Lucene search
K

30548 matches found

OSV
OSV
added 2026/04/16 6:16 p.m.0 views

ALPINE-CVE-2026-27820

zlib is a Ruby interface for the zlib compression/decompression library. Versions 3.0.0 and below, 3.1.0, 3.1.1, 3.2.0 and 3.2.1 contain a buffer overflow vulnerability in the Zlib::GzipReader. The zstreambufferungets function prepends caller-provided bytes ahead of previously produced output but...

9.8CVSS6AI score0.00017EPSS
Exploits0References1
OSV
OSV
added 2026/04/16 6:16 p.m.3 views

DEBIAN-CVE-2026-27820

zlib is a Ruby interface for the zlib compression/decompression library. Versions 3.0.0 and below, 3.1.0, 3.1.1, 3.2.0 and 3.2.1 contain a buffer overflow vulnerability in the Zlib::GzipReader. The zstreambufferungets function prepends caller-provided bytes ahead of previously produced output but...

9.8CVSS8.1AI score0.00017EPSS
Exploits0References1
ATTACKERKB
ATTACKERKB
added 2026/04/16 5:27 p.m.1 views

CVE-2026-27820

zlib is a Ruby interface for the zlib compression/decompression library. Versions 3.0.0 and below, 3.1.0, 3.1.1, 3.2.0 and 3.2.1 contain a buffer overflow vulnerability in the Zlib::GzipReader. The zstreambufferungets function prepends caller-provided bytes ahead of previously produced output but...

6.3CVSS6.1AI score0.00017EPSS
Exploits0References3Affected Software1
CVE
CVE
added 2026/04/16 5:27 p.m.17 views

CVE-2026-27820

CVE-2026-27820 is a buffer overflow in the Ruby zlib interface’s Zlib::GzipReader caused by zstream_buffer_ungets not ensuring sufficient Ruby string capacity before memmove. Affected: zlib gem v3.2.0/3.2.1 and earlier (3.0.0 and below, 3.1.0/3.1.1, 3.2.0/3.2.1). Impact: memory corruption when bu...

9.8CVSS6.8AI score0.00017EPSS
Exploits0References2Affected Software1
Cvelist
Cvelist
added 2026/04/16 5:27 p.m.24 views

CVE-2026-27820 zlib: Buffer Overflow in Zlib::GzipReader ungetc via large input leads to memory corruption

zlib is a Ruby interface for the zlib compression/decompression library. Versions 3.0.0 and below, 3.1.0, 3.1.1, 3.2.0 and 3.2.1 contain a buffer overflow vulnerability in the Zlib::GzipReader. The zstreambufferungets function prepends caller-provided bytes ahead of previously produced output but...

6.3CVSS0.00017EPSS
Exploits0References2
Debian CVE
Debian CVE
added 2026/04/16 5:27 p.m.4 views

CVE-2026-27820

zlib is a Ruby interface for the zlib compression/decompression library. Versions 3.0.0 and below, 3.1.0, 3.1.1, 3.2.0 and 3.2.1 contain a buffer overflow vulnerability in the Zlib::GzipReader. The zstreambufferungets function prepends caller-provided bytes ahead of previously produced output but...

9.8CVSS8.1AI score0.00017EPSS
Exploits0
Vulnrichment
Vulnrichment
added 2026/04/16 5:27 p.m.2 views

CVE-2026-27820 zlib: Buffer Overflow in Zlib::GzipReader ungetc via large input leads to memory corruption

zlib is a Ruby interface for the zlib compression/decompression library. Versions 3.0.0 and below, 3.1.0, 3.1.1, 3.2.0 and 3.2.1 contain a buffer overflow vulnerability in the Zlib::GzipReader. The zstreambufferungets function prepends caller-provided bytes ahead of previously produced output but...

6.3CVSS6.8AI score0.00017EPSS
Exploits0References2
AlpineLinux
AlpineLinux
added 2026/04/16 5:27 p.m.2 views

CVE-2026-27820

zlib is a Ruby interface for the zlib compression/decompression library. Versions 3.0.0 and below, 3.1.0, 3.1.1, 3.2.0 and 3.2.1 contain a buffer overflow vulnerability in the Zlib::GzipReader. The zstreambufferungets function prepends caller-provided bytes ahead of previously produced output but...

9.8CVSS6.8AI score0.00017EPSS
Exploits0
CNNVD
CNNVD
added 2026/04/16 12:0 a.m.7 views

zlib 安全漏洞

Zlib is a general-purpose data compression library developed by Mark Adler in the United States. Zlib versions 3.0.0 and earlier, as well as versions 3.1.0, 3.1.1, 3.2.0, and 3.2.1, contain security vulnerabilities. These vulnerabilities stem from a buffer overflow in Zlib::GzipReader, which may...

9.8CVSS7.2AI score0.00017EPSS
Exploits0References3
Tenable Nessus
Tenable Nessus
added 2026/04/16 12:0 a.m.2 views

Linux Distros Unpatched Vulnerability : CVE-2026-27820

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - zlib is a Ruby interface for the zlib compression/decompression library. Versions 3.0.0 and below, 3.1.0, 3.1.1, 3.2.0 and 3.2.1 contain a buffer overflow...

9.8CVSS7.2AI score0.00017EPSS
Exploits0References4
Snyk
Snyk
added 2026/04/15 7:43 p.m.1 views

Improper Validation of Specified Quantity in Input

Overview pypdf is an A pure-python PDF library capable of splitting, merging, cropping, and transforming PDF files Affected versions of this package are vulnerable to Improper Validation of Specified Quantity in Input through the PdfReader object stream and xref stream parsers in pypdf/reader.py...

7.1CVSS5.8AI score0.00052EPSS
Exploits0References3
Krebs on Security
Krebs on Security
added 2026/04/14 9:47 p.m.7 views

Patch Tuesday, April 2026 Edition

Microsoft today pushed software updates to fix a staggering 167 security vulnerabilities in its Windows operating systems and related software, including a SharePoint Server zero-day and a publicly disclosed weakness in Windows Defender dubbed "BlueHammer." Separately, Google Chrome fixed its...

7.8CVSS7.1AI score0.08924EPSS
Exploits4
EUVD
EUVD
added 2026/04/14 6:30 p.m.2 views

EUVD-2026-22335

Acrobat Reader versions 26.001.21411, 24.001.30360, 24.001.30362 and earlier are affected by an Improperly Controlled Modification of Object Prototype Attributes 'Prototype Pollution' vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of...

8.6CVSS6.3AI score0.00256EPSS
Exploits1References2
EUVD
EUVD
added 2026/04/14 6:30 p.m.1 views

EUVD-2026-22337

Acrobat Reader versions 26.001.21411, 24.001.30360, 24.001.30362 and earlier are affected by an Improperly Controlled Modification of Object Prototype Attributes 'Prototype Pollution' vulnerability that could result in arbitrary file system read in the context of the current user. Exploitation of...

6.3CVSS5.9AI score0.00065EPSS
Exploits1References2
NVD
NVD
added 2026/04/14 5:16 p.m.2 views

CVE-2026-34626

Acrobat Reader versions 26.001.21411, 24.001.30360, 24.001.30362 and earlier are affected by an Improperly Controlled Modification of Object Prototype Attributes 'Prototype Pollution' vulnerability that could result in arbitrary file system read in the context of the current user. Exploitation of...

6.3CVSS0.00065EPSS
Exploits1References1
NVD
NVD
added 2026/04/14 5:16 p.m.1 views

CVE-2026-34622

Acrobat Reader versions 26.001.21411, 24.001.30360, 24.001.30362 and earlier are affected by an Improperly Controlled Modification of Object Prototype Attributes 'Prototype Pollution' vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of...

8.6CVSS0.00256EPSS
Exploits1References1
Cvelist
Cvelist
added 2026/04/14 4:18 p.m.24 views

CVE-2026-34622 Acrobat Reader | Improperly Controlled Modification of Object Prototype Attributes ('Prototype Pollution') (CWE-1321)

Acrobat Reader versions 26.001.21411, 24.001.30360, 24.001.30362 and earlier are affected by an Improperly Controlled Modification of Object Prototype Attributes 'Prototype Pollution' vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of...

8.6CVSS0.00256EPSS
Exploits1References1
CVE
CVE
added 2026/04/14 4:18 p.m.40 views

CVE-2026-34622

Acrobat Reader is affected by a Prototype Pollution vulnerability (Improperly Controlled Modification of Object Prototype Attributes, CWE-1321). Affected versions include 26.001.21411, 24.001.30360, 24.001.30362 and earlier. The issue could allow arbitrary code execution in the context of the cur...

8.6CVSS6.3AI score0.00256EPSS
Exploits1References1Affected Software3
Vulnrichment
Vulnrichment
added 2026/04/14 4:18 p.m.3 views

CVE-2026-34622 Acrobat Reader | Improperly Controlled Modification of Object Prototype Attributes ('Prototype Pollution') (CWE-1321)

Acrobat Reader versions 26.001.21411, 24.001.30360, 24.001.30362 and earlier are affected by an Improperly Controlled Modification of Object Prototype Attributes 'Prototype Pollution' vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of...

8.6CVSS6.3AI score0.00256EPSS
Exploits1References1
CVE
CVE
added 2026/04/14 4:18 p.m.15 views

CVE-2026-34626

Acrobat Reader is affected by CVE-2026-34626: vulnerable versions include 26.001.21411, 24.001.30360, and 24.001.30362 and earlier. The issue is an Improperly Controlled Modification of Object Prototype Attributes (prototype pollution) that could enable arbitrary file system read in the context o...

6.3CVSS5.9AI score0.00065EPSS
Exploits1References1Affected Software3
Rows per page
Query Builder