409222 matches found
Linux Distros Unpatched Vulnerability : CVE-2026-113180
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Memory corruption in ContentCapture in Google Chrome on on Android prior to 156.0.8078.47 allowed a remote attacker to execute arbitrary code inside the sandbox...
Linux Distros Unpatched Vulnerability : CVE-2026-113064
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Memory corruption in OptimizationGuide in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to potentially execute arbitrary code inside the sandbo...
PT-2026-122476
Уязвимость микропрограммного обеспечения шлюза Cisco Expressway связана с выходом операции за границы буфера в памяти. Эксплуатация уязвимости может позволить нарушителю, действующему удаленно, вызвать отказ в обслуживании...
PT-2026-120178
vLLM after 0.24.0 and before 0.31.0 contains a memory exhaustion vulnerability in MOSS-Audio model serving that caches a processor for every distinct request-controlled mm processor kwargs value in an unbounded dictionary. Unauthenticated attackers can send distinct or oversized mel config values...
PT-2026-120155
Vyper from 0.1.0b4 before 0.3.0 contains a memory corruption vulnerability caused by an incorrect stack tip pointer when internal function calls appear inside tuples or nested calls. Contracts using such calls as tuple elements, call arguments, or builtin arguments like concat or ecrecover can...
PT-2026-120169
FreeRDP before 3.32.1 contains a heap-based out-of-bounds read in WinPR's clipboard PNG-to-CF DIB synthesis because winpr read png from buffer allocates a bit-packed buffer for PNGs with bit depth below 8, while winpr bitmap write buffer copies rows assuming one byte per pixel. A malicious RDP...
PT-2026-120440
A flaw was found in libmodulemd. In builds with rpmio support enabled, compressed modulemd YAML is decompressed through a custom read handler that does not enforce a cumulative decompressed-size limit before parsing. An attacker who can supply a highly compressible compressed YAML file can cause...
PT-2026-120640
Name of the Vulnerable Software and Affected Versions NTPsec ntpd versions prior to 1.2.6 Description A heap-based buffer overflow exists in the JJY refclock driver. An attacker controlling the Telephone JJY time source can corrupt memory or cause the ntpd process to crash by sending more than si...
Red Hat: CVE-2026-114501: pillow: Pillow: Information disclosure via improper memory alignment during Arrow export
Pillow is a Python imaging library. From 11.2.1 until 13.0.0, Arrow export assumes that an image's rows are tightly contiguous and exports from im-blocks0.ptr even when PILLOWALIGNMENT makes alignedlinesize include row padding or an aligned offset before the first row. The resulting Arrow buffer...
WebGL DoS
The WebGL interface vulnerability in Google Chrome and Microsoft Edge is related to a buffer overflow in memory. Exploitation of this vulnerability allows a remote attacker to cause a denial of service by using a specially crafted HTML page...
Microsoft Access Code Execution
The vulnerability of Microsoft Access database management systems, as well as Microsoft Office and 365 Apps for Enterprise applications, is related to buffer overflows in dynamic memory. Exploiting this vulnerability can allow an attacker to execute arbitrary code remotely...
WebRTC DoS
The vulnerability in the WebRTC technology of Google Chrome and Microsoft Edge is related to an out-of-bounds memory operation. Exploitation of this vulnerability enables a remote attacker to cause a denial of service by using a specially crafted HTML page...
WebRTC DoS
The vulnerability in the WebRTC technology of Google Chrome and Microsoft Edge is related to an out-of-bounds memory operation. Exploitation of this vulnerability enables a remote attacker to cause a denial of service by using a specially crafted HTML page...
Microsoft Access Code Execution
The vulnerability of Microsoft Access database management systems, as well as Microsoft Office and 365 Apps for Enterprise applications, is related to buffer overflows in dynamic memory. Exploiting this vulnerability can allow an attacker to execute arbitrary code remotely...
Microsoft Access Code Execution
The vulnerability of Microsoft Access database management systems, as well as Microsoft Office and 365 Apps for Enterprise applications, is related to buffer overflows in dynamic memory. Exploiting this vulnerability can allow an attacker to execute arbitrary code remotely...
PT-2026-120545
An out-of-bounds read vulnerability exists in the streaming RPC client of Apache bRPC versions 1.11.0 through 1.17.0 on all platforms. A client that creates multiple streams in a single RPC expects the server response to carry exactly one extra stream id for every additional stream. The response...
Microsoft Access Code Execution
The vulnerability of Microsoft Access database management systems, as well as Microsoft Office and 365 Apps for Enterprise applications, is related to buffer overflows in dynamic memory. Exploiting this vulnerability can allow an attacker to execute arbitrary code remotely...
WebRTC DoS
The vulnerability in the WebRTC technology of Google Chrome and Microsoft Edge is related to an out-of-bounds memory operation. Exploitation of this vulnerability enables a remote attacker to cause a denial of service by using a specially crafted HTML page...
Dawn Component DoS
The vulnerability in the Dawn component of Google Chrome and Microsoft Edge is related to an out-of-bounds memory operation. Exploitation of this vulnerability allows a remote attacker to cause a denial of service by sending a specially crafted HTML page...
WebGL DoS
The WebGL interface vulnerability in Google Chrome and Microsoft Edge is related to a buffer overflow in memory. Exploitation of this vulnerability allows a remote attacker to cause a denial of service by using a specially crafted HTML page...