Lucene search
+L

92 matches found

NVD
NVD
•added 2026/10/05 7:17 p.m.•17 views

CVE-2026-49933

In handlelemonitordeviceevent of msft.cc, there is a possible control-flow hijack in the privileged bluetooth process due to an uninitialized pointer dereference. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for...

7.8CVSS0.00073EPSS
SaveExploits0References1
CVE
CVE
•added 2026/10/05 6:23 p.m.•43 views

CVE-2026-49933

A vulnerability exists in the msft.cc component within the handle_le_monitor_device_event function. An uninitialized pointer dereference allows for a potential control-flow hijack within a privileged Bluetooth process. This flaw could enable a local escalation of privilege without requiring addit...

7.8CVSS5.8AI score0.00073EPSS
SaveExploits0References1Affected Software1
Vulnrichment
Vulnrichment
•added 2026/10/05 6:23 p.m.•16 views

CVE-2026-49933

In handlelemonitordeviceevent of msft.cc, there is a possible control-flow hijack in the privileged bluetooth process due to an uninitialized pointer dereference. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for...

5.8AI score0.00073EPSS
SaveExploits0References1
EUVD
EUVD
•added 2026/10/05 6:23 p.m.•12 views

EUVD-2026-92603

In handlelemonitordeviceevent of msft.cc, there is a possible control-flow hijack in the privileged bluetooth process due to an uninitialized pointer dereference. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for...

7.8CVSS5.8AI score0.00073EPSS
SaveExploits0References1
Cvelist
Cvelist
•added 2026/10/05 6:23 p.m.•39 views

CVE-2026-49933

In handlelemonitordeviceevent of msft.cc, there is a possible control-flow hijack in the privileged bluetooth process due to an uninitialized pointer dereference. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for...

0.00073EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
•added 2026/10/05 12:00 a.m.•10 views

PT-2026-106149

Name of the Vulnerable Software and Affected Versions Microsoft Bluetooth affected versions not specified Description An uninitialized pointer dereference in the handle le monitor device event function within msft.cc allows for a control-flow hijack in the privileged bluetooth process. This issue...

7.8CVSS5.6AI score0.00073EPSS
SaveExploits0References4
osv_asb
osv_asb
•added 2026/10/01 12:00 a.m.•28 views

ASB-A-522372651

In handlelemonitordeviceevent of msft.cc, there is a possible control-flow hijack in the privileged bluetooth process due to an uninitialized pointer dereference. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for...

7.8CVSS5.8AI score0.00073EPSS
SaveExploits0References1
CVE
CVE
•added 2026/09/11 7:43 p.m.•38 views

CVE-2026-89505

CVE-2026-89505 is a vulnerability in the Linux kernel RDMA/uverbs subsystem. In the legacy write() path, the uverbs_attr_bundle passed to provider code does not contain an ioctl method element. If malformed provider input causes the common uverbs validation code to emit an error message, uverbs_g...

5.8AI score0.00198EPSS
SaveExploits0References2
EUVD
EUVD
•added 2026/09/11 7:43 p.m.•20 views

EUVD-2026-76411

In the Linux kernel, the following vulnerability has been resolved: RDMA/uverbs: Guard legacy bundles without methodelm The legacy write path dispatches through a uverbsapiwritemethod, but the uverbsattrbundle passed to provider code does not have an ioctl method element. If malformed provider...

5.8AI score0.00198EPSS
SaveExploits0References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/08/06 12:00 a.m.•8 views

CVE-2026-64602: Undefined Security Weakness

In the Linux kernel, the following vulnerability has been resolved: iio: adc: spear: Initialize completion before requesting IRQ In the report from Jaeyoung Chung: "spearadcprobe in drivers/iio/adc/spearadc.c registers its interrupt handler with devmrequestirq before it initializes st-completion...

5.8AI score0.00165EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
•added 2026/07/30 12:00 a.m.•9 views

PT-2026-76370

ImageMagick is free and open-source software used for editing and manipulating digital images. Prior to versions 7.1.2-16 and 6.9.13-41, an uninitialized pointer dereference vulnerability exists in the JBIG decoder due to a missing check. This vulnerability is fixed in 7.1.2-16 and 6.9.13-41...

7.5CVSS6.9AI score0.00654EPSS
SaveExploits0References6
Tenable Nessus
Tenable Nessus
•added 2026/03/22 12:00 a.m.•32 views

SUSE SLES15: GraphicsMagick / GraphicsMagick-devel / libGraphicsMagick++-Q16-12 / etc (SUSE-SU-2026:0938-1)

The remote SUSE Linux SLES15 / openSUSE 15 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2026:0938-1 advisory. - CVE-2026-28691: missing check in the JBIG decoder can lead to an uninitialized pointer dereference bsc1259455. - CVE-2026-30883...

7.8CVSS7.1AI score0.00654EPSS
SaveExploits0References7
osv_ghsa
osv_ghsa
•added 2026/03/12 2:12 p.m.•29 views

GHSA-WJ8W-PJXF-9G4F ImageMagick has uninitialized pointer dereference in JBIG decoder

An uninitialized pointer dereference vulnerability exists in the JBIG decoder due to a missing check...

7.5CVSS7.1AI score0.00654EPSS
SaveExploits0References4
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/03/10 12:00 a.m.•4 views

CVE-2026-28691: Unchecked Return Value

ImageMagick is free and open-source software used for editing and manipulating digital images. Prior to versions 7.1.2-16 and 6.9.13-41, an uninitialized pointer dereference vulnerability exists in the JBIG decoder due to a missing check. This vulnerability is fixed in 7.1.2-16 and 6.9.13-41...

7.5CVSS6.9AI score0.00654EPSS
SaveExploits0References4
EUVD
EUVD
•added 2025/10/07 12:30 a.m.•25 views

EUVD-2010-3685

Malware in sbrugna...

7.5CVSS6.8AI score0.03597EPSS
SaveExploits0References55
EUVD
EUVD
•added 2025/10/07 12:30 a.m.•18 views

EUVD-2011-2706

Malware in sbrugna...

4.3CVSS7AI score0.01385EPSS
SaveExploits1References9
EUVD
EUVD
•added 2025/10/07 12:30 a.m.•20 views

EUVD-2013-4190

Malware in sbrugna...

4CVSS6.7AI score0.02678EPSS
SaveExploits0References17
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/09/04 12:00 a.m.•5 views

CVE-2025-38691: Use of Uninitialized Resource

In the Linux kernel, the following vulnerability has been resolved: pNFS: Fix uninited ptr deref in block/scsi layout The error occurs on the third attempt to encode extents. When function exttreepreparecommit reallocates a larger buffer to retry encoding extents, the "layoutupdatepages" page arr...

5.5CVSS6AI score0.00183EPSS
SaveExploits0References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2024/11/15 12:00 a.m.•12 views

CVE-2024-24449: Access of Uninitialized Pointer

An uninitialized pointer dereference in the NasPdu::NasPdu component of OpenAirInterface CN5G AMF up to v2.0.0 allows attackers to cause a Denial of Service DoS via a crafted InitialUEMessage message sent to the AMF...

6.5CVSS5.5AI score0.00427EPSS
SaveExploits0References1
osv_cve
osv_cve
•added 2020/12/11 11:15 p.m.•31 views

CVE-2020-17469

An issue was discovered in FNET through 4.6.4. The code for IPv6 fragment reassembly tries to access a previous fragment starting from a network incoming fragment that still doesn't have a reference to the previous one which supposedly resides in the reassembly list. When faced with an incoming...

7.5CVSS7AI score
SaveExploits0References3
Rows per page
Query Builder