32306 matches found
PT-2026-71759
The native inference process that Elasticsearch uses to evaluate uploaded machine learning models accepts a model operation that computes a memory address from an offset supplied inside the model, without validating that the offset stays within the bounds of the underlying storage. A user with th...
PT-2026-71462
Integer wraparound in PostgreSQL tsvector and tsquery data type functions allows an unprivileged database user to cause the server to undersize an allocation and write out-of-bounds, via crafted large inputs. This may execute arbitrary code as the operating system user running the database. These...
Autodesk Revit 2026 < 2026.5 / 2027 < 2027.2 Multiple Vulnerabilities (adsk-sa-2026-0011)
The version of Autodesk Revit installed on the remote host is 2026 prior to 2026.5 or 2027 prior to 2027.2. It is, therefore, affected by multiple vulnerabilities: - A maliciously crafted PDF file, when parsed through Autodesk Revit, can force a Use-After-Free vulnerability. A malicious actor can...
CVE-2026-68151 affecting package kernel for versions less than 6.6.150.1-1
CVE-2026-68151 affecting package kernel for versions less than 6.6.150.1-1. An upgraded version of the package is available that resolves this issue...
CVE-2026-63796 affecting package kernel for versions less than 6.6.150.1-1
CVE-2026-63796 affecting package kernel for versions less than 6.6.150.1-1. An upgraded version of the package is available that resolves this issue...
CVE-2026-68206 affecting package kernel for versions less than 6.6.150.1-1
CVE-2026-68206 affecting package kernel for versions less than 6.6.150.1-1. An upgraded version of the package is available that resolves this issue...
CVE-2026-64535 affecting package kernel for versions less than 6.6.150.1-1
CVE-2026-64535 affecting package kernel for versions less than 6.6.150.1-1. An upgraded version of the package is available that resolves this issue...
CVE-2026-64428 affecting package kernel for versions less than 6.6.145.2-1
CVE-2026-64428 affecting package kernel for versions less than 6.6.145.2-1. An upgraded version of the package is available that resolves this issue...
CVE-2026-68187 affecting package kernel for versions less than 6.6.150.1-1
CVE-2026-68187 affecting package kernel for versions less than 6.6.150.1-1. An upgraded version of the package is available that resolves this issue...
CVE-2026-64405 affecting package kernel for versions less than 6.6.145.2-1
CVE-2026-64405 affecting package kernel for versions less than 6.6.145.2-1. An upgraded version of the package is available that resolves this issue...
CVE-2026-19002
A missing bounds check when parsing stored procedure parameter metadata in the MongoDB BI Connector ODBC Driver can result in an out-of-bounds write in the client application process. Triggering this issue requires control over the server the driver connects to, or the ability to respond in its...
CVE-2026-18725
AIONLYREPORT package: iscsi-initiator-utils-6.2.1.11-0.git4b3e853.el10 ------ Summary: Out-of-Bounds Write and Information Disclosure via Unvalidated IPv6 Payload Length: crafted ICMPv6 Echo Requests can cause iscsiuio to trust an inflated ipv6plen larger than the actual received payload, leading...
CVE-2026-19003 MongoDB BI Connector ODBC driver may write outside an allocated buffer when the setup dialog opens a data source with oversized path settings
A data source definition containing an over-length file path setting may cause the MongoDB BI Connector ODBC Driver setup dialog to write outside the bounds of an allocated buffer. The issue stems from an incorrect buffer capacity calculation in the dialog's file and folder selection handling, an...
CVE-2026-19001 MongoDB BI Connector ODBC driver may write outside an allocated buffer when handling oversized catalog object names
The MongoDB BI Connector ODBC Driver may write outside the bounds of a fixed-size buffer when an application supplies an unusually long catalog, schema, or object name to a metadata retrieval function. This may result in memory corruption within the calling application's process, leading to...
CVE-2026-19002 Crafted database metadata may cause memory corruption in MongoDB BI Connector ODBC Driver
A missing bounds check when parsing stored procedure parameter metadata in the MongoDB BI Connector ODBC Driver can result in an out-of-bounds write in the client application process. Triggering this issue requires control over the server the driver connects to, or the ability to respond in its...
EUVD-2026-57602
A missing bounds check when parsing stored procedure parameter metadata in the MongoDB BI Connector ODBC Driver can result in an out-of-bounds write in the client application process. Triggering this issue requires control over the server the driver connects to, or the ability to respond in its...
CVE-2026-19002
The CVE-2026-19002 entry affects the MongoDB BI Connector ODBC Driver. A missing bounds check during parsing of stored procedure parameter metadata can cause an out-of-bounds write in the client process, leading to memory corruption and potential abnormal termination or, under certain conditions,...
CVE-2026-19002 Crafted database metadata may cause memory corruption in MongoDB BI Connector ODBC Driver
A missing bounds check when parsing stored procedure parameter metadata in the MongoDB BI Connector ODBC Driver can result in an out-of-bounds write in the client application process. Triggering this issue requires control over the server the driver connects to, or the ability to respond in its...
