630970 matches found
Vulnerabilities exploited in Zoom
Zoom has identified vulnerabilities in the Zoom Clients and Zoom VDI Client software. The Zoom Clients contain several vulnerabilities related to the annotation function. One vulnerability involves an incomplete bounds check, which can lead to a buffer overwrite. This allows an external participa...
CVE-2026-68430
A flaw was found in the Linux kernel's drm/amdgpu/gfx8 component. An unnecessary BUGON call within this component could lead to a system crash. This vulnerability could allow a local attacker to cause a Denial of Service DoS, rendering the system unresponsive. Mitigation There is no mitigation fo...
CVE-2026-18663
The CVE-2026-18663 entry concerns 389-ds-base. The get_ldapmessage_controls_ext() function frees the parsed controls array on the Session Tracking critical-control rejection path without clearing the SLAPI_REQCONTROLS pblock slot, leading to a double-free when teardown frees the same pointer agai...
EUVD-2026-57153
A flaw was found in 389-ds-base. The getldapmessagecontrolsext function frees the parsed controls array on the Session Tracking critical-control rejection path without clearing the SLAPIREQCONTROLS pblock slot. Operation teardown then frees the same pointer again, causing a double-free. An...
CVE-2026-18663
A flaw was found in 389-ds-base. The getldapmessagecontrolsext function frees the parsed controls array on the Session Tracking critical-control rejection path without clearing the SLAPIREQCONTROLS pblock slot. Operation teardown then frees the same pointer again, causing a double-free. An...
CVE-2026-18663 389-ds-base: 389-ds-base: pre-authentication double-free in get_ldapmessage_controls_ext() via critical session tracking control
A flaw was found in 389-ds-base. The getldapmessagecontrolsext function frees the parsed controls array on the Session Tracking critical-control rejection path without clearing the SLAPIREQCONTROLS pblock slot. Operation teardown then frees the same pointer again, causing a double-free. An...
CVE-2026-19588
A flaw was found in rlottie, an open-source library for animating vector graphics. This vulnerability involves an integer overflow that can lead to a buffer overflow. A remote attacker could exploit this by tricking a user into interacting with specially crafted input, potentially causing the...
CVE-2026-18663
A flaw was found in 389-ds-base. The getldapmessagecontrolsext function frees the parsed controls array on the Session Tracking critical-control rejection path without clearing the SLAPIREQCONTROLS pblock slot. Operation teardown then frees the same pointer again, causing a double-free. An...
kernel: udf: fix partition descriptor append bookkeeping
A flaw was found in the Linux kernel's Universal Disk Format UDF filesystem. A remote attacker could exploit this vulnerability by tricking a user into mounting a specially crafted UDF image containing repeated partition descriptors. This could lead to a heap out-of-bounds write, potentially...
Security Bulletin:Vulnerability in crypto affects IBM Netezza Appliance
Summary The crypto package is used by IBM Netezza Appliance. IBM Netezza Appliance has addressed the applicable CVECVE-2026-27145 Vulnerability Details CVEID:CVE-2026-27145 DESCRIPTION:x509.Certificate.VerifyHostname previously called matchHostnames in a loop over all DNS Subject Alternative Name...
CVE-2026-73214
A flaw was found in coturn. This vulnerability allows an unauthenticated remote attacker to cause a Denial of Service DoS by sending specially crafted fragmented ClientHello messages. The coturn server retains OpenSSL Datagram Transport Layer Security DTLS session state for these messages before...
CVE-2026-19566
Net::CIDR::Set versions before 0.23 for Perl allow memory exhaustion and malformed set ranges via unbounded IPv6 prefix lengths. The encode method accepts any prefix length matching 0|1-90-9 and passes it to width2bits, which builds the mask as '1' x $width + 8, one character per bit. The inc...
kernel: udf: fix partition descriptor append bookkeeping
A flaw was found in the Linux kernel's Universal Disk Format UDF filesystem. A remote attacker could exploit this vulnerability by tricking a user into mounting a specially crafted UDF image containing repeated partition descriptors. This could lead to a heap out-of-bounds write, potentially...
Security Bulletin:Vulnerability in Netty affects IBM Netezza Appliance
Summary The Netty package is used by IBM Netezza Appliance. IBM Netezza Appliance has addressed the applicable CVECVE-2026-50560 Vulnerability Details CVEID:CVE-2026-50560 DESCRIPTION: Netty is a network application framework for development of protocol servers and clients. Prior to versions...
Security Bulletin:Vulnerability in httpcore5 affects IBM Netezza Appliance
Summary The httpcore5 package is used by IBM Netezza Appliance. IBM Netezza Appliance has addressed the applicable CVEsCVE-2026-54428 Vulnerability Details CVEID:CVE-2026-54428 DESCRIPTION: Allocation of resources without limits or throttling in the HTTP/2 HPACK decoder in Apache HttpComponents...
GHSA-2H3C-W28J-PV5P vulnerabilities
Vulnerabilities for packages: chromium...
CVE-2025-41770
An unauthenticated denial-of-service vulnerability in the device's PLCnext Engineer communication interface allow an remote attacker to interrupt access via the client application. Successful exploitation prevents communication until the PLCnext service is manually restarted...
dhcpcd: dhcpcd infinite loop and out-of-bounds read via zero-length IPv6 ND option in Router Advertisement handling
A flaw was found in dhcpcd's IPv6 Neighbor Discovery Router Advertisement processing. A specially crafted IPv6 Router Advertisement containing a zero-length Neighbor Discovery option can bypass validation during packet storage and later be reparsed without adequate validation, causing the parser ...
CVE-2025-41770 Unauthenticated Denial of Service
An unauthenticated denial-of-service vulnerability in the device's PLCnext Engineer communication interface allow an remote attacker to interrupt access via the client application. Successful exploitation prevents communication until the PLCnext service is manually restarted...
CVE-2025-41770
Technical details regarding CVE-2025-41770 are not publicly provided in the supplied documents. No affected products, versions, root cause, or remediation are specified here. Monitor for updates from official advisories and connected sources.