70389 matches found
UBUNTU-CVE-2026-110604
Mini-XML 4.0.0 through 4.0.6 contains an off-by-one stack out-of-bounds write in mxmlstrtod when the locale decimal point is not '.'. Attackers can supply XML with a 63-digit REAL value followed by '.' to write a NUL byte past the 64-byte stack buffer, corrupting stack memory or crashing the...
CVE-2026-110604
Mini-XML 4.0.0 through 4.0.6 contains an off-by-one stack out-of-bounds write in mxmlstrtod when the locale decimal point is not '.'. Attackers can supply XML with a 63-digit REAL value followed by '.' to write a NUL byte past the 64-byte stack buffer, corrupting stack memory or crashing the...
CVE-2026-110604 Mini-XML 4.0.0 through 4.0.6 Stack Out-of-Bounds Write via mxml_strtod()
Mini-XML 4.0.0 through 4.0.6 contains an off-by-one stack out-of-bounds write in mxmlstrtod when the locale decimal point is not '.'. Attackers can supply XML with a 63-digit REAL value followed by '.' to write a NUL byte past the 64-byte stack buffer, corrupting stack memory or crashing the...
EUVD-2026-101232
Mini-XML 4.0.0 through 4.0.6 contains an off-by-one stack out-of-bounds write in mxmlstrtod when the locale decimal point is not '.'. Attackers can supply XML with a 63-digit REAL value followed by '.' to write a NUL byte past the 64-byte stack buffer, corrupting stack memory or crashing the...
CVE-2026-110604 Mini-XML 4.0.0 through 4.0.6 Stack Out-of-Bounds Write via mxml_strtod()
Mini-XML 4.0.0 through 4.0.6 contains an off-by-one stack out-of-bounds write in mxmlstrtod when the locale decimal point is not '.'. Attackers can supply XML with a 63-digit REAL value followed by '.' to write a NUL byte past the 64-byte stack buffer, corrupting stack memory or crashing the...
CVE-2026-110604
The Mini-XML library (versions 4.0.0 through 4.0.6 ) is vulnerable to an off-by-one stack out-of-bounds write within the mxml_strtod() function. This issue occurs when the system locale decimal point is not set to '.'. An attacker can trigger the vulnerability by providing XML containing a 63-dig...
CVE-2026-88107
Use after free in Windows Cloud Files Mini Filter Driver allows an authorized attacker to elevate privileges locally...
CVE-2026-88106
Use after free in Windows Cloud Files Mini Filter Driver allows an authorized attacker to elevate privileges locally...
CVE-2026-83696
Use after free in Windows Cloud Files Mini Filter Driver allows an authorized attacker to elevate privileges locally...
CVE-2026-83696
A Use after free vulnerability exists in the Windows Cloud Files Mini Filter Driver . This flaw allows an authorized attacker to achieve local privilege escalation . The vulnerability has a CVSS 3.1 score of 7.0 (High) . No specific exploitation details or patch versions are provided in the docum...
CVE-2026-88106
A use after free vulnerability exists in the Windows Cloud Files Mini Filter Driver . This flaw allows an authorized attacker to achieve local privilege elevation . No specific software versions or remediation details are provided in the documents, and there are no reports of active exploits.
CVE-2026-88107
A Use after free vulnerability exists in the Windows Cloud Files Mini Filter Driver . This flaw allows an authorized attacker to perform a local privilege escalation . The vulnerability is associated with CWE-416 (Use After Free) and CWE-362 (Race Condition). Official remediation is available via...
tanstack-shield
🛡️ tanstack-shield One-command supply-chain attack scanner for CVE-2026-45321 / GHSA-g7cv-rxg3-hmpx Detects the "Mini Shai-Hulud" worm that compromised 42 @tanstack/ npm packages 84 malicious versions on May 11, 2026. One line — scan your project curl -fsSL...
Windows Cloud Files Mini Filter Driver Elevation of Privilege Vulnerability
Use after free in Windows Cloud Files Mini Filter Driver allows an authorized attacker to elevate privileges locally...
Windows Cloud Files Mini Filter Driver Elevation of Privilege Vulnerability
Use after free in Windows Cloud Files Mini Filter Driver allows an authorized attacker to elevate privileges locally...
Windows Cloud Files Mini Filter Driver Elevation of Privilege Vulnerability
Use after free in Windows Cloud Files Mini Filter Driver allows an authorized attacker to elevate privileges locally...
tanstack-compromise-checker
tanstack-compromise-checker ⚠️ Disclaimer: This tool was built for my own use case. All indicators are derived from the following advisory sources: GHSA-g7cv-rxg3-hmpx Snyk: TanStack npm packages compromised StepSecurity: Mini Shai-Hulud deep dive If new IOCs, payload variants, or attacker...
mini-shai-hulud-detector
Mini Shai-Hulud Detector One-command scanner for the Mini Shai-Hulud npm supply-chain attack CVE-2026-45321, CVSS 9.6. Critical: detect before rotating tokens The worm installs a persistence daemon gh-token-monitor that runs rm -rf if it detects credential revocation. Do not rotate your GitHub PA...
CVE-2026-83696: Use After Free
Use after free in Windows Cloud Files Mini Filter Driver allows an authorized attacker to elevate privileges locally...
PT-2026-112922
Name of the Vulnerable Software and Affected Versions Windows Cloud Files Mini Filter Driver affected versions not specified Description A use-after-free condition in the Windows Cloud Files Mini Filter Driver allows an authorized attacker to elevate privileges locally. Use-after-free is a memory...