CPU via a content-length value or a Host or :authority port made of thousands of digits. Bandit.Headers.parseinteger/2 in lib/bandit/headers....

EUVD-2026-109823

Inefficient Algorithmic Complexity vulnerability in the header integer parser of mtrudel bandit allows an unauthenticated remote attacker to consume server CPU via a content-length value or a Host or :authority port made of thousands of digits. Bandit.Headers.parseinteger/2 in lib/bandit/headers....

EEF-CVE-2026-113436 Quadratic bignum parsing of Content-Length and Host port values in Bandit

Summary Inefficient Algorithmic Complexity vulnerability in the header integer parser of mtrudel bandit allows an unauthenticated remote attacker to consume server CPU via a content-length value or a Host or :authority port made of thousands of digits. Bandit.Headers.parseinteger/2 in...

CVE-2026-113436 Quadratic bignum parsing of Content-Length and Host port values in Bandit

Inefficient Algorithmic Complexity vulnerability in the header integer parser of mtrudel bandit allows an unauthenticated remote attacker to consume server CPU via a content-length value or a Host or :authority port made of thousands of digits. Bandit.Headers.parseinteger/2 in lib/bandit/headers....

CVE-2026-113436

Inefficient Algorithmic Complexity vulnerability in the header integer parser of mtrudel bandit allows an unauthenticated remote attacker to consume server CPU via a content-length value or a Host or :authority port made of thousands of digits. Bandit.Headers.parseinteger/2 in lib/bandit/headers....

CVE-2026-113436 Quadratic bignum parsing of Content-Length and Host port values in Bandit

Inefficient Algorithmic Complexity vulnerability in the header integer parser of mtrudel bandit allows an unauthenticated remote attacker to consume server CPU via a content-length value or a Host or :authority port made of thousands of digits. Bandit.Headers.parseinteger/2 in lib/bandit/headers....

Security update for gcc7

This update for gcc7 fixes the following issues: CVE-2026-95619: libstdc++ integer overflow in new operator bsc1282500. CVE-2026-102010: UAF due to improper pointer update when an application calls the eraseif function on a binary heap priority queue in libstdc++ bsc1283123. Patch Instructions: T...

SUSE-SU-2026:4913-1 Security update for gcc7

This update for gcc7 fixes the following issues: - CVE-2026-95619: libstdc++ integer overflow in new operator bsc1282500. - CVE-2026-102010: UAF due to improper pointer update when an application calls the eraseif function on a binary heap priority queue in libstdc++ bsc1283123...

Exploit for Integer Coercion Error in Linux Linux_Kernel

CVE-2022-2639 using pipe primitive CVE-2022-2639https://...

httpd: httpd: Denial of Service via integer overflow in mod_dav_fs

A flaw was found in httpd. An integer overflow in the moddavfs module occurs when processing Web Distributed Authoring and Versioning WebDAV PROPPATCH requests that declare an excessive number of XML namespaces. An authenticated remote attacker with write access can exploit this flaw to crash...

gcc: libstdc++ integer overflow in `new` operator

A flaw was found in libstdc++. An integer overflow can occur when processing large inputs to the aligned operator new in the C++ library. This vulnerability could lead to an undersized memory allocation, potentially causing memory corruption or application instability...

Moderate: Red Hat Security Advisory: gcc security update

An update for gcc is now available for Red Hat Enterprise Linux 8. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CV...

CVE-2026-70388 Memory Corruption via Integer Underflow in Message Length Validation

SOEM version 2.0.0 and earlier contains vulnerabilities where a malicious device on the network can send specially crafted messages that cause the master to write data outside allocated memory boundaries. The software performs arithmetic on message length values without proper validation, allowin...

CVE-2026-70388

SOEM version 2.0.0 and earlier is vulnerable to memory corruption due to an integer underflow in message length validation. A malicious device on the network can send specially crafted messages that cause the software to perform arithmetic on length values without proper validation. This allows n...

Critical: Red Hat Security Advisory: webkit2gtk3 security update

An update for webkit2gtk3 is now available for Red Hat Enterprise Linux 9.6 Extended Update Support. Red Hat Product Security has rated this update as having a security impact of Critical. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available...