CVE-2026-67389

Out-of-bounds read in SQL Server allows an authorized attacker to disclose information over a network...

CVE-2026-67390

Buffer over-read in SQL Server allows an authorized attacker to disclose information over a network...

CVE-2026-67369

Out-of-bounds read in SQL Server allows an authorized attacker to disclose information over a network...

CVE-2026-56198

Out-of-bounds read in Microsoft Trace Data Helper allows an authorized attacker to elevate privileges locally...

CVE-2026-31156

CVE-2026-31156 OpenPLC-v3 中存在一个路径注入漏洞，原因是程序未对从命令行传入的文件路径参数进行任何有效性检查。攻击者可通过构造恶意路径读取任意可读文件，造成信息泄露风险。 漏洞类型 输入验证不当（路径注入） 信息泄露（任意文件读取） 漏洞概述 由 gluegenerator.cpp 编译生成的二进制程序存在任意文件读取漏洞，原因是对用户提供的文件路径验证不足。 攻击者在执行程序时可将任意文件指定为输入参数（例如 /etc/passwd）。随后应用程序逐行读取该文件，解析内容，并直接将解析后的数据通过 cout 输出到控制台，同时未对以下内容进行任何验证：...

GHSA-MMG6-4QMV-6PC8 Infracost: Arbitrary file read via config-template readFile symlink traversal

Impact Path traversal via link following in the Infracost config-template parser. The readFile, pathExists, isDir, and matchPaths template functions confined repo-supplied paths with a lexical filepath.Rel check plus a leaf-only os.Lstat: readFile "evil/file" With an intermediate directory symlin...

EUVD-2026-64035

Infracost: Arbitrary file read via config-template readFile symlink traversal...

EUVD-2026-74031

Adobe Commerce is affected by an Incorrect Authorization vulnerability that could result in a Security feature bypass. An attacker could leverage this vulnerability to bypass security measures and gain unauthorized read access. Exploitation of this issue does not require user interaction. Scope i...

CVE-2026-77774

Adobe Commerce is affected by an Incorrect Authorization (CWE-863) vulnerability that can result in a security feature bypass , granting an attacker unauthorized read access . The attack is network-based, requires no privileges and no user interaction , and the scope is changed (crossing a securi...

CVE-2026-58941

CVE-2026-58941 affects multiple functions in iommu.c of the Android kernel . The root cause is an out-of-bounds read/write due to improper input validation, enabling local escalation of privilege with only low privileges required and no user interaction. The CVSS 3.1 score is 7.8 (HIGH) with high...

CVE-2026-58848

CVE-2026-58848 affects multiple functions in alloc.c within the Android kernel , where a race condition permits unauthorized read/write access. An attacker with local, low privileges can exploit this to achieve local escalation of privilege without user interaction. The vulnerability is rated CVS...

EUVD-2026-74025

In forEachLine of MountRegistry.cpp, there is a possible out of bounds read due to a buffer overflow. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation...

CVE-2026-58839

CVE-2026-58839 affects Android (per the 2026-09-01 Android Security Bulletin). The flaw resides in forEachLine within MountRegistry.cpp , where a buffer overflow causes an out-of-bounds read , enabling local privilege escalation without user interaction or additional execution privileges. The CVS...

CVE-2026-55290

CVE-2026-55290 is an out-of-bounds heap read in the setTo function of ResourceTypes.cpp within the Android Framework component, caused by a missing bounds check. It can lead to local information disclosure with low privileges required and no user interaction needed for exploitation. The vulnerabi...

EUVD-2026-74020

In setTo of ResourceTypes.cpp, there is a possible out-of-bounds heap read due to a missing bounds check. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation...

CVE-2026-55290

In setTo of ResourceTypes.cpp, there is a possible out-of-bounds heap read due to a missing bounds check. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation...

EUVD-2026-74010

In getehtoperationchannelwidth of ieee80211common.c, there is a possible out of bounds read due to an incorrect bounds check. This could lead to remote proximal/adjacent information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation...

CVE-2026-49882

In rwmfchandlereadop of rwmfc.cc, there is a possible memory safety issue due to a heap buffer overflow. This could lead to remote code execution with no additional execution privileges needed. User interaction is not needed for exploitation...

EUVD-2026-74004

In readbootregion of fsck.c, there is a possible out of bounds read due to a heap buffer overflow. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation...

CVE-2026-45531

In readbootregion of fsck.c, there is a possible out of bounds read due to a heap buffer overflow. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation...