CVE-2026-12166_CVE-2026-12167_CVE-2026-12168

Multiple Local Privilege Escalation Vulnerabilities in Little Orbit GFAC Driver GFACSysx64.sys | ---|--- CVE IDs| CVE-2026-12166, CVE-2026-12167, CVE-2026-12168 Vendor| Little Orbit Product| GamersFirst Anti-Cheat GFAC Driver GFACSysx64.sys Affected Versions| No version information is embedded in...

CVE-2026-100407

A flaw was found in Git's Windows credential helper. When storing credentials that contain both a password and an OAuth refresh token, an incorrect buffer calculation leads to an out-of-bounds memory write. This issue can cause a Denial of Service DoS by crashing the credential helper process, an...

CVE-2026-121962

A flaw was found in FreeRDP. This vulnerability allows a malicious Remote Desktop Protocol RDP server to cause a Denial of Service DoS or memory corruption by sending fragmented responses during Early User Authorization EUA authentication. Because FreeRDP fails to properly track remaining buffer...

CVE-2026-120064

A flaw was found in psqlODBC. Several driver functions do not validate application-supplied column numbers or row indexes before using them as array indices. An attacker capable of submitting untrusted column or row values to an application using the driver can trigger out-of-bounds memory reads...

chromium-browser: skia: chromium-browser: skia: Integer overflow in Skia in Google Chrome

Integer overflow in Skia in Google Chrome prior to 129.0.6668.70 allowed a remote attacker to perform an out of bounds memory write via a crafted HTML page. Chromium security severity: High...

Xen Hypervisor Flaws Let One Malicious VM Read and Write Any Other VM's Memory

Two flaws in the Xen hypervisor allow a malicious guest virtual machine VM to read and write the memory of other VMs on the same host, including dom0. Dom0 is the VM that, by default, has full permissions and manages the others. Patches are out, and there is no known mitigation, the Xen Project...

CVE-2026-90626

An uncontrolled memory access in the PDF import code of Apache OpenOffice versions through 4.1.16 allows a crafted PDF to cause an out-of-bounds memory write, causing program crash or memory corruption. Users are recommended to upgrade to version 4.1.17, which fixes this issue...

CVE-2026-90634

An uncontrolled memory access in the PDF import code of Apache OpenOffice versions through 4.1.16 allows a crafted PDF to cause an out-of-bounds memory write, causing program crash or memory corruption. Users are recommended to upgrade to version 4.1.17, which fixes this issue...

CVE-2026-90624

An unchecked memory access in the PDF import code of Apache OpenOffice versions through 4.1.16 on allows a crafted PDF to execute an out-of-bounds memory write. This could crash the program or cause memory corruption. Users are recommended to upgrade to version 4.1.17, which fixes this issue...

EUVD-2026-116880

An uncontrolled memory access in the PDF import code of Apache OpenOffice versions through 4.1.16 allows a crafted PDF to cause an out-of-bounds memory write, causing program crash or memory corruption. Users are recommended to upgrade to version 4.1.17, which fixes this issue...

EUVD-2026-116875

An uncontrolled memory access in the PDF import code of Apache OpenOffice versions through 4.1.16 allows a crafted PDF to cause an out-of-bounds memory write, causing program crash or memory corruption. Users are recommended to upgrade to version 4.1.17, which fixes this issue...

EUVD-2026-116874

An unchecked memory access in the PDF import code of Apache OpenOffice versions through 4.1.16 on allows a crafted PDF to execute an out-of-bounds memory write. This could crash the program or cause memory corruption. Users are recommended to upgrade to version 4.1.17, which fixes this issue...

CVE-2026-102704

This CNA information record relates to multiple CVEs; the text explains which aspects/vulnerabilities correspond to which CVE. A common access pattern is a batch of Grant Copy operations acting on adjacent address ranges in the same source or destination page. For performance reasons, Xen caches...

CVE-2026-102703

This CNA information record relates to multiple CVEs; the text explains which aspects/vulnerabilities correspond to which CVE. A common access pattern is a batch of Grant Copy operations acting on adjacent address ranges in the same source or destination page. For performance reasons, Xen caches...

CVE-2026-87041

The RTIO submission-queue verifier rtio_vrfy_sqe() in subsys/rtio/rtio_syscalls.c (prior to v4.3.0) contains an inverted memory-permission check. Because the verifier incorrectly used bitwise AND (&=) to accumulate results from K_SYSCALL_MEMORY(), it accepted pointers that were not accessible to ...

CVE-2026-16511

The Zephyr RTOS kernel is vulnerable to memory corruption via two RTIO syscall verifiers in subsys/rtio/rtio_syscalls.c (or subsys/rtio/rtio_handlers.c before v4.3.0). The z_vrfy_rtio_sqe_cancel() function fails to validate user-supplied pointers, allowing a user-mode thread on a CONFIG_USERSPACE...

EUVD-2026-116584

The Core Temp kernel driver provided by ALCPU is vulnerable to insufficient access control in an exposed IOCTL, which may allow physical memory to be read or written...

CVE-2026-114550

A flaw was found in libwebsockets. When processing Message Queuing Telemetry Transport MQTT publish acknowledgment PUBACK packets, incoming network data is not properly validated, resulting in an out-of-bounds memory write. An unauthenticated remote attacker can exploit this vulnerability by...

CVE-2026-90634: Apache Software Foundation Apache OpenOffice: An uncontrolled memory access in the PDF import code of Apache OpenOffice versions through 4.1.16 allows a crafted PDF…

An uncontrolled memory access in the PDF import code of Apache OpenOffice versions through 4.1.16 allows a crafted PDF to cause an out-of-bounds memory write, causing program crash or memory corruption. Users are recommended to upgrade to version 4.1.17, which fixes this issue...

PT-2026-136935

An uncontrolled memory access in the PDF import code of Apache OpenOffice versions through 4.1.16 allows a crafted PDF to cause an out-of-bounds memory write, causing program crash or memory corruption. Users are recommended to upgrade to version 4.1.17, which fixes this issue...