CVE-2026-44436: Buffer Copy without Checking Size of Input

Quicly is an IETF QUIC protocol implementation intended primarily for use within the H2O HTTP server. Prior to commit 8b178e6, Quicly is vulnerable to a Denial of Service attack through connection state corruption. In QUIC Invariants, the maximum length of a Connection ID is 255 bytes, while QUIC...

The vulnerability of Active Directory Domain Services (AD DS) on Windows operating systems allows a perpetrator to disclose protected information.

The vulnerability of Active Directory Domain Services AD DS on Windows operating systems is related to the escape of operations beyond the buffer in memory. Exploiting this vulnerability can allow an attacker to disclose protected information remotely...

The vulnerability of the WLAN Firmware microprogramming system components in Qualcomm’s embedded chips relates to operations performed outside of the buffer boundaries, which allows attackers to read and manipulate data.

The vulnerability of the BTM Action Frame Handler component in Qualcomm’s embedded software lies in the fact that the operation data is written outside of the memory buffer. Exploiting this vulnerability allows a remote attacker to read and manipulate the data...

openSUSE 16 Security Update : jq (openSUSE-SU-2026:21318-1)

The remote openSUSE 16 host has packages installed that are affected by multiple vulnerabilities as referenced in the openSUSE-SU-2026:21318-1 advisory. This update for jq fixes the following issues - CVE-2026-43896: unbounded recursion in jvobjectmergerecursive can lead to C stack exhaustion and...

The vulnerability of the Windows operating system’s kernel, which allows a hacker to increase their privileges

The vulnerability of the Windows operating system’s kernel is related to the execution of operations beyond the buffer boundaries in memory. Exploiting this vulnerability can allow an attacker to increase their privileges...

The vulnerability of Adobe After Effects’ video and dynamic image editing software lies in the possibility of an operation going beyond the buffer in memory, allowing a hacker to execute arbitrary code.

The vulnerability of Adobe After Effects’ video and dynamic image editing software relates to the execution of operations beyond the buffer boundaries in memory. Exploiting this vulnerability can allow an attacker to execute arbitrary code...

The vulnerability of the HTTP.sys driver on Windows operating systems, which allows attackers to disclose sensitive information

The vulnerability of the HTTP.sys driver on Windows operating systems is related to the execution of operations beyond the buffer in memory. Exploiting this vulnerability can allow an attacker to disclose sensitive information that is protected by security measures...

The vulnerability of the Windows WLAN Host microprogramming system components in Qualcomm’s embedded chips allows attackers to compromise the confidentiality, integrity, and accessibility of protected information.

The vulnerability of the Windows WLAN Host microprogramming software in embedded Qualcomm devices is related to writing beyond the buffer boundaries of memory. Exploiting this vulnerability can allow attackers to compromise the confidentiality, integrity, and accessibility of protected informatio...

Security update for glibc

This update for glibc fixes the following issues CVE-2026-5435: unchecked buffer writing in TSIG handling can lead to an out-of-bounds write bsc1263656. CVE-2026-6238: insufficient RDATA length validation can lead to application crashes or uninitialized memory disclosure bsc1263658. Patch...

The vulnerability of the Resilient File System (ReFS) in Windows operating systems allows a perpetrator to execute arbitrary code.

The vulnerability of the Resilient File System ReFS in Windows operating systems is related to the execution of operations beyond the buffer in memory. Exploiting this vulnerability can allow an attacker to execute arbitrary code...

The vulnerability of the Web Proxy Auto-Discovery Protocol (WPAD) implementation in Windows operating systems allows attackers to enhance their privileges.

The vulnerability of the Web Proxy Auto-Discovery Protocol WPAD implementation in Windows operating systems lies in the execution of operations beyond the buffer boundaries in memory. Exploiting this vulnerability can allow an attacker to enhance their privileges...

The vulnerability of the ipmi-oem software for intra-band and out-of-band data transmission over the IPMI FreeIPMI protocol allows a intruder to cause a service failure.

The vulnerability of the ipmi-oem software for intra-band and out-of-band data transmission over the IPMI FreeIPMI protocol is related to the execution of operations beyond the buffer boundaries in memory. Exploiting this vulnerability could allow a malicious actor to cause service failures...

kernel: crypto: ccp - copy IV using skcipher ivsize

A flaw was found in the Linux kernel's cryptographic coprocessor CCP driver. When processing AFALG rfc3686-ctr-aes-ccp requests, the ccpaescomplete function attempts to restore more data than the allocated buffer for the Initialization Vector IV can hold. This leads to a buffer overrun, which can...

USN-8540-1: OpenVPN vulnerabilities

It was discovered that OpenVPN had a 1-byte buffer overrun when handling NTLMv2 proxy responses. An attacker could use this issue to cause a denial of service or possibly execute arbitrary code. This issue only affected Ubuntu 24.04 LTS and Ubuntu 26.04 LTS. CVE-2026-11771 It was discovered that...

USN-8540-1 openvpn vulnerabilities

It was discovered that OpenVPN had a 1-byte buffer overrun when handling NTLMv2 proxy responses. An attacker could use this issue to cause a denial of service or possibly execute arbitrary code. This issue only affected Ubuntu 24.04 LTS and Ubuntu 26.04 LTS. CVE-2026-11771 It was discovered that...

The vulnerability of the svgin_process() function on the GPAC multimedia platform allows a hacker to induce a service failure.

The vulnerability of the svginprocess function on the GPAC multimedia platform is related to the execution of operations outside the buffer in memory. Exploiting this vulnerability could allow an attacker to cause a service failure...

The vulnerability of the document converter in Markdown syntax in HTML RDiscount, related to the operation of writing beyond the buffer boundaries in memory, allows attackers to trigger a service failure.

The vulnerability of the document converter in Markdown syntax in HTML RDiscount is related to the execution of operations beyond the buffer boundaries in memory. Exploiting this vulnerability could allow a malicious actor to cause service failures...

ROS-20260713-73-0053

The vulnerability of the RDP client FreeRDP relates to the execution of operations beyond the buffer boundaries in memory. Exploiting this vulnerability can allow an attacker, operating remotely, to gain unauthorized access to protected information...

CVE-2026-57156

FreeRDP is a free implementation of the Remote Desktop Protocol. Prior to 3.28.0 on 32-bit builds, FreeRDP clients contain an integer overflow in updatereaddeltapoints in libfreerdp/core/orders.c when multiplying an attacker-controlled point count by sizeofDELTAPOINT, allowing a malicious RDP pee...

UBUNTU-CVE-2026-55827

FreeRDP is a free implementation of the Remote Desktop Protocol. Prior to 3.27.1, FreeRDP clients launched with the non-default /cache:codec:rfx option pass desktop stride and height to RemoteFX decoding for Cache Bitmap V3 data while allocating bitmap-data only for the smaller DstWidth and...