14442 matches found
CVE-2026-72162
A flaw was found in ocfs2, a component of the Linux kernel. On-disk corruption of an inode's embedded extent list can lead to an array-index-out-of-bounds error. This occurs when the lnextfreerec value is zero or exceeds lcount during a write operation to the affected file. A local attacker with...
CVE-2026-72236
A flaw was found in the Linux kernel's s390 performance monitoring component s390/perfcpumcf. A userspace-controlled variable was used as an array index without proper speculation barriers. This could allow a local attacker to potentially exploit speculative execution, leading to information...
ANT-2026-SXD0NN2P · supabase/supabase · SQL Injection
sql-injection high Severity Claude high · Security research firm - · Maintainer - Discovered by Claude Mythos Preview REPORT Anthropic's analysis of this finding, sealed at approval. ANT-2026-SXD0NN2P: Link-driven SQL injection via table-editor filter ARRAY bypass The Supabase Studio Table Editor...
SUSE CVE-2026-68154
In the Linux kernel, the following vulnerability has been resolved: libceph: reject zero bucket types in crushdecode CRUSH bucket type 0 is reserved for devices. The mapper relies on that invariant and uses type 0 to identify leaf devices. If crushdecode accepts a bucket with type 0, a malformed...
PT-2026-77161
Name of the Vulnerable Software and Affected Versions libmodplug versions prior to 0.8.9.2 Description An out-of-bounds read exists in the pat smplooped function within src/load pat.cpp. The issue occurs because the function only validates the upper bound of the sample index against MAXSMP and...
Linux Distros Unpatched Vulnerability : CVE-2026-72427
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - bpf: Fix effective prog array index with BPFFPREORDER replaceeffectiveprog and purgeeffectiveprogs located the slot in the effective array by walking the progra...
Linux Distros Unpatched Vulnerability : CVE-2026-74409
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In the Linux kernel, the following vulnerability has been resolved: wifi: rtw89: add bounds check on firmware macid in link lookup The macid field in RX...
Linux Distros Unpatched Vulnerability : CVE-2026-74384
"The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - nvme-multipath: fix flex array size in struct nvmenshead struct nvmenshead contains a flexible array member, currentpath, which is indexed using the NUMA node...
ANT-2026-H4RM2RMD · htslib · Out-of-Bounds Access
oob-read medium Severity Claude medium · Security research firm medium · Maintainer - Discovered by Claude Mythos Preview REPORT Anthropic's analysis, sealed at approval. Disclosure to the maintainer was performed by Trail of Bits. ANT-2026-H4RM2RMD: Out-of-bounds access in CRAM xpack/xrle...
ANT-2026-K6DHGAYS · webkit · Heap-buffer-overflow
heap-buffer-overflow critical Severity Claude critical · Security research firm critical · Maintainer - Discovered by Claude Mythos Preview REPORT Anthropic's analysis, sealed at approval. Disclosure to the maintainer was performed by Trail of Bits. ANT-2026-K6DHGAYS: Heap-buffer-overflow in...
ANT-2026-DD4RKCBA · OpenSC · Stack Buffer Overflow
stack-buffer-overflow medium Severity Claude medium · Security research firm medium · Maintainer - Discovered by Claude Mythos Preview REPORT Anthropic's analysis, sealed at approval. Disclosure to the maintainer was performed by Trail of Bits. ANT-2026-DD4RKCBA: Stack buffer overflow in...
ANT-2026-JBKARRJ7 · libvips · Out-of-bounds Write
oob-write low CVE-2026-35590 GHSA-jmwm-wc68-mhwm Severity Claude low · Security research firm low · Maintainer - Discovered by Claude Mythos Preview REPORT Anthropic's analysis, sealed at approval. Disclosure to the maintainer was performed by Trail of Bits. ANT-2026-JBKARRJ7: Out-of-bounds IFD...
CVE-2026-8723
A flaw was found in the qs library. When the qs.stringify function processes arrays containing null or undefined elements, and is configured with both arrayFormat: 'comma' and encodeValuesOnly: true, it can trigger a TypeError. This error causes the application to crash or return a 500 error,...
BIT-MONGODB-2026-13056 A user with read access can cause a DoS by executing a specifically crafted query to consume a large amount of RAM
Using expressions that generate large arrays it is possible to craft a query that creates very large intermediate objects in memory, causing the server to crash with OOM error...
Unity Linux 20.1050a Security Update: kernel (UTSA-2026-100703)
The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-100703 advisory. In the Linux kernel, the following vulnerability has been resolved: netfilter: ip6thbh: reject oversized option lists struct ip6topts stores at most IP6TOPTSOPTSNR...
Unity Linux 20.1050a / 20.1060a / 20.1070a Security Update: webkit2gtk3 (UTSA-2026-101133)
The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-101133 advisory. Multiple issues were addressed by disabling array allocation sinking. This issue is fixed in Safari 26.1, iOS 26.1 and iPadOS 26.1, macOS Tahoe 26.1, visionOS 26.1...
Unity Linux 20.1050a Security Update: kernel (UTSA-2026-100757)
The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-100757 advisory. In the Linux kernel, the following vulnerability has been resolved: ALSA: usb-audio: Bound MIDI endpoint descriptor scans sndusbmidigetmsinfo validates the internal...
CVE-2026-74792
Scriban before 7.0.0 affected versions = 6.6.0 contains a stack overflow vulnerability in nested array initializer parsing. Deeply nested array initializers recurse through a path ParseArrayInitializer → ParseExpression → ParseArrayInitializer that is not covered by the ExpressionDepthLimit count...
CVE-2026-73062
Scriban versions 3.0.0 through 7.2.0 contain a denial of service vulnerability in the array multiplication operator that allocates memory without enforcing LoopLimit or overflow-safe arithmetic checks. Attackers can supply a large integer multiplier in a template to force multi-gigabyte memory...
