187512 matches found
CVE-2026-110658: Out-of-bounds Read
Sofia-SIP through 1.13.18 contains a heap out-of-bounds read vulnerability in msgmultipartparse that allows unauthenticated remote attackers to crash the process by sending oversized MIME boundaries. Attackers can send an INVITE with a multipart Content-Type whose boundary exceeds the body length...
PT-2026-114098
Sofia-SIP through 1.13.18 contains a heap out-of-bounds read vulnerability in msg multipart parse that allows unauthenticated remote attackers to crash the process by sending oversized MIME boundaries. Attackers can send an INVITE with a multipart Content-Type whose boundary exceeds the body...
PT-2026-114285
Redash is a package for data visualization and sharing. From 26.0.0 until 26.9.0, the DuckDB query runner's connect path in redash/query runner/duckdb.py created connections with enable external access left at its default value of true. A user with query access to an administrator-created DuckDB...
Exploit for CVE-2026-109721
CVE-2026-109721: one wrong shift, sixteen gigabytes away Fire...
CVE-2026-53564
Vulnerability in Citrix UniconOS leading to Arbitrary file read and write This issue affects UniconOS: before 2607.2 CR and before 2603 LTSR CU2...
CVE-2026-84420
Out-of-bounds read vulnerability in Citirx Citrix Workspace app for Windows. This issue affects Citrix Workspace app for Windows: before 2603.20 CR, before LTSR 2607, and before LTSR 2507 CU3...
DEBIAN-CVE-2026-110170
Use after free in Bindings in Google Chrome prior to 155.0.8059.79 allowed a remote attacker to read memory inside the sandbox via a crafted HTML page. Chromium security severity: High...
CVE-2026-110170
Use after free in Bindings in Google Chrome prior to 155.0.8059.79 allowed a remote attacker to read memory inside the sandbox via a crafted HTML page. Chromium security severity: High...
DEBIAN-CVE-2026-110143
Use of uninitialized variable in ThirdParty lmzasdk in Google Chrome prior to 155.0.8059.79 allowed a remote attacker to potentially read memory inside the sandbox via a crafted file. Chromium security severity: High...
CVE-2026-110143
Use of uninitialized variable in ThirdParty lmzasdk in Google Chrome prior to 155.0.8059.79 allowed a remote attacker to potentially read memory inside the sandbox via a crafted file. Chromium security severity: High...
CVE-2026-110143
Use of uninitialized variable in ThirdParty lmzasdk in Google Chrome prior to 155.0.8059.79 allowed a remote attacker to potentially read memory inside the sandbox via a crafted file. Chromium security severity: High...
CVE-2026-110170
Use after free in Bindings in Google Chrome prior to 155.0.8059.79 allowed a remote attacker to read memory inside the sandbox via a crafted HTML page. Chromium security severity: High...
CVE-2026-53564
A vulnerability in Citrix UniconOS (formerly eLux) allows for arbitrary file read and write actions. The issue is caused by CWE-668: Exposure of Resource to Wrong Sphere . The attack requires the target system to be within range of an attacker-controlled wireless access point and for a user to in...
CVE-2026-53564 Arbitrary file read and write
Vulnerability in Citrix UniconOS leading to Arbitrary file read and write This issue affects UniconOS: before 2607.2 CR and before 2603 LTSR CU2...
CVE-2026-84420 Out-of-Bounds Write and Out-of-Bounds Read
Out-of-bounds read vulnerability in Citirx Citrix Workspace app for Windows. This issue affects Citrix Workspace app for Windows: before 2603.20 CR, before LTSR 2607, and before LTSR 2507 CU3...
CVE-2026-84420 Out-of-Bounds Write and Out-of-Bounds Read
Out-of-bounds read vulnerability in Citirx Citrix Workspace app for Windows. This issue affects Citrix Workspace app for Windows: before 2603.20 CR, before LTSR 2607, and before LTSR 2507 CU3...
CVE-2026-84420
The Citrix Workspace app for Windows is vulnerable to an Out-of-bounds Read and Out-of-bounds Write vulnerability (CWE-125, CWE-787). The issue requires local access to the target system and allows for potential high impact on availability. Affected versions include Citrix Workspace app for Windo...
CVE-2026-90530
ColdFusion RDS is affected by an Improper Limitation of a Pathname to a Restricted Directory 'Path Traversal' vulnerability that could lead to arbitrary file system read. An attacker could exploit this vulnerability to access sensitive files and directories outside the intended access scope...