CVE-2026-55200

CVE-2026-55200 - 重大な libssh2 リモートコード実行脆弱性 libssh2 における重大な認証前メモリ破損脆弱性 概要 フィールド| 詳細 ---|--- CVE| CVE-2026-55200 CVSS| 9.2 重大 タイプ| 境界外書き込み コンポーネント| libssh2 影響を受けるバージョン| = 1.11.1 攻撃ベクトル| ネットワーク 必要な権限| 不要 ユーザー操作| 不要 影響| リモートコード実行 RCE, サービス拒否 DoS 修正バージョン| コミット 97acf3dfda80c91c3a8c9f2372546301d4a1a7a8...

CVE-2026-103628

A flaw was found in the WebGL Web Graphics Library component of chromium-browser. An out-of-bounds write vulnerability allows a remote attacker to execute arbitrary code outside the browser sandbox by tricking a user into visiting a specially crafted HTML page. Successful exploitation enables an...

CVE-2026-17544-PoC

CVE-2026-17544 — PHP bcmath bccomp 領域外書き込み（スタック破壊） CVSS 9.8（緊急） · CWE-787 · GHSA-x692-q9x7-8c3f 概要 ext/bcmath/libbcmath/src/str2num.c（ベンダリングされた libbcmath、PHP 8.4+）の bcstr2num に、 off-by-N の領域外書き込みが存在します。ユーザー指定の scale がオペランドの自動 スケールより小さい場合、小数部が切り詰められ、その後 fractionalend を更新せずに...

Linux Distros Unpatched Vulnerability : CVE-2026-47573

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - NVIDIA NVAPI for Windows contains a vulnerability where an attacker could cause an out-of-bounds write. A successful exploit of this vulnerability might lead to...

Linux Distros Unpatched Vulnerability : CVE-2026-82459

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Integer underflow wrap or wraparound, Out-of-bounds write vulnerability in Apache Thrift C++ 32 bit THeaderTransport. This issue affects Apache Thrift: before...

icicle

MSP430 クラッシュ分析 Icicle によって MSP430 バイナリ内で発見されたクラッシュ。 | ターゲット| 説明 ---|---|--- I03| Goodwatch| dmesgbuffer への書き込み時の誤った比較 I04| Goodwatch| メッセージ長ゼロ I05| Goodwatch| RNGオーバーフロー I06| Goodwatch| OOKキープレスにおける範囲外アクセス I07| Goodwatch| ストップウォッチにおける範囲外アクセス I08| Goodwatch| 曜日表示時の範囲外アクセス I09| Goodwatch|...

CVE_2026_31694

CVE-2026-31694 パッシブスキャナ CVE-2026-31694 （LinuxカーネルのFUSE readdirキャッシュにおける領域外書き込み）向けのパッシブなLinuxホスト評価ツールです。 このスキャナは、実行中のカーネル、FUSEの露出状況、ローカルのパッケージメタデータ、カーネルソースの証跡、実行環境、OSファミリーを評価します。ホストが影響を受ける可能性がある場合、検出されたディストリビューションに合わせた緩和策ガイドを生成します。 作者: Aung Myat Thu w01f 目次 概要 脆弱性概要 セキュリティモデル 機能 要件 インストール 使用方法...

CVE-2026-103628

Out of bounds write in WebGL in Google Chrome prior to 154.0.8037.97 allowed a remote attacker to execute arbitrary code outside the sandbox via a crafted HTML page. Chromium security severity: Critical...

CVE-2026-103628

A critical out-of-bounds write vulnerability exists in the WebGL component of Google Chrome (prior to version 154.0.8037.97 ). This flaw allows a remote attacker to execute arbitrary code outside the browser sandbox by tricking a user into visiting a specially crafted HTML page. Successful exploi...

CVE-2026-103628

Out of bounds write in WebGL in Google Chrome prior to 154.0.8037.97 allowed a remote attacker to execute arbitrary code outside the sandbox via a crafted HTML page. Chromium security severity: Critical...

EUVD-2026-91706

Out of bounds write in WebGL in Google Chrome prior to 154.0.8037.97 allowed a remote attacker to execute arbitrary code outside the sandbox via a crafted HTML page. Chromium security severity: Critical...

CVE-2026-103628

Out of bounds write in WebGL in Google Chrome prior to 154.0.8037.97 allowed a remote attacker to execute arbitrary code outside the sandbox via a crafted HTML page. Chromium security severity: Critical...

CVE-2026-103628

Out of bounds write in WebGL in Google Chrome prior to 154.0.8037.97 allowed a remote attacker to execute arbitrary code outside the sandbox via a crafted HTML page. Chromium security severity: Critical...

pcre2: pcre2: Out-of-bounds write via crafted regular expression

A flaw was found in pcre2. When an application processes attacker-controlled regular expressions using certain Just-In-Time JIT compiler interfaces, an out-of-bounds write with arbitrary data can occur. An attacker could exploit this vulnerability to achieve arbitrary code execution, corrupt...

AZL-105428 CVE-2026-82459 affecting package thrift 0.24.0-1

Integer underflow wrap or wraparound, Out-of-bounds write vulnerability in Apache Thrift C++ 32 bit THeaderTransport. This issue affects Apache Thrift: before 0.25.0. Users are recommended to upgrade to version 0.25.0, which fixes the issue...

CVE-2026-82459

Integer underflow wrap or wraparound, Out-of-bounds write vulnerability in Apache Thrift C++ 32 bit THeaderTransport. This issue affects Apache Thrift: before 0.25.0. Users are recommended to upgrade to version 0.25.0, which fixes the issue...

CVE-2026-82459 Apache Thrift: Integer underflow in C++ THeaderTransport allows an unauthenticated remote peer to terminate a 32-bit process

Integer underflow wrap or wraparound, Out-of-bounds write vulnerability in Apache Thrift C++ 32 bit THeaderTransport. This issue affects Apache Thrift: before 0.25.0. Users are recommended to upgrade to version 0.25.0, which fixes the issue...

CVE-2026-82459

Integer underflow wrap or wraparound, Out-of-bounds write vulnerability in Apache Thrift C++ 32 bit THeaderTransport. This issue affects Apache Thrift: before 0.25.0. Users are recommended to upgrade to version 0.25.0, which fixes the issue...

CVE-2026-82459

Apache Thrift versions before 0.25.0 are vulnerable to a Denial of Service (DoS) condition due to an integer underflow (wrap or wraparound) in the 32-bit C++ THeaderTransport component. A remote, unauthenticated attacker can exploit this by sending specially crafted network traffic, which trigger...

CVE-2026-82459 Apache Thrift: Integer underflow in C++ THeaderTransport allows an unauthenticated remote peer to terminate a 32-bit process

Integer underflow wrap or wraparound, Out-of-bounds write vulnerability in Apache Thrift C++ 32 bit THeaderTransport. This issue affects Apache Thrift: before 0.25.0. Users are recommended to upgrade to version 0.25.0, which fixes the issue...