5932 matches found
CVE-2026-104086 7-Zip < 26.03 SquashFS Uninitialized Memory Disclosure via UID/GID Table
7-Zip before 26.03 contains an uninitialized memory disclosure vulnerability in the SquashFS v4 archive handler SquashfsHandler.cpp that allows attackers to leak heap memory by crafting a malicious archive where the superblock’s noids field is set so that the final metadata block’s expected size ...
CVE-2026-104086
7-Zip versions prior to 26.03 are vulnerable to an uninitialized memory disclosure vulnerability within the SquashFS v4 archive handler (specifically in SquashfsHandler.cpp). An attacker can craft a malicious archive where the superblock’s no_ids field causes a miscomputation of the final metadat...
CVE-2026-98387
The Linux kernel contains a vulnerability in the s390/crypto component where the return codes from skcipher_walk_virt() were not properly checked. This occurs within the ecb_aes_crypt() and ctr_aes_crypt() processing loops. If skcipher_walk_virt() fails, the walk structure may remain in an undefi...
CVE-2026-98387 s390/crypto: Fix skcipher_walk return code handling in aes_s390
In the Linux kernel, the following vulnerability has been resolved: s390/crypto: Fix skcipherwalk return code handling in aess390 The return codes from skcipherwalkvirt were not properly checked before entering the processing loops in ecbaescrypt and ctraescrypt. If skcipherwalkvirt fails, the wa...
EUVD-2026-101036
In the Linux kernel, the following vulnerability has been resolved: s390/crypto: Fix skcipherwalk return code handling in aess390 The return codes from skcipherwalkvirt were not properly checked before entering the processing loops in ecbaescrypt and ctraescrypt. If skcipherwalkvirt fails, the wa...
CVE-2026-98387 s390/crypto: Fix skcipher_walk return code handling in aes_s390
In the Linux kernel, the following vulnerability has been resolved: s390/crypto: Fix skcipherwalk return code handling in aess390 The return codes from skcipherwalkvirt were not properly checked before entering the processing loops in ecbaescrypt and ctraescrypt. If skcipherwalkvirt fails, the wa...
Security Bulletin: IBM Guardium Data Protection is affected by multiple vulnerabilities
Summary IBM Guardium Data Protection has addressed these vulnerabilities in an update. Vulnerability Details CVEID:CVE-2026-31790 DESCRIPTION: Issue summary: Applications using RSASVE key encapsulation to establish a secret encryption key can send contents of an uninitialized memory buffer to a...
CVE-2026-98387
In the Linux kernel, the following vulnerability has been resolved: s390/crypto: Fix skcipherwalk return code handling in aess390 The return codes from skcipherwalkvirt were not properly checked before entering the processing loops in ecbaescrypt and ctraescrypt. If skcipherwalkvirt fails, the wa...
Linux Distros Unpatched Vulnerability : CVE-2026-98387
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - s390/crypto: Fix skcipherwalk return code handling in aess390 The return codes from skcipherwalkvirt were not properly checked before entering the processing...
CVE-2026-90197
A flaw was found in the Linux kernel's Human Interface Device HID haptic subsystem. A local attacker could exploit a vulnerability in the filleffectbuf function, which incorrectly writes uninitialized or leftover memory values to the field-value array for unhandled haptic usages. This uninitializ...
CVE-2026-109948
FreeRDP from 3.0.0 before 3.32.0 contains an uninitialized memory disclosure vulnerability in smartcardTransmitCall that allows malicious RDP servers to read client memory. Servers can send SCardTransmit requests with an invalid card handle and nonzero receive length, causing...
CVE-2026-109948
FreeRDP from 3.0.0 before 3.32.0 contains an uninitialized memory disclosure vulnerability in smartcardTransmitCall that allows malicious RDP servers to read client memory. Servers can send SCardTransmit requests with an invalid card handle and nonzero receive length, causing...
DEBIAN-CVE-2026-109745
Sandbox escape due to uninitialized memory in the DOM: Web Serial component. This vulnerability was fixed in Firefox 158, Firefox ESR 153.5, Thunderbird 158, and Thunderbird 153.5...
DEBIAN-CVE-2026-109712
Sandbox escape due to uninitialized memory in the Graphics component. This vulnerability was fixed in Firefox 158, Firefox ESR 115.43, Firefox ESR 153.5, Thunderbird 158, and Thunderbird 153.5...
CVE-2026-109712
Sandbox escape due to uninitialized memory in the Graphics component. This vulnerability was fixed in Firefox 158, Firefox ESR 115.43, Firefox ESR 153.5, Thunderbird 158, and Thunderbird 153.5...
CVE-2026-109745
Sandbox escape due to uninitialized memory in the DOM: Web Serial component. This vulnerability was fixed in Firefox 158, Firefox ESR 153.5, Thunderbird 158, and Thunderbird 153.5...
CVE-2026-109745
The Web Serial component in the DOM is vulnerable to a sandbox escape caused by uninitialized memory . This issue has been addressed in Firefox 158 and Firefox ESR 153.5 . No specific exploitation details or in-the-wild exploitation links are provided in the documents.
CVE-2026-109712
Sandbox escape due to uninitialized memory in the Graphics component. This vulnerability was fixed in Firefox 158, Firefox ESR 115.43, Firefox ESR 153.5, Thunderbird 158, and Thunderbird 153.5...
CVE-2026-109712
The Mozilla Firefox web browser and Thunderbird email client are affected by a sandbox escape vulnerability. The root cause is uninitialized memory within the Graphics component . This security issue has been remediated in the following versions: Firefox 158 , Firefox ESR 115.43 , Firefox ESR 153...