CVE-2026-92064: Improper Restriction of Operations within the Bounds of a Memory Buffer

Sandbox escape due to incorrect boundary conditions in the Widget: Win32 component. This vulnerability was fixed in Firefox 156, Firefox ESR 153.3, Thunderbird 156, and Thunderbird 153.3...

CVE-2026-92045: Improper Restriction of Operations within the Bounds of a Memory Buffer

Sandbox escape due to incorrect boundary conditions in the WebRTC component. This vulnerability was fixed in Firefox 156, Firefox ESR 153.3, Thunderbird 156, and Thunderbird 153.3...

CVE-2026-92048: Improper Restriction of Operations within the Bounds of a Memory Buffer

Sandbox escape due to incorrect boundary conditions in the Widget: Win32 component. This vulnerability was fixed in Firefox 156, Firefox ESR 153.3, Thunderbird 156, and Thunderbird 153.3...

CVE-2026-92072: Improper Restriction of Operations within the Bounds of a Memory Buffer

Incorrect boundary conditions in the Safe Browsing component. This vulnerability was fixed in Firefox 156, Firefox ESR 153.3, Thunderbird 156, and Thunderbird 153.3...

CVE-2026-92076: Improper Restriction of Operations within the Bounds of a Memory Buffer

Incorrect boundary conditions in the Networking component. This vulnerability was fixed in Firefox 156, Firefox ESR 153.3, Thunderbird 156, and Thunderbird 153.3...

Astra Linux – Vulnerability found in Linux 5.10, Linux 6.1, Linux, Linux 5.15

In the Linux kernel, the following vulnerability has been resolved: nvme-pci: fixed the issue of freeing the HMB descriptor table. The HMB descriptor table is sized based on the maximum number of descriptors that can be used for a given device. However, nvmeallochostmem might break out of the loo...

Astra Linux – Vulnerability in Qemu

Integer overflows and buffer overflows were identified in the ACPI Error Record Serialization Table ERST device of QEMU, within the readerstrecord and writeerstrecord functions. Both issues may allow the guest to exceed the host buffer allocated for the ERST memory device. A malicious guest could...

CVE-2026-84567: Improper Restriction of Operations within the Bounds of a Memory Buffer

The issue was addressed with improved memory handling. This issue is fixed in macOS Golden Gate 27, macOS Sequoia 15.8, macOS Tahoe 26.7. An app may be able to cause unexpected system termination...

CVE-2026-43702: Improper Restriction of Operations within the Bounds of a Memory Buffer

The issue was addressed with improved memory handling. This issue is fixed in iOS 26.6 and iPadOS 26.6, iOS 26.7 and iPadOS 26.7, macOS Sequoia 15.8, macOS Tahoe 26.6, macOS Tahoe 26.7, tvOS 26.6, watchOS 26.6. Processing a maliciously crafted video file may lead to unexpected app termination or...

CVE-2026-84566: Improper Restriction of Operations within the Bounds of a Memory Buffer

The issue was addressed with improved memory handling. This issue is fixed in iOS 26.7 and iPadOS 26.7, iOS 27 and iPadOS 27, macOS Golden Gate 27, macOS Sequoia 15.8, macOS Tahoe 26.7. A local attacker may be able to cause unexpected system termination or corrupt kernel memory...

CVE-2026-84537: Improper Restriction of Operations within the Bounds of a Memory Buffer

The issue was addressed with improved memory handling. This issue is fixed in macOS Golden Gate 27, macOS Sequoia 15.8, macOS Tahoe 26.7. An app may be able to cause unexpected system termination or corrupt kernel memory...

CVE-2026-80945

A flaw was found in the Linux kernel's cryptography module, specifically within the Intel Analytics Accelerator IAA driver. When a hardware error occurs during data decompression, the system attempts to use a software-based fallback. However, due to improper handling of memory buffers during this...

The vulnerability of the handle_fwk_notif_callbacks() function in the drivers/firmware/arm_ffa/driver.c file of the Linux kernel’s firmware driver module allows a attacker to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the handlefwknotifcallbacks function in the drivers/firmware/armffa/driver.c file of the Linux kernel’s firmware driver relates to the execution of operations outside of memory buffers. Exploiting this vulnerability could allow an attacker to compromise the confidentiality,...

The vulnerability of the dp_altmode_vdm() function in the drivers/usb/typec/altmodes/displayport.c file of the Linux operating system’s USB TypeC driver allows a hacker to cause a service failure.

The vulnerability of the dpaltmodevdm function in the drivers/usb/typec/altmodes/displayport.c file of the USB TypeC driver in the Linux operating system is related to the occurrence of operations outside the buffer in memory. Exploiting this vulnerability could allow an attacker to cause a servi...

CVE-2026-79602: Improper Restriction of Operations within the Bounds of a Memory Buffer

A guest with a PCI device assigned that has at least a BAR on the IO port space can trigger a BUG in Xen...

The vulnerability in operating systems macOS, iOS, and iPadOS, related to operations beyond the memory buffer boundaries, allows attackers to trigger a service failure.

The vulnerability of operating systems macOS, iOS, and iPadOS stems from the execution of operations beyond the boundaries of memory buffers. Exploiting this vulnerability can allow a remote attacker to cause service interruptions...

kernel: fs/smb/client: fix out-of-bounds read in cifs_sanitize_prepath

A flaw was found in the Linux kernel's CIFS Common Internet File System client. When the cifssanitizeprepath function processes specially crafted input, such as an empty string or a string containing only delimiters, it can attempt to read data beyond its allocated memory buffer. This out-of-boun...

CVE-2026-76755: Improper Restriction of Operations within the Bounds of a Memory Buffer

Vulnerability in Drupal Gammu SMS Daemon. This issue affects Gammu SMS Daemon versions:...

CVE-2026-76757: Improper Restriction of Operations within the Bounds of a Memory Buffer

Vulnerability in Drupal Gammu SMS Daemon. This issue affects Gammu SMS Daemon versions:...

CVE-2026-76756: Improper Restriction of Operations within the Bounds of a Memory Buffer

Vulnerability in Drupal Gammu SMS Daemon. This issue affects Gammu SMS Daemon versions:...