16030 matches found
CVE-2026-68431: Undefined Security Weakness
In the Linux kernel, the following vulnerability has been resolved: ksmbd: validate minimum PDU size for transform requests The receive path applies the minimum SMB2 PDU size check only when ProtocolId is SMB2PROTONUMBER. A packet carrying SMB2TRANSFORMPROTONUM bypasses the check even when the...
PT-2026-71483
Name of the Vulnerable Software and Affected Versions PostgreSQL versions prior to 18.5 PostgreSQL versions prior to 17.11 PostgreSQL versions prior to 16.15 PostgreSQL versions prior to 15.19 PostgreSQL versions prior to 14.24 Description A buffer over-read exists in the ascii SQL function, whic...
PT-2026-71343
Name of the Vulnerable Software and Affected Versions Russh versions prior to 0.62.4 Description An unauthenticated SSH client can trigger a denial of service by sending an SSH MSG KEX ECDH INIT message containing a 32-byte all-zero Q C value. The Curve25519Kex::server dh function in...
The vulnerability of desktop window managers in Windows operating systems allows attackers to increase their privileges.
The vulnerability of desktop window managers in Windows operating systems relates to reading beyond the buffer in memory. Exploiting this vulnerability can allow an attacker to gain increased privileges...
Linux Distros Unpatched Vulnerability : CVE-2026-68339
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Bluetooth: btusb: validate Realtek vendor event length btusbrecveventrealtek reads the event code at data0 and the Realtek subevent code at data2 before decidin...
Linux Distros Unpatched Vulnerability : CVE-2026-68431
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - ksmbd: validate minimum PDU size for transform requests The receive path applies the minimum SMB2 PDU size check only when ProtocolId is SMB2PROTONUMBER. A pack...
ROS-20260812-73-0007
The vulnerability of the XRDP server is related to reading data beyond the allowed range in memory. Exploiting this vulnerability can allow a remote attacker to cause a service failure...
SUSE CVE-2026-68098
In the Linux kernel, the following vulnerability has been resolved: ksmbd: bound DACL dedup walk to copied ACEs setntacldacl can stop copying ACEs before consuming the full input DACL when size accounting overflows. When that happens, numaces reflects only the ACEs that were actually copied into...
SUSE CVE-2026-68099
In the Linux kernel, the following vulnerability has been resolved: ksmbd: restore DACL size on checkaddoverflow to avoid malformed ACL checkaddoverflow unconditionally writes the truncated sum into d even on overflow, per its contract in include/linux/overflow.h. The four checkaddoverflow guards...
SUSE CVE-2026-68340
In the Linux kernel, the following vulnerability has been resolved: hwmon: occ: validate poll response sensor blocks The OCC poll response parser walks a counted list of sensor data blocks. It used the static backing-array capacity as the parse boundary, but a transport response makes only...
SUSE CVE-2026-68348
In the Linux kernel, the following vulnerability has been resolved: ASoC: tas2781: bound firmware description string parsing The TAS2781 firmware parser reads several variable-length description strings with strlen before checking that the string terminator is present inside the firmware blob. A...
CVE-2026-68348
A flaw was found in the Linux kernel's ASoC TAS2781 firmware parser. This vulnerability occurs when the parser reads variable-length description strings without properly checking for a null terminator within the firmware blob. A specially crafted, malformed firmware image could allow an attacker ...
CVE-2026-68819
Buffer over-read in Windows Network File System allows an unauthorized attacker to deny service over a network...
CVE-2026-65794
Buffer over-read in Windows SMB Client allows an unauthorized attacker to disclose information over a network...
CVE-2026-64905
Buffer over-read in Microsoft Office Word allows an unauthorized attacker to execute code locally...
CVE-2026-62793
Buffer over-read in Windows NTFS allows an authorized attacker to disclose information locally...
CVE-2026-62746
Buffer over-read in Windows Win32K allows an authorized attacker to disclose information locally...
CVE-2026-62730
Buffer over-read in Windows Wired AutoConfig Service allows an authorized attacker to disclose information locally...