177496 matches found
CVE-2026-100130
Substance3D - Sampler is affected by an out-of-bounds read vulnerability that could lead to disclosure of sensitive memory. An attacker could leverage this vulnerability to disclose sensitive information. Exploitation of this issue requires user interaction in that a victim must open a malicious...
CVE-2026-100131
Substance3D - Sampler is affected by an out-of-bounds read vulnerability that could lead to disclosure of sensitive memory. An attacker could leverage this vulnerability to disclose sensitive information. Exploitation of this issue requires user interaction in that a victim must open a malicious...
CVE-2026-100126
Bridge is affected by an out-of-bounds read vulnerability that could lead to disclosure of sensitive memory. An attacker could leverage this vulnerability to disclose sensitive information. Exploitation of this issue requires user interaction in that a victim must open a malicious file...
CVE-2026-110143
Use of uninitialized variable in ThirdParty lmzasdk in Google Chrome prior to 155.0.8059.79 allowed a remote attacker to potentially read memory inside the sandbox via a crafted file. Chromium security severity: High...
CVE-2026-110170
Use after free in Bindings in Google Chrome prior to 155.0.8059.79 allowed a remote attacker to read memory inside the sandbox via a crafted HTML page. Chromium security severity: High...
CVE-2026-110143
Use of uninitialized variable in ThirdParty lmzasdk in Google Chrome prior to 155.0.8059.79 allowed a remote attacker to potentially read memory inside the sandbox via a crafted file. Chromium security severity: High...
CVE-2026-110143
Use of uninitialized variable in ThirdParty lmzasdk in Google Chrome prior to 155.0.8059.79 allowed a remote attacker to potentially read memory inside the sandbox via a crafted file. Chromium security severity: High...
CVE-2026-110170
Use after free in Bindings in Google Chrome prior to 155.0.8059.79 allowed a remote attacker to read memory inside the sandbox via a crafted HTML page. Chromium security severity: High...
CVE-2026-110143
A use of uninitialized variable flaw in the ThirdParty lmza_sdk component of Google Chrome (prior to version 155.0.8059.79 ) allows a remote attacker to potentially read memory inside the sandbox by providing a crafted file. The vulnerability was reported by Google and is addressed in the stable ...
CVE-2026-110170
A Use after free vulnerability in the Bindings component of Google Chrome prior to version 155.0.8059.79 allows a remote attacker to read memory inside the sandbox by navigating to a crafted HTML page. This flaw was reported by Google and is part of a broader set of security fixes in the stable c...
Important: Red Hat Security Advisory: OpenEXR security update
An update for OpenEXR is now available for Red Hat Enterprise Linux 8. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from t...
OpenEXR: OpenEXR: Information disclosure and denial of service due to out-of-bounds read
A flaw was found in OpenEXR. An attacker could provide a specially crafted deep image that, when processed, would cause an out-of-bounds read in the TypedDeepImageChannel::row API if the image has a non-zero dataWindow origin. This vulnerability can lead to a heap out-of-bounds read, resulting in...
OpenEXR: OpenEXR: Information disclosure and denial of service via out-of-bounds read
A flaw was found in OpenEXR. An attacker can craft a malicious deep EXR image file that, when opened by an application, can lead to an out-of-bounds read in the OpenEXRUtil library's SampleCountChannel::row API. This vulnerability can result in information disclosure, where adjacent heap memory i...
GHSA-F8QH-MQG4-9939 Microsoft Security Advisory CVE-2026-96232 - .NET and Visual Studio Information Disclosure Vulnerability
Executive summary Microsoft is releasing this security advisory to provide information about a vulnerability in Microsoft.WindowsDesktop.App.Runtime WPF. This advisory also provides guidance on what developers can do to update their applications to remove this vulnerability. Restrictive XAML and...
CVE-2026-100126 Bridge | Out-of-bounds Read (CWE-125)
Bridge is affected by an out-of-bounds read vulnerability that could lead to disclosure of sensitive memory. An attacker could leverage this vulnerability to disclose sensitive information. Exploitation of this issue requires user interaction in that a victim must open a malicious file...
CVE-2026-100126
Adobe Bridge is affected by an out-of-bounds read vulnerability (CWE-125) that could lead to the disclosure of sensitive memory . An attacker can exploit this issue to access sensitive information, but the attack requires user interaction , specifically the victim opening a malicious file. No spe...
EUVD-2026-100614
Out-of-bounds read in SQL Server allows an unauthorized attacker to disclose information over an adjacent network...
CVE-2026-88086
An out-of-bounds read vulnerability exists in Microsoft SQL Server , which may allow an unauthorized attacker to disclose information over an adjacent network. While specific versions are not detailed in the description, related security updates are identified in KB5126967 , KB5128495 , KB5128492...