The vulnerability of Windows Kernel Memory in the Windows operating system allows attackers to disclose sensitive information that is protected by security measures.

The vulnerability of Windows Kernel Memory in the operating system is related to operations that go beyond the buffer boundaries in memory. Exploiting this vulnerability can allow an attacker to disclose sensitive information that is protected by security measures...

The vulnerability of Microsoft Word packages in Microsoft Office and Microsoft 365 Apps for Enterprise, related to reading data beyond the buffer in memory, allows attackers to disclose protected information.

The vulnerability of Microsoft Word packages in Microsoft Office and Microsoft 365 Apps for Enterprise lies in the reading of data beyond the buffer in memory. Exploiting this vulnerability can allow an attacker to disclose protected information...

PT-2026-33128

Name of the Vulnerable Software and Affected Versions GIMP affected versions not specified Description A heap buffer over-read occurs in the icns slurp function when processing specially crafted ICNS image files. This can lead to application crashes or information disclosure. Recommendations At t...

EUVD-2026-22430

Buffer over-read in Windows Projected File System allows an authorized attacker to elevate privileges locally...

CVE-2026-26184

Buffer over-read in Windows Projected File System allows an authorized attacker to elevate privileges locally...

CVE-2026-26169

Buffer over-read in Windows Kernel Memory allows an authorized attacker to disclose information locally...

Windows Projected File System Elevation of Privilege Vulnerability

Buffer over-read in Windows Projected File System allows an authorized attacker to elevate privileges locally...

Medium: gimp

Issue Overview: A flaw was found in GIMP. This issue is a heap buffer over-read in GIMP's PCX file loader due to an off-by-one error. A remote attacker could exploit this by convincing a user to open a specially crafted PCX image. Successful exploitation could lead to out-of-bounds memory...

PT-2026-32746

Name of the Vulnerable Software and Affected Versions Windows Kernel affected versions not specified Description A buffer over-read in Windows Kernel Memory allows an authorized attacker to disclose sensitive information locally, which may affect the system. A buffer over-read occurs when a progr...

The vulnerability of the Web Speech component in Google Chrome and Microsoft Edge allows attackers to compromise the confidentiality, integrity, and accessibility of protected information.

The vulnerability of the Web Speech component in Google Chrome and Microsoft Edge relates to reading beyond the buffer limit. Exploiting this vulnerability can allow a malicious actor to compromise the confidentiality, integrity, and accessibility of the protected information through a specially...

The vulnerability of the otool component in the Xcode integrated development environment for macOS operating systems allows a hacker to cause a system crash.

The vulnerability of the otool component in the Xcode integrated development environment for MacOS operating systems relates to reading beyond the buffer boundaries. Exploiting this vulnerability can allow an attacker to cause the system to terminate abnormally...

ROS-20260414-73-0058

A vulnerability in the ieee80211rxhaction function in the net/mac80211/rx.c module of the mac80211 stack implementation of the Linux operating system kernel is related to memory reads outside of the allocated buffer. Exploitation of the vulnerability may allow an intruder to affect confidentialit...

ROS-20260414-73-0032

A vulnerability in the brcmfgetassocies function in the drivers/net/wireless/broadcom/brcm80211/brcmfmac/cfg80211.c module of the Broadcom wireless adapter driver of the Linux operating system kernel is related to reading beyond buffer boundaries. Exploitation of the vulnerability could allow an...

ROS-20260414-73-0038

A vulnerability in the dbMount function in the fs/jfs/jfsdmap.c module of the JFS file system of the Linux operating system kernel is related to reading beyond buffer boundaries. Exploitation of the vulnerability could allow an attacker to gain access to protected information or cause a denial of...

Medium: libvncserver

Issue Overview: LibVNCServer versions 0.9.15 and prior fixed in commit 009008e contain a heap out-of-bounds read vulnerability in the UltraZip encoding handler that allows a malicious VNC server to cause information disclosure or application crash. Attackers can exploit improper bounds checking i...

UBUNTU-CVE-2026-33999

A flaw was found in the X.Org X server. This integer underflow vulnerability, specifically in the XKB compatibility map handling, allows an attacker with local or remote X11 server access to trigger a buffer read overrun. This can lead to memory-safety violations and potentially a denial of servi...

CVE-2026-39979

jq is a command-line JSON processor. In commits before 2f09060afab23fe9390cce7cb860b10416e1bf5f, the jvparsesized API in libjq accepts a counted buffer with an explicit length parameter, but its error-handling path formats the input buffer using %s in jvstringfmt, which reads until a NUL terminat...

CVE-2026-39979

jq is a command-line JSON processor. In commits before 2f09060afab23fe9390cce7cb860b10416e1bf5f, the jvparsesized API in libjq accepts a counted buffer with an explicit length parameter, but its error-handling path formats the input buffer using %s in jvstringfmt, which reads until a NUL terminat...

The vulnerability of the WebAudio component in the Google Chrome browser on Mac operating systems allows a hacker to disclose protected information.

The vulnerability of the WebAudio component in the Google Chrome browser for Mac operating systems involves reading data beyond the buffer limit in memory. Exploiting this vulnerability could allow a malicious actor to disclose sensitive information by sending a specially crafted HTML page...

The vulnerability of the formWISP5G() function (/goform/formWISP5G) of the Belkin F9K1122 Wi-Fi range extender software allows a intruder to execute arbitrary code.

The vulnerability of the formWISP5G function /goform/formWISP5G of the Belkin F9K1122 Wi-Fi range extender software relates to the reading of data beyond the buffer in memory during the processing of the webpage parameter. Exploiting this vulnerability could allow a malicious actor to execute...