Microsoft Word resource management error vulnerability (CNVD-2026-31550)

Microsoft Office Word is a word processing software within the Microsoft Office suite, widely used for document editing and formatting. There is a resource management vulnerability in Microsoft Office Word; this vulnerability stems from objects not being properly handled after being released...

PT-2026-60183

Name of the Vulnerable Software and Affected Versions NGINX Ingress Controller affected versions not specified Description An injection flaw exists in the configuration generator when the software is configured with Custom Resource Definitions CRDs or Ingress annotations. Multiple user-controllab...

PT-2026-60299

Name of the Vulnerable Software and Affected Versions Secure Access publisher versions prior to 14.55 Description A resource exhaustion issue exists in the Secure Access publisher. Attackers possessing valid credentials for the Secure Access tunnel can trigger a non-persistent Denial of Service...

ROS-20260715-73-0035

The vulnerability of the JIT-compiler of Google Chrome’s Turbofan browser is related to access to resources through incompatible types. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...

Microsoft Office Code Execution Vulnerability (CNVD-2026-28485)

Microsoft Office is a suite of office software products developed by Microsoft Corporation in the United States. Common components of this product include Word, Excel, Access, PowerPoint, and FrontPage. Microsoft Office has a code execution vulnerability, which stems from the use of incompatible...

CVE-2026-61866: Missing Release of Memory after Effective Lifetime

ImageMagick before 7.1.2-26 contains a memory leak vulnerability in the JNG encoder when a blob cannot be opened. Attackers can trigger the memory leak by providing malformed JNG files that fail blob operations, causing resource exhaustion...

CVE-2026-55399: Uncontrolled Resource Consumption

CVE-2026-55399 is a resource exhaustion vulnerability in the Secure Access publisher prior to 14.55. Attackers with valid credentials to the Secure Access tunnel can create a non-persistent DoS against the publisher...

CVE-2026-20158: Improper Control of a Resource Through its Lifetime

As part of Cisco's ongoing commitment to proactive security and product quality, the Cisco RoomOS engineering team has conducted a comprehensive internal security review. This review resulted in a software hardening release that addresses multiple internally discovered vulnerabilities. The...

CVE-2026-36590: Uncontrolled Resource Consumption

An issue in EMQ NanoMQ v.0.24.9 allows a remote attacker to cause a denial of service via the nniqosdbset function in brokertcp.c component...

The vulnerability in the implementation of the SMB network protocol for Windows operating systems allows attackers to disclose sensitive information.

The vulnerability of the SMB network protocol implementation in Windows operating systems is related to the use of an uninitialized resource. Exploiting this vulnerability can allow a perpetrator to disclose sensitive information that is protected by security measures...

The vulnerability of the tool for creating isolated virtual environments in Python’s virtualenv, related to synchronization errors when using a shared resource, allows a malicious actor to trigger a service failure.

The vulnerability of the tool for creating isolated virtual environments in Python virtualenv is related to synchronization errors when using a shared resource. Exploiting this vulnerability can allow an attacker to cause a service failure...

The vulnerability of the magick-distribute-cache service in the console-based image editing tool ImageMagick allows a hacker to disclose protected information.

The vulnerability of the magick-distribute-cache service in the console-based image editing tool ImageMagick is related to synchronization errors when using a shared resource. Exploiting this vulnerability can allow an attacker to disclose protected information...

The vulnerability of the `io.netty.handler.codec.http3.QpackDecoder` component in the Netty framework, which is used for developing network applications, servers, and clients. This vulnerability allows a attacker to cause a service failure.

The vulnerability of the io.netty.handler.codec.http3.QpackDecoder component in the Netty framework, which is used for developing network applications, servers, and clients, involves an uncontrolled resource consumption. Exploiting this vulnerability could allow a malicious actor to cause service...

The vulnerability of the Linux operating system’s kernel, which stems from the inability to release resources after their useful lifespan has ended, allows attackers to trigger service failures.

The vulnerability of the Linux operating system’s kernel is related to the failure to release resources after their useful lifespan has ended. Exploiting this vulnerability allows a remote attacker to cause service interruptions through specially created IPv6 traffic...

The vulnerability of libraries for integrating the OData protocol in modern ASP.NET-based web applications, such as Microsoft.AspNet.OData and Microsoft.AspNetCore.OData, relates to unlimited resource distribution. This allows attackers to cause service failures.

The vulnerability of libraries for integrating the OData protocol in modern ASP.NET-based web applications, such as Microsoft.AspNet.OData and Microsoft.AspNetCore.OData, is related to unlimited resource distribution. Exploiting this vulnerability can allow a malicious actor to cause service...

ROS-20260715-73-0028

The vulnerability of Google Chrome’s WebCodecs interface is related to synchronization errors when using a shared resource. Exploiting this vulnerability can allow an attacker to disclose sensitive information by sending a specially crafted HTML page...

CVE-2026-61868: Missing Release of Memory after Effective Lifetime

ImageMagick before 7.1.2-26 and 6.9.x before 6.9.13-51 contains a memory leak in the YUV decoder that occurs when opening of the blob fails. Repeated triggering can lead to resource exhaustion denial of service...

PT-2026-60223

Name of the Vulnerable Software and Affected Versions Cisco RoomOS affected versions not specified Description An issue exists involving improper control of a resource through its lifetime. A remote attacker could exploit this flaw to cause a denial of service DoS, which is a condition where a...

SUSE SLED15 / SLES15 Security Update : jq (SUSE-SU-2026:2983-1)

The remote SUSE Linux SLED15 / SLEDSAP15 / SLES15 / SLESSAP15 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2026:2983-1 advisory. - CVE-2026-32316: integer overflow within the jvpstringappend and jvpstringcopyreplacebad functions can lead t...

The vulnerability of the sidx_box_read() function in the src/isomedia/box_code_base.c file of the GPAC multimedia platform allows a perpetrator to cause a service failure.

The vulnerability of the sidxboxread function in the src/isomedia/boxcodebase.c file of the GPAC multimedia platform is related to an uncontrolled resource consumption. Exploiting this vulnerability could allow a remote attacker to cause service interruptions...