Lucene search
+L

39 matches found

RedhatCVE
RedhatCVE
•added 2026/09/23 7:34 a.m.•17 views

CVE-2026-88340

A flaw was found in YARA. This invalid pointer release vulnerability occurs during the deserialization of compiled rule files .yrc. An attacker can exploit this by providing a specially crafted .yrc file, leading to insufficient validation of external-variable pointers. This can result in memory...

7.6CVSS5.9AI score0.0025EPSS
SaveExploits0References6
Tenable Nessus
Tenable Nessus
•added 2026/09/23 12:00 a.m.•10 views

Linux Distros Unpatched Vulnerability : CVE-2026-88340

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - An invalid pointer release vulnerability exists in YARA 4.5.8 during deserialization of compiled .yrc rule files. The vulnerability is caused by insufficient...

7.6CVSS6.3AI score0.0025EPSS
SaveExploits0References4
NVD
NVD
•added 2026/09/22 8:17 p.m.•15 views

CVE-2026-88340

An invalid pointer release vulnerability exists in YARA 4.5.8 during deserialization of compiled .yrc rule files. The vulnerability is caused by insufficient validation of external-variable pointers, which may lead to invalid free in yrrulesdestroy or wild pointer access in yrobjectcreate. An...

7.6CVSS0.0025EPSS
SaveExploits0References3
OSV
OSV
•added 2026/09/22 8:17 p.m.•7 views

DEBIAN-CVE-2026-88340

An invalid pointer release vulnerability exists in YARA 4.5.8 during deserialization of compiled .yrc rule files. The vulnerability is caused by insufficient validation of external-variable pointers, which may lead to invalid free in yrrulesdestroy or wild pointer access in yrobjectcreate. An...

7.6CVSS6.3AI score0.0025EPSS
SaveExploits0References1
OSV
OSV
•added 2026/09/22 8:17 p.m.•5 views

UBUNTU-CVE-2026-88340

An invalid pointer release vulnerability exists in YARA 4.5.8 during deserialization of compiled .yrc rule files. The vulnerability is caused by insufficient validation of external-variable pointers, which may lead to invalid free in yrrulesdestroy or wild pointer access in yrobjectcreate. An...

7.6CVSS6.3AI score0.0025EPSS
SaveExploits0References5
UbuntuCve
UbuntuCve
•added 2026/09/22 8:17 p.m.•11 views

CVE-2026-88340

An invalid pointer release vulnerability exists in YARA 4.5.8 during deserialization of compiled .yrc rule files. The vulnerability is caused by insufficient validation of external-variable pointers, which may lead to invalid free in yrrulesdestroy or wild pointer access in yrobjectcreate. An...

7.6CVSS6.3AI score0.0025EPSS
SaveExploits0References4
Vulnrichment
Vulnrichment
•added 2026/09/22 12:00 a.m.•8 views

CVE-2026-88340

An invalid pointer release vulnerability exists in YARA 4.5.8 during deserialization of compiled .yrc rule files. The vulnerability is caused by insufficient validation of external-variable pointers, which may lead to invalid free in yrrulesdestroy or wild pointer access in yrobjectcreate. An...

6.3AI score0.0025EPSS
SaveExploits0References3
EUVD
EUVD
•added 2026/09/22 12:00 a.m.•9 views

EUVD-2026-84849

An invalid pointer release vulnerability exists in YARA 4.5.8 during deserialization of compiled .yrc rule files. The vulnerability is caused by insufficient validation of external-variable pointers, which may lead to invalid free in yrrulesdestroy or wild pointer access in yrobjectcreate. An...

6.3AI score0.0025EPSS
SaveExploits0References3
CVE
CVE
•added 2026/09/22 12:00 a.m.•23 views

CVE-2026-88340

An invalid pointer release vulnerability exists in YARA 4.5.8 during the deserialization of compiled .yrc rule files . The flaw is caused by insufficient validation of external-variable pointers , which can lead to an invalid free in yr_rules_destroy() or wild pointer access in yr_object_create()...

7.6CVSS6.3AI score0.0025EPSS
SaveExploits0References3
Debian CVE
Debian CVE
•added 2026/09/22 12:00 a.m.•12 views

CVE-2026-88340

An invalid pointer release vulnerability exists in YARA 4.5.8 during deserialization of compiled .yrc rule files. The vulnerability is caused by insufficient validation of external-variable pointers, which may lead to invalid free in yrrulesdestroy or wild pointer access in yrobjectcreate. An...

7.6CVSS6.3AI score0.0025EPSS
SaveExploits0
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/09/22 12:00 a.m.•9 views

CVE-2026-88340: Release of Invalid Pointer or Reference

An invalid pointer release vulnerability exists in YARA 4.5.8 during deserialization of compiled .yrc rule files. The vulnerability is caused by insufficient validation of external-variable pointers, which may lead to invalid free in yrrulesdestroy or wild pointer access in yrobjectcreate. An...

7.6CVSS6.3AI score0.0025EPSS
SaveExploits0References2
Cvelist
Cvelist
•added 2026/09/22 12:00 a.m.•36 views

CVE-2026-88340

An invalid pointer release vulnerability exists in YARA 4.5.8 during deserialization of compiled .yrc rule files. The vulnerability is caused by insufficient validation of external-variable pointers, which may lead to invalid free in yrrulesdestroy or wild pointer access in yrobjectcreate. An...

0.0025EPSS
SaveExploits0References3
CVE
CVE
•added 2026/09/08 5:13 p.m.•35 views

CVE-2026-77500

A release of invalid pointer or reference vulnerability in the Windows Device Association Service allows an authorized attacker to escalate privileges locally. The flaw is rated CVSS 7.8 (High) with a vector of AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H, meaning an attacker with low local privileges and...

7.8CVSS5.6AI score0.00333EPSS
SaveExploits0References1Affected Software10
Microsoft CVE
Microsoft CVE
•added 2026/09/08 2:00 p.m.•13 views

Windows Device Association Service Elevation of Privilege Vulnerability

Release of invalid pointer or reference in Windows Device Association Service allows an authorized attacker to elevate privileges locally...

7.8CVSS5.8AI score0.00333EPSS
SaveExploits0
Cvelist
Cvelist
•added 2026/09/08 2:02 a.m.•33 views

CVE-2026-16005

Release of Invalid Pointer or Reference in Armoury Crate driver allows a local user to free arbitrary memory via a crafted IOCTL request by bypassing the driver's verification, which can corrupt data structures and cause a system crash BSOD.Refer to the ' Security Update for Armoury Crate App '...

5.8CVSS0.0009EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
•added 2026/09/08 12:00 a.m.•64 views

PT-2026-87957

Name of the Vulnerable Software and Affected Versions Windows Device Association Service affected versions not specified Description A release of an invalid pointer or reference in the Windows Device Association Service allows an authorized attacker to elevate privileges locally. This issue occur...

7.8CVSS5.5AI score0.00333EPSS
SaveExploits0References5
EUVD
EUVD
•added 2026/08/31 6:15 p.m.•14 views

EUVD-2023-60609

Release of an invalid pointer in the AMD kernel mode driver KMD could allow a privileged attacker to create a double free condition potentially leading to arbitrary code execution...

6.4CVSS6.1AI score0.00233EPSS
SaveExploits0References1
Tenable Nessus
Tenable Nessus
•added 2026/07/27 12:00 a.m.•12 views

Siemens SIMATIC S7-1500 CPU 1518 MFP Release of Invalid Pointer or Reference (CVE-2026-31533)

This plugin only works with Tenable.ot. Please visit https://www.tenable.com/products/tenable-ot for more information. %NASLMINLEVEL 80900 C Tenable, Inc. include'compat.inc'; if description scriptid505602; scriptversion"1.5"; scriptsetattributeattribute:"pluginmodificationdate",...

9.8CVSS6.2AI score0.00707EPSS
SaveExploits0References4
Snyk
Snyk
•added 2026/01/21 1:06 a.m.•20 views

Release of Invalid Pointer or Reference

Overview Magick.NET-Q8-AnyCPU is a Magick.NET allows you can use ImageMagick without having to install ImageMagick on your server or desktop. More information about specific builds see the official docs https://github.com/dlemstra/Magick.NET/tree/main/docs Affected versions of this package are...

8.3CVSS5.6AI score
SaveExploits0References2
Snyk
Snyk
•added 2026/01/21 1:06 a.m.•18 views

Release of Invalid Pointer or Reference

Overview Magick.NET-Q16-arm64 is a Magick.NET allows you can use ImageMagick without having to install ImageMagick on your server or desktop. More information about specific builds see the official docs https://github.com/dlemstra/Magick.NET/tree/main/docs Affected versions of this package are...

8.3CVSS5.6AI score
SaveExploits0References2
Rows per page
Query Builder