CVE-2026-89615 fs/ntfs3: bound page_lcns[] index by the log record

In the Linux kernel, the following vulnerability has been resolved: fs/ntfs3: bound pagelcns index by the log record The copylcns loop and the redo shorten loop index pagelcns at j + i, where i runs up to the log record's lcnsfollow. That count is checked only against the record's own length, not...

EUVD-2026-76266

In the Linux kernel, the following vulnerability has been resolved: wifi: rtlwifi: rtl8192du: check QoS TID before indexing tids rtl92dutxfilldesc uses ieee80211gettid to read the QoS TID from the 802.11 header and then uses it as an index into staentry-tids. ieee80211gettid returns the low 4-bit...

CVE-2021-32537

CVE-2021-32537: RTKVHD64 における範囲外アクセスによるプール破損 これは2021年4月初めに Realtek に報告したバグです。影響を受けるドライバは RTKVHD64.sys で、多くの一般的なハードウェアで利用可能と思われます（以下のハードウェア構成でテスト済みですが、おそらくさらに多くの脆弱な機器が存在します）。 Microsoft Surface Laptop、 Microsoft Surface Book、 Microsoft Surface Pro、 Lenovo Thinkpad、 Dell XPS 13。 Realtek...

CVE-2026-87500

Improper validation of array index in ANGLE in Google Chrome prior to...

CVE-2026-1281-CVE-2026-1340-Ivanti-EPMM-RCE

Ivanti EPMM 预认证 RCE 模拟靶标 一个简单的演示应用，用于展示如何复现 Ivanti EPMM 预认证 RCE 漏洞（CVE-2026-1281 / CVE-2026-1340），仅供教育和安全研究目的使用。 漏洞概述 该漏洞利用了 Bash 算术展开（arithmetic expansion）的行为。当在算术上下文中使用一个包含对其他变量引用的变量时，如果被引用的变量包含带有命令替换的数组索引，则该命令会被执行。 利用链 1. 请求包含 st=theValue （字面字符串 "theValue" 并带有填充） 2. 请求包含...

CVE-2020-11019

CVE-2020-11019 En FreeRDP menor o igual a 2.0.0, cuando se ejecuta con el registrador configurado en "WLOGTRACE", podría ocurrir un posible bloqueo de la aplicación debido a la lectura de un índice de array no válido. Los datos podrían imprimirse como cadena en la terminal local. Esto se ha...

DEBIAN-CVE-2026-87500

Improper validation of array index in ANGLE in Google Chrome prior to 153.0.8010.36 allowed a remote attacker to potentially execute arbitrary code outside the sandbox via a crafted HTML page. Chromium security severity: High...

CVE-2026-87500

Improper validation of array index in ANGLE in Google Chrome prior to 153.0.8010.36 allowed a remote attacker to potentially execute arbitrary code outside the sandbox via a crafted HTML page. Chromium security severity: High...

EUVD-2026-74509

Improper validation of array index in ANGLE in Google Chrome prior to 153.0.8010.36 allowed a remote attacker to potentially execute arbitrary code outside the sandbox via a crafted HTML page. Chromium security severity: High...

CVE-2026-87500

Improper validation of array index in ANGLE in Google Chrome prior to 153.0.8010.36 allowed a remote attacker to potentially execute arbitrary code outside the sandbox via a crafted HTML page. Chromium security severity: High...

CVE-2026-87500

CVE-2026-87500 is an improper validation of array index in ANGLE , the cross-platform 2D/3D graphics library used by Google Chrome , in versions prior to 153.0.8010.36 . A remote attacker can exploit this via a crafted HTML page to potentially execute arbitrary code outside the Chrome sandbox . T...

CVE-2026-87500

Improper validation of array index in ANGLE in Google Chrome prior to 153.0.8010.36 allowed a remote attacker to potentially execute arbitrary code outside the sandbox via a crafted HTML page. Chromium security severity: High...

Linux Distros Unpatched Vulnerability : CVE-2026-87500

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Improper validation of array index in ANGLE in Google Chrome prior to 153.0.8010.36 allowed a remote attacker to potentially execute arbitrary code outside the...

NewStart CGSL MAIN 7.02 : rsync Vulnerability (NS-SA-2026-0113)

The remote NewStart CGSL host, running version MAIN 7.02, has rsync packages installed that are affected by a vulnerability: - A malicious client acting as the receiver of an rsync file transfer can trigger an out of bounds read of a heap based buffer, via a negative array index. The malicious...

Unity Linux 20.1050a Security Update: kernel (UTSA-2026-053333)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-053333 advisory. In the Linux kernel, the following vulnerability has been resolved: block: Fix handling of offline queues in blkmqallocrequesthctx This patch prevents that test...

EUVD-2026-70295

Out-of-bounds Write and Improper Validation of Array Index vulnerability in Samsung Open Source TizenFX Samsung/TizenFX allows Overflow Buffers...

CVE-2026-85084

Out-of-bounds Write and Improper Validation of Array Index vulnerability in Samsung Open Source TizenFX Samsung/TizenFX allows Overflow Buffers...

PT-2026-84902

Out-of-bounds Write and Improper Validation of Array Index vulnerability in Samsung Open Source TizenFX Samsung/TizenFX allows Overflow Buffers...

CVE-2026-80598

A flaw was found in the ntfs3 component of the Linux kernel. This vulnerability occurs because the decompresslznt function, responsible for decompressing data, does not correctly check the boundaries of an array index. An attacker could exploit this by providing a corrupted NTFS3 image containing...

UBUNTU-CVE-2026-80598

In the Linux kernel, the following vulnerability has been resolved: ntfs3: fix out-of-bounds read in decompresslznt decompresslznt does not validate array index bounds before accessing the decompression table. A corrupted NTFS3 image with invalid compressed data can trigger an out-of-bounds read...